Tom Tresansky <******@****.***> 1695913602 -0400

# easily import the generated PRs into our internal repo.
#  - package-ecosystem: "maven"
#    directory: "/"
#    schedule:
#      interval: "weekly"
#    groups:
#      dependencies:
#        applies-to: version-updates
#        patterns:
#          - "*"
#  - package-ecosystem: "maven"
#    directory: "/android"
#    schedule:
#      interval: "weekly"
#    groups:

version: 2
updates:
  # GitHub Actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
    commit-message:
      prefix: ⬆
  # Python
  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "monthly"
    commit-message:

#  See the License for the specific language governing permissions and
#  limitations under the License.
#
version: 2
updates:

  - package-ecosystem: maven
    directory: "/"
    schedule:
      interval: daily

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:

[[sec:java_consistency]]
=== Declaring consistent resolution in the Java ecosystem

The `runtimeClasspath` and `compileClasspath` example above are common in the Java ecosystem.
However, it's often not enough to declare consistency between those two configurations only.
For example, you most likely want the _test runtime classpath_ to be consistent with the

	github.com/golang/protobuf v1.5.4 // indirect
	github.com/google/btree v1.0.1 // indirect
	github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 // indirect
	github.com/grpc-ecosystem/grpc-gateway v1.16.0 // indirect
	github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 // indirect
	github.com/imdario/mergo v0.3.6 // indirect
	github.com/inconshreveable/mousetrap v1.1.0 // indirect

= vendor/github.com/grpc-ecosystem/grpc-gateway/v2 licensed under: =

Copyright (c) 2015, Gengo, Inc.
All rights reserved.

Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:

    * Redistributions of source code must retain the above copyright notice,
      this list of conditions and the following disclaimer.

# Configures Depdendabot to PR go security updates only

version: 2
updates:
  # Go configuration for master branch
  - package-ecosystem: "gomod"
    directory: "/"
    schedule:
      interval: "daily"
    # Limit number of open PRs to 0 so that we only get security updates
    # See https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates
    open-pull-requests-limit: 0
    labels:

// See the License for the specific language governing permissions and
// limitations under the License.

package security

import (
	"time"

	retry "github.com/grpc-ecosystem/go-grpc-middleware/retry"
	"google.golang.org/grpc"
	"google.golang.org/grpc/codes"

	"istio.io/istio/pkg/log"
	"istio.io/istio/security/pkg/monitoring"
)

var caLog = log.RegisterScope("ca", "ca client")

 * <p>
 * <code>ToolchainManagement</code> is extended by plugins to support different ecosystems.
 * <p>
 * One option available at present is using the <code>jvm-toolchain-management</code> plugin, which
 * adds a <code>jvm</code> block to it, allowing for the configuration of toolchains used in the
 * JVM ecosystem.
 *
 * @since 7.6
 */
@Incubating
public interface ToolchainManagement extends ExtensionAware {