## Code Style

- Uses external Eclipse formatter configuration from CodeLibs
- Apache License 2.0 headers on all source files (updated to 2025)
- Comprehensive Javadoc documentation required
- Code coverage reporting with JaCoCo

## Test Coverage

The project includes comprehensive unit tests for all core components:
- `CurlTest`: Tests for static factory methods and basic HTTP operations

  protected Table<String, Integer, C> table;

  /**
   * Creates a table with the specified data.
   *
   * @param data the table data, repeating the sequence row key, column key, value once per mapping
   * @throws IllegalArgumentException if the size of {@code data} isn't a multiple of 3
   * @throws ClassCastException if a data element has the wrong type
   */

  protected Table<String, Integer, C> table;

  /**
   * Creates a table with the specified data.
   *
   * @param data the table data, repeating the sequence row key, column key, value once per mapping
   * @throws IllegalArgumentException if the size of {@code data} isn't a multiple of 3
   * @throws ClassCastException if a data element has the wrong type
   */

    /**
     * Validates that a given path is safe and does not attempt path traversal attacks.
     * <p>
     * This method checks if the resolved absolute path starts with the allowed base directory,
     * preventing access to files outside the intended directory through path traversal
     * techniques like "../../../etc/passwd".
     * </p>
     * <p>
     * Example usage:
     * </p>
     * <pre>

    val call: RealCall
      get() = this@RealCall

    /**
     * Attempt to enqueue this async call on [executorService]. This will attempt to clean up
     * if the executor has been shut down by reporting the call as failed.
     */
    fun executeOn(executorService: ExecutorService) {
      client.dispatcher.assertLockNotHeld()

      var success = false
      try {
        executorService.execute(this)

        public Integer hotThread;

        /**
         * Default constructor for Options.
         * Protected to allow subclassing while preventing direct instantiation.
         */
        protected Options() {
            // nothing
        }

        /**
         * Parses the web configuration IDs string into a list.
         *

        override fun requestHeadersEnd(
          call: Call,
          request: Request,
        ) {
          // Wait for the server to send the duplex response before acting on the 301 response
          // and resetting the stream.
          duplexResponseSent.await()
        }
      }
    client =
      client
        .newBuilder()
        .eventListener(eventRecorder.eventListener + requestHeadersEndListener)

-...

- Fixed the reporting of elapsed times during evaluation of `ValidatingAdmissionPolicy` decisions and annotations. The apiserver_validating_admission_policy_check_duration metrics will now show elapsed times and no longer be zero. ([#128463](https://github.com/kubern...

- Added metrics for the nftables kube-proxy mode rather than it reporting
  metrics with "iptables" in their names. ([#124557](https://github.com/kubernetes/kubernetes/pull/124557), [@danwinship](https://github.com/danwinship)) [SIG Network and Windows]