return as, false
		}
		as[c/32] |= 1 << (c % 32)
	}
	return as, true
}

// contains reports whether c is inside the set.
func (as *asciiSet) contains(c byte) bool {
	return (as[c/32] & (1 << (c % 32))) != 0
}

// containsRune is a simplified version of strings.ContainsRune
// to avoid importing the strings package.
// We avoid bytes.ContainsRune to avoid allocating a temporary copy of s.

    connection.
 *  Fix: Use `X509TrustManagerExtensions` on Android 17+.
 *  Fix: Unblock waiting dispatchers on MockWebServer shutdown.


## Version 3.2.0

_2016-02-25_

 *  Fix: Change the certificate pinner to always build full chains. This
    prevents a potential crash when using certificate pinning with the Google
    Play Services security provider.

to execute arbitrary commands on the host.

**Affected Versions**:
  - kubelet <= v1.29.12
  - kubelet <= v1.30.8
  - kubelet <= v1.31.4
  - kubelet = v1.32.0

**Fixed Versions**:
  - kubelet 1.29.13
  - kubelet 1.30.9
  - kubelet 1.31.5
  - kubelet 1.32.1

This vulnerability was reported by Peled, Tomer and mitigated by Aravindh Puthiyaprambil.

**Affected Versions**:
  - kube-apiserver v1.31.0 - v1.31.11
  - kube-apiserver v1.32.0 - v1.32.7
  - kube-apiserver v1.33.0 - v1.33.3

**Fixed Versions**:
  - kube-apiserver v1.31.12
  - kube-apiserver v1.32.8
  - kube-apiserver v1.33.4

This vulnerability was reported by Paul Viossat.

            The version requirement of the dependency, e.g. {@code 3.2.1}. The actual version will be resolved based on the usage context.
            Version requirement can also be specified as a range of versions, e.g. {@code [3.2.0,)}. This is discouraged as it may break <i>predictability</i> of resolved version.
            See <a href="https://s.apache.org/dependency-version">dependency version requirement documentation</a>

352(SP) MOVQ R11, 360(SP) MOVQ R12, 368(SP) MOVQ R13, 376(SP) CALL p256SqrInternal(SB) MOVQ R10, 416(SP) MOVQ R11, 424(SP) MOVQ R12, 432(SP) MOVQ R13, 440(SP) MOVQ 320(SP), R10 MOVQ 328(SP), R11 MOVQ 336(SP), R12 MOVQ 344(SP), R13 CALL p256SqrInternal(SB) MOVQ R10, 384(SP) MOVQ R11, 392(SP) MOVQ R12, 400(SP) MOVQ R13, 408(SP) MOVQ 320(SP), R14 MOVQ 328(SP), R15 MOVQ 336(SP), DI MOVQ 344(SP), SI CALL p256MulInternal(SB) MOVQ R10, 448(SP) MOVQ R11, 456(SP) MOVQ R12, 464(SP) MOVQ R13, 472(SP) MOVQ 32(SP),...

Add an upper bound for `protobuf` in `setup.py` since `protobuf` after version 3.20 is currently incompatible with TensorFlow. See https://github.com/tensorflow/tensorflow/issues/53234, https://github.com/protocolbuffers/protobuf/issues/9954 and https://github.com/tensorflow/tensorflow/issues/56077.

# Release 2.8.2

**Affected Versions**:
  - kubelet kubelet v1.30.0 to v1.30.9
  - kubelet v1.31.0 to v1.31.5
  - kubelet v1.32.0 to v1.32.1

**Fixed Versions**:
  - kubelet 1.29.14
  - kubelet 1.30.10
  - kubelet 1.31.6
  - kubelet 1.32.2

This vulnerability was reported and fixed by Tim Allclair @tallclair from Google.

pkg syscall (darwin-386), const SYS_KQUEUE = 362
pkg syscall (darwin-386), const SYS_LCHOWN = 364
pkg syscall (darwin-386), const SYS_LINK = 9
pkg syscall (darwin-386), const SYS_LIO_LISTIO = 320
pkg syscall (darwin-386), const SYS_LISTEN = 106
pkg syscall (darwin-386), const SYS_LISTXATTR = 240
pkg syscall (darwin-386), const SYS_LSEEK = 199
pkg syscall (darwin-386), const SYS_LSTAT = 190

pkg syscall (darwin-arm64), const SYS_LEDGER ideal-int
pkg syscall (darwin-arm64), const SYS_LINK = 9
pkg syscall (darwin-arm64), const SYS_LINK ideal-int
pkg syscall (darwin-arm64), const SYS_LIO_LISTIO = 320
pkg syscall (darwin-arm64), const SYS_LIO_LISTIO ideal-int
pkg syscall (darwin-arm64), const SYS_LISTEN = 106
pkg syscall (darwin-arm64), const SYS_LISTEN ideal-int
pkg syscall (darwin-arm64), const SYS_LISTXATTR = 240