<description>
            How to handle downloading of releases from this repository
          </description>
          <association>
            <type>RepositoryPolicy</type>
          </association>
        </field>
        <field>
          <name>snapshots</name>
          <version>1.0.0+</version>
          <description>
            How to handle downloading of snapshots from this repository

    return true
  }

  /**
   * Figures out the HTTP request to make in response to receiving [userResponse]. This will
   * either add authentication headers, follow redirects or handle a client request timeout. If a
   * follow-up is either unnecessary or not applicable, this returns null.
   */
  @Throws(IOException::class)
  private fun followUpRequest(
    userResponse: Response,

        // Test error classification using public API
        assertNotNull(errorHandler, "Error handler should handle network errors");

        // Test fallback logic which is public
        assertTrue(errorHandler.shouldFallbackToTcp(hardwareError), "Hardware errors should suggest TCP fallback");

```java
/** This interceptor compresses the HTTP request body. Many webservers can't handle this! */
final class GzipRequestInterceptor implements Interceptor {
  @Override public Response intercept(Interceptor.Chain chain) throws IOException {
    Request originalRequest = chain.request();

        rpc.policy_handle mockHandle = mock(rpc.policy_handle.class);
        lsarpc.LsarClose lsarClose = new lsarpc.LsarClose(mockHandle);

        assertEquals(mockHandle, lsarClose.handle);
        assertEquals(0x00, lsarClose.getOpnum());
    }

    @Test
    void testLsarCloseEncodeIn() throws NdrException {
        rpc.policy_handle mockHandle = mock(rpc.policy_handle.class);

            assertTrue(lmhostsFile.setReadable(false));
        }

        when(mockConfig.getLmHostsFileName()).thenReturn(lmhostsFile.getAbsolutePath());

        if (!isWindows) {
            // Should handle IOException gracefully and return null
            NbtAddress result = lmhosts.getByName("ANYHOST", mockContext);
            assertNull(result);
        }

        // Cleanup
        lmhostsFile.setReadable(true);

        
        // Should not reach here
        return channels.iterator().next();
    }
    
    private ChannelInfo selectWithAffinity(SMBMessage message, Collection<ChannelInfo> channels) {
        // Use file handle or tree ID for affinity
        long affinityKey = 0;
        
        if (message instanceof Smb2ReadRequest) {
            affinityKey = Arrays.hashCode(((Smb2ReadRequest)message).getFileId());

    /**
     * Following the contract of {@link AbstractQueuedSynchronizer} we create a private subclass to
     * hold the synchronizer. This synchronizer is used to implement the blocking and waiting calls
     * as well as to handle state changes in a thread-safe manner. The current state of the future
     * is held in the Sync state, and the lock is released whenever the state changes to {@link
     * #COMPLETED}, {@link #CANCELLED}, or {@link #INTERRUPTED}

        assertEquals(0x00, dst[13]);

        // Check security information
        assertEquals(0x12345678, SMBUtil.readInt4(dst, 14));
    }

    @Test
    @DisplayName("Test with negative FID value (should handle as unsigned)")
    void testNegativeFidValue() {
        int fid = -1; // Will be treated as 0xFFFF in unsigned 16-bit
        querySecurityDesc = new NtTransQuerySecurityDesc(mockConfig, fid, OWNER_SECURITY_INFORMATION);

X25519MLKEM768 by default. The default can be reverted using the
[`tlsmlkem` setting](/pkg/crypto/tls/#Config.CurvePreferences).
This can be useful when dealing with buggy TLS servers that do not handle large records correctly,
causing a timeout during the handshake (see [TLS post-quantum TL;DR fail](https://tldr.fail/)).
Go 1.24 also removed X25519Kyber768Draft00 and the Go 1.23 `tlskyber` setting.