@DisplayName("write(boolean/byte): writes single byte")
    void write_oneByteVariants() throws Exception {
        SmbRandomAccessFile raf = spy(newInstance("rw", false, true, false));
        // Intercept the 3-arg write to validate len
        doNothing().when(raf).write(any(byte[].class), anyInt(), anyInt());
        raf.writeBoolean(true);
        raf.writeByte(0x7F);
        ArgumentCaptor<Integer> lenCap = ArgumentCaptor.forClass(Integer.class);

You can add the changes to any place in the file, e.g. at the top.

3. Make sure the file with accepted changes is sorted.\
Use the `./gradlew :architecture-test:sortAcceptedApiChanges` task to sort the file.

4. Validate your changes before committing.\
Run the `./gradlew sanityCheck` task again to make sure there are no more errors.

#### Filtering changes by severity

        // Then
        assertEquals(dataOffsetValue + dataLength - bodyStart, bytesRead);
        assertEquals(dataLength, response.getDataLength());
    }

    @Test
    @DisplayName("Should validate data fits within buffer bounds")
    void testReadBytesWireFormatDataBoundsValidation() throws Exception {
        // Given
        byte[] smallBuffer = new byte[100];
        int bodyStart = 0;

     * Upload a file.
     * @param form The upload form.
     * @return The HTML response.
     */
    @Execute
    @Secured({ ROLE })
    public HtmlResponse upload(final UploadForm form) {
        validate(form, messages -> {}, this::asListHtml);
        verifyToken(this::asListHtml);
        final String fileName = form.bulkFile.getFileName();

        if (logger.isDebugEnabled()) {

github.com/envoyproxy/go-control-plane/ratelimit v0.1.0/go.mod h1:Wk+tMFAFbCXaJPzVVHnPgRKdUdwW/KdbRt94AzgRee4=
github.com/envoyproxy/protoc-gen-validate v1.2.1 h1:DEo3O99U8j4hBFwbJfrz9VtgcDfUKS7KJ7spH3d86P8=
github.com/envoyproxy/protoc-gen-validate v1.2.1/go.mod h1:d/C80l/jxXLdfEIhX1W2TmLfsJ31lvEjwamM4DxlWXU=
github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f h1:Y/CXytFA4m6baUTXGLOoWe4PQhGxaX0KpnayAqC48p4=

      DIGIT_MATCHER.or(LETTER_MATCHER).or(DASH_MATCHER);

  /**
   * Helper method for {@link #validateSyntax(List)}. Validates that one part of a domain name is
   * valid.
   *
   * @param part The domain name part to be validated
   * @param isFinalPart Is this the final (rightmost) domain part?
   * @return Whether the part is valid
   */

        // phase 1
        DefaultModelBuildingResult result = new DefaultModelBuildingResult();

        DefaultModelProblemCollector problems = new DefaultModelProblemCollector(result);

        // read and validate raw model
        Model inputModel = request.getRawModel();
        if (inputModel == null) {
            inputModel = readModel(request.getModelSource(), request.getPomFile(), request, problems);
        }

    /**
     * If true, the parser will ignore ignorable whitespace in element content.
     */
    protected boolean ignoringElementContentWhitespace;

    /**
     * If true, the parser will validate the document against its grammar.
     */
    protected boolean validating;

    /**
     * If true, the parser will be XInclude aware.
     */
    protected boolean includeAware;

    /**

  validation:
    name: "Validation"
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: gradle/actions/wrapper-validation@v5
      - name: Validate Renovate
        uses: rinchsan/renovate-config-validator@v0.2.0
        with:
          pattern: '.github/renovate.json'

  checkjdk11:
    permissions:
      checks: write # for mikepenz/action-junit-report
    runs-on: ubuntu-latest

## Verify the `username` and data shape { #verify-the-username-and-data-shape }

We verify that we get a `username`, and extract the scopes.

And then we validate that data with the Pydantic model (catching the `ValidationError` exception), and if we get an error reading the JWT token or validating the data with Pydantic, we raise the `HTTPException` we created before.