Found new managed modules references

modules/sync/cncf/xds/cas/446b8fd9ebbdd32455e77f6485d04731352f4a58d8e908a60093095f232531d3fcd091f75ad0d93841af38db5675774c68e2ab2a86e61170694a1e3b50d2d8ac

@@ -0,0 +1,23 @@
+// THIS FILE IS DEPRECATED
+// Users should instead use the corresponding proto in the xds tree.
+// No new changes will be accepted here.
+
+syntax = "proto3";
+
+package udpa.annotations;
+
+import "google/protobuf/descriptor.proto";
+
+option go_package = "github.com/cncf/xds/go/udpa/annotations";
+
+extend google.protobuf.MessageOptions {
+  // Magic number derived from 0x78 ('x') 0x44 ('D') 0x53 ('S')
+  VersioningAnnotation versioning = 7881811;
+}
+
+message VersioningAnnotation {
+  // Track the previous message type. E.g. this message might be
+  // udpa.foo.v3alpha.Foo and it was previously udpa.bar.v2.Bar. This
+  // information is consumed by UDPA via proto descriptors.
+  string previous_message_type = 1;
+}

modules/sync/cncf/xds/cas/4764a28a19a856ef22e114f47d6ac7660bd039231a1e8bd9710116ab31470f23634f02b1c1e223b2dd0704c017a9c2302e3f58fa37fa04ff102ac4a684495f5d

@@ -0,0 +1,6 @@
+version: v1
+name: buf.build/cncf/xds
+deps:
+  - buf.build/envoyproxy/protoc-gen-validate
+  - buf.build/google/cel-spec
+  - buf.build/googleapis/googleapis

modules/sync/cncf/xds/cas/5a93846f1767fcaa5922088f949e54eb59f5082cc4ac965c630b7d48586bd09ec50103c7b02646acb13f759a8260ec28e712bd5414352423b94ec50911e92432

@@ -0,0 +1,55 @@
+// THIS FILE IS DEPRECATED
+// Users should instead use the corresponding proto in the xds tree.
+// No new changes will be accepted here.
+
+syntax = "proto3";
+
+package udpa.annotations;
+
+import "google/protobuf/descriptor.proto";
+
+option go_package = "github.com/cncf/xds/go/udpa/annotations";
+
+// Magic number in this file derived from top 28bit of SHA256 digest of
+// "udpa.annotation.migrate".
+
+extend google.protobuf.MessageOptions {
+  MigrateAnnotation message_migrate = 171962766;
+}
+
+extend google.protobuf.FieldOptions {
+  FieldMigrateAnnotation field_migrate = 171962766;
+}
+
+extend google.protobuf.EnumOptions {
+  MigrateAnnotation enum_migrate = 171962766;
+}
+
+extend google.protobuf.EnumValueOptions {
+  MigrateAnnotation enum_value_migrate = 171962766;
+}
+
+extend google.protobuf.FileOptions {
+  FileMigrateAnnotation file_migrate = 171962766;
+}
+
+message MigrateAnnotation {
+  // Rename the message/enum/enum value in next version.
+  string rename = 1;
+}
+
+message FieldMigrateAnnotation {
+  // Rename the field in next version.
+  string rename = 1;
+
+  // Add the field to a named oneof in next version. If this already exists, the
+  // field will join its siblings under the oneof, otherwise a new oneof will be
+  // created with the given name.
+  string oneof_promotion = 2;
+}
+
+message FileMigrateAnnotation {
+  // Move all types in the file to another package, this implies changing proto
+  // file path.
+  string move_to_package = 2;
+}

modules/sync/cncf/xds/cas/61ce1191a1f3edefb663ec350b5b787c38ea928de2dfee737d5cbda1e4af0ca58398d79b349c4b290d6711395958e0b9d7ac264d272eba716f84bd5ea8f1c549

@@ -0,0 +1,40 @@
+// THIS FILE IS DEPRECATED
+// Users should instead use the corresponding proto in the xds tree.
+// No new changes will be accepted here.
+
+syntax = "proto3";
+
+package udpa.annotations;
+
+import "google/protobuf/descriptor.proto";
+
+option go_package = "github.com/cncf/xds/go/udpa/annotations";
+
+// Magic number in this file derived from top 28bit of SHA256 digest of
+// "udpa.annotation.status".
+extend google.protobuf.FileOptions {
+  StatusAnnotation file_status = 222707719;
+}
+
+enum PackageVersionStatus {
+  // Unknown package version status.
+  UNKNOWN = 0;
+
+  // This version of the package is frozen.
+  FROZEN = 1;
+
+  // This version of the package is the active development version.
+  ACTIVE = 2;
+
+  // This version of the package is the candidate for the next major version. It
+  // is typically machine generated from the active development version.
+  NEXT_MAJOR_VERSION_CANDIDATE = 3;
+}
+
+message StatusAnnotation {
+  // The entity is work-in-progress and subject to breaking changes.
+  bool work_in_progress = 1;
+
+  // The entity belongs to a package with the given version status.
+  PackageVersionStatus package_version_status = 2;
+}

modules/sync/cncf/xds/cas/6a2e57f35b098c4188d5e1c0b90577e5b75573cbd96bffb1d0969ec7d0e70467c158194e8a4b5e1629d94ac5ec339c6eb8bf7055d6ee21d0c06f4ab7878dc416

@@ -0,0 +1,20 @@
+// THIS FILE IS DEPRECATED
+// Users should instead use the corresponding proto in the xds tree.
+// No new changes will be accepted here.
+
+syntax = "proto3";
+
+package udpa.annotations;
+
+import "google/protobuf/descriptor.proto";
+
+option go_package = "github.com/cncf/xds/go/udpa/annotations";
+
+extend google.protobuf.FieldOptions {
+  // Magic number is the 28 most significant bits in the sha256sum of "udpa.annotations.sensitive".
+  // When set to true, `sensitive` indicates that this field contains sensitive data, such as
+  // personally identifiable information, passwords, or private keys, and should be redacted for
+  // display by tools aware of this annotation. Note that that this has no effect on standard
+  // Protobuf functions such as `TextFormat::PrintToString`.
+  bool sensitive = 76569463;
+}

modules/sync/cncf/xds/cas/6afc460c8768bde69fab71c437c57525140db657981fc71f4abb91de89e439aebb0e7f90ad8e13b7c1f3922cbd06b7eeb351ab04355ee43d971f5e94c31ae621

@@ -0,0 +1,70 @@
+syntax = "proto3";
+
+package xds.type.v3;
+
+import "google/api/expr/v1alpha1/checked.proto";
+import "google/api/expr/v1alpha1/syntax.proto";
+import "cel/expr/checked.proto";
+import "cel/expr/syntax.proto";
+import "google/protobuf/wrappers.proto";
+
+import "xds/annotations/v3/status.proto";
+
+import "validate/validate.proto";
+
+option java_package = "com.github.xds.type.v3";
+option java_outer_classname = "CelProto";
+option java_multiple_files = true;
+option go_package = "github.com/cncf/xds/go/xds/type/v3";
+
+option (xds.annotations.v3.file_status).work_in_progress = true;
+
+// [#protodoc-title: Common Expression Language (CEL)]
+
+// Either parsed or checked representation of the `Common Expression Language
+// <https://github.com/google/cel-spec>`_ (CEL) program.
+message CelExpression {
+  oneof expr_specifier {
+    // Parsed expression in abstract syntax tree (AST) form.
+    //
+    // Deprecated -- use ``cel_expr_parsed`` field instead.
+    // If ``cel_expr_parsed`` or ``cel_expr_checked`` is set, this field is not used.
+    google.api.expr.v1alpha1.ParsedExpr parsed_expr = 1  [deprecated = true];
+
+    // Parsed expression in abstract syntax tree (AST) form that has been successfully type checked.
+    //
+    // Deprecated -- use ``cel_expr_checked`` field instead.
+    // If ``cel_expr_parsed`` or ``cel_expr_checked`` is set, this field is not used.
+    google.api.expr.v1alpha1.CheckedExpr checked_expr = 2  [deprecated = true];
+  }
+
+  // Parsed expression in abstract syntax tree (AST) form.
+  //
+  // If ``cel_expr_checked`` is set, this field is not used.
+  cel.expr.ParsedExpr cel_expr_parsed = 3;
+
+  // Parsed expression in abstract syntax tree (AST) form that has been successfully type checked.
+  //
+  // If set, takes precedence over ``cel_expr_parsed``.
+  cel.expr.CheckedExpr cel_expr_checked = 4;
+}
+
+// Extracts a string by evaluating a `Common Expression Language
+// <https://github.com/google/cel-spec>`_ (CEL) expression against the standardized set of
+// :ref:`HTTP attributes <arch_overview_attributes>`.
+//
+// .. attention::
+//
+//   Besides CEL evaluation raising an error explicitly, CEL program returning a type other than
+//   the ``string``, or not returning anything, are considered an error as well.
+//
+// [#comment:TODO(sergiitk): When implemented, add the extension tag.]
+message CelExtractString {
+  // The CEL expression used to extract a string from the CEL environment.
+  // the "subject string") that should be replaced.
+  CelExpression expr_extract = 1 [(validate.rules).message = {required: true}];
+
+  // If CEL expression evaluates to an error, this value is be returned to the caller.
+  // If not set, the error is propagated to the caller.
+  google.protobuf.StringValue default_value = 2;
+}

modules/sync/cncf/xds/cas/882b8d68892f82f06bd6d042533d1a073dbf7c21207f85bae383ea2e2679a3f2a522cc05319ff59443e7a359469c559d677b548d8f8b4e016e0d41054e96d6b6

@@ -0,0 +1,37 @@
+shake256:faedd41bb62749fa9e3e87f183fe58065f0d4ccf60e4d347727c04544ccdd08a43f1703d8f2cd31613fe1a767d63c33b280f34df99eda6ad2b25dfec4c4ead81  LICENSE
+shake256:54a74b86440e2ccf26dbb1437b144124baf59636e0bfed58d4ffbad4a48721adbb76ea974c4c5928ff87d04adefb468a719bcf040ffd789b939bc0f15620ebca  buf.md
+shake256:4764a28a19a856ef22e114f47d6ac7660bd039231a1e8bd9710116ab31470f23634f02b1c1e223b2dd0704c017a9c2302e3f58fa37fa04ff102ac4a684495f5d  buf.yaml
+shake256:5a93846f1767fcaa5922088f949e54eb59f5082cc4ac965c630b7d48586bd09ec50103c7b02646acb13f759a8260ec28e712bd5414352423b94ec50911e92432  udpa/annotations/migrate.proto
+shake256:d2ee1ebb8a9b0f21a49998aaaa44783d9c9b886a869bdd5965a5d72e66569bb158010f6dd9c10946a9ac8b415caf395f0c9af340883ae99690b33e024cf4cd2c  udpa/annotations/security.proto
+shake256:6a2e57f35b098c4188d5e1c0b90577e5b75573cbd96bffb1d0969ec7d0e70467c158194e8a4b5e1629d94ac5ec339c6eb8bf7055d6ee21d0c06f4ab7878dc416  udpa/annotations/sensitive.proto
+shake256:61ce1191a1f3edefb663ec350b5b787c38ea928de2dfee737d5cbda1e4af0ca58398d79b349c4b290d6711395958e0b9d7ac264d272eba716f84bd5ea8f1c549  udpa/annotations/status.proto
+shake256:446b8fd9ebbdd32455e77f6485d04731352f4a58d8e908a60093095f232531d3fcd091f75ad0d93841af38db5675774c68e2ab2a86e61170694a1e3b50d2d8ac  udpa/annotations/versioning.proto
+shake256:8934fc6acefd282ce6b12226651db6732ca6a984bd2dcdae656f70f15a9e21c03d9df06eb49ac5cca51938d6a5153a9993a3407ef299877f954b688496329a52  udpa/data/orca/v1/orca_load_report.proto
+shake256:f16a1450360957465ace62fc2c51fa152e93448456fbe0431aa2713c762e97c793c2083311f59598816c38da4bcbdaba2bf8e28a4d618ad3848844440f7d40f3  udpa/service/orca/v1/orca.proto
+shake256:15c502c5261e59f55ce68f92b260d0f580d97bbd04b0786bf9421867dd653cf2244a39de1ac9ea24a5f01a21c66aea82fb77f58c6b3937f9e29dee21b44336f8  udpa/type/v1/typed_struct.proto
+shake256:036f518738e176ec535dfee66abf9f924a97b4f80273881cfec7ea51e5aaf4503516b4e24fcf7af5ce7bfe9d27ebdb72bc34ee143091c635e53a9938841c0859  xds/annotations/v3/migrate.proto
+shake256:0fa094c70bda96cd0644fd700fedef67eaca743d453ee742ce816b79efc91bea1727941170670217817d5ec08721ca33ee3df4da2e6f007e804ca1883bdcaf7c  xds/annotations/v3/security.proto
+shake256:1d302ddffa2edd2e7e2068d82f35d5345d1d00cab78e57ab73d07c24db93056c83db0b4cbd2e3111dc3566e070bdaee5b58fa2172f4407137b48f516eaeead1a  xds/annotations/v3/sensitive.proto
+shake256:7e459ece42e9e08753392a4b41117ba267663d1d0a610a7e0f58de4d419a452430745aa881fadb57878efad77c42d1ef2378b44ed443c459ec807dc69100a660  xds/annotations/v3/status.proto
+shake256:ce5030083c4fbbe1577dee9148c114d34fa11d2a0f276c8294582a7cbda15e20cae10488dcf30fc5ca83b96d0ade30e1b2d55812fcc23e03a61b155eb18aae94  xds/annotations/v3/versioning.proto
+shake256:578659a7b46b39eecd6446c376b0cd3553f25c414f68e5e44a6fdaeba8e6b1a8a3f4b2ec9aaa39301d3ac586a048638b2d6f813fbee2c4fe4aba38aa2df9de6e  xds/core/v3/authority.proto
+shake256:7397ecceb1bbef955d83da68cb948b6e85ae1ec0800060e53d6f3b31a88a7380a769e589cb938569f47885b008187ca582eb9a9f5cb5241ffe39ed2b7b931ebd  xds/core/v3/cidr.proto
+shake256:5de284016b1d9d4e2504083e879efadfca3c9d1cc010fde6e1c6f228b7a37581e072db79030842fb8fef0eb3183bb6b2427d55158322dce4389667c5cfefe211  xds/core/v3/collection_entry.proto
+shake256:736985929a9b0c74b3025539c8bea80164c92e300d9075d3731308602ea298c51fd06c118cf9b3b7810b5a14cb00bbd8fecca4b2e16f2619dd9d9fdf845c2034  xds/core/v3/context_params.proto
+shake256:6741fbc4f47dd6282626fccc478bbef534bdd1d61f3df6eeb4a5b10f5491bf375d4158fb31b10253b77a274e202afe3504ccb2728d1262db4266bc8c308e99b4  xds/core/v3/extension.proto
+shake256:9a953215e9834a84ef0f26d9fa22f8ba91f4d175e8a8f17757f6e8f588430ea2d0b48e36b8f0024788cc9ba57982ce87218a44b057d2f741c6a36bec753e75a2  xds/core/v3/resource.proto
+shake256:7648414b434c7d4fbbc785f360190b085ad1b6d8fb7f968ff338fc26e95420552b6e33a762f95b948018f3c0875afc7fe374131ef90402f1c13527ec63caeb08  xds/core/v3/resource_locator.proto
+shake256:7a1f962bbd895d64550b1fada201788465b5c9cd90830cf51725faa5e7c91cf95d9957406530765ae9e00010d9378dc8d49c095ee1ee4cc857b16b1ae6d381e6  xds/core/v3/resource_name.proto
+shake256:7b832569a0bf52cba9a9a8b2c8c212db14d8dcbbecbcd9d0bc5c7e777c3a2929e2e1418bd09fb6edef914295bbbb78b575de1b236c156e2a283e87bcf1eaaf13  xds/data/orca/v3/orca_load_report.proto
+shake256:e98ef5506b86f2c690ceda5a1f97bec262cebfd685774ece7d5f32cec9b0c4d1a42f162311849af3531996ba025b470c49e7470a9f99264a75e6ed8c0d53b948  xds/service/orca/v3/orca.proto
+shake256:fd56a3503d45fc425ec87826e550e9ad0fdaf179903c5a4c60afbdf2c67cfe02ea35f81c3e6e2bb9f807164a4d4c0f38326aba2f73ad7a44cd0b1727c9305fb8  xds/type/matcher/v3/cel.proto
+shake256:b4aa74b373f90bda5dc1f9e4a22c791201b8f99c00d95d8ce86d8222d829d40b3f0d8b1fa58748a676e479f4d8a545a12fd56175975ca1b5581a1c82446ffbdf  xds/type/matcher/v3/domain.proto
+shake256:3881bf58ce6151c1374aa97c4922f1050c280975c50c04b25aed1c29bc41207959af5f3c4def758449d86da251d2aaf2550c1d32d9a40136ef6d665d0b265077  xds/type/matcher/v3/http_inputs.proto
+shake256:98e0862030106a5aff45f319a63f18eb9973823e4f37d166981abfb486e23ff2e642e03a7ba0d0ce56bb6c86aad6b7d2ec7c1e5f82b24cf3ed26675f6a3408e0  xds/type/matcher/v3/ip.proto
+shake256:8eb32cb8804a13e07fb7872ec65ff0b47b966c1d59c68c74555f7bda05f9f393d26dfe8cd0ff4d50f3192da4f809d097444cccc91fab844e1389c75671a49d38  xds/type/matcher/v3/matcher.proto
+shake256:9fda2fe832610c954af3cebf5548b7c967c4bf8eba296dff364c2d2d1ad39255593eca4dc1016e2d27ee34eec09ad95e32476e0f3f7bb7866874692e3bbab909  xds/type/matcher/v3/range.proto
+shake256:25efb5acaded259961653fca6da9bd52e9566f0866a758d69d61a2b6634c3c591882add5eba142001bd9f4ead9482294812e61967018ed11635539a72ebf65e4  xds/type/matcher/v3/regex.proto
+shake256:bcd66ee3579049d4e11d0eaa14c1bce3e7d348d0e2ed1af12cdb711d3947534cc512df13eefb7a3cdb7b12e20506a419dcc4400ded6a944f8fadf9cce1311d3b  xds/type/matcher/v3/string.proto
+shake256:160afd1debc4ffabb9a63c29be80f0bfa2523c0e4391d10d935f0ef79859edade6f1706675682ac09ce2c1e5b3b3e85442afc8112a8a30dba68964ed47918e77  xds/type/v3/cel.proto
+shake256:fa8a8cd02a88e5a6da180c146a36b6eaec7e9e8497dc180b03238a9dd0f49c2e8b1da1522d195f710fdba9f78efc28aa901a91072e12c245953f40ab2efce6a3  xds/type/v3/range.proto
+shake256:19081af6a5ed7688bd46580ab94670cb68cd092463862d9988d58c74e0aa643dc29f1229a0ba01eff71590f2a20646b4447b043aa937439f3fc58cdc5005f309  xds/type/v3/typed_struct.proto

modules/sync/cncf/xds/cas/d2ee1ebb8a9b0f21a49998aaaa44783d9c9b886a869bdd5965a5d72e66569bb158010f6dd9c10946a9ac8b415caf395f0c9af340883ae99690b33e024cf4cd2c

@@ -0,0 +1,34 @@
+// THIS FILE IS DEPRECATED
+// Users should instead use the corresponding proto in the xds tree.
+// No new changes will be accepted here.
+
+syntax = "proto3";
+
+package udpa.annotations;
+
+import "udpa/annotations/status.proto";
+
+import "google/protobuf/descriptor.proto";
+
+option go_package = "github.com/cncf/xds/go/udpa/annotations";
+
+// All annotations in this file are experimental and subject to change. Their
+// only consumer today is the Envoy APIs and SecuritAnnotationValidator protoc
+// plugin in this repository.
+option (udpa.annotations.file_status).work_in_progress = true;
+
+extend google.protobuf.FieldOptions {
+  // Magic number is the 28 most significant bits in the sha256sum of
+  // "udpa.annotations.security".
+  FieldSecurityAnnotation security = 11122993;
+}
+
+// These annotations indicate metadata for the purpose of understanding the
+// security significance of fields.
+message FieldSecurityAnnotation {
+  // Field should be set in the presence of untrusted downstreams.
+  bool configure_for_untrusted_downstream = 1;
+
+  // Field should be set in the presence of untrusted upstreams.
+  bool configure_for_untrusted_upstream = 2;
+}