pkg syscall (darwin-arm64), type Statfs_t struct, Fstypename [16]int8
pkg syscall (darwin-arm64), type Statfs_t struct, Iosize int32
pkg syscall (darwin-arm64), type Statfs_t struct, Mntfromname [1024]int8
pkg syscall (darwin-arm64), type Statfs_t struct, Mntonname [1024]int8
pkg syscall (darwin-arm64), type Statfs_t struct, Owner uint32
pkg syscall (darwin-arm64), type Statfs_t struct, Reserved [8]uint32

pkg os (netbsd-arm64-cgo), const O_APPEND = 8
pkg os (netbsd-arm64-cgo), const O_CREATE = 512
pkg os (netbsd-arm64-cgo), const O_EXCL = 2048
pkg os (netbsd-arm64-cgo), const O_SYNC = 128
pkg os (netbsd-arm64-cgo), const O_TRUNC = 1024
pkg os (netbsd-arm64-cgo), const PathListSeparator = 58
pkg os (netbsd-arm64-cgo), const PathSeparator = 47
pkg os (netbsd-arm64), const DevNull = "/dev/null"
pkg os (netbsd-arm64), const O_APPEND = 8

97                  rune        rune is an alias for int32, and 97 is in the set of 32-bit integers
"foo"               string      "foo" is in the set of string values
1024                int16       1024 is in the set of 16-bit integers
42.0                byte        42 is in the set of unsigned 8-bit integers
1e10                uint64      10000000000 is in the set of unsigned 64-bit integers

* Fixed dynamic provisioning of GCE PDs to round to the next GB (base 1000) instead of GiB (base 1024). ([#56600](https://github.com/kubernetes/kubernetes/pull/56600), [@edisonxiang](https://github.com/edisonxiang))

removal of dockershim related flags for new kubeadm clusters. If kubelet <1.24 is on the host, kubeadm >=1.24 can continue using the built-in dockershim in the kubelet if the user passes the `{Init|Join}Configuration.nodeRegistration.criSocket` value in the kubeadm configuration to be equal to `unix:///var/run/dockershim.sock` on Unix or `npipe:////./pipe/dockershim` on Windows. If kubelet version >=1.24 is on the host, kubeadm >=1.24 will treat all container runtimes as "remote" using the kubelet flags...

### Bug or Regression

- Updates google.golang.org/protobuf to v1.33.0 to resolve CVE-2024-24786 ([#123767](https://github.com/kubernetes/kubernetes/pull/123767), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Storage]

* Refactor calling each a path operation's handler function in an isolated function, to simplify profiling. PR [#1027](https://github.com/tiangolo/fastapi/pull/1027) by [@sm-Fifteen](https://github.com/sm-Fifteen).
* Add missing dependencies for testing. PR [#1026](https://github.com/tiangolo/fastapi/pull/1026) by [@sm-Fifteen](https://github.com/sm-Fifteen).

- Kubeadm: perform additional dockershim cleanup. Treat all container runtimes as remote by using the flag "--container-runtime=remote", given dockershim was removed in 1.24 and given kubeadm 1.25 supports a kubelet version of 1.24 and 1.25. The flag "--network-plugin" will no longer be used for new clusters. Stop cleaning up the following dockershim related directories on "kubeadm reset": "/var/lib/dockershim", "/var/runkubernetes", "/var/lib/cni"...

    - [Container Images](#container-images)
  - [Changelog since v1.27.12](#changelog-since-v12712)
  - [Important Security Information](#important-security-information)
    - [CVE-2024-3177: Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin](#cve-2024-3177-bypassing-mountable-secrets-policy-imposed-by-the-serviceaccount-admission-plugin)
  - [Changes by Kind](#changes-by-kind)
    - [Feature](#feature)

-...