pkg syscall (darwin-arm64), const AF_DECnet ideal-int
pkg syscall (darwin-arm64), const AF_DLI = 13
pkg syscall (darwin-arm64), const AF_DLI ideal-int
pkg syscall (darwin-arm64), const AF_E164 = 28
pkg syscall (darwin-arm64), const AF_E164 ideal-int
pkg syscall (darwin-arm64), const AF_ECMA = 8
pkg syscall (darwin-arm64), const AF_ECMA ideal-int
pkg syscall (darwin-arm64), const AF_HYLINK = 15

pkg syscall, method (Errno) Is(error) bool
pkg syscall (netbsd-arm64-cgo), const AF_APPLETALK = 16
pkg syscall (netbsd-arm64-cgo), const AF_APPLETALK ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_ARP = 28
pkg syscall (netbsd-arm64-cgo), const AF_ARP ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_BLUETOOTH = 31
pkg syscall (netbsd-arm64-cgo), const AF_BLUETOOTH ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_CCITT = 10

      	  <match value="0x0000" type="string" offset="28"/>
      	  <match value="0x0100" type="string" offset="28"/>
      	  <match value="0x0400" type="string" offset="28"/>
      	  <match value="0x0800" type="string" offset="28"/>
      	  <match value="0x1000" type="string" offset="28"/>
      	  <match value="0x1800" type="string" offset="28"/>
      	  <match value="0x2000" type="string" offset="28"/>
        </match>
      </match>

- Fixed a `v1.28` regression around restarting init containers in the right order relative to normal containers. ([#120281](https://github.com/kubernetes/kubernetes/pull/120281), [@gjkim42](https://github.com/gjkim42))

- Removed Kubelet flags `--iptables-masquerade-bit` and `--iptables-drop-bit` as they were deprecated in v1.28. in v1.28 and have now been removed entirely. ([#122363](https://github.com/kubernetes/kubernetes/pull/122363), [@carlory](https://github.com/carlory)) [SIG Network and Node]

  // all conditions specified in the readiness gates have status equal to "True"
  // More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
  // +optional
  repeated PodReadinessGate readinessGates = 28;

  // RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used
  // to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run.

- `kube-scheduler` component config (KubeSchedulerConfiguration) `kubescheduler.config.k8s.io/v1beta2`
  is removed in `v1.28`. Migrate `kube-scheduler` configuration files to `kubescheduler.config.k8s.io/v1`. ([#117649](https://github.com/kubernetes/kubernetes/pull/117649), [@SataQiu](https://github.com/SataQiu))

### Feature

- Fixed a bug that caused the `apiserver` to panic when trying to allocate a Service with a dynamic `ClusterIP` and was configured with Service CIDRs with a /28 mask for IPv4 and a /124 mask for IPv6 ([#115322](https://github.com/kubernetes/kubernetes/pull/115322), [@aojea](https://github.com/aojea))
- Fixed a bug where Kubernetes would apply a default StorageClass to a PersistentVolumeClaim,

- golang.org/x/sync: cd5d95a → 67f06af
- golang.org/x/sys: 5cba982 → a50acf3
- golang.org/x/time: 3af7569 → f8bda1e
- golang.org/x/tools: c1934b7 → v0.1.0
- gopkg.in/check.v1: 41f04d3 → 8fa4692
- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
- gotest.tools/v3: v3.0.2 → v3.0.3
- k8s.io/gengo: 83324d8 → b6c5ce2
- k8s.io/klog/v2: v2.4.0 → v2.8.0
- k8s.io/kube-openapi: d219536 → 591a79e
- k8s.io/system-validators: v1.2.0 → v1.4.0

### Bug or Regression

- Fix a bug that caused to panic the apiserver when trying to allocate a Service with a dynamic ClusterIP and it has been configured with Service CIDRs with a /28 mask for IPv4 and a /124 mask for IPv6 ([#115334](https://github.com/kubernetes/kubernetes/pull/115334), [@aojea](https://github.com/aojea)) [SIG Network and Testing]