- .status.terminating field now gets tracked faster when active Pods are deleted, specifically when Job is failed, gets suspended or has too many active pods. ([#125175](https://github.com/kubernetes/kubernetes/pull/125175), [@dejanzele](https://github.com/dejanzele)) [SIG Apps and Testing]

* Fix broken detection of non-root image user ID ([#78261](https://github.com/kubernetes/kubernetes/pull/78261), [@tallclair](https://github.com/tallclair))
* Active watches of custom resources now terminate properly if the CRD is modified. ([#78029](https://github.com/kubernetes/kubernetes/pull/78029), [@liggitt](https://github.com/liggitt))

* kubelet: fix fail to close kubelet->API connections on heartbeat failure when bootstrapping or client certificate rotation is disabled ([#78016](https://github.com/kubernetes/kubernetes/pull/78016), [@gaorong](https://github.com/gaorong))
* Active watches of custom resources now terminate properly if the CRD is modified. ([#78029](https://github.com/kubernetes/kubernetes/pull/78029), [@liggitt](https://github.com/liggitt))

* Fix incorrect conflict errors applying strategic merge patches to resources. ([#43871](https://github.com/kubernetes/kubernetes/pull/43871), [@liggitt](https://github.com/liggitt))

* Fix init container status reporting when active deadline is exceeded. ([#46305](https://github.com/kubernetes/kubernetes/pull/46305), [@sjenning](https://github.com/sjenning))

for interrupting the StatefulSet Pod management is now ignored. StatefulSets with this annotation set to `true` or with no value will behave just as they did in previous versions. Dormant StatefulSets with the annotation set to `false` will become active after upgrading.

* The CronJob object is now enabled by default at `v1beta1`. CronJob `v2alpha1` is still available, but it must be explicitly enabled. We recommend that you move any current CronJob objects to `batch/v1beta1.CronJob`....

- Fixed an issue in `winkernel` proxier that causes proxy rules to leak anytime service backends are modified. ([#112837](https://github.com/kubernetes/kubernetes/pull/112837), [@daschott](https://github.com/daschott))

- Fixes an issue in winkernel proxier that causes proxy rules to leak anytime service backends are modified. ([#112840](https://github.com/kubernetes/kubernetes/pull/112840), [@daschott](https://github.com/daschott)) [SIG Network and Windows]

pkg syscall (netbsd-arm64-cgo), func Accept(int) (int, Sockaddr, error)
pkg syscall (netbsd-arm64-cgo), func Access(string, uint32) error
pkg syscall (netbsd-arm64-cgo), func Adjtime(*Timeval, *Timeval) error
pkg syscall (netbsd-arm64-cgo), func Bind(int, Sockaddr) error
pkg syscall (netbsd-arm64-cgo), func BpfBuflen(int) (int, error)
pkg syscall (netbsd-arm64-cgo), func BpfDatalink(int) (int, error)

pkg syscall (darwin-arm64), const WUNTRACED ideal-int
pkg syscall (darwin-arm64), func Accept(int) (int, Sockaddr, error)
pkg syscall (darwin-arm64), func Access(string, uint32) error
pkg syscall (darwin-arm64), func Adjtime(*Timeval, *Timeval) error
pkg syscall (darwin-arm64), func Bind(int, Sockaddr) error
pkg syscall (darwin-arm64), func BpfBuflen //deprecated
pkg syscall (darwin-arm64), func BpfBuflen(int) (int, error)

- Fixes an issue in winkernel proxier that causes proxy rules to leak anytime service backends are modified. ([#112839](https://github.com/kubernetes/kubernetes/pull/112839), [@daschott](https://github.com/daschott)) [SIG Network and Windows]