- Kubeadm: uses the api-server AdvertiseAddress IP family to choose the etcd endpoint IP family for non external etcd clusters ([#85745](https://github.com/kubernetes/kubernetes/pull/85745), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]

pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet4 struct, Family uint8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet4 struct, Len uint8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet4 struct, Zero [8]int8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet6 struct, Family uint8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet6 struct, Len uint8

- Kubenet: added HostPort IPv6 support.  HostPortManager: operates only with one IP family, failing if receives port mapping entries with different IP families.  HostPortSyncer: operates only with one IP family, skipping portmap entries with different IP families ([#80854](https://github.com/kubernetes/kubernetes/pull/80854), [@aojea](https://github.com/aojea))

- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
  "primary IP family" of the cluster by picking a primary pod IP of the same family
  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
  in the order the administrator wanted (since some CNI plugins don't allow

- Fixed a bug in kube-proxy nftables mode (GA as of 1.33) that fails to determine if traffic originates from a local source on the node. The issue was caused by using the wrong meta `iif` instead of `iifname` for name based matches. ([#134099](https://github.com/kubernetes/kubernetes/pull/134099), [@aroradaman](https://github.com/aroradaman)) [SIG Network]

channelsdvr.net
u.channelsdvr.net

// Fastly Inc. : http://www.fastly.com/
// Submitted by Fastly Security <security@fastly.com>
edgecompute.app
fastly-edge.com
fastly-terrarium.com
freetls.fastly.net
map.fastly.net
a.prod.fastly.net
global.prod.fastly.net
a.ssl.fastly.net
b.ssl.fastly.net
global.ssl.fastly.net
fastlylb.net
map.fastlylb.net

- Remove `NodeLease` feature gate that was graduated and locked to stable in 1.17 release. ([#1052...

- Updated crictl to v1.12.0 ([#69033](https://github.com/kubernetes/kubernetes/pull/69033), [@feiskyer](https://github.com/feiskyer))

### SIG Network

- Corrected family type (inet6) for ipsets in ipv6-only clusters ([#68436](https://github.com/kubernetes/kubernetes/pull/68436), [@uablrek](https://github.com/uablrek))

pkg syscall (darwin-arm64), type RawSockaddrInet4 struct, Family uint8
pkg syscall (darwin-arm64), type RawSockaddrInet4 struct, Len uint8
pkg syscall (darwin-arm64), type RawSockaddrInet4 struct, Zero [8]int8
pkg syscall (darwin-arm64), type RawSockaddrInet6 struct, Family uint8
pkg syscall (darwin-arm64), type RawSockaddrInet6 struct, Len uint8
pkg syscall (darwin-arm64), type RawSockaddrUnix struct, Family uint8

- Fixed a bug where init containers may fail to start due to a temporary container runtime failure. ([#127214](https://github.com/kubernetes/kubernetes/pull/127214), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Node]