- Dockershim security: pod sandbox now always run with `no-new-privileges` and `runtime/default` seccomp profile
  dockershim seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90948](https://github.com/kubernetes/kubernetes/pull/90948), [@pjbgf](https://github.com/pjbgf)) [SIG Node]

*   <THIS SECTION SHOULD CONTAIN API, ABI AND BEHAVIORAL BREAKING CHANGES>

*   `tf.summary.trace_on` now takes a `profiler_outdir` argument. This must be
    set if `profiler` arg is set to `True`.

    *   `tf.summary.trace_export`'s `profiler_outdir` arg is now a no-op.
        Enabling the profiler now requires setting `profiler_outdir` in
        `trace_on`.

*   `tf.estimator`

    *   The tf.estimator API is removed.

pkg syscall (freebsd-arm64), const SYS_PROCCTL = 544
pkg syscall (freebsd-arm64), const SYS_PROCCTL ideal-int
pkg syscall (freebsd-arm64), const SYS_PROFIL = 44
pkg syscall (freebsd-arm64), const SYS_PROFIL ideal-int
pkg syscall (freebsd-arm64), const SYS_PSELECT = 522
pkg syscall (freebsd-arm64), const SYS_PSELECT ideal-int
pkg syscall (freebsd-arm64), const SYS_PTRACE = 26

pkg syscall (freebsd-riscv64), const SYS_PROCCTL = 544 #53466
pkg syscall (freebsd-riscv64), const SYS_PROCCTL ideal-int #53466
pkg syscall (freebsd-riscv64), const SYS_PROFIL = 44 #53466
pkg syscall (freebsd-riscv64), const SYS_PROFIL ideal-int #53466
pkg syscall (freebsd-riscv64), const SYS_PSELECT = 522 #53466
pkg syscall (freebsd-riscv64), const SYS_PSELECT ideal-int #53466

e:25px;font-weight:300}@media (max-width:767.98px){.error-page>.error-content>h3{text-align:center}}.invoice{background:#fff;border:1px solid rgba(0,0,0,.125);position:relative}.invoice-title{margin-top:0}.profile-user-img{border:3px solid #adb5bd;margin:0 auto;padding:3px;width:100px}.profile-username{font-size:21px;margin-top:5px}.post{border-bottom:1px solid #adb5bd;color:#666;margin-bottom:15px;padding-bottom:15px}.post:last-of-type{border-bottom:0;margin-bottom:0;padding-bottom:0}.post .use...