- Kube-apiserver: Made the subresources `pods/exec`, `pods/attach`, and `pods/portforward` require `create` permission for both SPDY and Websocket API requests. Previously, SPDY requests required `create` permission, but Websocket requests only required `get` permission. This change...

- Enabled ratcheting validation on `status` subresources for CustomResourceDefinitions. ([#129506](https://github.com/kubernetes/kubernetes/pull/129506), [@JoelSpeed](https://github.com/JoelSpeed))

- The validation in the CertificateSigningRequest `/status` and `/approval` subresources was migrated to declarative validation.
  If the `DeclarativeValidation` feature gate was enabled, mismatches with existing validation are reported via metrics.

			</plugin>
			<plugin>
				<artifactId>maven-war-plugin</artifactId>
				<configuration>
					<webResources>
						<resource>
							<directory>${project.build.directory}/${project.build.finalName}-compress</directory>
						</resource>
					</webResources>
					<packagingExcludes>**/*.min.map,**/*.min.css.map,**/*.min.js.map</packagingExcludes>
				</configuration>
			</plugin>
			<plugin>

- Allow the CRI (and NRI) to block...