jobs:
  check_pull_metadata:
    permissions:
      issues: write
      pull-requests: write
    runs-on: ubuntu-latest
    steps:
      # Check that PRs have proper metadata: labels and milestone
      # https://github.com/gradle/issue-management-action/blob/main/src/pull-metadata.ts
      - uses: gradle/issue-management-action@v1
        with:

func main() {
	// Start tracing.
	if err := trace.Start(os.Stdout); err != nil {
		log.Fatalf("failed to start tracing: %v", err)
	}

	// Try simple pull iteration.
	i := pullRange(100)
	for {
		_, ok := i.next()
		if !ok {
			break
		}
	}

	// Try bouncing the pull iterator between two goroutines.
	var wg sync.WaitGroup
	var iterChans [2]chan intIter
	wg.Add(2)
	iterChans[0] = make(chan intIter)

      creationTimestamp: null
      labels:
        app: hello
        security.istio.io/tlsMode: istio
        service.istio.io/canonical-name: hello
        service.istio.io/canonical-revision: latest
        tier: backend

            "istio.io/gateway-name" .Name
          ) | nindent 4 }}
      {{- if ge .KubeVersion 128 }}
      # Safe since 1.28: https://github.com/kubernetes/kubernetes/pull/117412
      ownerReferences:
      - apiVersion: gateway.networking.k8s.io/v1beta1
        kind: Gateway
        name: "{{.Name}}"
        uid: "{{.UID}}"
      {{- end }}
    ---

        sidecar.istio.io/inject: "false"
    spec:
      affinity:
        nodeAffinity:
          preferredDuringSchedulingIgnoredDuringExecution: null
          requiredDuringSchedulingIgnoredDuringExecution: null
      containers:
      - args:
        - proxy
        - router
        - --domain
        - $(POD_NAMESPACE).svc.cluster.local
        - --proxyLogLevel=warning

Jingming Guo <******@****.***> 1715374912 -0700

John Howard <******@****.***> 1709830758 -0800

- CRI: image pull per runtime class is now supported. ([#121121](https://github.com/kubernetes/kubernetes/pull/121121), [@kiashok](https://github.com/kiashok))
- Certain `requestBody` parameters in the OpenAPI `v3` are now correctly marked as required. ([#120735](https://github.com/kubernetes/kubernetes/pull/120735), [@Jefftree](https://github.com/Jefftree))

### Feature

- Kubernetes is now built with go 1.21.10 ([#124832](https://github.com/kubernetes/kubernetes/pull/124832), [@cpanato](https://github.com/cpanato)) [SIG Release and Testing]

- The Kubernetes apiserver now emits a warning message for Pods with a null labelSelector in podAffinity or topologySpreadConstraints. The null labelSelector means "match none". Using it in podAffinity or topologySpreadConstraint could lead to unintended behavior. ([#117025](https://github.com/kubernetes/kubernetes/pull/117025), [@sanposhiho](https://github.com/sanposhiho)) [SIG...