With this patch, the external provisioner can remove the finalizer in next reconcile loop. Unfortunately if the provious existing pv has the Failed state, this patch won't take effort. It requires users to remove finalizer. ([#126043](https://github.com/kubernetes/kubernetes/pull/126043), [@carlory](https://github.com/carlory)) [SIG Apps and Storage]

  In addition, when this feature is enabled, the 'details' field of 'Status' from the LIST response
  includes information that identifies the corrupt object(s).
  NOTE: unsafe deletion ignores finalizer constraints, and skips precondition checks.
  WARNING: this may break the workload associated with the resource being unsafe-deleted, if it relies on

  
  With this patch, the external provisioner can remove the finalizer in next reconcile loop. Unfortunately if the provious existing pv has the Failed state, this patch won't take effort. It requires users to remove finalizer. ([#125767](https://github.com/kubernetes/kubernetes/pull/125767), [@carlory](https://github.com/carlory)) [SIG Apps and Storage]

- kube-apiserver: the `StorageObjectInUseProtection` admission plugin added the `kubernetes.io/vac-protection` finalizer to the given VolumeAttributesClass object when it is created if the feature-gate `VolumeAttributesClass` is turned on and `storage.k8s.io/v1beta1` is enabled. ([#130553](https://github.com/kubernetes/kubernetes/pull/130553), [@Phaow](https://github.com/Phaow))...

    }

    /**
     * Finalizes and removes the preauth integrity context for a session.
     *
     * @param sessionId the session identifier
     */
    public void finalizeSession(String sessionId) {
        PreauthIntegrityContext context = sessionContexts.remove(sessionId);
        if (context != null) {
            context.invalidate();

    }

    @Test
    @DisplayName("finalize() invokes checkRelease exactly once")
    void finalize_invokes_checkRelease() throws Throwable {
        // Arrange: spy to verify internal interaction with checkRelease()
        CIFSContext ctx = mock(CIFSContext.class);
        SmbTreeConnectionTrace trace = Mockito.spy(new SmbTreeConnectionTrace(ctx));

        // Act: directly invoke finalize to simulate GC finalization path

    }

    @Test
    @DisplayName("finalize() logs a warning when not closed (no exception)")
    void finalize_logsWhenNotClosed() throws Throwable {
        when(cfg.isTraceResourceUsage()).thenReturn(true); // exercise backtrace branch
        stubValidTree(2L, true, true);
        SmbFileHandleImpl h = new SmbFileHandleImpl(cfg, 1, tree, "//host/share", 0, 0, 0, 0, 0L);
        // Calling finalize directly to execute the logic; should not throw

    SmbTreeConnectionTrace(final CIFSContext ctx) {
        super(ctx);
    }

    SmbTreeConnectionTrace(final SmbTreeConnection conn) {
        super(conn);
    }

    @Override
    protected void finalize() throws Throwable {
        checkRelease();
    }

            log.trace(String.format("Release %s (%d)", this, usage));
        }
    }

    /**
     * {@inheritDoc}
     *
     * @see java.lang.Object#finalize()
     */
    @Override
    protected void finalize() throws Throwable {
        try {
            if (this.usageCount != null && this.usageCount.get() != 0 && this.open) {

        System.arraycopy(stackTrace, s, res, 0, e - s);
        return res;
    }

    /**
     * {@inheritDoc}
     *
     * @see java.lang.Object#finalize()
     */
    @Override
    protected void finalize() throws Throwable {
        try {
            if (isConnected() && this.usageCount.get() != 0) {
                log.warn("Tree was not properly released, performing emergency cleanup: " + this);