- Kubelet: Extended the `--image-credential-provider-config` flag to accept a directory path in addition to a single file. When a directory was specified, all .json, .yaml, and .yml files in that directory were loaded and merged in lexicographical order. ([#131658](https://github.com/kubernetes/kubernetes/pull/131658), [@dims](https://github.com/dims)) [SIG Auth and Node]

ConstantTimeCompare(x, y []byte) int { if len(x) != len(y) { return 0 } var v byte for i := 0; i < len(x); i++ { v |= x[i] ^ y[i] } return constanttime.ByteEq(v, 0) } // ConstantTimeLessOrEq returns 1 if x <= y and 0 otherwise. The comparison // is lexigraphical, or big-endian. The time taken is a function of the length of // the slices and is independent of the contents. If the lengths of x and y do not // match it returns 0 immediately. func ConstantTimeLessOrEq(x, y []byte) int { if len(x) != len(y)...