* Reduce logging agent buffer chunk limit to 512k to optimize performance.

- If scheduler extender filtered a not found node, current scheduling round for this pod will just be skipped.
  ([#79641](https://github.com/kubernetes/kubernetes/pull/79641), [@yqwang-ms](https://github.com/yqwang-ms))

- Only extend token lifetimes when `--service-account-extend-token-expiration` is true and the requested token audiences are empty or exactly match all values for `--api-audiences`. ([#105954](https://github.com/kubernetes/kubernetes/pull/105954), [@jyotimahapatra](https://github.com/jyotimahapatra))...

pkg syscall (darwin-arm64), const SYS_LSTAT64 ideal-int
pkg syscall (darwin-arm64), const SYS_LSTAT64_EXTENDED = 342
pkg syscall (darwin-arm64), const SYS_LSTAT64_EXTENDED ideal-int
pkg syscall (darwin-arm64), const SYS_LSTAT_EXTENDED = 280
pkg syscall (darwin-arm64), const SYS_LSTAT_EXTENDED ideal-int
pkg syscall (darwin-arm64), const SYS_MADVISE = 75
pkg syscall (darwin-arm64), const SYS_MADVISE ideal-int

pkg syscall (netbsd-arm64-cgo), const NOTE_EXIT = 2147483648
pkg syscall (netbsd-arm64-cgo), const NOTE_EXIT ideal-int
pkg syscall (netbsd-arm64-cgo), const NOTE_EXTEND = 4
pkg syscall (netbsd-arm64-cgo), const NOTE_EXTEND ideal-int
pkg syscall (netbsd-arm64-cgo), const NOTE_FORK = 1073741824
pkg syscall (netbsd-arm64-cgo), const NOTE_FORK ideal-int
pkg syscall (netbsd-arm64-cgo), const NOTE_LINK = 16

  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be shortened to 1 hour...

 the apps/v1beta1 API in this release, but you should start planning for code
 that does not depend on mutable selectors.

 - Extended Resources are fully-qualified resource names outside the
 `kubernetes.io` domain. Extended Resource quantities must be integers.
 You can specify any resource name of the form `[aaa.]my-domain.bbb/ccc`

      - [Load Balancing](#load-balancing)
    - [**Node Components**](#node-components)
      - [Container Runtime Interface](#container-runtime-interface)
    - [**Scheduling**](#scheduling-1)
      - [Scheduler Extender](#scheduler-extender)
    - [**Storage**](#storage-1)
      - [Local Storage](#local-storage)
      - [Volume Plugins](#volume-plugins)
      - [Metrics](#metrics)
    - [**Other notable changes**](#other-notable-changes-16)

- Rename PluginContext to CycleState in the scheduling framework ([#83430](https://github.com/kubernetes/kubernetes/pull/83430), [@draveness](https://github.com/draveness))
- Some scheduler extender API fields are moved from `pkg/scheduler/api` to `pkg/scheduler/apis/extender/v1`. ([#83262](https://github.com/kubernetes/kubernetes/pull/83262), [@Huang-Wei](https://github.com/Huang-Wei))

* Kubelet will now set extended resource capacity to zero after it restarts. If the extended resource is exported by a device plugin, its capacity will change to a valid value after the device plugin re-connects with the Kubelet. If the extended resource is exported by an external component through direct node status capacity patching, the component should repatch the field after kubelet...