pkg syscall (darwin-arm64), const PT_TRACE_ME ideal-int
pkg syscall (darwin-arm64), const PT_WRITE_D = 5
pkg syscall (darwin-arm64), const PT_WRITE_D ideal-int
pkg syscall (darwin-arm64), const PT_WRITE_I = 4
pkg syscall (darwin-arm64), const PT_WRITE_I ideal-int
pkg syscall (darwin-arm64), const PT_WRITE_U = 6
pkg syscall (darwin-arm64), const PT_WRITE_U ideal-int
pkg syscall (darwin-arm64), const RLIMIT_AS = 5

* Check if container memory stats are available before accessing it ([#77656](https://github.com/kubernetes/kubernetes/pull/77656), [@yastij](https://github.com/yastij))
* client-go and kubectl no longer write cached discovery files with world-accessible file permissions ([#77874](https://github.com/kubernetes/kubernetes/pull/77874), [@yuchengwu](https://github.com/yuchengwu))

- [`KTIJ-26599`](https://youtrack.jetbrains.com/issue/KTIJ-26599) K2 IDE: Typing `do ... while` statement: InvalidFirElementTypeException: "For DO_WHILE with text... FirExpression expected, but FirDoWhileLoopImpl found"

    * inside of which a write lock was intended to prevent races against
    * VM creation, but the usage of the sync.RWMutex type is incorrect,
    * plus is placed in a defer call so the locking is effectively
    * nonexistent.  This patch adds an anonymous function call inside
    * the loop to correctly handle acquiring the write lock with deferred

  - `priority_level_request_count_watermarks` is removed.
  - `read_vs_write_request_count_samples` is replaced with `read_vs_write_current_requests`, which samples every nanosecond rather than every second; the new metric, like the old one, measures utilization when the max-in-flight filter is used and number of requests when the API Priority and Fairness filter is used.

 - Scheduler's CycleState now embeds internal read/write locking inside its `Read()` and `Write()` functions. Meanwhile, `Lock()` and `Unlock()` function are removed. Scheduler plugin developers are now required to remove `CycleState#Lock()` and `CycleState#Unlock()`. Just simply use `Read()` and `Write()` as they're natively thread-safe now. ([#101542](https://github.com/kubernetes/kubernetes/pull/101542), [@Huang-Wei](http...

The old format included the Kubernetes version - "kube-system/kubelet-config-1.22", while the new format does not - "kube-system/kubelet-config". A similar formatting change is done for the related RBAC rules. The old format is now DEPRECATED and will be removed after the feature graduates to GA. When writing the ConfigMap kubeadm (init, upgrade apply) will respect the value of UnversionedKubeletConfigMap, while when reading it (join, reset, upgrade), it would attempt to use new format first and...

pkg syscall (netbsd-arm64-cgo), const EVFILT_VNODE = 3
pkg syscall (netbsd-arm64-cgo), const EVFILT_VNODE ideal-int
pkg syscall (netbsd-arm64-cgo), const EVFILT_WRITE = 1
pkg syscall (netbsd-arm64-cgo), const EVFILT_WRITE ideal-int
pkg syscall (netbsd-arm64-cgo), const EV_FLAG1 = 8192
pkg syscall (netbsd-arm64-cgo), const EV_FLAG1 ideal-int
pkg syscall (netbsd-arm64-cgo), const EV_ONESHOT = 16

  - Subtract DaemonSet pods' requests from node allocatable in the denominator while computing node utilization
  - Include taints by condition when determining if a node is unready/still starting
  - Fix `update-vendor.sh` to work on OSX and zsh
  - Add best-effort eviction for DaemonSet pods while scaling down non-empty nodes
  - Add build support for ARM64
  
  ### AliCloud

- The go version defined in `.go-version` is now fetched when invoking test, build, and code generation targets if the current go version does not match it. Set $FORCE_HOST_GO=y while testing or building to skip this behavior, or set $GO_VERSION to override the selected go version. ([#115498](https://github.com/kubernetes/kubernetes/pull/115498), [@liggitt](https://github.com/liggitt)) [SIG Release and Testing]