</magic>
    <glob pattern="*.movie"/>
  </mime-type>

  <mime-type type="application/x-matroska">
    <_comment>Matroska Media Container</_comment>
    <!-- Common magic across all Matroska varients -->
    <!-- For full detection, we need a custom Detector, see TIKA-1180 -->
    <magic priority="40">
      <match value="0x1A45DFA3" type="string" offset="0" />
    </magic>
  </mime-type>

* The node authorizer now allows nodes to request service account tokens for the service accounts of pods running on them. This allows agents using the node identity to take actions on behalf of local pods. ([#55019](https://github.com/kubernetes/kubernetes/pull/55019), [@mikedanese](https://github.com/mikedanese))

### Bug or Regression

- Added jitter factor to lease controller that better smears load on kube-apiserver over time. ([#101652](https://github.com/kubernetes/kubernetes/pull/101652), [@marseel](https://github.com/marseel)) [SIG API Machinery and Scalability]

A security issue was discovered in kube-apiserver that could allow an attacker controlled aggregated API server to redirect client traffic to any URL.  This could lead to the client performing unexpected actions as well as leaking the client's credentials to third parties.