- Kubelet: Closed a loophole that allowed static Pods to reference arbitrary ResourceClaims. Even though these Pods failed to run due to a sanity check, such references are now explicitly disallowed. ([#131844](https://github.com/kubernetes/kubernetes/pull/131844), [@pohly](https://github.com/pohly)) [SIG Apps, Auth and Node]

KuQ,YAAY5K,aAGZ3H,GAGTmR,kBAAA,WACE,IAAKnP,KAAKkP,MAAO,CACf,IAAMvN,EAASqN,EAASW,sBAAsB3P,KAAKkB,UAE/CS,IACF3B,KAAKkP,MAAQvN,EAAOjF,cAAc+R,KAItC,OAAOzO,KAAKkP,OAGdsB,gBAAA,WACE,IAAMC,EAAkB3T,UAAEkD,KAAKkB,SAAS3B,YACpCmR,EAzNiB,eAwOrB,OAZID,EAAgBxO,SAnPE,UAoPpByO,EAAY5T,UAAEkD,KAAKkP,OAAOjN,SAASmM,GA9NhB,UADH,YAkOPqC,EAAgBxO,SAtPF,aAuPvByO,EA/NkB,cAgOTD,EAAgBxO,SAvPH,YAwPtByO,EAhOiB,aAiOR5T,UAAEkD,KAAKkP,OAAOjN,SAASmM,KAChCsC,EApOsB,cAuOjBA,GAGTrB,gBAAA,WACE,OAAOvS,UAAEkD,KAAKkB,UAAUU,QAAQ,WAAWiD,...

- Kubelet: close a loophole where static pods could reference arbitrary ResourceClaims. The pods created by the kubelet then don't run due to a sanity check, but such references shouldn't be allowed regardless. ([#131876](https://github.com/kubernetes/kubernetes/pull/131876), [@pohly](https://github.com/pohly)) [SIG Apps, Auth and Node]

- Kubelet: close a loophole where static pods could reference arbitrary ResourceClaims. The pods created by the kubelet then don't run due to a sanity check, but such references shouldn't be allowed regardless. ([#131875](https://github.com/kubernetes/kubernetes/pull/131875), [@pohly](https://github.com/pohly)) [SIG Apps, Auth and Node]

j&(1<<l) != 0 { s ^= powx[k+l] } } } if x := mul(i, j); x != uint32(s) { t.Fatalf("mul(%#x, %#x) = %#x, want %#x", i, j, x, s) } } } } // Check that S-boxes are inverses of each other. // They have more structure that we could test, // but if this sanity check passes, we'll assume // the cut and paste from the FIPS PDF worked. func TestSboxes(t *testing.T) { for i := 0; i < 256; i++ { if j := sbox0[sbox1[i]]; j != byte(i) { t.Errorf("sbox0[sbox1[%#x]] = %#x", i, j) } if j := sbox1[sbox0[i]]; j !=...