- Set ProcMountType feature to disabled by default, to follow the lead of UserNamespacesSupport (which it relies on). ([#126291](https://github.com/kubernetes/kubernetes/pull/126291), [@haircommander](https://github.com/haircommander)) [SIG Node]

In previous versions, the whole object was logged in audit events. Starting in 1.11, only `status`, `reason`, and `code` are logged. Code that relies on the older version must be updated to avoid errors.
([#62695](https://github.com/kubernetes/kubernetes/pull/62695), [@CaoShuFeng](https://github.com/CaoShuFeng))

- `scheduler`: handling of unschedulable pods because a `ResourceClass` is missing
  is a bit more efficient and no longer relies on periodic retries. ([#120213](https://github.com/kubernetes/kubernetes/pull/120213), [@pohly](https://github.com/pohly))

## Dependencies

### Added
- cloud.google.com/go/dataproc/v2: v2.0.1

  NOTE: unsafe deletion ignores finalizer constraints, and skips precondition checks.
  WARNING: this may break the workload associated with the resource being unsafe-deleted, if it relies on
  the normal deletion flow, so cluster breaking consequences apply. ([#127513](https://github.com/kubernetes/kubernetes/pull/127513), [@tkashem](https://github.com/tkashem)) [SIG API Machinery, Etcd, Node and Testing]

seiyo.ehime.jp
sejny.pl
sekd1.beebyteapp.io
seki.gifu.jp
sekigahara.gifu.jp
sekikawa.niigata.jp
sel.no
selbu.no
select
selfip.biz
selfip.com
selfip.info
selfip.net
selfip.org
selje.no
seljord.no
sellfy.store
sells-for-less.com
sells-for-u.com
sells-it.net
sellsyourhome.org
semboku.akita.jp
semine.miyagi.jp
senasa.ar
sener
sennan.osaka.jp
senseering.net

- Kubeadm: if the user has customized their image repository via the kubeadm configuration, pass the custom pause image repository and tag to the kubelet via --pod-infra-container-image not only for Docker but for all container runtimes. This flag tells the kubelet that it should not garbage collect the image. ([#99476](https://github.com/kubernetes/kubernetes/pull/99476), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]

- Added E2E tests validating WindowsOptions.RunAsUserName. ([#79539](https://github.com/kubernetes/kubernetes/pull/79539), [@bclau](https://github.com/bclau))
- `framework.ExpectNoError` no longer logs the error and instead relies on using the new `log.Fail` as gomega fail handler. ([#80253](https://github.com/kubernetes/kubernetes/pull/80253), [@pohly](https://github.com/pohly))

### Windows

seiyo.ehime.jp
sejny.pl
sekd1.beebyteapp.io
seki.gifu.jp
sekigahara.gifu.jp
sekikawa.niigata.jp
sel.no
selbu.no
select
selfip.biz
selfip.com
selfip.info
selfip.net
selfip.org
selje.no
seljord.no
sellfy.store
sells-for-less.com
sells-for-u.com
sells-it.net
sellsyourhome.org
semboku.akita.jp
semine.miyagi.jp
senasa.ar
sener
sennan.osaka.jp
senseering.net

  * Rescheduler relies on taints, which were changed in a backward incompatible way. Rescheduler 0.3 shipped together with Kubernetes 1.6 understands the new taints and will clean up the old annotations, but Rescheduler 0.2 shipped together with Kubernetes 1.5 doesn't understand...

- The `client.authentication.k8s.io/v1alpha1` ExecCredential has been removed. If you are using a client-go credential plugin that relies on the v1alpha1 API please contact the distributor of your plugin for instructions on how to migrate to the v1 API. ([#108616](https://github.com/kubernetes/kubernetes/pull/108616), [@margocrawf](https://github.com/margocrawf))