- Fixed: deleted a non-existent Azure disk issue. ([#107406](https://github.com/kubernetes/kubernetes/pull/107406), [@andyzhangx](https://github.com/andyzhangx))
- Fixed: do not return early in the node informer when there is no change of the topology label. ([#108149](https://github.com/kubernetes/kubernetes/pull/108149), [@nilo19](https://github.com/nilo19))

    <magic priority="40">
      <match value="function [a-zA-Z][A-Za-z0-9_]{0,62}[\\r\\n]" type="regex" offset="0"/>
    </magic>
    <!-- Two matlab-style comments fairly early in the file -->
    <magic priority="25">
      <match value="%" type="string" offset="0">
         <match value="\n%" type="string" offset="2:120"/>
      </match>
      <match value="%" type="string" offset="0">

### API Change

- Added the feature gates `StrictCostEnforcementForVAP` and `StrictCostEnforcementForWebhooks` to enforce the strct cost calculation for CEL extended libraries. It is strongly recommended to turn on the feature gates as early as possible. ([#124676](https://github.com/kubernetes/kubernetes/pull/124676), [@cici37](https://github.com/cici37)) [SIG API Machinery, Auth, Node and Testing]

 s0 ^= xk[k+0] s1 ^= xk[k+1] s2 ^= xk[k+2] s3 ^= xk[k+3] _ = dst[15] // early bounds check byteorder.BEPutUint32(dst[0:4], s0) byteorder.BEPutUint32(dst[4:8], s1) byteorder.BEPutUint32(dst[8:12], s2) byteorder.BEPutUint32(dst[12:16], s3) } // Decrypt one block from src into dst, using the expanded key xk. func decryptBlockGeneric(c *blockExpanded, dst, src []byte) { checkGenericIsExpect() xk := c.dec[:] _ = src[15] // early bounds check s0 := byteorder.BEUint32(src[0:4]) s1 := byteorder.BEUint32(src[4:8])...

nodes with pods may see pods that fail due to node admission

1.22 addressed a long-standing issue in the Kubelet where terminating pods were [vulnerable to race conditions](https://github.com/kubernetes/kubernetes/pull/102344) leading to early shutdown, resource leaks, or long delays in actually completing pod shutdown. As a consequence of this change the Kubelet now correctly takes into account the resources of running and terminating pods when deciding to accept new pods, since terminating...

 s0 ^= xk[k+0] s1 ^= xk[k+1] s2 ^= xk[k+2] s3 ^= xk[k+3] _ = dst[15] // early bounds check byteorder.BEPutUint32(dst[0:4], s0) byteorder.BEPutUint32(dst[4:8], s1) byteorder.BEPutUint32(dst[8:12], s2) byteorder.BEPutUint32(dst[12:16], s3) } // Decrypt one block from src into dst, using the expanded key xk. func decryptBlockGeneric(c *blockExpanded, dst, src []byte) { checkGenericIsExpect() xk := c.dec[:] _ = src[15] // early bounds check s0 := byteorder.BEUint32(src[0:4]) s1 := byteorder.BEUint32(src[4:8])...

### Increase the Kubernetes support window to one year

As of Kubernetes 1.19, bugfix support via patch releases for a Kubernetes minor release has increased from 9 months to 1 year.

A survey conducted in early 2019 by the working group (WG) Long Term Support (LTS) showed that a significant subset of Kubernetes end-users fail to upgrade within the previous 9-month support period.