- kube-apiserver: a new `--requestheader-uid-headers` flag allows configuring...

		// if rule is already in original list update non tranisition details with latest
		// else simply add to the map. This may happen if ILM expiry replication
		// was disabled for sometime and rules were updated independently in different
		// sites. Latest changes would get applied but merge only the non transition details
		if existingRl, ok := rMap[id]; ok {
			clonedRl := rl.CloneNonTransition()

    </magic>
    <!-- The priority is 60, as .webarchive files often contain
         (X)HTML content. The bplist magic must trump the XHTML
         magics further within the file. This must also be
         independent of the internal ordering of patterns within
         MimeTypes -->
    <magic priority="60">
      <match value="bplist" type="string" offset="0"/>
    </magic>
  </mime-type>

- Unmounted volumes correctly for reconstructed volumes even if mount operation fails after...

### Serverside Apply - Beta 2

- Kube-apiserver: ControllerRevision objects are now...

    interfaces that do not display Appropriate Legal Notices, your
    work need not make them do so.

  A compilation of a covered work with other separate and independent
works, which are not by their nature extensions of the covered work,
and which are not combined with it such as to form a larger program,
in or on a volume of a storage or distribution medium, is called an

`--prune` flag to support deleting previously applied objects that have been removed from the input manifest. This feature has remained in alpha ever since due to performance and correctness issues inherent in its design. This PR exposes a second, independent pruning alpha powered by a new standard named `ApplySets`. An `ApplySet` is a server-side object (by default, a Secret; ConfigMaps are also allowed) that kubectl can use to accurately and efficiently track set membership across `apply` operations....

The cri-tools project, which aims to provide consistent tooling for operators to debug and introspect their nodes in production independent of their chosen container runtime, graduated to GA.

## Dependencies

### Added