- Kubelet: close a loophole where static pods could reference arbitrary ResourceClaims. The pods created by the kubelet then don't run due to a sanity check, but such references shouldn't be allowed regardless. ([#131876](https://github.com/kubernetes/kubernetes/pull/131876), [@pohly](https://github.com/pohly)) [SIG Apps, Auth and Node]

- Kubelet: close a loophole where static pods could reference arbitrary ResourceClaims. The pods created by the kubelet then don't run due to a sanity check, but such references shouldn't be allowed regardless. ([#131875](https://github.com/kubernetes/kubernetes/pull/131875), [@pohly](https://github.com/pohly)) [SIG Apps, Auth and Node]

j&(1<<l) != 0 { s ^= powx[k+l] } } } if x := mul(i, j); x != uint32(s) { t.Fatalf("mul(%#x, %#x) = %#x, want %#x", i, j, x, s) } } } } // Check that S-boxes are inverses of each other. // They have more structure that we could test, // but if this sanity check passes, we'll assume // the cut and paste from the FIPS PDF worked. func TestSboxes(t *testing.T) { for i := 0; i < 256; i++ { if j := sbox0[sbox1[i]]; j != byte(i) { t.Errorf("sbox0[sbox1[%#x]] = %#x", i, j) } if j := sbox1[sbox0[i]]; j !=...

j&(1<<l) != 0 { s ^= powx[k+l] } } } if x := mul(i, j); x != uint32(s) { t.Fatalf("mul(%#x, %#x) = %#x, want %#x", i, j, x, s) } } } } // Check that S-boxes are inverses of each other. // They have more structure that we could test, // but if this sanity check passes, we'll assume // the cut and paste from the FIPS PDF worked. func TestSboxes(t *testing.T) { for i := 0; i < 256; i++ { if j := sbox0[sbox1[i]]; j != byte(i) { t.Errorf("sbox0[sbox1[%#x]] = %#x", i, j) } if j := sbox1[sbox0[i]]; j !=...