- Fix kubectl printer to correctly handle timestamps of events emitted using events.k8s.io API ([#90227](https://github.com/kubernetes/kubernetes/pull/90227), [@gosoon](https://github.com/gosoon)) [SIG CLI]

	c.Assert(err, nil)

	// execute the request.
	response, err = s.client.Do(req)
	c.Assert(err, nil)
	verifyError(c, response, "InvalidArgument", "Size of filter rule value cannot exceed 1024 bytes in UTF-8 representation", http.StatusBadRequest)

	req, err = newTestSignedBadSHARequest(http.MethodGet,
		getListenNotificationURL(s.endPoint, bucketName, []string{}, []string{}, validEvents),

- Only extend token lifetimes when `--service-account-extend-token-expiration` is true and the requested token audiences are empty or exactly match all values for `--api-audiences`. ([#105954](https://github.com/kubernetes/kubernetes/pull/105954), [@jyotimahapatra](https://github.com/jyotimahapatra))...

## Changelog since v1.10.3

### Other notable changes

* Fixes issue for readOnly subpath mounts for SELinux systems and when the volume mountPath already existed in the container image. ([#64351](https://github.com/kubernetes/kubernetes/pull/64351), [@msau42](https://github.com/msau42))

pkg syscall (freebsd-riscv64), const WCOREFLAG = 128 #53466
pkg syscall (freebsd-riscv64), const WCOREFLAG ideal-int #53466
pkg syscall (freebsd-riscv64), const WEXITED = 16 #53466
pkg syscall (freebsd-riscv64), const WEXITED ideal-int #53466
pkg syscall (freebsd-riscv64), const WLINUXCLONE = 2147483648 #53466
pkg syscall (freebsd-riscv64), const WLINUXCLONE ideal-int #53466

                // This is a duplicate check, as preWriteCleanup already purged expired
                // entries, but let's accommodate an incorrect expiration queue.
                enqueueNotification(
                    entryKey, hash, value, valueReference.getWeight(), RemovalCause.EXPIRED);
              } else {
                recordLockedRead(e, now);
                statsCounter.recordHits(1);

* If ExperimentalCriticalPodAnnotation=True flag gate is set, kubelet will ensure that pods with `scheduler.alpha.kubernetes.io/critical-pod` annotation will be admitted even under resource pressure, will not be evicted, and are reasonably protected from system OOMs. ([#41052](https://github.com/kubernetes/kubernetes/pull/41052), [@vishh](https://github.com/vishh))

* If ExperimentalCriticalPodAnnotation=True flag gate is set, kubelet will ensure that pods with `scheduler.alpha.kubernetes.io/critical-pod` annotation will be admitted even under resource pressure, will not be evicted, and are reasonably protected from system OOMs. ([#41052](https://github.com/kubernetes/kubernetes/pull/41052), [@vishh](https://github.com/vishh))

pkg syscall (darwin-386), const VWERASE = 4
pkg syscall (darwin-386), const VWERASE ideal-int
pkg syscall (darwin-386), const WCONTINUED = 16
pkg syscall (darwin-386), const WCOREFLAG = 128
pkg syscall (darwin-386), const WEXITED = 4
pkg syscall (darwin-386), const WNOHANG = 1
pkg syscall (darwin-386), const WNOWAIT = 32
pkg syscall (darwin-386), const WORDSIZE = 32
pkg syscall (darwin-386), const WSTOPPED = 8

,KAAKiP,QAAQiB,UACblQ,KAAKiP,QAAU,OAInBkB,SAAA,WACEnQ,KAAKoP,UAAYpP,KAAKqP,gBACD,OAAjBrP,KAAKiP,SACPjP,KAAKiP,QAAQmB,kBAKjBnJ,qBAAA,WAAqB,IAAAlH,EAAAC,KACnBlD,UAAEkD,KAAKkB,UAAU0B,GAjMJ,qBAiMoB,SAAAxC,GAC/BA,EAAMuC,iBACNvC,EAAMiQ,kBACNtQ,EAAKsD,a,EAIToD,WAAA,SAAWzI,GAaT,OAZAA,EAAMsS,EAAA,GACDtQ,KAAKuQ,YAAYnL,QACjBtI,UAAEkD,KAAKkB,UAAUsB,OACjBxE,GAGLnC,EAAKiC,gBACHiH,EACA/G,EACAgC,KAAKuQ,YAAY5K,aAGZ3H,GAGTmR,kBAAA,WACE,IAAKnP,KAAKkP,MAAO,CACf,IAAMvN,EAASqN,EAASW,sBAAsB3P,KAAKkB,UAE/CS,IACF3B,KAAK...