- Handle slow CronJob lister in CronJob controller v2 and improve memory footprint. ([#96443](https://github.com/kubernetes/kubernetes/pull/96443), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps]
- --redirect-container-streaming is no longer functional. The flag will be removed in v1.22 ([#95935](https://github.com/kubernetes/kubernetes/pull/95935), [@tallclair](https://github.com/tallclair)) [SIG Node]

pkg syscall (netbsd-arm64-cgo), func RawSyscall(uintptr, uintptr, uintptr, uintptr) (uintptr, uintptr, Errno)
pkg syscall (netbsd-arm64-cgo), func ReadDirent(int, []uint8) (int, error)
pkg syscall (netbsd-arm64-cgo), func Read(int, []uint8) (int, error)
pkg syscall (netbsd-arm64-cgo), func Recvfrom(int, []uint8, int) (int, Sockaddr, error)

pkg syscall (freebsd-arm64), func RawSyscall6(uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr) (uintptr, uintptr, Errno)
pkg syscall (freebsd-arm64), func Read(int, []uint8) (int, error)
pkg syscall (freebsd-arm64), func ReadDirent(int, []uint8) (int, error)
pkg syscall (freebsd-arm64), func Recvfrom(int, []uint8, int) (int, Sockaddr, error)
pkg syscall (freebsd-arm64), func Recvmsg(int, []uint8, []uint8, int) (int, int, int, Sockaddr, error)

pkg syscall (darwin-arm64), func RawSyscall6(uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr) (uintptr, uintptr, Errno)
pkg syscall (darwin-arm64), func Read(int, []uint8) (int, error)
pkg syscall (darwin-arm64), func ReadDirent(int, []uint8) (int, error)
pkg syscall (darwin-arm64), func Recvfrom(int, []uint8, int) (int, Sockaddr, error)
pkg syscall (darwin-arm64), func Recvmsg(int, []uint8, []uint8, int) (int, int, int, Sockaddr, error)

### (No, really, you MUST read this before you upgrade)

- The StreamingProxyRedirects feature and `--redirect-container-streaming` flag are deprecated, and will be removed in a future release. The default behavior (proxy streaming requests through the kubelet) will be the only supported option.

pkg syscall (freebsd-riscv64), func Read(int, []uint8) (int, error) #53466
pkg syscall (freebsd-riscv64), func ReadDirent(int, []uint8) (int, error) #53466
pkg syscall (freebsd-riscv64), func Recvfrom(int, []uint8, int) (int, Sockaddr, error) #53466

* Updates defaultbackend to 1.5 ([#69380](https://github.com/kubernetes/kubernetes/pull/69380), [@bowei](https://github.com/bowei))
* Restrict redirect following from the apiserver to same-host redirects, and ignore redirects in some cases. ([#66516](https://github.com/kubernetes/kubernetes/pull/66516), [@tallclair](https://github.com/tallclair))

* Use "k8s.gcr.io" for container images rather than "gcr.io/google_containers".  This is just a redirect, for now, so should not impact anyone materially.   ([#54174](https://github.com/kubernetes/kubernetes/pull/54174), [@thockin](https://github.com/thockin))

    * In this way, the whole container streaming connection is secure. To switch back to the old behavior, set `--redirect-container-streaming=true` flag.

  released as a Pip package from TF 2.17 onwards.

### Known Caveats

*  Full aarch64 Linux and Arm64 macOS wheels are now published to the
  `tensorflow` pypi repository and no longer redirect to a separate package.

### Major Features and Improvements

*  Support for Python 3.12 has been added.
*  [tensorflow-tpu](https://pypi.org/project/tensorflow-tpu/) package is now