- Deprecated types in `k8s.io/apimachinery/util/clock`. Please use `k8s.io/utils/clock` instead. ([#106850](https://github.com/kubernetes/kubernetes/pull/106850), [@MadhavJivrajani](https://github.com/MadhavJivrajani))

pkg syscall (darwin-arm64), func Mlockall(int) error
pkg syscall (darwin-arm64), func Mmap(int, int64, int, int, int) ([]uint8, error)
pkg syscall (darwin-arm64), func Mprotect([]uint8, int) error
pkg syscall (darwin-arm64), func Munlock([]uint8) error
pkg syscall (darwin-arm64), func Munlockall() error
pkg syscall (darwin-arm64), func Munmap([]uint8) error
pkg syscall (darwin-arm64), func Open(string, int, uint32) (int, error)

- Enhanced the daemonset sync logic to avoid a problem where pods are thought to be unavailable when the controller's clock is slower than the node's clock. ([#77208](https://github.com/kubernetes/kubernetes/pull/77208), [@DaiHao](https://github.com/DaiHao))

beating.  Now, if you only kept on good terms with him, he'd do
almost anything you liked with the clock.  For instance, suppose
it were nine o'clock in the morning, just time to begin lessons:
you'd only have to whisper a hint to Time, and round goes the
clock in a twinkling!  Half-past one, time for dinner!'

  (`I only wish it was,' the March Hare said to itself in a
whisper.)

- github.com/Microsoft/hcsshim: [5eafd15 → v0.8.22](https://github.com/Microsoft/hcsshim/compare/5eafd15...v0.8.22)
- github.com/benbjohnson/clock: [v1.0.3 → v1.1.0](https://github.com/benbjohnson/clock/compare/v1.0.3...v1.1.0)
- github.com/bketelsen/crypt: [5cbc8cc → v0.0.4](https://github.com/bketelsen/crypt/compare/5cbc8cc...v0.0.4)

#### Photon
* Fix photon controller plugin to construct with correct PdID ([#37167](https://github.com/kubernetes/kubernetes/pull/37167), [@luomiao](https://github.com/luomiao))

#### rbd
* force unlock rbd image if the image is not used ([#41597](https://github.com/kubernetes/kubernetes/pull/41597), [@rootfs](https://github.com/rootfs))

#### vSphere

### Feature

- Kubeadm: generate CA certificates with a start time that is offset 5 minutes in the past relative to the current system time to workaround cases of clock desync.
  client-go: allow to set NotBefore in NewSelfSignedCACert() ([#119113](https://github.com/kubernetes/kubernetes/pull/119113), [@champtar](https://github.com/champtar)) [SIG API Machinery, Auth and Cluster Lifecycle]

Guaranteed pods with integer CPU requests on nodes with static CPU & Memory policy configured is not allowed for the beta release of in-place resize. The feature gate `InPlacePodVerticalScalingExclusiveCPUs` defaults to `false`, but can be enabled to unblock development on ([#127262](https://github.com/kubernetes/kubernetes/issues/127262), [@tallclair](https://github.com/tallclair)) [SIG Node]. ([#128287](https://github.com/kubernetes/kubernetes/pull/128287), [@esotsal](https://github.com/esotsal)) [SIG...

pkg syscall (netbsd-arm64-cgo), type Rusage struct, Nswap int64
pkg syscall (netbsd-arm64-cgo), type Rusage struct, Nvcsw int64
pkg syscall (netbsd-arm64-cgo), type Rusage struct, Oublock int64
pkg syscall (netbsd-arm64-cgo), type Rusage struct, Stime Timeval
pkg syscall (netbsd-arm64-cgo), type Rusage struct, Utime Timeval
pkg syscall (netbsd-arm64-cgo), type SockaddrDatalink struct

pkg syscall (freebsd-arm64), type Rusage struct, Nswap int64
pkg syscall (freebsd-arm64), type Rusage struct, Nvcsw int64
pkg syscall (freebsd-arm64), type Rusage struct, Oublock int64
pkg syscall (freebsd-arm64), type Rusage struct, Stime Timeval
pkg syscall (freebsd-arm64), type Rusage struct, Utime Timeval
pkg syscall (freebsd-arm64), type SockaddrDatalink struct