s0 ^= xk[k+0] s1 ^= xk[k+1] s2 ^= xk[k+2] s3 ^= xk[k+3] _ = dst[15] // early bounds check byteorder.BEPutUint32(dst[0:4], s0) byteorder.BEPutUint32(dst[4:8], s1) byteorder.BEPutUint32(dst[8:12], s2) byteorder.BEPutUint32(dst[12:16], s3) } // Decrypt one block from src into dst, using the expanded key xk. func decryptBlockGeneric(c *blockExpanded, dst, src []byte) { checkGenericIsExpect() xk := c.dec[:] _ = src[15] // early bounds check s0 := byteorder.BEUint32(src[0:4]) s1 := byteorder.BEUint32(src[4:8])...

 s0 ^= xk[k+0] s1 ^= xk[k+1] s2 ^= xk[k+2] s3 ^= xk[k+3] _ = dst[15] // early bounds check byteorder.BEPutUint32(dst[0:4], s0) byteorder.BEPutUint32(dst[4:8], s1) byteorder.BEPutUint32(dst[8:12], s2) byteorder.BEPutUint32(dst[12:16], s3) } // Decrypt one block from src into dst, using the expanded key xk. func decryptBlockGeneric(c *blockExpanded, dst, src []byte) { checkGenericIsExpect() xk := c.dec[:] _ = src[15] // early bounds check s0 := byteorder.BEUint32(src[0:4]) s1 := byteorder.BEUint32(src[4:8])...

nodes with pods may see pods that fail due to node admission

1.22 addressed a long-standing issue in the Kubelet where terminating pods were [vulnerable to race conditions](https://github.com/kubernetes/kubernetes/pull/102344) leading to early shutdown, resource leaks, or long delays in actually completing pod shutdown. As a consequence of this change the Kubelet now correctly takes into account the resources of running and terminating pods when deciding to accept new pods, since terminating...

### Increase the Kubernetes support window to one year

As of Kubernetes 1.19, bugfix support via patch releases for a Kubernetes minor release has increased from 9 months to 1 year.

A survey conducted in early 2019 by the working group (WG) Long Term Support (LTS) showed that a significant subset of Kubernetes end-users fail to upgrade within the previous 9-month support period.