* Fix the bug that query Kubelet's stats summary with CRI stats enabled results in error. ([#53107](https://github.com/kubernetes/kubernetes/pull/53107), [@Random-Liu](https://github.com/Random-Liu))

- Removed kube-scheduler insecure flags. You can use `--bind-address` and `--secure-port` instead. ([#106865](https://github.com/kubernetes/kubernetes/pull/106865), [@jonyhy96](https://github.com/jonyhy96))
- Removed the `ImmutableEphemeralVolumes` feature gate. ([#107152](https://github.com/kubernetes/kubernetes/pull/107152), [@mengjiao-liu](https://github.com/mengjiao-liu))

- Base-images: Update to `debian-base:buster-v1.7.1` ([#102594](https://github.com/kubernetes/kubernetes/pull/102594), [@mengjiao-liu](https://github.com/mengjiao-liu))
- Deprecated warning message for `igonre-errors` flag. ([#102677](https://github.com/kubernetes/kubernetes/pull/102677), [@yuzhiquan](https://github.com/yuzhiquan))

  - the NormalizeScore plugin set is removed from scheduler framework config API. Use ScorePlugin only. ([#80930](https://github.com/kubernetes/kubernetes/pull/80930), [@liu-cong](https://github.com/liu-cong))

- Kube-scheduler implemented scheduling hints for the `NodeAffinity` plugin. The scheduling hints allowed the scheduler to only retry scheduling a Pod that had been previously rejected by the `NodeAffinity` plugin if a new Node...

.f¼ ã x †|K_Ü%HTªñ Œ\KXciBÈ0 SZCRÀÕ>L}híqr>Tfi†ôaDsK}êl²v[f>{XiVkGG¾@W>Z}aiªOBLñox°øôDjúSfÖxgXóIKnl%å{r„7­HK~ñerÄ@xjöÔ%­»¦QJV NvGGÀ–¥‚&þ÷Õ KºS xrŽûÀxi`juOªszin滸Ē*˜' ¾ qjD ¦¼aÜc¥®ºImW M}ò²CsG¢xcÐtslôwWHªCY÷QKph¸Vñú}n18ôO¢ebv®VÖILxgk !iaxm„V_ÚÅ@GM[LÏû>TU\rÉ”°¡Çó eTi[¦oñwwýznˆ^q ãZfYI^KuoïuWˆLñˆNñ~Lª ˜´‚òÔà~DÕpÌ_ZZKxP]Õ²«ƒŽ 6/¼’©z rgLˆ7í~L# ܈• ¸¾“t - ¬è UoV|k±k„q~ÜqzRGW¸NïON DB@FHbÚÆ ñncE²{¥me `r IxGJ~KÕ>kv\¢¯req£¯Îéü >)Þê)i noŠÐQrVy²HITqIò{¼L~so¸ ˜ Š²@c¾ ºµ‚®Ð^`dD_V^iLzKdlwÕº¥ ² ° ,ª«Ð²tåB†7“fVoLFª—˜š˜...

- Pod SecurityContext and PodSecurityPolicy supports slash as sysctl separator. ([#106834](https://github.com/kubernetes/kubernetes/pull/106834), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG Apps, Architecture, Auth, Node, Security and Testing]

- Fixed the `PodAndContainerStatsFromCRI` feature, instead of supplementing with stats from cAdvisor. ([#113291](https://github.com/kubernetes/kubernetes/pull/113291), [@mengjiao-liu](https://github.com/mengjiao-liu))
- Fixed the occasional double-counting of the `job_finished_total` metric. ([#112948](https://github.com/kubernetes/kubernetes/pull/112948), [@mimowo](https://github.com/mimowo))

    * This keeps the behavior consistent with Docker integration, and fixes an issue that some container Prometheus metrics don't work when there are summary stats for multiple instances of the same pod.