### Action Required

* action required: the API server and client-go libraries have been fixed to support additional non-alpha-numeric characters in UserInfo "extra" data keys. Both should be updated in order to properly support extra data containing "/" characters or other characters disallowed in HTTP headers. ([#65799](https://github.com/kubernetes/kubernetes/pull/65799), [@dekkagaijin](https://github.com/dekkagaijin))

HSPLokio/Path$Companion;->get(Ljava/lang/String;Z)Lokio/Path;
HSPLokio/Path;-><clinit>()V
HSPLokio/Path;-><init>(Lokio/ByteString;)V
HSPLokio/Path;->resolve(Ljava/lang/String;)Lokio/Path;
HSPLokio/Path;->volumeLetter()Ljava/lang/Character;
HSPLokio/RealBufferedSink;-><init>(Lokio/Sink;)V
HSPLokio/RealBufferedSink;->close()V
HSPLokio/RealBufferedSink;->emitCompleteSegments()Lokio/BufferedSink;
HSPLokio/RealBufferedSink;->flush()V

            self.secure_cloned_response_field = None
        self.dependencies = list(dependencies or [])
        self.description = description or inspect.cleandoc(self.endpoint.__doc__ or "")
        # if a "form feed" character (page break) is found in the description text,
        # truncate description text to the content preceding the first "form feed"
        self.description = self.description.split("\f")[0].strip()
        response_fields = {}

### Action Required

* action required: the API server and client-go libraries have been fixed to support additional non-alpha-numeric characters in UserInfo "extra" data keys. Both should be updated in order to properly support extra data containing "/" characters or other characters disallowed in HTTP headers. ([#65799](https://github.com/kubernetes/kubernetes/pull/65799), [@dekkagaijin](https://github.com/dekkagaijin))

### Auth

- Fixed OpenID Connect (OIDC) token refresh when the client secret contains a special character. ([#76914](https://github.com/kubernetes/kubernetes/pull/76914), [@tsuna](https://github.com/tsuna))

    @Required
    @Size(max = 100)
    public String username;

    /** The password for file authentication (maximum 100 characters). */
    @Size(max = 100)
    public String password;

    /** Additional parameters for file authentication (maximum 1000 characters). */
    @Size(max = 1000)
    public String parameters;

 * <td>bytes</td>
 * <td>characters</td>
 * <td>bytes, characters</td>
 * <td>characters</td>
 * </tr>
 * <tr>
 * <th>{@link Reader}</th>
 * <td>characters</td>
 * <td>characters</td>
 * <td>characters</td>
 * <td>characters</td>
 * </tr>
 * <tr>
 * <th>{@link File}</th>
 * <td>bytes</td>
 * <td>characters</td>
 * <td>bytes, characters</td>
 * <td>characters</td>
 * </tr>
 * <tr>

  }

  /**
   * Parses a trie node and returns the number of characters consumed.
   *
   * @param stack The prefixes that precede the characters represented by this node. Each entry of
   *     the stack is in reverse order.
   * @param encoded The serialized trie.
   * @param start An index in the encoded serialized trie to begin reading characters from.
   * @param builder A map builder to which all entries will be added.

kube-proxy, kubeadm {alpha|config|token|version}, kubemark. Flags should be prefixed with a single dash "-" (0x45) for short form or double dash "--" for long form. Before this change, malformed flags (for example, starting with a non-ascii dash character such as 0x8211: "–") would have been silently treated as positional arguments and ignored. ([#91349](https://github.com/kubernetes/kubernetes/pull/91349), [@neolit123](https://github.com/neolit123)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle,...

     * The name of the access token.
     * This is a required field with a maximum length of 1000 characters.
     */
    @Required
    @Size(max = 1000)
    public String name;

    /**
     * The actual access token string.
     * This is the token value that will be used for authentication.
     * Maximum length is 10000 characters.
     */
    @Size(max = 10000)
    public String token;

    /**