* the segment.
   */
  final transient int segmentMask;

  /**
   * Shift value for indexing within segments. Helps prevent entries that end up in the same segment
   * from also ending up in the same bucket.
   */
  final transient int segmentShift;

  /** The segments, each of which is a specialized hash table. */
  final transient Segment<K, V, E, S>[] segments;

* The Kubelet's deprecated `--allow-privileged` flag now defaults to true. This enables users to stop setting `--allow-privileged` in order to transition to `PodSecurityPolicy`. Previously, users had to continue setting `--allow-privileged`, because the default was false. ([#63442](https://github.com/kubernetes/kubernetes/pull/63442), [@mtaufen](https://github.com/mtaufen))

*.hosting.myjino.ru
*.hosting.ovh.net
*.id.pub
*.il-central-1.airflow.amazonaws.com
*.in.futurecms.at
*.jm
*.kawasaki.jp
*.kh
*.kin.one
*.kin.pub
*.kitakyushu.jp
*.kobe.jp
*.kunden.ortsinfo.at
*.landing.myjino.ru
*.lcl.dev
*.lclstage.dev
*.linodeobjects.com
*.magentosite.cloud
*.me-central-1.airflow.amazonaws.com
*.me-south-1.airflow.amazonaws.com
*.migration.run
*.mm
*.moonscale.io
*.my.canva.site

  updated. ([#120492](https://github.com/kubernetes/kubernetes/pull/120492), [@cezarygerard](https://github.com/cezarygerard))

- Avoid caching the Azure VMSS instances whose network profile is nil ([#100948](https://github.com/kubernetes/kubernetes/pull/100948), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
- Azure: avoid setting cached Sku when updating VMSS and VMSS instances ([#102005](https://github.com/kubernetes/kubernetes/pull/102005), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]

 - Kubernetes is built using golang 1.17. This version of go removes the ability to use a `GODEBUG=x509ignoreCN=0` environment setting to re-enable deprecated legacy behavior of treating the CommonName of X.509 serving certificates as a host name. This behavior has been disabled by default since Kubernetes 1.19 / go 1.15. Serving certificates used by admission webhooks, custom resource conversion webhooks, and aggregated API servers must now include valid Subject Alternative...

*.hosting.myjino.ru
*.hosting.ovh.net
*.id.pub
*.il-central-1.airflow.amazonaws.com
*.in.futurecms.at
*.jm
*.kawasaki.jp
*.kh
*.kin.one
*.kin.pub
*.kitakyushu.jp
*.kobe.jp
*.kunden.ortsinfo.at
*.landing.myjino.ru
*.lcl.dev
*.lclstage.dev
*.linodeobjects.com
*.magentosite.cloud
*.me-central-1.airflow.amazonaws.com
*.me-south-1.airflow.amazonaws.com
*.migration.run
*.mm
*.moonscale.io
*.my.canva.site

- Kube-apiserver: fixes a potential crash serving CustomResourceDefinitions that combine an invalid schema and CEL validation rules. ([#126167](https://github.com/kubernetes/kubernetes/pull/126167), [@cici37](https://github.com/cici37)) [SIG API Machinery and Testing]

16FE5..16FEF  ; disallowed                             # NA   <reserved-16FE5>..<reserved-16FEF>
16FF0..16FF1  ; valid                                  # 13.0 VIETNAMESE ALTERNATE READING MARK CA..VIETNAMESE ALTERNATE READING MARK NHAY
16FF2..16FFF  ; disallowed                             # NA   <reserved-16FF2>..<reserved-16FFF>

pkg net/http/httputil, method (*ClientConn) Do(*http.Request) (*http.Response, error)
pkg net/http/httputil, method (*ClientConn) Hijack() (net.Conn, *bufio.Reader)
pkg net/http/httputil, method (*ClientConn) Pending() int
pkg net/http/httputil, method (*ClientConn) Read(*http.Request) (*http.Response, error)
pkg net/http/httputil, method (*ClientConn) Write(*http.Request) error