## Changelog since v1.9.2

### Action Required

* Bug fix: webhooks now do not skip cluster-scoped resources ([#58185](https://github.com/kubernetes/kubernetes/pull/58185), [@caesarxuchao](https://github.com/caesarxuchao))

      Multiset<E> self, Multiset<? extends E> elements) {
    // It'd be nice if we could specialize for ImmutableMultiset here without also retaining
    // its code when it's not in scope...
    if (elements instanceof AbstractMapBasedMultiset) {
      return addAllImpl(self, (AbstractMapBasedMultiset<? extends E>) elements);
    } else if (elements.isEmpty()) {
      return false;
    } else {

TEST_F(CApiGradientsTest, GradientsPrefix_TwoGradientsInSameScope) {
  BuildGraphAndAddGradientsWithPrefixes("scope/gradients", "scope/gradients_1");
  ASSERT_EQ(TF_OK, TF_GetCode(s_)) << TF_Message(s_);
}

TEST_F(CApiGradientsTest, GradientsPrefix_TwoGradientsInDifferentScopes) {
  BuildGraphAndAddGradientsWithPrefixes("scope/gradients", "scope_1/gradients");
  ASSERT_EQ(TF_OK, TF_GetCode(s_)) << TF_Message(s_);
}

            writeInt4(buffer, offset + 4, 0);  // Flow info
            System.arraycopy(address.getAddress(), 0, buffer, offset + 8, 16);
            writeInt4(buffer, offset + 24, 0);  // Scope ID
        } else {
            // IPv4 sockaddr_in structure
            writeInt2(buffer, offset, 2);  // AF_INET
            writeInt2(buffer, offset + 2, 445);  // Port

- New flag is introduced, i.e. --topology-manager-scope=container|pod. 
  The default value is the "container" scope. ([#92967](https://github.com/kubernetes/kubernetes/pull/92967), [@cezaryzukowski](https://github.com/cezaryzukowski)) [SIG Instrumentation, Node and Testing]

## Release Notes From SIGs

### SIG API Machinery

- The OwnerReferencesPermissionEnforcement admission plugin now checks authorization for the correct scope (namespaced or cluster-scoped) of the owner resource type. Previously, it always checked permissions at the same scope as the child resource. ([#70389](https://github.com/kubernetes/kubernetes/pull/70389), [@caesarxuchao](https://github.com/caesarxuchao))

func (p *Parser) asmText(operands [][]lex.Token) {
	if len(operands) != 2 && len(operands) != 3 {
		p.errorf("expect two or three operands for TEXT")
		return
	}

	// Labels are function scoped. Patch existing labels and
	// create a new label space for this TEXT.
	p.patch()
	p.labels = make(map[string]*obj.Prog)

	// Operand 0 is the symbol name in the form foo(SB).

			fmt.Sprintf("config_url=%s/.well-known/openid-configuration", testApp.ProviderURL),
			fmt.Sprintf("client_id=%s", testApp.ClientID),
			fmt.Sprintf("client_secret=%s", testApp.ClientSecret),
			"scopes=openid,groups",
			fmt.Sprintf("redirect_uri=%s", testApp.RedirectURL),
		}
		if rolePolicies[i] != "" {
			configCmds = append(configCmds, fmt.Sprintf("role_policy=%s", rolePolicies[i]))
		} else {

you grant is automatically extended to all recipients of the covered
work and works based on it.

  A patent license is "discriminatory" if it does not include within
the scope of its coverage, prohibits the exercise of, or is
conditioned on the non-exercise of one or more of the rights that are
specifically granted under this License.  You may not convey a covered

        String src = source.getScope();
        if (src != null) {
            if (sourceDominant || target.getScope() == null) {
                target.setScope(src);
                target.setLocation("scope", source.getLocation("scope"));
            }
        }
    }

    protected void mergeDependency_SystemPath(
            Dependency target, Dependency source, boolean sourceDominant, Map<Object, Object> context) {