- Fixed an issue where the API server did not send impersonated UID to authentication webhooks. ([#116681](https://github.com/kubernetes/kubernetes/pull/116681), [@stlaz](https://github.com/stlaz)) [SIG API Machinery and Auth]

- Try to send watch bookmarks (if requested) periodically in addition to sending them right before timeout ([#90560](https://github.com/kubernetes/kubernetes/pull/90560), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]

* For admission webhooks registered for DELETE operations on k8s built APIs or CRDs, the apiserver now sends the existing object as admissionRequest.Request.OldObject to the webhook.  ([#76346](https://github.com/kubernetes/kubernetes/pull/76346), [@caesarxuchao](https://github.com/caesarxuchao))

- Disruption controller only sends one event per PodDisruptionBudget if scale can't be computed ([#98128](https://github.com/kubernetes/kubernetes/pull/98128), [@mortent](https://github.com/mortent)) [SIG Apps]

A security issue was discovered in Kubernetes where users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can to modify Node objects and send requests proxying through them.

    and 'outputs'. Starting at 1.2, such a model will accept the keys specified
    during export. Therefore, inference requests using 'inputs' and 'outputs'
    may start to fail. To fix this, either update any inference clients to send
    requests with the actual input and output keys used by the trainer code, or
    conversely, update the trainer code to name the input and output Tensors

pkg go/ast, const FilterUnassociatedComments MergeMode
pkg go/ast, const Fun ObjKind
pkg go/ast, const Lbl ObjKind
pkg go/ast, const Pkg ObjKind
pkg go/ast, const RECV ChanDir
pkg go/ast, const SEND ChanDir
pkg go/ast, const Typ ObjKind
pkg go/ast, const Var ObjKind
pkg go/ast, func FileExports(*File) bool
pkg go/ast, func FilterDecl(Decl, Filter) bool
pkg go/ast, func FilterFile(*File, Filter) bool

pkg go/ast, const FilterImportDuplicates = 4
pkg go/ast, const FilterUnassociatedComments = 2
pkg go/ast, const Fun = 5
pkg go/ast, const Lbl = 6
pkg go/ast, const Pkg = 1
pkg go/ast, const RECV = 2
pkg go/ast, const SEND = 1
pkg go/ast, const Typ = 3
pkg go/ast, const Var = 4
pkg go/ast, func NewCommentMap(*token.FileSet, Node, []*CommentGroup) CommentMap
pkg go/ast, method (CommentMap) Comments() []*CommentGroup