- Fixes a 1.30+ regression in connection stability for exec / attach / portforward requests initiated using a websocket client ([#130251](https://github.com/kubernetes/kubernetes/pull/130251), [@fuweid](https://github.com/fuweid)) [SIG API Machinery, CLI and Testing]

## Changes by Kind

### Feature

- Kubelet TCP and HTTP probes are more effective using networking resources: conntrack entries, sockets, ... 

- Fixes a 1.30+ regression in connection stability for exec / attach / portforward requests initiated using a websocket client ([#130253](https://github.com/kubernetes/kubernetes/pull/130253), [@fuweid](https://github.com/fuweid)) [SIG API Machinery, CLI and Testing]

	expectedMap.Set("Access-Control-Allow-Origin", "http://foobar.com")
	expectedMap["Access-Control-Expose-Headers"] = []string{
		"Date",
		"Etag",
		"Server",
		"Connection",
		"Accept-Ranges",
		"Content-Range",
		"Content-Encoding",
		"Content-Length",
		"Content-Type",
		"Content-Disposition",
		"Last-Modified",
		"Content-Language",
		"Cache-Control",

an L7 load balancer that already mitigates these http/2 attacks may choose not to enable the kube-apiserver mitigation to avoid disrupting load balancer → kube-apiserver connections if http/2 requests from multiple clients share the same backend connection. An API server on a private network may choose not to enable the kube-apiserver mitigation to prevent performance regressions for unauthenticated clients. Authenticated requests rely on the fix in golang.org/x/net v0.17.0 alone. https://issue.k8s.io/121197...

- `PidPressure` now evicts pods from lowest priority to highest priority ([#72844](https://github.com/kuber...

- Fix: use force detach for azure disk ([#91948](https://github.com/kubernetes/kubernetes/pull/91948), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
- Fixes a problem with 63-second or 1-second connection delays with some VXLAN-based
  network plugins which was first widely noticed in 1.16 (though some users saw it
  earlier than that, possibly only with specific network plugins). If you were previously

	quarkus/extensions/resteasy-reactive/quarkus-resteasy-reactive/runtime/pom.xml
	quarkus/test-framework/junit5/pom.xml
quarkus/integration-tests/hibernate-orm-tenancy/connection-resolver/pom.xml
	quarkus/extensions/undertow/runtime/pom.xml
	quarkus/extensions/hibernate-orm/runtime/pom.xml
	quarkus/extensions/jdbc/jdbc-mariadb/runtime/pom.xml

    public static final String LABELS_chat_error_invalid_response = "{labels.chat_error_invalid_response}";

    /** The key of the message: Unable to connect to the AI service. Please check the network connection. */
    public static final String LABELS_chat_error_connection = "{labels.chat_error_connection}";

    /** The key of the message: Sources */

- Kubelet: the connection to a DRA driver became unusable because of an internal deadlock when a connection was idle for 30 minutes. ([#133934](https://github.com/kubernetes/kubernetes/pull/133934), [@pohly](https://github.com/pohly)) [SIG Node]