- Fixed a regression in the default `v1.27` configurations in `kube-apiserver`: fixed the `AggregatedDiscoveryEndpoint` feature (`beta` in `v1.27+`) to successfully fetch discovery information from aggregated API servers that do not check `Accept` headers when serving the `/apis` endpoint. ([#119870](https://github.com/kubernetes/kubernetes/pull/119870), [@Jefftree](https://github.com/Jefftree))

- Fixed a regression in default 1.27 configurations in kube-apiserver: fixed the AggregatedDiscoveryEndpoint feature (beta in 1.27+) to successfully fetch discovery information from aggregated API servers that do not check `Accept` headers when serving the `/apis` endpoint ([#120359](https://github.com/kubernetes/kubernetes/pull/120359), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery]

* kubeadm: prevent PSP blocking of upgrade image prepull by using a non-root user ([#77792](https://github.com/kubernetes/kubernetes/pull/77792), [@neolit123](https://github.com/neolit123))
* kubelet now accepts a --cni-cache-dir option, which defaults to /var/lib/cni/cache, where CNI stores cache files. ([#78908](https://github.com/kubernetes/kubernetes/pull/78908), [@dcbw](https://github.com/dcbw))

  Ginkgo V2 doesn't accept go test's `-parallel` flags to parallelize Ginkgo specs, please switch to use `ginkgo -p` or `ginkgo -procs=N` instead. ([#109111](https://github.com/kubernetes/kubernetes/pull/109111), [@chendave](https://github.com/chendave)) [SIG API Machinery,...

- Changes the kubectl `--validate` flag from a bool to a string that accepts the values {true, strict, warn, false, ignore}

pkg syscall (darwin-arm64), const WSTOPPED ideal-int
pkg syscall (darwin-arm64), const WUNTRACED = 2
pkg syscall (darwin-arm64), const WUNTRACED ideal-int
pkg syscall (darwin-arm64), func Accept(int) (int, Sockaddr, error)
pkg syscall (darwin-arm64), func Access(string, uint32) error
pkg syscall (darwin-arm64), func Adjtime(*Timeval, *Timeval) error
pkg syscall (darwin-arm64), func Bind(int, Sockaddr) error

1F250         ; mapped                 ; 5F97          # 6.0  CIRCLED IDEOGRAPH ADVANTAGE
1F251         ; mapped                 ; 53EF          # 6.0  CIRCLED IDEOGRAPH ACCEPT
1F252..1F25F  ; disallowed                             # NA   <reserved-1F252>..<reserved-1F25F>
1F260..1F265  ; valid                  ;      ; NV8    # 10.0 ROUNDED SYMBOL FOR FU..ROUNDED SYMBOL FOR CAI

import ( "crypto/internal/fips140" "crypto/internal/fips140/aes" ) // CounterKDF implements a KDF in Counter Mode instantiated with CMAC-AES, // according to NIST SP 800-108 Revision 1 Update 1, Section 4.1. // // It produces a 256-bit output, and accepts a 8-bit Label and a 96-bit Context. // It uses a counter of 16 bits placed before the fixed data. The fixed data is // the sequence Label || 0x00 || Context. The L field is omitted, since the // output key length is fixed. // // It's optimized for...

import ( "crypto/internal/fips140" "crypto/internal/fips140/aes" ) // CounterKDF implements a KDF in Counter Mode instantiated with CMAC-AES, // according to NIST SP 800-108 Revision 1 Update 1, Section 4.1. // // It produces a 256-bit output, and accepts a 8-bit Label and a 96-bit Context. // It uses a counter of 16 bits placed before the fixed data. The fixed data is // the sequence Label || 0x00 || Context. The L field is omitted, since the // output key length is fixed. // // It's optimized for...

* 🔨 Verify `mkdocs.yml` languages in CI, update `docs.py`. PR [#11009](https://github.com/tiangolo/fastapi/pull/11009) by [@tiangolo](https://github.com/tiangolo).
* 🔧 Update config in `label-approved.yml` to accept translations with 1 reviewer. PR [#11007](https://github.com/tiangolo/fastapi/pull/11007) by [@alejsdev](https://github.com/alejsdev).