- Implement the scheduling framework with `Reserve`, `Prebind`, `Permit`, `Post-bind`, `Queue sort` and `Unreserve` extension points.
([#77567](https://github.com/kubernetes/kubernetes/pull/77567), [@wgliang](https://github.com/wgliang))

*   Fixes an NPE in RandomShuffle with XLA enable [CVE-2023-25674](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25674)
*   Fixes an FPE in TensorListSplit with XLA [CVE-2023-25673](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25673)
*   Fixes segmentation fault in tfg-translate [CVE-2023-25671](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25671)

    val call = proxyConfig.connect(server, client, url)
    assertContent("this response comes via a secure proxy", call.execute())
    val connect = server.takeRequest()
    assertThat(connect.requestLine, "Connect line failure on proxy")
      .isEqualTo("CONNECT android.com:443 HTTP/1.1")
    assertThat(connect.headers["Host"]).isEqualTo("android.com:443")
    val get = server.takeRequest()

- Alpha implementation of Kubectl Command Headers: SIG CLI KEP 859 enabled when KUBECTL_COMMAND_HEADERS environment variable set on the client command line. ([#98952](https://github.com/kubernetes/kubernetes/pull/98952), [@seans3](https://github.com/seans3))
- Base-images: Update to debian-iptables:buster-v1.4.0
  - Uses iptables 1.8.5

- Introduced a feature gate mechanism to `client-go`. Depending on the actual implementation, users can control features via environmental variables or command line options. ([#122555](https://github.com/kubernetes/kubernetes/pull/122555), [@p0lyn0mial](https://github.com/p0lyn0mial))

- Kube-proxy in nftables mode now allows pods on nodes without local service endpoints to access LoadBalancer Service ExternalIPs (with `externalTrafficPolicy: Local`). Previously, such traffic was dropped. This change brings nftables mode in line with iptables and IPVS modes, allowing traffic to be forwarded to available endpoints elsewhere in the cluster. ([#133969](https://github.com/kubernetes/kubernetes/pull/133969), [@aroradaman](https://github.com/aroradaman)) [SIG Network]

- Added Windows support for the node memory manager. ([#128560](https://github.com/kubernetes/kubernetes/pull/128560), [@marosset](https://github.com/marosset)) [SIG Node and Windows]
- Added `--concurrent-daemonset-syncs` command line flag to kube-controller-manager. This value sets the number of workers for the daemonset controller. ([#128444](https://github.com/kubernetes/kubernetes/pull/128444), [@tosi3k](https://github.com/tosi3k))

_init() {\n    const usingDefTab = ($(SELECTOR_TAB_CONTENT).children().length > 2)\n\n    this._setupListeners()\n    this._fixHeight(true)\n\n    if (usingDefTab) {\n      const $el = $(`${SELECTOR_TAB_PANE}`).first()\n      // eslint-disable-next-line no-console\n      console.log($el)\n      const uniqueName = $el.attr('id').replace('panel-', '')\n      const navId = `#tab-${uniqueName}`\n\n      this.switchTab(navId, true)\n    }\n  }\n\n  _initFrameElement() {\n    if (window.frameElement &&...

pkg syscall (netbsd-arm64-cgo), func Access(string, uint32) error
pkg syscall (netbsd-arm64-cgo), func Adjtime(*Timeval, *Timeval) error
pkg syscall (netbsd-arm64-cgo), func Bind(int, Sockaddr) error
pkg syscall (netbsd-arm64-cgo), func BpfBuflen(int) (int, error)
pkg syscall (netbsd-arm64-cgo), func BpfDatalink(int) (int, error)
pkg syscall (netbsd-arm64-cgo), func BpfHeadercmpl(int) (int, error)

pkg syscall (freebsd-arm64), func Access(string, uint32) error
pkg syscall (freebsd-arm64), func Adjtime(*Timeval, *Timeval) error
pkg syscall (freebsd-arm64), func Bind(int, Sockaddr) error
pkg syscall (freebsd-arm64), func BpfBuflen //deprecated
pkg syscall (freebsd-arm64), func BpfBuflen(int) (int, error)
pkg syscall (freebsd-arm64), func BpfDatalink //deprecated