A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated.

**Affected Versions**:
  - kube-apiserver v1.29.0 - v1.29.3
  - kube-apiserver v1.28.0 - v1.28.8
  - kube-apiserver <= v1.27.12

- Kubeadm: added `show-join-command` as a new separate phase at the end of `kubeadm init`. You can skip printing the join information by using `kubeadm init --skip-phases=show-join-command`. Executing only this phase on demand will throw an error because the phase needs dependencies such as bootstrap tokens to be pre-populated. ([#111512](https://github.com/kubernetes...

- Fixes regression in CPUManager that had the (rare) possibility to release exclusive CPUs in app containers inherited from init containers. ([#90419](https://github.com/kubernetes/kubernetes/pull/90419), [@klueska](https://github.com/klueska)) [SIG Node]

`v1beta1.KubeletConfiguration`. The new patch target is called `kubeletconfiguration` (e.g. patch file `kubeletconfiguration+json.json`).This makes it possible to apply node specific KubeletConfiguration options during `init`, `join` and `upgrade`, while the main `KubeletConfiguration` that is passed to `init` as part of the `--config` file can still act as the global stored in the cluster `KubeletConfiguration`. ([#110405](https://github.com/kubernetes/kubernetes/pull/110405), [@neolit123](https://github.com/neolit123))...

- [`KT-61933`](https://youtrack.jetbrains.com/issue/KT-61933) K2: "`Argument type mismatch: actual type is 'Foo<kotlin/Function0<kotlin/Unit>>' but 'Foo<kotlin/coroutines/SuspendFunction0<kotlin/Unit>>' was expected`"
- [`KT-59471`](https://youtrack.jetbrains.com/issue/KT-59471) K2: build multiplatform-settings
- [`KT-56077`](https://youtrack.jetbrains.com/issue/KT-56077) K2: build kotlinx.atomicfu

pkg syscall (darwin-arm64), const AF_DATAKIT = 9
pkg syscall (darwin-arm64), const AF_DATAKIT ideal-int
pkg syscall (darwin-arm64), const AF_DECnet = 12
pkg syscall (darwin-arm64), const AF_DECnet ideal-int
pkg syscall (darwin-arm64), const AF_DLI = 13
pkg syscall (darwin-arm64), const AF_DLI ideal-int
pkg syscall (darwin-arm64), const AF_E164 = 28
pkg syscall (darwin-arm64), const AF_E164 ideal-int

pkg syscall (netbsd-arm64-cgo), const AF_DLI = 13
pkg syscall (netbsd-arm64-cgo), const AF_DLI ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_E164 = 26
pkg syscall (netbsd-arm64-cgo), const AF_E164 ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_ECMA = 8
pkg syscall (netbsd-arm64-cgo), const AF_ECMA ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_HYLINK = 15
pkg syscall (netbsd-arm64-cgo), const AF_HYLINK ideal-int

    ...


@app.get("/items/{item_id}")
def read_item(*, user: User = Depends(get_current_user), item_id: int):
    ...


@app.delete("/items/{item_id}")
def delete_item(*, user: User = Depends(get_current_user), item_id: int):
    ...
```

There's a bit of code duplication for the dependency:

```Python
user: User = Depends(get_current_user)
```

## Changelog since v1.12.0

### Other notable changes

* kubeadm now allows mixing of init/cluster and join configuration in a single YAML file (although a warning gets printed in this case).  ([#69426](https://github.com/kubernetes/kubernetes/pull/69426), [@rosti](https://github.com/rosti))

static MethodSorters valueOf(String); private void MethodSorters(String, int, java.util.Comparator); public java.util.Comparator getComparator(); static void <clinit>(); } org/junit/runners/RuleContainer$1.class package org.junit.runners; final synchronized class RuleContainer$1 implements java.util.Comparator { void RuleContainer$1(); public int compare(RuleContainer$RuleEntry, RuleContainer$RuleEntry); private int compareInt(int, int); } org/junit/runners/ParentRunner$ClassRuleCollector.class package...