- Slow container runtime initialization no longer causes the System WatchDog to kill the kubelet. The Device Manager was treated as unhealthy until it began listening on its port. ([#135153](https://github.com/kubernetes/kubernetes/pull/135153), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev))

- github.com/grpc-ecosystem/go-grpc-middleware: cfaf568 → f849b54
- github.com/grpc-ecosystem/grpc-gateway: v1.3.0 → v1.9.5
- github.com/heketi/heketi: v9.0.0+incompatible → c2e2a4a
- github.com/json-iterator/go: v1.1.7 → v1.1.8
- github.com/mailru/easyjson: 94de47d → v0.7.0
- github.com/mattn/go-isatty: v0.0.3 → v0.0.9
- github.com/mindprince/gonvml: fee913c → 9ebdce4
- github.com/mrunalp/fileutils: 4ee1cc9 → 7d4729f

* Mirror pods must now indicate the nodeName they are bound to on creation. The mirror pod annotation is now treated as immutable and cannot be added to an existing pod, removed from a pod, or modified. ([#45775](https://github.com/kubernetes/kubernetes/pull/45775), [@liggitt](https://github.com/liggitt))

### Kustomize Updates in Kubectl

[Kustomize](https://github.com/kubernetes-sigs/kustomize) version in kubectl had a jump from v2.0.3 to [v4.0.5](https://github.com/kubernetes/kubernetes/pull/98946). Kustomize is now treated as a library and future updates will be less sporadic.

### Default Container Annotation

- Kube-apiserver: resolved a regression that treated `304 Not Modified` responses from aggregated API servers as internal errors ([#112527](https://github.com/kubernetes/kubernetes/pull/112527), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]

- Kube-apiserver: resolved a regression that treated `304 Not Modified` responses from aggregated API servers as internal errors ([#112528](https://github.com/kubernetes/kubernetes/pull/112528), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]

of a CAST or PCT failure, // as required during FIPS 140-3 functional testing. The value is the whole name // of the target CAST or PCT. var failfipscast = godebug.Value("#failfipscast") // CAST runs the named Cryptographic Algorithm Self-Test (if operated in FIPS // mode) and aborts the program (stopping the module input/output and entering // the "error state") if the self-test fails. // // CASTs are mandatory self-checks that must be performed by FIPS 140-3 modules // before the algorithm is used....

of a CAST or PCT failure, // as required during FIPS 140-3 functional testing. The value is the whole name // of the target CAST or PCT. var failfipscast = godebug.Value("#failfipscast") // CAST runs the named Cryptographic Algorithm Self-Test (if operated in FIPS // mode) and aborts the program (stopping the module input/output and entering // the "error state") if the self-test fails. // // CASTs are mandatory self-checks that must be performed by FIPS 140-3 modules // before the algorithm is used....

pkg go/token, method (*FileSet) AddFile(string, int, int) *File
pkg go/token, method (*FileSet) Base() int
pkg go/token, method (*FileSet) File(Pos) *File
pkg go/token, method (*FileSet) Iterate(func(*File) bool)
pkg go/token, method (*FileSet) Position(Pos) Position
pkg go/token, method (*FileSet) Read(func(interface{}) error) error
pkg go/token, method (*FileSet) Write(func(interface{}) error) error