- K8s.io/dynamic-resource-allocation/controller: UnsuitableNodes did not handle a mix of allocated and unallocated claims correctly. ([#120338](https://github.com/kubernetes/kubernetes/pull/120338), [@pohly](https://github.com/pohly)) [SIG Node]

Harshavardhana <******@****.***> 1744208919 -0700

     * Searches for classes handled by this instance and calls the handler for each class.
     * <p>
     * If a root package is specified at instance construction, only classes under the root package are targeted.
     * </p>
     *
     * @param handler the handler to process classes
     */
    void forEach(ClassHandler handler);

    /**
     * Searches for resources handled by this instance and calls the handler for each resource.

            disableExternalResources(parser);
            parser.parse(in, handler);
        } catch (final Exception e) {
            throw new SitemapsException("Could not parse XML Sitemaps Index.", e);
        }
        return handler.getSitemapSet();
    }

    /**
     * SAX handler for parsing XML sitemap indexes.
     */

- The `baseline` and `restricted` pod security admission levels blocked setting the `host` field on probe and lifecycle handlers. ([#125271](https://github.com/kubernetes/kubernetes/pull/125271), [@tssurya](https://github.com/tssurya)) [SIG Auth, Node and Testing]

        }

        /**
         * Writes the content of the response to the CurlResponse.
         *
         * @param handler the input stream supplier
         */
        private void writeContent(final Supplier<InputStream> handler) {
            try (BufferedInputStream bis = new BufferedInputStream(handler.get());
                    ContentOutputStream dfos = new ContentOutputStream(threshold, Curl.tmpDir)) {

        // Arrange
        SmbPipeOutputStream out = newStream();
        when(handle.ensureOpen()).thenReturn(fileHandle);

        // Act
        SmbFileHandleImpl result = out.ensureOpen();

        // Assert
        assertSame(fileHandle, result, "ensureOpen should return handle's file handle");
        verify(handle, times(1)).ensureOpen();
    }

    @Test

        when(mockCifsContext.getCredentials()).thenReturn(mockCredentials);

        // Create URL handler
        Handler urlHandler = new jcifs.smb.Handler(mockCifsContext);
        when(mockCifsContext.getUrlHandler()).thenReturn(urlHandler);

        // Use the URL handler to create the URL
        url = new URL(null, "smb://localhost/share/file.txt", urlHandler);

- 'Container `preStop` and `postStart` lifecycle handlers using `httpGet` now
  honor the specified `scheme` and `headers` fields. This enables setting custom
  headers and changing the scheme to `HTTPS`, consistent with container
  startup/readiness/liveness probe capabilities. Lifecycle handlers configured
  with `scheme: HTTPS` that encounter errors indicating the endpoint is actually

        this.retryDelayMs = retryDelayMs;
    }

    /**
     * Create error handler with default settings
     *
     * @param statistics statistics tracker
     */
    public RdmaErrorHandler(RdmaStatistics statistics) {
        this(statistics, 3, 1000); // 3 retries with 1 second delay
    }

    /**
     * Handle RDMA connection error and attempt recovery
     *