- Updated cAdvisor to v0.45.0. ([#111647](https://github.com/kubernetes/kubernetes/pull/111647), [@bobbypage](https://github.com/bobbypage))
- Updated debian-base, debian-iptables, and setcap images:
  - debian-base:bullseye-v1.3.0
  - debian-iptables:bullseye-v1.4.0
  - setcap:bullseye-v1.3.0 ([#110558](https://github.com/kubernetes/kubernetes/pull/110558), [@wespanther](https://github.com/wespanther))

## Changelog since v1.20.12

## Changes by Kind

### Feature

- Update debian-base, debian-iptables, setcap images to pick up CVE fixes
  - Debian-base to v1.9.0
  - Debian-iptables to v1.6.7 (#106148, @cpanato) [SIG Release and Testing]

### Failing Test

staba.jp
stackhero-network.com
stackit.gg
stackit.rocks
stackit.run
stackit.zone
stada
stage.nodeart.io
staging.expo.app
staging.replit.dev
stalowa-wola.pl
stange.no
staples
star
starachowice.pl
stargard.pl
starostwo.gov.pl
stat.no
statebank
statefarm
stathelle.no
static-access.net
static.hf.space
static.observableusercontent.com
stavanger.no

## Changelog since v1.33.5

## Changes by Kind

### Feature

- Kubernetes is now built using Go 1.24.9
  - update setcap and debian-base to bookworm-v1.0.6 ([#134613](https://github.com/kubernetes/kubernetes/pull/134613), [@cpanato](https://github.com/cpanato)) [SIG Architecture, Cloud Provider, Etcd, Release, Storage and Testing]

### Bug or Regression

hangeInProgress","parseZone","tZone","hasAlignedHourOffset","isDST","isUtcOffset","zoneAbbr","zoneName","dates","isDSTShifted","_isDSTShifted","array1","array2","dontConvert","lengthDiff","diffs","compareArrays","proto$1","get$1","index","field","setter","listMonthsImpl","out","listWeekdaysImpl","localeSorted","shift","_calendar","_longDateFormat","formatUpper","toUpperCase","tok","_invalidDate","_ordinal","isFuture","_relativeTime","pastFuture","source","_eras","Infinity","isFormat","_monthsSho...

- Kubernetes is now built with go 1.21.7
  - update setcap/debian-base to bookworm-v1.0.1

## Changelog since v1.32.9

## Changes by Kind

### Feature

- Kubernetes is now built using Go 1.24.9
  - update setcap and debian-base to bookworm-v1.0.6 ([#134617](https://github.com/kubernetes/kubernetes/pull/134617), [@cpanato](https://github.com/cpanato)) [SIG Architecture, Auth, Cloud Provider, Etcd, Release, Storage and Testing]

## Changelog since v1.31.13

## Changes by Kind

### Feature

- Kubernetes is now built using Go 1.24.9
  - update setcap and debian-base to bookworm-v1.0.6 ([#134618](https://github.com/kubernetes/kubernetes/pull/134618), [@cpanato](https://github.com/cpanato)) [SIG API Machinery, Architecture, Cloud Provider, Etcd, Release, Storage and Testing]

- Updates the following images to pick up CVE fixes:
  - `debian` to v1.8.0
  - `debian-iptables` to v1.6.5
  - `setcap` to v2.0.3 ([#103235](https://github.com/kubernetes/kubernetes/pull/103235), [@thejoycekung](https://github.com/thejoycekung)) [SIG API Machinery, Release and Testing]

### Bug or Regression

pkg net, type Dialer struct, DualStack bool
pkg net/smtp, method (*Client) Close() error
pkg os (linux-arm), const O_SYNC = 1052672
pkg os (linux-arm-cgo), const O_SYNC = 1052672
pkg reflect, method (Value) SetCap(int)
pkg reflect, method (Value) Slice3(int, int, int) Value
pkg runtime, type MemStats struct, GCSys uint64
pkg runtime, type MemStats struct, OtherSys uint64
pkg runtime/debug, func SetMaxStack(int) int