### CVE-2024-5321: Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes
where BUILTIN\Users may be able to read container logs and NT
AUTHORITY\Authenticated Users may be able to modify container logs.

**Affected Versions**:
  - kubelet <= 1.27.15
  - kubelet <= 1.28.11
  - kubelet <= 1.29.6

    TF_Graph* graph, TF_Buffer* meta_graph_def, TF_Status* status) {
// TODO(sjr): Remove the IS_MOBILE_PLATFORM guard. This will require ensuring
// that the tensorflow/cc/saved_model:loader build target is mobile friendly.
#if defined(IS_MOBILE_PLATFORM) || defined(IS_SLIM_BUILD)
  status->status = tensorflow::errors::Unimplemented(
      "Loading a SavedModel is not supported on mobile. File a bug at "

// TODO(ashankar): Use gmock matchers instead?
// (https://github.com/google/googletest/blob/master/googlemock/docs/CookBook.md#writing-new-parameterized-matchers-quickly)
// That will require setting up the tensorflow build with gmock.
#define EXPECT_TF_META(attr_name, expected_list_size, expected_type, \
                       expected_total_size)                          \
  do {                                                               \

fHlMq4lPjlK2ewQHsr9peEKymDw5_XwZm8Q/edit?usp=sharing)). Bug fixes across bare metal tooling and production-ready user stories, such as the high availability use cases have been given priority for 1.15.

kubeadm, the cluster lifecycle building block, continues to receive features and stability work required for bootstrapping production clusters efficiently. kubeadm has promoted high availability (HA) capability to beta, allowing users to use the familiar `kubeadm init` and `kubeadm join`...

unnecessary redirection from ci/latest.txt to ci-cross/latest.txt. Users should know exactly where the builds are stored on Google Cloud storage buckets from now on. For example for 1.9 and 1.10, users can specify ci/latest-1.9 and ci/latest-1.10 as the CI build jobs what build images correctly updates those. The CI jobs for master update the ci-cross/latest location, so if you are looking for latest master builds, then the correct parameter to use would be ci-cross/latest. ([#63504](https://github.com/ku...

- The go version defined in `.go-version` is now fetched when invoking test, build, and code generation targets if the current go version does not match it. Set $FORCE_HOST_GO=y while testing or building to skip this behavior, or set $GO_VERSION to override the selected go version. ([#115498](https://github.com/kubernetes/kubernetes/pull/115498), [@liggitt](https://github.com/liggitt)) [SIG...

    * This PR added a new subcommand `kustomize` in kubectl. 
    *   kubectl kustomize <somedir> has the same effect as kustomize build <somedir>
    * To build API resources from somedir with a kustomization.yaml file
    *    kubectl kustomize <somedir>
    * This command can be piped to apply or delete 
    *    kubectl kustomize <somedir> | kubectl apply -f -

quarkus/independent-projects/arc/tcks/arquillian/pom.xml
	quarkus/independent-projects/arc/processor/pom.xml
quarkus/extensions/smallrye-jwt-build/deployment/pom.xml
	quarkus/core/deployment/pom.xml
	quarkus/extensions/jsonp/deployment/pom.xml
	quarkus/extensions/smallrye-jwt-build/runtime/pom.xml
	quarkus/extensions/arc/deployment/pom.xml
	quarkus/test-framework/junit5-internal/pom.xml

- Make / build: fix docker IP address detection ([#135577](https://github.com/kubernetes/kubernetes/pull/135577), [@BenTheElder](https://github.com/BenTheElder)) [SIG Release and Testing]

pkg debug/plan9obj, type Sym struct, Name string
pkg debug/plan9obj, type Sym struct, Type int32
pkg debug/plan9obj, type Sym struct, Value uint64
pkg encoding/asn1, method (ObjectIdentifier) String() string
pkg go/build, type Package struct, MFiles []string
pkg math/big, method (*Int) MarshalText() ([]uint8, error)
pkg math/big, method (*Int) UnmarshalText([]uint8) error
pkg math/big, method (*Rat) MarshalText() ([]uint8, error)