### Bug or Regression

- Fixes a race condition in the iptables mode of kube-proxy in 1.27 and later
  that could result in some updates getting lost (e.g., when a service gets a
  new endpoint, the rules for the new endpoint might not be added until

pkg syscall (freebsd-386-cgo), func Getrlimit(int, *Rlimit) error
pkg syscall (freebsd-386-cgo), func Getrusage(int, *Rusage) error
pkg syscall (freebsd-386-cgo), func Getsid(int) (int, error)
pkg syscall (freebsd-386-cgo), func Getsockname(int) (Sockaddr, error)
pkg syscall (freebsd-386-cgo), func GetsockoptByte(int, int, int) (uint8, error)

	for id, rl := range rMap {
		if !rl.Expiration.IsNull() || !rl.NoncurrentVersionExpiration.IsNull() {
			if _, ok := newRMap[id]; !ok {
				// if rule getting removed was pure expiry rule (may be got to this site
				// as part of replication of expiry rules), remove it. Otherwise remove
				// only the expiry part of it

  linking directly to the master branch. This ensures that links reference a
  specific point in time, rather than a document that may change over time.
  
  See here for guidance on getting permanent links to files: https://help.github.com/en/articles/getting-permanent-links-to-files
  
  Please use the following format for linking documentation:
  - [KEP]: <link>
  - [Usage]: <link>
  - [Other doc]: <link>

- Revised the logic for DaemonSet rolling update to exclude nodes if scheduling constraints are not met.
  This eliminates the problem of rolling updates to a DaemonSet getting stuck around tolerations. ([#120792](https://github.com/kubernetes/kubernetes/pull/120792), [@mochizuki875](https://github.com/mochizuki875)) [SIG Apps and Testing]

pkg os, func Getegid() int
pkg os, func Getenv(string) string
pkg os, func Geteuid() int
pkg os, func Getgid() int
pkg os, func Getgroups() ([]int, error)
pkg os, func Getpagesize() int
pkg os, func Getpid() int
pkg os, func Getppid() int
pkg os, func Getuid() int
pkg os, func Getwd() (string, error)
pkg os, func Hostname() (string, error)
pkg os, func IsExist(error) bool

pkg syscall (netbsd-arm64-cgo), func Getrlimit(int, *Rlimit) error
pkg syscall (netbsd-arm64-cgo), func Getrusage(int, *Rusage) error
pkg syscall (netbsd-arm64-cgo), func Getsid(int) (int, error)
pkg syscall (netbsd-arm64-cgo), func Getsockname(int) (Sockaddr, error)
pkg syscall (netbsd-arm64-cgo), func GetsockoptByte(int, int, int) (uint8, error)

- Resolves a regression in 1.19+ with workloads targeting deprecated beta os/arch labels getting stuck in NodeAffinity status on node startup. ([#96810](https://github.com/kubernetes/kubernetes/pull/96810), [@liggitt](https://github.com/liggitt)) [SIG Node]

  linking directly to the master branch. This ensures that links reference a
  specific point in time, rather than a document that may change over time.
  
  See here for guidance on getting permanent links to files: https://help.github.com/en/articles/getting-permanent-links-to-files
  
  Please use the following format for linking documentation:
  - [KEP]: <link>
  - [Usage]: <link>
  - [Other doc]: <link>

### Upgrades

* 👽️ Ensure compatibility with Pydantic 2.12.0. PR [#14036](https://github.com/fastapi/fastapi/pull/14036) by [@cjwatson](https://github.com/cjwatson).

### Docs

* 📝 Add External Link: Getting started with logging in FastAPI. PR [#14152](https://github.com/fastapi/fastapi/pull/14152) by [@itssimon](https://github.com/itssimon).

### Translations