- When a watch is closed by an HTTP2 load balancer and we are told to go away, skip printing the message to stderr by default.
- Spedup kubectl by >10 when calling out to kube-apiserver for discovery information. ([#73345](https://github.com/kubernetes/kubernetes/pull/73345), [@sttts](https://github.com/sttts))

- Added a `Stream` field to `PodLogOptions`, which allows clients to request certain log stream (stdout or stderr) of the container.

- Kubectl version changed to write a warning message to stderr if the client and server version difference exceeds the supported version skew of +/-1 minor version. ([#98250](https://github.com/kubernetes/kubernetes/pull/98250), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]

- Update the system-validators library to v1.5.0. Includes validation for `seccomp` and fixes a stdout/stderr problem in the Docker validator. ([#103390](https://github.com/kubernetes/kubernetes/pull/103390), [@ironyman](https://github.com/ironyman))
- Updates the following images to pick up CVE fixes:
  - `debian` to v1.8.0

func writeSTSErrorResponse(ctx context.Context, w http.ResponseWriter, errCode STSErrorCode, err error) {
	stsErr := stsErrCodes.ToSTSErr(errCode)

	// Generate error response.
	stsErrorResponse := STSErrorResponse{}
	stsErrorResponse.Error.Code = stsErr.Code
	stsErrorResponse.RequestID = w.Header().Get(xhttp.AmzRequestID)
	stsErrorResponse.Error.Message = stsErr.Description
	if err != nil {
		stsErrorResponse.Error.Message = err.Error()
	}

pkg syscall (freebsd-arm64), type Timeval struct, Sec int64
pkg syscall (freebsd-arm64), type Timeval struct, Usec int64
pkg syscall (freebsd-arm64), type WaitStatus uint32
pkg syscall (freebsd-arm64), var Stderr int
pkg syscall (freebsd-arm64), var Stdin int
pkg syscall (freebsd-arm64), var Stdout int
pkg syscall (freebsd-arm64-cgo), const AF_APPLETALK = 16
pkg syscall (freebsd-arm64-cgo), const AF_APPLETALK ideal-int

pkg syscall (darwin-arm64), type Timeval32 struct, Sec int32
pkg syscall (darwin-arm64), type Timeval32 struct, Usec int32
pkg syscall (darwin-arm64), type WaitStatus uint32
pkg syscall (darwin-arm64), var Stderr int
pkg syscall (darwin-arm64), var Stdin int
pkg syscall (darwin-arm64), var Stdout int
pkg syscall (darwin-arm64-cgo), const AF_APPLETALK = 16
pkg syscall (darwin-arm64-cgo), const AF_APPLETALK ideal-int

pkg syscall (netbsd-arm64-cgo), type Timeval struct, Sec int64
pkg syscall (netbsd-arm64-cgo), type Timeval struct, Usec int32
pkg syscall (netbsd-arm64-cgo), type WaitStatus uint32
pkg syscall (netbsd-arm64-cgo), var Stderr int
pkg syscall (netbsd-arm64-cgo), var Stdin int
pkg syscall (netbsd-arm64-cgo), var Stdout int
pkg syscall (netbsd-arm64), const AF_APPLETALK = 16
pkg syscall (netbsd-arm64), const AF_APPLETALK ideal-int

- Kubeadm: all warning messages are printed to stderr instead of stdout. ([#107467](https://github.com/kubernetes/kubernetes/pull/107467), [@SataQiu](https://github.com/SataQiu))

  - `kubectl` outputs warnings to stderr, and accepts a `--warnings-as-errors` option to treat warnings as fatal errors
  - `k8s.io/client-go` outputs warnings to stderr by default; override this per-client by setting `config.WarningHandler`, or per-process with `rest.SetDefaultWarningHandler()`