- [Kubelet Credential Provider Graduates to Beta](#kubelet-credential-provider-graduates-to-beta)
    - [Contextual Logging in Alpha](#contextual-logging-in-alpha)
    - [Avoiding Collisions in IP allocation to Services](#avoiding-collisions-in-ip-allocation-to-services)
  - [Urgent Upgrade Notes](#urgent-upgrade-notes)
    - [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade)

- The API server now re-uses data encryption keys while the kms v2 plugin key ID is stable.  Data encryption keys are still randomly generated on server start but an atomic counter is used to prevent nonce collisions. ([#116155](https://github.com/kubernetes/kubernetes/pull/116155), [@enj](https://github.com/enj))

[files]
extend-exclude = [
    ".git/",
    "docs/",
    "CREDITS",
    "go.mod",
    "go.sum",
]
ignore-hidden = false

[default]
extend-ignore-re = [
    "Patrick Collison",
    "Copyright 2014 Unknwon",
    "[0-9A-Za-z/+=]{64}",
    "ZXJuZXQxDjAMBgNVBA-some-junk-Q4wDAYDVQQLEwVNaW5pbzEOMAwGA1UEAxMF",
    "eyJmb28iOiJiYXIifQ",
    "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.*",
    "MIIDBTCCAe2gAwIBAgIQWHw7h.*",

- The names of ResourceClaims generated from ResourceClaimTemplate are now generated. The base name is still `<pod>-<claim name>`, but a random suffix will avoid name collisions. ([#117351](https://github.com/kubernetes/kubernetes/pull/117351), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, Node, Scheduling and Testing]

pkg syscall (netbsd-arm64-cgo), type IfData struct, Addrlen uint8
pkg syscall (netbsd-arm64-cgo), type IfData struct, Baudrate uint64
pkg syscall (netbsd-arm64-cgo), type IfData struct, Collisions uint64
pkg syscall (netbsd-arm64-cgo), type IfData struct, Hdrlen uint8
pkg syscall (netbsd-arm64-cgo), type IfData struct, Ibytes uint64
pkg syscall (netbsd-arm64-cgo), type IfData struct, Ierrors uint64

pkg syscall (freebsd-arm64), type IfData struct
pkg syscall (freebsd-arm64), type IfData struct, Addrlen uint8
pkg syscall (freebsd-arm64), type IfData struct, Baudrate uint64
pkg syscall (freebsd-arm64), type IfData struct, Collisions uint64
pkg syscall (freebsd-arm64), type IfData struct, Datalen uint8
pkg syscall (freebsd-arm64), type IfData struct, Epoch int64
pkg syscall (freebsd-arm64), type IfData struct, Hdrlen uint8

pkg syscall (darwin-arm64), type IfData struct
pkg syscall (darwin-arm64), type IfData struct, Addrlen uint8
pkg syscall (darwin-arm64), type IfData struct, Baudrate uint32
pkg syscall (darwin-arm64), type IfData struct, Collisions uint32
pkg syscall (darwin-arm64), type IfData struct, Hdrlen uint8
pkg syscall (darwin-arm64), type IfData struct, Hwassist uint32
pkg syscall (darwin-arm64), type IfData struct, Ibytes uint32

* Deployments are updated to use (1) a more stable hashing algorithm (fnv) than the previous one (adler) and (2) a hashing collision avoidance mechanism that will ensure new rollouts will not block on hashing collisions anymore. ([#44774](https://github.com/kubernetes/kubernetes/pull/44774), [@kargakis](https://github.com/kargakis))

    assertSame(value, segment.get(key, hash));
    assertTrue(segment.containsKey(key, hash));
    assertTrue(segment.containsValue(value));
    assertFalse(segment.containsValue(nullValue));

    // hash collision
    InternalEntry<Object, Object, ?> dummyEntry =
        segment.newEntryForTesting(new Object(), hash, entry);
    Object dummyValue = new Object();
    WeakValueReference<Object, Object, ?> dummyValueRef =

    assertSame(value, segment.get(key, hash));
    assertTrue(segment.containsKey(key, hash));
    assertTrue(segment.containsValue(value));
    assertFalse(segment.containsValue(nullValue));

    // hash collision
    InternalEntry<Object, Object, ?> dummyEntry =
        segment.newEntryForTesting(new Object(), hash, entry);
    Object dummyValue = new Object();
    WeakValueReference<Object, Object, ?> dummyValueRef =