* Support whitespace in command path for gcp auth plugin ([#41653](https://github.com/kubernetes/kubernetes/pull/41653), [@jlowdermilk](https://github.com/jlowdermilk))
* client-go no longer imports GCP OAuth2 and OpenID Connect packages by default. ([#41532](https://github.com/kubernetes/kubernetes/pull/41532), [@ericchiang](https://github.com/ericchiang))

* Add the `alpha.image-policy.k8s.io/failed-open=true` annotation when the image policy webhook encounters an error and fails open. ([#46264](https://github.com/kubernetes/kubernetes/pull/46264), [@Q-Lee](https://github.com/Q-Lee))

.main-footer {\n    transition: none;\n  }\n}\n\n.control-sidebar-open .control-sidebar {\n  display: block !important;\n}\n\n.control-sidebar-open .control-sidebar, .control-sidebar-open .control-sidebar::before {\n  right: 0;\n}\n\n.control-sidebar-open.control-sidebar-push .content-wrapper,\n.control-sidebar-open.control-sidebar-push .main-footer, .control-sidebar-open.control-sidebar-push-slide .content-wrapper,\n.control-sidebar-open.control-sidebar-push-slide .main-footer {\n  margin-right: 25...

pkg syscall (linux-386), func NetlinkRIB(int, int) ([]uint8, error)
pkg syscall (linux-386), func NsecToTimespec(int64) Timespec
pkg syscall (linux-386), func Open(string, int, uint32) (int, error)
pkg syscall (linux-386), func Openat(int, string, int, uint32) (int, error)
pkg syscall (linux-386), func ParseDirent([]uint8, int, []string) (int, int, []string)

 - The 'kubeadm config upload' command is finally removed after a full GA...

pkg syscall (netbsd-arm64-cgo), type Termios struct, Lflag uint32
pkg syscall (netbsd-arm64-cgo), type Termios struct, Oflag uint32
pkg syscall (netbsd-arm64-cgo), type Termios struct, Ospeed int32
pkg syscall (netbsd-arm64-cgo), type Timespec struct, Nsec int64
pkg syscall (netbsd-arm64-cgo), type Timespec struct, Sec int64
pkg syscall (netbsd-arm64-cgo), type Timeval struct, Pad_cgo_0 [4]uint8

pkg runtime/cgo (netbsd-arm64-cgo), type Incomplete struct #46731
pkg runtime/cgo (netbsd-arm-cgo), type Incomplete struct #46731
pkg runtime/cgo (openbsd-386-cgo), type Incomplete struct #46731
pkg runtime/cgo (openbsd-amd64-cgo), type Incomplete struct #46731
pkg runtime/coverage, func ClearCounters() error #51430
pkg runtime/coverage, func WriteCountersDir(string) error #51430

* 🔧 Add LLM prompt file for Japanese, generated from the existing translations. PR [#14545](https://github.com/fastapi/fastapi/pull/14545) by [@tiangolo](https://github.com/tiangolo).

### Internal

* ⬆️ Upgrade OpenAI model for translations to gpt-5.2. PR [#14579](https://github.com/fastapi/fastapi/pull/14579) by [@tiangolo](https://github.com/tiangolo).

## 0.126.0

### Upgrades

counter < g.next { panic("crypto/cipher: counter decreased") } g.next = counter + 1 fips140.RecordApproved() return g.g.sealAfterIndicator(dst, nonce, plaintext, data) } func (g *GCMWithCounterNonce) Open(dst, nonce, ciphertext, data []byte) ([]byte, error) { fips140.RecordApproved() return g.g.Open(dst, nonce, ciphertext, data) } // NewGCMForTLS12 returns a new AEAD that works like GCM, but enforces the // construction of nonces as specified in RFC 5288, Section 3 and RFC 9325, // Section 7.2.1....

panic("crypto/cipher: counter decreased or remained the same") } g.next = counter + 1 } fips140.RecordApproved() return g.g.sealAfterIndicator(dst, nonce, plaintext, data) } func (g *GCMWithCounterNonce) Open(dst, nonce, ciphertext, data []byte) ([]byte, error) { fips140.RecordApproved() return g.g.Open(dst, nonce, ciphertext, data) } // NewGCMWithXORCounter returns a new AEAD that works like GCM, but // enforces the construction of deterministic nonces. The nonce must be 96 bits, // the first 32 bits...