- The `AuthorizeWithSelectors` feature gate enables including field and label selector information from requests in webhook authorization calls.

- When feature gate `JobTrackingWithFinalizers` is enabled:
  - Limit the number of Pods tracked in a single Job sync to avoid starvation of small Jobs.

- `topologySpreadConstraints` includes `minDomains` field to limit the minimum number of topology domains. ([#107674](https://github.com/kubernetes/kubernetes/pull/107674), [@sanposhiho](https://github.com/sanposhiho))

### Feature

- Register/Deregister Targets in chunks for AWS TargetGroup ([#101592](https://github.com/kubernetes/kubernetes/pull/101592), [@M00nF1sh](https://github.com/M00nF1sh)) [SIG Cloud Provider]

hintDecode(y []byte, h [][n]byte, p parameters) error { ω, k := p.ω, p.k if len(y) != ω+k { return errors.New("mldsa: internal error: invalid signature hint length") } var idx byte for i := range k { limit := y[ω+i] if limit < idx || limit > byte(ω) { return errInvalidSignatureH } first := idx for idx < limit { if idx > first && y[idx-1] >= y[idx] { return errInvalidSignatureH } h[i][y[idx]] = 1 idx++ } } for i := idx; i < byte(ω); i++ { if y[i] != 0 { return errInvalidSignatureH } } return nil } gol...