- Added `SchedulerPopFromBackoffQ` feature gate that is in beta and enabled by default. Improved scheduling queue behavior by popping pods from the backoffQ when the activeQ is empty. This allows to process potentially schedulable pods ASAP, eliminating a penalty effect of the backoff queue. ([#130772](https://github.com/kubernetes/kubernetes/pull/130772), [@macsko](https://github.com/macsko)) [SIG Scheduling and Testing]...

- Services with `externalTrafficPolicy: Local` now support graceful termination when using
  the iptables or ipvs mode of kube-proxy with EndpointSlices enabled. Specifically, if a
  connection for such a service arrives on a node when there are no "Ready" endpoints

      file or class name and description of purpose be included on the
      same "printed page" as the copyright notice for easier
      identification within third-party archives.

   Copyright [yyyy] [name of copyright owner]

   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

- DeleteOptions parameters for deletecollection endpoints are now published in the OpenAPI spec. ([#77843](https://github.com/kubernetes/kubernetes/pull/77843), [@roycaihw](https://github.com/roycaihw))
- Active watches of custom resources now terminate properly if the CRD is modified. ([#78029](https://github.com/kubernetes/kubernetes/pull/78029), [@liggitt](https://github.com/liggitt))

func (c *SiteReplicationSys) newConcErr(errMap map[string]error, actionName string) error {
	return concErr{
		errMap:     errMap,
		summaryErr: c.toErrorFromErrMap(errMap, actionName),
	}
}

// concDo calls actions concurrently. selfActionFn is run for the current
// cluster and peerActionFn is run for each peer replication cluster.

    *   Add tf_api_version flag. If --define=tf_api_version=2 flag is passed in,
        then bazel will build TensorFlow API version 2.0. Note that TensorFlow
        2.0 is under active development and has no guarantees at this point.
    *   Add additional compression options to TfRecordWriter.
    *   Performance improvements for regex full match operations.

    <_comment>AppleScript source code</_comment>
    <glob pattern="*.applescript"/>
    <sub-class-of type="text/plain"/>
  </mime-type>

  <mime-type type="text/asp" interpreted="true">
    <_comment>Active Server Page</_comment>
    <glob pattern="*.asp"/>
    <sub-class-of type="text/plain"/>
  </mime-type>

  <mime-type type="text/aspdotnet" interpreted="true">
    <_comment>ASP .NET</_comment>

* The node authorizer now allows nodes to request service account tokens for the service accounts of pods running on them. This allows agents using the node identity to take actions on behalf of local pods. ([#55019](https://github.com/kubernetes/kubernetes/pull/55019), [@mikedanese](https://github.com/mikedanese))

A security issue was discovered in kube-apiserver that could allow an attacker controlled aggregated API server to redirect client traffic to any URL.  This could lead to the client performing unexpected actions as well as leaking the client's credentials to third parties. 

pkg syscall (linux-arm-cgo), type Ustat_t struct, Tfree int32
pkg syscall (linux-arm-cgo), type Ustat_t struct, Tinode uint32
pkg syscall (linux-arm-cgo), type Utimbuf struct
pkg syscall (linux-arm-cgo), type Utimbuf struct, Actime int32
pkg syscall (linux-arm-cgo), type Utimbuf struct, Modtime int32
pkg syscall (linux-arm-cgo), type Utsname struct
pkg syscall (linux-arm-cgo), type Utsname struct, Domainname [65]uint8