* New behavior:
      * Only `container_name`, `pod_name`, `namespace`, `id`, `image`, and `name` labels are exposed
      * no environment variables will be exposed ever via /metrics, even if whitelisted
* Filter duplicate network packets in promiscuous bridge mode (with ebtables) ([#28717](https://github.com/kubernetes/kubernetes/pull/28717), [@freehan](https://github.com/freehan))

- Watch requests are now handled throttled by priority and fairness filter in `kube-apiserver`. ([#102171](https://github.com/kubernetes/kubernetes/pull/102171), [@wojtek-t](https://github.com/wojtek-t))

pkg syscall (netbsd-arm64-cgo), type Kevent_t struct, Data int64
pkg syscall (netbsd-arm64-cgo), type Kevent_t struct, Fflags uint32
pkg syscall (netbsd-arm64-cgo), type Kevent_t struct, Filter uint32
pkg syscall (netbsd-arm64-cgo), type Kevent_t struct, Flags uint32
pkg syscall (netbsd-arm64-cgo), type Kevent_t struct, Ident uint64
pkg syscall (netbsd-arm64-cgo), type Kevent_t struct, Pad_cgo_0 [4]uint8

pkg syscall (freebsd-arm64), type Kevent_t struct
pkg syscall (freebsd-arm64), type Kevent_t struct, Data int64
pkg syscall (freebsd-arm64), type Kevent_t struct, Fflags uint32
pkg syscall (freebsd-arm64), type Kevent_t struct, Filter int16
pkg syscall (freebsd-arm64), type Kevent_t struct, Flags uint16
pkg syscall (freebsd-arm64), type Kevent_t struct, Ident uint64
pkg syscall (freebsd-arm64), type Kevent_t struct, Udata *uint8

pkg syscall (darwin-arm64), type Kevent_t struct
pkg syscall (darwin-arm64), type Kevent_t struct, Data int64
pkg syscall (darwin-arm64), type Kevent_t struct, Fflags uint32
pkg syscall (darwin-arm64), type Kevent_t struct, Filter int16
pkg syscall (darwin-arm64), type Kevent_t struct, Flags uint16
pkg syscall (darwin-arm64), type Kevent_t struct, Ident uint64
pkg syscall (darwin-arm64), type Kevent_t struct, Udata *uint8

- Optimize code, filter podUID is empty string when call this `getPodAndContainerForDevice` method. ([#126997](https://github.com/kubernetes/kubernetes/pull/126997), [@lengrongfu](https://github.com/lengrongfu)) [SIG Node]

* Enable basic auth username rotation for GCI ([#44590](https://github.com/kubernetes/kubernetes/pull/44590), [@ihmccreery](https://github.com/ihmccreery))
* vSphere cloud provider: Filter out IPV6 node addresses. ([#45181](https://github.com/kubernetes/kubernetes/pull/45181), [@BaluDontu](https://github.com/BaluDontu))

* fix: azure disk could not mounted on Standard_DC4s/DC2s instances ([#86612](https://github.com/kubernetes/kubernetes/pull/86612), [@andyzhangx](https://github.com/andyzhangx))
* Filter published OpenAPI schema by making nullable, required fields non-required in order to avoid kubectl to wrongly reject null values. ([#85722](https://github.com/kubernetes/kubernetes/pull/85722), [@sttts](https://github.com/sttts))

s","parseIso","base","isBefore","positiveMomentsDifference","momentsDifference","inp","isAfter","createAdder","direction","period","tmp","addSubtract","isAdding","invalid","subtract","isString","String","isMomentInput","arrayTest","dataTypeTest","filter","item","isNumberOrStringArray","property","objectTest","propertyTest","properties","isMomentInputObject","monthDiff","wholeMonthDiff","anchor","adjust","newLocaleData","defaultFormat","defaultFormatUtc","lang","MS_PER_400_YEARS","mod$1","dividen...

)}Ga.fn=Wa.prototype,Ga.invalid=function(){return Ga(NaN)};var Za=Ka(1,"add"),$a=Ka(-1,"subtract");function Qa(e){return"string"==typeof e||e instanceof String}function Xa(e){return D(e)||d(e)||Qa(e)||m(e)||function(a){var e=i(a),t=!1;e&&(t=0===a.filter(function(e){return!m(e)&&Qa(a)}).length);return e&&t}(e)||function(e){var a,t,s=_(e)&&!o(e),n=!1,r=["years","year","y","months","month","M","days","day","d","dates","date","D","hours","hour","h","minutes","minute","m","seconds","second","s","mill...