- github.com/opencontainers/runc: [f000fe1 → 6cc5158](https://github.com/opencontainers/runc/compare/f000fe1...6cc5158)
- github.com/opencontainers/selinux: [4a2974b → v1.2.2](https://github.com/opencontainers/selinux/compare/4a2974b...v1.2.2)
- github.com/robfig/cron: [df38d32 → v1.1.0](https://github.com/robfig/cron/compare/df38d32...v1.1.0)

github.com/opencontainers/runtime-tools,v0.9.0,h1:FYgwVsKRI/H9hU32MJ/4MLOzXWodKK5zsQavY8NPMkU=,53c720dbb7452cfb2fd3945e37c26b5a0140cb1012d35a2b72a5e035f28a32c4
github.com/opencontainers/selinux,v1.3.0,h1:xsI95WzPZu5exzA6JzkLSfdr/DilzOhCJOqGe5TgR0g=,88286825b32cd46a0469e578f378a185032da2d5b03893623861ef3af59359d8

				},
			},
			err:  "spec.securityContext.seLinuxOptions: Forbidden",
			test: "pod OS changing from Linux to Windows, IdentifyPodOS featuregate set, we'd get SELinux errors as well",
		}, {
			new: core.Pod{
				ObjectMeta: metav1.ObjectMeta{
					Name: "foo",
				},
				Spec: core.PodSpec{
					OS: &core.PodOS{Name: "dummy"},
				},
			},

- Fixed `DaemonSet` to update the status even if it fails to create a pod. ([#113787](https://github.com/kubernetes/kubernetes/pull/113787), [@gjkim42](https://github.com/gjkim42))
- Fixed `SELinux` label for host path volumes created by host path provisioner ([#112021](https://github.com/kubernetes/kubernetes/pull/112021), [@mrunalp](https://github.com/mrunalp))

* kubeadm: Don't set a specific `spc_t` SELinux label on the etcd Static Pod as that is more privs than etcd needs and due to that `spc_t` isn't compatible with some OSes. ([#49328](https://github.com/kubernetes/kubernetes/pull/49328), [@euank](https://github.com/euank))

- github.com/munnerz/goautoneg: a547fc6 → a7dc8b6
- github.com/onsi/ginkgo: v1.8.0 → v1.10.1
- github.com/onsi/gomega: v1.5.0 → v1.7.0
- github.com/opencontainers/runc: 6cc5158 → v1.0.0-rc9
- github.com/opencontainers/selinux: v1.2.2 → 5215b18
- github.com/pkg/errors: v0.8.0 → v0.8.1
- github.com/prometheus/client_golang: v0.9.2 → v1.0.0
- github.com/prometheus/client_model: 5c3871d → fd36f42
- github.com/prometheus/common: 4724e92 → v0.4.1

* Fix kube-controller-manager panic while provisioning Azure security group rules ([#64739](https://github.com/kubernetes/kubernetes/pull/64739), [@feiskyer](https://github.com/feiskyer))
* Fixes issue for readOnly subpath mounts for SELinux systems and when the volume mountPath already existed in the container image. ([#64351](https://github.com/kubernetes/kubernetes/pull/64351), [@msau42](https://github.com/msau42))

id_unsafe_environment_variables.h","kids":[],"cl_weight":0.25,"touches":1,"min_t":1247866588,"max_t":1247866588,"mean_t":1247866588}],"cl_weight":10.770512820512822,"touches":17,"min_t":1247015714,"max_t":1279721617,"mean_t":1254859168},{"name":"selinux","kids":[{"name":"chromium-browser.te","kids":[],"cl_weight":0.16666666666666666,"touches":1,"min_t":1271688673,"max_t":1271688673,"mean_t":1271688673},{"name":"README","kids":[],"cl_weight":0.16666666666666666,"touches":1,"min_t":1271688673,"max...