1. For volumes provisioned/deleted via external provisioner/deleter, `storage_operation_duration_seconds` will NOT wait for the external operation to be done before reporting latency metric (effectively close to 0). This will be fixed by using `volume_operation_total_seconds` instead

* Update debian-iptables and hyperkube-base images to include CVE fixes. ([#67365](https://github.com/kubernetes/kubernetes/pull/67365), [@ixdy](https://github.com/ixdy))
* Immediately close the other side of the connection when proxying. ([#67288](https://github.com/kubernetes/kubernetes/pull/67288), [@MHBauer](https://github.com/MHBauer))

                body: Any = None
                if body_field:
                    if is_body_form:
                        body = await request.form()
                        file_stack.push_async_callback(body.close)
                    else:
                        body_bytes = await request.body()
                        if body_bytes:
                            json_body: Any = Undefined

  // is not set, reads from stdin in the container will always result in EOF.
  // Default is false.
  // +optional
  optional bool stdin = 16;

  // Whether the container runtime should close the stdin channel after it has been opened by
  // a single attach. When stdin is true the stdin stream will remain open across multiple attach

- Revert "fix: handle socket file detection on Windows" ([#126976](https://github.com/kubernetes/kubernetes/pull/126976), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node]
- Send an error on `ResultChan` and close the `RetryWatcher` when the client is forbidden or unauthorized from watching the resource. ([#126038](https://github.com/kubernetes/kubernetes/pull/126038), [@mprahl](https://github.com/mprahl)) [SIG API Machinery]

2F15          ; mapped                 ; 531A          # 3.0  KANGXI RADICAL RIGHT OPEN BOX
2F16          ; mapped                 ; 5338          # 3.0  KANGXI RADICAL HIDING ENCLOSURE
2F17          ; mapped                 ; 5341          # 3.0  KANGXI RADICAL TEN
2F18          ; mapped                 ; 535C          # 3.0  KANGXI RADICAL DIVINATION

- When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. ([#79083](https://github.com/kubernetes/kubernetes/pull/79083), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, Auth, Node and Testing]

    <magic priority="30">
      <match value="#ifndef " type="string" offset="0"/>
    </magic>
    <sub-class-of type="text/plain"/>
  </mime-type>

  <mime-type type="text/x-clojure">
    <_comment>Clojure source code</_comment>
    <glob pattern="*.clj"/>
    <sub-class-of type="text/plain"/>
  </mime-type>

  <mime-type type="text/x-coffeescript">

pkg log/syslog (netbsd-arm64-cgo), func New(Priority, string) (*Writer, error)
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Alert(string) error
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Close() error
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Crit(string) error
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Debug(string) error
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Emerg(string) error

   ([#123190](https://github.com/kubernetes/kubernetes/pull/123190), [@padlar](https://github.com/padlar))
- Allowed scheduling framework plugins that implement `io.Closer` to be gracefully closed.
   ([#122498](https://github.com/kubernetes/kubernetes/pull/122498), [@Gekko0114](https://github.com/Gekko0114))
- Bumped cAdvisor to `v0.49.0`.