- The Kubernetes API server now correctly detects and closes existing TLS connections when its client certificate file for kubelet authentication has been rotated. ([#115315](https://github.com/kubernetes/kubernetes/pull/115315), [@enj](https://github.com/enj)) [SIG API Machinery, Auth, Node and Testing]

pkg debug/pe, const IMAGE_FILE_MACHINE_RISCV32 ideal-int #54251
pkg debug/pe, const IMAGE_FILE_MACHINE_RISCV64 = 20580 #54251
pkg debug/pe, const IMAGE_FILE_MACHINE_RISCV64 ideal-int #54251
pkg encoding/xml, method (*Encoder) Close() error #53346
pkg errors, func Join(...error) error #53435
pkg fmt, func FormatString(State, int32) string #51668
pkg go/ast, type File struct, FileEnd token.Pos #53202
pkg go/ast, type File struct, FileStart token.Pos #53202

      </fields>
      <comment>We could probably have a specific element for a dev mailing list for things like CI,
        and maybe even a specific element for the user and scm mailing lists. Then leave the more
        lose structure for any other type of mailing list.</comment>
      <codeSegments>
        <codeSegment>
          <version>4.0.0+</version>
          <code>
            <![CDATA[
    /**

## Changelog since v1.10.11

### Other notable changes

* Updates defaultbackend to 1.5 ([#69381](https://github.com/kubernetes/kubernetes/pull/69381), [@bowei](https://github.com/bowei))
* Immediately close the other side of the connection when proxying. ([#67288](https://github.com/kubernetes/kubernetes/pull/67288), [@MHBauer](https://github.com/MHBauer))

  * `kubectl get podsecuritypolicies -o yaml > psp.yaml`
2. Review and delete any PodSecurityPolicy objects you do not want all pod-creating users to be able to use (NOTE: Privileged users that were making use of those policies will also lose access to those policies). For example:
  * `kubectl delete podsecuritypolicies/my-privileged-policy`
3. After upgrading to 1.5.5, re-create the exported PodSecurityPolicy objects:
  * `kubectl create -f psp.yaml`

- The Kubernetes API server now correctly detects and closes existing TLS connections when its client certificate file for kubelet authentication has been rotated. ([#115566](https://github.com/kubernetes/kubernetes/pull/115566), [@enj](https://github.com/enj)) [SIG API Machinery, Node and Testing]

- Do not unmount and mount subpath bind mounts during container creation unless bind mount changes ([#105512](https://github.com/kubernetes/kubernetes/pull/105512), [@gnufied](https://github.com/gnufied)) [SIG Storage]
- Don't prematurely close reflectors in case of slow initialization in watch based manager to fix issues with inability to properly mount secrets/configmaps. ([#104604](https://github.com/kubernetes/kubernetes/pull/104604), [@wojtek-t](https://github.com/wojtek-t))

### SIG UI

The migration to the newest version of Angular is still under active development as it is most important thing on the roadmap at the moment. We are getting closer to the new release. We continue fixing bugs and adding other improvements.

### SIG VMWare

to expose d or fromDecimal. // dString := "37095705934669439343" // if exp := new(Element).fromDecimal(dString); d.Equal(exp) != 1 { // t.Errorf("d is %v, expected %v", d, exp) // } } func TestSetBytesRoundTri(t *testing.T) { // TODO: values close to 0, close to 2^255-19, between 2^255-19 and 2^255-1, // and between 2^255 and 2^256-1. Test both the documented SetBytes // behavior, and that Bytes reduces them. } // Tests self-consistency between Multiply and Square. func TestConsistency(t *testing.T)...

- Reverted devicemanager for Windows node added in 1.19rc1. ([#93263](https://github.com/kubernetes/kubernetes/pull/93263), [@liggitt](https://github.com/liggitt)) [SIG Node and Windows]