- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]

* Validate positive capacity for PVs and PVCs. ([#55532](https://github.com/kubernetes/kubernetes/pull/55532), [@ianchakeres](https://github.com/ianchakeres))
* Kubelet supports running mount utilities and final mount in a container instead running them on the host. ([#53440](https://github.com/kubernetes/kubernetes/pull/53440), [@jsafrane](https://github.com/jsafrane))

This issue has been rated low and assigned CVE-2021-25749

**Am I vulnerable?**

All Kubernetes clusters with following versions, running Windows workloads with `runAsNonRoot` are impacted

**Affected Versions**:

- kubelet v1.20 - v1.21
- kubelet v1.22.0 - v1.22.13
- kubelet v1.23.0 - v1.23.10
- kubelet v1.24.0 - v1.24.4

- Fixed a regression since 1.27.0 in scheduler framework when running score plugins. 
  The `skippedScorePlugins` number might be greater than `enabledScorePlugins`, 
  so when initializing a slice the cap(len(skippedScorePlugins) - len(enabledScorePlugins)) is negative, 

- [`KT-53939`](https://youtrack.jetbrains.com/issue/KT-53939) Partial linkage: with turning object into class link*Native and js*Test tasks fail
- [`KT-53938`](https://youtrack.jetbrains.com/issue/KT-53938) Partial linkage: with turning interface into class and using as second parent Native build fails
- [`KT-53941`](https://youtrack.jetbrains.com/issue/KT-53941) Partial linkage: with turning class into object accessing member via parameterless constructor does not fail

 │                                                     │
 │  API docs: http://127.0.0.1:8000/docs               │
 │                                                     │
 │  Running in development mode, for production use:   │
 │                                                     │
 │  fastapi run                                        │
 │                                                     │

pkg syscall (netbsd-arm64-cgo), const IFF_PROMISC = 256
pkg syscall (netbsd-arm64-cgo), const IFF_PROMISC ideal-int
pkg syscall (netbsd-arm64-cgo), const IFF_RUNNING = 64
pkg syscall (netbsd-arm64-cgo), const IFF_RUNNING ideal-int
pkg syscall (netbsd-arm64-cgo), const IFF_SIMPLEX = 2048
pkg syscall (netbsd-arm64-cgo), const IFF_SIMPLEX ideal-int
pkg syscall (netbsd-arm64-cgo), const IFNAMSIZ = 16

pkg syscall (darwin-arm64), const IFF_PROMISC = 256
pkg syscall (darwin-arm64), const IFF_PROMISC ideal-int
pkg syscall (darwin-arm64), const IFF_RUNNING = 64
pkg syscall (darwin-arm64), const IFF_RUNNING ideal-int
pkg syscall (darwin-arm64), const IFF_SIMPLEX = 2048
pkg syscall (darwin-arm64), const IFF_SIMPLEX ideal-int
pkg syscall (darwin-arm64), const IFNAMSIZ = 16

fused operation, possibly across statements, and produce a result that differs
from the value obtained by executing and rounding the instructions individually.
An explicit <a href="#Numeric_types">floating-point type</a> <a href="#Conversions">conversion</a> rounds to
the precision of the target type, preventing fusion that would discard that rounding.
</p>

<p>
For instance, some architectures provide a "fused multiply and add" (FMA) instruction

     * The value is, e.g. 200 <br>
     * comment: ranking
     * @return The value of found property. (NotNull: if not found, exception but basically no way)
     */
    String getRankFusionWindowSize();

    /**
     * Get the value for the key 'rank.fusion.window_size' as {@link Integer}. <br>
     * The value is, e.g. 200 <br>
     * comment: ranking