- Introduction of a new "sync_proxy_rules_no_local_endpoints_total" proxy metric. This metric represents the number of services with no internal endpoints. The "traffic_policy" label will contain both "internal" or "external". ([#108930](https://github.com/kubernetes/kubernetes/pull/108930), [@MaxRenaud](https://github.com/MaxRenaud))

				"application/xcon-conference-info-diff+xml",
				"application/xcon-conference-info+xml",
				"application/xenc+xml",
				"application/xhtml-voice+xml",
				"application/xml-dtd",
				"application/xml-external-parsed-entity",
				"application/xmpp+xml",
				"application/xop+xml",
				"application/xslfo+xml",
				"application/xslt+xml",
				"application/xspf+xml",
				"application/xv+xml",

        } catch (final Exception e) {
            throw new SitemapsException("Could not parse XML Sitemaps.", e);
        }
        return handler.getSitemapSet();
    }

    /**
     * Disables external resources for the SAX parser to prevent XXE attacks.
     * @param parser the SAX parser to configure
     * @throws SAXNotRecognizedException if the parser doesn't recognize the feature

  - [Changelog since v1.19.0](#changelog-since-v1190)
  - [What's New (Major Themes)](#whats-new-major-themes)
    - [Dockershim deprecation](#dockershim-deprecation)
    - [External credential provider for client-go](#external-credential-provider-for-client-go)
    - [CronJob controller v2 is available through feature gate](#cronjob-controller-v2-is-available-through-feature-gate)

        // When - Modify the original key array
        testEncryptionKey[0] = (byte) ~testEncryptionKey[0];

        // Then - Context should not be affected by external modifications
        assertEquals(originalCipherId, encryptionContext.getCipherId(), "Cipher ID should remain unchanged");
        assertEquals(originalDialect, encryptionContext.getDialect(), "Dialect should remain unchanged");

- One new field "InternalTrafficPolicy" in Service is added.
  It specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only.
  "Cluster" routes internal traffic to a Service to all endpoints.
  "Local" routes traffic to node-local endpoints only, and traffic is dropped if no node-local endpoints are ready.

- github.com/blang/semver: [v3.5.1+incompatible](https://github.com/blang/semver/tree/v3.5.1)
- github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/internal/testify/tree/v1.5.1)
- go.opentelemetry.io/otel/exporters/otlp/internal/retry: v1.10.0



# v1.29.0-rc.2


## Downloads for v1.29.0-rc.2



### Source Code

 * control over lock behavior to individual components.
 *
 * <p>Applications are encouraged to use a {@code CycleDetectingLockFactory} to create any locks for
 * which external/unmanaged code is executed while the lock is held. (See caveats under
 * <strong>Performance</strong>).
 *
 * <p><strong>Cycle Detection</strong>
 *

- kube-apiserver: `--service-account-max-token-expiration` can now be used in combination with an external token signer `--service-account-signing-endpoint`, as long as the `--service-account-max-token-expiration` is not longer than the external token signer's max expiration. ([#129816](https://github.com/kubernetes/kubernetes/pull/129816), [@sambdavidson](https://github.com/sambdavidson)) [SIG API Machinery and Auth]

- For GCE cluster provider, fix bug of not being able to create internal type load balancer for clusters with more than 1000 nodes in a single zone. ([#89902](https://github.com/kubernetes/kubernetes/pull/89902), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider, Network and Scalability]