* Allow Secret & ConfigMap keys to contain caps, dots, and underscores ([#25458](https://github.com/kubernetes/kubernetes/pull/25458), [@errm](https://github.com/errm))

    </magic>
    <glob pattern="*.zoo"/>
  </mime-type>

  <mime-type type="application/x400-bp"/>
  <mime-type type="application/xcap-att+xml"/>
  <mime-type type="application/xcap-caps+xml"/>
  <mime-type type="application/xcap-el+xml"/>
  <mime-type type="application/xcap-error+xml"/>
  <mime-type type="application/xcap-ns+xml"/>
  <mime-type type="application/xcon-conference-info-diff+xml"/>

0;\n}\n\n.card-link {\n  @include hover() {\n    text-decoration: none;\n  }\n\n  + .card-link {\n    margin-left: $card-spacer-x;\n  }\n}\n\n//\n// Optional textual caps\n//\n\n.card-header {\n  padding: $card-spacer-y $card-spacer-x;\n  margin-bottom: 0; // Removes the default margin-bottom of <hN>\n  color: $card-cap-color;\n  background-color: $card-cap-bg;\n  border-bottom: $card-border-width solid $card-border-color;\n\n  &:first-child {\n    @include border-radius($card-inner-border-radius $card-inner-border-radius...

- Fixed a regression since `v1.27.0` in the scheduler framework when running score plugins. 
  The `skippedScorePlugins` number might be greater than `enabledScorePlugins`, 
  so when initializing a slice the `cap(len(skippedScorePlugins) - len(enabledScorePlugins))` is negative, 
  which is not allowed. ([#121632](https://github.com/kubernetes/kubernetes/pull/121632), [@kerthcet](https://github.com/kerthcet))

pkg syscall (netbsd-arm64-cgo), type BpfProgram struct, Pad_cgo_0 [4]uint8
pkg syscall (netbsd-arm64-cgo), type BpfStat struct
pkg syscall (netbsd-arm64-cgo), type BpfStat struct, Capt uint64
pkg syscall (netbsd-arm64-cgo), type BpfStat struct, Drop uint64
pkg syscall (netbsd-arm64-cgo), type BpfStat struct, Padding [13]uint64
pkg syscall (netbsd-arm64-cgo), type BpfStat struct, Recv uint64

## Changes by Kind

### Feature

- Kubernetes is now built with go 1.21.9
  - update debian-base/set-cap to bookworm-v1.0.2 ([#124198](https://github.com/kubernetes/kubernetes/pull/124198), [@cpanato](https://github.com/cpanato)) [SIG API Machinery, Architecture, Release and Testing]

### Bug or Regression

pkg syscall (netbsd-386), type BpfProgram struct, Insns *BpfInsn
pkg syscall (netbsd-386), type BpfProgram struct, Len uint32
pkg syscall (netbsd-386), type BpfStat struct
pkg syscall (netbsd-386), type BpfStat struct, Capt uint64
pkg syscall (netbsd-386), type BpfStat struct, Drop uint64
pkg syscall (netbsd-386), type BpfStat struct, Padding [13]uint64
pkg syscall (netbsd-386), type BpfStat struct, Recv uint64

* In GCE with COS, increase TasksMax for Docker service to raise cap on number of threads/processes used by containers. ([#51986](https://github.com/kubernetes/kubernetes/pull/51986), [@yujuhong](https://github.com/yujuhong))

* In GCE with COS, increase TasksMax for Docker service to raise cap on number of threads/processes used by containers. ([#51986](https://github.com/kubernetes/kubernetes/pull/51986), [@yujuhong](https://github.com/yujuhong))

    * controller REST client now uses that version.  For v1beta1, the API is now known as
    * resource-metrics.metrics.k8s.io.
* In GCE with COS, increase TasksMax for Docker service to raise cap on number of threads/processes used by containers. ([#51986](https://github.com/kubernetes/kubernetes/pull/51986), [@yujuhong](https://github.com/yujuhong))