- Renamed the feature gate for CEL in Admission Control to `ValidatingAdmissionPolicy`. ([#113735](https://github.com/kubernetes/kubernetes/pull/113735), [@cici37](https://github.com/cici37))
- Reworded log message upon image garbage collection failure to be more clear. ([#112631](https://github.com/kubernetes/kubernetes/pull/112631), [@tzneal](https://github.com/tzneal)) [SIG Node]

* Kubelet won't evict a static pod with priority `system-node-critical` upon resource pressure. ([#74222](https://github.com/kubernetes/kubernetes/pull/74222), [@Huang-Wei](https://github.com/Huang-Wei))

- Fixes bug in CronJob Controller V2 where it would lose track of jobs upon job template labels change. ([#107997](https://github.com/kubernetes/kubernetes/pull/107997), [@d-honeybadger](https://github.com/d-honeybadger))

    *   Extends the device plugin checkpoint data to record registered resources so that we can finish resource removing devices even upon kubelet restarts.
    *   Passes sourcesReady from kubelet to the device plugin to avoid removing inactive pods during the grace period of kubelet restart.

* Kubelet won't evict a static pod with priority `system-node-critical` upon resource pressure. ([#74222](https://github.com/kubernetes/kubernetes/pull/74222), [@Huang-Wei](https://github.com/Huang-Wei))



# v1.11.9

[Documentation](https://docs.k8s.io)

## Downloads for v1.11.9

- Improved `kubectl run` and `kubectl debug` error messages upon attaching failures. ([#110764](https://github.com/kubernetes/kubernetes/pull/110764), [@soltysh](https://github.com/soltysh))

    HEREUNDER.

Statement of Purpose

The laws of most jurisdictions throughout the world automatically confer
exclusive Copyright and Related Rights (defined below) upon the creator
and subsequent owner(s) (each and all, an "owner") of an original work of
authorship and/or a database (each, a "Work").

Certain owners wish to permanently relinquish those rights to a Work for

* `tf.lite`
    * LiteRT announced a [new release](https://developers.googleblog.com/en/litert-maximum-performance-simplified/) at Google IO ‘25 that improves upon TFLite, particularly in terms of NPU and GPU hardware acceleration and performance for on-device ML and AI applications. The APIs are available in Kotlin and C++.

n)) } sum := h.Sum(nil) if [32]byte(sum) != Linkinfo.Sum { panic("fips140: verification mismatch") } // "The temporary value(s) generated during the integrity test of the // module’s software or firmware shall [05.10] be zeroised from the module // upon completion of the integrity test" clear(sum) clear(nbuf[:]) h.Reset() if godebug.Value("fips140") == "debug" { println("fips140: verified code+data") } Verified = true } golang.org/fips140@v1.26.0/fips140/v1.26.0/check/checktest/asm.s // Copyright...

n)) } sum := h.Sum(nil) if [32]byte(sum) != Linkinfo.Sum { panic("fips140: verification mismatch") } // "The temporary value(s) generated during the integrity test of the // module’s software or firmware shall [05.10] be zeroised from the module // upon completion of the integrity test" clear(sum) clear(nbuf[:]) h.Reset() if godebug.Value("#fips140") == "debug" { println("fips140: verified code+data") } Verified = true } golang.org/fips140@v1.0.0-c2097c7c/fips140/v1.0.0-c2097c7c/check/checktest/asm.s...