// ReadLine. ReadLine either returns a non-nil line or it returns an error,
// never both.
//
// The text returned from ReadLine does not include the line end ("\r\n" or "\n").
// No indication or error is given if the input ends without a final line end.
// Calling [Reader.UnreadByte] after ReadLine will always unread the last byte read
// (possibly a character belonging to the line end) even if that byte is not

 *  New: `mockwebserver3.MockResponse` is now immutable, with a `Builder`.

 *  New: `mockwebserver3.RecordedRequest.handshakeServerNames` returns the SNI (Server Name
    Indication) attribute from the TLS handshake.

 *  Upgrade: [Kotlin 1.9.21][kotlin_1_9_21].

 *  Upgrade: [Okio 3.7.0][okio_3_7_0].


## Version 5.0.0-alpha.11

_2022-12-24_

- The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavi...

panic("crypto/cipher: incorrect nonce length given to GCM") } if fips140.Enabled { if !g.prefixReady { // The first invocation sets the fixed prefix. g.prefixReady = true g.prefix = byteorder.BEUint32(nonce[:4]) } if g.prefix != byteorder.BEUint32(nonce[:4]) { panic("crypto/cipher: GCM nonce prefix changed") } counter := byteorder.BEUint64(nonce[len(nonce)-8:]) if !g.startReady { // The first invocation sets the starting counter, if not fixed. g.startReady = true g.start = counter } counter -= g.start // Ensure...

		})
		if err != nil {
			c.Fatalf("Error initializing client: %v", err)
		}

		// Validate that the client from sts creds can access the bucket.
		c.mustListObjects(ctx, minioClient, bucket)

		// Set up revocation
		user := accessKey
		tokenType := tc.tokenType
		reqAdmClient := s.adm
		if tc.fullRevoke {
			tokenType = ""
		}
		if tc.selfRevoke {
			user = ""
			tokenType = ""

- kube-controller-manager
  - The deprecated `--insecure-experimental-approve-all-kubelet-csrs-for-group` flag has been removed.
- kubelet

*GCMWithCounterNonce) Seal(dst, nonce, plaintext, data []byte) []byte { if len(nonce) != gcmStandardNonceSize { panic("crypto/cipher: incorrect nonce length given to GCM") } counter := byteorder.BEUint64(nonce[len(nonce)-8:]) if !g.ready { // The first invocation sets the fixed name encoding and start counter. g.ready = true g.start = counter g.fixedName = byteorder.BEUint32(nonce[:4]) } if g.fixedName != byteorder.BEUint32(nonce[:4]) { panic("crypto/cipher: incorrect module name given to GCMWithCounterNonce")...

## Changelog since v1.7.10

### Other notable changes

* Bugfix: master startup script on GCP no longer fails randomly due to concurrent iptables invocations. ([#55945](https://github.com/kubernetes/kubernetes/pull/55945), [@x13n](https://github.com/x13n))

letter, nearly as large as himself, and this he handed over to
the other, saying, in a solemn tone, `For the Duchess.  An
invitation from the Queen to play croquet.'  The Frog-Footman
repeated, in the same solemn tone, only changing the order of the
words a little, `From the Queen.  An invitation for the Duchess
to play croquet.'

  Then they both bowed low, and their curls got entangled
together.

     * {@code
     * String username = f.getPrincipal().getName();
     * }
     * The {@code Principal} object returned will never be {@code null}
     * however the username can be {@code null} indication anonymous
     * credentials were used (e.g. some IPC$ services).
     */

    /**
     * Returns the principal used for authentication
     *
     * @return the authentication principal
     */