### Auth

- Fixed OpenID Connect (OIDC) token refresh when the client secret contains a special character. ([#76914](https://github.com/kubernetes/kubernetes/pull/76914), [@tsuna](https://github.com/tsuna))

          <version>4.0.0+</version>
          <description>
            <![CDATA[
            The source control management system URL
            that describes the repository and how to connect to the
            repository.
            This connection is read-only.
            <br><b>Default value is</b>: parent value [+ path adjustment] + (artifactId or project.directory property), or just parent value if

* The OpenID Connect authenticator can now use a custom prefix, or omit the default prefix, for username and groups claims through the --oidc-username-prefix and --oidc-groups-prefix flags. For example, the authenticator can map a user with the username "jane" to "google:jane"...

- cloud.google.com/go/filestore: v1.8.0
- cloud.google.com/go/firestore: v1.14.0
- cloud.google.com/go/functions: v1.15.4
- cloud.google.com/go/gkebackup: v1.3.4
- cloud.google.com/go/gkeconnect: v0.8.4
- cloud.google.com/go/gkehub: v0.14.4
- cloud.google.com/go/gkemulticloud: v1.1.0
- cloud.google.com/go/gsuiteaddons: v1.6.4
- cloud.google.com/go/iam: v1.1.5
- cloud.google.com/go/iap: v1.9.3

* Support whitespace in command path for gcp auth plugin ([#41653](https://github.com/kubernetes/kubernetes/pull/41653), [@jlowdermilk](https://github.com/jlowdermilk))
* client-go no longer imports GCP OAuth2 and OpenID Connect packages by default. ([#41532](https://github.com/kubernetes/kubernetes/pull/41532), [@ericchiang](https://github.com/ericchiang))

pkg syscall (darwin-386), func Close(int) error
pkg syscall (darwin-386), func CloseOnExec(int)
pkg syscall (darwin-386), func CmsgLen(int) int
pkg syscall (darwin-386), func CmsgSpace(int) int
pkg syscall (darwin-386), func Connect(int, Sockaddr) error
pkg syscall (darwin-386), func Dup(int) (int, error)
pkg syscall (darwin-386), func Dup2(int, int) error
pkg syscall (darwin-386), func Exchangedata(string, string, int) error

- Kubeadm: used `ttlSecondsAfterFinished` to automatically clean up the `upgrade-health-check`...

- cloud.google.com/go/filestore: v1.6.0
- cloud.google.com/go/functions: v1.13.0
- cloud.google.com/go/gaming: v1.9.0
- cloud.google.com/go/gkebackup: v0.4.0
- cloud.google.com/go/gkeconnect: v0.7.0
- cloud.google.com/go/gkehub: v0.12.0
- cloud.google.com/go/gkemulticloud: v0.5.0
- cloud.google.com/go/gsuiteaddons: v1.5.0
- cloud.google.com/go/iam: v0.13.0
- cloud.google.com/go/iap: v1.7.1

pkg syscall (netbsd-arm64-cgo), func CloseOnExec(int)
pkg syscall (netbsd-arm64-cgo), func CmsgLen(int) int
pkg syscall (netbsd-arm64-cgo), func CmsgSpace(int) int
pkg syscall (netbsd-arm64-cgo), func Connect(int, Sockaddr) error
pkg syscall (netbsd-arm64-cgo), func Dup2(int, int) error
pkg syscall (netbsd-arm64-cgo), func Dup(int) (int, error)
pkg syscall (netbsd-arm64-cgo), func Fchdir(int) error

pkg syscall (freebsd-arm64), func CloseOnExec(int)
pkg syscall (freebsd-arm64), func CmsgLen(int) int
pkg syscall (freebsd-arm64), func CmsgSpace(int) int
pkg syscall (freebsd-arm64), func Connect(int, Sockaddr) error
pkg syscall (freebsd-arm64), func Dup(int) (int, error)
pkg syscall (freebsd-arm64), func Dup2(int, int) error
pkg syscall (freebsd-arm64), func Fchdir(int) error