* <p>
 * The userinfo component of the SMB URL ({@code domain;user:pass}) must
 * be URL encoded if it contains reserved characters. According to RFC 2396
 * these characters are non US-ASCII characters and most meta characters
 * however jCIFS will work correctly with anything but '@' which is used
 * to delimit the userinfo component from the server and '%' which is the
 * URL escape character itself.
 * <p>
 * The server

medecin.fr
medecin.km
media
media.aero
media.hu
media.pl
media.strapiapp.com
mediatech.by
mediatech.dev
medicina.bo
medio-campidano.it
mediocampidano.it
medusajs.app
meet
meguro.tokyo.jp
mein-iserv.de
mein-vigor.de
meinforum.net
meiwa.gunma.jp
meiwa.mie.jp
mel.cloudlets.com.au
meland.no
melbourne
meldal.no
melhus.no
meloy.no
meløy.no

zCjB,uBAyC8C3G,KAAKyF,UAC3EzF,KAAK4L,qBAED5L,KAAK0F,QAAQwF,OAASR,IACxB1K,KAAK6L,OAET,CAGWzH,qBACT,OAAOA,EACT,CAEWC,yBACT,OAAOA,EACT,CAEW/I,kBACT,MA9FS,UA+FX,CAGA8L,OACEpH,KAAK8L,OAAOzB,EACd,CAEA0B,mBAIOhT,SAASiT,QAAU/S,EAAU+G,KAAKyF,WACrCzF,KAAKoH,MAET,CAEAH,OACEjH,KAAK8L,OAAOxB,GACd,CAEAW,QACMjL,KAAKwL,YACPlT,EAAqB0H,KAAKyF,UAG5BzF,KAAKiM,gBACP,CAEAJ,QACE7L,KAAKiM,iBACLjM,KAAKkM,kBAELlM,KAAKsL,UAAYa,aAAY,IAAMnM,KAAK+L,mBAAmB/L,KAAK0F,QAAQqF,SAC1E,CAEAqB,oBACOpM,KAAK0F,QAAQwF,OAIdlL,KAAKwL,WACPj...

* Configurable etcd compaction frequency in GCE ([#59106](https://github.com/kubernetes/kubernetes/pull/59106), [@wojtek-t](https://github.com/wojtek-t))
* [GCE] Apiserver uses `InternalIP` as the most preferred kubelet address type by default. ([#59019](https://github.com/kubernetes/kubernetes/pull/59019), [@MrHohn](https://github.com/MrHohn))

affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers.

**Note**: This only impacts the cluster if the ServiceAccount admission plugin is used (most cluster should have this on by default as recommended in https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#serviceaccount), the `kubernetes.io/enforce-mountable-secrets` annotation is used by a service account (this annotation...

- Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. ([#83446](https://github.com/kubernetes/kubernetes/pull/83446), [@Elias481](https://github.com/Elias481)) [SIG Cloud Provider]

* GCE: Apiserver uses `InternalIP` as the most preferred kubelet address type by default. ([#59019](https://github.com/kubernetes/kubernetes/pull/59019), [@MrHohn](https://github.com/MrHohn))

  fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack),
  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
  clusterIP).  Most users do not need to set anything at all, defaulting will
  handle it for them.  Services are single-stack unless the user asks for

### Other notable changes

* [GCE] Apiserver uses `InternalIP` as the most preferred kubelet address type by default. ([#59019](https://github.com/kubernetes/kubernetes/pull/59019), [@MrHohn](https://github.com/MrHohn))

- Added new `CRDValidationRatcheting` alpha feature. During a PATCH or UPDATE Validation Ratcheting discards errors thrown by unchanged portions of the resource from most OpenAPI schema validations. ([#118990](https://github.com/kubernetes/kubernetes/pull/118990), [@alexzielenski](https://github.com/alexzielenski))