### Release
- Added the `crictl` Windows binaries as well as the Linux 32bit binary to the release archives ([#83944](https://github.com/kubernetes/kubernetes/pull/83944), [@saschagrunert](https://github.com/saschagrunert))

- Removed `/sbin/apparmor_parser` requirement for the AppArmor host validation.
  This allows using AppArmor on distributions which ship the binary in a different path. ([#97968](https://github.com/kubernetes/kubernetes/pull/97968), [@saschagrunert](https://github.com/saschagrunert)) [SIG Node and Testing]

            group ID. An artifact is something that is either produced or used by a project.
            Examples of artifacts produced by Maven for a project include: JARs, source and binary
            distributions, and WARs.</description>
          <type>String</type>
        </field>
        <field>
          <name>version</name>
          <version>4.0.0+</version>

  manager. ([#114095](https://github.com/kubernetes/kubernetes/pull/114095), [@aimuz](https://github.com/aimuz))

### Other (Cleanup or Flake)

- Added automatic download of the CNI binary in `local-up-cluster.sh`, facilitating local debugging. ([#120312](https://github.com/kubernetes/kubernetes/pull/120312), [@HirazawaUi](https://github.com/HirazawaUi))

X,EAAaxa,KAAKma,IAAelX,YAAe8P,mCAIpD3P,OAAA,SAAO9B,GACL,IAAMyZ,EAAkBxd,EAAAA,QAAE+D,EAAMqS,eAC1BqH,EAAUD,EAAgBpS,SAE5B6R,EAAeQ,EAAQhb,KAAR,mBAEnB,GAAKwa,EAAa7U,GAAGuU,MACdc,EAAQrV,GAAGsU,MACdO,EAAeQ,EAAQrS,SAAS3I,KAAjB,oBAGZwa,EAAa7U,GAAGuU,KALvB,CAUA5Y,EAAMC,iBAEN,IAAMkZ,EAAWM,EAAgB3b,QAAQ6a,IAAa5a,QACvCob,EAAShb,SAASqT,IAG/B7T,KAAK2D,SAASrF,EAAAA,QAAEid,GAAeC,GAE/Bxb,KAAKiE,OAAO3F,EAAAA,QAAEid,GAAeC,OAMjC3L,gBAAA,WAAkB,IAAA5K,EAAAjF,KACVgc,OAAyCnN,IAA7B7O,KAAKC,SAASuI,KAAK,MAAnB,IAA6CxI,KAAKC,...

","value":"24h"}]},"compression":{"_":[{"key":"enable","value":"off"},{"key":"allow_encryption","value":"off"},{"key":"extensions","value":".txt,.log,.csv,.json,.tar,.xml,.bin"},{"key":"mime_types","value":"text/*,application/json,application/xml,binary/octet-stream"}]},"crawler":{"_":null},"credentials":{"_":null},"drive":{"_":[{"key":"max_timeout","value":""}]},"etcd":{"_":[{"key":"endpoints","value":""},{"key":"path_prefix","value":""},{"key":"coredns_path","value":"/skydns"},{"key":"client_c...

                          properties:
                            bytes:
                              description: response body as base64 encoded bytes.
                              format: binary
                              type: string
                            string:
                              type: string
                          type: object
                        status:

### Bug or Regression

- CVE-2023-27561 CVE-2023-25809 CVE-2023-28642: Bump fix runc v1.1.4 -> v1.1.5
  - Fixed cgroup removal error when using runc binary >= 1.1.6 ([#117691](https://github.com/kubernetes/kubernetes/pull/117691), [@dims](https://github.com/dims)) [SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Storage]

- Make EBS volume expansion faster ([#66728](https://github.com/kubernetes/kubernetes/pull/66728), [@gnufied](https://github.com/gnufied))
- Remove unused binary and container image for kube-aggregator. The functionality is already integrated into the kube-apiserver. ([#67157](https://github.com/kubernetes/kubernetes/pull/67157), [@dims](https://github.com/dims))

- Added two client certificate metrics for exec auth:
    - `rest_client_certificate_expiration_seconds` a gauge reporting the lifetime of the current client certificate. Reports the time of expiry in seconds since January 1, 1970 UTC.