What kubernetes/kubernetes shipped

This week: volume health APIs updated to pod.Status.VolumeStatus, ContainerStopSignals to beta, dynamic resize of memory-backed volumes beta update, admission webhook metrics to beta, and fixes for SPDY socket leaks, conntrack sizing and mount path escapes.

This week in the repository: volume health APIs were updated to the newest KEP version, moving health from the pod to pod.Status.VolumeStatus; the ContainerStopSignals feature gate graduated to beta in v1.38 and is on by default, adding the kubelet_pod_stop_signals metric; dynamic resize of memory-backed volumes received a beta update that supports adding and removing sizeLimit on emptyDir volumes with Memory medium; and admission webhook metrics were promoted to beta. Jobs now report a SchedulingBlocked condition when their scheduling objects cannot be used, and Job failure condition reasons are more granular. Bug fixes include closing the underlying connection when a SPDY upgrade fails, honoring conntrack max above the per-core sizing cap in kube-proxy, not failing admission on an empty

This week: DRA scheduler keeps PreBind allocations on unreserve, watch cache stops sending an extra bookmark 1s after the watchlist initial bookmark, PreQueueingHints goes to beta, and kubectl fixes truncated --kuberc paths, two-line errors and verbosity flag matching.

This week in the Kubernetes repository: the DRA scheduler now keeps a claim allocation stored during PreBind when unreserving, so a failed bind no longer drops it. The watch cache no longer sends a periodic bookmark a second after the watchlist initial-events-end bookmark. The SchedulerPreQueueingHints gate is promoted to beta with correctness fixes. PodGroup names for Jobs are now UID-aware so sibling Jobs sharing a template get distinct groups. kubectl fixes include --kuberc paths containing an equals sign, error messages wrapping onto two lines, verbosity flag matching by prefix, and closing the kuberc file in SavePreference. kubeadm shows the missing CA hint again.

This week: ShardedListAndWatch graduates to Beta. Also in: shallow-copy watch events, hugepage limits kept across in-place resize, failure phase kept when a container exits 0, CRI cgroup_mount_mode added, and a kuberc flag precedence fix in kubectl.

This week in the project: the ShardedListAndWatch feature gate graduates to Beta, and watch event conversion now uses a shallow struct copy for Added and Modified events instead of a full object deep copy. Pods keep their hugepage limits across an in-place resize, and a pod terminated with a failure status keeps its failure phase when the container exits 0 on SIGTERM. The CRI API adds cgroup_mount_mode for writable cgroups, client-go stops emitting a zero informer store resource version before sync, and kubectl fixes --kuberc precedence over KUBERC at the default path. The kubelet also keeps a rotated log when compression fails at close and rejects unseparated hash suffixes in env files.

This week: storage capacity comparisons no longer overflow above 2^63, negative namespace selectors evaluate correctly again, volumes detach sooner after node deletion, and volume reported-in-use marking no longer races. Also: metrics-server v0.9.0 and clearer kube-proxy validati

This week in Kubernetes: volume binding now compares storage capacities with Quantity.Cmp, so storage sizes above 2^63 no longer overflow the CSI capacity check. The scheduler restores pointer-based mutation when namespace selectors expand, fixing negative namespace selector evaluation. The attach-detach controller clears MountedByNode immediately when a node is deleted, allowing detach without waiting for the force-detach timeout, and volume reported-in-use marking no longer races. Also shipped: metrics-server updated to v0.9.0, kube-proxy validation errors reported with public v1alpha1 field names, kubeadm no longer pulling the fake client into its binary, and kubelet checkpoint files now storing the entire PodSpec with migration code.

This week: kuberc config format reaches stable status, Go 1.27.2 security update integrated, pod group scheduling validation added, and multiple core controller bug fixes for deployments and kubelet.

Kubernetes shipped significant updates this week: kuberc configuration format promoted to stable, Go runtime updated to 1.27.2 for security, new pod group runtime hierarchy validation in the scheduler, and critical fixes for deployment controllers and kubelet node initialization. These changes strengthen core reliability and security across multiple cluster components.

This week: kubelet DNS filtering, safer Quantity types, watch cache streaming, HPA metrics separation, and kubectl stderr fixes. Bug fixes improve reliability across node, API machinery, and CLI components.

Kubernetes this week includes improvements to DNS handling in kubelet, fixes for Quantity value semantics to prevent unintended mutations, and safer etcd metrics tracking. kubectl now correctly routes warnings to stderr, preventing JSON corruption in piped commands. Watch cache streaming avoids unnecessary allocations. HPA gains maturity with feature gate promotion to GA. These changes address reliability, performance, and correctness across core components.

This week: ML-DSA post-quantum cryptography support in kubeadm and certificates, managedFields opt-out for API responses, mutable workload scheduling, watch validation improvements, and four patch releases.

Kubernetes shipped significant updates this week: post-quantum cryptography support via ML-DSA for kubeadm and certificate signing; server-side control over metadata.managedFields in API responses; mutable workload group sizing for dynamic scheduling; improved watch validation; and refinements to device management and performance. Four patch releases (v1.34.12, v1.35.9, v1.36.5, v1.37.1) are available.

This week: IP/CIDR Validation reaches GA, pod overhead handling fixed in HPA, kubectl explain gains autocompletion, plus fixes for resource validation and StatefulSet restoration.

Notable updates to Kubernetes this week include IP/CIDR Validation graduating to GA, improvements to pod resource calculations in HPA that now properly exclude overhead, shell autocompletion for kubectl explain, and critical bug fixes for ResourceQuota validation and StatefulSet restoration from ControllerRevision.