Who contributed to Kubernetes on May 23, 2026?

4 developers shipped this update, including dims, lalitc375, dom4ha, and medyagh.

What were the notable Kubernetes updates?

Bump golang.org/x/crypto to v0.52.0, Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0, and Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0.

@kubernetes

Container orchestration - what platform teams ship on

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

CRYPTO LIBRARY PATCH ROLLS ACROSS THE STACK AS CEL ADMISSION POLICY GETS CPU TURBO

By RepoJournal · Filed 06:01 UTC on May 23, 2026 · About Kubernetes

4 people shipped this

medyagh @medyagh 3 cited

dims @dims 1 cited

lalitc375 @lalitc375 1 cited

dom4ha @dom4ha 1 cited

golang.org/x/crypto v0.52.0 is landing everywhere to silence security scanners, while Kubernetes optimizes CEL admission evaluation to cut CPU overhead on high-throughput clusters.

The security team pushed golang.org/x/crypto v0.52.0 across multiple repos [1][2][3][4][5][6] following fresh CVE announcements. This is a coordinated roll-out spanning apiserver, externaljwt, and endpointslice to clear scanner findings before the next release cycle. More consequential for operators: the apiserver is getting a major CEL admission policy optimization [7][8] that eliminates expensive reflection-based object serialization, cutting CPU usage and GC pressure on clusters running heavy policy enforcement. Watch that land soon. The scheduling API is also graduating DisruptionMode from enum to struct [9], which means v1alpha2 is being dropped entirely in favor of v1alpha3 for future extensibility. Minikube's infrastructure work [10][11][12] tightens linting rules, modernizes concurrency patterns to Go 1.25 standards, and fixes resumable upload flakes in the build pipeline. Three watch event metrics are graduating to beta [13][14], signaling the observability tooling is stabilizing.

Action items

→ Apply golang.org/x/crypto v0.52.0 across all Kubernetes repositories to clear security scanner findings kubernetes/kubernetes [plan]
→ Review CEL admission policy changes for performance improvements in your admission webhooks kubernetes/kubernetes [monitor]
→ Plan migration from scheduling.k8s.io/v1alpha2 to v1alpha3 for DisruptionMode before next upgrade kubernetes/kubernetes [plan]

References

[1] Bump golang.org/x/crypto to v0.52.0 ↗ kubernetes/kubernetes
[2] Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0 kubernetes/apiserver
[3] Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0 kubernetes/externaljwt
[4] Bump golang.org/x/crypto to v0.52.0 kubernetes/externaljwt
[5] Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0 kubernetes/endpointslice
[6] Bump golang.org/x/crypto to v0.52.0 kubernetes/endpointslice
[7] optimize CEL admission policies ↗ kubernetes/kubernetes
[8] Merge pull request #138771 from lalitc375/cel-opt kubernetes/apiserver
[9] Converts the DisruptionMode enum field to struct as v1alpha3 and drops v1alpha2 ↗ kubernetes/kubernetes
[10] infra: Isolate `gsutil` State Directory to Prevent Resumable Upload Conflicts ↗ kubernetes/minikube
[11] infra: modularize prow image targets to its own makefile ↗ kubernetes/minikube
[12] lint: tighten golangci-lint rules and modernize Go concurrency, sorting, and error handling ↗ kubernetes/minikube
[13] Merge pull request #137116 from tico88612/feat/apiserver-watch-metric-beta kubernetes/apiserver
[14] Merge pull request #136894 from LoginovIlia/apiserver_util_metrics_beta kubernetes/apiserver

Quick answers

What shipped in Kubernetes on May 23, 2026?: golang.org/x/crypto v0.52.0 is landing everywhere to silence security scanners, while Kubernetes optimizes CEL admission evaluation to cut CPU overhead on high-throughput clusters. In total, 76 commits and 17 pull requests landed.
Who contributed to Kubernetes on May 23, 2026?: 4 developers shipped this update, including dims, lalitc375, dom4ha, and medyagh.
What were the notable Kubernetes updates?: Bump golang.org/x/crypto to v0.52.0, Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0, and Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0.

SCHEDULER GAINS PREQUEUING FILTER, KUBELET USER NAMESPACES MOVE TO BETA

Kubernetes tackles the pod requeue bottleneck that's been choking large clusters, while user namespacing ships closer to production.

go 19 shipped 1-min read

@kubernetes 1 day ago

CLUSTER-AUTOSCALER PATCHES HIT ALL RELEASE BRANCHES AS DRA AND VOLUMEMOUNT BIND OPTIONS LAND

Cluster-autoscaler shipped four patch releases across versions 1.33 through 1.36 fixing ProvisioningRequest condition application and Scaleway node detection, while Kubernetes core merged DRA node operations and volumeMount bind mount options.

go 89 shipped 1-min read

@kubernetes 2 days ago

DRA GETS SMARTER RESOURCE ACCOUNTING, CLUSTER-AUTOSCALER ROLLS OUT FOUR PATCHES

Dynamic Resource Allocation fixed device accounting across its resource pool controller while cluster-autoscaler shipped maintenance releases across four versions.

go 52 shipped 1-min read

@kubernetes 3 days ago

DRA GRADUATES TO STABLE, KUBELET METRICS BYPASS CADVISOR, NAMESPACE LIFECYCLE UNBLOCKED

Three critical production fixes ship across core scheduler, metrics, and admission layers while DRA resource tracking stabilizes after surfacing a crash bug in the informer.

go 129 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.