01 Apr 2024

#### Bug fixes

 - Fix CVE-2023-48795: bump crypto package to 0.19.0 [calico #8639](https://github.com/projectcalico/calico/pull/8639) (@cyclinder)
 - ebpf: Update map definitions in programs used in iptables mode to let libbpf v1.0+ load them successfully. [calico #8624](https://github.com/projectcalico/calico/pull/8624) (@mazdakn)
 - Route reflector nodes now properly advertise Service LoadBalancer IP addresses even if there is no local endpoint on the node. [calico #8593](https://github.com/projectcalico/calico/pull/8593) (@AMacedoP)
 - ebpf: host can access self via a service without CTLB [calico #8588](https://github.com/projectcalico/calico/pull/8588) (@tomastigera)
 - Add running of token refresher to Calico for Windows. [calico #8571](https://github.com/projectcalico/calico/pull/8571) (@coutinhop)
 - Fix tigera-operator Helm chart missing RBAC for uninstall job [calico #8547](https://github.com/projectcalico/calico/pull/8547) (@sridhartigera)
 - Fix libpcap.so.0.8 missing on arm64 [calico #8533](https://github.com/projectcalico/calico/pull/8533) (@hjiawei)
 - Fix missing libresolv.so in node-driver-registrar [calico #8516](https://github.com/projectcalico/calico/pull/8516) (@hjiawei)

#### Other changes

 - Update Flannel to v1.2.0-flannel2-go1.21.8 [calico #8661](https://github.com/projectcalico/calico/pull/8661) (@coutinhop)
