Add additional map file overrides

Adds a final batch of map file overrides to enforce Kubernetes release
notes guidelines (such as standardizing past-tense verbs and API kind formatting).
Synchronizes the release-notes-draft.md and .json artifacts
to reflect these overrides by executing the krel release-notes rerun subcommand.

Signed-off-by: kernel-kun <78614901+kernel-kun@users.noreply.github.com>

Author: kernel-kun

releases/release-1.37/release-notes/maps/pr-134037-map.yaml

@@ -1,7 +1,7 @@
 pr: 134037
 releasenote:
   text: |-
-    Added dry-run support to unsafe corrupt object deletion, letting administrators test deletion operations before running them.
+    Added dry-run support to unsafe corrupt object deletion, letting administrators test deletion operations safely before running them.
   sigs:
   - api-machinery
   - testing

releases/release-1.37/release-notes/maps/pr-134639-map.yaml

@@ -1,7 +1,7 @@
 pr: 134639
 releasenote:
   text: |-
-    Promoted the `KubeletInUserNamespace` feature gate to Beta (KEP-2033).
+    Promoted the `KubeletInUserNamespace` feature gate to Beta.
   sigs:
   - api-machinery
   - apps

releases/release-1.37/release-notes/maps/pr-137762-map.yaml

@@ -1,7 +1,7 @@
 pr: 137762
 releasenote:
   text: |-
-    `kubelet`: Added TLS support for gRPC container probes, behind a feature gate (KEP-4939).
+    `kubelet`: Added TLS support for gRPC container probes (behind a feature gate).
   sigs:
   - api-machinery
   - apps

releases/release-1.37/release-notes/maps/pr-138736-map.yaml

@@ -1,7 +1,7 @@
 pr: 138736
 releasenote:
   text: |-
-    Fixed a 1.33 regression that could cause a panic in the endpoint controller when processing services with empty IPFamilies field (pre-dual-stack services that were never spec-updated).
+    Fixed a `v1.33` regression that could cause a panic in the endpoint controller when processing services with empty IPFamilies field (pre-dual-stack services that were never spec-updated).
   sigs:
   - apps
   - network

releases/release-1.37/release-notes/maps/pr-138738-map.yaml

@@ -0,0 +1,13 @@
+pr: 138738
+releasenote:
+  text: |-
+    Added `cpu_ids` and `memory` fields at the pod level to the `PodResources` v1 API to report total allocated pod resources, while only returning container-level allocations for container-isolated containers.
+  sigs:
+  - node
+  - testing
+  kinds:
+  - feature
+  areas:
+  - test
+  - kubelet
+pr_body: ""

releases/release-1.37/release-notes/maps/pr-139477-map.yaml

@@ -1,7 +1,7 @@
 pr: 139477
 releasenote:
   text: |-
-    ACTION REQUIRED: Promoted the DRAResourceHealth `kubelet` gRPC API to `v1`; the schema is unchanged from `v1alpha1`. `DRAPlugin.WatchHealthStatus` is a mandatory method on the `DRAPlugin` interface in the `k8s.io/dynamic-resource-allocation/kubeletplugin` helper, replacing the optional versioned gRPC interface. This is a one-time Go API break: existing drivers must add the method to compile. Drivers without health support return `ErrHealthNotSupported` from it, or disable the service with `HealthService(false)`. The helper serves both `v1` and `v1alpha1` by default, so drivers report health on `kubelet` `v1.36` and older without extra configuration. The `kubelet` prefers `v1` and, for three releases of transition, still consumes `v1alpha1` from drivers that shipped before `v1` existed. The `v1alpha1` DRAResourceHealth API is deprecated and is planned to be removed in `v1.40`. The `kubelet` only opens the device health stream for plugins that advertise the service.
+    Promoted the DRAResourceHealth `kubelet` gRPC API to `v1`; the schema is unchanged from `v1alpha1`. `DRAPlugin.WatchHealthStatus` is a mandatory method on the `DRAPlugin` interface in the `k8s.io/dynamic-resource-allocation/kubeletplugin` helper, replacing the optional versioned gRPC interface. This is a one-time Go API break: existing drivers must add the method to compile. Drivers without health support return `ErrHealthNotSupported` from it, or disable the service with `HealthService(false)`. The helper serves both `v1` and `v1alpha1` by default, so drivers report health on `kubelet` `v1.36` and older without extra configuration. The `kubelet` prefers `v1` and, for three releases of transition, still consumes `v1alpha1` from drivers that shipped before `v1` existed. The `v1alpha1` DRAResourceHealth API is deprecated and is planned to be removed in `v1.40`. The `kubelet` only opens the device health stream for plugins that advertise the service.
   sigs:
   - node
   - testing

releases/release-1.37/release-notes/maps/pr-139579-map.yaml

@@ -1,7 +1,7 @@
 pr: 139579
 releasenote:
   text: |-
-    ACTION REQUIRED: Graduated Pod Certificates to GA, with the `PodCertificateRequest` feature gate enabled by default. The `PKIXPublicKey` and `ProofOfPossession` fields, deprecated in PodCertificateRequest `v1beta1`, are removed from the `v1` API. Update clients that still set these fields before upgrading.
+    Graduated Pod Certificates to GA, with the PodCertificateRequest feature gate enabled by default. The `PKIXPublicKey` and `ProofOfPossession` fields, deprecated in PodCertificateRequest `v1beta1`, are removed from the `v1` API. Update clients that still set these fields before upgrading.
   sigs:
   - api-machinery
   - apps

releases/release-1.37/release-notes/maps/pr-139870-map.yaml

@@ -1,7 +1,7 @@
 pr: 139870
 releasenote:
   text: |-
-    ACTION REQUIRED: Updated the `kubelet`'s embedded `cAdvisor` to use the leaner `github.com/google/cadvisor/lib` module, which removes three long-deprecated or legacy surfaces:
+    Updated the `kubelet`'s embedded `cAdvisor` to use the leaner `github.com/google/cadvisor/lib` module, which removes three long-deprecated or legacy surfaces:
     - Deprecated `cAdvisor` flags are no longer accepted and the `kubelet` will fail to start if any are set (only `--housekeeping-interval` is kept): `--application-metrics-count-limit`, `--boot-id-file`, `--container-hints`, `--containerd`, `--containerd-namespace`, `--enable-load-reader`, `--event-storage-age-limit`, `--event-storage-event-limit`, `--global-housekeeping-interval`, `--log-cadvisor-usage`, `--machine-id-file`, `--storage-driver-user`, `--storage-driver-password`, `--storage-driver-host`, `--storage-driver-db`, `--storage-driver-table`, `--storage-driver-secure`, `--storage-driver-buffer-duration`. Remove these from your `kubelet` configuration.
     - `cAdvisor` application/custom metrics are no longer collected: the `userDefinedMetrics` field in `/stats/summary` and the custom `container_application_*` families in `/metrics/cadvisor`.
     - The `/metrics/cadvisor` series `container_cpu_load_average_10s`, `container_cpu_load_d_average_10s`, and `container_tasks_state` are no longer exported.

releases/release-1.37/release-notes/maps/pr-140009-map.yaml

@@ -2,7 +2,6 @@ pr: 140009
 releasenote:
   text: |-
     Updated the Alpha `DRANodeAllocatableResources` feature:
-
     - ResourceSlice mappings and PodStatus support direct allocations, for DRA drivers modeling CPU, memory, and hugepages as a resource, and overhead allocations, for accelerator host overhead.
     - The `kubelet` accounts for DRA allocated resources when configuring Pod and container cgroups, OOM scores, and Memory QoS thresholds.
     - Standard resource requests and limits can be resized in place for Pods that use DRA claims.

releases/release-1.37/release-notes/maps/pr-140052-map.yaml

@@ -1,7 +1,7 @@
 pr: 140052
 releasenote:
   text: |-
-    Added the `DefaultPodSysctls` `kubelet` configuration field for default Pod sysctls on Linux nodes, behind the Alpha, off-by-default `DefaultPodSysctls` feature gate.
+    Added the `DefaultPodSysctls` `kubelet` configuration field for default Pod sysctls on Linux nodes, behind the Alpha `DefaultPodSysctls` feature gate (disabled by default).
   sigs:
   - node
   - testing