03 Mar 2022

> **Note**: Calico v3.22.1 incorrectly shipped with manifests referencing flannel image `quay.io/coreos/flannel:v0.13.1`, which does not exist. These manifests should
> reference `quay.io/coreos/flannel:v0.13.0` instead.

#### Bug fixes

**General**

 - Fix that Typha would periodically disconnect clients in clusters with more than 100 nodes per Typha due to miscalculating the expected number of connections. [calico #5665](https://github.com/projectcalico/calico/pull/5665) (@fasaxc)
 - Fix bug where Wireguard host encryption could cause a startup deadlock [calico #5607](https://github.com/projectcalico/calico/pull/5607) (@electricjesus)
 - Update to ipset 7.11 for compatibility with IPVS kube-proxy in Kubernetes v1.23 [calico #5561](https://github.com/projectcalico/calico/pull/5561) (@song-jiang)

**Windows**

 - Fix Windows kube-proxy config that was incompatible with Kubernetes 1.23 [calico #5654](https://github.com/projectcalico/calico/pull/5654) (@lmm)
 - Windows loopback DSR support [calico #5644](https://github.com/projectcalico/calico/pull/5644) (@song-jiang)

#### Other changes

 - Switch to quay.io/centos/centos:stream8 [calico #5557](https://github.com/projectcalico/calico/pull/5557) (@caseydavenport)
 - Update UBI version to 8.5 [calico #5540](https://github.com/projectcalico/calico/pull/5540) (@coutinhop)
 - Downgrade a benign ERROR log that occurs when etcdv3 datastore is compacted. [calico #5548](https://github.com/projectcalico/calico/pull/5548) (@neiljerram)
