What's Changed

• [release-1.34] chore: upgrade AzureAD lib by @k8s-infra-cherrypick-robot in #2876
• [release-1.34] fix: CVE-2025-58181 by @andyzhangx in #2882
• [release-1.34] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #2886
• [release-1.34] fix: upgrade to aznfs 3.0.10 on Ubuntu node by @k8s-infra-cherrypick-robot in #2894
• [release-1.34] fix: CVE-2025-13281 by @k8s-infra-cherrypick-robot in #2899
• [release-1.34] fix: allow uppercase subscription ID by @k8s-infra-cherrypick-robot in #2904
• [release-1.34] fix: install proxy failure on some distros by @k8s-infra-cherrypick-robot in #2908
• [release-1.34] chore: upgrade csi-provisioner to v6.1.0 by @andyzhangx in #2910
• [release-1.34] fix: remove global lock from azurefile proxy service by @k8s-infra-cherrypick-robot in #2913
• [release-1.34] fix: add mount timeout in NFS EiT mount by @k8s-infra-cherrypick-robot in #2920
• [release-1.34] cleanup: refine logging by @k8s-infra-cherrypick-robot in #2923
• doc: cut v1.34.3 release by @andyzhangx in #2927

Full Changelog: v1.34.2...v1.34.3

What's Changed

• [release-1.33] chore: upgrade AzureAD lib by @andyzhangx in #2877
• [release-1.33] fix: CVE-2025-58181 by @andyzhangx in #2883
• [release-1.33] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #2887
• [release-1.33] fix: CVE-2025-13281 by @andyzhangx in #2900
• [release-1.33] fix: allow uppercase subscription ID by @k8s-infra-cherrypick-robot in #2905
• [release-1.33] chore: upgrade csi-provisioner to v6.1.0 by @andyzhangx in #2912
• [release-1.33] fix: remove global lock from azurefile proxy service by @k8s-infra-cherrypick-robot in #2917
• [release-1.33] fix: add mount timeout in NFS EiT mount by @k8s-infra-cherrypick-robot in #2921
• [release-1.33] cleanup: refine logging by @k8s-infra-cherrypick-robot in #2924
• doc: cut v1.33.7 release by @andyzhangx in #2926

Full Changelog: v1.33.6...v1.33.7

What's Changed

• [release-1.32] chore: upgrade AzureAD lib by @andyzhangx in #2878
• [release-1.32] fix: CVE-2025-58181 by @andyzhangx in #2884
• [release-1.32] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #2888
• [release-1.32] fix: CVE-2025-13281 by @andyzhangx in #2901
• [release-1.32] fix: allow uppercase subscription ID by @k8s-infra-cherrypick-robot in #2906
• doc: cut v1.32.9 release by @andyzhangx in #2928

Full Changelog: v1.32.8...v1.32.9

What's Changed

• [release-1.34] test: fix sanity test by @k8s-infra-cherrypick-robot in #2809
• [release-1.34] fix: controller panic when skuName is not provided in small size file share creation by @k8s-infra-cherrypick-robot in #2813
• [release-1.34] fix: driver crash on FIPS enabled node by @andyzhangx in #2818
• [release-1.34] test: fix unit test timeout by @k8s-infra-cherrypick-robot in #2826
• [release-1.34] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #2837
• [release-1.34] chore: upgrade azcopy to v10.31.0 by @k8s-infra-cherrypick-robot in #2840
• [release-1.34] fix: CVE-2025-52881 by @andyzhangx in #2854
• [release-1.34] fix: CreateVolume to return actual provisioned capacity after rounding by @andyzhangx in #2860
• [release-1.34] Revert "fix: respect secretName during volume creation" by @k8s-infra-cherrypick-robot in #2857
• [release-1.34] cherry-pick: fix: snapshot restore and volume clone failure in some new sovereign clouds by @rnhan in #2863
• [release-1.34] chore: upgrade sidecar image versions by @andyzhangx in #2864
• doc: cut v1.34.2 release by @andyzhangx in #2869

Full Changelog: v1.34.1...v1.34.2

What's Changed

• [release-1.33] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #2773
• [release-1.33] build(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2779
• [release-1.33] chore: upgrade azcopy to v10.30.1 by @k8s-infra-cherrypick-robot in #2783
• [release-1.33] chore: upgrade sidecar image versions by @andyzhangx in #2788
• [release-1.33] test: fix sanity test by @andyzhangx in #2810
• [release-1.33] fix: controller panic when skuName is not provided in small size file share creation by @k8s-infra-cherrypick-robot in #2814
• [release-1.33] test: fix unit test timeout by @k8s-infra-cherrypick-robot in #2827
• [release-1.33] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #2838
• [release-1.33] chore: upgrade azcopy to v10.31.0 by @andyzhangx in #2841
• [release-1.33] fix: CVE-2025-52881 by @andyzhangx in #2855
• [release-1.33] Revert "fix: respect secretName during volume creation" by @k8s-infra-cherrypick-robot in #2858
• [release-1.33] cherry-pick: fix: snapshot restore and volume clone failure in some new sovereign clouds by @rnhan in #2862
• [release-1.33] chore: upgrade sidecar image versions by @andyzhangx in #2865
• doc: cut v1.33.6 release by @andyzhangx in #2868

Full Changelog: v1.33.5...v1.33.6

What's Changed

• [release-1.32] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #2775
• [release-1.32] build(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2780
• [release-1.32] chore: upgrade azcopy to v10.30.1 by @k8s-infra-cherrypick-robot in #2784
• [release-1.32] test: fix sanity test by @k8s-infra-cherrypick-robot in #2811
• [release-1.32] fix: controller panic when skuName is not provided in small size file share creation by @k8s-infra-cherrypick-robot in #2815
• [release-1.32] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #2839
• [release-1.32] chore: upgrade azcopy to v10.31.0 by @andyzhangx in #2842
• [release-1.32] fix: CVE-2025-52881 by @andyzhangx in #2856
• [release-1.32] Revert "fix: respect secretName during volume creation" by @k8s-infra-cherrypick-robot in #2859
• [release-1.32] cherry-pick: fix: snapshot restore and volume clone failure in some new sovereign clouds by @rnhan in #2861
• doc: cut v1.32.8 release by @andyzhangx in #2867

Full Changelog: v1.32.7...v1.32.8

What's Changed

• [release-1.34] fix: use configurable kubelet path in helm chart by @andyzhangx in #2795
• [release-1.34] fix: mount host etc inside azurefile container in helm chart config by @andyzhangx in #2796
• [release-1.34] chore: upgrade Azure cloud provider lib by @andyzhangx in #2800
• [release-1.34] chore: upgrade Azure cloud provider lib by @k8s-infra-cherrypick-robot in #2803
• [release-1.34] feat: support creating account with SmbOAuthEnabled by @k8s-infra-cherrypick-robot in #2805
• doc: cut v1.34.1 release by @andyzhangx in #2806

Full Changelog: v1.34.0...v1.34.1

What's Changed

• doc: cut v1.33.0 release by @andyzhangx in #2565
• build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot[bot] in #2567
• fix: avoid installing aznfs when linux distribution is not supported by @cvvz in #2572
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @dependabot[bot] in #2573
• fix: can't install aznfs on azurelinux by @cvvz in #2575
• fix: csi driver metrics to collect errors by @andyzhangx in #2578
• azurefile: revert to use virtio-fs for kata pods by @arc9693 in #2577
• chore: upgrade azcopy to v10.29.1 by @andyzhangx in #2583
• doc: update new chart versions by @andyzhangx in #2593
• feat: Use WMI to implement Volume API to reduce PowerShell overhead by @andyzhangx in #2532
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2596
• chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #2598
• fix: disable WMI call method on Windows node by @andyzhangx in #2599
• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #2602
• build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot[bot] in #2603
• doc: add StandardV2_LRS in doc examples by @andyzhangx in #2608
• test: fix CVE-2025-4673 in trivy action by @andyzhangx in #2611
• feat: support encryptInTransit mountOption in nfs volume by @andyzhangx in #2616
• fix: aznfs package install failure on arm64 node by @andyzhangx in #2620
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2623
• build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0 by @dependabot[bot] in #2621
• doc: update new chart versions by @andyzhangx in #2627
• build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @dependabot[bot] in #2626
• fix: only use the permission bits for chmod by @nearora-msft in #2600
• build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot[bot] in #2633
• fix: CVE-2025-4563 by @andyzhangx in #2635
• fix: don't change subnet.PrivateEndpointNetworkPolicies if it's already set by @andyzhangx in #2637
• feat: Migrate PathValid and SMB API to use WMI and Win32 API by @laozc in #2609
• build(deps): bump github.com/microsoft/wmi from 0.31.1 to 0.31.2 by @dependabot[bot] in #2639
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.8.0 to 1.8.1 by @dependabot[bot] in #2640
• cleanup: Remove the microsoft/wmi workaround for InvokeCimMethod by @laozc in #2646
• chore: upgrade snapshot image version to v8.3.0 by @andyzhangx in #2650
• build(deps): bump github.com/microsoft/wmi from 0.31.2 to 0.32.0 by @dependabot[bot] in #2654
• doc: update new chart versions by @andyzhangx in #2655
• build(deps): bump github.com/microsoft/wmi from 0.32.0 to 0.33.0 by @dependabot[bot] in #2656
• cleanup: decrease parsing volumeID log level by @andyzhangx in #2660
• build(deps): bump github.com/microsoft/wmi from 0.33.0 to 0.34.0 by @dependabot[bot] in #2657
• build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in #2658
• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #2664
• cleanup: refine clientID parameter parsing by @andyzhangx in #2666
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 by @dependabot[bot] in #2669
• feat: support provisionedBandwidth, provisionedIops parameter for file share v2 by @andyzhangx in #2671
• cleanup: refine kataNode label matching by @andyzhangx in #2673
• chore: make runtimeClassHandler and confidentialContainerLabel configurable by @andyzhangx in #2679
• cleanup: refine Dockerfile by @andyzhangx in #2680
• chore: upgrade to dalec image for snapshot container by @andyzhangx in #2683
• build(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 by @dependabot[bot] in #2685
• fix: intree volume unmount failure by @andyzhangx in #2687
• fix: only unmount kata volume if it's kata node by @andyzhangx in #2688
• build(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 by @dependabot[bot] in #2686
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azfile from 1.5.1 to 1.5.2 by @dependabot[bot] in #2693
• build(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in #2692
• build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by @dependabot[bot] in #2702
• test: fix CVE-2025-47907 traivy test failure by @andyzhangx in #2704
• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2703
• chore: upgrade azcopy to v10.30.0 by @andyzhangx in #2709
• feat: support nfs volume clone and snapshot restore by @andyzhangx in #2653
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #2714
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2715
• build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by @dependabot[bot] in #2716
• feat: support new folderName creation if not exists by @david-garcia-garcia in #2699
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @dependabot[bot] in #2717
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @dependabot[bot] in #2721
• chore: upgrade CSI driver sidecar images by @andyzhangx in #2719
• build(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.1 by @dependabot[bot] in #2725
• test: ignore latest tgz file in helm chart index verification by @andyzhangx in #2726
• build(deps): bump github.com/onsi/gomega from 1.38.1 to 1.38.2 by @dependabot[bot] in #2731
• fix: CVE-2025-5187 by @andyzhangx in #2732
• fix: respect secretName during volume creation by @andyzhangx in #2733
• build(deps): bump github.com/microsoft/wmi fr...

What's Changed

• [release-1.31] chore: fix helm chart index on release-1.31 by @andyzhangx in #2649
• [release-1.31] cleanup: decrease parsing volumeID log level by @k8s-infra-cherrypick-robot in #2663
• [release-1.31] fix: CVE-2025-22868 by @andyzhangx in #2677
• [release-1.31] test: fix CVE-2025-47907 traivy test failure by @k8s-infra-cherrypick-robot in #2707
• [release-1.31] chore: upgrade azcopy to v10.30.0 by @k8s-infra-cherrypick-robot in #2712
• [release-1.31] test: ignore latest tgz file in helm chart index verification by @k8s-infra-cherrypick-robot in #2728
• [release-1.31] test: file helm install failure by @k8s-infra-cherrypick-robot in #2777
• [release-1.31] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #2776
• [release-1.31] build(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2781
• [release-1.31] chore: upgrade azcopy to v10.30.1 by @k8s-infra-cherrypick-robot in #2785
• [release-1.31] fix: CVE-2025-5187 by @andyzhangx in #2786
• doc: cut v1.31.8 release by @andyzhangx in #2789

Full Changelog: v1.31.7...v1.31.8

What's Changed

• [release-1.33] test: ignore latest tgz file in helm chart index verification by @k8s-infra-cherrypick-robot in #2727
• [release-1.33] fix: CVE-2025-5187 by @andyzhangx in #2734
• [release-1.33] fix: respect secretName during volume creation by @k8s-infra-cherrypick-robot in #2736
• [release-1.33] test: fix helm install by @k8s-infra-cherrypick-robot in #2744
• [release-1.33] cleanup: refine helm install by @k8s-infra-cherrypick-robot in #2746
• [release-1.33] test: fix golint error by @k8s-infra-cherrypick-robot in #2748
• [release-1.33] fix: China cloud endpoints by @k8s-infra-cherrypick-robot in #2750
• [release-1.33] chore: add minimum size for premium v2 by @k8s-infra-cherrypick-robot in #2761
• [release-1.33] test: add v2 file share e2e test by @k8s-infra-cherrypick-robot in #2766
• [release-1.33] fix: set default IOPS and throughput in v2 file share creation by @k8s-infra-cherrypick-robot in #2769
• doc: cut v1.33.5 release by @andyzhangx in #2771

Full Changelog: v1.33.4...v1.33.5