v1.26.2 release

What's Changed

• [release-1.26] fix: CVE-2025-30204 by @k8s-infra-cherrypick-robot in #1906
• [release-1.26] chore: upgrade azcopy to v10.28.1 by @k8s-infra-cherrypick-robot in #1915
• [release-1.26] fix: storageEndPointSuffix setting in on-prem cluster by @k8s-infra-cherrypick-robot in #1928
• doc: cut v1.26.2 release by @andyzhangx in #1923

Full Changelog: v1.26.1...v1.26.2

v1.25.5 release

What's Changed

• [release-1.25] fix: CVE-2025-30204 by @andyzhangx in #1907
• [release-1.25] chore: upgrade azcopy to v10.28.1 by @k8s-infra-cherrypick-robot in #1916
• doc: cut v1.25.5 release by @andyzhangx in #1922

Full Changelog: v1.25.4...v1.25.5

v1.24.9 release

What's Changed

• [release-1.24] fix: CVE-2025-30204 by @k8s-infra-cherrypick-robot in #1908
• [release-1.24] chore: upgrade azcopy to v10.28.1 by @k8s-infra-cherrypick-robot in #1917
• doc: cut v1.24.9 release by @andyzhangx in #1921

Full Changelog: v1.24.8...v1.24.9

v1.23.11 release

What's Changed

• [release-1.23] chore: upgrade azcopy to v10.28.0 by @k8s-infra-cherrypick-robot in #1811
• [release-1.23] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1815
• [release-1.23] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1825
• [release-1.23] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1842
• [release-1.23] chore: upgrade azcopy to v10.28.1 by @andyzhangx in #1918
• doc: cut v1.23.11 release by @andyzhangx in #1920

Full Changelog: v1.23.10...v1.23.11

v1.26.1 release

What's Changed

• [release-1.26] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1873
• [release-1.26] chore: increase liveness-probe timeout by @andyzhangx in #1879
• [release-1.26] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1883
• [release-1.26] feat: support workload identity by @k8s-infra-cherrypick-robot in #1888
  • This feature no longer retrieves storage account key using federated identity credentials starting from v1.25.4 or v1.26.1 and later versions, while it requires Storage Blob Data Contributor role on the account instead of Storage Account Contributor role.
• [release-1.26] test: ut for parseServiceAccountToken by @k8s-infra-cherrypick-robot in #1892
• [release-1.26] chore: upgrade azure cloud provider lib by @andyzhangx in #1895
• [release-1.26] feat: add metrics on node config by @andyzhangx in #1897
• doc: cut v1.26.1 release by @andyzhangx in #1901

Full Changelog: v1.26.0...v1.26.1

v1.25.4 release

What's Changed

• [release-1.25] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1874
• [release-1.25] chore: increase liveness-probe timeout by @andyzhangx in #1880
• [release-1.25] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1884
• [release-1.25] feat: support workload identity by @k8s-infra-cherrypick-robot in #1889
  • This feature no longer retrieves storage account key using federated identity credentials starting from v1.25.4 or v1.26.1 and later versions, while it requires Storage Blob Data Contributor role on the account instead of Storage Account Contributor role.
• [release-1.25] test: ut for parseServiceAccountToken by @k8s-infra-cherrypick-robot in #1893
• [release-1.25] feat: add metrics on node config by @andyzhangx in #1898
• doc: cut v1.25.4 release by @andyzhangx in #1900

Full Changelog: v1.25.3...v1.25.4

v1.24.8 release

What's Changed

• [release-1.24] fix: CVE-2024-51744 by @andyzhangx in #1871
• [release-1.24] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1875
• [release-1.24] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1885
• [release-1.24] feat: upgrade aznfs package to v2.0.11 by @k8s-infra-cherrypick-robot in #1886
• [release-1.24] fix: CVE-2025-22870 by @andyzhangx in #1887
• doc: cut v1.24.8 release by @andyzhangx in #1899

Full Changelog: v1.24.7...v1.24.8

v1.26.0 release

What's Changed

• doc: cut v1.25.0 release by @andyzhangx in #1640
• doc: remove obsolete doc about volumeID format by @andyzhangx in #1642
• doc: update new chart versions by @andyzhangx in #1643
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.57 to 0.1.0 by @dependabot in #1646
• fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #1647
• fix: skip blobfuse-proxy copy if it's not enabled in driver init by @andyzhangx in #1651
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.27 to 0.1.0 by @dependabot in #1652
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.1.0 to 1.2.0 by @dependabot in #1656
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.0 to 0.1.4 by @dependabot in #1659
• fix: blobfuse install failure in install-blobfuse-proxy initContainer by @andyzhangx in #1660
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.1.0 to 0.1.1 by @dependabot in #1661
• test: add UserAgent for e2e client by @MartinForReal in #1665
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.4 to 0.1.5 by @dependabot in #1666
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.5 to 0.1.9 by @dependabot in #1670
• test: fix trivy action by @andyzhangx in #1674
• fix: don't install blobfuse v1 by default since it's deprecated by @andyzhangx in #1679
• chore(deps): bump github.com/onsi/gomega from 1.35.0 to 1.35.1 by @dependabot in #1671
• feat: upgrade to azcopy v10.27.0 for volume clone by @andyzhangx in #1678
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.1.1 to 0.1.4 by @dependabot in #1688
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.2.0 to 1.3.0 by @dependabot in #1690
• fix: tagValueDelimiter parameter mismatch by @andyzhangx in #1691
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.1.4 to 0.1.5 by @dependabot in #1694
• feat: upgrade to azcopy v10.27.1 for volume clone by @andyzhangx in #1695
• fix: change mount timeout to 1.5min by @umagnus in #1699
• chore(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @dependabot in #1702
• cleanup: remove unused livenessProbe in registrar by @andyzhangx in #1704
• Group all deps update into one pr. by @MartinForReal in #1708
• chore: update CSI spec to v1.10.0 by @andyzhangx in #1710
• chore(deps): bump the all group across 1 directory with 5 updates by @dependabot in #1711
• chore(deps): bump the all group with 2 updates by @dependabot in #1714
• chore(deps): bump the all group with 2 updates by @dependabot in #1715
• chore(deps): bump the all group with 2 updates by @dependabot in #1716
• feat: add chart parameter for install-blobfuse-proxy ability to disable setReadAheadSize by @mweibel in #1717
• fix: always start blobfuse-proxy as long as it's enabled by @andyzhangx in #1723
• fix: avoid duplicate ssl mounts on Redhat in AzureStack environment by @andyzhangx in #1719
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.21 to 0.2.0 in the all group by @dependabot in #1729
• fix: increase blob memory limit to avoid OOM during volume clone by @andyzhangx in #1725
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.2.0 to 0.2.2 in the all group by @dependabot in #1730
• chore: upgrade azure cloud provider lib by @andyzhangx in #1731
• chore(deps): bump the all group with 2 updates by @dependabot in #1734
• feat: install blobfuse 2.4.0 as default version by @andyzhangx in #1733
• chore(deps): bump the all group with 2 updates by @dependabot in #1737
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.2.4 to 0.2.5 in the all group by @dependabot in #1738
• feat: match source account as first priority in volume restore by @andyzhangx in #1739
• chore(deps): bump the all group across 1 directory with 2 updates by @dependabot in #1743
• fix: CVE-2024-45337 by @andyzhangx in #1745
• chore(deps): bump the all group across 1 directory with 2 updates by @dependabot in #1746
• chore: upgrade k8s.io/mount-utils to v1.32.0 by @andyzhangx in #1751
• test: upgrade csi-test to v5.3.1 in sanity test by @andyzhangx in #1753
• fix: runOnControlPlane chart config by @andyzhangx in #1754
• Revert "Group all deps update into one pr." by @andyzhangx in #1756
• fix: wait for azcopy job running in volume clone by @andyzhangx in #1761
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6 from 6.1.0 to 6.2.0 by @dependabot in #1762
• fix: CVE-2024-45338 by @andyzhangx in #1765
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 by @dependabot in #1771
• doc: Azure Linux node does not support nconnect option by @andyzhangx in #1772
• fix: increase default provisioner retry-interval-max by @andyzhangx in #1773
• chore(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.1 by @dependabot in #1776
• test: add unit test for main function by @andyzhangx in #1777
• chore(deps): bump github.com/onsi/gomega from 1.36.1 to 1.36.2 by @dependabot in #1778
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 by @dependabot in #1779
• test: exclude some go fake files in ut coverage by @andyzhangx in #1780
• chore: set GoMaxProcs as 2 by @andyzhangx in #1781
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 by @dependabot in #1786
• chore(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 by @dependabot in #1787
• chore: fix azcopy download error by @andyzhangx in #1788
• test: add unit test by @andyzhangx in #1792
• test: exclude some go fake files in ut coverage by @andyzhangx in #1793
• test: exclude some go fake files in ut coverage by @andyzhangx in #1794
• chore(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 by @dependabot in #1795
• chore(deps): bump k8s.io/mount-utils from 0.32.0 to 0.32.1 in the k8s group by @dependabot...

v1.25.3 release

What's Changed

• [release-1.25] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1823
• [release-1.25] fix: incorrect affinity chart config by @andyzhangx in #1828
• [release-1.25] fix: CVE-2025-0426 by @andyzhangx in #1835
• [release-1.25] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1840
• [release-1.25] feat: install blobfuse 2.4.1 as default version by @andyzhangx in #1844
• [release-1.25] fix: cleanup azcopy jobs after job complete by @k8s-infra-cherrypick-robot in #1850
• [release-1.25] feat: upgrade aznfs package to v2.0.11 by @k8s-infra-cherrypick-robot in #1856
• [release-1.25] fix: storageEndpoint issue in sovereign cloud by @andyzhangx in #1865
• [release-1.25] fix: incomplete azcopy job state during volume clone by @k8s-infra-cherrypick-robot in #1859
• doc: cut v1.25.3 release by @andyzhangx in #1868

Full Changelog: v1.25.2...v1.25.3

v1.24.7 release

What's Changed

• [release-1.24] chore: upgrade azcopy to v10.28.0 by @k8s-infra-cherrypick-robot in #1810
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1814
• [release-1.24] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1824
• [release-1.24] fix: incorrect affinity chart config by @andyzhangx in #1829
• [release-1.24] fix: CVE-2025-0426 by @andyzhangx in #1836
• [release-1.24] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1841
• [release-1.24] feat: install blobfuse 2.4.1 as default version by @andyzhangx in #1845
• [release-1.24] fix: cleanup azcopy jobs after job complete by @k8s-infra-cherrypick-robot in #1851
• [release-1.24] fix: incomplete azcopy job state during volume clone by @k8s-infra-cherrypick-robot in #1860
• doc: cut v1.24.7 release by @andyzhangx in #1869

Full Changelog: v1.24.6...v1.24.7