v1.24.10 release

What's Changed

• [release-1.24] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #1936
• [release-1.24] fix: goroutine leak when timeout by @andyzhangx in #1950
• [release-1.24] fix: grpc connection was not closed properly by @k8s-infra-cherrypick-robot in #1957
• [release-1.24] fix: CVE-2025-22872 by @andyzhangx in #1954
• [release-1.24] fix: incorrect metris log in NodeStageVolume by @k8s-infra-cherrypick-robot in #1967
• [release-1.24] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #1977
• [release-1.24] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2013
• doc: cut v1.24.10 release by @andyzhangx in #2016

Full Changelog: v1.24.9...v1.24.10

v1.26.3 release

What's Changed

• [release-1.26] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #1934
• [release-1.26] fix: allow clientID, tenantID workload identity parameters in storage class by @k8s-infra-cherrypick-robot in #1941
• [release-1.26] cleanup: remove deprecated wait.PollImediate function by @k8s-infra-cherrypick-robot in #1945
• [release-1.26] fix: goroutine leak when timeout by @andyzhangx in #1948
• [release-1.26] fix: CVE-2025-22872 by @andyzhangx in #1952
• [release-1.26] fix: grpc connection was not closed properly by @k8s-infra-cherrypick-robot in #1955
• [release-1.26] cleanup: revert to go1.23 by @andyzhangx in #1969
• [release-1.26] fix: incorrect metris log in NodeStageVolume by @k8s-infra-cherrypick-robot in #1966
• [release-1.26] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #1975
• [release-1.26] chore: upgrade Azure cloud provider lib by @andyzhangx in #1986
• [release-1.26] feat: add VNetLinkName and PublicNetworkAccess in account creation by @andyzhangx in #1991
• [release-1.26] fix: add mountWithWorkloadIdentityToken parameter by @andyzhangx in #1992
• [release-1.26] cleanup: disable version check in blobfuse2 driver by default by @k8s-infra-cherrypick-robot in #1997
• doc: cut v1.26.3 release by @andyzhangx in #1999

Full Changelog: v1.26.2...v1.26.3

v1.25.6 release

What's Changed

• [release-1.25] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #1935
• [release-1.25] fix: allow clientID, tenantID workload identity parameters in storage class by @k8s-infra-cherrypick-robot in #1942
• [release-1.25] fix: goroutine leak when timeout by @andyzhangx in #1949
• [release-1.25] fix: grpc connection was not closed properly by @k8s-infra-cherrypick-robot in #1956
• [release-1.25] fix: CVE-2025-22872 by @andyzhangx in #1953
• [release-1.25] fix: incorrect metris log in NodeStageVolume by @k8s-infra-cherrypick-robot in #1965
• [release-1.25] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #1976
• [release-1.25] fix: add mountWithWorkloadIdentityToken parameter by @andyzhangx in #1993
  • with this new parameter, Storage Account Contributor is required for workload identity auth and Storage Blob Data Contributor is not needed any more
• doc: cut v1.25.6 release by @andyzhangx in #1995

Full Changelog: v1.25.5...v1.25.6

v1.26.2 release

What's Changed

• [release-1.26] fix: CVE-2025-30204 by @k8s-infra-cherrypick-robot in #1906
• [release-1.26] chore: upgrade azcopy to v10.28.1 by @k8s-infra-cherrypick-robot in #1915
• [release-1.26] fix: storageEndPointSuffix setting in on-prem cluster by @k8s-infra-cherrypick-robot in #1928
• doc: cut v1.26.2 release by @andyzhangx in #1923

Full Changelog: v1.26.1...v1.26.2

v1.25.5 release

What's Changed

• [release-1.25] fix: CVE-2025-30204 by @andyzhangx in #1907
• [release-1.25] chore: upgrade azcopy to v10.28.1 by @k8s-infra-cherrypick-robot in #1916
• doc: cut v1.25.5 release by @andyzhangx in #1922

Full Changelog: v1.25.4...v1.25.5

v1.24.9 release

What's Changed

• [release-1.24] fix: CVE-2025-30204 by @k8s-infra-cherrypick-robot in #1908
• [release-1.24] chore: upgrade azcopy to v10.28.1 by @k8s-infra-cherrypick-robot in #1917
• doc: cut v1.24.9 release by @andyzhangx in #1921

Full Changelog: v1.24.8...v1.24.9

v1.23.11 release

What's Changed

• [release-1.23] chore: upgrade azcopy to v10.28.0 by @k8s-infra-cherrypick-robot in #1811
• [release-1.23] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1815
• [release-1.23] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1825
• [release-1.23] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1842
• [release-1.23] chore: upgrade azcopy to v10.28.1 by @andyzhangx in #1918
• doc: cut v1.23.11 release by @andyzhangx in #1920

Full Changelog: v1.23.10...v1.23.11

v1.26.1 release

What's Changed

• [release-1.26] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1873
• [release-1.26] chore: increase liveness-probe timeout by @andyzhangx in #1879
• [release-1.26] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1883
• [release-1.26] feat: support workload identity by @k8s-infra-cherrypick-robot in #1888
  • This feature no longer retrieves storage account key using federated identity credentials starting from v1.25.4 or v1.26.1 and later versions, while it requires Storage Blob Data Contributor role on the account instead of Storage Account Contributor role.
• [release-1.26] test: ut for parseServiceAccountToken by @k8s-infra-cherrypick-robot in #1892
• [release-1.26] chore: upgrade azure cloud provider lib by @andyzhangx in #1895
• [release-1.26] feat: add metrics on node config by @andyzhangx in #1897
• doc: cut v1.26.1 release by @andyzhangx in #1901

Full Changelog: v1.26.0...v1.26.1

v1.25.4 release

What's Changed

• [release-1.25] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1874
• [release-1.25] chore: increase liveness-probe timeout by @andyzhangx in #1880
• [release-1.25] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1884
• [release-1.25] feat: support workload identity by @k8s-infra-cherrypick-robot in #1889
  • This feature no longer retrieves storage account key using federated identity credentials starting from v1.25.4 or v1.26.1 and later versions, while it requires Storage Blob Data Contributor role on the account instead of Storage Account Contributor role.
• [release-1.25] test: ut for parseServiceAccountToken by @k8s-infra-cherrypick-robot in #1893
• [release-1.25] feat: add metrics on node config by @andyzhangx in #1898
• doc: cut v1.25.4 release by @andyzhangx in #1900

Full Changelog: v1.25.3...v1.25.4

v1.24.8 release

What's Changed

• [release-1.24] fix: CVE-2024-51744 by @andyzhangx in #1871
• [release-1.24] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1875
• [release-1.24] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1885
• [release-1.24] feat: upgrade aznfs package to v2.0.11 by @k8s-infra-cherrypick-robot in #1886
• [release-1.24] fix: CVE-2025-22870 by @andyzhangx in #1887
• doc: cut v1.24.8 release by @andyzhangx in #1899

Full Changelog: v1.24.7...v1.24.8