v1.23.11 release

What's Changed

• [release-1.23] chore: upgrade azcopy to v10.28.0 by @k8s-infra-cherrypick-robot in #1811
• [release-1.23] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1815
• [release-1.23] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1825
• [release-1.23] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1842
• [release-1.23] chore: upgrade azcopy to v10.28.1 by @andyzhangx in #1918
• doc: cut v1.23.11 release by @andyzhangx in #1920

Full Changelog: v1.23.10...v1.23.11

v1.26.1 release

What's Changed

• [release-1.26] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1873
• [release-1.26] chore: increase liveness-probe timeout by @andyzhangx in #1879
• [release-1.26] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1883
• [release-1.26] feat: support workload identity by @k8s-infra-cherrypick-robot in #1888
• [release-1.26] test: ut for parseServiceAccountToken by @k8s-infra-cherrypick-robot in #1892
• [release-1.26] chore: upgrade azure cloud provider lib by @andyzhangx in #1895
• [release-1.26] feat: add metrics on node config by @andyzhangx in #1897
• doc: cut v1.26.1 release by @andyzhangx in #1901

Full Changelog: v1.26.0...v1.26.1

v1.25.4 release

What's Changed

• [release-1.25] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1874
• [release-1.25] chore: increase liveness-probe timeout by @andyzhangx in #1880
• [release-1.25] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1884
• [release-1.25] feat: support workload identity by @k8s-infra-cherrypick-robot in #1889
• [release-1.25] test: ut for parseServiceAccountToken by @k8s-infra-cherrypick-robot in #1893
• [release-1.25] feat: add metrics on node config by @andyzhangx in #1898
• doc: cut v1.25.4 release by @andyzhangx in #1900

Full Changelog: v1.25.3...v1.25.4

v1.24.8 release

What's Changed

• [release-1.24] fix: CVE-2024-51744 by @andyzhangx in #1871
• [release-1.24] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1875
• [release-1.24] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1885
• [release-1.24] feat: upgrade aznfs package to v2.0.11 by @k8s-infra-cherrypick-robot in #1886
• [release-1.24] fix: CVE-2025-22870 by @andyzhangx in #1887
• doc: cut v1.24.8 release by @andyzhangx in #1899

Full Changelog: v1.24.7...v1.24.8

v1.26.0 release

What's Changed

• doc: cut v1.25.0 release by @andyzhangx in #1640
• doc: remove obsolete doc about volumeID format by @andyzhangx in #1642
• doc: update new chart versions by @andyzhangx in #1643
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.57 to 0.1.0 by @dependabot in #1646
• fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #1647
• fix: skip blobfuse-proxy copy if it's not enabled in driver init by @andyzhangx in #1651
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.27 to 0.1.0 by @dependabot in #1652
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.1.0 to 1.2.0 by @dependabot in #1656
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.0 to 0.1.4 by @dependabot in #1659
• fix: blobfuse install failure in install-blobfuse-proxy initContainer by @andyzhangx in #1660
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.1.0 to 0.1.1 by @dependabot in #1661
• test: add UserAgent for e2e client by @MartinForReal in #1665
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.4 to 0.1.5 by @dependabot in #1666
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.5 to 0.1.9 by @dependabot in #1670
• test: fix trivy action by @andyzhangx in #1674
• fix: don't install blobfuse v1 by default since it's deprecated by @andyzhangx in #1679
• chore(deps): bump github.com/onsi/gomega from 1.35.0 to 1.35.1 by @dependabot in #1671
• feat: upgrade to azcopy v10.27.0 for volume clone by @andyzhangx in #1678
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.1.1 to 0.1.4 by @dependabot in #1688
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.2.0 to 1.3.0 by @dependabot in #1690
• fix: tagValueDelimiter parameter mismatch by @andyzhangx in #1691
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.1.4 to 0.1.5 by @dependabot in #1694
• feat: upgrade to azcopy v10.27.1 for volume clone by @andyzhangx in #1695
• fix: change mount timeout to 1.5min by @umagnus in #1699
• chore(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @dependabot in #1702
• cleanup: remove unused livenessProbe in registrar by @andyzhangx in #1704
• Group all deps update into one pr. by @MartinForReal in #1708
• chore: update CSI spec to v1.10.0 by @andyzhangx in #1710
• chore(deps): bump the all group across 1 directory with 5 updates by @dependabot in #1711
• chore(deps): bump the all group with 2 updates by @dependabot in #1714
• chore(deps): bump the all group with 2 updates by @dependabot in #1715
• chore(deps): bump the all group with 2 updates by @dependabot in #1716
• feat: add chart parameter for install-blobfuse-proxy ability to disable setReadAheadSize by @mweibel in #1717
• fix: always start blobfuse-proxy as long as it's enabled by @andyzhangx in #1723
• fix: avoid duplicate ssl mounts on Redhat in AzureStack environment by @andyzhangx in #1719
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.1.21 to 0.2.0 in the all group by @dependabot in #1729
• fix: increase blob memory limit to avoid OOM during volume clone by @andyzhangx in #1725
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.2.0 to 0.2.2 in the all group by @dependabot in #1730
• chore: upgrade azure cloud provider lib by @andyzhangx in #1731
• chore(deps): bump the all group with 2 updates by @dependabot in #1734
• feat: install blobfuse 2.4.0 as default version by @andyzhangx in #1733
• chore(deps): bump the all group with 2 updates by @dependabot in #1737
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.2.4 to 0.2.5 in the all group by @dependabot in #1738
• feat: match source account as first priority in volume restore by @andyzhangx in #1739
• chore(deps): bump the all group across 1 directory with 2 updates by @dependabot in #1743
• fix: CVE-2024-45337 by @andyzhangx in #1745
• chore(deps): bump the all group across 1 directory with 2 updates by @dependabot in #1746
• chore: upgrade k8s.io/mount-utils to v1.32.0 by @andyzhangx in #1751
• test: upgrade csi-test to v5.3.1 in sanity test by @andyzhangx in #1753
• fix: runOnControlPlane chart config by @andyzhangx in #1754
• Revert "Group all deps update into one pr." by @andyzhangx in #1756
• fix: wait for azcopy job running in volume clone by @andyzhangx in #1761
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6 from 6.1.0 to 6.2.0 by @dependabot in #1762
• fix: CVE-2024-45338 by @andyzhangx in #1765
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 by @dependabot in #1771
• doc: Azure Linux node does not support nconnect option by @andyzhangx in #1772
• fix: increase default provisioner retry-interval-max by @andyzhangx in #1773
• chore(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.1 by @dependabot in #1776
• test: add unit test for main function by @andyzhangx in #1777
• chore(deps): bump github.com/onsi/gomega from 1.36.1 to 1.36.2 by @dependabot in #1778
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 by @dependabot in #1779
• test: exclude some go fake files in ut coverage by @andyzhangx in #1780
• chore: set GoMaxProcs as 2 by @andyzhangx in #1781
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 by @dependabot in #1786
• chore(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 by @dependabot in #1787
• chore: fix azcopy download error by @andyzhangx in #1788
• test: add unit test by @andyzhangx in #1792
• test: exclude some go fake files in ut coverage by @andyzhangx in #1793
• test: exclude some go fake files in ut coverage by @andyzhangx in #1794
• chore(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 by @dependabot in #1795
• chore(deps): bump k8s.io/mount-utils from 0.32.0 to 0.32.1 in the k8s group by @dependabot...

v1.25.3 release

What's Changed

• [release-1.25] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1823
• [release-1.25] fix: incorrect affinity chart config by @andyzhangx in #1828
• [release-1.25] fix: CVE-2025-0426 by @andyzhangx in #1835
• [release-1.25] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1840
• [release-1.25] feat: install blobfuse 2.4.1 as default version by @andyzhangx in #1844
• [release-1.25] fix: cleanup azcopy jobs after job complete by @k8s-infra-cherrypick-robot in #1850
• [release-1.25] feat: upgrade aznfs package to v2.0.11 by @k8s-infra-cherrypick-robot in #1856
• [release-1.25] fix: storageEndpoint issue in sovereign cloud by @andyzhangx in #1865
• [release-1.25] fix: incomplete azcopy job state during volume clone by @k8s-infra-cherrypick-robot in #1859
• doc: cut v1.25.3 release by @andyzhangx in #1868

Full Changelog: v1.25.2...v1.25.3

v1.24.7 release

What's Changed

• [release-1.24] chore: upgrade azcopy to v10.28.0 by @k8s-infra-cherrypick-robot in #1810
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1814
• [release-1.24] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1824
• [release-1.24] fix: incorrect affinity chart config by @andyzhangx in #1829
• [release-1.24] fix: CVE-2025-0426 by @andyzhangx in #1836
• [release-1.24] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1841
• [release-1.24] feat: install blobfuse 2.4.1 as default version by @andyzhangx in #1845
• [release-1.24] fix: cleanup azcopy jobs after job complete by @k8s-infra-cherrypick-robot in #1851
• [release-1.24] fix: incomplete azcopy job state during volume clone by @k8s-infra-cherrypick-robot in #1860
• doc: cut v1.24.7 release by @andyzhangx in #1869

Full Changelog: v1.24.6...v1.24.7

v1.25.2 release

What's Changed

• [release-1.25] fix: upgrade azure cloud provider lib to fix AzureStack env setting issue on AKS by @andyzhangx in #1806
• [release-1.25] chore: upgrade azcopy to v10.28.0 by @k8s-infra-cherrypick-robot in #1809
• [release-1.25] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1813
• doc: cut v1.25.2 release by @andyzhangx in #1819

Full Changelog: v1.25.1...v1.25.2

v1.25.1 release

What's Changed

• [release-1.25] fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #1648
• [release-1.25] fix: skip blobfuse-proxy copy if it's not enabled in driver init by @k8s-infra-cherrypick-robot in #1653
• [release-1.25] fix: blobfuse install failure in install-blobfuse-proxy initContainer by @k8s-infra-cherrypick-robot in #1662
• [release-1.25] fix: incorrect userAgent by @andyzhangx in #1667
• [release-1.25] test: fix trivy action by @k8s-infra-cherrypick-robot in #1684
• [release-1.25] fix: don't install blobfuse v1 by default since it's deprecated by @andyzhangx in #1683
• [release-1.25] feat: upgrade to azcopy v10.27.0 for volume clone by @k8s-infra-cherrypick-robot in #1685
• [release-1.25] fix: tagValueDelimiter parameter mismatch by @k8s-infra-cherrypick-robot in #1692
• [release-1.25] feat: upgrade to azcopy v10.27.1 for volume clone by @k8s-infra-cherrypick-robot in #1696
• [release-1.25] fix: change mount timeout to 1.5min by @k8s-infra-cherrypick-robot in #1700
• [release-1.25] cleanup: remove unused livenessProbe in registrar by @andyzhangx in #1705
• [release-1.25] chore: update CSI spec to v1.10.0 by @k8s-infra-cherrypick-robot in #1712
• [release-1.25] fix: avoid duplicate ssl mounts on Redhat in AzureStack environment by @andyzhangx in #1720
• [release-1.25] fix: always start blobfuse-proxy as long as it's enabled by @k8s-infra-cherrypick-robot in #1724
• [release-1.25] fix: increase blob memory limit to avoid OOM during volume clone by @andyzhangx in #1726
• [release-1.25] chore: upgrade azure cloud provider lib by @andyzhangx in #1732
• [release-1.25] feat: install blobfuse 2.4.0 as default version by @andyzhangx in #1735
• [release-1.25] fix: CVE-2024-45337 by @andyzhangx in #1747
• [release-1.25] feat: match source account as first priority in volume restore by @k8s-infra-cherrypick-robot in #1740
• [release-1.25] chore: upgrade k8s.io/mount-utils to v1.32.0 by @andyzhangx in #1752
• [release-1.25] fix: runOnControlPlane chart config by @andyzhangx in #1758
• [release-1.25] fix: CVE-2024-45338 by @andyzhangx in #1766
• [release-1.25] fix: wait for azcopy job running in volume clone by @k8s-infra-cherrypick-robot in #1763
• [release-1.25] fix: increase default provisioner retry-interval-max by @andyzhangx in #1774
• [release-1.25] chore: set GoMaxProcs as 2 by @k8s-infra-cherrypick-robot in #1782
• [release-1.25] chore: fix azcopy download error by @k8s-infra-cherrypick-robot in #1789
• doc: cut v1.25.1 release by @andyzhangx in #1785

Full Changelog: v1.25.0...v1.25.1

v1.24.6 release

What's Changed

• [release-1.24] chore: enable blobfuse-proxy by default in kubectl install by @k8s-infra-cherrypick-robot in #1632
• [release-1.24] feat: install blobfuse2 for arm64 by @k8s-infra-cherrypick-robot in #1636
• [release-1.24] fix: install blobfuse2 on arm64 node by blobfuse-proxy by @k8s-infra-cherrypick-robot in #1638
• [release-1.24] fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #1649
• [release-1.24] fix: skip blobfuse-proxy copy if it's not enabled in driver init by @k8s-infra-cherrypick-robot in #1654
• [release-1.24] fix: blobfuse install failure in install-blobfuse-proxy initContainer by @k8s-infra-cherrypick-robot in #1663
• [release-1.24] test: fix trivy action by @k8s-infra-cherrypick-robot in #1675
• [release-1.24] fix: don't install blobfuse v1 by default since it's deprecated by @andyzhangx in #1680
• [release-1.24] feat: upgrade to azcopy v10.27.0 for volume clone by @k8s-infra-cherrypick-robot in #1686
• [release-1.24] fix: tagValueDelimiter parameter mismatch by @k8s-infra-cherrypick-robot in #1693
• [release-1.24] feat: upgrade to azcopy v10.27.1 for volume clone by @k8s-infra-cherrypick-robot in #1698
• [release-1.24] fix: change mount timeout to 1.5min by @k8s-infra-cherrypick-robot in #1701
• [release-1.24] cleanup: remove unused livenessProbe in registrar by @andyzhangx in #1706
• [release-1.24] fix: avoid duplicate ssl mounts on Redhat in AzureStack environment by @andyzhangx in #1721
• [release-1.24] fix: increase blob memory limit to avoid OOM during volume clone by @andyzhangx in #1727
• [release-1.24] feat: install blobfuse 2.4.0 as default version by @andyzhangx in #1736
• [release-1.24] fix: CVE-2024-45337 by @andyzhangx in #1748
• [release-1.24] fix: runOnControlPlane chart config by @andyzhangx in #1759
• [release-1.24] fix: CVE-2024-45338 by @andyzhangx in #1767
• [release-1.24] fix: wait for azcopy job running in volume clone by @k8s-infra-cherrypick-robot in #1764
• [release-1.24] fix: increase default provisioner retry-interval-max by @andyzhangx in #1775
• [release-1.24] chore: fix azcopy download error by @k8s-infra-cherrypick-robot in #1790
• doc: cut v1.24.6 release by @andyzhangx in #1784

Full Changelog: v1.24.5...v1.24.6