v1.34.3 release

What's Changed

• [release-1.34] chore: upgrade to csi-provisioner v6.2.0 by @andyzhangx in #3534
• [release-1.34] fix: trigger migration within few mins by batching the volumes or imp… by @k8s-infra-cherrypick-robot in #3535
• [release-1.34] test: fix CVE-2026-25679 in trivy action by @k8s-infra-cherrypick-robot in #3538
• [release-1.34] fix: CVE-2026-33186 by @andyzhangx in #3548
• [release-1.34] fix: incorrect node attached on waitingForDetached call by @k8s-infra-cherrypick-robot in #3547
• [release-1.34] feat: update maxDataDiskCountMap with latest VM size list by @k8s-infra-cherrypick-robot in #3554
• [release-1.34] chore: add flag wait-for-detach-disk-complete by @k8s-infra-cherrypick-robot in #3556
• [release-1.34] security: Update trivy-action to use sha for v0.35.0 by @k8s-infra-cherrypick-robot in #3558
• [release-1.34] fix: increase checkDiskLun throttle threshold from 1s to 10s by @k8s-infra-cherrypick-robot in #3566
• [release-1.34] fix: skip ManagedBy polling after successful VMSS detach by @k8s-infra-cherrypick-robot in #3568
• [release-1.34] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #3576
• [release-1.34] fix: CVE-2026-39883 by @andyzhangx in #3578
• [release-1.34] feat: add optional healthcheck for node-driver-registrar by @andyzhangx in #3573
• cherry-pick #3583 to release-1.34: refactor nodeDriverRegistrar config by @andyzhangx in #3585
• [release-1.34] chore: pin all GitHub Actions to full-length commit SHAs by @k8s-infra-cherrypick-robot in #3589
• doc: cut v1.34.3 release by @andyzhangx in #3570

Full Changelog: v1.34.2...v1.34.3

v1.33.9 release

What's Changed

• [release-1.33] test: fix CVE-2025-61726 trivy failure by @k8s-infra-cherrypick-robot in #3487
• [release-1.33] test: skip flaky TestConcurrentDetachDisk test by @k8s-infra-cherrypick-robot in #3485
• [release-1.33] chore(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurediskplugin by @k8s-infra-cherrypick-robot in #3492
• [release-1.33] fix: Correct CSI-Provisioner permissions for VAC by @k8s-infra-cherrypick-robot in #3496
• [release-1.33] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #3504
• [release-1.33] chore: upgrade CSI sidecar image versions by @andyzhangx in #3517
• [release-1.33] fix: CVE-2026-24051 by @andyzhangx in #3529
• [release-1.33] fix: CVE-2026-33186 by @andyzhangx in #3549
• [release-1.33] feat: update maxDataDiskCountMap with latest VM size list by @k8s-infra-cherrypick-robot in #3555
• [release-1.33] security: Update trivy-action to use sha for v0.35.0 by @k8s-infra-cherrypick-robot in #3559
• doc: cut v1.33.9 release by @andyzhangx in #3571
• [release-1.33] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #3577
• [release-1.33] fix: CVE-2026-39883 by @andyzhangx in #3579
• [release-1.33] feat: add optional healthcheck for node-driver-registrar by @andyzhangx in #3574
• cherry-pick #3583 to release-1.33: refactor nodeDriverRegistrar config by @andyzhangx in #3586
• chore: pin all GitHub Actions to full-length commit SHAs by @andyzhangx in #3590

Full Changelog: v1.33.8...v1.33.9

v1.34.2 release

What's Changed

• [release-1.34] chore(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurediskplugin by @k8s-infra-cherrypick-robot in #3491
• [release-1.34] fix: Correct CSI-Provisioner permissions for VAC by @k8s-infra-cherrypick-robot in #3495
• [release-1.34] fix: replace os.ReadDir with fs.ReadDir(1) to avoid extra memory usage by @k8s-infra-cherrypick-robot in #3500
• [release-1.34] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #3503
• [release-1.34] chore: refactor metrics pkg by @k8s-infra-cherrypick-robot in #3508
• [release-1.34] feat: add instantAccessDurationMinutes snapshot parameter for PremiumV2/UltraSSD disks by @tony-schndr in #3510
• [release-1.34] test: fix trivy CVE-2025-68121 by @k8s-infra-cherrypick-robot in #3514
• [release-1.34] chore: upgrade CSI sidecar image versions by @andyzhangx in #3516
• doc: cut v1.34.2 release by @andyzhangx in #3528

Full Changelog: v1.34.1...v1.34.2

v1.34.1 release

What's Changed

• [release-1.34] chore: add CSI-specific Prometheus metrics by @k8s-infra-cherrypick-robot in #3475
• [release-1.34] fix: let nodeExpandVolume retried if block device size is taking time to reflect in host by @k8s-infra-cherrypick-robot in #3476
• [release-1.34] fix: handling dangling detaches in a better way by @k8s-infra-cherrypick-robot in #3481
• [release-1.34] test: fix CVE-2025-61726 trivy failure by @k8s-infra-cherrypick-robot in #3486
• [release-1.34] test: skip flaky TestConcurrentDetachDisk test by @k8s-infra-cherrypick-robot in #3484
• doc: cut v1.34.1 release by @andyzhangx in #3488

Full Changelog: v1.34.0...v1.34.1

v1.33.8 release

What's Changed

• [release-1.33] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #3436
• [release-1.33] feat: provide networkAccessPolicy, publicNetworkAccess parameters in CreateSnapshot by @k8s-infra-cherrypick-robot in #3442
• [release-1.33] fix: CVE-2025-13281 by @andyzhangx in #3456
• [release-1.33] fix: ASH static provision segmentation fault by @k8s-infra-cherrypick-robot in #3452
• [release-1.33] chore: upgrade csi-provisioner to v6.1.0 by @andyzhangx in #3459
• [release-1.33] feat: user script or tool to automate migration from premium lrs to premiumv2 lrs by @k8s-infra-cherrypick-robot in #3461
• [release-1.33] fix: let nodeExpandVolume retried if block device size is taking time to reflect in host by @k8s-infra-cherrypick-robot in #3474
• doc: cut v1.33.8 release by @andyzhangx in #3479

Full Changelog: v1.33.7...v1.33.8

v1.32.12 release

What's Changed

• [release-1.32] chore: update max data disk count table by @k8s-infra-cherrypick-robot in #3341
• [release-1.32] test: fix govet error by @k8s-infra-cherrypick-robot in #3360
• [release-1.32] fix: disable enable-minimum-retry-after by default by @k8s-infra-cherrypick-robot in #3363
• [release-1.32] test: fix sanity test failure by @k8s-infra-cherrypick-robot in #3368
• [release-1.32] Revert "fix: disable enable-minimum-retry-after by default" by @k8s-infra-cherrypick-robot in #3372
• [release-1.32] chore: update max data disk count table by @k8s-infra-cherrypick-robot in #3389
• [release-1.32] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #3398
• [release-1.32] fix: CVE-2025-52881 by @andyzhangx in #3408
• [release-1.32] chore: upgrade AzureAD lib by @k8s-infra-cherrypick-robot in #3420
• [release-1.32] fix: CVE-2025-58181 by @andyzhangx in #3425
• [release-1.32] cleanup: remove unnecessary drop all capability by @andyzhangx in #3432
• [release-1.32] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #3437
• [release-1.32] fix: CVE-2025-13281 by @andyzhangx in #3455
• [release-1.32] fix: ASH static provision segmentation fault by @k8s-infra-cherrypick-robot in #3453
• [release-1.32] fix: create volume failure when requested pvc size is smaller than snapshot disk size by @priyansh17 in #3401
• doc: cut v1.32.12 release by @andyzhangx in #3480

Full Changelog: v1.32.11...v1.32.12

v1.34.0 release

What's Changed

• doc: cut v1.33.0 release by @andyzhangx in #3101
• chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2 by @dependabot[bot] in #3105
• chore: update max data disk table by @andyzhangx in #3107
• doc: add linked permissions by @jsafrane in #3112
• chore: upgrade alpine base image by @andyzhangx in #3106
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.35.0 to 1.36.0 by @dependabot[bot] in #3113
• doc: update new chart versions by @andyzhangx in #3121
• chore: update max data disk count table by @andyzhangx in #3122
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #3123
• chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #3129
• chore(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot[bot] in #3132
• chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #3133
• test: fix CVE-2025-4673 in trivy action by @andyzhangx in #3134
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #3142
• cleanup: fix helm chart index file by @andyzhangx in #3147
• chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0 by @dependabot[bot] in #3144
• fix: make disk and snapshot uri regex case insensitive everywhere by @landreasyan in #3149
• test: add an e2e for MaximumDataDisksExceeded issue by @hccheng72 in #3119
• fix: CVE-2025-4563 by @landreasyan in #3155
• cleanup: remove references to the V2 driver by @landreasyan in #3150
• chore: add new owners to the owners list by @landreasyan in #3154
• fix(doc): fixing typo in the doc by @pawanpraka1 in #3148
• perf: rely on readyToUse flag to monitor snapshot progress instead of waiting in for loop by @hasethuraman in #3141
• chore: update max data disk table by @andyzhangx in #3163
• chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot[bot] in #3168
• chore: Use WMI associator to find associated instances on Windows mount by @laozc in #3146
• doc: update ModifyVolume doc by @andyzhangx in #3170
• chore: upgrade snapshot image version to v8.3.0 by @andyzhangx in #3171
• fix: xfs mount failure on Azure Linux 3.0 node by @andyzhangx in #3160
• fix: typo in the required permissions by @jsafrane in #3181
• cleanup: Remove the microsoft/wmi workaround for InvokeCimMethod by @laozc in #3180
• feat: support new diskName format filling with pv/pvc metadata info by @andyzhangx in #3189
• support custom Azure disk naming using PVC name and namespace [#3174] by @yugannkt in #3178
• chore(deps): bump github.com/microsoft/wmi from 0.31.2 to 0.32.0 by @dependabot[bot] in #3197
• doc: update new chart versions by @andyzhangx in #3198
• chore(deps): bump github.com/microsoft/wmi from 0.32.0 to 0.34.0 by @dependabot[bot] in #3202
• chore(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in #3204
• chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in #3206
• chore(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #3207
• fix: batching implementation should allow for an early exit for disks already processed in the batch by @landreasyan in #3205
• chore: upgrade max data disk table by @andyzhangx in #3213
• chore: upgrade to dalec image for snapshot container by @andyzhangx in #3222
• chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @dependabot[bot] in #3224
• chore: disable public network access for new disk creation by default by @andyzhangx in #3225
• chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in #3229
• chore: keep disk taint removal in a loop by default by @andyzhangx in #3226
• test: fix TestConcurrentDetachDisk ut failure on Windows by @andyzhangx in #3228
• chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #3239
• test: fix CVE-2025-47907 trivy test failure by @andyzhangx in #3240
• chore(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by @dependabot[bot] in #3245
• chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #3246
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #3249
• chore: upgrade Azure cloud provider lib by @andyzhangx in #3250
• chore: upgrade Azure cloud provider lib by @andyzhangx in #3252
• chore(deps): bump k8s.io/kubernetes from 1.33.3 to 1.33.4 in the k8s group by @dependabot[bot] in #3254
• chore: use VMSS VM list API instead of ListWithInstanceView API by default to support zone down scenario by @landreasyan in #3247
• feat: support templating tags for volumes by @andyzhangx in #3256
• feat: notify user using events on sku migration complete by @hasethuraman in #3227
• chore(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by @dependabot[bot] in #3265
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.24.0 by @dependabot[bot] in #3270
• chore: upgrade CSI driver sidecar images by @andyzhangx in #3271
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.24.0 to 2.25.1 by @dependabot[bot] in #3275
• fix: allow . in Azure tags by @kalexmills in #3277
• doc: update new chart versions by @andyzhangx in #3278
• test: disable MaximumDataDisksExceeded flaky test case by @andyzhangx in #3279
• chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #3280
• feat: support custom k8s feature gates by @adolsalamanca in #3269
• chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @dependabot[bot] in #3281
• test: ignore latest tgz file in helm chart index verification by @andyzhangx in #3282
• chore(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @dependabot[bot] in https://github.com/kubernetes-sigs/azuredisk-cs...

v1.33.7 release

What's Changed

• [release-1.33] chore: upgrade AzureAD lib by @k8s-infra-cherrypick-robot in #3419
• [release-1.33] fix: CVE-2025-58181 by @andyzhangx in #3424
• [release-1.33] fix: disk creation failure in AzureStack env by @k8s-infra-cherrypick-robot in #3429
• [release-1.33] cleanup: remove unnecessary drop all capability by @andyzhangx in #3431
• doc: cut v1.33.7 release by @andyzhangx in #3433

Full Changelog: v1.33.6...v1.33.7

v1.33.6 release

What's Changed

• [release-1.33] test: fix govet error by @k8s-infra-cherrypick-robot in #3359
• [release-1.33] fix: validating Block Device Size Before Resizing FileSystem by @k8s-infra-cherrypick-robot in #3361
• [release-1.33] fix: disable enable-minimum-retry-after by default by @k8s-infra-cherrypick-robot in #3362
• [release-1.33] test: fix sanity test failure by @k8s-infra-cherrypick-robot in #3367
• [release-1.33] Revert "fix: disable enable-minimum-retry-after by default" by @k8s-infra-cherrypick-robot in #3371
• [release-1.33] fix: reconcile loop to watch migrations if earlier submission had failed by @k8s-infra-cherrypick-robot in #3384
• [release-1.33] chore: enable VolumeAttributeClass in kubectl deployment by @k8s-infra-cherrypick-robot in #3387
• [release-1.33] chore: update max data disk count table by @k8s-infra-cherrypick-robot in #3388
• [release-1.33] fix: create volume failure when requested pvc size is smaller than snapshot disk size by @k8s-infra-cherrypick-robot in #3395
• [release-1.33] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #3397
• [release-1.33] fix: CVE-2025-52881 by @andyzhangx in #3407
• [release-1.33] chore: upgrade sidecar image versions by @andyzhangx in #3409
• [release-1.33] chore: provide flags for converting ReadWrite cachingMode for in-tree PV by @k8s-infra-cherrypick-robot in #3414
• doc: cut v1.33.6 release by @andyzhangx in #3415

Full Changelog: v1.33.5...v1.33.6

v1.33.5 release

What's Changed

• [release-1.33] chore: upgrade CSI driver sidecar images by @andyzhangx in #3272
• [release-1.33] test: ignore latest tgz file in helm chart index verification by @k8s-infra-cherrypick-robot in #3284
• [release-1.33] fix: CVE-2025-5187 by @andyzhangx in #3289
• [release-1.33] test: fix helm install by @k8s-infra-cherrypick-robot in #3299
• [release-1.33] fix: China cloud endpoints by @k8s-infra-cherrypick-robot in #3305
• [release-1.33] feat: monitor migration for premiumv2 disk created from snapshot and edge case handling by @k8s-infra-cherrypick-robot in #3304
• [release-1.33] fix: ZRS disk should support 4 zones by @k8s-infra-cherrypick-robot in #3310
• [release-1.33] chore: update max data disk count table by @k8s-infra-cherrypick-robot in #3315
• [release-1.33] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #3325
• [release-1.33] chore(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/azurediskplugin by @k8s-infra-cherrypick-robot in #3331
• [release-1.33] fix: detach call should not use the full context deadline by @andyzhangx in #3334
• [release-1.33] chore: update max data disk count table by @k8s-infra-cherrypick-robot in #3340
• [release-1.33] chore: upgrade sidecar image versions by @andyzhangx in #3346
• doc: cut v1.33.5 release by @andyzhangx in #3348

Full Changelog: v1.33.4...v1.33.5