v1.34.1 release

What's Changed

• [release-1.34] fix: use configurable kubelet path in helm chart by @andyzhangx in #2795
• [release-1.34] fix: mount host etc inside azurefile container in helm chart config by @andyzhangx in #2796
• [release-1.34] chore: upgrade Azure cloud provider lib by @andyzhangx in #2800
• [release-1.34] chore: upgrade Azure cloud provider lib by @k8s-infra-cherrypick-robot in #2803
• [release-1.34] feat: support creating account with SmbOAuthEnabled by @k8s-infra-cherrypick-robot in #2805
• doc: cut v1.34.1 release by @andyzhangx in #2806

Full Changelog: v1.34.0...v1.34.1

v1.34.0 release

What's Changed

• doc: cut v1.33.0 release by @andyzhangx in #2565
• build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot[bot] in #2567
• fix: avoid installing aznfs when linux distribution is not supported by @cvvz in #2572
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @dependabot[bot] in #2573
• fix: can't install aznfs on azurelinux by @cvvz in #2575
• fix: csi driver metrics to collect errors by @andyzhangx in #2578
• azurefile: revert to use virtio-fs for kata pods by @arc9693 in #2577
• chore: upgrade azcopy to v10.29.1 by @andyzhangx in #2583
• doc: update new chart versions by @andyzhangx in #2593
• feat: Use WMI to implement Volume API to reduce PowerShell overhead by @andyzhangx in #2532
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2596
• chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #2598
• fix: disable WMI call method on Windows node by @andyzhangx in #2599
• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #2602
• build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot[bot] in #2603
• doc: add StandardV2_LRS in doc examples by @andyzhangx in #2608
• test: fix CVE-2025-4673 in trivy action by @andyzhangx in #2611
• feat: support encryptInTransit mountOption in nfs volume by @andyzhangx in #2616
• fix: aznfs package install failure on arm64 node by @andyzhangx in #2620
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2623
• build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0 by @dependabot[bot] in #2621
• doc: update new chart versions by @andyzhangx in #2627
• build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @dependabot[bot] in #2626
• fix: only use the permission bits for chmod by @nearora-msft in #2600
• build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot[bot] in #2633
• fix: CVE-2025-4563 by @andyzhangx in #2635
• fix: don't change subnet.PrivateEndpointNetworkPolicies if it's already set by @andyzhangx in #2637
• feat: Migrate PathValid and SMB API to use WMI and Win32 API by @laozc in #2609
• build(deps): bump github.com/microsoft/wmi from 0.31.1 to 0.31.2 by @dependabot[bot] in #2639
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.8.0 to 1.8.1 by @dependabot[bot] in #2640
• cleanup: Remove the microsoft/wmi workaround for InvokeCimMethod by @laozc in #2646
• chore: upgrade snapshot image version to v8.3.0 by @andyzhangx in #2650
• build(deps): bump github.com/microsoft/wmi from 0.31.2 to 0.32.0 by @dependabot[bot] in #2654
• doc: update new chart versions by @andyzhangx in #2655
• build(deps): bump github.com/microsoft/wmi from 0.32.0 to 0.33.0 by @dependabot[bot] in #2656
• cleanup: decrease parsing volumeID log level by @andyzhangx in #2660
• build(deps): bump github.com/microsoft/wmi from 0.33.0 to 0.34.0 by @dependabot[bot] in #2657
• build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in #2658
• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #2664
• cleanup: refine clientID parameter parsing by @andyzhangx in #2666
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 by @dependabot[bot] in #2669
• feat: support provisionedBandwidth, provisionedIops parameter for file share v2 by @andyzhangx in #2671
• cleanup: refine kataNode label matching by @andyzhangx in #2673
• chore: make runtimeClassHandler and confidentialContainerLabel configurable by @andyzhangx in #2679
• cleanup: refine Dockerfile by @andyzhangx in #2680
• chore: upgrade to dalec image for snapshot container by @andyzhangx in #2683
• build(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 by @dependabot[bot] in #2685
• fix: intree volume unmount failure by @andyzhangx in #2687
• fix: only unmount kata volume if it's kata node by @andyzhangx in #2688
• build(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 by @dependabot[bot] in #2686
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azfile from 1.5.1 to 1.5.2 by @dependabot[bot] in #2693
• build(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in #2692
• build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by @dependabot[bot] in #2702
• test: fix CVE-2025-47907 traivy test failure by @andyzhangx in #2704
• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2703
• chore: upgrade azcopy to v10.30.0 by @andyzhangx in #2709
• feat: support nfs volume clone and snapshot restore by @andyzhangx in #2653
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #2714
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2715
• build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by @dependabot[bot] in #2716
• feat: support new folderName creation if not exists by @david-garcia-garcia in #2699
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @dependabot[bot] in #2717
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @dependabot[bot] in #2721
• chore: upgrade CSI driver sidecar images by @andyzhangx in #2719
• build(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.1 by @dependabot[bot] in #2725
• test: ignore latest tgz file in helm chart index verification by @andyzhangx in #2726
• build(deps): bump github.com/onsi/gomega from 1.38.1 to 1.38.2 by @dependabot[bot] in #2731
• fix: CVE-2025-5187 by @andyzhangx in #2732
• fix: respect secretName during volume creation by @andyzhangx in #2733
• build(deps): bump github.com/microsoft/wmi fr...

v1.31.8 release

What's Changed

• [release-1.31] chore: fix helm chart index on release-1.31 by @andyzhangx in #2649
• [release-1.31] cleanup: decrease parsing volumeID log level by @k8s-infra-cherrypick-robot in #2663
• [release-1.31] fix: CVE-2025-22868 by @andyzhangx in #2677
• [release-1.31] test: fix CVE-2025-47907 traivy test failure by @k8s-infra-cherrypick-robot in #2707
• [release-1.31] chore: upgrade azcopy to v10.30.0 by @k8s-infra-cherrypick-robot in #2712
• [release-1.31] test: ignore latest tgz file in helm chart index verification by @k8s-infra-cherrypick-robot in #2728
• [release-1.31] test: file helm install failure by @k8s-infra-cherrypick-robot in #2777
• [release-1.31] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #2776
• [release-1.31] build(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2781
• [release-1.31] chore: upgrade azcopy to v10.30.1 by @k8s-infra-cherrypick-robot in #2785
• [release-1.31] fix: CVE-2025-5187 by @andyzhangx in #2786
• doc: cut v1.31.8 release by @andyzhangx in #2789

Full Changelog: v1.31.7...v1.31.8

v1.33.5 release

What's Changed

• [release-1.33] test: ignore latest tgz file in helm chart index verification by @k8s-infra-cherrypick-robot in #2727
• [release-1.33] fix: CVE-2025-5187 by @andyzhangx in #2734
• [release-1.33] fix: respect secretName during volume creation by @k8s-infra-cherrypick-robot in #2736
• [release-1.33] test: fix helm install by @k8s-infra-cherrypick-robot in #2744
• [release-1.33] cleanup: refine helm install by @k8s-infra-cherrypick-robot in #2746
• [release-1.33] test: fix golint error by @k8s-infra-cherrypick-robot in #2748
• [release-1.33] fix: China cloud endpoints by @k8s-infra-cherrypick-robot in #2750
• [release-1.33] chore: add minimum size for premium v2 by @k8s-infra-cherrypick-robot in #2761
• [release-1.33] test: add v2 file share e2e test by @k8s-infra-cherrypick-robot in #2766
• [release-1.33] fix: set default IOPS and throughput in v2 file share creation by @k8s-infra-cherrypick-robot in #2769
• doc: cut v1.33.5 release by @andyzhangx in #2771

Full Changelog: v1.33.4...v1.33.5

v1.32.7 release

What's Changed

• [release-1.32] test: file helm install failure by @andyzhangx in #2752
• [release-1.32] fix: China cloud endpoints by @k8s-infra-cherrypick-robot in #2751
• [release-1.32] chore: add minimum size for premium v2 by @k8s-infra-cherrypick-robot in #2762
• [release-1.32] test: add v2 file share e2e test by @k8s-infra-cherrypick-robot in #2767
• doc: cut v1.32.7 release by @andyzhangx in #2770

Full Changelog: v1.32.6...v1.32.7

v1.32.6 release

What's Changed

• [release-1.32] chore: fix helm chart index on release-1.32 by @andyzhangx in #2648
• [release-1.32] cleanup: decrease parsing volumeID log level by @k8s-infra-cherrypick-robot in #2662
• [release-1.32] cleanup: refine clientID parameter parsing by @k8s-infra-cherrypick-robot in #2668
• [release-1.32] cleanup: refine kataNode label matching by @k8s-infra-cherrypick-robot in #2675
• [release-1.32] fix: CVE-2025-22868 by @andyzhangx in #2676
• [release-1.32] fix: intree volume unmount failure by @k8s-infra-cherrypick-robot in #2690
• [release-1.32] chore: make runtimeClassHandler, confidentialContainerLabel configurable by @andyzhangx in #2695
• [release-1.32] fix: only unmount kata volume if it's kata node by @k8s-infra-cherrypick-robot in #2696
• [release-1.32] test: fix CVE-2025-47907 traivy test failure by @k8s-infra-cherrypick-robot in #2706
• [release-1.32] chore: upgrade azcopy to v10.30.0 by @k8s-infra-cherrypick-robot in #2711
• [release-1.32] test: ignore latest tgz file in helm chart index verification by @k8s-infra-cherrypick-robot in #2729
• [release-1.32] fix: CVE-2025-5187 by @andyzhangx in #2735
• [release-1.32] fix: respect secretName during volume creation by @k8s-infra-cherrypick-robot in #2737
• doc: cut v1.32.6 release by @andyzhangx in #2738

Full Changelog: v1.32.5...v1.32.6

v1.33.4 release

What's Changed

• [release-1.33] chore: fix helm chart index on release-1.33 by @andyzhangx in #2647
• [release-1.33] chore: upgrade snapshot image version to v8.3.0 by @andyzhangx in #2651
• [release-1.33] cleanup: decrease parsing volumeID log level by @k8s-infra-cherrypick-robot in #2661
• [release-1.33] cleanup: refine clientID parameter parsing by @k8s-infra-cherrypick-robot in #2667
• [release-1.33] feat: support provisionedBandwidth, provisionedIops parameter for file share v2 by @k8s-infra-cherrypick-robot in #2672
• [release-1.33] cleanup: refine kataNode label matching by @k8s-infra-cherrypick-robot in #2674
• [release-1.33] chore: make runtimeClassHandler and confidentialContainerLabel configurable by @k8s-infra-cherrypick-robot in #2681
• [release-1.33] chore: upgrade to dalec image for snapshot container by @andyzhangx in #2684
• [release-1.33] cleanup: refine Dockerfile by @k8s-infra-cherrypick-robot in #2682
• [release-1.33] fix: intree volume unmount failure by @k8s-infra-cherrypick-robot in #2689
• [release-1.33] fix: only unmount kata volume if it's kata node by @k8s-infra-cherrypick-robot in #2691
• [release-1.33] test: fix CVE-2025-47907 traivy test failure by @k8s-infra-cherrypick-robot in #2705
• [release-1.33] chore: upgrade azcopy to v10.30.0 by @k8s-infra-cherrypick-robot in #2710
• [release-1.33] feat: support nfs volume clone and snapshot restore by @k8s-infra-cherrypick-robot in #2713
• [release-1.33] feat: support new folderName creation if not exists by @k8s-infra-cherrypick-robot in #2718
• [release-1.33] chore: upgrade CSI driver sidecar images by @andyzhangx in #2720
• doc: cut v1.33.4 release by @andyzhangx in #2722

Full Changelog: v1.33.3...v1.33.4

v1.33.3 release

What's Changed

• [release-1.33] chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2624
• [release-1.33] build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2628
• [release-1.33] fix: only use the permission bits for chmod by @k8s-infra-cherrypick-robot in #2631
• [release-1.33] fix: don't change subnet.PrivateEndpointNetworkPolicies if it's already set by @andyzhangx in #2638
• doc: cut v1.33.3 release by @andyzhangx in #2644

Full Changelog: v1.33.2...v1.33.3

v1.32.5 release

What's Changed

• [release-1.32] chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2605
• [release-1.32] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2613
• [release-1.32] build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2629
• [release-1.32] fix: CVE-2025-4563 by @andyzhangx in #2636
• doc: cut v1.32.5 release by @andyzhangx in #2643

Full Changelog: v1.32.4...v1.32.5

v1.31.7 release

What's Changed

• [release-1.31] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2614
• [release-1.31] test: fix golint errors by @andyzhangx in #2617
• [release-1.31] build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2632
• doc: cut v1.31.7 release by @andyzhangx in #2642

Full Changelog: v1.31.6...v1.31.7