v1.35.1 release

What's Changed

• [release-1.35] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #2965
• [release-1.35] chore: refactor metrics pkg by @k8s-infra-cherrypick-robot in #2975
• [release-1.35] fix: CVE-2026-24834 by @k8s-infra-cherrypick-robot in #2978
• [release-1.35] fix: upgrade to aznfs 3.0.14 on Ubuntu node by @k8s-infra-cherrypick-robot in #2980
• [release-1.35] chore: upgrade CSI sidecar image versions by @andyzhangx in #2983
• [release-1.35] cleanup: refine subscriptionIDRegex to make Regex matching more efficient by @k8s-infra-cherrypick-robot in #2987
• [release-1.35] chore: upgrade azcopy to v10.32.1 to fix CVEs by @k8s-infra-cherrypick-robot in #2991
• [release-1.35] chore: upgrade Azure cloud provider lib by @andyzhangx in #2996
• [release-1.35] fix: CVE-2026-24051 by @k8s-infra-cherrypick-robot in #2998
• doc: cut v1.35.1 release by @andyzhangx in #3004

Full Changelog: v1.35.0...v1.35.1

v1.34.4 release

What's Changed

• [release-1.34] chore: upgrade azcopy to v10.31.1 to fix CVEs by @k8s-infra-cherrypick-robot in #2934
• [release-1.34] fix: optionally skip reading the config from the API server by @k8s-infra-cherrypick-robot in #2942
• [release-1.34] chore: Add CSI-specific Prometheus metrics by @k8s-infra-cherrypick-robot in #2946
• [release-1.34] test: fix CVE-2025-61726 trivy failure by @k8s-infra-cherrypick-robot in #2948
• [release-1.34] build(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2952
• [release-1.34] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #2966
• [release-1.34] fix: CVE-2026-24834 by @k8s-infra-cherrypick-robot in #2985
• [release-1.34] fix: upgrade to aznfs 3.0.14 on Ubuntu node by @k8s-infra-cherrypick-robot in #2981
• [release-1.34] chore: upgrade CSI sidecar image versions by @andyzhangx in #2984
• [release-1.34] cleanup: refine subscriptionIDRegex to make Regex matching more efficient by @k8s-infra-cherrypick-robot in #2988
• [release-1.34] chore: upgrade azcopy to v10.32.1 to fix CVEs by @k8s-infra-cherrypick-robot in #2992
• [release-1.34] fix: CVE-2026-24051 by @andyzhangx in #2999
• doc: cut v1.34.4 release by @andyzhangx in #3003

Full Changelog: v1.34.3...v1.34.4

v1.33.8 release

What's Changed

• [release-1.33] chore: upgrade azcopy to v10.31.1 to fix CVEs by @andyzhangx in #2935
• [release-1.33] test: fix CVE-2025-61726 trivy failure by @k8s-infra-cherrypick-robot in #2949
• [release-1.33] build(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2953
• [release-1.33] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #2967
• [release-1.33] fix: CVE-2026-24051 by @andyzhangx in #3000
• [release-1.33] chore: upgrade azcopy to v10.32.1 to fix CVEs by @andyzhangx in #3001
• doc: cut v1.33.8 release by @andyzhangx in #3002

Full Changelog: v1.33.7...v1.33.8

v1.35.0 release

What's Changed

• doc: cut v1.34.0 release by @andyzhangx in #2790
• fix: use configurable kubelet path in helm chart by @andyzhangx in #2793
• fix: mount host etc inside azurefile container in helm chart config by @mittachaitu in #2794
• chore: use v1.34.0-2 image by @andyzhangx in #2797
• chore: upgrade Azure cloud provider lib by @andyzhangx in #2799
• chore: upgrade Azure cloud provider lib by @andyzhangx in #2802
• feat: support creating account with SmbOAuthEnabled by @andyzhangx in #2804
• doc: update new chart versions by @andyzhangx in #2807
• test: fix sanity test by @andyzhangx in #2808
• fix: controller panic when skuName is not provided in small size file share creation by @andyzhangx in #2812
• build(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10 by @dependabot[bot] in #2817
• fix: driver crash on FIPS enabled node by @andyzhangx in #2816
• doc: mount with managed identity by @andyzhangx in #2819
• build(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0 by @dependabot[bot] in #2820
• build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2821
• build(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 by @dependabot[bot] in #2822
• test: fix unit test timeout by @andyzhangx in #2825
• build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by @dependabot[bot] in #2824
• build(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 by @dependabot[bot] in #2823
• build(deps): bump github.com/microsoft/wmi from 0.37.0 to 0.38.1 by @dependabot[bot] in #2831
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azfile from 1.5.2 to 1.5.3 by @dependabot[bot] in #2832
• test: fix CVE-2025-47912 error by @andyzhangx in #2835
• chore: upgrade azcopy to v10.31.0 by @andyzhangx in #2836
• fix: CVE-2025-52881 by @andyzhangx in #2850
• build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by @dependabot[bot] in #2848
• Revert "fix: respect secretName during volume creation" by @andyzhangx in #2846
• fix: CreateVolume to return actual provisioned capacity after rounding by @Copilot in #2853
• fix: snapshot restore and volume clone failure in some new sovereign clouds by @hasethuraman in #2852
• chore: upgrade sidecar image versions by @andyzhangx in #2844
• test: upgrade to csi-test v5.4.0 by @andyzhangx in #2866
• doc: update new chart versions by @andyzhangx in #2874
• build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 by @dependabot[bot] in #2873
• chore: upgrade AzureAD lib by @andyzhangx in #2875
• docs: remove unused Microsoft.Storage/operations/read permission by @cadenmarchese in #2879
• build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #2880
• fix: CVE-2025-47914, CVE-2025-58181 by @andyzhangx in #2881
• test: fix trivy CVE-2025-61727 by @andyzhangx in #2885
• test: add multichannel e2e test by @andyzhangx in #2889
• build(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @dependabot[bot] in #2891
• build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 by @dependabot[bot] in #2892
• fix: upgrade to aznfs 3.0.10 on Ubuntu node by @andyzhangx in #2893
• build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @dependabot[bot] in #2897
• build(deps): bump github.com/microsoft/wmi from 0.38.1 to 0.38.3 by @dependabot[bot] in #2896
• fix: CVE-2025-13281 by @andyzhangx in #2898
• fix: allow uppercase subscription ID by @andyzhangx in #2903
• fix: install proxy failure on some distros by @andyzhangx in #2907
• chore: upgrade csi-provisioner to v6.1.0 by @andyzhangx in #2909
• fix: remove global lock from azurefile proxy service by @mittachaitu in #2911
• build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @dependabot[bot] in #2915
• fix: add mount timeout in NFS EiT mount by @andyzhangx in #2916
• cleanup: refine logging by @andyzhangx in #2922
• doc: update new chart versions by @andyzhangx in #2930
• Add clientID parameter for StorageClass and PersistentVolume to the driver-parameters.md file by @tspearconquest in #2929
• build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by @dependabot[bot] in #2932
• chore: upgrade azcopy to v10.31.1 to fix CVEs by @andyzhangx in #2933
• build(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @dependabot[bot] in #2931
• unit tests: chmod setgid bit and allow skipping cloud tests by @dobsonj in #2937
• build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by @dependabot[bot] in #2938
• fix: optionally skip reading the config from the API server by @jsafrane in #2940
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azfile from 1.5.3 to 1.5.4 by @dependabot[bot] in #2941
• chore: Add CSI-specific Prometheus metrics by @hccheng72 in #2943
• test: fix CVE-2025-61726 trivy failure by @andyzhangx in #2947
• build(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurefileplugin by @dependabot[bot] in #2951
• build(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 by @dependabot[bot] in #2955
• feat: support mount smb file share with workload identity token by @andyzhangx in #2902
• fix: replace os.ReadDir with fs.ReadDir(1) to avoid extra memory usage by @andyzhangx in #2959

New Contributors

• @mittachaitu made their first contribution in #2794
• @Copilot made their first contribution in #2853
• @hasethuraman made their first contribution in #2852
• @tspearconquest made their first contribution in #2929

Full Changelog: v1.34.0...v1.35.0

v1.34.3 release

What's Changed

• [release-1.34] chore: upgrade AzureAD lib by @k8s-infra-cherrypick-robot in #2876
• [release-1.34] fix: CVE-2025-58181 by @andyzhangx in #2882
• [release-1.34] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #2886
• [release-1.34] fix: upgrade to aznfs 3.0.10 on Ubuntu node by @k8s-infra-cherrypick-robot in #2894
• [release-1.34] fix: CVE-2025-13281 by @k8s-infra-cherrypick-robot in #2899
• [release-1.34] fix: allow uppercase subscription ID by @k8s-infra-cherrypick-robot in #2904
• [release-1.34] fix: install proxy failure on some distros by @k8s-infra-cherrypick-robot in #2908
• [release-1.34] chore: upgrade csi-provisioner to v6.1.0 by @andyzhangx in #2910
• [release-1.34] fix: remove global lock from azurefile proxy service by @k8s-infra-cherrypick-robot in #2913
• [release-1.34] fix: add mount timeout in NFS EiT mount by @k8s-infra-cherrypick-robot in #2920
• [release-1.34] cleanup: refine logging by @k8s-infra-cherrypick-robot in #2923
• doc: cut v1.34.3 release by @andyzhangx in #2927

Full Changelog: v1.34.2...v1.34.3

v1.33.7 release

What's Changed

• [release-1.33] chore: upgrade AzureAD lib by @andyzhangx in #2877
• [release-1.33] fix: CVE-2025-58181 by @andyzhangx in #2883
• [release-1.33] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #2887
• [release-1.33] fix: CVE-2025-13281 by @andyzhangx in #2900
• [release-1.33] fix: allow uppercase subscription ID by @k8s-infra-cherrypick-robot in #2905
• [release-1.33] chore: upgrade csi-provisioner to v6.1.0 by @andyzhangx in #2912
• [release-1.33] fix: remove global lock from azurefile proxy service by @k8s-infra-cherrypick-robot in #2917
• [release-1.33] fix: add mount timeout in NFS EiT mount by @k8s-infra-cherrypick-robot in #2921
• [release-1.33] cleanup: refine logging by @k8s-infra-cherrypick-robot in #2924
• doc: cut v1.33.7 release by @andyzhangx in #2926

Full Changelog: v1.33.6...v1.33.7

v1.32.9 release

What's Changed

• [release-1.32] chore: upgrade AzureAD lib by @andyzhangx in #2878
• [release-1.32] fix: CVE-2025-58181 by @andyzhangx in #2884
• [release-1.32] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #2888
• [release-1.32] fix: CVE-2025-13281 by @andyzhangx in #2901
• [release-1.32] fix: allow uppercase subscription ID by @k8s-infra-cherrypick-robot in #2906
• doc: cut v1.32.9 release by @andyzhangx in #2928

Full Changelog: v1.32.8...v1.32.9

v1.34.2 release

What's Changed

• [release-1.34] test: fix sanity test by @k8s-infra-cherrypick-robot in #2809
• [release-1.34] fix: controller panic when skuName is not provided in small size file share creation by @k8s-infra-cherrypick-robot in #2813
• [release-1.34] fix: driver crash on FIPS enabled node by @andyzhangx in #2818
• [release-1.34] test: fix unit test timeout by @k8s-infra-cherrypick-robot in #2826
• [release-1.34] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #2837
• [release-1.34] chore: upgrade azcopy to v10.31.0 by @k8s-infra-cherrypick-robot in #2840
• [release-1.34] fix: CVE-2025-52881 by @andyzhangx in #2854
• [release-1.34] fix: CreateVolume to return actual provisioned capacity after rounding by @andyzhangx in #2860
• [release-1.34] Revert "fix: respect secretName during volume creation" by @k8s-infra-cherrypick-robot in #2857
• [release-1.34] cherry-pick: fix: snapshot restore and volume clone failure in some new sovereign clouds by @rnhan in #2863
• [release-1.34] chore: upgrade sidecar image versions by @andyzhangx in #2864
• doc: cut v1.34.2 release by @andyzhangx in #2869

Full Changelog: v1.34.1...v1.34.2

v1.33.6 release

What's Changed

• [release-1.33] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #2773
• [release-1.33] build(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2779
• [release-1.33] chore: upgrade azcopy to v10.30.1 by @k8s-infra-cherrypick-robot in #2783
• [release-1.33] chore: upgrade sidecar image versions by @andyzhangx in #2788
• [release-1.33] test: fix sanity test by @andyzhangx in #2810
• [release-1.33] fix: controller panic when skuName is not provided in small size file share creation by @k8s-infra-cherrypick-robot in #2814
• [release-1.33] test: fix unit test timeout by @k8s-infra-cherrypick-robot in #2827
• [release-1.33] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #2838
• [release-1.33] chore: upgrade azcopy to v10.31.0 by @andyzhangx in #2841
• [release-1.33] fix: CVE-2025-52881 by @andyzhangx in #2855
• [release-1.33] Revert "fix: respect secretName during volume creation" by @k8s-infra-cherrypick-robot in #2858
• [release-1.33] cherry-pick: fix: snapshot restore and volume clone failure in some new sovereign clouds by @rnhan in #2862
• [release-1.33] chore: upgrade sidecar image versions by @andyzhangx in #2865
• doc: cut v1.33.6 release by @andyzhangx in #2868

Full Changelog: v1.33.5...v1.33.6

v1.32.8 release

What's Changed

• [release-1.32] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #2775
• [release-1.32] build(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2780
• [release-1.32] chore: upgrade azcopy to v10.30.1 by @k8s-infra-cherrypick-robot in #2784
• [release-1.32] test: fix sanity test by @k8s-infra-cherrypick-robot in #2811
• [release-1.32] fix: controller panic when skuName is not provided in small size file share creation by @k8s-infra-cherrypick-robot in #2815
• [release-1.32] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #2839
• [release-1.32] chore: upgrade azcopy to v10.31.0 by @andyzhangx in #2842
• [release-1.32] fix: CVE-2025-52881 by @andyzhangx in #2856
• [release-1.32] Revert "fix: respect secretName during volume creation" by @k8s-infra-cherrypick-robot in #2859
• [release-1.32] cherry-pick: fix: snapshot restore and volume clone failure in some new sovereign clouds by @rnhan in #2861
• doc: cut v1.32.8 release by @andyzhangx in #2867

Full Changelog: v1.32.7...v1.32.8