What's Changed

• Revert "update templates for v3.16.2" by @black-dragon74 in #6180
• fix(helm): fix invalid YAML syntax and nil pointer in values.yaml (backport #5990) by @mergify[bot] in #6216
• rbd: use StorageClass image features for temp clones and snapshots (backport #6205) by @mergify[bot] in #6217
• e2e: update ceph-csi-operator API from v1alpha1 to v1 (backport #6218) by @mergify[bot] in #6293
• ci: commitlint and markdownlint fix (backport #6307) by @mergify[bot] in #6365
• ci: disable ExtendWebSocketsToKubelet for K8s >= 1.36 (backport #6319) by @mergify[bot] in #6367
• csi: add VolumeLocks to NodeGetVolumeStats for RBD and CephFS (backport #6291) by @mergify[bot] in #6292
• util: fix wrong key size for DEKStoreIntegrated (backport #6344) by @mergify[bot] in #6368
• ci: use Rook v1.19.9 with new Ceph key format support (backport #6487) by @mergify[bot] in #6503
• doc: update templates for release-v3.16.3 by @black-dragon74 in #6522

Full Changelog: v3.16.2...v3.16.3

What's Changed

Bug Fixes

• rbd: add missing rbdVol.Destroy() in replication handlers (backport #6451) by @mergify[bot] in #6456
• rbd: Fix connection leak when a non-nil volume is returned (backport #6432) by @mergify[bot] in #6440
• util: fix wrong key size for DEKStoreIntegrated (backport #6344) by @mergify[bot] in #6363
• rbd: open image read-only for DiffIterate in getUsedBytes (backport #6306) by @mergify[bot] in #6309

CI/Testing Improvements

• ci: disable ExtendWebSocketsToKubelet for K8s >= 1.36 (backport #6319) by @mergify[bot] in #6364
• e2e: validate volume stats metrics for block and filesystem PVCs (backport #6306) by @mergify[bot] in #6309
• ci: commitlint and markdownlint fix (backport #6307) by @mergify[bot] in #6308
• release: update templates and docs for v3.17.1 by @iPraveenParihar in #6470

Full Changelog: v3.17.0...v3.17.1

We are excited to announce another release of Ceph CSI, v3.17.0. This is another significant step towards using enhanced Container Storage Interface (CSI) features with Ceph Cluster in the backend. With this release, we are introducing many brand-new features and enhancements to the Ceph CSI driver. Here are the changelog/release highlights.

Changelog and Highlights:

NOTE

• The --setmetadata flag has been deprecated and has no effect. Metadata is now always set on RBD images and CephFS subvolumes. The flag will be removed in a future release (#6225).

Features

Kubernetes ServiceAccount Based Volume Access Restriction

This release introduces ServiceAccount based volume access restriction across all drivers (RBD, CephFS, NFS, NVMe-oF), enabling fine-grained access control for volumes based on Kubernetes ServiceAccount identity. Refer to the design proposal and #6076 for more details.

RBD

• VolumeAttributesClass QoS: Use VolumeAttributesClass feature to implement RBD volume QoS via ControllerModifyVolume, allowing dynamic QoS parameter changes without recreating volumes (this is only supported for nbd mounter) (#6160)
• StorageClass image features for temp clones and snapshots: Temp clones and snapshot backing images now use StorageClass image features (#6205)
• Fix missing data pool in PVC restore and clone images: Fixed data pool not being set correctly during PVC restore and clone operations (#6086)
• DiffIterateByID fix: Fixed Length calculation in DiffIterateByID (#6200)
• PV metadata updates: Update PV metadata on volumes (#6059)
• Enable WholeObject & IncludeParent in snap diff (#6279)
• GKLM KMS over KMIP: Added support for GKLM (Guardium Key Lifecycle Manager) KMS over KMIP protocol (#6048)

CephFS

• VolumeGroupReplication RBAC: Added RBAC for VolumeGroupReplication resources (#6233)
• CSI metadata on subvolumes: Added SetSubVolCSIMetadata to set CSI metadata on subvolumes (#6174)
• Improved unfencing: Use RemoveNetworkFence directly for unfencing (#6278)

NFS

• ControllerModifyVolume: Allow changing NFS-server hostname through ControllerModifyVolume (#5829)

NVMe-oF

• DH-CHAP authentication: Added DH-CHAP authentication support for NVMe-oF connections, enabling secure host authentication at both controller publish and node stage levels (#5913)
• Snapshot support: Relay CreateSnapshot/DeleteSnapshot to RBD backend for NVMe-oF volumes (#5928)
• Auto listeners: Added auto listener feature for NVMe-oF gateway listeners (#5891)
• Safe controller disconnect: Implemented safe controller disconnect logic with device tracking (#6163)
• Mount cache and locking: Added mount cache and GroupLock for safe NVMe disconnect during stage/unstage operations (#6192, #6210)
• Namespace masking: Added namespace masking calls for NVMe-oF (#6241)
• Optional gateway port: Made nvmeofGatewayPort an optional StorageClass parameter (#6230)
• IP address resolution: Support resolving IP address for NVMe-oF gateway listeners by hostname (#6061)
• GroupLock utility: Added GroupLock for two-group mutual exclusion (#6183)

Common

• VolumeID validation: Added validator for VolumeID in incoming gRPC requests (#5957)
• Allow underscores in volume ID: Volume IDs now support underscores (#6094)
• Slow gRPC restart: The CSI driver process is now automatically restarted if any unary gRPC call is stuck for more than 10 minutes. ReclaimSpace calls are excluded from this limit. Use --feature-gates=SlowGRPCRestart=false to disable (#6286)
• VolumeLocks for NodeGetVolumeStats: Added VolumeLocks to NodeGetVolumeStats for RBD and CephFS (#6291)

What's Changed

NVMe-oF

• Fix CSI node plugin crash on immutable Linux distributions (#6165)
• Fix NVMe-oF resource cleanup on CreateVolume failure (#5936)
• Fix removeHost bug (#6084)
• Fix dhchap key-value bug in rbd metadata (#6085)
• Add check return status at removeHost (#6124)
• Treat "connecting" state as valid in path detection (#5974)

RBD

• Revert "rbd: fetch the volumeIds from VGRContent's status for omap data" (#5962)
• Validate mounter type in ControllerModifyVolume (#6229)

Other

• Use go-ceph blocklist APIs (#6054)
• Use csi objectuuid for rados locks (#6204)
• Include stderr in cryptsetup errors (#6036)
• Disable informers on secrets (#5984)

Continuous Integration and Testing

• Start testing the devel branch with Kubernetes 1.35 (#5973)
• Use Rook 1.19.3 and Ceph Tentacle (#5672)
• Use minikube v1.38.0 and v1.38.1 (#5993, #6138)
• Enable NVMe-oF testing by default (#5641)
• Add volume expansion tests for NVMe-oF (#6058)
• Enable fail-fast to abort suite on first test failure (#6088)
• Convert By() to It() and use Ordered containers (#6136)
• Add markdown links validation action (#6092)
• Cache mon IPs, clusterID, and parallelize readiness checks (#6114)
• Add testing for EC pool (#6086)
• Update ceph-csi-operator API from v1alpha1 to v1 (#6218)
• Upgrade from v3.16.0 for upgrade tests (#5932)

Deployment

• Add deployment files for NVMe-oF (#5641)
• Update CSI sidecars to latest versions available (#6112)
• Use GA versions of sidecars everywhere (#6189)
• Add SecurityContextConstraints to NVMe-oF ServiceAccounts (#6249)
• Add RBAC for csi-provisioner to access VolumeAttributesClass (#6160)
• Allow NFS-provisioner to access VolumeAttributesClasses (#5829)

Helm Charts

• Fix domainLabels empty array handling in template (#5990)

Documentation

• Add design proposal for K8s SA based volume access restriction (#6076)
• Add NVMe-oF DH-CHAP feature doc design (#6063)
• Document current NVMe-oF features (#6065)
• Add documentation for GKLM KMS (#6048)
• Add examples for NVMe-oF and NVMe-oF snapshots (#5641)
• Update QoS design doc and VolumeAttributesClass documentation (#6264)
• Mention encryption is not supported for static PVC (#6212)
• Add AGENTS.md with guidance for AI agents (#6181)
• Fix broken links in docs (#6082)

Build and Cleanups

• Adapt to go-ceph 0.38.0 and 0.39.0 blocklist API changes (#6069, #6245)
• Add go-lint-fix Makefile target for golangci-lint autofix (#6208)
• Deprecate the --setmetadata flag from configuration (#6225)
• Refactor tryAcquire function to reduce complexity (#6115)
• Use SetWriteDeadline for writeTimeout (#6115)
• Fix encryptedMetedataDEK typo (#6115)

Updates of dependencies

• Bump k8s.io/kubernetes from 1.35.0 to 1.35.4 (#6068, #6152, #6195, #6242)
• Bump k8s.io/api from 0.35.0 to 0.36.0 (#6070, #6153, #6196, #6243)
• Bump github.com/ceph/go-ceph from 0.37.0 to 0.39.0 (#6069, #6245)
• Bump github.com/ceph/ceph-nvmeof/lib/go/nvmeof (#5947)
• Bump google.golang.org/grpc from 1.78.0 to 1.81.0 (#6071, #6172, #6188, #6223, #6262)
• Bump github.com/hashicorp/vault/api from 1.22.0 to 1.23.0 (#6197)
• Bump github.com/onsi/ginkgo/v2 (#6255)
• Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#6220)
• Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.1 (#5945, #5976)
• Bump github.com/csi-addons/kubernetes-csi-addons from 0.13.0 to 0.14.0 (#5946)
• Bump github.com/kubernetes-csi/csi-lib-utils (#6009)
• Bump golang.org/x/oauth2 (#6040, #6166)
• Bump golang.org/x/sync (#6173)
• Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.43.0 (#6143, #6227)
• Bump actions/github-script from 8.0.0 to 9.0.0 (#6231)
• Bump actions/checkout from 6.0.1 to 6.0.2 (#5975)
• Bump actions/stale from 10.1.1 to 10.2.0 (#6118)
• Bump actions/dependency-review-action from 4.8.2 to 4.9.0 (#6117, #6168)
• Multiple other dependency updates in k8s-dependencies, github-dependencies, and golang-dependencies groups

New Contributors

• @FreekingDean made their first contribution in #6094
• @keshavsoni251199 made their first contribution in #5990
• @philipp-intelliroad made their first contribution in #6082
• @pschichtel made their first contribution in #5951
• @kaovilai made their first contribution in #6208

Full Changelog: v3.16.0...v3.17.0

What's Changed

• revert: prepare of v3.16.1 release by @iPraveenParihar in #6033
• util: use go-ceph blocklist APIs (backport #6054) by @mergify[bot] in #6056
• Allow underscore in volume ID (backport #6094) by @mergify[bot] in #6108
• nvmeof: Support resolving IP address for NVMe-oF gateway listeners (backport #6061) by @mergify[bot] in #6121
• nvmeof: add check return status at removeHost (backport #6124) by @mergify[bot] in #6128
• nvmeof: backport bugfixes and enhancements for the next v3.16 release by @nixpanic in #6161
• nvmeof: fix CSI node plugin crash on immutable Linux distributions (backport #6165) by @mergify[bot] in #6175
• doc: update templates for release-v3.16.2 by @black-dragon74 in #6176

Full Changelog: v3.16.1...v3.16.2

What's Changed

• util: disable informers on secrets (backport #5984) by @mergify[bot] in #5998
• Revert "rbd: fetch the volumeIds from VGRContent's status for omap data" (backport #5962) by @mergify[bot] in #5972
• util: validate VolumeID in incoming gRPC requests (backport #5957) by @black-dragon74 in #6022
• nvmeof: Add support for snapshots in the NVMe-oF driver (backport #5928) by @mergify[bot] in #5979
• ci: create the configmap if missing when running k8s-storage (backport #5968) by @mergify[bot] in #5980
• Release/update templates 3.16.1 by @iPraveenParihar in #6030

Full Changelog: v3.16.0...v3.16.1

We are excited to announce another release of Ceph CSI, v3.16.0. This is another significant step towards using enhanced Container Storage Interface (CSI) features with Ceph Cluster in the backend. With this release, we are introducing many brand-new features and enhancements to the Ceph CSI driver. Here are the changelog/release highlights.

Changelog and Highlights:

Features

NVMe-oF (NEW and Experimental)

The Deployment of NVMe-oF driver will be supported by Ceph-CSI-Operator soon.

This release introduces the NVMe-oF CSI driver, enabling Ceph storage to be accessed over the NVMe over Fabrics protocol. Refer to NVMe-oF.md and #5370 for more details.

RBD

• Block volume statistics support: Added ability to retrieve block volume usage statistics (#5799)
• Configurable block encryption cipher: Made the encryption cipher configurable for block volumes (#5711)
• Improved fencing logic: Modified fencing logic for RBD and CephFS volumes (#5828)

CephFS

• Improved fencing logic: Modified fencing logic for RBD and CephFS volumes (#5828)

Other

• Controller publish secret caching: Added caching for controller publish secrets to improve performance (#5497)
• User ID metadata storage: Store user ID in volume metadata (#5445)
• IPv6 support improvement: Support for compressed IPv6 addresses in ParseClientIP (#5547)

What's Changed

CephFS

• Skip reset quiesce during DeleteVolumeGroupSnapshot (#5583)
• Fix mounting of alternate filesystem when mounting by monitor list (#5643)

RBD

• Fix fencing for shallow volumes (#5503)
• Fix volume replication promote/demote failures (#5533)
• Volume demote after unpublish call (#5567)
• Remove forcePromote function (#5725)
• Prevent panic when expanding a statically provisioned volume (#5786)
• Fetch volumeIds from VGRContent's status for omap data (#5899)

Continuous Integration and Testing

• Prevent running multiple e2e suites at the same time (#5537)
• Let Mergify label NVMe-oF PRs (#5563)
• Use ceph-csi-bot for Mergify actions (#5584)
• Set update_bot_account in Mergify config (#5586)
• Use minikube v1.37.0 (#5598)
• Update CI rules for Kubernetes 1.34 (#5602)
• Auto-detect running on OpenShift (#5617)
• Add NVMe-oF gateway deployment (#5614)
• Use gci in golangci-lint (#5676)
• Update static tools in the repo (#5680)
• Prevent Mergify from triggering CI jobs twice (#5734)
• Deploy ceph-csi-operator in configurable Namespace (#5867)
• Fix pushing artifacts to quay.io (#5896)

Deployment

• Update CSI sidecars to latest versions available (#5421)
• Add list and watch permissions for secrets (#5809)

Helm Charts

• Inject POD_NAMESPACE for KMIP secret lookup (#5722)
• Add support for optionally injecting labels for VolumeSnapshotClass (#5843)
• Claim ownership of the ArtifactHub repository (#5906)
• Use repository-id instead of name for ArtifactHub (#5921, #5923)

Documentation

• Update docs & Mergify rules to prepare for v3.16 release (#5912)
• Fix link for CephFS helm doc (#5851)

Build and Cleanups

• Use Go 1.24.6 (#5781)
• Use github.com/avast/retry instead of kubernetes/wait (#5511)
• Add modprobe helper for loading kernel modules (#5564)
• Remove duplication code of k8s GetSecret (#5603)
• Introduce a Driver interface for Run() function (#5636)
• Move k8s API calls to internal/util/k8s (#5604)
• Retry controllerpublish secret fetch on missing clusterId (#5677)
• Add explicit nil check before errors.Is(err) check (#5692)
• Fix cache miss when secret watcher is not running (#5807)
• Download Golang distribution from go.dev (#5818)
• Switch to tentacle base image (#5856)

Updates of dependencies

• Bump k8s.io/kubernetes from 1.33.3 to 1.34.2 (#5520, #5590, #5762)
• Bump k8s.io/api from 0.33.3 to 0.35.0 (#5514, #5576, #5765, #5863, #5886)
• Bump github.com/ceph/go-ceph from 0.34.0 to 0.37.0 (#5516, #5689, #5885)
• Bump github.com/ceph/ceph-nvmeof/lib/go/nvmeof (#5727, #5890)
• Bump google.golang.org/grpc from 1.74.2 to 1.78.0 (#5545, #5593, #5665, #5797, #5892)
• Bump google.golang.org/protobuf from 1.36.7 to 1.36.11 (#5546, #5592, #5628, #5861)
• Bump github.com/container-storage-interface/spec from 1.11.0 to 1.12.0 (#5690)
• Bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.4 (#5626, #5663, #5719)
• Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.26.0 (#5571, #5629)
• Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#5542)
• Bump github.com/opencontainers/selinux from 1.11.1 to 1.13.0 (#5738, #5739)
• Bump github.com/hashicorp/vault/api from 1.21.0 to 1.22.0 (#5627)
• Bump golang.org/x/net from 0.45.0 to 0.48.0 (#5687, #5858)
• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#5778, #5777)
• Bump golang.org/x/sys from 0.37.0 to 0.38.0 (#5744)
• Bump golang.org/x/oauth2 from 0.30.0 to 0.34.0 (#5575, #5661, #5743, #5834)
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.11.0 to 1.12.0 (#5600)
• Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.38.4 to 1.41.5 (multiple updates)
• Bump docker/login-action from 3.4.0 to 3.5.0 (#5467)
• Bump actions/dependency-review-action from 4.7.1 to 4.8.2 (multiple updates)
  ...

What's Changed

• ci: upgrade from v3.14.2 for upgrade tests (backport #5509) by @mergify[bot] in #5522
• Bug/fencing shallow volume (backport #5503) by @mergify[bot] in #5550
• rbd: fix bug where volumereplication promote/demote would fail (backport #5533) by @mergify[bot] in #5552
• util, ParseClientIP: support compressed ipv6 addresses (backport #5547) by @mergify[bot] in #5562
• cephfs: skip reset quiesce during DeleteVolumeGroupSnapshot (backport #5583) by @mergify[bot] in #5594
• fix: retry controllerpublish secret fetch on missing clusterId (backport #5677) by @mergify[bot] in #5684
• util: add explicit nil check before errors.Is(err) check by @nixpanic in #5705
• cephfs: pass fsName when mounting from monitor list by @1602077 in #5753

Full Changelog: v3.15.0...v3.15.1

Ceph-CSI v3.15.0 release notes

We are excited to announce another release of Ceph CSI, v3.15.0. This is another significant step towards using enhanced Container Storage Interface (CSI) features with Ceph Cluster in the backend. With this release, we are introducing many brand-new features and enhancements to the Ceph CSI driver. Here are the changelog/release highlights.

Note: From Ceph CSI v3.16.0 onwards, Ceph CSI Operator will be the only supported mode of deployment for kubernetes. Migration steps will be documented for users.

Changelog and Highlights:

Features

RBD

• rbd: support read/write mix qos limit option for rbdVol by @YiteGu in #5480
• rbd: adjust qos parameters start with small case by @YiteGu in #5488
• rbd: support set qos max limit for rbdVol by @YiteGu in #5501

Common

• --setmetadata flag has been set to true by default.
• helm: Support VolumeSnapshotClass and VolumeGroupSnapshotClass by @hswong3i in #5240

What's Changed

RBD

• rbd: cleanup and improve read-only volume handling by @nixpanic in #5290
• rbd: prevent restarting mirror resync when the mirror is syncing already by @nixpanic in #5279
• rbd: improve logging for rpc calls by @Nikhil-Ladha in #5315
• rbd: skip comparing volumes in a group if new group is created by @Nikhil-Ladha in #5345
• rbd: update VolumeGroupContext by @iPraveenParihar in #5376
• rbd: add steps to enable librbd logs by @Nikhil-Ladha in #5403
• rbd: add additional logging details for stream server by @Rakshith-R in #5411
• rbd: add check before calling Destroy by @Madhu-1 in #5446
• rbd: fix expand rbd qos volume invaild by @YiteGu in #5479
• rbd: consider lastSyncTimeNotFound as image not syncing by @Rakshith-R in #5498
• rbd: return replication status and status message in case of error by @Nikhil-Ladha in #5500

NFS

• nfs: return success if export already exists by @Madhu-1 in #5372

Continuous Integration and Testing

• e2e: test for PVC with volumeBindingMode on helm installation by @ShravaniVangur in #5243
• ci: install awk in Fedora test container-image by @nixpanic in #5281
• ci: add ok-to-test label after Mergify rephrase by @nixpanic in #5289
• ci: update pull request commenter for 1.33 by @Madhu-1 in #5381
• ci: dont upload the snyk report to the github by @Madhu-1 in #5416
• ci: cancel in-progress workflow when PR is updated by @Madhu-1 in #5447
• ci: FiX E2E failures for new ceph version 19.2.2 by @Madhu-1 in #5460

Deployment

• helm: mark userID and userKey required in secret by @black-dragon74 in #5288
• helm: use CSIDriver.seLinuxMount parameter in templates by @alelindq in #5303
• deploy: add -automaxprocs to reduce CPU and memory resources by @nixpanic in #5292
• helm: use unique names for container ports by @sebhoss in #5413

Documentation

• doc: Update cephfs caps by @flx5 in #5294
• doc: fix format in helm chart by @Madhu-1 in #5360
• doc: add v3 symlink to get current versions in pkg.go.dev by @nixpanic in #5364
• doc: update Readme for v3.14.1 by @Madhu-1 in #5377
• doc: add design for NVMe-oF access to RBD-images by @nixpanic in #5397
• doc: design doc for non-graceful node shutdown by @iPraveenParihar in #5409
• doc: clarifiy NVMe-oF design a little more by @nixpanic in #5422
• doc: changes for 3.14.2 release by @Madhu-1 in #5434
• doc: design doc for userID mapping metadata by @Rakshith-R in #5425
• doc: update docs & mergifyio rules to prepare for v3.15 release by @Rakshith-R in #5506

Other

• util: fix bug in health checker by @Rakshith-R in #5272
• Run cryptsetup with "-d -" instead of "-d /dev/stdin" by @bartlaarhoven in #5307
• enable setmetadata flag by default by @yati1998 in #5333
• util: pass Servers by reference to Start() by @Rakshith-R in #5351
• csi: validate incoming VolumeGroupSnapshot requests by @nixpanic in #5353
• util: pass Servers by reference to serve() by @Rakshith-R in #5354
• csiaddons: add Status, StatusMessage in GetVolumeReplicationInfo resp by @Nikhil-Ladha in #5369
• flattenClonedRbdImages may require namespace by @odoucet in #5392
• util: explicitly set the Luks2 header size by @iPraveenParihar in #5394
• omap-generator: Fix memory problem in the csi controller cache by @Madhu-1 in #5443
• fix: Tracevol now correctly parses hexadecimal pool id by @jggc in #5451

Build and Cleanups

• build: use Go 1.24.2 by @nixpanic in #5481
• build: prepare for v3.15.0 by @Rakshith-R in #5508

Updates of dependencies

• rebase: bump the golang-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #5255
• rebase: bump golang.org/x/net from 0.38.0 to 0.39.0 in the golang-dependencies group by @dependabot[bot] in #5274
• rebase: bump the github-dependencies group with 3 updates by @dependabot[bot] in #5275
• rebase: bump golang.org/x/net from 0.36.0 to 0.38.0 in /api by @dependabot[bot] in #5277
• rebase: bump golang.org/x/net from 0.37.0 to 0.38.0 in /e2e by @dependabot[bot] in #5278
• rebase: bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot[bot] in #5286
• rebase: bump github.com/ceph/go-ceph from 0.32.1-0.20250307053135-38b9676b1d4e to 0.33.0 by @dependabot[bot] in #5285
• rebase: bump github.com/aws/aws-sdk-go from 1.55.6 to 1.55.7 in the github-dependencies group by @dependabot[bot] in #5297
• rebase: bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 in /actions/retest by @dependabot[bot] in #5305
• rebase: bump k8s.io/kubernetes from 1.32.3 to 1.33.0 in the k8s-dependencies group by @dependabot[bot] in #5296
• rebase: bump the golang-dependencies group with 3 updates by @dependabot[bot] in #5304
• rebase: bump k8s.io/api from 0.32.3 to 0.33.0 in /api in the k8s-dependencies group by @dependabot[bot] in #5295
• rebase: bump the k8s-dependencies group in /e2e with 3 updates by @dependabot[bot] in #5298
• rebase: bump actions/dependency-review-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #5313
• rebase: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.9.0 to 1.10.0 in the github-dependencies group by @dependabot[bot] in #5320
• rebase: bump k8s.io/kubernetes from 1.33.0 to 1.33.1 in the k8s-dependencies group by @dependabot[bot] in #5319
• rebase: bump actions/dependency-review-action from 4.7.0 to 4.7.1 by @dependabot[bot] in #5318
• rebase: bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot[bot] in #5321
• rebase: bump the k8s-dependencies group in /e2e with 4 updates by @dependabot[bot] in #5322
• rebase: bump sigs.k8s.io/controller-runtime from 0.20.4 to 0.21.0 in the k8s-dependencies group by @dependabot[bot] in #5335
• rebase: bump github.com/kubernetes-csi/csi-lib-utils from 0.21.0 to 0.22.0 in the github-dependencies group by @dependabot[bot] in #5336
• rebase: bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @dependabot[bot] in #5337
• rebase: bump k8s.io/api from 0.33.0 to 0.33.1 in /api in the k8s-dependencies group by @dependabot[bot] in #5317
• rebase: bump the github-dependencies group with 3 updates by @dependabot[bot] in #5356
• rebase: bump the golang-dependencies group with 2 updates by @dependabot[bot] in https://...

What's Changed

• revert: prepare for v3.14.1 by @Madhu-1 in #5384
• flattenClonedRbdImages may require namespace (backport #5392) by @mergify[bot] in #5396
• Run cryptsetup with "-d -" instead of "-d /dev/stdin" (backport #5307) by @mergify[bot] in #5407
• doc: changes for 3.14.2 release (backport #5434) by @mergify[bot] in #5435
• Template changes for 3.14.2 release by @Madhu-1 in #5436

Full Changelog: v3.14.1...v3.14.2

What's Changed

• revert: revert to 3.14-canary by @Rakshith-R in #5269
• util: fix bug in health checker (backport #5272) by @mergify in #5273
• ci: install awk in Fedora test container-image (backport #5281) by @mergify in #5284
• rbd: skip comparing volumes in a group if new group is created (backport #5345) by @mergify in #5350
• nfs: return success if export already exists (backport #5372) by @mergify in #5373
• doc: update Readme for v3.14.1 (backport #5377) by @mergify in #5378
• doc: add v3 symlink to get current versions in pkg.go.dev (backport #5364) by @mergify in #5379
• build: prepare for v3.14.1 by @Madhu-1 in #5382

Full Changelog: v3.14.0...v3.14.1