What's Changed

• [release-1.36] fix: skip GetSupportedSize on Windows when the disk has not grown by @k8s-infra-cherrypick-robot in #3853
• [release-1.36] feat: gate Kata mount on node annotation by @k8s-infra-cherrypick-robot in #3857
• [release-1.36] fix: recalculate migration monitor timeouts based on updated throughput assumptions by @k8s-infra-cherrypick-robot in #3860
• [release-1.36] fix: treat nil CompletionPercent as complete, matching Azure portal semantics by @k8s-infra-cherrypick-robot in #3872
• [release-1.36] fix: revert fsck behavior to match with kubernetes/mount_utils behavior by @k8s-infra-cherrypick-robot in #3866
• [release-1.36] fix: CVE-2026-78659 by @andyzhangx in #3875
• [release-1.36] fix: avoid stale device cache inconsistencies by @k8s-infra-cherrypick-robot in #3880
• [release-1.36] chore: add metrics in formatAndMount by @k8s-infra-cherrypick-robot in #3893
• [release-1.36] fix: return retryable NodeStage errors after QAD attach succeeds by @k8s-infra-cherrypick-robot in #3884
• [release-1.36] chore(deps): bump build-image/debian-base from bookworm-v1.0.8 to bookworm-v1.0.9 in /pkg/azurediskplugin by @k8s-infra-cherrypick-robot in #3899
• doc: cut v1.36.1 release by @landreasyan in #3888

Full Changelog: v1.36.0...v1.36.1

What's Changed

• [release-1.34] chore: add metrics in formatAndMount by @k8s-infra-cherrypick-robot in #3892
• [release-1.34] chore(deps): bump build-image/debian-base from bookworm-v1.0.8 to bookworm-v1.0.9 in /pkg/azurediskplugin by @k8s-infra-cherrypick-robot in #3901
• doc: cut v1.34.9 release by @hccheng72 in #3909

Full Changelog: v1.34.8...v1.34.9

What's Changed

• [release-1.33] chore: add metrics in formatAndMount by @k8s-infra-cherrypick-robot in #3891
• [release-1.33] chore(deps): bump build-image/debian-base from bookworm-v1.0.8 to bookworm-v1.0.9 in /pkg/azurediskplugin by @k8s-infra-cherrypick-robot in #3903
• doc: cut v1.33.15 release by @hccheng72 in #3908

Full Changelog: v1.33.14...v1.33.15

What's Changed

• [release-1.34] fix: recalculate migration monitor timeouts based on updated throughput assumptions by @k8s-infra-cherrypick-robot in #3863
• [release-1.34] fix: treat nil CompletionPercent as complete, matching Azure portal semantics by @k8s-infra-cherrypick-robot in #3870
• [release-1.34] fix: revert fsck behavior to match with kubernetes/mount_utils behavior by @k8s-infra-cherrypick-robot in #3865
• [release-1.34] fix: CVE-2026-78659 by @andyzhangx in #3877
• [release-1.34] fix: avoid stale device cache inconsistencies by @k8s-infra-cherrypick-robot in #3882
• doc: cut v1.34.8 release by @landreasyan in #3887

Full Changelog: v1.34.7...v1.34.8

What's Changed

• [release-1.33] fix: recalculate migration monitor timeouts based on updated throughput assumptions by @k8s-infra-cherrypick-robot in #3868
• [release-1.33] fix: treat nil CompletionPercent as complete, matching Azure portal semantics by @k8s-infra-cherrypick-robot in #3869
• [release-1.33] fix: revert fsck behavior to match with kubernetes/mount_utils behavior by @k8s-infra-cherrypick-robot in #3867
• [release-1.33] fix: avoid stale device cache inconsistencies by @k8s-infra-cherrypick-robot in #3883
• [release-1.33] fix: resolve Trivy vulnerability scan failures by @landreasyan in #3885
• doc: cut v1.33.14 release by @landreasyan in #3886

Full Changelog: v1.33.13...v1.33.14

What's Changed

• doc: cut v1.35.0 release by @andyzhangx in #3820
• chore(deps): bump FairwindsOps/pluto/github-action from 5.24.3 to 5.24.4 by @dependabot[bot] in #3822
• fix: skip fsck on newly formatted volumes by @NedAnd1 in #3830
• Feature: QAD - NodeDriven attach by @landreasyan in #3825
• feat: convert enable-kata-mount flag to KataMount feature gate by @landreasyan in #3842
• docs(kata-mount): note KataMount gate targets 1.36.1 for runtime detection by @landreasyan in #3843
• [release-1.36] doc: cut v1.36.0 release by @k8s-infra-cherrypick-robot in #3845

Full Changelog: v1.35.0...v1.36.0

What's Changed

• [release-1.34] fix: CVE-2026-81870 by @andyzhangx in #3818
• [release-1.34] fix: skip fsck on newly formatted volumes by @k8s-infra-cherrypick-robot in #3835
• fix: update OpenTelemetry OTLP trace exporters by @landreasyan in #3839
• doc: cut v1.34.7 release by @landreasyan in #3841

Full Changelog: v1.34.6...v1.34.7

What's Changed

• [release-1.33] fix: CVE-2026-81870 by @andyzhangx in #3819
• [release-1.33] fix: skip fsck on newly formatted volumes by @k8s-infra-cherrypick-robot in #3836
• fix: update OpenTelemetry OTLP trace exporters by @landreasyan in #3838
• doc: cut v1.33.13 release by @landreasyan in #3840

Full Changelog: v1.33.12...v1.33.13

What's Changed

• doc: cut v1.34.0 release by @andyzhangx in #3466
• chore: add CSI-specific Prometheus metrics by @hccheng72 in #3464
• fix: let nodeExpandVolume retried if block device size is taking time to reflect in host by @hasethuraman in #3473
• fix: Correct CSI-Provisioner permissions for VAC by @kon-angelo in #3477
• fix: handling dangling detaches in a better way by @gnufied in #3469
• test: skip flaky TestConcurrentDetachDisk test by @andyzhangx in #3483
• test: fix CVE-2025-61726 trivy failure by @andyzhangx in #3482
• chore(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurediskplugin by @dependabot[bot] in #3489
• doc: update new chart versions by @andyzhangx in #3497
• fix: replace os.ReadDir with fs.ReadDir(1) to avoid extra memory usage by @andyzhangx in #3499
• test: fix trivy CVE-2025-68121 failure by @andyzhangx in #3502
• fix: optimizations and fstype fix from intree to csi by @hasethuraman in #3501
• chore: refactor metrics pkg by @hccheng72 in #3506
• feat: add instantAccessDurationMinutes snapshot parameter for PremiumV2/UltraSSD disks by @tony-schndr in #3507
• chore(deps): bump k8s.io/kubernetes from 1.35.0 to 1.35.1 in the k8s group across 1 directory by @dependabot[bot] in #3509
• test: fix trivy CVE-2025-68121 by @andyzhangx in #3513
• chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.79.1 by @dependabot[bot] in #3512
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 by @dependabot[bot] in #3511
• chore(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 by @dependabot[bot] in #3518
• chore: upgrade CSI sidecar image versions by @andyzhangx in #3515
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.38.0 to 1.40.0 by @dependabot[bot] in #3520
• chore(deps): bump github.com/microsoft/wmi from 0.38.1 to 0.39.0 by @dependabot[bot] in #3522
• chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 by @dependabot[bot] in #3523
• chore(deps): bump k8s.io/kubernetes from 1.35.1 to 1.35.2 in the k8s group by @dependabot[bot] in #3527
• doc: update new chart versions by @andyzhangx in #3530
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.40.0 to 1.41.0 by @dependabot[bot] in #3532
• chore: upgrade to csi-provisioner v6.2.0 by @andyzhangx in #3533
• fix: trigger migration within few mins by batching the volumes or imp… by @hasethuraman in #3526
• chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @dependabot[bot] in #3536
• test: fix CVE-2026-25679 in trivy action by @andyzhangx in #3537
• chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 by @dependabot[bot] in #3540
• chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 in the k8s group by @dependabot[bot] in #3539
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.41.0 to 1.42.0 by @dependabot[bot] in #3541
• chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @dependabot[bot] in #3544
• chore(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0 by @dependabot[bot] in #3542
• fix: incorrect node attached on waitingForDetached call by @gnufied in #3543
• chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #3545
• chore(deps): bump k8s.io/kubernetes from 1.35.2 to 1.35.3 in the k8s group by @dependabot[bot] in #3550
• docs: refine README for consistent formatting and readability by @andyzhangx in #3551
• feat: update maxDataDiskCountMap with latest VM size list by @andyzhangx in #3553
• chore: add flag wait-for-detach-disk-complete by @andyzhangx in #3546
• security: Update trivy-action to use sha for v0.35.0 by @Priyankasaggu11929 in #3557
• docs: fix outdated links, typos, and formatting in driver-parameters.md by @andyzhangx in #3562
• fix: increase checkDiskLun throttle threshold from 1s to 10s by @rnhan in #3565
• [Security] Restrict volume mountpoint to /var/lib/kubelet/pods by @srranjan-sri in #3498
• fix: skip ManagedBy polling after successful VMSS detach by @rnhan in #3563
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.43.0 by @dependabot[bot] in #3569
• test: fix trivy action failure by @andyzhangx in #3575
• feat: add optional healthcheck for node-driver-registrar by @andyzhangx in #3572
• chore(deps): bump golang.org/x/sys from 0.42.0 to 0.43.0 by @dependabot[bot] in #3580
• cleanup: use strconv.ParseInt with bitSize 32 to prevent integer overflow in GetDiskLUN by @andyzhangx in #3581
• refactor: move nodeDriverRegistrar config under node section by @andyzhangx in #3583
• chore(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 by @dependabot[bot] in #3582
• chore: pin all GitHub Actions to full-length commit SHAs by @andyzhangx in #3588
• chore(deps): bump k8s.io/kubernetes from 1.35.3 to 1.35.4 in the k8s group by @dependabot[bot] in #3591
• doc: update new chart versions by @andyzhangx in #3593
• chore: upgrade Azure cloud provider lib by @andyzhangx in #3597
• chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #3599
• chore(deps): bump FairwindsOps/pluto from fecfabc295821130532c5f77b27aa8ffe2c1c5a0 to 0713a5bb59439ed1b9cd3d9365e365048fcdb0f4 by @dependabot[bot] in #3600
• chore(deps): bump FairwindsOps/pluto from 0713a5bb59439ed1b9cd3d9365e365048fcdb0f4 to 469724ac19abc587358f30090048b25fa719d97a by @dependabot[bot] in #3601
• chore(deps): bump FairwindsOps/pluto from 469724ac19abc587358f30090048b25fa719d97a to c85f54c7b9c53578471978aadf65d0456762e028 by @dependabot[bot] in #3603
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 by @dependabot[bot] in #3604
• chore(deps): bump FairwindsOps/pluto from c85f54c7b9c53578471978aadf65d0456762e028 to dd5ec8cccce5e42dfe8054b8250baa35546056a0 by @dependabot[bot] in #3605
• test: set explicit ginkgo parallelism to avoid external e2e suite timeout by @andyzhangx in #3607
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.2 to 2.28.3 by @dependabot[bot] in https://github.com/kubernetes-si...

What's Changed

• [release-1.34] chore: upgrade Azure cloud provider lib- #3752 by @andyzhangx in #3754
• [release-1.34] fix: optionally skip reading the config from the API server by @k8s-infra-cherrypick-robot in #3757
• [release-1.34] chore: update csi-resizer to v2.2.1 by @andyzhangx in #3760
• [release-1.34] chore: bump Go to 1.26.6 by @k8s-infra-cherrypick-robot in #3765
• [release-1.34] cleanup: demote empty GRPC response log to V(6) by @k8s-infra-cherrypick-robot in #3773
• cherry-pick: mount azure.json read-only in CSI controller and node pods (release-1.34) by @andyzhangx in #3781
• [release-1.34] fix: CVE-2026-56854 by @andyzhangx in #3782
• [release-1.34] chore: add fstype allowlist by @andyzhangx in #3784
• [release-1.34] fix: CVE-2026-84304 by @andyzhangx in #3792
• [release-1.34] fix: set success metric on early-success returns; guard nil disk before SKU access by @andyzhangx in #3790
• [release-1.34] cleanup: preserve identity IDs at tail of truncated kube-event messages by @k8s-infra-cherrypick-robot in #3796
• [release-1.34] fix: CVE-2026-56855 by @andyzhangx in #3801
• doc: cut v1.34.6 release by @landreasyan in #3799

Full Changelog: v1.34.5...v1.34.6