What's Changed

• [release-1.33] chore: upgrade azcopy to v10.31.1 to fix CVEs by @andyzhangx in #2935
• [release-1.33] test: fix CVE-2025-61726 trivy failure by @k8s-infra-cherrypick-robot in #2949
• [release-1.33] build(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2953
• [release-1.33] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #2967
• [release-1.33] fix: CVE-2026-24051 by @andyzhangx in #3000
• [release-1.33] chore: upgrade azcopy to v10.32.1 to fix CVEs by @andyzhangx in #3001
• doc: cut v1.33.8 release by @andyzhangx in #3002

Full Changelog: v1.33.7...v1.33.8