v1.27.0 release

What's Changed

• doc: cut v1.26.0 release by @andyzhangx in #1853
• fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1872
• doc: update new chart versions by @andyzhangx in #1876
• chore: increase liveness-probe timeout by @andyzhangx in #1878
• chore(deps): bump k8s.io/mount-utils from 0.32.2 to 0.32.3 in the k8s group by @dependabot[bot] in #1881
• test: ignore CVE-2025-22870 in azcopy by @andyzhangx in #1882
• feat: support workload identity by @cvvz in #1798
• test: ut for parseServiceAccountToken by @cvvz in #1890
• chore: upgrade azure cloud provider lib by @andyzhangx in #1894
• feat: add metrics on node config by @andyzhangx in #1896
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.2 by @dependabot[bot] in #1902
• fix: CVE-2025-30204 by @andyzhangx in #1905
• chore(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot[bot] in #1909
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.2 to 2.23.3 by @dependabot[bot] in #1911
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.4.0 to 1.5.0 by @dependabot[bot] in #1913
• chore: upgrade azcopy to v10.28.1 by @andyzhangx in #1914
• chore(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 by @dependabot[bot] in #1919
• chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot[bot] in #1924
• doc: update new chart versions by @andyzhangx in #1925
• fix: storageEndPointSuffix setting in on-prem cluster by @andyzhangx in #1927
• chore(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 by @dependabot[bot] in #1930
• chore(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot[bot] in #1931
• test: fix CVE-2025-22871 in trivy action by @andyzhangx in #1933
• chore(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot[bot] in #1932
• doc: add ClientID parameter in doc by @andyzhangx in #1938
• fix: allow clientID, tenantID workload identity parameters in storage class by @andyzhangx in #1939
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 by @dependabot[bot] in #1943
• cleanup: remove deprecated wait.PollImediate function by @andyzhangx in #1944
• chore(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1 by @dependabot[bot] in #1946
• fix: goroutine leak when timeout by @cvvz in #1947
• fix: grpc connection was not closed properly by @cvvz in #1951
• test: ignore CVE-2025-22872 in azcopy by @andyzhangx in #1960
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.7.0 to 1.8.0 by @dependabot[bot] in #1959
• chore(deps): bump k8s.io/mount-utils from 0.32.3 to 0.32.4 in the k8s group by @dependabot[bot] in #1962
• fix: incorrect metris log in NodeStageVolume by @andyzhangx in #1964
• feat: add VerticalPodAutoscaler to blob csi controller pod by @umagnus in #1971
• doc: Remove the obsolete comment by @mathieu-clnk in #1970
• chore: upgrade k8s.io/mount-utils by @andyzhangx in #1972
• cleanup: refine Dockerfile by @andyzhangx in #1973
• chore: upgrade azcopy to v10.29.0 by @andyzhangx in #1974
• chore(deps): bump go.uber.org/mock from 0.5.1 to 0.5.2 by @dependabot[bot] in #1979
• test: add UT coverage for blob/nodeserver.go by @Zhupku in #1980
• doc: fix volumeHandle doc by @andyzhangx in #1981
• chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot[bot] in #1984
• feat: add VNetLinkName and PublicNetworkAccess in account creation by @andyzhangx in #1983
• chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot[bot] in #1990
• fix: add mountWithWorkloadIdentityToken parameter by @andyzhangx in #1988
• doc: update tips for fsGroupChangePolicy parameter setting by @andyzhangx in #1996
• cleanup: disable version check in blobfuse2 driver by default by @andyzhangx in #1994
• test: add UT coverage for blob/nodeserver.go by @Zhupku in #2001
• doc: update new chart versions by @andyzhangx in #2002
• chore(deps): bump k8s.io/mount-utils from 0.33.0 to 0.33.1 in the k8s group by @dependabot[bot] in #2004
• chore: upgrade to aznfs v2.0.12 by @andyzhangx in #2006
• cleanup: remove unused getCloudEnvironment func by @andyzhangx in #2005
• fix: csi driver metrics to collect errors by @andyzhangx in #2008
• chore: upgrade azcopy to v10.29.1 by @andyzhangx in #2010
• Revert "cleanup: disable version check in blobfuse2 driver by default" by @andyzhangx in #2019
• cleanup: disable version check in blobfuse2 driver by default by @andyzhangx in #2024
• chore(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in #2026
• chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #2027
• chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #2028
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.3.1 to 1.4.0 by @dependabot[bot] in #2031
• test: fix CVE-2025-4673 in trivy action by @andyzhangx in #2032
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2042
• fix: only use the permission bits for chmod by @nearora-msft in #2041
• chore(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/blobplugin by @dependabot[bot] in #2045
• chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0 by @dependabot[bot] in #2044
• fix: CVE-2025-4563 by @andyzhangx in #2053
• chore(deps): bump k8s.io/mount-utils from 0.33.1 to 0.33.2 in the k8s group by @dependabot[bot] in #2051
• chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot[bot] in #2055
• fix: don't change subnet.PrivateEndpointNetworkPolicies if it's already set by @andyzhangx in #2056
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.8.0 to 1.8.1 by @dependabot[bot] in #2057
• chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 b...

v1.26.7 release

What's Changed

• [release-1.26] cleanup: decrease parsing volumeID log level by @k8s-infra-cherrypick-robot in #2074
• [release-1.26] cleanup: fix incorrect logging info when volume is already mounted by @k8s-infra-cherrypick-robot in #2079
• [release-1.26] feat: use kubelet identity by default in msi auth by @k8s-infra-cherrypick-robot in #2082
• [release-1.26] feat: install blobfuse 2.5.0 as default version by @andyzhangx in #2087
• [release-1.26] chore: allow package install downgrade by default by @andyzhangx in #2090
• [release-1.26] fix: CVE-2025-22868 by @andyzhangx in #2091
• [release-1.26] cleanup: refine Dockerfile by @k8s-infra-cherrypick-robot in #2096
• [release-1.26] Revert "fix: ignore specific blobfuse version install failure" by @k8s-infra-cherrypick-robot in #2100
• [release-1.26] feat: support blobStorageAccountType parameter in storage class or pv by @andyzhangx in #2103
• [release-1.26] test: fix CVE-2025-47907 traivy test failure by @k8s-infra-cherrypick-robot in #2114
• [release-1.26] chore: upgrade azcopy to v10.30.0 by @k8s-infra-cherrypick-robot in #2119
• [release-1.26] cleanup: add more logging in blobfuse-proxy when blobfuse2 not found by @k8s-infra-cherrypick-robot in #2131
• [release-1.26] fix: support blobfuse2 install for GKE cos node by @k8s-infra-cherrypick-robot in #2132
• [release-1.26] chore: upgrade CSI driver sidecar images by @andyzhangx in #2136
• [release-1.26] feat: support blobfuse2 preview package install by @k8s-infra-cherrypick-robot in #2139
• doc: cut v1.26.7 release by @andyzhangx in #2140

Full Changelog: v1.26.6...v1.26.7

v1.26.6 release

What's Changed

• [release-1.26] cleanup: disable version check in blobfuse2 driver by default by @k8s-infra-cherrypick-robot in #2025
• [release-1.26] chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #2029
• [release-1.26] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2033
• [release-1.26] chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2043
• [release-1.26] fix: only use the permission bits for chmod by @k8s-infra-cherrypick-robot in #2046
• [release-1.26] chore(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #2047
• [release-1.26] fix: CVE-2025-4563 by @andyzhangx in #2054
• [release-1.26] chore: fix helm chart index on release-1.26 by @andyzhangx in #2058
• doc: cut v1.26.6 release by @andyzhangx in #2063

Full Changelog: v1.26.5...v1.26.6

v1.25.9 release

What's Changed

• [release-1.25] chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #2030
• [release-1.25] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2034
• [release-1.25] test: fix golint errors by @andyzhangx in #2037
• [release-1.25] chore(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #2048
• [release-1.25] chore: fix helm chart index on release-1.25 by @andyzhangx in #2059
• doc: cut v1.25.9 release by @andyzhangx in #2062

Full Changelog: v1.25.8...v1.25.9

v1.24.11 release

What's Changed

• [release-1.24] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2035
• [release-1.24] test: fix golint errors by @andyzhangx in #2038
• [release-1.24] chore(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #2049
• [release-1.24] chore: fix helm chart index on release-1.24 by @andyzhangx in #2060
• doc: cut v1.24.11 release by @andyzhangx in #2061

Full Changelog: v1.24.10...v1.24.11

v1.26.5 release

What's Changed

• Revert "[release-1.26] cleanup: disable version check in blobfuse2 driver by default" by @andyzhangx in #2021
• doc: cut v1.26.5 release by @andyzhangx in #2023

Full Changelog: v1.26.4...v1.26.5

v1.25.8 release

What's Changed

• Revert "[release-1.25] cleanup: disable version check in blobfuse2 driver by default" by @andyzhangx in #2020
• doc: cut v1.25.8 release by @andyzhangx in #2022

Full Changelog: v1.25.7...v1.25.8

v1.26.4 release

What's Changed

• [release-1.26] doc: fix incorrect chart in release-1.26 by @andyzhangx in #2003
• [release-1.26] chore: upgrade to aznfs v2.0.12 by @andyzhangx in #2007
• [release-1.26] fix: csi driver metrics to collect errors by @andyzhangx in #2009
• [release-1.26] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2011
• doc: cut v1.26.4 release by @andyzhangx in #2018

Full Changelog: v1.26.3...v1.26.4

v1.25.7 release

What's Changed

• [release-1.25] cleanup: disable version check in blobfuse2 driver by default by @k8s-infra-cherrypick-robot in #1998
• [release-1.25] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2012
• doc: cut v1.25.7 release by @andyzhangx in #2017

Full Changelog: v1.25.6...v1.25.7

v1.24.10 release

What's Changed

• [release-1.24] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #1936
• [release-1.24] fix: goroutine leak when timeout by @andyzhangx in #1950
• [release-1.24] fix: grpc connection was not closed properly by @k8s-infra-cherrypick-robot in #1957
• [release-1.24] fix: CVE-2025-22872 by @andyzhangx in #1954
• [release-1.24] fix: incorrect metris log in NodeStageVolume by @k8s-infra-cherrypick-robot in #1967
• [release-1.24] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #1977
• [release-1.24] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2013
• doc: cut v1.24.10 release by @andyzhangx in #2016

Full Changelog: v1.24.9...v1.24.10