v0.20260227.0

What's Changed

Changes

• chore: instruct copilot to check forward/backward compatibility by @Devinwong in #7869
• chore: change the renovate matchPackageNames with double Asterisks by @Devinwong in #7872
• test: exclude nvme shutdown timeout message from validation failure by @jepio in #7875
• feat: scriptless mode in NBC so we can move in phases by @awesomenix in #7805
• fix: cni-plugins backward compatibility - continue by @fseldow in #7881
• fix: adding the logic to download the cni-plugins (non-dalec) back... by @djsly in #7884
• fix: cache repo metadata immediately after setting up repodepot for azurelinux to help accepting a new key by @KananMehta in #7888
• test: refactor network isolated cluster e2e by @fseldow in #7885
• chore(deps): bump go in all go mods to address CVEs by @cameronmeissner in #7903
• feat: re-enable build time CIS scanning by @jepio in #7876
• fix(vhdbuilder): increase Flatcar OS disk size by @ervcz in #7505
• chore: add calvin197 as code owner by @calvin197 in #7915
• ci: increase vhd-scanning disk size from 50GB to 60GB for Flatcar by @chewi in #7918
• chore: rename FIPS+TL 22.04 VHD by @mxj220 in #7912
• feat: support custom patching in security patch by @YaoC in #7774
• fix: remove unnecessary sudo from cse provisioning scripts and services by @awesomenix in #7926
• fix: use resource disk as placement type by @awesomenix in #7931
• feat: adding support for amdama (supernova) gpus. by @mipresmsft in #7927
• fix(flatcar): ensure CREDENTIAL_PROVIDER_BIN_DIR before symlinking when installing azure-acr-credential-provider by @cameronmeissner in #7933
• chore(windows): prevent windows 2019 vhds from building on pr and release by @janenotjung-hue in #7932
• fix: use cachedisk for ma35d vm sku by @awesomenix in #7942
• feat: upgrade aznfs package to 3.0.14 by @andyzhangx in #7921
• fix: address outstanding goconst linter errors on main by @cameronmeissner in #7950
• fix: adjust retries and timeout given to apt-mark hold walinuxagent command during provisioning by @cameronmeissner in #7951
• test: enable Windows 23H2 WCN e2e test by @rzlink in #7940
• fix: remove lshw calls from aks-log-collector.sh by @cameronmeissner in #7949
• feat: enable cloud-init write_files module for OSGuard images by @awesomenix in #7937
• chore: support v7 skus in AB e2es by @lilypan26 in #7887
• fix: run aptmarkwalinuxagent hold operation on background and update timeout by @cameronmeissner in #7966
• fix: pin Ubuntu 22.04 LTS kernel to 5.15.0-1102-azure by @awesomenix in #7972

VHD Component Updates

• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-4 by @renovate[bot] in #7832
• feat: install Kubernetes to Flatcar from sysexts on MAR by @chewi in #7680
• chore(deps): update azure-policy/policy-kubernetes-addon-prod docker tag to v1.15.5 by @renovate[bot] in #7815
• chore(deps): update coredns, addon-resizer, cpa versions cached in VHD by @ashokobulapuram7 in #7910
• chore(deps): bump azure-cloud-node-manager to latest patches and for CVE fixes by @Liunardy in #7900
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.0.2 by @cameronmeissner in #7930
• chore(deps): update aks/aks-gpu-grid docker tag to v550.144.06-20260126030228 by @renovate[bot] in #7730
• chore(deps): update dependency containerd2 to v2.0.0-17.azl3 by @renovate[bot] in #7803
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7851
• chore(deps): update oss/v2/kubernetes/kube-proxy docker tag to v1.34.4-1 by @renovate[bot] in #7909
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.16-1 by @renovate[bot] in #7857
• chore: upgrade CSI sidecar image versions by @andyzhangx in #7941
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7905
• feat: add cilium log collector to agent baker by @QxBytes in #7889
• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-9 by @renovate[bot] in #7822
• feat: update cloud-provider-windows to versions used in aks-rp by @timmy-wright in #7970
• chore: cache oras binary in Windows image by @jiashun0011 in #7860

New Contributors

• @mipresmsft made their first contribution in #7927
• @janenotjung-hue made their first contribution in #7932

Full Changelog: v0.20260213.2...v0.20260227.0

v0.20260226.0

What's Changed

Changes

• chore: instruct copilot to check forward/backward compatibility by @Devinwong in #7869
• chore: change the renovate matchPackageNames with double Asterisks by @Devinwong in #7872
• test: exclude nvme shutdown timeout message from validation failure by @jepio in #7875
• feat: scriptless mode in NBC so we can move in phases by @awesomenix in #7805
• fix: cni-plugins backward compatibility - continue by @fseldow in #7881
• fix: adding the logic to download the cni-plugins (non-dalec) back... by @djsly in #7884
• fix: cache repo metadata immediately after setting up repodepot for azurelinux to help accepting a new key by @KananMehta in #7888
• test: refactor network isolated cluster e2e by @fseldow in #7885
• chore(deps): bump go in all go mods to address CVEs by @cameronmeissner in #7903
• feat: re-enable build time CIS scanning by @jepio in #7876
• fix(vhdbuilder): increase Flatcar OS disk size by @ervcz in #7505
• chore: add calvin197 as code owner by @calvin197 in #7915
• ci: increase vhd-scanning disk size from 50GB to 60GB for Flatcar by @chewi in #7918
• chore: rename FIPS+TL 22.04 VHD by @mxj220 in #7912
• feat: support custom patching in security patch by @YaoC in #7774
• fix: remove unnecessary sudo from cse provisioning scripts and services by @awesomenix in #7926
• fix: use resource disk as placement type by @awesomenix in #7931
• feat: adding support for amdama (supernova) gpus. by @mipresmsft in #7927
• fix(flatcar): ensure CREDENTIAL_PROVIDER_BIN_DIR before symlinking when installing azure-acr-credential-provider by @cameronmeissner in #7933
• chore(windows): prevent windows 2019 vhds from building on pr and release by @janenotjung-hue in #7932
• fix: use cachedisk for ma35d vm sku by @awesomenix in #7942
• feat: upgrade aznfs package to 3.0.14 by @andyzhangx in #7921
• fix: address outstanding goconst linter errors on main by @cameronmeissner in #7950
• fix: adjust retries and timeout given to apt-mark hold walinuxagent command during provisioning by @cameronmeissner in #7951
• test: enable Windows 23H2 WCN e2e test by @rzlink in #7940
• fix: remove lshw calls from aks-log-collector.sh by @cameronmeissner in #7949
• feat: enable cloud-init write_files module for OSGuard images by @awesomenix in #7937
• chore: support v7 skus in AB e2es by @lilypan26 in #7887
• fix: run aptmarkwalinuxagent hold operation on background and update timeout by @cameronmeissner in #7966

VHD Component Updates

• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-4 by @renovate[bot] in #7832
• feat: install Kubernetes to Flatcar from sysexts on MAR by @chewi in #7680
• chore(deps): update azure-policy/policy-kubernetes-addon-prod docker tag to v1.15.5 by @renovate[bot] in #7815
• chore(deps): update coredns, addon-resizer, cpa versions cached in VHD by @ashokobulapuram7 in #7910
• chore(deps): bump azure-cloud-node-manager to latest patches and for CVE fixes by @Liunardy in #7900
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.0.2 by @cameronmeissner in #7930
• chore(deps): update aks/aks-gpu-grid docker tag to v550.144.06-20260126030228 by @renovate[bot] in #7730
• chore(deps): update dependency containerd2 to v2.0.0-17.azl3 by @renovate[bot] in #7803
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7851
• chore(deps): update oss/v2/kubernetes/kube-proxy docker tag to v1.34.4-1 by @renovate[bot] in #7909
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.16-1 by @renovate[bot] in #7857
• chore: upgrade CSI sidecar image versions by @andyzhangx in #7941
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7905
• feat: add cilium log collector to agent baker by @QxBytes in #7889

New Contributors

• @mipresmsft made their first contribution in #7927
• @janenotjung-hue made their first contribution in #7932

Full Changelog: v0.20260213.2...v0.20260226.0

v0.20260219.0

What's Changed

Changes

• chore: instruct copilot to check forward/backward compatibility by @Devinwong in #7869
• chore: change the renovate matchPackageNames with double Asterisks by @Devinwong in #7872
• test: exclude nvme shutdown timeout message from validation failure by @jepio in #7875
• feat: scriptless mode in NBC so we can move in phases by @awesomenix in #7805
• fix: cni-plugins backward compatibility - continue by @fseldow in #7881
• fix: adding the logic to download the cni-plugins (non-dalec) back... by @djsly in #7884
• fix: cache repo metadata immediately after setting up repodepot for azurelinux to help accepting a new key by @KananMehta in #7888
• test: refactor network isolated cluster e2e by @fseldow in #7885
• chore(deps): bump go in all go mods to address CVEs by @cameronmeissner in #7903
• feat: re-enable build time CIS scanning by @jepio in #7876
• fix(vhdbuilder): increase Flatcar OS disk size by @ervcz in #7505

VHD Component Updates

• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-4 by @renovate[bot] in #7832
• feat: install Kubernetes to Flatcar from sysexts on MAR by @chewi in #7680
• chore(deps): update azure-policy/policy-kubernetes-addon-prod docker tag to v1.15.5 by @renovate[bot] in #7815

Full Changelog: v0.20260213.2...v0.20260219.0

v0.20260213.2

What's Changed

Changes

• feat: install container-networkingplugins from dalec packages replacing old share by @Devinwong in #7781
• feat: azurelinux add nvidia open driver installation selection by @miz060 in #7731
• feat: add udev rule to set default RX Buffer as 2048 on systems with 4 or more cores by @mugeshsp in #7665
• feat: provide configurable cse timeout in seconds by @awesomenix in #7766
• feat: capture aks-node-controller errors into Guest Agent Events by @Devinwong in #7773
• feat: inspektor gadget into vhd build by @chmill-zz in #7371

Fixes

• fix: shrink flatcar customdata size by @jepio in #7755
• fix: adding crontab for AzureLinux in custom clouds to ensure custom CAs are getting refreshed daily by @djsly in #7785
• fix: add cni-plugins back for backward compatibility by @Devinwong in #7866
• fix: onboard azl3 kubectl and kublet to renovate by @Devinwong in #7859
• fix: add default CSE_TIMEOUT directly within cse_start.sh by @cameronmeissner in #7864
• fix: run aptmarkwalinuxagent hold operation on foreground by @SriHarsha001 in #7797
• fix: fail on any error in step by @awesomenix in #7793
• fix(localdns): wait for resolv.conf update after networkctl reload to prevent race condition by @saewoni in #7749
• fix: create new field kubelet_cmd_flags which can replace kubelet_flags by @awesomenix in #7771
• fix: revert create new field kubelet_cmd_flags which can replace kubelet_flags by @awesomenix in #7782
• fix: enabling waagent root password removal logic again for Ubuntu by @djsly in #7780
• fix: change CNI tgz name with arch by @Devinwong in #7831

Build and Release

• feat: add TL FIPS SIG image config and e2e by @mxj220 in #7814
• feat: add Trusted Launch FIPS 22.04 VHD by @mxj220 in #7753
• chore: remove azurelinuxv2 and marinerv2 from releases by @Devinwong in #7763
• test: add kernel log validation to abe2es by @lilypan26 in #7835
• test: add dcgm exporter compatibility e2e by @surajssd in #7787
• test: add e2e tests for Ubuntu 2204 FIPS VHD by @Copilot in #7739
• test: remove check-in tests buildAzureLinuxV2gen2 and buildMarinerV2gen2 by @Devinwong in #7761
• fix(e2e): fix e2e and validation bugs by @jepio in #7776
• fix(e2e): timeout/retry ssh connections and remove intermediate pipe by @jepio in #7850
• fix(e2e): log instead of error when NICs not found in rx buffer test by @mugeshsp in #7784
• fix(e2e): ensure slot retrieval does not fail in ValidateNetworkInterfaceConfig by @mugeshsp in #7792
• fix(e2e): skip gpu e2e tests on sku quota exceeded and add configurable test timeout by @awesomenix in #7836
• fix(e2e): echo file contents in e2e test if a file contents check fails. by @timmy-wright in #7656
• fix(e2e): improve test logging by @r2k1 in #7841

MISC

• feat: create new copilot setup steps for easier agents handling by @awesomenix in #7752
• refactor: simplify components.json code by @chewi in #7742
• chore: change owner of cluster-proportional-autoscaler, addon-resizer and coredns by @Devinwong in #7865
• chore: replace copilot-instructions.md symlink with actual file content by @awesomenix in #7801
• docs: enhance PR review guidelines with detailed risk categories and package update analysis by @awesomenix in #7810

Dependabot Updates

• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #7754
• chore(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 by @dependabot[bot] in #7767

VHD Component Updates

• feat: adding first caching for k8s 1.35 by @djsly in #7799
• chore(deps): update ama-metrics (patch) by @renovate[bot] in #7735
• chore(deps): upgrade Azure CSI driver versions by @andyzhangx in #7751
• chore(deps): Replace cni and cns versions with v1.5.50 by @rejain789 in #7759
• chore(deps): update kube-components (patch) by @renovate[bot] in #7524
• chore(deps): replace cni and cns versions with v1.6.35 by @rejain789 in #7757
• chore(deps): update aks/aks-gpu-cuda docker tag to v580.105.08-20260108183250 by @renovate[bot] in #7626
• chore(deps): update aks/aks-gpu-cuda docker tag to v580.126.09-20260126030251 by @renovate[bot] in #7791
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.34 by @renovate[bot] in #7691
• chore(deps): using newly rebuilt containerd 1.7.30 deb with latest golang for CVE fixes by @djsly in #7802
• chore(deps): replace Cilium v1.16 with v1.18 Cilium-distroless + Cilium-distroless-init by @jpayne3506 in #7325
• chore(deps): update renovate to match distroless images by @jpayne3506 in #7823
• chore(deps): bump cri-tools to latest version for CVE fixes by @djsly in #7800
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.32.1-2 by @renovate[bot] in #7790
• chore(deps): update kube-proxy to 1.33.6 by @Devinwong in #7834
• chore(deps): update oss/kubernetes/kube-proxy docker tag to v1.33.7 by @renovate[bot] in #7838
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7842
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7673
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-8 by @renovate[bot] in #7807
• chore(deps): update kube-components (patch) by @renovate[bot] in #7845
• chore(deps): bump azure-cloud-node-manager for CVE fixes by @Liunardy in #7854
• chore(deps): update kubelet-kubectl to v1.34.3-1.azl3 (patch) by @renovate[bot] in #7861
• chore(deps): update azure-policy/policy-kubernetes-webhook docker tag to v1.15.5 by @renovate[bot] in #7816
• chore(deps): bump acr-mirror to version 0.3.0 by @djsly in #7862
• chore(deps): upgrade blobfuse2 to 2.5.2 to bring in fix for mooncake and CVE fixes by @djsly in #7788

New Contributors

• @mugeshsp made their first contribution in #7665
• @rejain789 made their first contribution in #7759
• @saewoni made their first contribution in #7749

Full Changelog: v0.20260127.0...v0.20260213.2

v0.20260127.0

What's Changed

Changes

• feat: support kubelet patch in AzureLinux live patching by @YaoC in #7302
• feat: ensure successful blob upload without prefetch optimization enabled by @zachary-bailey in #7613
• chore: update files owned by security patch owner by @YaoC in #7652
• chore: fix CODEOWNERS settings for pkg/agent/testdata/ by @cameronmeissner in #7654
• feat: dnf tries to install cached rpms and dependencies first by @Devinwong in #7635
• test(e2e): validate no unexpected systemd unit failures on linux by @cameronmeissner in #7644
• fix: write provision.json on any node controller failures, add E2E by @awesomenix in #7650
• fix: apply correct disk tuning settings on NVMe devices by @cameronmeissner in #7653
• fix: add check for assigning packer vm uami by @zachary-bailey in #7660
• fix: fixing repodepot support for azlinux3 and ubuntu2404 as well as PMC on Ubuntu by @djsly in #7565
• fix: add missing DESTINATION_STORAGE_CONTAINER env var in Windows VHD… by @benjamin-brady in #7679
• feat: use the official Pause image TAG instead of specifying the LTCS Windows version tag by @djsly in #7675
• fix: return copy of base kubelet config everytime by @awesomenix in #7686
• feat: adding logic to configure repo_depot by @djsly in #7694
• feat: redirect mcr.azk8s.cn to mcr.azure.cn in Windows containerd by @jiashun0011 in #7705
• fix: remove root password expiration early in CSE execution [main] by @jepio in #7709
• chore(deps): update OS Guard base image version to 3.0.20260107 by @hbeberman in #7706
• fix: revert password expiry changes for root account by @benjamin-brady in #7707
• feat: redirect mcr.azk8s.cn to mcr.azure.cn in Windows containerd by @jiashun0011 in #7646
• fix: issues caused by the /usr/local/bin to /opt/bin move by @chewi in #7703
• fix: add retries to wireserver, cache first time response to avoid spam by @awesomenix in #7676
• fix: fixing some scriptless bugs by @Devinwong in #7698
• feat: add Ubuntu 22.04 FIPS VHDs by @mxj220 in #7721
• feat: add MigStrategy and EnableManagedGPU NBC variables for managed GPU experience by @calvin197 in #7695
• feat: configure copilot pr review for breaking change detection by @r2k1 in #7740
• fix: dont expire root password in osguard by @awesomenix in #7743

VHD Component Updates

• chore(deps): update windowsbase (patch) by @renovate[bot] in #7648
• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-3 by @renovate[bot] in #7649
• chore(deps): update coredns, addon-resizer, cpa versions cached in VHD by @ashokobulapuram7 in #7651
• feat: add ServiceAccountImagePullProfile for identity-binding-based image pull by @qweeah in #7596
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #7598
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #7657
• feat: install most components to /opt/bin instead of /usr/local/bin by @chewi in #7125
• chore(deps): update dependency datacenter-gpu-manager-4-core to v1:4.5.0-1 by @renovate[bot] in #7630
• chore(deps): update dependency datacenter-gpu-manager-4-proprietary to v1:4.5.0-1 by @renovate[bot] in #7631
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.32.1-1 by @renovate[bot] in #7666
• fix: update datecenter-gpu-manager-4 version for dcgm exporter compatibility by @lilypan26 in #7736

New Contributors

• @ashokobulapuram7 made their first contribution in #7651

Full Changelog: v0.20260113.0...v0.20260127.0

v0.20260113.0

What's Changed

Changes

• fix: managed gpu experience tests by @jepio in #7437
• chore: update internal branch references to main by @cameronmeissner in #7441
• chore(e2e): add firewall to e2es by @lilypan26 in #7350
• chore: update PR title lint triggers to include PR synchronization by @cameronmeissner in #7450
• chore: move e2e and gc to use service connection by @awesomenix in #7449
• chore: move windows vhd build to use service connections by @awesomenix in #7457
• chore: move linux vhd build to use service connection by @awesomenix in #7451
• fix: add GRID driver version to VHD release notes by @ganeshkumarashok in #7464
• feat: add mooncake mcr containerd config host - linux by @fseldow in #7342
• test: improve e2e logs by @r2k1 in #7469
• docs: update windows release notes for 2025-11B (#7389) by @timmy-wright in #7482
• fix(windows): decrease retry timeout for network adapter read in windows provisioning scripts by @timmy-wright in #7480
• feat: update test pmc repo when using prerelease version by @lilypan26 in #7459
• chore: use azcli login for azcopy by @awesomenix in #7487
• fix(e2e): use invalid UserAssignedIdentityID instead of invalid AADResource in scenario Flatcar_SecureTLSBootstrapping_BootstrapToken_Fallback by @cameronmeissner in #7493
• fix: use cli credentials for azcopy when downloading from private urls by @awesomenix in #7496
• fix: only execute cloud-init-status-check.sh when it exists on the node by @Devinwong in #7456
• ci: log disk usage by @r2k1 in #7503
• feat: add http header for mooncake mar containerd host by @fseldow in #7515
• fix: installation of Azure ACR Credential Provider on OSGuard by @miz060 in #7511
• fix: dry run issues in pipeline by @timmy-wright in #7523
• fix: windows release script by @timmy-wright in #7525
• ci: add disk usage diagnostics to VHD builds by @r2k1 in #7518
• feat: move azurelinuxOSGuard to immutable storage container by @zachary-bailey in #7510
• ci: disabling two 10B regkeys to address 12B aggressions by @smiezah-msft in #7528
• fix: windows_settings should have same rules as components.json by @timmy-wright in #7531
• fix(ci): limit image builder template name to 64 characters by @cameronmeissner in #7540
• docs: update windows release notes for 2025-12B (#7532) by @timmy-wright in #7543
• fix(ci): skip disk usage report publishing on OSGuard by @cameronmeissner in #7544
• fix(ci): temporarily disable grid compatibility check to eliminate build warnings by @cameronmeissner in #7545
• fix(ci): bump Linux VHD build timeout to account for prefetch optimization latency by @cameronmeissner in #7548
• fix(ci): make Linux VHD content tests resilient to illegitimate errors by @cameronmeissner in #7547
• chore: freezing all azl2 vhd versions by @djsly in #7552
• test: add missing UTs for OS image config cloud settings by @cameronmeissner in #7557
• fix: support katacc policy annotation by @Bickor in #7556
• fix: remove --cloud-config as it's deprecated from kubelet flags and configs by @Devinwong in #7566
• chore: disabling marinerv2 and azurelinuxv2 builds by @djsly in #7567
• fix: dynamically resolve root device within disk_queue.service by @cameronmeissner in #7527
• fix: perform no install recommends and clean by @awesomenix in #7572
• fix: update localdns watchdog logic by @SriHarsha001 in #7546
• fix: pin azure plugin version to 2.5.0 by @awesomenix in #7579
• feat: upgrade aznfs package to 3.0.10 by @andyzhangx in #7542
• fix: resolve ND H100 & ND H200 loading timeout by @henryli001 in #7584
• fix: ni cluster local repo package install fail to handle test k8s version by @fseldow in #7585
• fix: log aks-node-controller arguments and update readme by @Devinwong in #7595
• chore: remove deprecated azure linux v2 and mariner v2 e2e tests by @awesomenix in #7600
• fix: remove deprecated checks in azure linux v3 tests by @awesomenix in #7605
• feat: new e2e uses bastion hosts for ssh by @awesomenix in #7586
• fix: accidently missed a spot to change to azure linux v3 by @awesomenix in #7607
• fix: get_sandbox_image_from_containerd_config fails to read containerd v2 config by @fseldow in #7597
• fix: oops! accidently disabled running test pod by @awesomenix in #7611
• fix: removing nvidia repo from VHD by @djsly in #7615
• fix: log bastion instructions for ssh by @awesomenix in #7623
• fix: log correct bastion instructions for ssh by @awesomenix in #7627
• fix: regenerate localdns corefile if it goes missing by @SriHarsha001 in #7604
• feat(azure-acr-credential-provider): disable minor update by @Liunardy in #7632
• fix: disable azure linux automatic timer.onlynotify by @fseldow in #7614
• fix: generate fixed rsa keys for cluster if missing by @awesomenix in #7636

Dependabot Updates

• chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #7486
• chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @dependabot[bot] in #7506
• chore(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @dependabot[bot] in #7633

VHD Component Updates

• chore(deps): update ama-metrics (patch) by @renovate[bot] in #7413
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7452
• chore(deps): update kube-components (patch) by @renovate[bot] in #7395
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7432
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #7424
• chore: add dalec cloud-node-manager image registry to renovate by @nilo19 in #7448
• fix: reduce windows VM provision time by @r2k1 in #7483
• feat: consume Windows Container Networking (WCN) Package v1.3.0 by @abeltrano in #7454
• fix: incorrect image references in OS Config by @r2k1 in #7501
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7507
• chore(deps): update windows/servercore docker tag to v10.0.20348.4529 by @renovate[bot] in #7509
• feat: add node label for dcgm exporter by @lilypan26 in #7447
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.32 by @renovate[bot] in #7436
• fix: set correct download location for azure acr credential provider by @lilypan26 in #7559
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-7 by @renovate[bot] in #7398
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-6 by @renovate[bot] in #7392
• feat(cloud-provider-azure): use Dalec for >= v1.32.11 by @Liunardy in #7591
• feat: use dcgm-exporter for Ubuntu 22.04 and 24.04 by @mxj220 in #7610
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-7 by @renovate[bot] in #7612
• chore(deps): update azure-policy/policy-kubernetes-...

v0.20260107.0

What's Changed

Changes

• fix: pin azure plugin version to 2.5.0 (#7579) by @awesomenix in #7580
• fix: removing nvidia repo from VHD by @djsly in #7619

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-6 (#7392) by @cameronmeissner in #7578
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-7 by @cameronmeissner in #7577
• fix: set correct download location for azure acr credential provider … by @lilypan26 in #7616

Full Changelog: v0.20251218.0...v0.20260107.0

v0.20251218.0

What's Changed

Changes

• fix: incorrect image references in OS Config (master) by @r2k1 in #7502
• feat: bump windows image version for 2025-12B (#7516) by @timmy-wright in #7520
• ci: cherrypick disabling two 10B regkeys to address 12B aggressions (#7528) by @smiezah-msft in #7529
• chore: freezing all azl2 vhd versions (#7552) by @djsly in #7555
• refactor: cherry-picking release notes to master by @yagmurbaydogan in #7553
• refactor: cherry-picking release notes to master for 12062025 by @yagmurbaydogan in #7563
• chore: disabling marinerv2 and azurelinuxv2 builds (#7567) by @djsly in #7568
• fix: dynamically resolve root device within disk_queue.service (#7527) by @cameronmeissner in #7571
• fix: perform no install recommends and clean (#7572) by @awesomenix in #7574

VHD Component Updates

• chore(deps): update windowsbase (patch) (#7507) by @timmy-wright in #7508
• fix: dry run issues in pipeline (master) by @timmy-wright in #7522
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag … by @timmy-wright in #7521

Full Changelog: v0.20251206.0...v0.20251218.0

v0.20251206.0

What's Changed

Changes

• feat(ci) : add PR lint workflow by @cameronmeissner in #7401
• fix(e2e): cherry pick azcli login for azcopy and fix e2e by @awesomenix in #7494
• fix(e2e): use invalid UserAssignedIdentityID instead of invalid AADResource in scenario Flatcar_SecureTLSBootstrapping_BootstrapToken_Fallback by @cameronmeissner in #7495
• fix(build): use cli credentials for azcopy when downloading from private urls by @awesomenix in #7498

Dependabot Updates

• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #7435
• chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 in /e2e by @dependabot[bot] in #7415

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-7 by @renovate[bot] in #7399
• chore(deps): update nvidia-device-plugin (patch) (#7452) by @ganeshkumarashok in #7472
• chore(deps): update kube-components (patch) (#7395) by @ganeshkumarashok in #7474
• chore(deps): update kubelet-kubectl (patch) (#7432) by @ganeshkumarashok in #7475
• chore(deps): update acr-credential-provider (patch) (#7424) by @ganeshkumarashok in #7476

Full Changelog: v0.20251120.0...v0.20251206.0

v0.20251120.0

What's Changed

Changes

• test: add AzureLinuxOSGuardV3gen2fipsTL to Linux VHD check-in tests by @cameronmeissner in #7360
• ci: Temporarily disable CIS scanning by @jepio in #7357
• Regkey for bugcheck 0x76 by @smiezah-msft in #7361
• fix(e2e): prevent secure TLS bootstrapping bootstrap token fallback tests from creating server-side errors by @cameronmeissner in #7369
• test: Skip LocalDns validation when unsupported by @jepio in #7378
• add e2e for nvidia grid license check by @awesomenix in #7328
• feat: incorporate linux prefetch optimization into VHD builds by @cameronmeissner in #7368
• doc: update OutboundCommand description in readme by @Devinwong in #7370
• chore: fix dry-run handling in windows pipelines by @timmy-wright in #7388
• fix: set prefetch build scripts as executable by @cameronmeissner in #7394
• surfacing the error from provision-wait mode by @Devinwong in #7382
• test(e2e): add validation for secure + server TLS bootstrapping by @cameronmeissner in #7362
• feat(flatcar): disable autologin by @ervcz in #7290
• fix: pin publisher base images by @zachary-bailey in #7397
• Fix: Remove GB200 from list of Fabric Manager SKUs by @abenn135 in #7402
• Extract latest coredns binary for localdns by @SriHarsha001 in #7387
• regression: fix branch by @timmy-wright in #7414
• fix: Reorder faillock in common-auth to prevent failures by @jepio in #7377
• switch blobfuse2 version to 2.5.0 by @ganeshkumarashok in #7403

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-4 by @renovate[bot] in #7374

New Contributors

• @ervcz made their first contribution in #7290

Full Changelog: v0.20251112.0...v0.20251120.0