v1.33.3 release

What's Changed

• [release-1.33] chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2624
• [release-1.33] build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2628
• [release-1.33] fix: only use the permission bits for chmod by @k8s-infra-cherrypick-robot in #2631
• [release-1.33] fix: don't change subnet.PrivateEndpointNetworkPolicies if it's already set by @andyzhangx in #2638
• doc: cut v1.33.3 release by @andyzhangx in #2644

Full Changelog: v1.33.2...v1.33.3

v1.32.5 release

What's Changed

• [release-1.32] chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2605
• [release-1.32] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2613
• [release-1.32] build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2629
• [release-1.32] fix: CVE-2025-4563 by @andyzhangx in #2636
• doc: cut v1.32.5 release by @andyzhangx in #2643

Full Changelog: v1.32.4...v1.32.5

v1.31.7 release

What's Changed

• [release-1.31] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2614
• [release-1.31] test: fix golint errors by @andyzhangx in #2617
• [release-1.31] build(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2632
• doc: cut v1.31.7 release by @andyzhangx in #2642

Full Changelog: v1.31.6...v1.31.7

v1.33.2 release

What's Changed

• [release-1.33] feat: Use WMI to implement Volume API to reduce PowerShell overhead by @k8s-infra-cherrypick-robot in #2595
• [release-1.33] fix: disable WMI call method on Windows node by @k8s-infra-cherrypick-robot in #2601
• [release-1.33] chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2604
• [release-1.33] test: fix CVE-2025-4673 in trivy action by @k8s-infra-cherrypick-robot in #2612
• [release-1.33] feat: support encryptInTransit mountOption in nfs volume by @k8s-infra-cherrypick-robot in #2618
• [release-1.33] fix: aznfs package install failure on arm64 node by @k8s-infra-cherrypick-robot in #2622
• doc: cut v1.33.2 release by @andyzhangx in #2625

Full Changelog: v1.33.1...v1.33.2

v1.33.1 release

What's Changed

• [release-1.33] fix: avoid installing aznfs when linux distribution is not supported by @k8s-infra-cherrypick-robot in #2574
• [release-1.33] fix: can't install aznfs on azurelinux by @k8s-infra-cherrypick-robot in #2576
• [release-1.33] azurefile: revert to use virtio-fs for kata pods by @k8s-infra-cherrypick-robot in #2581
• [release-1.33] fix: csi driver metrics to collect errors by @k8s-infra-cherrypick-robot in #2579
• [release-1.33] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2584
• doc: cut v1.33.1 release by @andyzhangx in #2592

Full Changelog: v1.33.0...v1.33.1

v1.32.4 release

What's Changed

• [release-1.32] fix: csi driver metrics to collect errors by @andyzhangx in #2580
• [release-1.32] azurefile: revert to use virtio-fs for kata pods by @k8s-infra-cherrypick-robot in #2582
• [release-1.32] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2585
• doc: cut v1.32.4 release by @andyzhangx in #2591

Full Changelog: v1.32.3...v1.32.4

v1.31.6 release

What's Changed

• [release-1.31] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #2500
• [release-1.31] fix: goroutine leak when timeout by @andyzhangx in #2519
• [release-1.31] fix: CVE-2025-22872 by @andyzhangx in #2522
• [release-1.31] test: ignore CVE-2025-22872 in azcopy by @k8s-infra-cherrypick-robot in #2529
• [release-1.31] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #2547
• [release-1.31] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2586
• doc: cut v1.31.6 release by @andyzhangx in #2590

Full Changelog: v1.31.5...v1.31.6

v1.30.10 release

What's Changed

• [release-1.30] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #2501
• [release-1.30] fix: goroutine leak when timeout by @andyzhangx in #2520
• [release-1.30] fix: CVE-2025-22872 by @andyzhangx in #2523
• [release-1.30] test: ignore CVE-2025-22872 in azcopy by @k8s-infra-cherrypick-robot in #2530
• [release-1.30] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #2548
• [release-1.30] chore: upgrade azcopy to v10.29.1 by @k8s-infra-cherrypick-robot in #2587
• doc: cut v1.30.10 release by @andyzhangx in #2589

Full Changelog: v1.30.9...v1.30.10

v1.33.0 release

What's Changed

• doc: cut v1.32.0 release by @andyzhangx in #2417
• chore: upgrade csi-resizer image version by @andyzhangx in #2419
• doc: update new chart versions by @andyzhangx in #2422
• chore: increase liveness-probe timeout by @andyzhangx in #2424
• test: ignore CVE-2025-22870 in azcopy by @andyzhangx in #2427
• Fix volume expansion for larger sizes by @gnufied in #2431
• chore: fix ShareQuota nil issue by @andyzhangx in #2433
• test: fix GetAccountNumByResourceGroup timeout by @andyzhangx in #2436
• chore: upgrade azure cloud provider lib by @andyzhangx in #2434
• fix: CVE-2025-30204 by @andyzhangx in #2443
• build(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 by @dependabot in #2446
• cleanup: refine DataplaneClient by @andyzhangx in #2444
• test: increase e2e test timeout by @andyzhangx in #2447
• azurefile: kata/kata-cc: add kata node conditional by @arc9693 in #2346
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot in #2457
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6 from 6.3.0 to 6.4.0 by @dependabot in #2460
• chore: upgrade azcopy to v10.28.1 by @andyzhangx in #2463
• azurefile: add kata-cc-isolation node label check by @arc9693 in #2461
• test: set ginkgo timeout as 180m by @cvvz in #2471
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #2477
• doc: update new chart versions by @andyzhangx in #2484
• cleanup: kata mount logs by @andyzhangx in #2486
• chore: upgrade snapshot CRD to v8.2.0 by @andyzhangx in #2485
• chore: increase retry-interval-max in snapshot controller by @andyzhangx in #2488
• build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in #2489
• fix: storageEndPointSuffix in on-prem cluster by @andyzhangx in #2490
• build(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 by @dependabot in #2492
• build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot in #2493
• build(deps): bump golang.org/x/sys from 0.31.0 to 0.32.0 by @dependabot in #2494
• build(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1 by @dependabot in #2497
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in #2496
• doc: add linked access permissions required for subnets/write doc by @cadenmarchese in #2495
• test: fix CVE-2025-22871 in trivy action by @andyzhangx in #2498
• cleanup: remove deprecated wait.PollImediate function by @andyzhangx in #2505
• feat: support data plane api using Oauth on smb file share operations by @andyzhangx in #2320
• test: add more ut by @andyzhangx in #2510
• doc: add missing permission using PrivateEndpoint by @andyzhangx in #2513
• fix: goroutine leak when timeout by @cvvz in #2516
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.7.0 to 1.8.0 by @dependabot in #2526
• test: ignore CVE-2025-22872 in azcopy by @andyzhangx in #2527
• build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot in #2531
• feat: support nfs EncryptionInTransit by azurefile-proxy by @cvvz in #2518
• test: ut for encryptInTransit by @cvvz in #2534
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azfile from 1.5.0 to 1.5.1 by @dependabot in #2535
• test: e2e test for encrypt In Transit by @cvvz in #2536
• feat: add VerticalPodAutoscaler to azurefile csi controller pod by @umagnus in #2539
• chore: upgrade snapshot sidecar image to v8.2.1 by @andyzhangx in #2540
• doc: fix snapshot crd illegal characters by @umagnus in #2542
• doc: add missing permission using PrivateEndpoint#2 by @andyzhangx in #2543
• chore: upgrade azcopy to v10.29.0 by @andyzhangx in #2544
• build(deps): bump go.uber.org/mock from 0.5.1 to 0.5.2 by @dependabot in #2545
• fix: allow deleting cross-subscription snapshots by @RomanBednar in #2515
• feat: add VNetLinkName and PublicNetworkAccess in account creation by @andyzhangx in #2552
• build(deps): bump golang.org/x/sys from 0.32.0 to 0.33.0 by @dependabot in #2555
• build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in #2556
• doc: correct permissions for PrivateEndpoint by @Phaow in #2557
• fix: install aznfs on azure linux by @cvvz in #2550
• fix: delete snapshot should not delete file share by @andyzhangx in #2562

New Contributors

• @cadenmarchese made their first contribution in #2495
• @Phaow made their first contribution in #2557

Full Changelog: v1.32.0...v1.33.0

v1.32.3 release

What's Changed

• [release-1.32] fix: delete snapshot should not delete file share by @andyzhangx in #2563
• doc: cut v1.32.3 release by @andyzhangx in #2564

Full Changelog: v1.32.2...v1.32.3