v1.25.6 release

What's Changed

• [release-1.25] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #1935
• [release-1.25] fix: allow clientID, tenantID workload identity parameters in storage class by @k8s-infra-cherrypick-robot in #1942
• [release-1.25] fix: goroutine leak when timeout by @andyzhangx in #1949
• [release-1.25] fix: grpc connection was not closed properly by @k8s-infra-cherrypick-robot in #1956
• [release-1.25] fix: CVE-2025-22872 by @andyzhangx in #1953
• [release-1.25] fix: incorrect metris log in NodeStageVolume by @k8s-infra-cherrypick-robot in #1965
• [release-1.25] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #1976
• [release-1.25] fix: add mountWithWorkloadIdentityToken parameter by @andyzhangx in #1993
  • with this new parameter, Storage Account Contributor is required for workload identity auth and Storage Blob Data Contributor is not needed any more
• doc: cut v1.25.6 release by @andyzhangx in #1995

Full Changelog: v1.25.5...v1.25.6