Changelog v1.75.3

Fixes

• [common] Fixed CVE-2026-33186 in the CoreDNS image. #18656
  CoreDNS pods will undergo a rolling restart.
• [dhctl] Skip tmp lock for exporter and auto-converger. #18736
• [node-local-dns] Fix werf manifest #18738
• [node-local-dns] Adapt node-local-dns for air-gapped environments. #18643
• [node-manager] deploy capi controller and webhooks before basic resources to prevent race condition during upgrades. #18754
• [registrypackages] Added vex with CVE-2026-33186. #18680

Chore

• [descheduler] Grant RBAC for PersistentVolumeClaims so the descheduler can list and watch PVCs #18787

For more information, see the changelog and minor version release changes.