What's Changed
- [release-1.33] test: fix CVE-2025-61726 trivy failure by @k8s-infra-cherrypick-robot in #3487
- [release-1.33] test: skip flaky TestConcurrentDetachDisk test by @k8s-infra-cherrypick-robot in #3485
- [release-1.33] chore(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurediskplugin by @k8s-infra-cherrypick-robot in #3492
- [release-1.33] fix: Correct CSI-Provisioner permissions for VAC by @k8s-infra-cherrypick-robot in #3496
- [release-1.33] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #3504
- [release-1.33] chore: upgrade CSI sidecar image versions by @andyzhangx in #3517
- [release-1.33] fix: CVE-2026-24051 by @andyzhangx in #3529
- [release-1.33] fix: CVE-2026-33186 by @andyzhangx in #3549
- [release-1.33] feat: update maxDataDiskCountMap with latest VM size list by @k8s-infra-cherrypick-robot in #3555
- [release-1.33] security: Update trivy-action to use sha for v0.35.0 by @k8s-infra-cherrypick-robot in #3559
- doc: cut v1.33.9 release by @andyzhangx in #3571
- [release-1.33] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #3577
- [release-1.33] fix: CVE-2026-39883 by @andyzhangx in #3579
- [release-1.33] feat: add optional healthcheck for node-driver-registrar by @andyzhangx in #3574
- cherry-pick #3583 to release-1.33: refactor nodeDriverRegistrar config by @andyzhangx in #3586
- chore: pin all GitHub Actions to full-length commit SHAs by @andyzhangx in #3590
Full Changelog: v1.33.8...v1.33.9