What's Changed
- [release-1.36] ci: bump Trivy Go version to 1.26.10 by @k8s-infra-cherrypick-robot in #3913
- [release-1.36] fix: clear snapshot continuation token after the last page by @k8s-infra-cherrypick-robot in #3904
- [release-1.36] fix(azureutils): do not mutate the caller slice in RemoveOptionIfExists by @andyzhangx in #3918
- [release-1.36] fix: correct off-by-one LUN bound that panics SetDiskLun by @andyzhangx in #3917
- [release-1.36] test: add fallback registries for Trivy vulnerability database by @k8s-infra-cherrypick-robot in #3920
- [release-1.36] test: update PyYAML for Python 3.13 verify jobs by @k8s-infra-cherrypick-robot in #3928
- [release-1.36] chore: update CSI sidecar images by @andyzhangx in #3934
- [release-1.36] fix(azurediskplugin): close the preStop volume attachment signal once by @k8s-infra-cherrypick-robot in #3937
- [release-1.36] fix: update golang.org/x/net to v0.62.0 for CVEs by @k8s-infra-cherrypick-robot in #3939
- [release-1.36] fix: add validation for mutable params from VAC by @k8s-infra-cherrypick-robot in #3946
- [release-1.36] fix: update x/crypto for GO-2026-5932 by @k8s-infra-cherrypick-robot in #3954
- [release-1.36] fix: make SCSI device deletion opt-in by @landreasyan in #3962
- doc: cut v1.36.2 release by @landreasyan in #3965
Full Changelog: v1.36.1...v1.36.2