What's Changed
- [release-1.33] test: fix trivy failure on CVE-2026-25679 by @k8s-infra-cherrypick-robot in #3019
- [release-1.33] security: Update trivy-action to use sha for v0.35.0 by @k8s-infra-cherrypick-robot in #3034
- [release-1.33] fix: CVE-2026-33186 by @andyzhangx in #3036
- [release-1.33] fix: enforce minimum share size for StandardV2 SKU by @k8s-infra-cherrypick-robot in #3044
- [release-1.33] fix: CVE-2026-39883 by @andyzhangx in #3068
- chore: pin all GitHub Actions to full-length commit SHAs by @andyzhangx in #3085
- doc: cut v1.33.9 release by @andyzhangx in #3089
Full Changelog: v1.33.8...v1.33.9