v1.27.0 release

What's Changed

• doc: cut v1.26.0 release by @andyzhangx in #1853
• fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1872
• doc: update new chart versions by @andyzhangx in #1876
• chore: increase liveness-probe timeout by @andyzhangx in #1878
• chore(deps): bump k8s.io/mount-utils from 0.32.2 to 0.32.3 in the k8s group by @dependabot[bot] in #1881
• test: ignore CVE-2025-22870 in azcopy by @andyzhangx in #1882
• feat: support workload identity by @cvvz in #1798
• test: ut for parseServiceAccountToken by @cvvz in #1890
• chore: upgrade azure cloud provider lib by @andyzhangx in #1894
• feat: add metrics on node config by @andyzhangx in #1896
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.2 by @dependabot[bot] in #1902
• fix: CVE-2025-30204 by @andyzhangx in #1905
• chore(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot[bot] in #1909
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.2 to 2.23.3 by @dependabot[bot] in #1911
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.4.0 to 1.5.0 by @dependabot[bot] in #1913
• chore: upgrade azcopy to v10.28.1 by @andyzhangx in #1914
• chore(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 by @dependabot[bot] in #1919
• chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot[bot] in #1924
• doc: update new chart versions by @andyzhangx in #1925
• fix: storageEndPointSuffix setting in on-prem cluster by @andyzhangx in #1927
• chore(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 by @dependabot[bot] in #1930
• chore(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot[bot] in #1931
• test: fix CVE-2025-22871 in trivy action by @andyzhangx in #1933
• chore(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot[bot] in #1932
• doc: add ClientID parameter in doc by @andyzhangx in #1938
• fix: allow clientID, tenantID workload identity parameters in storage class by @andyzhangx in #1939
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 by @dependabot[bot] in #1943
• cleanup: remove deprecated wait.PollImediate function by @andyzhangx in #1944
• chore(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1 by @dependabot[bot] in #1946
• fix: goroutine leak when timeout by @cvvz in #1947
• fix: grpc connection was not closed properly by @cvvz in #1951
• test: ignore CVE-2025-22872 in azcopy by @andyzhangx in #1960
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.7.0 to 1.8.0 by @dependabot[bot] in #1959
• chore(deps): bump k8s.io/mount-utils from 0.32.3 to 0.32.4 in the k8s group by @dependabot[bot] in #1962
• fix: incorrect metris log in NodeStageVolume by @andyzhangx in #1964
• feat: add VerticalPodAutoscaler to blob csi controller pod by @umagnus in #1971
• doc: Remove the obsolete comment by @mathieu-clnk in #1970
• chore: upgrade k8s.io/mount-utils by @andyzhangx in #1972
• cleanup: refine Dockerfile by @andyzhangx in #1973
• chore: upgrade azcopy to v10.29.0 by @andyzhangx in #1974
• chore(deps): bump go.uber.org/mock from 0.5.1 to 0.5.2 by @dependabot[bot] in #1979
• test: add UT coverage for blob/nodeserver.go by @Zhupku in #1980
• doc: fix volumeHandle doc by @andyzhangx in #1981
• chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot[bot] in #1984
• feat: add VNetLinkName and PublicNetworkAccess in account creation by @andyzhangx in #1983
• chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot[bot] in #1990
• fix: add mountWithWorkloadIdentityToken parameter by @andyzhangx in #1988
• doc: update tips for fsGroupChangePolicy parameter setting by @andyzhangx in #1996
• cleanup: disable version check in blobfuse2 driver by default by @andyzhangx in #1994
• test: add UT coverage for blob/nodeserver.go by @Zhupku in #2001
• doc: update new chart versions by @andyzhangx in #2002
• chore(deps): bump k8s.io/mount-utils from 0.33.0 to 0.33.1 in the k8s group by @dependabot[bot] in #2004
• chore: upgrade to aznfs v2.0.12 by @andyzhangx in #2006
• cleanup: remove unused getCloudEnvironment func by @andyzhangx in #2005
• fix: csi driver metrics to collect errors by @andyzhangx in #2008
• chore: upgrade azcopy to v10.29.1 by @andyzhangx in #2010
• Revert "cleanup: disable version check in blobfuse2 driver by default" by @andyzhangx in #2019
• cleanup: disable version check in blobfuse2 driver by default by @andyzhangx in #2024
• chore(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in #2026
• chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #2027
• chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #2028
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.3.1 to 1.4.0 by @dependabot[bot] in #2031
• test: fix CVE-2025-4673 in trivy action by @andyzhangx in #2032
• chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2042
• fix: only use the permission bits for chmod by @nearora-msft in #2041
• chore(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/blobplugin by @dependabot[bot] in #2045
• chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0 by @dependabot[bot] in #2044
• fix: CVE-2025-4563 by @andyzhangx in #2053
• chore(deps): bump k8s.io/mount-utils from 0.33.1 to 0.33.2 in the k8s group by @dependabot[bot] in #2051
• chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot[bot] in #2055
• fix: don't change subnet.PrivateEndpointNetworkPolicies if it's already set by @andyzhangx in #2056
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.8.0 to 1.8.1 by @dependabot[bot] in #2057
• chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in #2070
• chore(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #2072
• cleanup: decrease parsing volumeID log level by @andyzhangx in #2073
• cleanup: fix incorrect logging info when volume is already mounted by @andyzhangx in #2077
• feat: use kubelet identity by default in msi auth by @andyzhangx in #2081
• chore(deps): bump k8s.io/mount-utils from 0.33.2 to 0.33.3 in the k8s group by @dependabot[bot] in #2085
• fix: workload identity token refresh issue by @andyzhangx in #2071
• feat: install blobfuse 2.5.0 as default version by @andyzhangx in #2086
• chore: allow package install downgrade by default by @andyzhangx in #2089
• cleanup: refine Dockerfile by @andyzhangx in #2095
• chore(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 by @dependabot[bot] in #2097
• Revert "fix: ignore specific blobfuse version install failure" by @andyzhangx in #2099
• chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in #2101
• feat: support blobStorageAccountType parameter in storage class or pv by @andyzhangx in #2102
• cleanup: unused blobfuseVersion by @andyzhangx in #2107
• chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #2108
• test: fix CVE-2025-47907 traivy test failure by @andyzhangx in #2111
• chore: upgrade azcopy to v10.30.0 by @andyzhangx in #2110
• chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2122
• doc: fix outdated doc by @andyzhangx in #2124
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2126
• chore(deps): bump k8s.io/mount-utils from 0.33.3 to 0.33.4 in the k8s group by @dependabot[bot] in #2128
• cleanup: add more logging in blobfuse-proxy when blobfuse2 not found by @andyzhangx in #2130
• fix: support blobfuse2 install for GKE cos node by @andyzhangx in #2125
• chore: upgrade CSI driver sidecar images by @andyzhangx in #2135
• feat: support blobfuse2 preview package install by @jainakanksha-msft in #2137
• chore(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by @dependabot[bot] in #2134
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 by @dependabot[bot] in #2141
• test: ignore latest tgz file in helm chart index verification by @andyzhangx in #2144
• chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #2143
• Improve test-coverage on blobplugin by @TobyTheHutt in #2148
• chore(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.2 by @dependabot[bot] in #2149
• fix: CVE-2025-5187 by @andyzhangx in #2150
• fix: respect secretName during volume creation by @andyzhangx in #2151
• chore(deps): bump the k8s group with 2 updates by @dependabot[bot] in #2156
• chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #2157

New Contributors

• @mathieu-clnk made their first contribution in #1970
• @nearora-msft made their first contribution in #2041
• @jainakanksha-msft made their first contribution in #2137
• @TobyTheHutt made their first contribution in #2148

Full Changelog: v1.26.0...v1.27.0