What's Changed
- doc: cut v1.26.0 release by @andyzhangx in #1853
- fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1872
- doc: update new chart versions by @andyzhangx in #1876
- chore: increase liveness-probe timeout by @andyzhangx in #1878
- chore(deps): bump k8s.io/mount-utils from 0.32.2 to 0.32.3 in the k8s group by @dependabot[bot] in #1881
- test: ignore CVE-2025-22870 in azcopy by @andyzhangx in #1882
- feat: support workload identity by @cvvz in #1798
- test: ut for parseServiceAccountToken by @cvvz in #1890
- chore: upgrade azure cloud provider lib by @andyzhangx in #1894
- feat: add metrics on node config by @andyzhangx in #1896
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.2 by @dependabot[bot] in #1902
- fix: CVE-2025-30204 by @andyzhangx in #1905
- chore(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot[bot] in #1909
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.2 to 2.23.3 by @dependabot[bot] in #1911
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.4.0 to 1.5.0 by @dependabot[bot] in #1913
- chore: upgrade azcopy to v10.28.1 by @andyzhangx in #1914
- chore(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 by @dependabot[bot] in #1919
- chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot[bot] in #1924
- doc: update new chart versions by @andyzhangx in #1925
- fix: storageEndPointSuffix setting in on-prem cluster by @andyzhangx in #1927
- chore(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 by @dependabot[bot] in #1930
- chore(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot[bot] in #1931
- test: fix CVE-2025-22871 in trivy action by @andyzhangx in #1933
- chore(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot[bot] in #1932
- doc: add ClientID parameter in doc by @andyzhangx in #1938
- fix: allow clientID, tenantID workload identity parameters in storage class by @andyzhangx in #1939
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 by @dependabot[bot] in #1943
- cleanup: remove deprecated wait.PollImediate function by @andyzhangx in #1944
- chore(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1 by @dependabot[bot] in #1946
- fix: goroutine leak when timeout by @cvvz in #1947
- fix: grpc connection was not closed properly by @cvvz in #1951
- test: ignore CVE-2025-22872 in azcopy by @andyzhangx in #1960
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.7.0 to 1.8.0 by @dependabot[bot] in #1959
- chore(deps): bump k8s.io/mount-utils from 0.32.3 to 0.32.4 in the k8s group by @dependabot[bot] in #1962
- fix: incorrect metris log in NodeStageVolume by @andyzhangx in #1964
- feat: add VerticalPodAutoscaler to blob csi controller pod by @umagnus in #1971
- doc: Remove the obsolete comment by @mathieu-clnk in #1970
- chore: upgrade k8s.io/mount-utils by @andyzhangx in #1972
- cleanup: refine Dockerfile by @andyzhangx in #1973
- chore: upgrade azcopy to v10.29.0 by @andyzhangx in #1974
- chore(deps): bump go.uber.org/mock from 0.5.1 to 0.5.2 by @dependabot[bot] in #1979
- test: add UT coverage for blob/nodeserver.go by @Zhupku in #1980
- doc: fix volumeHandle doc by @andyzhangx in #1981
- chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot[bot] in #1984
- feat: add VNetLinkName and PublicNetworkAccess in account creation by @andyzhangx in #1983
- chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot[bot] in #1990
- fix: add mountWithWorkloadIdentityToken parameter by @andyzhangx in #1988
- doc: update tips for fsGroupChangePolicy parameter setting by @andyzhangx in #1996
- cleanup: disable version check in blobfuse2 driver by default by @andyzhangx in #1994
- test: add UT coverage for blob/nodeserver.go by @Zhupku in #2001
- doc: update new chart versions by @andyzhangx in #2002
- chore(deps): bump k8s.io/mount-utils from 0.33.0 to 0.33.1 in the k8s group by @dependabot[bot] in #2004
- chore: upgrade to aznfs v2.0.12 by @andyzhangx in #2006
- cleanup: remove unused getCloudEnvironment func by @andyzhangx in #2005
- fix: csi driver metrics to collect errors by @andyzhangx in #2008
- chore: upgrade azcopy to v10.29.1 by @andyzhangx in #2010
- Revert "cleanup: disable version check in blobfuse2 driver by default" by @andyzhangx in #2019
- cleanup: disable version check in blobfuse2 driver by default by @andyzhangx in #2024
- chore(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in #2026
- chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #2027
- chore: migrate csi-resizer sidecar image to dalec image by @andyzhangx in #2028
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.3.1 to 1.4.0 by @dependabot[bot] in #2031
- test: fix CVE-2025-4673 in trivy action by @andyzhangx in #2032
- chore: migrate csi driver sidecar images to dalec images by @andyzhangx in #2042
- fix: only use the permission bits for chmod by @nearora-msft in #2041
- chore(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /pkg/blobplugin by @dependabot[bot] in #2045
- chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0 by @dependabot[bot] in #2044
- fix: CVE-2025-4563 by @andyzhangx in #2053
- chore(deps): bump k8s.io/mount-utils from 0.33.1 to 0.33.2 in the k8s group by @dependabot[bot] in #2051
- chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot[bot] in #2055
- fix: don't change subnet.PrivateEndpointNetworkPolicies if it's already set by @andyzhangx in #2056
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.8.0 to 1.8.1 by @dependabot[bot] in #2057
- chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in #2070
- chore(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #2072
- cleanup: decrease parsing volumeID log level by @andyzhangx in #2073
- cleanup: fix incorrect logging info when volume is already mounted by @andyzhangx in #2077
- feat: use kubelet identity by default in msi auth by @andyzhangx in #2081
- chore(deps): bump k8s.io/mount-utils from 0.33.2 to 0.33.3 in the k8s group by @dependabot[bot] in #2085
- fix: workload identity token refresh issue by @andyzhangx in #2071
- feat: install blobfuse 2.5.0 as default version by @andyzhangx in #2086
- chore: allow package install downgrade by default by @andyzhangx in #2089
- cleanup: refine Dockerfile by @andyzhangx in #2095
- chore(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 by @dependabot[bot] in #2097
- Revert "fix: ignore specific blobfuse version install failure" by @andyzhangx in #2099
- chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in #2101
- feat: support blobStorageAccountType parameter in storage class or pv by @andyzhangx in #2102
- cleanup: unused blobfuseVersion by @andyzhangx in #2107
- chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #2108
- test: fix CVE-2025-47907 traivy test failure by @andyzhangx in #2111
- chore: upgrade azcopy to v10.30.0 by @andyzhangx in #2110
- chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2122
- doc: fix outdated doc by @andyzhangx in #2124
- chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2126
- chore(deps): bump k8s.io/mount-utils from 0.33.3 to 0.33.4 in the k8s group by @dependabot[bot] in #2128
- cleanup: add more logging in blobfuse-proxy when blobfuse2 not found by @andyzhangx in #2130
- fix: support blobfuse2 install for GKE cos node by @andyzhangx in #2125
- chore: upgrade CSI driver sidecar images by @andyzhangx in #2135
- feat: support blobfuse2 preview package install by @jainakanksha-msft in #2137
- chore(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by @dependabot[bot] in #2134
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 by @dependabot[bot] in #2141
- test: ignore latest tgz file in helm chart index verification by @andyzhangx in #2144
- chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #2143
- Improve test-coverage on blobplugin by @TobyTheHutt in #2148
- chore(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.2 by @dependabot[bot] in #2149
- fix: CVE-2025-5187 by @andyzhangx in #2150
- fix: respect secretName during volume creation by @andyzhangx in #2151
- chore(deps): bump the k8s group with 2 updates by @dependabot[bot] in #2156
- chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #2157
New Contributors
- @mathieu-clnk made their first contribution in #1970
- @nearora-msft made their first contribution in #2041
- @jainakanksha-msft made their first contribution in #2137
- @TobyTheHutt made their first contribution in #2148
Full Changelog: v1.26.0...v1.27.0