v0.20260213.2

What's Changed

Changes

• feat: install container-networkingplugins from dalec packages replacing old share by @Devinwong in #7781
• feat: azurelinux add nvidia open driver installation selection by @miz060 in #7731
• feat: add udev rule to set default RX Buffer as 2048 on systems with 4 or more cores by @mugeshsp in #7665
• feat: provide configurable cse timeout in seconds by @awesomenix in #7766
• feat: capture aks-node-controller errors into Guest Agent Events by @Devinwong in #7773
• feat: inspektor gadget into vhd build by @chmill-zz in #7371

Fixes

• fix: shrink flatcar customdata size by @jepio in #7755
• fix: adding crontab for AzureLinux in custom clouds to ensure custom CAs are getting refreshed daily by @djsly in #7785
• fix: add cni-plugins back for backward compatibility by @Devinwong in #7866
• fix: onboard azl3 kubectl and kublet to renovate by @Devinwong in #7859
• fix: add default CSE_TIMEOUT directly within cse_start.sh by @cameronmeissner in #7864
• fix: run aptmarkwalinuxagent hold operation on foreground by @SriHarsha001 in #7797
• fix: fail on any error in step by @awesomenix in #7793
• fix(localdns): wait for resolv.conf update after networkctl reload to prevent race condition by @saewoni in #7749
• fix: create new field kubelet_cmd_flags which can replace kubelet_flags by @awesomenix in #7771
• fix: revert create new field kubelet_cmd_flags which can replace kubelet_flags by @awesomenix in #7782
• fix: enabling waagent root password removal logic again for Ubuntu by @djsly in #7780
• fix: change CNI tgz name with arch by @Devinwong in #7831

Build and Release

• feat: add TL FIPS SIG image config and e2e by @mxj220 in #7814
• feat: add Trusted Launch FIPS 22.04 VHD by @mxj220 in #7753
• chore: remove azurelinuxv2 and marinerv2 from releases by @Devinwong in #7763
• test: add kernel log validation to abe2es by @lilypan26 in #7835
• test: add dcgm exporter compatibility e2e by @surajssd in #7787
• test: add e2e tests for Ubuntu 2204 FIPS VHD by @Copilot in #7739
• test: remove check-in tests buildAzureLinuxV2gen2 and buildMarinerV2gen2 by @Devinwong in #7761
• fix(e2e): fix e2e and validation bugs by @jepio in #7776
• fix(e2e): timeout/retry ssh connections and remove intermediate pipe by @jepio in #7850
• fix(e2e): log instead of error when NICs not found in rx buffer test by @mugeshsp in #7784
• fix(e2e): ensure slot retrieval does not fail in ValidateNetworkInterfaceConfig by @mugeshsp in #7792
• fix(e2e): skip gpu e2e tests on sku quota exceeded and add configurable test timeout by @awesomenix in #7836
• fix(e2e): echo file contents in e2e test if a file contents check fails. by @timmy-wright in #7656
• fix(e2e): improve test logging by @r2k1 in #7841

MISC

• feat: create new copilot setup steps for easier agents handling by @awesomenix in #7752
• refactor: simplify components.json code by @chewi in #7742
• chore: change owner of cluster-proportional-autoscaler, addon-resizer and coredns by @Devinwong in #7865
• chore: replace copilot-instructions.md symlink with actual file content by @awesomenix in #7801
• docs: enhance PR review guidelines with detailed risk categories and package update analysis by @awesomenix in #7810

Dependabot Updates

• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #7754
• chore(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 by @dependabot[bot] in #7767

VHD Component Updates

• feat: adding first caching for k8s 1.35 by @djsly in #7799
• chore(deps): update ama-metrics (patch) by @renovate[bot] in #7735
• chore(deps): upgrade Azure CSI driver versions by @andyzhangx in #7751
• chore(deps): Replace cni and cns versions with v1.5.50 by @rejain789 in #7759
• chore(deps): update kube-components (patch) by @renovate[bot] in #7524
• chore(deps): replace cni and cns versions with v1.6.35 by @rejain789 in #7757
• chore(deps): update aks/aks-gpu-cuda docker tag to v580.105.08-20260108183250 by @renovate[bot] in #7626
• chore(deps): update aks/aks-gpu-cuda docker tag to v580.126.09-20260126030251 by @renovate[bot] in #7791
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.34 by @renovate[bot] in #7691
• chore(deps): using newly rebuilt containerd 1.7.30 deb with latest golang for CVE fixes by @djsly in #7802
• chore(deps): replace Cilium v1.16 with v1.18 Cilium-distroless + Cilium-distroless-init by @jpayne3506 in #7325
• chore(deps): update renovate to match distroless images by @jpayne3506 in #7823
• chore(deps): bump cri-tools to latest version for CVE fixes by @djsly in #7800
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.32.1-2 by @renovate[bot] in #7790
• chore(deps): update kube-proxy to 1.33.6 by @Devinwong in #7834
• chore(deps): update oss/kubernetes/kube-proxy docker tag to v1.33.7 by @renovate[bot] in #7838
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7842
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7673
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-8 by @renovate[bot] in #7807
• chore(deps): update kube-components (patch) by @renovate[bot] in #7845
• chore(deps): bump azure-cloud-node-manager for CVE fixes by @Liunardy in #7854
• chore(deps): update kubelet-kubectl to v1.34.3-1.azl3 (patch) by @renovate[bot] in #7861
• chore(deps): update azure-policy/policy-kubernetes-webhook docker tag to v1.15.5 by @renovate[bot] in #7816
• chore(deps): bump acr-mirror to version 0.3.0 by @djsly in #7862
• chore(deps): upgrade blobfuse2 to 2.5.2 to bring in fix for mooncake and CVE fixes by @djsly in #7788

New Contributors

• @mugeshsp made their first contribution in #7665
• @rejain789 made their first contribution in #7759
• @saewoni made their first contribution in #7749

Full Changelog: v0.20260127.0...v0.20260213.2

v0.20260127.0

What's Changed

Changes

• feat: support kubelet patch in AzureLinux live patching by @YaoC in #7302
• feat: ensure successful blob upload without prefetch optimization enabled by @zachary-bailey in #7613
• chore: update files owned by security patch owner by @YaoC in #7652
• chore: fix CODEOWNERS settings for pkg/agent/testdata/ by @cameronmeissner in #7654
• feat: dnf tries to install cached rpms and dependencies first by @Devinwong in #7635
• test(e2e): validate no unexpected systemd unit failures on linux by @cameronmeissner in #7644
• fix: write provision.json on any node controller failures, add E2E by @awesomenix in #7650
• fix: apply correct disk tuning settings on NVMe devices by @cameronmeissner in #7653
• fix: add check for assigning packer vm uami by @zachary-bailey in #7660
• fix: fixing repodepot support for azlinux3 and ubuntu2404 as well as PMC on Ubuntu by @djsly in #7565
• fix: add missing DESTINATION_STORAGE_CONTAINER env var in Windows VHD… by @benjamin-brady in #7679
• feat: use the official Pause image TAG instead of specifying the LTCS Windows version tag by @djsly in #7675
• fix: return copy of base kubelet config everytime by @awesomenix in #7686
• feat: adding logic to configure repo_depot by @djsly in #7694
• feat: redirect mcr.azk8s.cn to mcr.azure.cn in Windows containerd by @jiashun0011 in #7705
• fix: remove root password expiration early in CSE execution [main] by @jepio in #7709
• chore(deps): update OS Guard base image version to 3.0.20260107 by @hbeberman in #7706
• fix: revert password expiry changes for root account by @benjamin-brady in #7707
• feat: redirect mcr.azk8s.cn to mcr.azure.cn in Windows containerd by @jiashun0011 in #7646
• fix: issues caused by the /usr/local/bin to /opt/bin move by @chewi in #7703
• fix: add retries to wireserver, cache first time response to avoid spam by @awesomenix in #7676
• fix: fixing some scriptless bugs by @Devinwong in #7698
• feat: add Ubuntu 22.04 FIPS VHDs by @mxj220 in #7721
• feat: add MigStrategy and EnableManagedGPU NBC variables for managed GPU experience by @calvin197 in #7695
• feat: configure copilot pr review for breaking change detection by @r2k1 in #7740
• fix: dont expire root password in osguard by @awesomenix in #7743

VHD Component Updates

• chore(deps): update windowsbase (patch) by @renovate[bot] in #7648
• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-3 by @renovate[bot] in #7649
• chore(deps): update coredns, addon-resizer, cpa versions cached in VHD by @ashokobulapuram7 in #7651
• feat: add ServiceAccountImagePullProfile for identity-binding-based image pull by @qweeah in #7596
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #7598
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #7657
• feat: install most components to /opt/bin instead of /usr/local/bin by @chewi in #7125
• chore(deps): update dependency datacenter-gpu-manager-4-core to v1:4.5.0-1 by @renovate[bot] in #7630
• chore(deps): update dependency datacenter-gpu-manager-4-proprietary to v1:4.5.0-1 by @renovate[bot] in #7631
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.32.1-1 by @renovate[bot] in #7666
• fix: update datecenter-gpu-manager-4 version for dcgm exporter compatibility by @lilypan26 in #7736

New Contributors

• @ashokobulapuram7 made their first contribution in #7651

Full Changelog: v0.20260113.0...v0.20260127.0

v0.20260113.0

What's Changed

Changes

• fix: managed gpu experience tests by @jepio in #7437
• chore: update internal branch references to main by @cameronmeissner in #7441
• chore(e2e): add firewall to e2es by @lilypan26 in #7350
• chore: update PR title lint triggers to include PR synchronization by @cameronmeissner in #7450
• chore: move e2e and gc to use service connection by @awesomenix in #7449
• chore: move windows vhd build to use service connections by @awesomenix in #7457
• chore: move linux vhd build to use service connection by @awesomenix in #7451
• fix: add GRID driver version to VHD release notes by @ganeshkumarashok in #7464
• feat: add mooncake mcr containerd config host - linux by @fseldow in #7342
• test: improve e2e logs by @r2k1 in #7469
• docs: update windows release notes for 2025-11B (#7389) by @timmy-wright in #7482
• fix(windows): decrease retry timeout for network adapter read in windows provisioning scripts by @timmy-wright in #7480
• feat: update test pmc repo when using prerelease version by @lilypan26 in #7459
• chore: use azcli login for azcopy by @awesomenix in #7487
• fix(e2e): use invalid UserAssignedIdentityID instead of invalid AADResource in scenario Flatcar_SecureTLSBootstrapping_BootstrapToken_Fallback by @cameronmeissner in #7493
• fix: use cli credentials for azcopy when downloading from private urls by @awesomenix in #7496
• fix: only execute cloud-init-status-check.sh when it exists on the node by @Devinwong in #7456
• ci: log disk usage by @r2k1 in #7503
• feat: add http header for mooncake mar containerd host by @fseldow in #7515
• fix: installation of Azure ACR Credential Provider on OSGuard by @miz060 in #7511
• fix: dry run issues in pipeline by @timmy-wright in #7523
• fix: windows release script by @timmy-wright in #7525
• ci: add disk usage diagnostics to VHD builds by @r2k1 in #7518
• feat: move azurelinuxOSGuard to immutable storage container by @zachary-bailey in #7510
• ci: disabling two 10B regkeys to address 12B aggressions by @smiezah-msft in #7528
• fix: windows_settings should have same rules as components.json by @timmy-wright in #7531
• fix(ci): limit image builder template name to 64 characters by @cameronmeissner in #7540
• docs: update windows release notes for 2025-12B (#7532) by @timmy-wright in #7543
• fix(ci): skip disk usage report publishing on OSGuard by @cameronmeissner in #7544
• fix(ci): temporarily disable grid compatibility check to eliminate build warnings by @cameronmeissner in #7545
• fix(ci): bump Linux VHD build timeout to account for prefetch optimization latency by @cameronmeissner in #7548
• fix(ci): make Linux VHD content tests resilient to illegitimate errors by @cameronmeissner in #7547
• chore: freezing all azl2 vhd versions by @djsly in #7552
• test: add missing UTs for OS image config cloud settings by @cameronmeissner in #7557
• fix: support katacc policy annotation by @Bickor in #7556
• fix: remove --cloud-config as it's deprecated from kubelet flags and configs by @Devinwong in #7566
• chore: disabling marinerv2 and azurelinuxv2 builds by @djsly in #7567
• fix: dynamically resolve root device within disk_queue.service by @cameronmeissner in #7527
• fix: perform no install recommends and clean by @awesomenix in #7572
• fix: update localdns watchdog logic by @SriHarsha001 in #7546
• fix: pin azure plugin version to 2.5.0 by @awesomenix in #7579
• feat: upgrade aznfs package to 3.0.10 by @andyzhangx in #7542
• fix: resolve ND H100 & ND H200 loading timeout by @henryli001 in #7584
• fix: ni cluster local repo package install fail to handle test k8s version by @fseldow in #7585
• fix: log aks-node-controller arguments and update readme by @Devinwong in #7595
• chore: remove deprecated azure linux v2 and mariner v2 e2e tests by @awesomenix in #7600
• fix: remove deprecated checks in azure linux v3 tests by @awesomenix in #7605
• feat: new e2e uses bastion hosts for ssh by @awesomenix in #7586
• fix: accidently missed a spot to change to azure linux v3 by @awesomenix in #7607
• fix: get_sandbox_image_from_containerd_config fails to read containerd v2 config by @fseldow in #7597
• fix: oops! accidently disabled running test pod by @awesomenix in #7611
• fix: removing nvidia repo from VHD by @djsly in #7615
• fix: log bastion instructions for ssh by @awesomenix in #7623
• fix: log correct bastion instructions for ssh by @awesomenix in #7627
• fix: regenerate localdns corefile if it goes missing by @SriHarsha001 in #7604
• feat(azure-acr-credential-provider): disable minor update by @Liunardy in #7632
• fix: disable azure linux automatic timer.onlynotify by @fseldow in #7614
• fix: generate fixed rsa keys for cluster if missing by @awesomenix in #7636

Dependabot Updates

• chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #7486
• chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @dependabot[bot] in #7506
• chore(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @dependabot[bot] in #7633

VHD Component Updates

• chore(deps): update ama-metrics (patch) by @renovate[bot] in #7413
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7452
• chore(deps): update kube-components (patch) by @renovate[bot] in #7395
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7432
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #7424
• chore: add dalec cloud-node-manager image registry to renovate by @nilo19 in #7448
• fix: reduce windows VM provision time by @r2k1 in #7483
• feat: consume Windows Container Networking (WCN) Package v1.3.0 by @abeltrano in #7454
• fix: incorrect image references in OS Config by @r2k1 in #7501
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7507
• chore(deps): update windows/servercore docker tag to v10.0.20348.4529 by @renovate[bot] in #7509
• feat: add node label for dcgm exporter by @lilypan26 in #7447
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.32 by @renovate[bot] in #7436
• fix: set correct download location for azure acr credential provider by @lilypan26 in #7559
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-7 by @renovate[bot] in #7398
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-6 by @renovate[bot] in #7392
• feat(cloud-provider-azure): use Dalec for >= v1.32.11 by @Liunardy in #7591
• feat: use dcgm-exporter for Ubuntu 22.04 and 24.04 by @mxj220 in #7610
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-7 by @renovate[bot] in #7612
• chore(deps): update azure-policy/policy-kubernetes-...

v0.20260107.0

What's Changed

Changes

• fix: pin azure plugin version to 2.5.0 (#7579) by @awesomenix in #7580
• fix: removing nvidia repo from VHD by @djsly in #7619

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-6 (#7392) by @cameronmeissner in #7578
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-7 by @cameronmeissner in #7577
• fix: set correct download location for azure acr credential provider … by @lilypan26 in #7616

Full Changelog: v0.20251218.0...v0.20260107.0

v0.20251218.0

What's Changed

Changes

• fix: incorrect image references in OS Config (master) by @r2k1 in #7502
• feat: bump windows image version for 2025-12B (#7516) by @timmy-wright in #7520
• ci: cherrypick disabling two 10B regkeys to address 12B aggressions (#7528) by @smiezah-msft in #7529
• chore: freezing all azl2 vhd versions (#7552) by @djsly in #7555
• refactor: cherry-picking release notes to master by @yagmurbaydogan in #7553
• refactor: cherry-picking release notes to master for 12062025 by @yagmurbaydogan in #7563
• chore: disabling marinerv2 and azurelinuxv2 builds (#7567) by @djsly in #7568
• fix: dynamically resolve root device within disk_queue.service (#7527) by @cameronmeissner in #7571
• fix: perform no install recommends and clean (#7572) by @awesomenix in #7574

VHD Component Updates

• chore(deps): update windowsbase (patch) (#7507) by @timmy-wright in #7508
• fix: dry run issues in pipeline (master) by @timmy-wright in #7522
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag … by @timmy-wright in #7521

Full Changelog: v0.20251206.0...v0.20251218.0

v0.20251206.0

What's Changed

Changes

• feat(ci) : add PR lint workflow by @cameronmeissner in #7401
• fix(e2e): cherry pick azcli login for azcopy and fix e2e by @awesomenix in #7494
• fix(e2e): use invalid UserAssignedIdentityID instead of invalid AADResource in scenario Flatcar_SecureTLSBootstrapping_BootstrapToken_Fallback by @cameronmeissner in #7495
• fix(build): use cli credentials for azcopy when downloading from private urls by @awesomenix in #7498

Dependabot Updates

• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #7435
• chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 in /e2e by @dependabot[bot] in #7415

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-7 by @renovate[bot] in #7399
• chore(deps): update nvidia-device-plugin (patch) (#7452) by @ganeshkumarashok in #7472
• chore(deps): update kube-components (patch) (#7395) by @ganeshkumarashok in #7474
• chore(deps): update kubelet-kubectl (patch) (#7432) by @ganeshkumarashok in #7475
• chore(deps): update acr-credential-provider (patch) (#7424) by @ganeshkumarashok in #7476

Full Changelog: v0.20251120.0...v0.20251206.0

v0.20251120.0

What's Changed

Changes

• test: add AzureLinuxOSGuardV3gen2fipsTL to Linux VHD check-in tests by @cameronmeissner in #7360
• ci: Temporarily disable CIS scanning by @jepio in #7357
• Regkey for bugcheck 0x76 by @smiezah-msft in #7361
• fix(e2e): prevent secure TLS bootstrapping bootstrap token fallback tests from creating server-side errors by @cameronmeissner in #7369
• test: Skip LocalDns validation when unsupported by @jepio in #7378
• add e2e for nvidia grid license check by @awesomenix in #7328
• feat: incorporate linux prefetch optimization into VHD builds by @cameronmeissner in #7368
• doc: update OutboundCommand description in readme by @Devinwong in #7370
• chore: fix dry-run handling in windows pipelines by @timmy-wright in #7388
• fix: set prefetch build scripts as executable by @cameronmeissner in #7394
• surfacing the error from provision-wait mode by @Devinwong in #7382
• test(e2e): add validation for secure + server TLS bootstrapping by @cameronmeissner in #7362
• feat(flatcar): disable autologin by @ervcz in #7290
• fix: pin publisher base images by @zachary-bailey in #7397
• Fix: Remove GB200 from list of Fabric Manager SKUs by @abenn135 in #7402
• Extract latest coredns binary for localdns by @SriHarsha001 in #7387
• regression: fix branch by @timmy-wright in #7414
• fix: Reorder faillock in common-auth to prevent failures by @jepio in #7377
• switch blobfuse2 version to 2.5.0 by @ganeshkumarashok in #7403

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-4 by @renovate[bot] in #7374

New Contributors

• @ervcz made their first contribution in #7290

Full Changelog: v0.20251112.0...v0.20251120.0

v0.20251107.3

What's Changed

Changes

• feat: prepare mcr.azk8s.cn migration to mcr.azure.cn - retag by @fseldow in #7258
• fix: default AKSAADServerAppID in kuberneteswindowssetup.ps1 by @cameronmeissner in #7278
• fix: temporarily protect designated gb200 VHDs from VHD builder garbage collection by @cameronmeissner in #7291
• error handling by @timmy-wright in #7257
• Add error handling to CSE inline zip extraction by @timmy-wright in #7283
• chore(deps): update OS Guard base image to 3.0.20251021 by @hbeberman in #7293
• chore: adding function to allow azcli override in the future by @djsly in #7294
• [bug] Make sure test step fails if VHD not found by @abenn135 in #7280
• Allow RPM update minor version by setting ignoreUnstable to false. Update readme by @Devinwong in #7306
• fix: Pin previous Flatcar marketplace image by @jepio in #7305
• [E2E] log host iptables on wire server validation failure by @r2k1 in #7281
• test: add tests to ensure that any iptables rules present are compatible with eBPF host routing by @santhoshmprabhu in #7197
• pin azcli version to 2.77.0 by @jepio in #7315
• e2e: NPD validation for GPU managed experience tests by @surajssd in #7308
• fix: address comment from #7197 by @santhoshmprabhu in #7318
• fix: Run dpkg-configure before pinning azcli by @jepio in #7316
• Install and Enable AppArmor in Azure Linux 3 by @aadhar-agarwal in #7261
• feat: add Delos cloud names by @hunter32292 in #7320
• feat: add fallback to kube binary install if cached deb/rpm not found by @lilypan26 in #7312
• chore(packer): add Flatcar NOTICE handling to image build by @John15321 in #7317
• chore(deps): bump github.com/containerd/containerd from 1.7.27 to 1.7.29 in /vhdbuilder/lister by @dependabot[bot] in #7324
• feat: pin ubuntu 2204 kernel to 1096 by @lilypan26 in #7383
• chore: bump sig image version to 202511.07.1 by @lilypan26 in #7384
• chore: revert 1107 kernel pin by @lilypan26 in #7429
• cherry-pick: fix: only update pmc repo when installing deb pkgs (#7332) by @cameronmeissner in #7430
• cherry-pick: fix: remove nvidia pkg list during cleanup (#7333) by @cameronmeissner in #7431

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/kube-proxy docker tag to v1.34.1-3 by @renovate[bot] in #7150
• Security: migrating to oss/v2 for the pause image, aligning version to 3.6 for linux and 3.10.1 for windows by @djsly in #7083
• Update Addon images for CVE fixes by @SriHarsha001 in #7292
• components: Update DCGM exporter version for AzL3 to 4.6.0 by @surajssd in #7284
• Cache servercore explicitly by @timmy-wright in #7304
• chore: restore 1.34.0 cached pmc pkg versions by @lilypan26 in #7307
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.31 by @renovate[bot] in #7251
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-6 by @renovate[bot] in #7222
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7311
• chore(deps): update runc-containerd-minor (minor) by @renovate[bot] in #7196

New Contributors

• @John15321 made their first contribution in #7317

Full Changelog: v0.20251029.0...v0.20251107.3

v0.20251112.0

What's Changed

Changes

• fix: only update pmc repo when installing deb pkgs by @lilypan26 in #7332
• set unmarshalling JSON with DiscardUnknown option by @Devinwong in #7339
• Fix windows network configuration for VHD caching feature by @r2k1 in #7313
• fix: Add more copyright license entries in NOTICE for Flatcar by @jepio in #7345
• chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 in /vhdbuilder/lister by @dependabot[bot] in #7347
• revert: fix: Pin previous Flatcar marketplace image (#7305) by @chewi in #7346
• fix: remove nvidia pkg list during cleanup by @ganeshkumarashok in #7333
• Add 11b non-sec reg keys by @smiezah-msft in #7348
• chore: cleanup CODEOWNERS by @cameronmeissner in #7354
• test(e2e): assign kubelet and abe2e identities to E2E VMs, use kubelet identity to authenticate with private ACR by @cameronmeissner in #7352
• test: Add forward and backward compatibility tests to aks-node-controller config file by @r2k1 in #7349
• test: fix unit tests by @r2k1 in #7356
• use proper OS var for AzureLinux3 when installing ArtifactStreaming package by @djsly in #7358
• cleanup: removing all 1604/1804 logic by @djsly in #6526
• fix: skip installAndConfigureArtifactStreaming on OSGuard by @cameronmeissner in #7359

Dependabot Updates

• chore(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #7341

VHD Component Updates

• fix: installation of Azure ACR Credential Provider on Flatcar by @chewi in #7319
• chore: replace cni and cns versions with v1.7.9-0 by @QxBytes in #7327
• chore: bump addon version by @anlandu in #7340
• chore(deps): update runc-containerd-ca_watcher (patch) by @renovate[bot] in #7326
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7351
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #7323

Full Changelog: v0.20251107.3...v0.20251112.0

v0.20251029.0

What's Changed

Changes

• remove Renovate schedule as it's not needed now by @Devinwong in #7124
• Skip GRID compatibility check for prod environment by @ganeshkumarashok in #7137
• chore(deps): Update OSGuard base image version by @hbeberman in #7138
• Ignore mise-en-place config files by @awesomenix in #7139
• fix: Escape dots in version for JSON path queries by @surajssd in #7131
• don't delete secure bootstrapping files if they don't exist by @timmy-wright in #7144
• Fix kubelet flags for VHD Caching by @r2k1 in #7132
• Add non-sec reg keys for 10B release by @smiezah-msft in #7154
• Bug: add fallback when attempting to find network adaptor by @timmy-wright in #7133
• update error logging for tests, highlight test failure by @r2k1 in #7162
• bug: pull pod infra container image if not cached for network isolated cluster by @fseldow in #7155
• cleanup: more aggressively garbage collect packer resources in Node SIG subscription by @cameronmeissner in #7172
• cleanup: always run scheduled garbage collection in Node SIG subscription by @cameronmeissner in #7178
• refactor(stls): augment secure TLS bootstrapping configuration options in NodeBootstrappingConfiguration/AKSNodeConfig by @cameronmeissner in #7112
• AKS CIS compliance for Ubuntu 22.04 and 24.04 by @jepio in #7061
• fix: Skip DCGM installation on OSGuard by @jepio in #7185
• fix: strip unnecessary files from Flatcar's Ignition data to save space by @chewi in #7184
• regression: bring back storage account creation by @timmy-wright in #7179
• feat: update acr-mirror to 0.2.14 and fix latency issue caused by ensureArtifactStreaming() during basePrep() by @juliusl in #7188
• Update localdns to always execute networkreload in cleanup by @SriHarsha001 in #7176
• chore: use CI approach to run shell checks locally by @timmy-wright in #7180
• Add Nvidia service log collection by @surajssd in #7187
• fix: Remove pipeline warning on failing CIS rule 1.3.1.2 on CVM by @jepio in #7191
• (chore) Remove docker installation ++ by @awesomenix in #7173
• Add logic to get NIC from vnetdns if route to AzureDNS is blocked by @SriHarsha001 in #7192
• fix: SSH not disabled issue on AzureLinux and add E2E to guard by @norshtein in #7190
• fix(cse): enhance ACR anonymous pull check and fast fail on insufficient RBAC access by @qweeah in #7106
• Add E2E for VHD Caching by @r2k1 in #7160
• feat: consume NI kubernetes packages on MAR by @qweeah in #7134
• feat: upgrade blobfuse version to v2.5.1 on Ubuntu 22.04 & 24.04 by @andyzhangx in #7215
• Fix DNS resolution on Flatcar by @johananl in #7216
• nvidia-device-plugin: Fix binary path when using MIG by @surajssd in #7201
• Managed GPU experience AFEC enablement flag by @ganeshkumarashok in #7210
• Revert "Enable jumbo frame for v6 VM SKU with mana driver (#6953)" by @anson627 in #7226
• Add pass device specs flag for managed nvidia device plugin: by @ganeshkumarashok in #7231
• add myself to codeowners by @awesomenix in #7241
• change write-outputs by @timmy-wright in #7232
• fix: retry when getting network adapter by @timmy-wright in #7248
• feat: network isolated cluster use acr to pull azure-credential-provider package and supports azure linux by @fseldow in #7189
• remove anuj, to stop warnings by @awesomenix in #7256
• Flatcar custom cloud support by @jepio in #6903
• fix: Sync testdata by @jepio in #7260
• test: Skip windows e2e for Linux testdata update by @jepio in #7233
• fix: egress extension skip switch to use /opt/azure/outbound-check-skipped by @fseldow in #7224
• feat: fix cuda install & remove deprecated key by @stanleyt10 in #7237
• Fix VHD Caching e2e for gen1 VHDs by @r2k1 in #7223

Dependabot Updates

• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #7143

VHD Component Updates

• chore: bump cilium private to v1.17.7-250927 by @QxBytes in #7118
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.0.0 by @cameronmeissner in #7117
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #7109
• chore(deps): update dependency azure-acr-credential-provider by @renovate[bot] in #7110
• chore(deps): update runc-containerd-minor (minor) by @renovate[bot] in #6992
• chore: GK 3.20.1-2 and Policy 1.14.2 by @nreisch in #7141
• fix: config latest patch for kube-proxy by @jack4it in #7145
• Add NVIDIA DCGM packages and repository support by @surajssd in #7063
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7017
• Revert "chore(deps): update runc-containerd-minor (minor) (#6992)" by @lilypan26 in #7194
• chore: cache secrets-store-csi-driver v1.5.4 by @jiashun0011 in #7195
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.30 by @renovate[bot] in #7114
• Windows components & renovate updates by @timmy-wright in #7212
• Update coredns image versions that are cached in VHD by @SriHarsha001 in #7227
• chore: bump apiserver-network-proxy-agent revision by @ipochi in #7234
• chore: bump apiserver-network-proxy-agent revision by @ipochi in #7235
• chore(deps): update nvidia-device-plugin (minor) by @renovate[bot] in #7239
• chore(deps): update aks/aks-gpu-cuda docker tag to v580 by @renovate[bot] in #7230
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7247
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7249
• chore(deps): update oss/v2/kubernetes/autoscaler/cluster-proportional-autoscaler docker tag to v1.9.0-4 by @renovate[bot] in #7219
• chore(deps): update dependency datacenter-gpu-manager-exporter to v4.6.0-1 by @renovate[bot] in #7262
• chore(deps): update aks/aks-gpu-grid docker tag to v550.144.06-20251021155159 by @renovate[bot] in #7175
• Update CPA and AddonResizer images in VHD by @SriHarsha001 in #7268
• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-6 by @renovate[bot] in #7238
• chore(deps): update aks-secure-tls-bootstrap-client to v1.0.1 by @cameronmeissner in #7269
• chore: secrets-store-provider-azure v1.7.2 by @jiashun0011 in #7263
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #7229

New Contributors

• @awesomenix made their first contribution in #7139
• @jack4it made their first contribution in #7145
• @smiezah-msft made their first contribution in #7154
• @stanleyt10 made their first contribution in #7237

Full Changelog: v0.20251003.0...v0.20251029.0