test version v0.0.1 for aks-node-controller hotfix

Non-production. Test version v0.0.1 for aks-node-controller hotfix.

v0.20260413.0

What's Changed

Changes

• feat(windows): log collector updates by @timmy-wright in #8218
• feat(windows): add known aks processes and files to defender exclusions to improve windows node performance by @timmy-wright in #8245
• feat(windows): add Windows 2025 support for Windows Cilium Networking (WCN) by @rzlink in #7778
• feat(windows): download containerd with oras in network isolated windows cluster by @jiashun0011 in #8151

Fixes

• fix(cse): resolve error code collisions and add missing definition by @surajssd in #8241
• fix(cse): prevent CSE timeout overrun with per-op budget and pre-command guard by @djsly in #8230
• fix(cse): use dpkg for local deb installs by @awesomenix in #8285
• fix(tl): quote --features arg for arm64 TL image definitions by @aadhar-agarwal in #8222
• fix(gpu): add systemd ordering to prevent MIG device detection race by @surajssd in #8247

CI/CD/E2E

• ci: add --min-tls-version TLS1_2 to storage account creation in VHD build scripts by @Copilot in #8210
• ci: add Artifact Streaming E2Es for ARM64 by @mxj220 in #8232
• test: add test for MIG mixed mode by @runzhen in #8249
• feat(e2e): dynamically fetch VM extension version with caching, timeouts, and fallback by @surajssd in #8064
• feat(e2e): fix time dependency and add artifact streaming e2e for azure linux v3 by @ganeshkumarashok in #8204
• fix(ci): change minimum tls version to 1.2 by @awesomenix in #8208
• fix(e2e): improve node-exporter validator diagnostics by @chmill-zz in #8193
• fix(e2e): improveV2 node-exporter validator diagnostics by @chmill-zz in #8234
• fix(e2e): retry VMSS creation on GalleryImageNotFound error by @surajssd in #8239
• fix(e2e): retry WireServer blocked validation to eliminate flakes by @djsly in #8272
• fix(e2e): resolve debug pod before wireserver check retry loop by @djsly in #8274
• fix(e2e): strip --pod-infra-container-image for Kubernetes >= 1.35 by @djsly in #8273
• fix(e2e): set PrincipalType on role assignment to avoid AAD replication race by @ganeshkumarashok in #8251
• fix(e2e): run NC24ads_A100_v4 tests in a westus2 by @runzhen in #8250
• fix(e2e): add DAG dependencies to prevent route table race condition by @djsly in #8268
• refactor(e2e): add DAG-based concurrent task execution for cluster setup by @r2k1 in #8149

Dependabot Updates

• chore(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in #8271

VHD Component Updates

• chore(deps): bump ACR credential provider for service account image pull by @qweeah in #8206
• chore(deps): update nvidia-device-plugin (minor) by @renovate[bot] in #8129
• chore(deps): update dependency dcgm-exporter - autoclosed by @renovate[bot] in #8238
• chore(deps): update containernetworking/cilium/cilium docker tag to v1.17.10-260312 by @renovate[bot] in #8113
• chore(deps): upgrade blobfuse version to v2.5.3 on Ubuntu by @andyzhangx in #8219

New Contributors

• @runzhen made their first contribution in #8249

Full Changelog: v0.20260330.0...v0.20260413.0

v0.20260330.0

What's Changed

Changes

• feat: network isolated cluster skip cse download by @fseldow in #8077
• fix: skip certificate error E2E failure caused by vmss bug by @mxj220 in #8122
• feat: unblock artifact streaming for arm64 nodes and remove support on mariner by @KananMehta in #8103
• fix: disable nvidia-fabricmanager on single-GPU VMs with MIG by @ganeshkumarashok in #8049
• fix: disable automatic e2e pipeline triggers by @awesomenix in #8135
• fix: restrict e2e pipeline triggers to e2e and go changes by @awesomenix in #8137
• fix: add daily schedules for e2e pipelines on main by @awesomenix in #8140
• fix: stagger nightly e2e schedules to reduce API throttling by @ganeshkumarashok in #8141
• feat: download kubelet with oras in network isolated windows cluster by @jiashun0011 in #8042
• fix(windows): move add kubelet failure restart code by @timmy-wright in #8142
• feat: add hotfix auto-tagging and template generation workflows by @Devinwong in #8131
• feat: support new ACL os-release (ID=azurelinux, VARIANT_ID=azurecontainerlinux) by @aadhar-agarwal in #8123
• fix: revert "feat: add scripts hotfix pipeline for test (#8046)" by @Devinwong in #8150
• feat: onboard NVIDIA GPU support for ACL by @henryli001 in #8112
• feat: run aks node controller at boot time faster by 15s by @awesomenix in #8082
• feat: log scriptless cmd mode for easier logging and debugging by @awesomenix in #8155
• chore: deprecate acr teleport by @calvin197 in #8052
• chore(deps): bump google.golang.org/grpc from 1.72.2 to 1.79.3 in /image-fetcher by @dependabot[bot] in #8126
• chore(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /vhdbuilder/lister by @dependabot[bot] in #8125
• test: add hotfix e2e test for scriptless CSE command scripts hotfix delivery mechanism by @Devinwong in #8148
• fix: remove teleport references from ACL ARM64 packer template and add ACL builds to PR check-in gates by @cameronmeissner in #8159
• fix: adjust node exporter tls to match what was default behavior in extension by @chmill-zz in #8156
• feat: improve cse bootstrap latency by deferring non-critical work by @awesomenix in #8105
• fix: temporary disable checking for cse-overrides until ACL is fixed by @awesomenix in #8164
• fix: acl and flatcar skip oras repo tag when it is network isolated cluster by @fseldow in #8157
• fix: correctly determine compatibility with prefetch optimization in linux VHD builds by @cameronmeissner in #8162
• fix: stabilize flaky cse_timeout shellspec test by @ganeshkumarashok in #8166
• chore: add @SriHarsha001 to CODEOWNERS by @ganeshkumarashok in #8167
• fix: use reinstall command to download packages by @YaoC in #8176
• fix: set SecurityType=TrustedLaunch in ACL ARM64 image def by @aadhar-agarwal in #8187
• test: convert ACL GPU E2Es to scriptless e2es by @ganeshkumarashok in #8179
• feat: download azure acr credential provider via oras in network isolated windows cluster by @fseldow in #8152
• fix: gracefully restart containerd instead of killing it by @awesomenix in #8184
• fix: set RemainAfterExit=yes for resolv-uplink-override.service by @aadhar-agarwal in #8177
• chore: remove deprecated Azure Linux and Mariner VHD definitions by @Devinwong in #8180
• fix(e2e): explicitly validate --rotate-certificates is true true within TLS bootstrapping validation by @cameronmeissner in #8199
• chore: minor comment change by @calvin197 in #8202

Dependabot Updates

• chore(deps): bump actions/create-github-app-token from 2 to 3 by @dependabot[bot] in #8094

VHD Component Updates

• chore: add cloud-node-manager v1.35.0 entry by @anndono in #8048
• chore: add cloud-node-manager 1.30.15 and 1.31.12 entries by @anndono in #8097
• chore(deps): update containernetworking/azure-npm docker tag to v1.6.42 by @renovate[bot] in #7492
• chore(deps): update containernetworking/azure-cns docker tag to v1.7.15 by @renovate[bot] in #7386
• chore: update containernetworking/azure-cni docker tag to v1.7.15 by @csfmomo in #8134
• refactor: move acr-mirror version to components.json by @ganeshkumarashok in #8160
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #8143

Full Changelog: v0.20260318.0...v0.20260330.0

v0.20260318.0

What's Changed

Changes

• test(e2e): add ENABLE_SECURE_TLS_BOOTSTRAPPING to E2E test config by @cameronmeissner in #8087
• feat: oras pull pause image if not cached for windows network isolated cluster by @fseldow in #8038
• feat: windows network isolated cluster support anonymous-disabled bootstrap acr by @fseldow in #8039
• chore: add walinuxagent to team's package list by @mxj220 in #8107
• chore: add gpu tag to ma35d scenarios by @lilypan26 in #8110
• chore(windows): update e2e tests to check dotnet deprecation by @janenotjung-hue in #8095
• fix: azurelinux configure GRID vGPU licensing by @miz060 in #8106
• fix: better error message in windows CSE when API server can't be contacted by @timmy-wright in #7828
• fix: use 1048576 for LIMITNOFILE in both ubuntu and mariner by @SriHarsha001 in #8101
• feat: add Azure Container Linux ARM64 VHD build target by @aadhar-agarwal in #8102

Dependabot Updates

• chore(deps): bump azure/login from 2 to 3 by @dependabot[bot] in #8116

VHD Component Updates

• chore(deps): update cilium-ipam to v1.18.6-260130 by @pdamianov-dev in #8068
• chore(deps): update cilium-ipam to v1.18.6-260312 (patch) by @renovate[bot] in #8093
• chore: use renovate for waagent version, write to release notes, add log-checking e2e by @mxj220 in #8062
• chore(deps): bump azure-cloud-node-manager versions by @anndono in #8083
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #8043
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #8098
• chore(deps): update oss/v2/kubernetes/kubelet-sysext docker tag to v1.34.4 by @renovate[bot] in #8002

New Contributors

• @anndono made their first contribution in #8083

Full Changelog: v0.20260312.0...v0.20260318.0

v0.20260312.0

What's Changed

Changes

• feat: add ACL VHD build, provisioning, and e2e support by @aadhar-agarwal in #7991
• fix: add pre-create NIC readiness gate before New-HNSNetwork to avoid windows race condition by @timmy-wright in #8008
• chore: ungroup azure-cni and cilium from renovate PR by @Devinwong in #8031
• fix: don't use regex for deb/rpm file matching by @lilypan26 in #8019
• feat: add cloud provider configs into aks-node-config by @Devinwong in #8018
• chore: remove mainred credential provider reviewer by @mainred in #7957
• feat: windows cse ensure oras and reserve some exit code for network isolated cluster by @fseldow in #7995
• fix: broken go test in master by @timmy-wright in #8041
• fix: exclude ACL from node-exporter, post-deprovision WALinuxAgent install and allow systemd-sysupdate.service by @aadhar-agarwal in #8036
• feat: add scripts hotfix pipeline for test by @Devinwong in #8046
• fix: use azcli login for azcopy in windows by @awesomenix in #8047
• chore: update ACL os-release ID from 'acl' to 'azurecontainerlinux' by @aadhar-agarwal in #8035
• fix: revert use azcli login for azcopy in windows by @awesomenix in #8050
• feat: use content fetch instead of image pull by @awesomenix in #7573
• chore: add nilo19 as owner of azure-acr-credential-provider container image by @Devinwong in #8051
• chore(e2e): bump AKS Linux node VM extension to v1.406 by @surajssd in #8058
• fix: revert UAMI assignment to only require AZURE_MSI_RESOURCE_STRING by @awesomenix in #8059
• feat: azurelinux add nvidia vgpu driver installation selection by @miz060 in #7986
• fix: increasing build timeout for linux vhds by @janenotjung-hue in #8066
• feat: add property TestMode for some force e2e test by @fseldow in #8076
• feat: add ab e2e tme pipeline by @lilypan26 in #8078
• fix: trim surrounding quotes from OS name by @pdamianov-dev in #8079
• fix: detect apt source format when setting up ubuntu PMC repo by @KananMehta in #8081

VHD Component Updates

• feat: install waagent via wireserver by @mxj220 in #7987
• chore: cilium private cache bump to v1.17.9-260304 by @mereta in #8025
• feat: ig ubuntu verison update by @chmill-zz in #7911
• feat: node-exporter into vhd build by @chmill-zz in #7704
• chore: adding CNI and CNS versions v1.8.1 by @behzad-mir in #7936
• test: remove WS2019 tests by @timmy-wright in #8040
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #8024
• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-6 by @renovate[bot] in #7880
• chore(deps): update windowsbase (patch) by @renovate[bot] in #8054
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7978
• chore(deps): update oss/v2/kubernetes/kube-proxy docker tag to v1.31.100-4 by @renovate[bot] in #8014
• chore(deps): update inspektor-gadget (patch) by @renovate[bot] in #8044
• chore(deps): add publisherID and offerID to WS2022 config for new image by @janenotjung-hue in #7998
• chore(deps): update dependency containerd2 to v2.0.0-18.azl3 by @renovate[bot] in #8075

New Contributors

• @mereta made their first contribution in #8025
• @pdamianov-dev made their first contribution in #8079

Full Changelog: v0.20260304.0...v0.20260312.0

v0.20260304.0

What's Changed

Changes

• chore: instruct copilot to check forward/backward compatibility by @Devinwong in #7869
• chore: change the renovate matchPackageNames with double Asterisks by @Devinwong in #7872
• test: exclude nvme shutdown timeout message from validation failure by @jepio in #7875
• feat: scriptless mode in NBC so we can move in phases by @awesomenix in #7805
• fix: cni-plugins backward compatibility - continue by @fseldow in #7881
• fix: adding the logic to download the cni-plugins (non-dalec) back... by @djsly in #7884
• fix: cache repo metadata immediately after setting up repodepot for azurelinux to help accepting a new key by @KananMehta in #7888
• test: refactor network isolated cluster e2e by @fseldow in #7885
• chore(deps): bump go in all go mods to address CVEs by @cameronmeissner in #7903
• feat: re-enable build time CIS scanning by @jepio in #7876
• fix(vhdbuilder): increase Flatcar OS disk size by @ervcz in #7505
• chore: add calvin197 as code owner by @calvin197 in #7915
• ci: increase vhd-scanning disk size from 50GB to 60GB for Flatcar by @chewi in #7918
• chore: rename FIPS+TL 22.04 VHD by @mxj220 in #7912
• feat: support custom patching in security patch by @YaoC in #7774
• fix: remove unnecessary sudo from cse provisioning scripts and services by @awesomenix in #7926
• fix: use resource disk as placement type by @awesomenix in #7931
• feat: adding support for amdama (supernova) gpus. by @mipresmsft in #7927
• fix(flatcar): ensure CREDENTIAL_PROVIDER_BIN_DIR before symlinking when installing azure-acr-credential-provider by @cameronmeissner in #7933
• chore(windows): prevent windows 2019 vhds from building on pr and release by @janenotjung-hue in #7932
• fix: use cachedisk for ma35d vm sku by @awesomenix in #7942
• feat: upgrade aznfs package to 3.0.14 by @andyzhangx in #7921
• fix: address outstanding goconst linter errors on main by @cameronmeissner in #7950
• fix: adjust retries and timeout given to apt-mark hold walinuxagent command during provisioning by @cameronmeissner in #7951
• test: enable Windows 23H2 WCN e2e test by @rzlink in #7940
• fix: remove lshw calls from aks-log-collector.sh by @cameronmeissner in #7949
• feat: enable cloud-init write_files module for OSGuard images by @awesomenix in #7937
• chore: support v7 skus in AB e2es by @lilypan26 in #7887
• fix: run aptmarkwalinuxagent hold operation on background and update timeout by @cameronmeissner in #7966
• fix: pin Ubuntu 22.04 LTS kernel to 5.15.0-1102-azure by @awesomenix in #7972
• chore: freeze gb200 sig image version in main until ready by @awesomenix in #7981
• feat: persist ENABLE_MANAGED_GPU_EXPERIENCE state as a marker file on disk by @surajssd in #7952
• test: validate exact pinned kernel version for Ubuntu 22.04 by @awesomenix in #7983
• fix: add timeout for live patching service by @YaoC in #7956
• chore: update trivy v0.69.2 by @chmill-zz in #7994
• chore: add sulixu and surajssd as global code owners by @ganeshkumarashok in #7992
• feat: windows node set mcr containerd host config for network isolated cluster by @fseldow in #7902
• test: add e2e test for NVIDIA device plugin as DaemonSet by @ganeshkumarashok in #7964
• chore: pin cue at v0.15.4 until we can bump to go1.25 by @cameronmeissner in #8004
• fix: deduplicate RPM selection in installRPMPackageFromFile for Azure Linux by @awesomenix in #8003
• chore: remove unbreaking hidden space by @timmy-wright in #7996
• fix: copilot instructions for windows by @timmy-wright in #8013

VHD Component Updates

• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-4 by @renovate[bot] in #7832
• feat: install Kubernetes to Flatcar from sysexts on MAR by @chewi in #7680
• chore(deps): update azure-policy/policy-kubernetes-addon-prod docker tag to v1.15.5 by @renovate[bot] in #7815
• chore(deps): update coredns, addon-resizer, cpa versions cached in VHD by @ashokobulapuram7 in #7910
• chore(deps): bump azure-cloud-node-manager to latest patches and for CVE fixes by @Liunardy in #7900
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.0.2 by @cameronmeissner in #7930
• chore(deps): update aks/aks-gpu-grid docker tag to v550.144.06-20260126030228 by @renovate[bot] in #7730
• chore(deps): update dependency containerd2 to v2.0.0-17.azl3 by @renovate[bot] in #7803
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7851
• chore(deps): update oss/v2/kubernetes/kube-proxy docker tag to v1.34.4-1 by @renovate[bot] in #7909
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.16-1 by @renovate[bot] in #7857
• chore: upgrade CSI sidecar image versions by @andyzhangx in #7941
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7905
• feat: add cilium log collector to agent baker by @QxBytes in #7889
• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-9 by @renovate[bot] in #7822
• feat: update cloud-provider-windows to versions used in aks-rp by @timmy-wright in #7970
• chore: cache oras binary in Windows image by @jiashun0011 in #7860
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #7901
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.35 by @renovate[bot] in #7916
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #7993
• fix: change previous latest version for kubectl to .2 by @awesomenix in #8012
• chore: upgrade CSI driver image versions by @andyzhangx in #8000
• chore: cache kube-proxy for Dalec image with version 1.31/1.32/1.33 by @levimm in #7960

New Contributors

• @mipresmsft made their first contribution in #7927
• @janenotjung-hue made their first contribution in #7932

Full Changelog: v0.20260213.5...v0.20260304.0

v0.20260213.5

What's Changed

Changes

• feat: add e2e tests for Ubuntu 2204 FIPS VHD by @Copilot in #7739
• feat: create new copilot setup steps for easier agents handling by @awesomenix in #7752
• feat: add Trusted Launch FIPS 22.04 VHD by @mxj220 in #7753
• feat: azurelinux add nvidia open driver installation selection by @miz060 in #7731
• chore: remove check-in tests buildAzureLinuxV2gen2 and buildMarinerV2gen2 by @Devinwong in #7761
• chore: remove azurelinuxv2 and marinerv2 from releases by @Devinwong in #7763
• feat: add udev rule to set default RX Buffer as 2048 on systems with 4 or more cores by @mugeshsp in #7665
• fix(localdns): wait for resolv.conf update after networkctl reload to prevent race condition by @saewoni in #7749
• fix: create new field kubelet_cmd_flags which can replace kubelet_flags by @awesomenix in #7771
• test: fix e2e and validation bugs by @jepio in #7776
• feat: shrink flatcar customdata size by @jepio in #7755
• feat: provide configurable cse timeout in seconds by @awesomenix in #7766
• fix: revert create new field kubelet_cmd_flags which can replace kubelet_flags by @awesomenix in #7782
• fix: enabling waagent root password removal logic again for Ubuntu by @djsly in #7780
• fix(e2e): log instead of error when NICs not found in rx buffer test by @mugeshsp in #7784
• fix: adding crontab for AzureLinux in custom clouds to ensure custom CAs are getting refreshed daily by @djsly in #7785
• chore(deps): upgrade blobfuse2 to 2.5.2 to bring in fix for mooncake and CVE fixes by @djsly in #7788
• fix(e2e): ensure slot retrieval does not fail in ValidateNetworkInterfaceConfig by @mugeshsp in #7792
• fix: replace copilot-instructions.md symlink with actual file content by @awesomenix in #7801
• docs: enhance PR review guidelines with detailed risk categories and package update analysis by @awesomenix in #7810
• ci: update renovate to match distroless images by @jpayne3506 in #7823
• feat: capture aks-node-controller errors into Guest Agent Events by @Devinwong in #7773
• fix: change CNI tgz name with arch by @Devinwong in #7831
• fix: skip gpu e2e tests on sku quota exceeded and add configurable test timeout by @awesomenix in #7836
• feat: add TL FIPS SIG image config and e2e by @mxj220 in #7814
• fix: run aptmarkwalinuxagent hold operation on foreground by @SriHarsha001 in #7797
• test: improve test logging by @r2k1 in #7841
• chore: add kernel log validation to abe2es by @lilypan26 in #7835
• test: timeout/retry ssh connections and remove intermediate pipe by @jepio in #7850
• chore(deps): bump acr-mirror to version 0.3.0 by @djsly in #7862
• fix: add default CSE_TIMEOUT directly within cse_start.sh by @cameronmeissner in #7864
• chore: reverting release notes and image bump by @Devinwong in #7867
• chore: change owner of cluster-proportional-autoscaler, addon-resizer and coredns by @Devinwong in #7865
• test: echo file contents in e2e test if a file contents check fails. by @timmy-wright in #7656
• cherry-pick: fix: adjust retries and timeout given to apt-mark hold walinuxagent command during provisioning by @cameronmeissner in #7953
• fix: pin Ubuntu 22.04 LTS kernel to 5.15.0-1102-azure [official/v20260213] by @awesomenix in #7973
• chore: bump linux_sig_version to 202602.13.4 by @awesomenix in #7977
• fix(official/v20260213): use correct publisher base image versions by @cameronmeissner in #7980
• chore: bump linux_sig_version to 202602.13.5 by @cameronmeissner in #7982

Dependabot Updates

• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #7754
• chore(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 by @dependabot[bot] in #7767

VHD Component Updates

• chore(deps): update ama-metrics (patch) by @renovate[bot] in #7735
• chore: upgrade Azure CSI driver versions by @andyzhangx in #7751
• chore(deps): Replace cni and cns versions with v1.5.50 by @rejain789 in #7759
• chore(deps): update kube-components (patch) by @renovate[bot] in #7524
• chore(deps): replace cni and cns versions with v1.6.35 by @rejain789 in #7757
• chore(deps): update aks/aks-gpu-cuda docker tag to v580.105.08-20260108183250 by @renovate[bot] in #7626
• chore(deps): update aks/aks-gpu-cuda docker tag to v580.126.09-20260126030251 by @renovate[bot] in #7791
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.34 by @renovate[bot] in #7691
• chore(deps): using newly rebuilt containerd 1.7.30 deb with latest golang for CVE fixes by @djsly in #7802
• refactor: simplify components.json code by @chewi in #7742
• chore(deps): bump cri-tools to latest version for CVE fixes by @djsly in #7800
• feat: adding first caching for k8s 1.35 by @djsly in #7799
• ci: replace Cilium v1.16 with v1.18 Cilium-distroless + Cilium-distroless-init by @jpayne3506 in #7325
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.32.1-2 by @renovate[bot] in #7790
• chore: install container-networkingplugins from dalec packages replacing old share by @Devinwong in #7781
• fix: fail on any error in step by @awesomenix in #7793
• fix: update kube-proxy to 1.33.6 by @Devinwong in #7834
• chore(deps): update oss/kubernetes/kube-proxy docker tag to v1.33.7 by @renovate[bot] in #7838
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7842
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7673
• feat: inspektor gadget into vhd build by @chmill-zz in #7371
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-8 by @renovate[bot] in #7807
• test: add dcgm exporter compatibility e2e by @surajssd in #7787
• fix: onboard azl3 kubectl and kublet to renovate by @Devinwong in #7859
• chore(deps): update kube-components (patch) by @renovate[bot] in #7845
• chore(deps): bump azure-cloud-node-manager for CVE fixes by @Liunardy in #7854
• chore(deps): update kubelet-kubectl to v1.34.3-1.azl3 (patch) by @renovate[bot] in #7861
• chore(deps): update azure-policy/policy-kubernetes-webhook docker tag to v1.15.5 by @renovate[bot] in #7816
• fix: add cni-plugins back for backward compatibility by @Devinwong in #7866

New Contributors

• @mugeshsp made their first contribution in #7665
• @rejain789 made their first contribution in #7759
• @saewoni made their first contribution in #7749

Full Changelog: v0.20260127.0...v0.20260213.5

v0.20260127.0

What's Changed

Changes

• feat: support kubelet patch in AzureLinux live patching by @YaoC in #7302
• feat: ensure successful blob upload without prefetch optimization enabled by @zachary-bailey in #7613
• chore: update files owned by security patch owner by @YaoC in #7652
• chore: fix CODEOWNERS settings for pkg/agent/testdata/ by @cameronmeissner in #7654
• feat: dnf tries to install cached rpms and dependencies first by @Devinwong in #7635
• test(e2e): validate no unexpected systemd unit failures on linux by @cameronmeissner in #7644
• fix: write provision.json on any node controller failures, add E2E by @awesomenix in #7650
• fix: apply correct disk tuning settings on NVMe devices by @cameronmeissner in #7653
• fix: add check for assigning packer vm uami by @zachary-bailey in #7660
• fix: fixing repodepot support for azlinux3 and ubuntu2404 as well as PMC on Ubuntu by @djsly in #7565
• fix: add missing DESTINATION_STORAGE_CONTAINER env var in Windows VHD… by @benjamin-brady in #7679
• feat: use the official Pause image TAG instead of specifying the LTCS Windows version tag by @djsly in #7675
• fix: return copy of base kubelet config everytime by @awesomenix in #7686
• feat: adding logic to configure repo_depot by @djsly in #7694
• feat: redirect mcr.azk8s.cn to mcr.azure.cn in Windows containerd by @jiashun0011 in #7705
• fix: remove root password expiration early in CSE execution [main] by @jepio in #7709
• chore(deps): update OS Guard base image version to 3.0.20260107 by @hbeberman in #7706
• fix: revert password expiry changes for root account by @benjamin-brady in #7707
• feat: redirect mcr.azk8s.cn to mcr.azure.cn in Windows containerd by @jiashun0011 in #7646
• fix: issues caused by the /usr/local/bin to /opt/bin move by @chewi in #7703
• fix: add retries to wireserver, cache first time response to avoid spam by @awesomenix in #7676
• fix: fixing some scriptless bugs by @Devinwong in #7698
• feat: add Ubuntu 22.04 FIPS VHDs by @mxj220 in #7721
• feat: add MigStrategy and EnableManagedGPU NBC variables for managed GPU experience by @calvin197 in #7695
• feat: configure copilot pr review for breaking change detection by @r2k1 in #7740
• fix: dont expire root password in osguard by @awesomenix in #7743

VHD Component Updates

• chore(deps): update windowsbase (patch) by @renovate[bot] in #7648
• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-3 by @renovate[bot] in #7649
• chore(deps): update coredns, addon-resizer, cpa versions cached in VHD by @ashokobulapuram7 in #7651
• feat: add ServiceAccountImagePullProfile for identity-binding-based image pull by @qweeah in #7596
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #7598
• chore(deps): update dependency dcgm-exporter by @renovate[bot] in #7657
• feat: install most components to /opt/bin instead of /usr/local/bin by @chewi in #7125
• chore(deps): update dependency datacenter-gpu-manager-4-core to v1:4.5.0-1 by @renovate[bot] in #7630
• chore(deps): update dependency datacenter-gpu-manager-4-proprietary to v1:4.5.0-1 by @renovate[bot] in #7631
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.32.1-1 by @renovate[bot] in #7666
• fix: update datecenter-gpu-manager-4 version for dcgm exporter compatibility by @lilypan26 in #7736

New Contributors

• @ashokobulapuram7 made their first contribution in #7651

Full Changelog: v0.20260113.0...v0.20260127.0

v0.20260113.0

What's Changed

Changes

• fix: managed gpu experience tests by @jepio in #7437
• chore: update internal branch references to main by @cameronmeissner in #7441
• chore(e2e): add firewall to e2es by @lilypan26 in #7350
• chore: update PR title lint triggers to include PR synchronization by @cameronmeissner in #7450
• chore: move e2e and gc to use service connection by @awesomenix in #7449
• chore: move windows vhd build to use service connections by @awesomenix in #7457
• chore: move linux vhd build to use service connection by @awesomenix in #7451
• fix: add GRID driver version to VHD release notes by @ganeshkumarashok in #7464
• feat: add mooncake mcr containerd config host - linux by @fseldow in #7342
• test: improve e2e logs by @r2k1 in #7469
• docs: update windows release notes for 2025-11B (#7389) by @timmy-wright in #7482
• fix(windows): decrease retry timeout for network adapter read in windows provisioning scripts by @timmy-wright in #7480
• feat: update test pmc repo when using prerelease version by @lilypan26 in #7459
• chore: use azcli login for azcopy by @awesomenix in #7487
• fix(e2e): use invalid UserAssignedIdentityID instead of invalid AADResource in scenario Flatcar_SecureTLSBootstrapping_BootstrapToken_Fallback by @cameronmeissner in #7493
• fix: use cli credentials for azcopy when downloading from private urls by @awesomenix in #7496
• fix: only execute cloud-init-status-check.sh when it exists on the node by @Devinwong in #7456
• ci: log disk usage by @r2k1 in #7503
• feat: add http header for mooncake mar containerd host by @fseldow in #7515
• fix: installation of Azure ACR Credential Provider on OSGuard by @miz060 in #7511
• fix: dry run issues in pipeline by @timmy-wright in #7523
• fix: windows release script by @timmy-wright in #7525
• ci: add disk usage diagnostics to VHD builds by @r2k1 in #7518
• feat: move azurelinuxOSGuard to immutable storage container by @zachary-bailey in #7510
• ci: disabling two 10B regkeys to address 12B aggressions by @smiezah-msft in #7528
• fix: windows_settings should have same rules as components.json by @timmy-wright in #7531
• fix(ci): limit image builder template name to 64 characters by @cameronmeissner in #7540
• docs: update windows release notes for 2025-12B (#7532) by @timmy-wright in #7543
• fix(ci): skip disk usage report publishing on OSGuard by @cameronmeissner in #7544
• fix(ci): temporarily disable grid compatibility check to eliminate build warnings by @cameronmeissner in #7545
• fix(ci): bump Linux VHD build timeout to account for prefetch optimization latency by @cameronmeissner in #7548
• fix(ci): make Linux VHD content tests resilient to illegitimate errors by @cameronmeissner in #7547
• chore: freezing all azl2 vhd versions by @djsly in #7552
• test: add missing UTs for OS image config cloud settings by @cameronmeissner in #7557
• fix: support katacc policy annotation by @Bickor in #7556
• fix: remove --cloud-config as it's deprecated from kubelet flags and configs by @Devinwong in #7566
• chore: disabling marinerv2 and azurelinuxv2 builds by @djsly in #7567
• fix: dynamically resolve root device within disk_queue.service by @cameronmeissner in #7527
• fix: perform no install recommends and clean by @awesomenix in #7572
• fix: update localdns watchdog logic by @SriHarsha001 in #7546
• fix: pin azure plugin version to 2.5.0 by @awesomenix in #7579
• feat: upgrade aznfs package to 3.0.10 by @andyzhangx in #7542
• fix: resolve ND H100 & ND H200 loading timeout by @henryli001 in #7584
• fix: ni cluster local repo package install fail to handle test k8s version by @fseldow in #7585
• fix: log aks-node-controller arguments and update readme by @Devinwong in #7595
• chore: remove deprecated azure linux v2 and mariner v2 e2e tests by @awesomenix in #7600
• fix: remove deprecated checks in azure linux v3 tests by @awesomenix in #7605
• feat: new e2e uses bastion hosts for ssh by @awesomenix in #7586
• fix: accidently missed a spot to change to azure linux v3 by @awesomenix in #7607
• fix: get_sandbox_image_from_containerd_config fails to read containerd v2 config by @fseldow in #7597
• fix: oops! accidently disabled running test pod by @awesomenix in #7611
• fix: removing nvidia repo from VHD by @djsly in #7615
• fix: log bastion instructions for ssh by @awesomenix in #7623
• fix: log correct bastion instructions for ssh by @awesomenix in #7627
• fix: regenerate localdns corefile if it goes missing by @SriHarsha001 in #7604
• feat(azure-acr-credential-provider): disable minor update by @Liunardy in #7632
• fix: disable azure linux automatic timer.onlynotify by @fseldow in #7614
• fix: generate fixed rsa keys for cluster if missing by @awesomenix in #7636

Dependabot Updates

• chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #7486
• chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @dependabot[bot] in #7506
• chore(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @dependabot[bot] in #7633

VHD Component Updates

• chore(deps): update ama-metrics (patch) by @renovate[bot] in #7413
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7452
• chore(deps): update kube-components (patch) by @renovate[bot] in #7395
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7432
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #7424
• chore: add dalec cloud-node-manager image registry to renovate by @nilo19 in #7448
• fix: reduce windows VM provision time by @r2k1 in #7483
• feat: consume Windows Container Networking (WCN) Package v1.3.0 by @abeltrano in #7454
• fix: incorrect image references in OS Config by @r2k1 in #7501
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7507
• chore(deps): update windows/servercore docker tag to v10.0.20348.4529 by @renovate[bot] in #7509
• feat: add node label for dcgm exporter by @lilypan26 in #7447
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.32 by @renovate[bot] in #7436
• fix: set correct download location for azure acr credential provider by @lilypan26 in #7559
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-7 by @renovate[bot] in #7398
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-6 by @renovate[bot] in #7392
• feat(cloud-provider-azure): use Dalec for >= v1.32.11 by @Liunardy in #7591
• feat: use dcgm-exporter for Ubuntu 22.04 and 24.04 by @mxj220 in #7610
• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-7 by @renovate[bot] in #7612
• chore(deps): update azure-policy/policy-kubernetes-...

v0.20260107.0

What's Changed

Changes

• fix: pin azure plugin version to 2.5.0 (#7579) by @awesomenix in #7580
• fix: removing nvidia repo from VHD by @djsly in #7619

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-6 (#7392) by @cameronmeissner in #7578
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-7 by @cameronmeissner in #7577
• fix: set correct download location for azure acr credential provider … by @lilypan26 in #7616

Full Changelog: v0.20251218.0...v0.20260107.0