v0.20251206.0

What's Changed

Changes

• feat(ci) : add PR lint workflow by @cameronmeissner in #7401
• fix(e2e): cherry pick azcli login for azcopy and fix e2e by @awesomenix in #7494
• fix(e2e): use invalid UserAssignedIdentityID instead of invalid AADResource in scenario Flatcar_SecureTLSBootstrapping_BootstrapToken_Fallback by @cameronmeissner in #7495
• fix(build): use cli credentials for azcopy when downloading from private urls by @awesomenix in #7498

Dependabot Updates

• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #7435
• chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 in /e2e by @dependabot[bot] in #7415

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-7 by @renovate[bot] in #7399
• chore(deps): update nvidia-device-plugin (patch) (#7452) by @ganeshkumarashok in #7472
• chore(deps): update kube-components (patch) (#7395) by @ganeshkumarashok in #7474
• chore(deps): update kubelet-kubectl (patch) (#7432) by @ganeshkumarashok in #7475
• chore(deps): update acr-credential-provider (patch) (#7424) by @ganeshkumarashok in #7476

Full Changelog: v0.20251120.0...v0.20251206.0

v0.20251120.0

What's Changed

Changes

• test: add AzureLinuxOSGuardV3gen2fipsTL to Linux VHD check-in tests by @cameronmeissner in #7360
• ci: Temporarily disable CIS scanning by @jepio in #7357
• Regkey for bugcheck 0x76 by @smiezah-msft in #7361
• fix(e2e): prevent secure TLS bootstrapping bootstrap token fallback tests from creating server-side errors by @cameronmeissner in #7369
• test: Skip LocalDns validation when unsupported by @jepio in #7378
• add e2e for nvidia grid license check by @awesomenix in #7328
• feat: incorporate linux prefetch optimization into VHD builds by @cameronmeissner in #7368
• doc: update OutboundCommand description in readme by @Devinwong in #7370
• chore: fix dry-run handling in windows pipelines by @timmy-wright in #7388
• fix: set prefetch build scripts as executable by @cameronmeissner in #7394
• surfacing the error from provision-wait mode by @Devinwong in #7382
• test(e2e): add validation for secure + server TLS bootstrapping by @cameronmeissner in #7362
• feat(flatcar): disable autologin by @ervcz in #7290
• fix: pin publisher base images by @zachary-bailey in #7397
• Fix: Remove GB200 from list of Fabric Manager SKUs by @abenn135 in #7402
• Extract latest coredns binary for localdns by @SriHarsha001 in #7387
• regression: fix branch by @timmy-wright in #7414
• fix: Reorder faillock in common-auth to prevent failures by @jepio in #7377
• switch blobfuse2 version to 2.5.0 by @ganeshkumarashok in #7403

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/apiserver-network-proxy/agent docker tag to v0.31.4-4 by @renovate[bot] in #7374

New Contributors

• @ervcz made their first contribution in #7290

Full Changelog: v0.20251112.0...v0.20251120.0

v0.20251107.3

What's Changed

Changes

• feat: prepare mcr.azk8s.cn migration to mcr.azure.cn - retag by @fseldow in #7258
• fix: default AKSAADServerAppID in kuberneteswindowssetup.ps1 by @cameronmeissner in #7278
• fix: temporarily protect designated gb200 VHDs from VHD builder garbage collection by @cameronmeissner in #7291
• error handling by @timmy-wright in #7257
• Add error handling to CSE inline zip extraction by @timmy-wright in #7283
• chore(deps): update OS Guard base image to 3.0.20251021 by @hbeberman in #7293
• chore: adding function to allow azcli override in the future by @djsly in #7294
• [bug] Make sure test step fails if VHD not found by @abenn135 in #7280
• Allow RPM update minor version by setting ignoreUnstable to false. Update readme by @Devinwong in #7306
• fix: Pin previous Flatcar marketplace image by @jepio in #7305
• [E2E] log host iptables on wire server validation failure by @r2k1 in #7281
• test: add tests to ensure that any iptables rules present are compatible with eBPF host routing by @santhoshmprabhu in #7197
• pin azcli version to 2.77.0 by @jepio in #7315
• e2e: NPD validation for GPU managed experience tests by @surajssd in #7308
• fix: address comment from #7197 by @santhoshmprabhu in #7318
• fix: Run dpkg-configure before pinning azcli by @jepio in #7316
• Install and Enable AppArmor in Azure Linux 3 by @aadhar-agarwal in #7261
• feat: add Delos cloud names by @hunter32292 in #7320
• feat: add fallback to kube binary install if cached deb/rpm not found by @lilypan26 in #7312
• chore(packer): add Flatcar NOTICE handling to image build by @John15321 in #7317
• chore(deps): bump github.com/containerd/containerd from 1.7.27 to 1.7.29 in /vhdbuilder/lister by @dependabot[bot] in #7324
• feat: pin ubuntu 2204 kernel to 1096 by @lilypan26 in #7383
• chore: bump sig image version to 202511.07.1 by @lilypan26 in #7384
• chore: revert 1107 kernel pin by @lilypan26 in #7429
• cherry-pick: fix: only update pmc repo when installing deb pkgs (#7332) by @cameronmeissner in #7430
• cherry-pick: fix: remove nvidia pkg list during cleanup (#7333) by @cameronmeissner in #7431

VHD Component Updates

• chore(deps): update oss/v2/kubernetes/kube-proxy docker tag to v1.34.1-3 by @renovate[bot] in #7150
• Security: migrating to oss/v2 for the pause image, aligning version to 3.6 for linux and 3.10.1 for windows by @djsly in #7083
• Update Addon images for CVE fixes by @SriHarsha001 in #7292
• components: Update DCGM exporter version for AzL3 to 4.6.0 by @surajssd in #7284
• Cache servercore explicitly by @timmy-wright in #7304
• chore: restore 1.34.0 cached pmc pkg versions by @lilypan26 in #7307
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.31 by @renovate[bot] in #7251
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-6 by @renovate[bot] in #7222
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #7311
• chore(deps): update runc-containerd-minor (minor) by @renovate[bot] in #7196

New Contributors

• @John15321 made their first contribution in #7317

Full Changelog: v0.20251029.0...v0.20251107.3

v0.20251112.0

What's Changed

Changes

• fix: only update pmc repo when installing deb pkgs by @lilypan26 in #7332
• set unmarshalling JSON with DiscardUnknown option by @Devinwong in #7339
• Fix windows network configuration for VHD caching feature by @r2k1 in #7313
• fix: Add more copyright license entries in NOTICE for Flatcar by @jepio in #7345
• chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 in /vhdbuilder/lister by @dependabot[bot] in #7347
• revert: fix: Pin previous Flatcar marketplace image (#7305) by @chewi in #7346
• fix: remove nvidia pkg list during cleanup by @ganeshkumarashok in #7333
• Add 11b non-sec reg keys by @smiezah-msft in #7348
• chore: cleanup CODEOWNERS by @cameronmeissner in #7354
• test(e2e): assign kubelet and abe2e identities to E2E VMs, use kubelet identity to authenticate with private ACR by @cameronmeissner in #7352
• test: Add forward and backward compatibility tests to aks-node-controller config file by @r2k1 in #7349
• test: fix unit tests by @r2k1 in #7356
• use proper OS var for AzureLinux3 when installing ArtifactStreaming package by @djsly in #7358
• cleanup: removing all 1604/1804 logic by @djsly in #6526
• fix: skip installAndConfigureArtifactStreaming on OSGuard by @cameronmeissner in #7359

Dependabot Updates

• chore(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #7341

VHD Component Updates

• fix: installation of Azure ACR Credential Provider on Flatcar by @chewi in #7319
• chore: replace cni and cns versions with v1.7.9-0 by @QxBytes in #7327
• chore: bump addon version by @anlandu in #7340
• chore(deps): update runc-containerd-ca_watcher (patch) by @renovate[bot] in #7326
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7351
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #7323

Full Changelog: v0.20251107.3...v0.20251112.0

v0.20251029.0

What's Changed

Changes

• remove Renovate schedule as it's not needed now by @Devinwong in #7124
• Skip GRID compatibility check for prod environment by @ganeshkumarashok in #7137
• chore(deps): Update OSGuard base image version by @hbeberman in #7138
• Ignore mise-en-place config files by @awesomenix in #7139
• fix: Escape dots in version for JSON path queries by @surajssd in #7131
• don't delete secure bootstrapping files if they don't exist by @timmy-wright in #7144
• Fix kubelet flags for VHD Caching by @r2k1 in #7132
• Add non-sec reg keys for 10B release by @smiezah-msft in #7154
• Bug: add fallback when attempting to find network adaptor by @timmy-wright in #7133
• update error logging for tests, highlight test failure by @r2k1 in #7162
• bug: pull pod infra container image if not cached for network isolated cluster by @fseldow in #7155
• cleanup: more aggressively garbage collect packer resources in Node SIG subscription by @cameronmeissner in #7172
• cleanup: always run scheduled garbage collection in Node SIG subscription by @cameronmeissner in #7178
• refactor(stls): augment secure TLS bootstrapping configuration options in NodeBootstrappingConfiguration/AKSNodeConfig by @cameronmeissner in #7112
• AKS CIS compliance for Ubuntu 22.04 and 24.04 by @jepio in #7061
• fix: Skip DCGM installation on OSGuard by @jepio in #7185
• fix: strip unnecessary files from Flatcar's Ignition data to save space by @chewi in #7184
• regression: bring back storage account creation by @timmy-wright in #7179
• feat: update acr-mirror to 0.2.14 and fix latency issue caused by ensureArtifactStreaming() during basePrep() by @juliusl in #7188
• Update localdns to always execute networkreload in cleanup by @SriHarsha001 in #7176
• chore: use CI approach to run shell checks locally by @timmy-wright in #7180
• Add Nvidia service log collection by @surajssd in #7187
• fix: Remove pipeline warning on failing CIS rule 1.3.1.2 on CVM by @jepio in #7191
• (chore) Remove docker installation ++ by @awesomenix in #7173
• Add logic to get NIC from vnetdns if route to AzureDNS is blocked by @SriHarsha001 in #7192
• fix: SSH not disabled issue on AzureLinux and add E2E to guard by @norshtein in #7190
• fix(cse): enhance ACR anonymous pull check and fast fail on insufficient RBAC access by @qweeah in #7106
• Add E2E for VHD Caching by @r2k1 in #7160
• feat: consume NI kubernetes packages on MAR by @qweeah in #7134
• feat: upgrade blobfuse version to v2.5.1 on Ubuntu 22.04 & 24.04 by @andyzhangx in #7215
• Fix DNS resolution on Flatcar by @johananl in #7216
• nvidia-device-plugin: Fix binary path when using MIG by @surajssd in #7201
• Managed GPU experience AFEC enablement flag by @ganeshkumarashok in #7210
• Revert "Enable jumbo frame for v6 VM SKU with mana driver (#6953)" by @anson627 in #7226
• Add pass device specs flag for managed nvidia device plugin: by @ganeshkumarashok in #7231
• add myself to codeowners by @awesomenix in #7241
• change write-outputs by @timmy-wright in #7232
• fix: retry when getting network adapter by @timmy-wright in #7248
• feat: network isolated cluster use acr to pull azure-credential-provider package and supports azure linux by @fseldow in #7189
• remove anuj, to stop warnings by @awesomenix in #7256
• Flatcar custom cloud support by @jepio in #6903
• fix: Sync testdata by @jepio in #7260
• test: Skip windows e2e for Linux testdata update by @jepio in #7233
• fix: egress extension skip switch to use /opt/azure/outbound-check-skipped by @fseldow in #7224
• feat: fix cuda install & remove deprecated key by @stanleyt10 in #7237
• Fix VHD Caching e2e for gen1 VHDs by @r2k1 in #7223

Dependabot Updates

• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #7143

VHD Component Updates

• chore: bump cilium private to v1.17.7-250927 by @QxBytes in #7118
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.0.0 by @cameronmeissner in #7117
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #7109
• chore(deps): update dependency azure-acr-credential-provider by @renovate[bot] in #7110
• chore(deps): update runc-containerd-minor (minor) by @renovate[bot] in #6992
• chore: GK 3.20.1-2 and Policy 1.14.2 by @nreisch in #7141
• fix: config latest patch for kube-proxy by @jack4it in #7145
• Add NVIDIA DCGM packages and repository support by @surajssd in #7063
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7017
• Revert "chore(deps): update runc-containerd-minor (minor) (#6992)" by @lilypan26 in #7194
• chore: cache secrets-store-csi-driver v1.5.4 by @jiashun0011 in #7195
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.1.30 by @renovate[bot] in #7114
• Windows components & renovate updates by @timmy-wright in #7212
• Update coredns image versions that are cached in VHD by @SriHarsha001 in #7227
• chore: bump apiserver-network-proxy-agent revision by @ipochi in #7234
• chore: bump apiserver-network-proxy-agent revision by @ipochi in #7235
• chore(deps): update nvidia-device-plugin (minor) by @renovate[bot] in #7239
• chore(deps): update aks/aks-gpu-cuda docker tag to v580 by @renovate[bot] in #7230
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7247
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7249
• chore(deps): update oss/v2/kubernetes/autoscaler/cluster-proportional-autoscaler docker tag to v1.9.0-4 by @renovate[bot] in #7219
• chore(deps): update dependency datacenter-gpu-manager-exporter to v4.6.0-1 by @renovate[bot] in #7262
• chore(deps): update aks/aks-gpu-grid docker tag to v550.144.06-20251021155159 by @renovate[bot] in #7175
• Update CPA and AddonResizer images in VHD by @SriHarsha001 in #7268
• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-6 by @renovate[bot] in #7238
• chore(deps): update aks-secure-tls-bootstrap-client to v1.0.1 by @cameronmeissner in #7269
• chore: secrets-store-provider-azure v1.7.2 by @jiashun0011 in #7263
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #7229

New Contributors

• @awesomenix made their first contribution in #7139
• @jack4it made their first contribution in #7145
• @smiezah-msft made their first contribution in #7154
• @stanleyt10 made their first contribution in #7237

Full Changelog: v0.20251003.0...v0.20251029.0

v0.20251019.2

What's Changed

Changes

• remove Renovate schedule as it's not needed now by @Devinwong in #7124
• Skip GRID compatibility check for prod environment by @ganeshkumarashok in #7137
• chore(deps): Update OSGuard base image version by @hbeberman in #7138
• Ignore mise-en-place config files by @awesomenix in #7139
• fix: Escape dots in version for JSON path queries by @surajssd in #7131
• don't delete secure bootstrapping files if they don't exist by @timmy-wright in #7144
• Fix kubelet flags for VHD Caching by @r2k1 in #7132
• Add non-sec reg keys for 10B release by @smiezah-msft in #7154
• Bug: add fallback when attempting to find network adaptor by @timmy-wright in #7133
• update error logging for tests, highlight test failure by @r2k1 in #7162
• bug: pull pod infra container image if not cached for network isolated cluster by @fseldow in #7155
• cleanup: more aggressively garbage collect packer resources in Node SIG subscription by @cameronmeissner in #7172
• cleanup: always run scheduled garbage collection in Node SIG subscription by @cameronmeissner in #7178
• refactor(stls): augment secure TLS bootstrapping configuration options in NodeBootstrappingConfiguration/AKSNodeConfig by @cameronmeissner in #7112
• AKS CIS compliance for Ubuntu 22.04 and 24.04 by @jepio in #7061
• fix: Skip DCGM installation on OSGuard by @jepio in #7185
• fix: strip unnecessary files from Flatcar's Ignition data to save space by @chewi in #7184
• regression: bring back storage account creation by @timmy-wright in #7179
• feat: update acr-mirror to 0.2.14 and fix latency issue caused by ensureArtifactStreaming() during basePrep() by @juliusl in #7188
• Update localdns to always execute networkreload in cleanup by @SriHarsha001 in #7176
• chore: use CI approach to run shell checks locally by @timmy-wright in #7180
• Add Nvidia service log collection by @surajssd in #7187
• fix: Remove pipeline warning on failing CIS rule 1.3.1.2 on CVM by @jepio in #7191
• (chore) Remove docker installation ++ by @awesomenix in #7173
• Add logic to get NIC from vnetdns if route to AzureDNS is blocked by @SriHarsha001 in #7192
• fix: SSH not disabled issue on AzureLinux and add E2E to guard by @norshtein in #7190
• fix(cse): enhance ACR anonymous pull check and fast fail on insufficient RBAC access by @qweeah in #7106
• Add E2E for VHD Caching by @r2k1 in #7160
• feat: consume NI kubernetes packages on MAR by @qweeah in #7134
• feat: upgrade blobfuse version to v2.5.1 on Ubuntu 22.04 & 24.04 by @andyzhangx in #7215
• Revert "Enable jumbo frame for v6 VM SKU with mana driver (#6953)" (#… by @lilypan26 in #7240
• chore: bump image version to 202510.19.1 by @lilypan26 in #7250
• cherry-pick: fix: default AKSAADServerAppID in kuberneteswindowssetup.ps1 (#7278) by @cameronmeissner in #7279

Dependabot Updates

• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #7143

VHD Component Updates

• chore: bump cilium private to v1.17.7-250927 by @QxBytes in #7118
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.0.0 by @cameronmeissner in #7117
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #7109
• chore(deps): update dependency azure-acr-credential-provider by @renovate[bot] in #7110
• chore(deps): update runc-containerd-minor (minor) by @renovate[bot] in #6992
• chore: GK 3.20.1-2 and Policy 1.14.2 by @nreisch in #7141
• fix: config latest patch for kube-proxy by @jack4it in #7145
• Add NVIDIA DCGM packages and repository support by @surajssd in #7063
• chore(deps): update windowsbase (patch) by @renovate[bot] in #7017
• Revert "chore(deps): update runc-containerd-minor (minor) (#6992)" by @lilypan26 in #7194
• chore: cache secrets-store-csi-driver v1.5.4 by @jiashun0011 in #7195

New Contributors

• @jack4it made their first contribution in #7145
• @smiezah-msft made their first contribution in #7154

Full Changelog: v0.20251003.1...v0.20251019.2

v0.20251003.0

What's Changed

Changes

• Removed kata-cc artifacts. by @Bickor in #7044
• Don't recompile scriptless binary if an image hasn't been rebuild by @r2k1 in #7077
• Replace NeedsCgroupv2 with getter GetNeedsCgroupv2 in go template by @Devinwong in #7082
• Add UTC to the signature expiry time by @Devinwong in #7088
• feat: Add aks-diagnostic.py by @hunter32292 in #7085
• Make e2e tags to run case-insensitive by @ganeshkumarashok in #7091
• feat: support AAD SSH for Linux nodes by @norshtein in #7059
• Remove unused GPU resource e2e validator by @ganeshkumarashok in #7096
• Log the aksNodeConfig parsing error but not return error, to provide backward compatibility by @Devinwong in #7093
• Remove reference-info-base64 file for CVM by @ganeshkumarashok in #7102
• Add a pause type command to windows nanoserver and server containers in e2e tests by @timmy-wright in #7104
• Updated kata containerd config. by @Bickor in #6816
• security: unpin LTS kernel for Ubuntu 2204 by @djsly in #7103
• Remove ACR nodemon -- artifact streaming by @ganeshkumarashok in #7097
• chore: configure VSCode formatting settings by @surajssd in #7119
• Fail fast to unblock aks-node-controller provision-wait from waiting until timeout by @Devinwong in #7120

Dependabot Updates

• chore(deps): bump github.com/coreos/butane from 0.25.0 to 0.25.1 by @dependabot[bot] in #7081

VHD Component Updates

• chore: upgrade Azure Disk and File CSI driver versions by @andyzhangx in #7076
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7079
• chore(deps): update dependency azure-acr-credential-provider by @renovate[bot] in #7066
• chore: add previousLatestVersion to PMC packages by @lilypan26 in #7080
• chore(deps): update oss/v2/kubernetes/autoscaler/cluster-proportional-autoscaler docker tag to v1.9.0-3 by @renovate[bot] in #7069
• chore: restore ubuntu 2004 credential provider PMC install by @lilypan26 in #7084
• chore(deps): update dependency azure-acr-credential-provider by @renovate[bot] in #7089
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7090
• upgrade Azure File and Blob CSI drivers in vhd image by @andyzhangx in #7099
• Install managed GPU device plugin for Ubuntu 22.04, 24.04 and AzLinux 3.0, cleanup and renovate config by @ganeshkumarashok in #6995
• chore: replace cni and cns versions with 1.7.4 by @QxBytes in #7087
• chore(deps): update oss/v2/kubernetes/autoscaler/addon-resizer docker tag to v1.8.23-5 by @renovate[bot] in #7108
• chore(deps): update aks/aks-gpu-grid docker tag to v550.144.06-20250822192755 by @renovate[bot] in #6684
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.15-5 by @renovate[bot] in #7067
• chore(deps): update kube-components to v1.33.5 (patch) by @renovate[bot] in #7092
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #7111
• chore(deps): update dependency moby-containerd to v1.6.26-12.cm2 by @renovate[bot] in #7122

New Contributors

• @hunter32292 made their first contribution in #7085

Full Changelog: v0.20250923.0...v0.20251003.0

v0.20250923.0

What's Changed

Changes

• Configure URL based Kubelet for Flatcar+1.34 by @jepio in #7060
• Compile aks-node-controller before running e2e by @r2k1 in #7032
• Sync GRID drivers for Gov cloud to 550 by @ganeshkumarashok in #7062

VHD Component Updates

• chore: update apiserver-network-proxy/agent image by @ipochi in #7048
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #7033
• Upgrade Azure Disk CSI driver v1.32.11 by @andyzhangx in #7065
• chore: upgrade to dalec image for CSI driver sidecar images by @andyzhangx in #7072

Full Changelog: v0.20250918.0...v0.20250923.0

v0.20250918.0

What's Changed

Changes

• fix: ensure clean up cached rpms/debs before exiting by @lilypan26 in #7009
• Minor improvements to e2e logging by @r2k1 in #7004
• e2e: Refactor GPU test, support multiple VM sizes & locations by @surajssd in #6675
• update ip-masq-agent-v2 Renovate configs by @Devinwong in #7010
• grouping all Dalec built dependencies with one versioning format with revision by @Devinwong in #7011
• Enable jumbo frame for v6 VM SKU with mana driver by @anson627 in #6953
• /bug Better logging around file downloads and archive expansion in windows scripts by @timmy-wright in #7001
• Flatcar "scriptless" support by @jepio in #6840
• chore: upload azcopy logs as pipeline artifacts by @timmy-wright in #7021
• chore: azcopy by @timmy-wright in #7022
• chore: revert release notes + image bump for 202509.05.0 VHD by @cameronmeissner in #7023
• update stale link by @Devinwong in #7024
• chore: improve signature skip checks by @timmy-wright in #7025
• change to build.uploadlog by @timmy-wright in #7026
• fix: e2e base template UseManagedIdentity should be true when ClientId is msi by @fseldow in #6822
• chore: cleanup unneeded customdata files by @lilypan26 in #7029
• fix: correct gb200 image def name to align with name computed in .bui… by @KananMehta in #7036
• feat: install FDE LTS kernel and handle nullboot for CVM builds by @calvin197 in #7028
• test: add 2004fipsgen2containerd to linux VHD check-in tests by @cameronmeissner in #7039
• chore: set job plan location, fix log files location by @timmy-wright in #7040

VHD Component Updates

• New patch for ipmasq agent by @paulgmiller in #7008
• chore: Add LTS 1.29.100, 1.30.100 into cache, remove 1.27.103 from cache by @gaopenghigh in #6978
• chore(deps): update oss/v2/open-policy-agent/gatekeeper docker tag to v3.20.1-1 by @renovate[bot] in #7002
• chore(deps): update oss/v2/kubernetes/autoscaler/addon-resizer docker tag to v1.8.23-4 by @renovate[bot] in #7012
• chore(deps): update oss/v2/kubernetes/autoscaler/cluster-proportional-autoscaler docker tag to v1.9.0-2 by @renovate[bot] in #7018
• chore(deps): update oss/v2/kubernetes/autoscaler/cluster-proportional-autoscaler docker tag to v1.9.0-2 by @renovate[bot] in #7014
• chore(deps): update kube-components (patch) by @renovate[bot] in #7020
• feat: add azure credential provider pmc install by @lilypan26 in #6804
• chore: upgrade Azure File CSI driver in vhd image by @andyzhangx in #7031
• fix: temporarily revert fetching azure-acr-credential-provider on focal SKUs to MCR instead of PMC on 1.34 by @cameronmeissner in #7038
• chore: bump cilium v1.16.13-250826 and v1.17.7-250821 by @camrynl in #7030

New Contributors

• @anson627 made their first contribution in #6953

Full Changelog: v0.20250911.0...v0.20250918.0