v1.20.1 release

What's Changed

• [release-1.20] chore: Update csi release tools by @andyzhangx in #1021
• [release-1.20] chore: validate mount path by @k8s-infra-cherrypick-robot in #1022
• [release-1.20] chore: upgrade CSI sidecar image versions by @andyzhangx in #1024
• [release-1.20] test: upgrade to golint2 by @k8s-infra-cherrypick-robot in #1032
• [release-1.20] fix: CVE-2026-24051 by @k8s-infra-cherrypick-robot in #1031
• [release-1.20] test: fix CVE-2026-25679 in trivy action by @k8s-infra-cherrypick-robot in #1033
• [release-1.20] fix: Update csi release tools to fix CVEs by @k8s-infra-cherrypick-robot in #1034
• [release-1.20] fix: SmbGlobalMapping leak due to wrong driverGlobalMountPath on Windows by @andyzhangx in #1037
• doc: cut v1.20.1 release by @andyzhangx in #1038

New Contributors

• @k8s-infra-cherrypick-robot made their first contribution in #1022

Full Changelog: v1.20.0...v1.20.1

v1.20.0 release

What's Changed

• doc: cut v1.19.0 release by @andyzhangx in #978
• chore: Update csi release tools by @andyzhangx in #982
• doc: update new chart versions by @andyzhangx in #985
• Release tool update by @darshansreenivas in #986
• chore: Update csi release tools by @andyzhangx in #990
• chore: upgrade CSI driver sidecar image versions by @andyzhangx in #991
• test: upgrade to csi-test v5.4.0 by @andyzhangx in #994
• fix: CVE-2025-52881 by @andyzhangx in #993
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #995
• fix: CVE-2025-58181 by @andyzhangx in #996
• feat: Add driver.labels option to helm chart for CSIDriver resource by @Copilot in #998
• test: fix trivy CVE-2025-61727 by @andyzhangx in #999
• docs(charts-readme): update helm command by @Souheil-Yazji in #1000
• chore: build image with go1.24.11 to fix CVE by @andyzhangx in #1002
• fix: CVE-2025-13281 by @andyzhangx in #1001
• chore(deps): bump github.com/Azure/go-autorest/autorest/to from 0.4.0 to 0.4.1 by @dependabot[bot] in #1003
• chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.6.0 by @dependabot[bot] in #1004
• chore(deps): bump github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30 by @dependabot[bot] in #1005
• cleanup: refine mount time out error message by @andyzhangx in #1006
• test: fix CVE-2025-61726 trivy failure by @andyzhangx in #1010
• chore(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /cmd/smbplugin by @dependabot[bot] in #1011
• chore: Update csi release tools by @andyzhangx in #1012

New Contributors

• @darshansreenivas made their first contribution in #986
• @Copilot made their first contribution in #998
• @Souheil-Yazji made their first contribution in #1000

Full Changelog: v1.19.0...v1.20.0

v1.19.1 release

What's Changed

• [release-1.19] chore: Update csi release tools by @andyzhangx in #983
• doc: cut v1.19.1 release by @andyzhangx in #984

Full Changelog: v1.19.0...v1.19.1

v1.19.0 release

What's Changed

• doc: cut v1.18.0 release by @andyzhangx in #953
• test: fix CVE-2025-4673 in trivy action by @andyzhangx in #959
• chore(deps): bump build-image/debian-base from bookworm-v1.0.4 to bookworm-v1.0.5 in /cmd/smbplugin by @dependabot[bot] in #960
• chore: upgrade sidecar image versions by @andyzhangx in #957
• chore: upgrade csi-resizer to v1.14.0 by @andyzhangx in #962
• fix: CVE-2025-22868 by @andyzhangx in #964
• test: fix CVE-2025-47907 trivy test failure by @andyzhangx in #965
• fix: enable to use secrets with special characters by @mpatlasov in #961
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #966
• fix: CVE-2025-5187 by @andyzhangx in #972
• chore(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #971
• chore(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /cmd/smbplugin by @dependabot[bot] in #973
• chore: upgrade csi sidecar image versions by @andyzhangx in #975
• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #979
• feat: support multiple storage classes creation using helm chart by @andyzhangx in #980

Full Changelog: v1.18.0...v1.19.0

v1.18.0 release

What's Changed

• doc: cut v1.17.0 release by @andyzhangx in #907
• test: fix trivy action failure due to CVE-2024-45336 by @andyzhangx in #919
• fix: duplicated securityContext on Windows chart config by @andyzhangx in #921
• test: fix CVE-2025-22866 in trivy action by @andyzhangx in #923
• fix: incorrect affinity chart config by @andyzhangx in #924
• chore: update csi release tools (building driver with go1.23.6) by @andyzhangx in #929
• test: use env var for CSI inline volume test secret by @Phaow in #928
• test: correct external-e2e driver capabilities by @Phaow in #931
• fix: CVE-2025-0426 by @andyzhangx in #926
• fix: CVE-2025-30204 by @andyzhangx in #937
• chore: use go1.24 by @andyzhangx in #941
• test: fix CVE-2025-22871 in trivy action by @andyzhangx in #942
• fix: CVE-2025-22872 by @andyzhangx in #944
• chore: upgrade resizer sidecar image version to v1.13.2 by @andyzhangx in #945
• fix: goroutine leak when timeout by @andyzhangx in #947

Full Changelog: v1.17.0...v1.18.0

v1.17.0 release

What's Changed

• doc: cut v1.16.0 release by @andyzhangx in #836
• chore(deps): bump build-image/debian-base from bookworm-v1.0.3 to bookworm-v1.0.4 in /cmd/smbplugin by @dependabot in #839
• fix: chmod volume dir before deletion by @mpatlasov in #840
• chore: upgrade golint version by @Zhupku in #842
• fix: mount with 0777 in volume creation and deletion by @andyzhangx in #843
• test: fix random ut failure by @andyzhangx in #847
• chore: upgrade sidecar image versions by @andyzhangx in #849
• fix: remove parent dir in DeleteVolume by @andyzhangx in #850
• fix: delete volume failure due to permission issue by @andyzhangx in #851
• test: use env var for enable driver install in e2e by @Phaow in #854
• fix: mount options for fsGroup delegation must ensure RWX for the group by @mpatlasov in #848
• fix: build with go 1.22.5 to fix golang CVE by @andyzhangx in #857
• fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #858
• test: fix trivy action by @andyzhangx in #860
• fix: mount stuck issue by @umagnus in #862
• chore: update CSI spec to v1.10.0 by @andyzhangx in #863
• chore: update dependabot by @andyzhangx in #864
• cleanup: remove unused livenessProbe in registrar container by @andyzhangx in #867
• Chores:remove group update rule by @MartinForReal in #870
• chore(deps): bump k8s.io/klog/v2 from 2.110.1 to 2.130.1 by @dependabot in #873
• test: add read-only subdir e2e test by @Phaow in #874
• feat: add volume resize support by @andyzhangx in #881
• chore: upgrade release tools by @andyzhangx in #883
• fix: use godebug winsymlink on Windows build by @andyzhangx in #884
• fix: runOnControlPlane chart config by @andyzhangx in #882
• fix: controller.runOnMaster chart config by @andyzhangx in #886
• fix: CVE-2024-45337 by @andyzhangx in #887
• test: upgrade csi-test to v5.3.1 by @andyzhangx in #889
• chore: upgrade k8s.io/mount-utils to v1.32.0 by @andyzhangx in #888
• fix: CVE-2024-45338 by @andyzhangx in #891
• chore: Update csi release tools by @andyzhangx in #892
• fix: increase default provisioner retry-interval-max by @andyzhangx in #893
• test: add unit test for main function by @andyzhangx in #894
• feat: support windows host-process deployment by @andyzhangx in #895
• chore: support windows hpc image build by @andyzhangx in #896
• chore: use canary-windows-hp image for host process deployment by @andyzhangx in #897
• test: fix windows hpc test failure by @andyzhangx in #903
• feat: enable host process deployment for windows daemonset by default by @andyzhangx in #904
• feat: inline volume support by @andyzhangx in #905
• feat: support base64password field in secret by @andyzhangx in #906
• Revert "feat: support base64password field in secret" by @andyzhangx in #908
• chore: upgrade CSI driver sidecar image versions by @andyzhangx in #910

New Contributors

• @Zhupku made their first contribution in #842
• @MartinForReal made their first contribution in #870

Full Changelog: v1.16.0...v1.17.0

v1.16.0 release

What's Changed

• doc: cut v1.15.0 release by @andyzhangx in #803
• fix: CVE-2024-5321 by @andyzhangx in #806
• fix: revert v1.14.0 chart change by @andyzhangx in #808
• fix: unmount detection failure by @andyzhangx in #811
• fix: tmp path mount permission issue by @andyzhangx in #812
• fix: add pv patch permission with HonorPVReclaimPolicy enabled by @andyzhangx in #813
• fix: node kerberos cache volume name by @pas-n in #815
• test: add default namespace in examples to fix e2e test failure by @andyzhangx in #817
• test: fix external test failure by @andyzhangx in #819
• test: fix windows e2e test failure by @andyzhangx in #820
• fix: upgrade csi-provisioner to v5.0.2 to fix pv deletion stuck issue by @andyzhangx in #824
• test: fix windows test failure2 by @andyzhangx in #822
• test: fix windows 2022 test failure by @andyzhangx in #825
• chore: upgrade golang.org/x/net by @andyzhangx in #816
• cleanup: use one image tag in e2e test by @andyzhangx in #826
• fix: bump mount-utils to treat ENODEV error as corrupted mount by @andyzhangx in #827
• fix: upgrade csi-provisioner to v5.0.2 on v1.15.0 chart by @andyzhangx in #829
• test: skip one flacky windows test by @andyzhangx in #832
• doc: add support doc by @andyzhangx in #833
• fix: delete volume error in archive deletion mode by @andyzhangx in #831

New Contributors

• @pas-n made their first contribution in #815

Full Changelog: v1.15.0...v1.16.0

v1.15.0 release

What's Changed

• doc: cut v1.14.0 release by @andyzhangx in #725
• chore(deps): bump k8s.io/apimachinery from 0.28.5 to 0.28.6 by @dependabot in #731
• chore: upgrade sidecar image versions by @andyzhangx in #729
• chore(deps): bump k8s.io/client-go from 0.28.5 to 0.28.6 by @dependabot in #734
• chore(deps): bump k8s.io/component-base from 0.28.5 to 0.28.6 by @dependabot in #736
• chore(deps): bump k8s.io/mount-utils from 0.29.0 to 0.29.1 by @dependabot in #738
• chore(deps): bump k8s.io/pod-security-admission from 0.28.5 to 0.28.6 by @dependabot in #740
• fix: do not use /var/lib/kubelet, use .Values.linux.kubelet instead by @slaesh in #739
• fix: incorrect kubelet path setting on v1.14 chart config by @andyzhangx in #741
• chore(deps): bump build-image/debian-base from bookworm-v1.0.0 to bookworm-v1.0.1 in /cmd/smbplugin by @dependabot in #742
• doc: add this repo to ArtifactHub by @andyzhangx in #744
• fix: delete volume failure in archive mode when subDir contains / by @andyzhangx in #743
• test: fix github action test failure by @andyzhangx in #748
• fix: change node-driver-registrar image version to 2.10.0 (deploy/v1.14.0 manifests) by @moonek in #745
• chore(deps): bump golangci/golangci-lint-action from 3 to 4 by @dependabot in #749
• cleanup: remove integration test by @andyzhangx in #750
• test: fix goveralls by @andyzhangx in #751
• chore(deps): bump k8s.io/component-base from 0.28.6 to 0.28.7 by @dependabot in #752
• chore(deps): bump k8s.io/pod-security-admission from 0.28.6 to 0.28.7 by @dependabot in #753
• chore(deps): bump k8s.io/mount-utils from 0.29.1 to 0.29.2 by @dependabot in #756
• chore(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #759
• doc: fix kerberos auth doc by @andyzhangx in #760
• chore(deps): bump k8s.io/mount-utils from 0.29.2 to 0.29.3 by @dependabot in #761
• chore(deps): bump k8s.io/client-go from 0.28.7 to 0.28.8 by @dependabot in #763
• chore(deps): bump k8s.io/pod-security-admission from 0.28.7 to 0.28.8 by @dependabot in #764
• chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /cmd/smbplugin by @dependabot in #765
• feat: use new restricted liveness probe endpoint by @andyzhangx in #766
• fix: revert http-endpoint change on windows daemonset by @andyzhangx in #768
• fix: incorrect http endpoint port num in v1.14.0 by @andyzhangx in #769
• fix: CVE-2023-45288, CVE-2024-3177 by @andyzhangx in #771
• chore(deps): bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #770
• chore(deps): bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #774
• test: use env var for smb server configuration by @Phaow in #773
• test: fix stdlib CVE due to golang v1.22.2 by @andyzhangx in #776
• fix: Remove stale archived volume copy before Rename by @mpatlasov in #777
• test: fix storageclass uncleaned by @Phaow in #779
• chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /cmd/smbplugin by @dependabot in #780
• doc: cut v1.15.0 release by @andyzhangx in #778
• fix: windows image 1809 build failure by @andyzhangx in #785
• cleanup: remove v1.15.0 release since windows image build is broken by @andyzhangx in #787
• fix: Remove excessive recursive variable expansions by @mpatlasov in #781
• Update index.yaml - remove 1.15.0 from index.yaml by @RedBlackThunder in #788
• chore: update release-tools to fix spelling error by @andyzhangx in #789
• chore: use go 1.22 in go.mod by @andyzhangx in #791
• fix: shield guard issues by @umagnus in #790
• fix: shield guard issue on csi node by @umagnus in #794
• test: fix trivy action failure by @andyzhangx in #798
• fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #799
• fix: PRISMA-2022-0227 by @andyzhangx in #802
• chore: upgrade sidecar image versions by @andyzhangx in #796
• make image.*.repository variables relative by default by @amarkevich in #797

New Contributors

• @slaesh made their first contribution in #739
• @moonek made their first contribution in #745
• @Phaow made their first contribution in #773
• @mpatlasov made their first contribution in #777
• @RedBlackThunder made their first contribution in #788
• @amarkevich made their first contribution in #797

Full Changelog: v1.14.0...v1.15.0

v1.14.0 release

What's Changed

• doc: cut v1.13.0 release by @andyzhangx in #686
• chore: update bug-report.md gcr to registry.k8s by @fishgrimsby in #689
• chore: upgrade sidecar image versions by @andyzhangx in #685
• test: upgrade golangci/golangci-lint-action to v1.54 by @umagnus in #691
• fix: CVE-2023-5528 by @andyzhangx in #692
• fix: stale smb unmount issue when smb file share is deleted by @andyzhangx in #694
• [chore] Update release tools2 by @andyzhangx in #695
• doc: fix readOnly setting doc by @andyzhangx in #696
• chore: upgrade to k8s 1.28.4 lib by @andyzhangx in #697
• doc: add volume cloning doc by @umagnus in #698
• fix: add VolumeStats cache to avoid massive statfs calls by @andyzhangx in #700
• doc: remove unnecessary quotes by @andyzhangx in #701
• test: fix capz test failure by @andyzhangx in #703
• chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in #704
• chore(deps): bump github/codeql-action from 2 to 3 by @dependabot in #706
• cleanup: gomod by @andyzhangx in #707
• feat: customize kerberos settings by @andyzhangx in #709
• fix: kubelet path in chart config by @andyzhangx in #711
• chore: Update release tools by @andyzhangx in #712
• fix: krb5CacheDirectory mount path issue by @andyzhangx in #714
• fix: customized kerberos path by @andyzhangx in #715
• fix: CVE-2023-48795 by @andyzhangx in #717
• chore(deps): bump k8s.io/apimachinery from 0.28.4 to 0.28.5 by @dependabot in #718
• chore(deps): bump k8s.io/pod-security-admission from 0.28.4 to 0.28.5 by @dependabot in #719
• fix: reduce mount lock to avoid volumeID collision issue by @andyzhangx in #720
• feat: support archiveOnDelete when DeleteVolume by @andyzhangx in #722

New Contributors

• @fishgrimsby made their first contribution in #689

Full Changelog: v1.13.0...v1.14.0

v1.13.0 release

What's Changed

• doc: cut v1.12.0 release by @andyzhangx in #643
• chore: update csi-release-tools by @andyzhangx in #646
• chore: update csi-release-tools by @andyzhangx in #648
• fix: deployment hangs by @davhdavh in #651
• Fix: wrong defaults and defaults not matching stated defaults by @davhdavh in #652
• chore(deps): bump google.golang.org/grpc from 1.51.0 to 1.57.0 by @dependabot in #653
• fixed broken links of testgrid dashboard by @abhijeetgauravm in #654
• chore(deps): bump actions/checkout from 3 to 4 by @dependabot in #658
• fix: CVE-2023-39325 by @andyzhangx in #677
• [fix] reference counting of used volumes on Windows nodes by @vitaliy-leschenko in #676
• chore: upgrade csi-provisioner image version by @andyzhangx in #678
• fix: CVE-2023-3676 and GHSA-m425-mq94-257g by @andyzhangx in #683
• chore: refine delete subDir check by @andyzhangx in #682
• feat: switch to bookworm debian base image by @andyzhangx in #684

New Contributors

• @abhijeetgauravm made their first contribution in #654

Full Changelog: v1.12.0...v1.13.0