v1.27.0

Changes by Kind

Feature

• Add Private Links support (#6274, @robinkb)
• AzureMachine now supports placement in an existing Virtual Machine Scale Set with Flexible orchestration mode through spec.virtualMachineScaleSetID. (#6392, @arsdragonfly)
• Bump CAPI to v1.14.0 (#6398, @mboersma)

Bug or Regression

• Detach ASO agent pool resources during AKS cluster deletion to prevent conflicting child resource deletion requests. (#6447, @arsdragonfly)
• Fix AzureMachinePool remaining marked Ready after a VMSS scale operation fails (e.g. due to capacity constraints), so failed scale-ups are correctly reflected instead of appearing to have succeeded. (#6488, @pujitha24)
• Fix MachinePool scale-down when excess VMSS instances are not ready. (#6479, @mboersma)
• Fix: validate API server LB private IP is unchanged on update for Public and APIServerILB configuration (#6389, @dee077)
• Honor AzureCluster.spec.controlPlaneEndpoint.port when configuring the API server load balancer rule, health probe, and NSG rule. Previously these were always created for port 6443 (or Cluster.spec.clusterNetwork.apiServerPort if set), ignoring the AzureCluster control plane endpoint port. (#6278, @mboersma)
• Honoring the encryptionAtHost field value when creating managed disk. (#6531, @rna-afk)
• Prevent MachinePool rollouts from deleting newly-created replacement instances before their model status initializes. (#6487, @mboersma)

Other (Cleanup or Flake)

• Bump Azure Service Operator to v2.19.0 (#6421, @mboersma)
• Bump CAPI to v1.13.4 and cert-manager to v1.20.3 (#6471, @mboersma)
• Pin google.golang.org/grpc to v1.82.1 to address GHSA-hrxh-6v49-42gf (gRPC-Go xDS RBAC authorization bypass, HTTP/2 Rapid Reset DoS, and server panic — HIGH severity). (#6486, @mboersma)

Dependencies

Added

• cloud.google.com/go/auth: v0.18.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/communication/armcommunication: v1.0.0
• github.com/clipperhouse/displaywidth: v0.10.0
• github.com/clipperhouse/stringish: v0.1.1
• github.com/clipperhouse/uax29/v2: v2.6.0
• github.com/google/s2a-go: v0.1.9
• github.com/googleapis/enterprise-certificate-proxy: v0.3.11
• github.com/googleapis/gax-go/v2: v2.17.0
• go.yaml.in/yaml/v4: v4.0.0-rc.3
• gopkg.in/dnaeon/go-vcr.v4: v4.0.6
• k8s.io/streaming: v0.36.3
• sigs.k8s.io/cluster-api/api: v1.14.0

Changed

• cel.dev/expr: v0.25.1 → v0.25.2
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.22.0 → v1.23.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.14.0 → v1.14.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor: v0.12.0 → v0.13.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth: v1.3.0 → v1.4.0
• github.com/Azure/azure-service-operator/v2: v2.18.0 → v2.19.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.7.2 → v1.8.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.31.0 → v1.33.0
• github.com/coredns/corefile-migration: v1.0.32 → v1.0.34
• github.com/coreos/go-oidc: v2.3.0+incompatible → v2.5.0+incompatible
• github.com/coreos/go-systemd/v22: v22.6.0 → v22.7.0
• github.com/go-logr/logr: v1.4.3 → v1.4.4
• github.com/go-openapi/jsonpointer: v0.22.4 → v0.23.1
• github.com/go-openapi/swag/jsonname: v0.25.4 → v0.26.0
• github.com/go-openapi/testify/v2: v2.0.2 → v2.4.2
• github.com/google/cel-go: v0.27.0 → v0.29.0
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1 → v1.1.0
• github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0 → v2.3.3
• github.com/jackc/pgx/v5: v5.8.0 → v5.9.2
• github.com/mattn/go-runewidth: v0.0.16 → v0.0.19
• github.com/microsoft/go-mssqldb: v1.9.6 → v1.9.8
• github.com/microsoft/kiota-abstractions-go: v1.9.3 → v1.9.4
• github.com/microsoft/kiota-serialization-form-go: v1.1.2 → v1.1.3
• github.com/microsoftgraph/msgraph-sdk-go: v1.96.0 → v1.97.0
• github.com/moby/moby/client: v0.5.0 → v0.5.1
• github.com/olekukonko/errors: v1.1.0 → v1.2.0
• github.com/olekukonko/ll: v0.1.1 → v0.1.6
• github.com/olekukonko/tablewriter: v1.0.9 → v1.1.4
• github.com/onsi/ginkgo/v2: v2.32.0 → v2.32.1
• github.com/pkg/sftp: v1.13.10 → v1.13.11
• github.com/samber/lo: v1.52.0 → v1.53.0
• github.com/sergi/go-diff: v1.2.0 → v1.4.0
• github.com/spiffe/go-spiffe/v2: v2.6.0 → v2.7.0
• github.com/stretchr/testify: v1.11.1 → v1.12.1
• go.etcd.io/etcd/api/v3: v3.6.10 → v3.6.14
• go.etcd.io/etcd/client/pkg/v3: v3.6.10 → v3.6.14
• go.etcd.io/etcd/client/v3: v3.6.10 → v3.6.14
• go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8
• go.opentelemetry.io/contrib/detectors/gcp: v1.42.0 → v1.44.0
• go.uber.org/zap: v1.27.1 → v1.28.0
• go.yaml.in/yaml/v3: v3.0.4 → v3.0.5
• golang.org/x/crypto: v0.53.0 → v0.55.0
• golang.org/x/exp: 8b4c13b → 944ab1f
• golang.org/x/mod: v0.37.0 → v0.40.0
• golang.org/x/net: v0.56.0 → v0.58.0
• golang.org/x/sync: v0.21.0 → v0.22.0
• golang.org/x/sys: v0.46.0 → v0.47.0
• golang.org/x/telemetry: 42602be → a038080
• golang.org/x/term: v0.44.0 → v0.45.0
• golang.org/x/text: v0.38.0 → v0.41.0
• golang.org/x/time: v0.14.0 → v0.15.0
• golang.org/x/tools: v0.45.0 → v0.49.0
• google.golang.org/grpc: v1.81.1 → v1.83.1
• google.golang.org/protobuf: v1.36.11 → f2248ac
• k8s.io/api: v0.35.4 → v0.36.3
• k8s.io/apiextensions-apiserver: v0.35.4 → v0.36.3
• k8s.io/apimachinery: v0.35.4 → v0.36.3
• k8s.io/apiserver: v0.35.4 → v0.36.3
• k8s.io/cli-run...

v1.26.1

Changes by Kind

Bug or Regression

• Detach ASO agent pool resources during AKS cluster deletion to prevent conflicting child resource deletion requests. (#6475, @arsdragonfly)
• Fix AzureMachinePool remaining marked Ready after a VMSS scale operation fails (e.g. due to capacity constraints), so failed scale-ups are correctly reflected instead of appearing to have succeeded. (#6540, @pujitha24)
• Fix MachinePool scale-down when excess VMSS instances are not ready. (#6483, @mboersma)
• Fix: validate API server LB private IP is unchanged on update for Public and APIServerILB configuration (#6463, @dee077)
• Prevent MachinePool rollouts from deleting newly-created replacement instances before their model status initializes. (#6497, @mboersma)

Other (Cleanup or Flake)

• Bump CAPI to v1.13.4 and cert-manager to v1.20.3 (#6474, @mboersma)
• Pin google.golang.org/grpc to v1.82.1 to address GHSA-hrxh-6v49-42gf (gRPC-Go xDS RBAC authorization bypass, HTTP/2 Rapid Reset DoS, and server panic — HIGH severity). (#6505, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.22.0 → v1.23.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.14.0 → v1.14.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor: v0.12.0 → v0.13.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth: v1.3.0 → v1.4.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.7.2 → v1.8.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.31.0 → v1.32.0
• github.com/go-logr/logr: v1.4.3 → v1.4.4
• github.com/google/cel-go: v0.27.0 → v0.29.0
• github.com/onsi/ginkgo/v2: v2.32.0 → v2.32.1
• github.com/onsi/gomega: v1.42.1 → v1.43.0
• github.com/pkg/sftp: v1.13.10 → v1.13.11
• github.com/stretchr/testify: v1.11.1 → v1.12.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.42.0 → v1.43.0
• go.yaml.in/yaml/v3: v3.0.4 → v3.0.5
• golang.org/x/crypto: v0.53.0 → v0.55.0
• golang.org/x/mod: v0.37.0 → v0.40.0
• golang.org/x/net: v0.56.0 → v0.58.0
• golang.org/x/sync: v0.21.0 → v0.22.0
• golang.org/x/sys: v0.46.0 → v0.47.0
• golang.org/x/telemetry: 42602be → a038080
• golang.org/x/term: v0.44.0 → v0.45.0
• golang.org/x/text: v0.38.0 → v0.41.0
• golang.org/x/tools: v0.45.0 → v0.49.0
• google.golang.org/grpc: v1.81.1 → v1.82.1
• sigs.k8s.io/cluster-api/test: v1.13.3 → v1.13.4
• sigs.k8s.io/cluster-api: v1.13.3 → v1.13.4
• sigs.k8s.io/kind: v0.32.0 → v0.33.0

Removed

Nothing has changed.

Details

v1.26.0...v1.26.1

v1.25.2

Changes by Kind

Bug or Regression

• Detach ASO agent pool resources during AKS cluster deletion to prevent conflicting child resource deletion requests. (#6476, @arsdragonfly)
• Fix AzureMachinePool remaining marked Ready after a VMSS scale operation fails (e.g. due to capacity constraints), so failed scale-ups are correctly reflected instead of appearing to have succeeded. (#6539, @pujitha24)
• Fix MachinePool scale-down when excess VMSS instances are not ready. (#6484, @mboersma)
• Fix: validate API server LB private IP is unchanged on update for Public and APIServerILB configuration (#6464, @dee077)
• Prevent MachinePool rollouts from deleting newly-created replacement instances before their model status initializes. (#6498, @mboersma)

Other (Cleanup or Flake)

• Pin google.golang.org/grpc to v1.82.1 to address GHSA-hrxh-6v49-42gf (gRPC-Go xDS RBAC authorization bypass, HTTP/2 Rapid Reset DoS, and server panic — HIGH severity). (#6506, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.22.0 → v1.23.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.14.0 → v1.14.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor: v0.12.0 → v0.13.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth: v1.3.0 → v1.4.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.7.2 → v1.8.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.31.0 → v1.32.0
• github.com/go-logr/logr: v1.4.3 → v1.4.4
• github.com/google/cel-go: v0.26.1 → v0.29.0
• github.com/moby/moby/api: v1.54.2 → v1.55.0
• github.com/moby/moby/client: v0.4.1 → v0.5.0
• github.com/onsi/ginkgo/v2: v2.31.0 → v2.32.1
• github.com/onsi/gomega: v1.42.0 → v1.43.0
• github.com/pkg/sftp: v1.13.10 → v1.13.11
• github.com/stretchr/testify: v1.11.1 → v1.12.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.42.0 → v1.43.0
• go.yaml.in/yaml/v3: v3.0.4 → v3.0.5
• golang.org/x/crypto: v0.53.0 → v0.55.0
• golang.org/x/mod: v0.37.0 → v0.40.0
• golang.org/x/net: v0.55.0 → v0.58.0
• golang.org/x/sync: v0.21.0 → v0.22.0
• golang.org/x/sys: v0.46.0 → v0.47.0
• golang.org/x/telemetry: 42602be → a038080
• golang.org/x/term: v0.44.0 → v0.45.0
• golang.org/x/text: v0.38.0 → v0.41.0
• golang.org/x/tools: v0.45.0 → v0.49.0
• google.golang.org/grpc: v1.81.1 → v1.82.1
• sigs.k8s.io/cluster-api/test: v1.13.3 → v1.13.4
• sigs.k8s.io/cluster-api: v1.13.3 → v1.13.4
• sigs.k8s.io/kind: v0.32.0 → v0.33.0

Removed

Nothing has changed.

Details

v1.25.1...v1.25.2

v1.24.3

Changes by Kind

Bug or Regression

• Detach ASO agent pool resources during AKS cluster deletion to prevent conflicting child resource deletion requests. (#6477, @arsdragonfly)
• Fix AzureMachinePool remaining marked Ready after a VMSS scale operation fails (e.g. due to capacity constraints), so failed scale-ups are correctly reflected instead of appearing to have succeeded. (#6541, @pujitha24)
• Fix MachinePool scale-down when excess VMSS instances are not ready. (#6485, @mboersma)
• Fix: validate API server LB private IP is unchanged on update for Public and APIServerILB configuration (#6465, @dee077)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armdeployments: v1.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources/v3: v3.0.1

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.21.1 → v1.23.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.2 → v0.4.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.13.1 → v1.14.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.1.0 → v3.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor: v0.11.0 → v0.13.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth: v1.3.0 → v1.4.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.6.0 → v1.8.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.31.0 → v1.32.0
• github.com/cncf/xds/go: ee656c7 → dba9d58
• github.com/envoyproxy/go-control-plane/envoy: v1.36.0 → v1.37.0
• github.com/envoyproxy/protoc-gen-validate: v1.3.0 → v1.3.3
• github.com/go-jose/go-jose/v4: v4.1.3 → v4.1.4
• github.com/go-logr/logr: v1.4.3 → v1.4.4
• github.com/golang-jwt/jwt/v5: v5.3.0 → v5.3.1
• github.com/google/cel-go: v0.26.1 → v0.29.0
• github.com/moby/moby/api: v1.54.2 → v1.55.0
• github.com/moby/moby/client: v0.4.1 → v0.5.0
• github.com/onsi/ginkgo/v2: v2.28.3 → v2.32.1
• github.com/onsi/gomega: v1.40.0 → v1.43.0
• github.com/pkg/sftp: v1.13.10 → v1.13.11
• github.com/stretchr/testify: v1.11.1 → v1.12.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.39.0 → v1.43.0
• go.yaml.in/yaml/v3: v3.0.4 → v3.0.5
• golang.org/x/crypto: v0.52.0 → v0.55.0
• golang.org/x/mod: v0.35.0 → v0.40.0
• golang.org/x/net: v0.55.0 → v0.58.0
• golang.org/x/sync: v0.20.0 → v0.22.0
• golang.org/x/sys: v0.45.0 → v0.47.0
• golang.org/x/telemetry: be6f6cb → a038080
• golang.org/x/term: v0.43.0 → v0.45.0
• golang.org/x/text: v0.37.0 → v0.41.0
• golang.org/x/tools: v0.44.0 → v0.49.0
• google.golang.org/genproto/googleapis/api: 9d38bb4 → afd174a
• google.golang.org/genproto/googleapis/rpc: 9d38bb4 → afd174a
• google.golang.org/grpc: v1.80.0 → v1.82.1
• sigs.k8s.io/cluster-api/test: v1.13.3 → v1.13.4
• sigs.k8s.io/cluster-api: v1.13.3 → v1.13.4
• sigs.k8s.io/kind: v0.32.0 → v0.33.0

Removed

Nothing has changed.

Details

v1.24.2...v1.24.3

v1.26.0

Upgrading

Please note that upgrading CAPZ should be done one minor release at a time. Skipping ahead by more than one minor (for example, from v1.24.x to v1.26.0) is not tested and may cause problems.

See Upgrading for more details.

Changes by Kind

Other (Cleanup or Flake)

• Managed clusters using enablePreviewFeatures now use the containerservice.azure.com/v20251002preview ASO API version instead of the soon-to-be-retired v1api20240402preview. If you patch preview fields, note that the per-agent-pool enableCustomCATrust field is gone; use the cluster-level securityProfile.customCATrustCertificates instead. (#6427, @mboersma)
• Bump Azure Service Operator to v2.18.0 (#6390, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• filippo.io/edwards25519: v1.1.0 → v1.1.1
• github.com/Azure/azure-service-operator/v2: v2.17.0 → v2.18.0
• github.com/go-openapi/jsonpointer: v0.22.3 → v0.22.4
• github.com/go-openapi/swag/jsonname: v0.25.1 → v0.25.4
• github.com/google/cel-go: v0.26.1 → v0.27.0
• github.com/jackc/pgx/v5: v5.7.6 → v5.8.0
• github.com/microsoft/go-mssqldb: v1.9.4 → v1.9.6
• github.com/microsoftgraph/msgraph-sdk-go: v1.90.0 → v1.96.0
• github.com/moby/moby/api: v1.54.2 → v1.55.0
• github.com/moby/moby/client: v0.4.1 → v0.5.0
• github.com/onsi/ginkgo/v2: v2.31.0 → v2.32.0
• github.com/onsi/gomega: v1.42.0 → v1.42.1
• golang.org/x/net: v0.55.0 → v0.56.0

Removed

Nothing has changed.

Details

v1.25.0...v1.26.0

v1.25.1

Upgrading

Please note that upgrading CAPZ should be done one minor release at a time. Skipping ahead by more than one minor (for example, from v1.23.x to v1.25.1) is not tested and may cause problems.

See Upgrading for more details.

Changes by Kind

Feature

• Add support for zone-redundant load balancers. Users can now configure availability zones on load balancers (APIServerLB, NodeOutboundLB, ControlPlaneOutboundLB) to enable zone-redundant configurations for high availability across multiple availability zones. (#5944, @bryan-cox)
• Feat: SkipMachinePoolModelReconciliation (#6325, @jackfrancis)

Bug or Regression

• Fix: default control plane subnet to share the node route table (#6358, @willie-yao)
• Fixes an issue where capz-manager-role reconciles continuously if managed by an installer which uses server-side apply. (#6346, @mdbooth)
• Register Windows nodes with uninitialized cloud taint (#6293, @mboersma)
• Strip OpenAPI description fields from vendored ASO CRDs (#6281, @mboersma)

Other (Cleanup or Flake)

• Let ASO v2.17.0 install and manage its own CRDs (#6304, @mboersma)
• Bump CAPI to v1.13.3 (#6395, @mboersma)
• Disable VM Bootstrap Extension by default (#6316, @willie-yao)
• Harden GitHub Actions workflows by disabling persisted checkout credentials and reducing unnecessary workflow permissions. (#6331, @PrashantR30)
• Make the apiversion-upgrade management cluster HA (#6329, @mboersma)
• Remove stale CRDs and add missing ASO managed kinds to PROJECT (#6285, @mboersma)
• Switch default Windows image to windows-2022 (#6282, @mboersma)
• Test/e2e: make collectPodLogs log dump best-effort (#6315, @mboersma)
• Extract shared ReconcileAll/DeleteAll helpers in the azure package to eliminate duplicated reconcile/delete loop boilerplate across eight services. (#6324, @bryan-cox)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/operationalinsights/armoperationalinsights: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/redisenterprise/armredisenterprise: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armdeployments: v1.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources/v3: v3.0.1
• github.com/go-openapi/testify/v2: v2.0.2
• go.opentelemetry.io/otel/metric/x: v0.66.0

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.21.1 → v1.22.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.2 → v0.4.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.13.1 → v1.14.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.1.0 → v3.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor: v0.11.0 → v0.12.0
• github.com/Azure/azure-service-operator/v2: v2.16.0 → v2.17.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.6.0 → v1.7.2
• github.com/cncf/xds/go: ee656c7 → dba9d58
• github.com/coredns/corefile-migration: v1.0.31 → v1.0.32
• github.com/envoyproxy/go-control-plane/envoy: v1.36.0 → v1.37.0
• github.com/envoyproxy/protoc-gen-validate: v1.3.0 → v1.3.3
• github.com/go-jose/go-jose/v4: v4.1.3 → v4.1.4
• github.com/go-openapi/jsonpointer: v0.22.1 → v0.22.3
• github.com/golang-jwt/jwt/v5: v5.3.0 → v5.3.1
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.28.0 → v2.29.0
• github.com/microsoft/go-mssqldb: v1.9.3 → v1.9.4
• github.com/microsoftgraph/msgraph-sdk-go: v1.87.0 → v1.90.0
• github.com/onsi/ginkgo/v2: v2.28.3 → v2.31.0
• github.com/onsi/gomega: v1.40.0 → v1.42.0
• go.opentelemetry.io/contrib/detectors/gcp: v1.39.0 → v1.42.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.65.0 → v0.69.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.65.0 → v0.69.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.43.0 → v1.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.43.0 → v1.44.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.65.0 → v0.66.0
• go.opentelemetry.io/otel/metric: v1.43.0 → v1.44.0
• go.opentelemetry.io/otel/sdk/metric: v1.43.0 → v1.44.0
• go.opentelemetry.io/otel/sdk: v1.43.0 → v1.44.0
• go.opentelemetry.io/otel/trace: v1.43.0 → v1.44.0
• go.opentelemetry.io/otel: v1.43.0 → v1.44.0
• golang.org/x/crypto: v0.50.0 → v0.53.0
• golang.org/x/mod: v0.35.0 → v0.37.0
• golang.org/x/net: v0.53.0 → v0.55.0
• golang.org/x/sync: v0.20.0 → v0.21.0
• golang.org/x/sys: v0.43.0 → v0.46.0
• golang.org/x/telemetry: be6f6cb → 42602be
• golang.org/x/term: v0.42.0 → v0.44.0
• golang.org/x/text: v0.36.0 → v0.38.0
• golang.org/x/tools: v0.44.0 → v0.45.0
• google.golang.org/genproto/googleapis/api: 9d38bb4 → 3dc84a4
• google.golang.org/genproto/googleapis/rpc: 9d38bb4 → 3dc84a4
• google.golang.org/grpc: v1.80.0 → v1.81.1
• sigs.k8s.io/cluster-api/test: v1.13.1 → v1.13.3
• sigs.k8s.io/cluster-api: v1.13.1 → v1.13.3
• sigs.k8s.io/kind: v0.31.0 → v0.32.0

Removed

Nothing has changed.

Details

v1.24.0...v1.25.1

v1.24.2

Changes by Kind

Bug or Regression

• Fix: default control plane subnet to share the node route table (#6365, @willie-yao)

Other (Cleanup or Flake)

• Harden GitHub Actions workflows by disabling persisted checkout credentials and reducing unnecessary workflow permissions. (#6335, @PrashantR30)
• Bump CAPI to v1.13.3 (#6411, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• golang.org/x/crypto: v0.50.0 → v0.52.0
• golang.org/x/net: v0.53.0 → v0.55.0
• golang.org/x/sys: v0.43.0 → v0.45.0
• golang.org/x/term: v0.42.0 → v0.43.0
• golang.org/x/text: v0.36.0 → v0.37.0
• sigs.k8s.io/cluster-api/test: v1.13.2 → v1.13.3
• sigs.k8s.io/cluster-api: v1.13.2 → v1.13.3
• sigs.k8s.io/kind: v0.31.0 → v0.32.0

Removed

Nothing has changed.

Details

v1.24.1...v1.24.2

v1.23.3

Changes by Kind

Bug or Regression

• Fix: default control plane subnet to share the node route table (#6364, @willie-yao)

Other (Cleanup or Flake)

• Bump CAPI to v1.12.9 (#6404, @mboersma)
• Bump golang.org/x/crypto from 0.50.0 to 0.52.0, fixing 13 CVEs including CVE-2026-46595 (authorization bypass) and CVE-2026-39829 (CPU exhaustion). (#6340, @RadekCap)
• Harden GitHub Actions workflows by disabling persisted checkout credentials and reducing unnecessary workflow permissions. (#6336, @PrashantR30)

Dependencies

Added

Nothing has changed.

Changed

• golang.org/x/crypto: v0.50.0 → v0.52.0
• golang.org/x/mod: v0.34.0 → v0.35.0
• golang.org/x/net: v0.53.0 → v0.55.0
• golang.org/x/sys: v0.43.0 → v0.45.0
• golang.org/x/telemetry: 579e4da → be6f6cb
• golang.org/x/term: v0.42.0 → v0.43.0
• golang.org/x/text: v0.36.0 → v0.37.0
• golang.org/x/tools: v0.43.0 → v0.44.0
• sigs.k8s.io/cluster-api/test: v1.12.8 → v1.12.9
• sigs.k8s.io/cluster-api: v1.12.8 → v1.12.9

Removed

Nothing has changed.

Details

v1.23.2...v1.23.3

v1.24.1

Changes by Kind

Other (Cleanup or Flake)

• Bump Azure Service Operator from v2.16.0 to v2.16.1 (#6314, @mboersma)
• Bump CAPI to v1.13.2 (#6311, @mboersma)

Bug or Regression

• Configure service-account-issuer on workload cluster apiserver in cluster templates to enable workload identity (#6290, @andyzhangx)
• Register Windows nodes with uninitialized cloud taint (#6294, @mboersma)

Failing Tests

• Test/e2e: make collectPodLogs log dump best-effort (#6317, @mboersma)

Dependencies

Added

• github.com/go-openapi/testify/v2: v2.0.2

Changed

• github.com/Azure/azure-service-operator/v2: v2.16.0 → v2.16.1
• github.com/coredns/corefile-migration: v1.0.31 → v1.0.32
• github.com/go-openapi/jsonpointer: v0.22.1 → v0.22.3
• github.com/microsoft/go-mssqldb: v1.9.3 → v1.9.4
• github.com/microsoftgraph/msgraph-sdk-go: v1.87.0 → v1.90.0
• sigs.k8s.io/cluster-api/test: v1.13.1 → v1.13.2
• sigs.k8s.io/cluster-api: v1.13.1 → v1.13.2

Removed

Nothing has changed.

Details

v1.24.0...v1.24.1

v1.23.2

Changes by Kind

Other (Cleanup or Flake)

• Bump CAPI to v1.12.8 (#6310, @mboersma)

Bug or Regression

• Configure service-account-issuer on workload cluster apiserver in cluster templates to enable workload identity (#6291, @andyzhangx)
• Register Windows nodes with uninitialized cloud taint (#6295, @mboersma)

Failing Tests

• Test/e2e: make collectPodLogs log dump best-effort (#6318, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/corefile-migration: v1.0.31 → v1.0.32
• github.com/moby/spdystream: v0.5.0 → v0.5.1
• golang.org/x/crypto: v0.49.0 → v0.50.0
• golang.org/x/mod: v0.33.0 → v0.34.0
• golang.org/x/net: v0.52.0 → v0.53.0
• golang.org/x/sys: v0.42.0 → v0.43.0
• golang.org/x/telemetry: e7419c6 → 579e4da
• golang.org/x/term: v0.41.0 → v0.42.0
• golang.org/x/text: v0.35.0 → v0.36.0
• golang.org/x/tools: v0.42.0 → v0.43.0
• sigs.k8s.io/cluster-api/test: v1.12.7 → v1.12.8
• sigs.k8s.io/cluster-api: v1.12.7 → v1.12.8

Removed

Nothing has changed.

Details

v1.23.1...v1.23.2