v0.20260619.0

What's Changed

Changes

• fix: use one big vnet and attach AKS clusters to it to avoid creating bastion multiple times by @awesomenix in #8646
• refactor(linux): only start secure-tls-bootstrap.service via kubelet WantedBy= by @cameronmeissner in #8632
• fix: disable APT phased updates during Ubuntu VHD build by @djsly in #8664
• feat(e2e): isolate Kubeclient rate limiters to prevent test flakes by @timmy-wright in #8677
• fix: create per cluster api server dns zone to avoid circular dependency by @awesomenix in #8673
• fix: update windows base versions for 6B by @timmy-wright in #8668
• fix(e2): e2e fixes by @timmy-wright in #8678
• fix: skip reserved CIDR while allocating subnet by @awesomenix in #8681
• fix: dont t create private zone or api server in network isolated mode by @awesomenix in #8684
• fix: add prewarm containerd to nodecontroller boothook by @lilypan26 in #8687
• chore: add runzhen, karenychen, xuexu6666 as code owners by @ganeshkumarashok in #8688
• feat(linux): emit per-step CSE timing events for GPU driver install by @ganeshkumarashok in #8679
• test(e2e): enforce rebuild-revision parity across GPU OS variants by @surajssd in #8660
• docs: instruct contributors to open PRs from the repo, not a fork by @ganeshkumarashok in #8689
• test: (scriptless) Enable scriptless phase 3 in AB e2es by @lilypan26 in #8453
• fix: if niether nbc cmd or aks node config exists, exit gracefully by @awesomenix in #8703
• fix: make e2e recoverable if there are errors during the test by @awesomenix in #8706
• fix: fix artifact arm64 params, anc hotfix to handle boothook by @awesomenix in #8710
• feat: add secondary nic count in NBC and NetworkConfig by @jumpinthefire in #8697
• fix: vhdbuilder phase 2.5 should still use nbccsecmd hack by @lilypan26 in #8712
• fix(linux): allow secondary nics to be configured on boot by @jumpinthefire in #8642
• fix(acl): bump marketplace image to 3.20260602.01 by @aadhar-agarwal in #8669
• fix(e2e): harden localdns host plugin e2es by @jingwenw15 in #8649
• fix: check if any node exists and cleanup nsg resources if in RG by @awesomenix in #8718
• fix: network isolated cluster incorrect credential provider config for soverign clouds by @fseldow in #8709
• fix: dont use hack stuff for ANC hotfix test by @awesomenix in #8723
• test(e2e): extend Azl3 and ACL GPU e2e scenarios to cover NCA10 by @miz060 in #8716
• test: add DISABLE_SCRIPTLESS variable for local e2e testing by @lilypan26 in #8729
• fix: network isolated cluster oras login should use acr auth scope by @fseldow in #8719
• test(e2e): add Test_Ubuntu2004Gen2FIPS E2E scenario by @cameronmeissner in #8737

VHD Component Updates

• feat(linux): refactor aks-secure-tls-bootstrap-client installation to use PMC/MCR and bump to v1.1.4-1 by @cameronmeissner in #8618
• chore(deps): update windowsbase (patch) by @renovate[bot] in #8665
• chore(deps): update runc-containerd-minor to v2.3.1-ubuntu24.04u2 by @renovate[bot] in #8652
• chore(deps): update runc-containerd-ca_watcher (patch) by @renovate[bot] in #8683
• chore(deps): update dependency trivy to v0.70.0-3.azl3 by @renovate[bot] in #8645
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #8663
• feat(gpu): add NVIDIA GRID v20 driver support for RTX PRO 6000 BSE v6 SKUs by @ganeshkumarashok in #8666
• chore(deps): update dependency aquasecurity/trivy to v0.69.3 by @renovate[bot] in #8330
• chore(deps): update windowscached to v0.12.1-12 by @renovate[bot] in #8695
• feat: upgrade azurefile-csi-driver image to v1.35.4 by @andyzhangx in #8721
• chore(deps): update dependency trivy to v0.70.0-ubuntu22.04u3 by @renovate[bot] in #8693
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #8600
• chore(deps): update runc-containerd-ca_watcher (patch) by @renovate[bot] in #8714
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #8699
• chore(deps): update containernetworking/cilium-log-collector docker tag to v0.0.2 by @renovate[bot] in #8667
• chore: upgrade Azure Blob CSI driver image versions by @andyzhangx in #8724
• feat(dra): update component.json by @runzhen in #8727
• chore: add cilium 1.19 to components.json by @camrynl in #8728
• fix: revert runc to 1.4.1 for ubuntu 2004 by @zachary-bailey in #8741
• fix: resolve containerd CVEs by @zachary-bailey in #8742

New Contributors

• @jumpinthefire made their first contribution in #8697

Full Changelog: v0.20260608.1...v0.20260619.0