Skip to content

[cherry-pick v20260113] fix(security): bump Go to 1.25.10 and golang.org/x/net to v0.55.0#8574

Open
djsly wants to merge 1 commit into
official/v20260113from
djsly/icm-796913379-cve-go-1.25.10-v20260113
Open

[cherry-pick v20260113] fix(security): bump Go to 1.25.10 and golang.org/x/net to v0.55.0#8574
djsly wants to merge 1 commit into
official/v20260113from
djsly/icm-796913379-cve-go-1.25.10-v20260113

Conversation

@djsly
Copy link
Copy Markdown
Collaborator

@djsly djsly commented May 22, 2026

Summary

Cherry-pick of #8551 to official/vv20260113.

Bumps the Go toolchain and golang.org/x/net to address upstream CVEs:

Vulnerability CVE Component Fixed by
net/mail DoS via crafted addresses CVE-2026-39820 net/mail (stdlib) Go 1.25.10
cmd/go pack subcommand directory traversal CVE-2026-39817 cmd/go (stdlib) Go 1.25.10
HTTP/2 + IPv6 host parsing fixes (various, see x/net release notes) golang.org/x/net v0.55.0

Why bump to Go 1.25 (and not a 1.24.x patch)

Go 1.24 reached EOL in February 2026 and does NOT receive security backports. go1.25.10 is the only release stream that contains these fixes.

golang.org/x/net v0.51.0+ also requires go 1.25.0 in its own go.mod, so the Go bump is required regardless.

Verification

  • go mod tidy succeeds for every module in the branch.
  • go build ./... clean across every module.
  • PR CI must pull go 1.25 runners.

Release plan

Once merged, two tags are pushed off the resulting commit:

  • v0.v20260113.<N+1> (AgentBaker module)
  • aks-node-controller/v0.v20260113.<N+1> (aks-node-controller submodule)

🤖 Generated with GitHub Copilot CLI

@djsly
fix(security): bump Go to 1.25.10 and golang.org/x/net to v0.55.0
11a9f7d 
Backport of #8551.

Fixes CVE-2026-39820 and CVE-2026-39817.
Addresses IcM 796913379.
Moves off Go 1.24 EOL.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings May 22, 2026 17:40
@djsly djsly mentioned this pull request May 22, 2026
Closed
3 tasks
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 22, 2026

Changes cached containers or packages on windows VHDs

Please get a Windows SIG member to approve.

The following dif file shows any additions or deletions from what will be cached on windows VHDs organised by VHD type.

  • Additions are new things cached.
  • Deletions are things no longer cached.
diff --git a/vhd_files/2022-containerd-gen2.txt b/vhd_files/2022-containerd-gen2.txt
index d077754..e827147 100644
--- a/vhd_files/2022-containerd-gen2.txt
+++ b/vhd_files/2022-containerd-gen2.txt
@@ -1 +0,0 @@
-c:\aks-tools\oras\: https://github.com/oras-project/oras/releases/download/v1.3.0/oras_1.3.0_windows_amd64.zip
@@ -4 +3 @@ c:\akse-cache\: https://packages.aks.azure.com/ccgakvplugin/v1.1.5/binaries/wind
-c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.1.2/windows-amd64.zip
+c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.0.1/windows-amd64.zip
@@ -13,4 +12,4 @@ c:\akse-cache\containerd\: https://packages.aks.azure.com/containerd/windows/v2.
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.15/binaries/azure-acr-credential-provider-windows-amd64-v1.30.15.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.9/binaries/azure-acr-credential-provider-windows-amd64-v1.31.9.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.8/binaries/azure-acr-credential-provider-windows-amd64-v1.32.8.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.3/binaries/azure-acr-credential-provider-windows-amd64-v1.33.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.10/binaries/azure-acr-credential-provider-windows-amd64-v1.30.10.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.4/binaries/azure-acr-credential-provider-windows-amd64-v1.31.4.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.3/binaries/azure-acr-credential-provider-windows-amd64-v1.32.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.2/binaries/azure-acr-credential-provider-windows-amd64-v1.33.2.tar.gz
@@ -21,0 +21,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.14/windowszip/v1.29.14-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.15/windowszip/v1.29.15-1int.zip
@@ -23,0 +25,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.13/windowszip/v1.30.13-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.14/windowszip/v1.30.14-1int.zip
@@ -26,6 +29,6 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.31.14/windo
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.11/windowszip/v1.32.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.12/windowszip/v1.32.12-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.10/windowszip/v1.33.10-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.11/windowszip/v1.33.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.4/windowszip/v1.34.4-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.7/windowszip/v1.34.7-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.10/windowszip/v1.32.10-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.9/windowszip/v1.32.9-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.5/windowszip/v1.33.5-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.6/windowszip/v1.33.6-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.0/windowszip/v1.34.0-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.1/windowszip/v1.34.1-1int.zip
@@ -44 +46,0 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\14
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1491587726=1
@@ -69 +70,0 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\36
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\3658215055=1
@@ -76 +76,0 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\41
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\4173449358=1
@@ -105,8 +105,12 @@ HKLM:\SYSTEM\CurrentControlSet\Services\VfpExt\Parameters\VfpNotReuseTcpOneWayFl
-mcr.microsoft.com/containernetworking/azure-cni:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.8.6-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cns:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.8.6-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.5.44
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.32
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.9-0
+mcr.microsoft.com/containernetworking/azure-cns:v1.5.49
+mcr.microsoft.com/containernetworking/azure-cns:v1.6.33
+mcr.microsoft.com/containernetworking/azure-cns:v1.7.9-0
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.12-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.9-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.8-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.3-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc
@@ -115,8 +119,6 @@ mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.7.2
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.34.3-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.10-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.5-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.2-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.32.11-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.32.9-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.0
@@ -124 +126 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.15.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.16.0
+mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.16.0
@@ -126 +127,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.17.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.18.0
@@ -128,3 +129,3 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.4
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.11-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.8-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.35.3-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.3-windows-hpc-1
@@ -133,2 +134,2 @@ mcr.microsoft.com/windows/nanoserver:ltsc2022
-mcr.microsoft.com/windows/servercore:10.0.20348.5020
-mcr.microsoft.com/windows/servercore:10.0.20348.5139
+mcr.microsoft.com/windows/servercore:10.0.20348.4405
+mcr.microsoft.com/windows/servercore:10.0.20348.4529
@@ -137 +138 @@ mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2022
-Windows 2022-containerd-gen2 base version: 20348.5139.260507
+Windows 2022-containerd-gen2 base version: 20348.4529.251205
diff --git a/vhd_files/2022-containerd.txt b/vhd_files/2022-containerd.txt
index 9fc5424..5f892d4 100644
--- a/vhd_files/2022-containerd.txt
+++ b/vhd_files/2022-containerd.txt
@@ -1 +0,0 @@
-c:\aks-tools\oras\: https://github.com/oras-project/oras/releases/download/v1.3.0/oras_1.3.0_windows_amd64.zip
@@ -4 +3 @@ c:\akse-cache\: https://packages.aks.azure.com/ccgakvplugin/v1.1.5/binaries/wind
-c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.1.2/windows-amd64.zip
+c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.0.1/windows-amd64.zip
@@ -13,4 +12,4 @@ c:\akse-cache\containerd\: https://packages.aks.azure.com/containerd/windows/v2.
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.15/binaries/azure-acr-credential-provider-windows-amd64-v1.30.15.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.9/binaries/azure-acr-credential-provider-windows-amd64-v1.31.9.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.8/binaries/azure-acr-credential-provider-windows-amd64-v1.32.8.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.3/binaries/azure-acr-credential-provider-windows-amd64-v1.33.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.10/binaries/azure-acr-credential-provider-windows-amd64-v1.30.10.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.4/binaries/azure-acr-credential-provider-windows-amd64-v1.31.4.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.3/binaries/azure-acr-credential-provider-windows-amd64-v1.32.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.2/binaries/azure-acr-credential-provider-windows-amd64-v1.33.2.tar.gz
@@ -21,0 +21,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.14/windowszip/v1.29.14-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.15/windowszip/v1.29.15-1int.zip
@@ -23,0 +25,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.13/windowszip/v1.30.13-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.14/windowszip/v1.30.14-1int.zip
@@ -26,6 +29,6 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.31.14/windo
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.11/windowszip/v1.32.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.12/windowszip/v1.32.12-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.10/windowszip/v1.33.10-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.11/windowszip/v1.33.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.4/windowszip/v1.34.4-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.7/windowszip/v1.34.7-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.10/windowszip/v1.32.10-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.9/windowszip/v1.32.9-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.5/windowszip/v1.33.5-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.6/windowszip/v1.33.6-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.0/windowszip/v1.34.0-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.1/windowszip/v1.34.1-1int.zip
@@ -44 +46,0 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\14
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1491587726=1
@@ -69 +70,0 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\36
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\3658215055=1
@@ -76 +76,0 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\41
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\4173449358=1
@@ -105,8 +105,12 @@ HKLM:\SYSTEM\CurrentControlSet\Services\VfpExt\Parameters\VfpNotReuseTcpOneWayFl
-mcr.microsoft.com/containernetworking/azure-cni:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.8.6-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cns:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.8.6-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.5.44
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.32
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.9-0
+mcr.microsoft.com/containernetworking/azure-cns:v1.5.49
+mcr.microsoft.com/containernetworking/azure-cns:v1.6.33
+mcr.microsoft.com/containernetworking/azure-cns:v1.7.9-0
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.12-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.9-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.8-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.3-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc
@@ -115,8 +119,6 @@ mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.7.2
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.34.3-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.10-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.5-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.2-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.32.11-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.32.9-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.0
@@ -124 +126 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.15.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.16.0
+mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.16.0
@@ -126 +127,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.17.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.18.0
@@ -128,3 +129,3 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.4
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.11-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.8-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.35.3-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.3-windows-hpc-1
@@ -133,2 +134,2 @@ mcr.microsoft.com/windows/nanoserver:ltsc2022
-mcr.microsoft.com/windows/servercore:10.0.20348.5020
-mcr.microsoft.com/windows/servercore:10.0.20348.5139
+mcr.microsoft.com/windows/servercore:10.0.20348.4405
+mcr.microsoft.com/windows/servercore:10.0.20348.4529
@@ -137 +138 @@ mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2022
-Windows 2022-containerd base version: 20348.5139.260507
+Windows 2022-containerd base version: 20348.4529.251205
diff --git a/vhd_files/2025-gen2.txt b/vhd_files/2025-gen2.txt
index ca4841d..0282875 100644
--- a/vhd_files/2025-gen2.txt
+++ b/vhd_files/2025-gen2.txt
@@ -1 +0,0 @@
-c:\aks-tools\oras\: https://github.com/oras-project/oras/releases/download/v1.3.0/oras_1.3.0_windows_amd64.zip
@@ -4 +3 @@ c:\akse-cache\: https://packages.aks.azure.com/ccgakvplugin/v1.1.5/binaries/wind
-c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.1.2/windows-amd64.zip
+c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.0.1/windows-amd64.zip
@@ -10,4 +9,4 @@ c:\akse-cache\containerd\: https://packages.aks.azure.com/containerd/windows/v2.
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.15/binaries/azure-acr-credential-provider-windows-amd64-v1.30.15.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.9/binaries/azure-acr-credential-provider-windows-amd64-v1.31.9.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.8/binaries/azure-acr-credential-provider-windows-amd64-v1.32.8.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.3/binaries/azure-acr-credential-provider-windows-amd64-v1.33.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.10/binaries/azure-acr-credential-provider-windows-amd64-v1.30.10.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.4/binaries/azure-acr-credential-provider-windows-amd64-v1.31.4.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.3/binaries/azure-acr-credential-provider-windows-amd64-v1.32.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.2/binaries/azure-acr-credential-provider-windows-amd64-v1.33.2.tar.gz
@@ -15 +13,0 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
-c:\akse-cache\wcn\: mcr.microsoft.com/wcn/package:1.7.0-cpu-arch
@@ -19,0 +18,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.14/windowszip/v1.29.14-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.15/windowszip/v1.29.15-1int.zip
@@ -21,0 +22,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.13/windowszip/v1.30.13-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.14/windowszip/v1.30.14-1int.zip
@@ -24,6 +26,6 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.31.14/windo
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.11/windowszip/v1.32.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.12/windowszip/v1.32.12-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.10/windowszip/v1.33.10-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.11/windowszip/v1.33.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.4/windowszip/v1.34.4-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.7/windowszip/v1.34.7-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.10/windowszip/v1.32.10-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.9/windowszip/v1.32.9-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.5/windowszip/v1.33.5-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.6/windowszip/v1.33.6-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.0/windowszip/v1.34.0-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.1/windowszip/v1.34.1-1int.zip
@@ -32,2 +33,0 @@ c:\akse-cache\win-vnet-cni\: https://packages.aks.azure.com/azure-cni/v1.6.21/bi
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1451608719=1
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1861198479=1
@@ -35,8 +35,12 @@ HKLM:\SYSTEM\CurrentControlSet\Services\hns\State\EnableCompartmentNamespace=1
-mcr.microsoft.com/containernetworking/azure-cni:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.8.6-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cns:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.8.6-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.5.44
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.32
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.9-0
+mcr.microsoft.com/containernetworking/azure-cns:v1.5.49
+mcr.microsoft.com/containernetworking/azure-cns:v1.6.33
+mcr.microsoft.com/containernetworking/azure-cns:v1.7.9-0
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.12-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.9-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.8-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.3-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc
@@ -45,8 +49,6 @@ mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.7.2
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.34.3-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.10-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.5-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.2-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.32.11-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.32.9-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.0
@@ -54 +56 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.15.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.16.0
+mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.16.0
@@ -56 +57,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.17.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.18.0
@@ -58,3 +59,3 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.4
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.11-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.8-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.35.3-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.3-windows-hpc-1
@@ -64,4 +65,4 @@ mcr.microsoft.com/windows/nanoserver:ltsc2025
-mcr.microsoft.com/windows/servercore:10.0.20348.5020
-mcr.microsoft.com/windows/servercore:10.0.20348.5139
-mcr.microsoft.com/windows/servercore:10.0.26100.32690
-mcr.microsoft.com/windows/servercore:10.0.26100.32860
+mcr.microsoft.com/windows/servercore:10.0.20348.4405
+mcr.microsoft.com/windows/servercore:10.0.20348.4529
+mcr.microsoft.com/windows/servercore:10.0.26100.7171
+mcr.microsoft.com/windows/servercore:10.0.26100.7462
@@ -71 +72 @@ mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2025
-Windows 2025-gen2 base version: 26100.32860.260510
+Windows 2025-gen2 base version: 26100.7462.251206
diff --git a/vhd_files/2025.txt b/vhd_files/2025.txt
index f184f01..1375069 100644
--- a/vhd_files/2025.txt
+++ b/vhd_files/2025.txt
@@ -1 +0,0 @@
-c:\aks-tools\oras\: https://github.com/oras-project/oras/releases/download/v1.3.0/oras_1.3.0_windows_amd64.zip
@@ -4 +3 @@ c:\akse-cache\: https://packages.aks.azure.com/ccgakvplugin/v1.1.5/binaries/wind
-c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.1.2/windows-amd64.zip
+c:\akse-cache\aks-secure-tls-bootstrap-client\: https://github.com/Azure/aks-secure-tls-bootstrap/releases/download/client/v1.0.1/windows-amd64.zip
@@ -10,4 +9,4 @@ c:\akse-cache\containerd\: https://packages.aks.azure.com/containerd/windows/v2.
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.15/binaries/azure-acr-credential-provider-windows-amd64-v1.30.15.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.9/binaries/azure-acr-credential-provider-windows-amd64-v1.31.9.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.8/binaries/azure-acr-credential-provider-windows-amd64-v1.32.8.tar.gz
-c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.3/binaries/azure-acr-credential-provider-windows-amd64-v1.33.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.30.10/binaries/azure-acr-credential-provider-windows-amd64-v1.30.10.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.31.4/binaries/azure-acr-credential-provider-windows-amd64-v1.31.4.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.32.3/binaries/azure-acr-credential-provider-windows-amd64-v1.32.3.tar.gz
+c:\akse-cache\credential-provider\: https://packages.aks.azure.com/cloud-provider-azure/v1.33.2/binaries/azure-acr-credential-provider-windows-amd64-v1.33.2.tar.gz
@@ -15 +13,0 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
-c:\akse-cache\wcn\: mcr.microsoft.com/wcn/package:1.7.0-cpu-arch
@@ -19,0 +18,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.14/windowszip/v1.29.14-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.29.15/windowszip/v1.29.15-1int.zip
@@ -21,0 +22,2 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.101-aksl
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.13/windowszip/v1.30.13-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.30.14/windowszip/v1.30.14-1int.zip
@@ -24,6 +26,6 @@ c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.31.14/windo
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.11/windowszip/v1.32.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.12/windowszip/v1.32.12-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.10/windowszip/v1.33.10-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.11/windowszip/v1.33.11-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.4/windowszip/v1.34.4-1int.zip
-c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.7/windowszip/v1.34.7-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.10/windowszip/v1.32.10-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.32.9/windowszip/v1.32.9-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.5/windowszip/v1.33.5-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.33.6/windowszip/v1.33.6-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.0/windowszip/v1.34.0-1int.zip
+c:\akse-cache\win-k8s\: https://packages.aks.azure.com/kubernetes/v1.34.1/windowszip/v1.34.1-1int.zip
@@ -32,2 +33,0 @@ c:\akse-cache\win-vnet-cni\: https://packages.aks.azure.com/azure-cni/v1.6.21/bi
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1451608719=1
-HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1861198479=1
@@ -35,8 +35,12 @@ HKLM:\SYSTEM\CurrentControlSet\Services\hns\State\EnableCompartmentNamespace=1
-mcr.microsoft.com/containernetworking/azure-cni:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.8.6-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.5.50
-mcr.microsoft.com/containernetworking/azure-cns:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/azure-cns:v1.8.6-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.5.44
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.32
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.9-0
+mcr.microsoft.com/containernetworking/azure-cns:v1.5.49
+mcr.microsoft.com/containernetworking/azure-cns:v1.6.33
+mcr.microsoft.com/containernetworking/azure-cns:v1.7.9-0
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.12-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.31.9-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.32.8-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.3-windows-hpc
+mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc
@@ -45,8 +49,6 @@ mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.7.2
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.34.3-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.10-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.9-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.5-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.2-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.32.11-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.32.9-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.33.7-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.3-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.0
@@ -54 +56 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.15.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.16.0
+mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.16.0
@@ -56 +57,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.17.0
-mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.18.0
@@ -58,3 +59,3 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.4
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.11-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.8-windows-hpc-1
-mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.35.3-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.32.11-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.33.6-windows-hpc-1
+mcr.microsoft.com/oss/v2/kubernetes/azure-cloud-node-manager:v1.34.3-windows-hpc-1
@@ -64,4 +65,4 @@ mcr.microsoft.com/windows/nanoserver:ltsc2025
-mcr.microsoft.com/windows/servercore:10.0.20348.5020
-mcr.microsoft.com/windows/servercore:10.0.20348.5139
-mcr.microsoft.com/windows/servercore:10.0.26100.32690
-mcr.microsoft.com/windows/servercore:10.0.26100.32860
+mcr.microsoft.com/windows/servercore:10.0.20348.4405
+mcr.microsoft.com/windows/servercore:10.0.20348.4529
+mcr.microsoft.com/windows/servercore:10.0.26100.7171
+mcr.microsoft.com/windows/servercore:10.0.26100.7462
@@ -71 +72 @@ mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2025
-Windows 2025 base version: 26100.32860.260510
+Windows 2025 base version: 26100.7462.251206

Copilot AI reviewed May 22, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This cherry-pick updates the branch toolchain and key Go module dependencies to incorporate upstream security fixes (Go 1.25.10 stdlib CVEs + golang.org/x/net v0.55.0 and related x/* bumps), and aligns CI workflows to build/test with Go 1.25.

Changes:

  • Bump Go version across repository Go modules to go 1.25.10 (and remove an existing toolchain directive from vhdbuilder/lister/go.mod).
  • Update golang.org/x/net to v0.55.0 (plus associated x/sys, x/text, x/tools, and x/crypto sums where applicable).
  • Update GitHub Actions workflows to run with Go 1.25.

Reviewed changes

Copilot reviewed 12 out of 15 changed files in this pull request and generated no comments.

Show a summary per file
File Description
go.mod Bumps root module Go version to 1.25.10 and updates indirect golang.org/x/* versions (incl. x/net).
go.sum Refreshes dependency checksums for updated golang.org/x/* versions.
e2e/go.mod Bumps e2e module Go version to 1.25.10 and updates x/crypto + indirect x/* versions.
e2e/go.sum Updates e2e dependency checksums for the refreshed golang.org/x/* set.
aks-node-controller/go.mod Bumps module Go version to 1.25.10 and updates indirect x/sys.
aks-node-controller/go.sum Updates dependency checksums reflecting the upgraded golang.org/x/* versions.
vhdbuilder/prefetch/go.mod Bumps module Go version to 1.25.10.
vhdbuilder/lister/go.mod Bumps module Go version to 1.25.10 and removes the toolchain directive.
hack/tools/go.mod Bumps tools module Go version to 1.25.10.
.github/workflows/check-coverage.yml Updates CI to install Go 1.25 for coverage runs.
.github/workflows/go-test.yml Updates CI to install Go 1.25 for unit tests.
.github/workflows/golangci-lint.yml Updates CI to install Go 1.25 for linting.
.github/workflows/shellcheck.yml Updates CI to install Go 1.25 for shell linting pipeline.
.github/workflows/shellspec.yaml Updates CI to install Go 1.25 for ShellSpec tests.
.github/workflows/validate-components.yml Updates CI to install Go 1.25 for component validation/version consistency tests.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@Devinwong Devinwong Devinwong approved these changes

@cameronmeissner cameronmeissner Awaiting requested review from cameronmeissner cameronmeissner is a code owner

@ganeshkumarashok ganeshkumarashok Awaiting requested review from ganeshkumarashok ganeshkumarashok is a code owner

@lilypan26 lilypan26 Awaiting requested review from lilypan26 lilypan26 is a code owner

@AbelHu AbelHu Awaiting requested review from AbelHu AbelHu is a code owner

@junjiezhang1997 junjiezhang1997 Awaiting requested review from junjiezhang1997 junjiezhang1997 is a code owner

@phealy phealy Awaiting requested review from phealy phealy is a code owner

@r2k1 r2k1 Awaiting requested review from r2k1 r2k1 is a code owner

@timmy-wright timmy-wright Awaiting requested review from timmy-wright timmy-wright is a code owner

@zachary-bailey zachary-bailey Awaiting requested review from zachary-bailey zachary-bailey is a code owner

@awesomenix awesomenix Awaiting requested review from awesomenix awesomenix is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@djsly @Devinwong