v0.20260720.1

What's Changed

Features

• feat(anc): wire check-hotfix into node wrapper behind ENABLE_PROVISIONING_HOTFIX by @Devinwong in #8715
• feat(rcv1p): unify cert bootstrap flow and add Windows CA refresh task by @rchincha in #8096
• feat: apply nodecustomdata only for matching VHD, avoiding unnecessary issues with mismatch of scripts by @awesomenix in #8876
• feat: install DRA nvidia gpu plugin by @runzhen in #8797
• feat: add SIG config for Ubuntu 24.04 and AzureLinux V3 EdgeZone distros by @prakhar1200 in #8853
• feat: support localdns hosts plugin refresh override by @saewoni in #8895
• feat: add scriptless containerd 2.0 support by @lilypan26 in #8825
• feat(anc): deliver node toggles via generic enabled_features map (2.1d) by @Devinwong in #8917
• feat: add aks-live-patching module with live patching service proto by @YaoC in #8868

Fixes

• fix: exclude 26.04 images within GetMaintainedLinuxSIGImageConfigMap logic by @cameronmeissner in #8882
• fix(renovate): correct ama-metrics version parsing by @Devinwong in #8920
• fix(gpu): tear down cuda-lts VHD prebake on GRID nodes before managed install by @ganeshkumarashok in #8919
• fix(renovate): remove prerelease group from ama-metrics versioning by @Devinwong in #8922
• fix: be sure to stamp the right anc version by @awesomenix in #8926
• fix: ignore dev version since thats default by @awesomenix in #8931
• fix: set sshd_config permissions to 0600 for CIS compliance by @pdamianov-dev in #8888
• fix(gpu): unload resident prebaked nvidia module in cleanUpPrebakedGPUDriver by @ganeshkumarashok in #8933
• fix(ubuntu): remove PackageKit from VHD to stop early-boot CSE exit 99 by @xuexu6666 in #8939
• fix: correct matchPackageNames and update rebaseWhen config by @Devinwong in #8941
• fix: make anc even faster by 7s by @awesomenix in #8902
• fix: default to scriptless phase 2, since its default in prod now by @awesomenix in #8966
• fix(localdns): handle exporter client disconnects by @jingwenw15 in #8791
• fix: stabilize sysext Renovate updates by @Devinwong in #8975
• fix: remove other waagent versions to enforce components.json version by @mxj220 in #8940
• fix: should install exact containerd version from components.json by @lilypan26 in #8976
• fix: serialize Renovate package index requests by @Devinwong in #8988
• fix: detect secure TLS bootstrap sysext updates by @Devinwong in #8989

Build/Test

• fix: scriptless is always enabled on prod, match the same in e2e by @awesomenix in #8874
• test: retry failed tests automatically if parameter is set on pipeline by @awesomenix in #8880
• fix: windows was missing E2E_FAILED_TESTS_RETRY_COUNT by @awesomenix in #8883
• fix: tme pipeline is unnecessarily prompting for sub id, make it a variable by @awesomenix in #8884
• fix: go test args are used with --rerun-fails the list of packages to test must be specified by the --packages flag by @awesomenix in #8887
• feat: produce vhd info and consume them in e2e so we dont get throttled by @awesomenix in #8893
• test: validate ANC version is non-empty in Linux content test by @Devinwong in #8927
• chore(pipelines): rename e2e-rcv1p.yaml -> e2e-rcv1p-not-opted-in.yaml by @rchincha in #8881
• chore: pin buf to 1.71.0 in Makefile and CI to fix format drift by @abigailliang-aks-sig-node in #8929
• test: add e2e validation for MANA accelerated networking by @titilambert in #8832
• fix: gpu tests should disable compilation, retry 2 times by @awesomenix in #8971
• test: simplify e2e now that we run only 1 test by @awesomenix in #8974
• chore: remove duplicate scriptless scenarios now that phase 2 is default by @lilypan26 in #8979
• fix: flaky tests in ab e2e by @awesomenix in #8983

Windows

• feat(windows): add 7b non-sec regkeys by @smiezah-msft in #8885
• fix: update windows base versions for 7B by @smiezah-msft in #8943
• fix: add windows priority arg by @timmy-wright in #8969

Misc

• chore: update kubelet-kubectl renovate reviewers/assignees to match kube-components by @Devinwong in #8937
• chore: fix diffs for scriptless phase 2.5 by @lilypan26 in #8871
• chore(gpu): rename RTX PRO 6000 BSE v6 SKUs from preview to GA names by @ganeshkumarashok in #8852
• refactor: rename init-aks-custom-cloud -> init-aks-cloud by @rchincha in #8875
• chore: add Renovate auto-update for buf version by @abigailliang-aks-sig-node in #8981

Dependabot Updates

• chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #8968

VHD Component Updates

• feat: bump aznfs to 3.0.19 for Ubuntu 22.04 and 24.04 by @toma3233 in #8965
• fix(acl): bump marketplace image to 3.20260706.01 by @aadhar-agarwal in #8963
• chore(deps): update node-exporter-kubernetes (patch) by @renovate[bot] in #8867
• fix: correct azurelinux renovateTag and change recreateWhen to auto by @Devinwong in #8894
• fix: point azure-acr-credential-provider azurelinux at cloud-native repo by @Devinwong in #8898
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #8899
• chore(deps): update inspektor-gadget (patch) by @renovate[bot] in #8901
• feat: upgrade azurefile-csi-driver image to v1.35.5 by @andyzhangx in #8909
• feat: upgrade blobfuse version to v2.5.4 on Ubuntu node by @andyzhangx in #8878
• chore(deps): update dependency trivy by @renovate[bot] in #8743
• chore(deps): update kube-components (patch) by @renovate[bot] in #8509
• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #8796
• chore(deps): update kubernetes-cri-tools (patch) by @renovate[bot] in #8905
• chore(deps): update windowsbase (patch) by @renovate[bot] in #8938
• chore(deps): update ama-metrics (minor) by @renovate[bot] in #8897
• chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag to v0.12.1-15 by @renovate[bot] in #8934
• chore: enable renovate updates for ORAS by @djsly in #8900
• fix: bump moby-containerd to 2.3.2-ubuntu24.04u2 for Ubuntu 24.04 by @abigailliang-aks-sig-node in #8959
• chore(deps): update azure-cloud-node-manager (patch) by @renovate[bot] in #8913
• chore(deps): update acr-credential-provider (patch) by @renovate[bot] in #8903
• chore(components): align coredns, cluster-proportional-autoscaler, ad… by @ashokobulapuram7 in #8967
• chore(deps): update node-exporter-kubernetes (patch) by @renovate[bot] in #8947
• chore(deps): update kubernetes-cri-tools (patch) by @renovate[bot] in #8944
• chore(deps): update inspektor-gadget (patch) by @renovate[bot] in #8951
• fix(azurelinux): update nvidia-container-toolkit to 1.17.8 by @ganeshkumarashok in #8984
• chore(deps): update nvidia-dcgm (patch) by @renovate[bot] in #8954
• chore(deps): update dependency dra-driver-nvidia-gpu by @renovate[bot] in #8904
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #8906

New Contributors

• @prakhar1200 made their first contribution in #8853
• @xuexu6666 made their first contribution in #8939
• @toma3233 made their first contribution in #8965

Full Changelog: v0.20260709.1...v0.20260720.0