What's Changed

• [release-1.34] chore: upgrade azcopy to v10.31.1 to fix CVEs by @k8s-infra-cherrypick-robot in #2934
• [release-1.34] fix: optionally skip reading the config from the API server by @k8s-infra-cherrypick-robot in #2942
• [release-1.34] chore: Add CSI-specific Prometheus metrics by @k8s-infra-cherrypick-robot in #2946
• [release-1.34] test: fix CVE-2025-61726 trivy failure by @k8s-infra-cherrypick-robot in #2948
• [release-1.34] build(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #2952
• [release-1.34] test: fix trivy CVE-2025-68121 failure by @k8s-infra-cherrypick-robot in #2966
• [release-1.34] fix: CVE-2026-24834 by @k8s-infra-cherrypick-robot in #2985
• [release-1.34] fix: upgrade to aznfs 3.0.14 on Ubuntu node by @k8s-infra-cherrypick-robot in #2981
• [release-1.34] chore: upgrade CSI sidecar image versions by @andyzhangx in #2984
• [release-1.34] cleanup: refine subscriptionIDRegex to make Regex matching more efficient by @k8s-infra-cherrypick-robot in #2988
• [release-1.34] chore: upgrade azcopy to v10.32.1 to fix CVEs by @k8s-infra-cherrypick-robot in #2992
• [release-1.34] fix: CVE-2026-24051 by @andyzhangx in #2999
• doc: cut v1.34.4 release by @andyzhangx in #3003

Full Changelog: v1.34.3...v1.34.4