What's Changed

• [release-1.35] chore: bump Go version to 1.25.12 in trivy workflow by @k8s-infra-cherrypick-robot in #3250
• [release-1.35] chore: upgrade azcopy to v10.32.5 to fix CVEs by @k8s-infra-cherrypick-robot in #3259
• [release-1.35] fix: managed identity mount fails when using private endpoint by @k8s-infra-cherrypick-robot in #3262
• [release-1.35] fix: clean up orphaned file share on CreateVolume failure by @k8s-infra-cherrypick-robot in #3254
• [release-1.35] fix: handle short snapshot IDs in GetInfoFromSnapshotID by @k8s-infra-cherrypick-robot in #3264
• [release-1.35] chore: add CVE-2026-46600 and CVE-2026-56852 to .trivyignore by @k8s-infra-cherrypick-robot in #3270
• cherry-pick #3274 to release-1.35: prevent ARM ListKeys throttling on kubelet requiresRepublish by @andyzhangx in #3279
• [release-1.35] fix: GHSA-hrxh-6v49-42gf by @andyzhangx in #3280
• doc: cut v1.35.6 release by @andyzhangx in #3285

Full Changelog: v1.35.5...v1.35.6