v0.20260505.3

What's Changed

Changes

• test: reduce Go test timeout to 80m to stay below 90m ADO job limit by @r2k1 in #8395
• feat: implement budget timeout for apt_get_install by @Devinwong in #8379
• feat: refactor aks-node-controller to use urfave cli to manually do command line parsing, setting by @awesomenix in #8397
• fix: conslidate use of masterminds semver across the codebase by @awesomenix in #8399
• feat: add patch-only version matching for ANC hotfix download by @Devinwong in #8355
• feat: add CSE timing regression tests for all Linux VHDs (Ubuntu 22.04/24.04, Azure Linux V3) by @djsly in #8284
• feat: add GitHub Action for ANC hotfix template injection by @Devinwong in #8405
• fix: use compact JSON in ANC hotfix injection by @Devinwong in #8410
• chore: add agentbaker artifact streaming combo e2es by @mxj220 in #8332
• feat(windows): add support for configuring secure TLS bootstrap client RPC timeouts by @cameronmeissner in #8398
• chore(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in /vhdbuilder/lister by @dependabot[bot] in #8402
• chore(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in /image-fetcher by @dependabot[bot] in #8409
• chore: add tcpdump to AzureLinuxV3 by @hunter32292 in #8413
• chore: remove snapshot generation from copilot-instructions.md by @cameronmeissner in #8415
• test(ci): add dcgm-exporter compatibility unit test to validate-components workflow by @surajssd in #8368
• fix: exclude beta/pre-release versions for containerd in renovate config by @Devinwong in #8418
• fix: separate allowedVersions into its own packageRule by @Devinwong in #8420
• fix: always clean up /opt/cni/downloads after installNetworkPlugin by @djsly in #8429
• fix: prevent degraded secure-tls-bootstrap.service health from failing CSE by @cameronmeissner in #8432
• feat(scriptless): compare AKSNodeConfig generated cse cmd with NBC cse cmd by @lilypan26 in #8416
• fix: disable scriptless phase2 for subsets of overlapping tests by @awesomenix in #8430
• fix: disable prefetch optimization for azurecontainerlinux since it break first time boot by @awesomenix in #8436
• fix: mitigate CVE-2026-31431 (Copy Fail) algif_aead LPE on Ubuntu and AzureLinux by @djsly in #8437
• fix: replace apt-mark with dpkg equivalents to avoid slow apt initialization by @djsly in #8421
• fix: dont run scriptless phase2 if preprovision is turned on by @awesomenix in #8440
• fix: update AzureContainerLinux image reference by @aadhar-agarwal in #8446
• test(e2e): add ANC hotfix binary selection E2E test by @Devinwong in #8423
• fix: adjusting windows container image json url logic to reach build scripts by @smiezah-msft in #8422
• fix: reduce Windows SIG cleanup retention to 7d and remove name filters by @r2k1 in #8435
• fix: start aks-node-controller service after ssh service by @awesomenix in #8449
• fix: auto create PRs for minor ciprod versions by @timmy-wright in #8445
• fix: add ACL-specific butane config with first-boot service workaround by @aadhar-agarwal in #8447
• test: make Windows log extraction best-effort in cleanup by @r2k1 in #8433
• fix: remove description while writing out mod file by @awesomenix in #8485

Dependabot Updates

• chore(deps): bump github.com/onsi/gomega from 1.39.1 to 1.40.0 by @dependabot[bot] in #8428

VHD Component Updates

• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #8293
• chore(deps): update dependency moby-containerd to v1.7.31-ubuntu20.04u1 by @renovate[bot] in #8382
• feat: install aznfs package on AzureLinux 3.0 by @andyzhangx in #8085
• chore(deps): update dependency containerd2 to v2.1.6-2.azl3 by @renovate[bot] in #8431
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.1.1 by @cameronmeissner in #8438
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #8427
• fix: update inspektor gadget v0.51.0 compatibility by @burak-ok in #8396
• chore(deps): update azuremonitor/containerinsights/ciprod docker tag to v3.3.0 by @renovate[bot] in #8451
• Revert "chore(deps): update dependency moby-containerd to v1.7.31-ubuntu20.04u1 (#8382)" by @Devinwong in #8455

New Contributors

• @burak-ok made their first contribution in #8396

Full Changelog: v0.20260424.0...v0.20260505.3