v0.20260514.0

What's Changed

Changes

• feat(linux): refactor secure-tls-bootstrap.service to use default file and conditionally set AZURE_ENVIRONMENT_FILEPATH by @cameronmeissner in #8456
• fix: skip setup_golang.sh on hosts without apt-get by @aadhar-agarwal in #8462
• feat: add CoreDNS hosts plugin support for LocalDNS by @saewoni in #8165
• fix: use oras from AZL3 MCR image instead of imagecustomizer by @hbeberman in #8467
• fix: always add aks custom cloud until we do better by @awesomenix in #8468
• fix: add agentbaker tests for new code path i added by @awesomenix in #8473
• feat(e2e): add HTTPS_PROXY + private DNS test scenario by @r2k1 in #8470
• fix: use cloud-specific ARM endpoint for IMDS token in ORAS login by @charleswool in #8424
• fix: blacklist rxrpc/esp4/esp6 modules to mitigate DirtyFrag LPE by @djsly in #8475
• fix: remove description while writing out mod file by @awesomenix in #8484
• feat: add 5B non-sec regkeys by @smiezah-msft in #8483
• chore(vhdbuilder): build ACL VHDs using marketplace images by @aadhar-agarwal in #8469
• test: add coverage for removeComments CSE stripping logic by @djsly in #8489
• feat(acl): add FIPS image builds for Azure Container Linux by @hbeberman in #8463
• fix: prewarm containerd, increase timeout value for wait for containerd ready by @awesomenix in #8496
• fix: better logging when file hash compare fails by @timmy-wright in #8503

Dependabot Updates

• chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 by @dependabot[bot] in #8441
• chore(deps): bump actions/create-github-app-token from 2 to 3 by @dependabot[bot] in #8174
• chore(deps): bump azure/cli from 2 to 3 by @dependabot[bot] in #8175
• chore(deps): bump azure/cli from 2 to 3 by @dependabot[bot] in #8457
• chore(deps): bump actions/create-github-app-token from 2 to 3 by @dependabot[bot] in #8458

VHD Component Updates

• chore(deps): update kubelet-kubectl (patch) by @renovate[bot] in #8352
• chore(deps): update kube-components (patch) by @renovate[bot] in #8349
• chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.16-4 by @renovate[bot] in #8100
• chore(deps): update autoscaler (patch) by @renovate[bot] in #8376
• chore(deps): update coredns (patch) by @renovate[bot] in #8377
• chore(deps): update windowsbase (patch) by @renovate[bot] in #8498
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.1.2 by @cameronmeissner in #8518

New Contributors

• @charleswool made their first contribution in #8424

Full Changelog: v0.20260505.3...v0.20260514.0