v1.27.1 release

What's Changed

• [release-1.27] fix: China cloud endpoints by @k8s-infra-cherrypick-robot in #2164
• [release-1.27] fix(proxy_installer): add necessary mounts for cos,gardenlinux bin paths by @andyzhangx in #2176
• [release-1.27] test: refine verify-helm-chart-index.sh by @k8s-infra-cherrypick-robot in #2177
• [release-1.27] chore(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #2181
• [release-1.27] chore: upgrade azcopy to v10.30.1 by @k8s-infra-cherrypick-robot in #2185
• [release-1.27] chore: upgrade sidecar image versions by @andyzhangx in #2189
• [release-1.27] fix: blobfuse-proxy install on OpenShift 4.19 by @k8s-infra-cherrypick-robot in #2194
• [release-1.27] feat: install blobfuse 2.5.1 as default version by @andyzhangx in #2206
• [release-1.27] fix: install blobfuse2 binary failure on rhcos by @k8s-infra-cherrypick-robot in #2211
• [release 1.27] 🌈 Feature: Add support for Flatcar Container Linux by @t-lo in #2213
• [release-1.27] test: fix CVE-2025-47912 error by @k8s-infra-cherrypick-robot in #2223
• [release-1.27] 🐞 fix: shasum in blobfuse-proxy installer for Flatcar, fix PATH in blobfuse-proxy.service by @k8s-infra-cherrypick-robot in #2221
• [release-1.27] chore: upgrade azcopy to v10.31.0 by @k8s-infra-cherrypick-robot in #2227
• [release-1.27] fix: skip chmod setting in readonly mode by @k8s-infra-cherrypick-robot in #2232
• [release-1.27] chore: upgrade sidecar image versions by @andyzhangx in #2235
• [release-1.27] Revert "fix: respect secretName during volume creation" by @k8s-infra-cherrypick-robot in #2238
• [release-1.27] fix: CVE-2025-52881 by @k8s-infra-cherrypick-robot in #2242
• [release-1.27] fix: snapshot restore and volume clone failure in some new sovereign … by @k8s-infra-cherrypick-robot in #2251
• [release-1.27] chore: upgrade AzureAD lib by @k8s-infra-cherrypick-robot in #2254
• [release-1.27] fix: CVE-2025-58181 by @andyzhangx in #2258
• [release-1.27] test: fix trivy CVE-2025-61727 by @k8s-infra-cherrypick-robot in #2265
• [release-1.27] feat: add telemetry as part of mount options for blobfuse mounts by @k8s-infra-cherrypick-robot in #2270
• [release-1.27] cleanup: clientID should be optional when mount with workload identity token by @k8s-infra-cherrypick-robot in #2275
• [release-1.27] fix: CVE-2025-13281 by @andyzhangx in #2278
• [release-1.27] chore: upgrade csi-provisioner to v6.1.0 by @andyzhangx in #2283
• [release-1.27] fix: remove global lock from blobfuse proxy service by @k8s-infra-cherrypick-robot in #2286
• [release-1.27] chore: increase blobfuse mount timeout by @k8s-infra-cherrypick-robot in #2289
• doc: cut v1.27.1 release by @andyzhangx in #2291

Full Changelog: v1.27.0...v1.27.1