What's Changed

• [release-1.34] chore: upgrade Azure cloud provider lib- #3752 by @andyzhangx in #3754
• [release-1.34] fix: optionally skip reading the config from the API server by @k8s-infra-cherrypick-robot in #3757
• [release-1.34] chore: update csi-resizer to v2.2.1 by @andyzhangx in #3760
• [release-1.34] chore: bump Go to 1.26.6 by @k8s-infra-cherrypick-robot in #3765
• [release-1.34] cleanup: demote empty GRPC response log to V(6) by @k8s-infra-cherrypick-robot in #3773
• cherry-pick: mount azure.json read-only in CSI controller and node pods (release-1.34) by @andyzhangx in #3781
• [release-1.34] fix: CVE-2026-56854 by @andyzhangx in #3782
• [release-1.34] chore: add fstype allowlist by @andyzhangx in #3784
• [release-1.34] fix: CVE-2026-84304 by @andyzhangx in #3792
• [release-1.34] fix: set success metric on early-success returns; guard nil disk before SKU access by @andyzhangx in #3790
• [release-1.34] cleanup: preserve identity IDs at tail of truncated kube-event messages by @k8s-infra-cherrypick-robot in #3796
• [release-1.34] fix: CVE-2026-56855 by @andyzhangx in #3801
• doc: cut v1.34.6 release by @landreasyan in #3799

Full Changelog: v1.34.5...v1.34.6