What's Changed

• [release-1.34] chore: bump Go version to 1.25.11 in trivy workflow by @k8s-infra-cherrypick-robot in #3654
• [release-1.34] test: increase timing tolerance in TestForceDetach for Windows CI by @k8s-infra-cherrypick-robot in #3657
• [release-1.34] fix: create volume leaks disk when throttled and PVC deleted by @k8s-infra-cherrypick-robot in #3660
• [release-1.34] fix: CVE-2026-25680 by @andyzhangx in #3676
• [release-1.34] chore: raise kube-api-qps/burst on snapshot-controller and csi-snapshotter by @andyzhangx in #3690
• [release-1.34] cleanup: preserve tail of truncated error messages in kube-events by @k8s-infra-cherrypick-robot in #3682
• [release-1.34] test: skip Windows statefulset example in verify-examples.sh by @k8s-infra-cherrypick-robot in #3693
• [release-1.34] cleanup: remove unnecessary logs by @k8s-infra-cherrypick-robot in #3695
• chore: update CSI sidecar images to latest versions (cherry-pick #3697 to release-1.34) by @andyzhangx in #3699
• [release-1.34] chore: bump Go version to 1.25.12 in trivy workflow by @k8s-infra-cherrypick-robot in #3701
• [release-1.34] feat: add SELinuxMount support by @andyzhangx in #3663
• [release-1.34] fix: increase default VMSS detach timeout from 20s to 200s by @andyzhangx in #3715
• [release-1.34] fix: GHSA-hrxh-6v49-42gf by @andyzhangx in #3728
• [release-1.34] fix: use node informer to get node labels by @k8s-infra-cherrypick-robot in #3732
• [release-1.34] fix: avoid using formatAndMount from kubernetes mount utils by @k8s-infra-cherrypick-robot in #3733
• doc: cut v1.34.5 release by @mittachaitu in #3744

Full Changelog: v1.34.4...v1.34.5