What's Changed

• [release-1.33] chore: bump Go version to 1.25.11 in trivy workflow by @k8s-infra-cherrypick-robot in #3655
• [release-1.33] test: increase timing tolerance in TestForceDetach for Windows CI by @k8s-infra-cherrypick-robot in #3658
• [release-1.33] fix: CVE-2026-25680 by @andyzhangx in #3678
• Cherry-pick #3628: option for qps and burst to handle client throttling scenario by @andyzhangx in #3666
• [release-1.33] test: skip Windows statefulset example in verify-examples.sh by @k8s-infra-cherrypick-robot in #3694
• [release-1.33] cleanup: remove unnecessary logs by @k8s-infra-cherrypick-robot in #3696
• [release-1.33] chore: bump Go version to 1.25.12 in trivy workflow by @k8s-infra-cherrypick-robot in #3702
• [release-1.33] fix: GHSA-hrxh-6v49-42gf by @andyzhangx in #3729
• [release-1.33] fix: avoid using formatAndMount from kubernetes mount utils by @k8s-infra-cherrypick-robot in #3743
• doc: cut v1.33.11 release by @mittachaitu in #3745

Full Changelog: v1.33.10...v1.33.11