What's Changed

• [release-1.33] chore: bump Go to 1.26.6 by @andyzhangx in #3766
• [release-1.33] fix: CVE-2026-56854 by @andyzhangx in #3783
• Automated cherry pick of #3779: chore: add fstype allowlist by @landreasyan in #3788
• [release-1.33] fix: CVE-2026-84304 by @andyzhangx in #3793
• [release-1.33] fix: set success metric on early-success returns; guard nil disk before SKU access by @andyzhangx in #3791
• [release-1.33] cleanup: preserve identity IDs at tail of truncated kube-event messages by @k8s-infra-cherrypick-robot in #3795
• [release-1.33] fix: CVE-2026-56855 by @andyzhangx in #3802
• [release-1.33] fix: use node informer to get node labels (cherry-pick of #3668) by @landreasyan in #3797
• doc: cut v1.33.12 release by @landreasyan in #3798

Full Changelog: v1.33.11...v1.33.12