What's Changed

• fix: correct NOTES.txt selector and Windows imagePullPolicy in latest chart (release-1.33) by @andyzhangx in #3092
• [release-1.33] test: add missing ReadOnly flag to readOnly volume mount tests by @k8s-infra-cherrypick-robot in #3105
• [release-1.33] chore: ignore CVE-2026-29181 in trivy scan by @andyzhangx in #3136
• [release-1.33] chore: bump Go version to 1.25.10 in trivy workflow by @k8s-infra-cherrypick-robot in #3142
• doc: cut v1.33.10 release by @andyzhangx in #3168

Full Changelog: v1.33.9...v1.33.10