What's Changed

• [release-1.33] chore: upgrade max data disk table by @k8s-infra-cherrypick-robot in #3214
• [release-1.33] fix: CVE-2025-22868 by @andyzhangx in #3218
• [release-1.33] fix: batching implementation should allow for an early exit for disks already processed in the batch by @k8s-infra-cherrypick-robot in #3211
• [release-1.33] chore: upgrade to dalec image for snapshot container by @andyzhangx in #3223
• [release-1.33] chore: disable public network access for new disk creation by default by @k8s-infra-cherrypick-robot in #3230
• [release-1.33] chore: keep disk taint removal in a loop by default by @andyzhangx in #3232
• [release-1.33] test: fix TestConcurrentDetachDisk ut failure on Windows by @k8s-infra-cherrypick-robot in #3231
• doc: cut v1.33.3 release by @andyzhangx in #3235

Full Changelog: v1.33.2...v1.33.3