v1.23.5 release

What's Changed

• [release-1.23] fix: CVE-2024-24786 by @andyzhangx in #1314
• [release-1.23] fix: workload identity did not work by @cvvz in #1320
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1323
• [release-1.23] feat: use new restricted liveness probe endpoint by @andyzhangx in #1338
• [release-1.23] feat: upgrade to azcopy v10.24.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1336
• [release-1.23] fix: CVE-2023-45288 by @andyzhangx in #1355
• [release-1.23] test: ignore azcopy CVE-2023-45288 by @k8s-infra-cherrypick-robot in #1358
• [release-1.23] fix: enable http with track2 sdk by @andyzhangx in #1366
• [release-1.23] fix: CVE-2024-3177 by @andyzhangx in #1369
• [release-1.23] fix: support storeAccountKey as false in cross subscription scenario by @k8s-infra-cherrypick-robot in #1382
• [release-1.23] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1387
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1394
• [release-1.23] feat: upgrade to azcopy v10.25.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1412
• [release-1.23] fix: create private endpoint failure by @andyzhangx in #1408
• [release-1.23] feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1416
• [release-1.23] fix: CVE-2024-35255 by @andyzhangx in #1422
• doc: cut v1.23.5 release by @andyzhangx in #1415

Full Changelog: v1.23.4...v1.23.5