v1.18.0 release

What's Changed

• doc: cut v1.17.0 release by @andyzhangx in #907
• test: fix trivy action failure due to CVE-2024-45336 by @andyzhangx in #919
• fix: duplicated securityContext on Windows chart config by @andyzhangx in #921
• test: fix CVE-2025-22866 in trivy action by @andyzhangx in #923
• fix: incorrect affinity chart config by @andyzhangx in #924
• chore: update csi release tools (building driver with go1.23.6) by @andyzhangx in #929
• test: use env var for CSI inline volume test secret by @Phaow in #928
• test: correct external-e2e driver capabilities by @Phaow in #931
• fix: CVE-2025-0426 by @andyzhangx in #926
• fix: CVE-2025-30204 by @andyzhangx in #937
• chore: use go1.24 by @andyzhangx in #941
• test: fix CVE-2025-22871 in trivy action by @andyzhangx in #942
• fix: CVE-2025-22872 by @andyzhangx in #944
• chore: upgrade resizer sidecar image version to v1.13.2 by @andyzhangx in #945
• fix: goroutine leak when timeout by @andyzhangx in #947

Full Changelog: v1.17.0...v1.18.0