# 4.12.91

Created: 2026-05-29 06:16:36 +0000 UTC

Image Digest: `sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869`


## Changes from 4.12.50

### Components

* Kubernetes 1.25.16
* Red Hat Enterprise Linux CoreOS upgraded from 412.86.202402131748-0 to 412.86.202605271418-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [191c9e34](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/191c9e34c1e70cf585d78f6293f95a2b89061a48) `sha256:8671118afdb7df75810ec1ca057a4f79bf0d11bfde627c7d974eb32280587ef3`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [4d3b1125](https://github.com/openshift/alibaba-cloud-csi-driver/commit/4d3b1125cfd3acfe3fbafa4c83543bbb89de97a2) `sha256:0d6e9dde5ab95ccedba48b19b7acbc4f80f293322d8d5d7836add6c007ec99f4`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [99bcda8d](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/99bcda8da7c9c2e4415f30b82371f0b79d527d3d) `sha256:a8171ad440310bd5067ef1ea4b41cb7c63dcf4ba6833ab3f48617c77fb174ab6`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [2193ccfa](https://github.com/openshift/cloud-provider-azure/commit/2193ccfa8575aeb0520a25b77ec963097a66cd6e) `sha256:4fdd933cb9da64acd56226c15ce011e46fd0090aed5b3e6315a01bf0162300d7`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [2193ccfa](https://github.com/openshift/cloud-provider-azure/commit/2193ccfa8575aeb0520a25b77ec963097a66cd6e) `sha256:147452607a8cd38093e52b2c5417ad695385b33bd3cf9a3261fb31f31c642f74`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [988b8cc8](https://github.com/openshift/azure-disk-csi-driver-operator/commit/988b8cc8ead51c2904c6cb75446529bfe3674ee3) `sha256:13ea4c117bb46fb5b78ce27910cbaa8b2a7d444c41959a54ca6aeaf97416eee7`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [15aade4d](https://github.com/openshift/azure-file-csi-driver/commit/15aade4d58785b54ac732a660f1359132d27f9b9) `sha256:d5f5879b0a0f59b59b8ce9105b823c9f711733af333931fd98719b7d9f44b2ac`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [474ed48e](https://github.com/openshift/baremetal-runtimecfg/commit/474ed48e840fdb7bf859d769cd673b29705a7b91) `sha256:22fdee807ef095f6d35808abaf1f64aca582503edca299e08874551be7a3ac8e`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [4f7f6b1a](https://github.com/openshift/cluster-authentication-operator/commit/4f7f6b1af4b674b24270e65c40728b19071ab3e3) `sha256:ae4b9b1ae53cf605c1ad733aea4871cdd265ed970115709d374ff2439ec38d1c`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [138a1cf2](https://github.com/openshift/cluster-bootstrap/commit/138a1cf2b98578acb4ccf098736bdf08614d2d6a) `sha256:764ef8a3cf3e6e85718fe7d1845d60ac16d04b7ae9c68f7bad2119619a8bd093`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [3b1f0843](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/3b1f0843e2bd25fb4e39659ef47424f67ccaa727) `sha256:111aa2e93746799435c4d64d48c36e40374aa3e9e8cd8698fa7cc5b10f026d9c`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [d50f7322](https://github.com/openshift/cluster-api-operator/commit/d50f7322addd997cc73a0ba8294eadb977974c3f) `sha256:827cf26b9f51a4864952ce040ab0a4826ff552cc82e23c56db8f62a93f1ecc18`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [c3c07beb](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/c3c07bebb7a644fe75bccd590fa088bcccd3749a) `sha256:b0a80980369ee5282e2e4ef1e73c51c1c0e59efc891da618efe4e5594963c107`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [7b08a4de](https://github.com/openshift/cluster-machine-approver/commit/7b08a4de4a08da8cdb341948e0902395eb0da961) `sha256:d761f1a52ad03757217e5967313f899019719b18b1763fbf8577975133374575`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [ab963d8a](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/ab963d8ad0387788c947b884a96eb9b2fed470b6) `sha256:8c76d59c579cd55b20574badc3a1a0c1f6e6a95abc891fb5e2f6d661984136e8`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [c930dc74](https://github.com/openshift/platform-operators/commit/c930dc745f23ee5bde8b48d13557976186c21c7c) `sha256:538f273be8fe8eb68a8bb354c50091505260f165f9d1449bd869d31414857ee4`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cb8862b0](https://github.com/openshift/cluster-policy-controller/commit/cb8862b0042ac2e7130a7c018e3e083ebc46705e) `sha256:12cf4c3936a6f53c4b10799599363200ce190229efdca4d5f989a308e00d34d8`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2796e173](https://github.com/openshift/cluster-update-keys/commit/2796e1732615521e818be82663058e0a3f1b3941) `sha256:f139f63eca5c0a18977c5361f5f98d0bd063efe381e2cf7f27d2c4bcfac5277d`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e4d9170e](https://github.com/openshift/configmap-reload/commit/e4d9170e71bdf8a79e9cde94dac53575a30f46f3) `sha256:ef93e8b3cb8c28d6643d51fea2d219a5b92e724e56d7f8175c316dcb24d65cd1`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [d054948f](https://github.com/openshift/csi-driver-shared-resource/commit/d054948fbc78ef04c7a55ac2a4b3ac0ed5648585) `sha256:fe0872a22488c572fb6edb06af49c9cd5e1de9d31cb09b31095ab2726933204e`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [cc297702](https://github.com/openshift/csi-driver-shared-resource-operator/commit/cc297702e6d2d4fb5a2b57a734c26d0d0a7bec1c) `sha256:022379acd74daf52d70449238bfc31057dcdea6a166798b46bf01b4ef0ab3c01`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [d054948f](https://github.com/openshift/csi-driver-shared-resource/commit/d054948fbc78ef04c7a55ac2a4b3ac0ed5648585) `sha256:77e88340e9b7fa90a42436843c101c3c5ec235ea7a79f74facd1003143e9cca9`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [fac7b8fd](https://github.com/openshift/csi-external-attacher/commit/fac7b8fd905b4c68beadc2c968e6f981385463e8) `sha256:69f63db89a91afc61c68d2f686bc8719a824cb923b03c32fdf73537a94144fc6`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [3aa7c527](https://github.com/openshift/csi-external-provisioner/commit/3aa7c527732e288c71119ea3e78fac739dfbd438) `sha256:9bcb303c041e573232d91bed5cb02aa105878e5dde3c90f37d9b96428990d993`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [5b066ba4](https://github.com/openshift/csi-external-resizer/commit/5b066ba420bd74ec5327978d2731da989d57d4f2) `sha256:f5dcc42c94aa60a86306c5beaf47d9aa705e86589a3f21ae63e2dd9511bb4bbe`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e6545e71](https://github.com/openshift/csi-livenessprobe/commit/e6545e71597df1da4635c266eb8f499fc376d970) `sha256:7b3dc31ea662f4a7ed6b140448c9a11a29b08adb119b40963dccf0e8ae665737`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c316b896](https://github.com/openshift/csi-node-driver-registrar/commit/c316b8963a0b0ff8d45f2b32c56de972d55bfd37) `sha256:bfe935c282742c63271c9bcb56a1cae05cef21938244453b625d0150f83e86ce`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [a92e4157](https://github.com/openshift/egress-router-cni/commit/a92e415791b531ca15ec84953550b71bd3534566) `sha256:2f8bebbaf30ec2895f6334d40e164e60d9e89e437b2411ad3eb4c485a23b8706`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8a84952e](https://github.com/openshift/cloud-provider-gcp/commit/8a84952ec7ff1aa001f885b10ec583540f298c73) `sha256:2f26ffffa13696c7e1368cf22e980bb9502bff37e4af0cde3bb875d9d4441589`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5dcfd675](https://github.com/openshift/gcp-pd-csi-driver/commit/5dcfd6755ea1eff7dcf1c0c831b048eda1b41736) `sha256:c864879d2fdc49d940e93c7efbf91d2f5fe48d62d2fb1c5d8b504819d17555c8`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [30e97ba5](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/30e97ba511547edb057071b63498e1ca4c68ec16) `sha256:a75ee75ac32799283d733d1ed311debeeb3acac7841d43bbbdc8a5a56856f887`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [8bd0ea8f](https://github.com/openshift/cloud-provider-ibm/commit/8bd0ea8fadbbb09ed912984d3dc6903a0aad0562) `sha256:5b50b33e23d9920b27e8c8c4f57b8ca19103b039c7a550fb7b9d6ca5b9150515`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [c65c1f1c](https://github.com/openshift/ironic-rhcos-downloader/commit/c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29) `sha256:c137997666f4e746f52933c774070d081ea4e7bbebed48e2e1c5dfa30dfe6111`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a8ade8fe](https://github.com/openshift/ironic-static-ip-manager/commit/a8ade8fe60ad5fb1ab225a514ec331123b256cff) `sha256:cfc0473a81f687ba5631fa0af8f74ca1a13af25ba77ed8645ecc99e7f23ddc3c`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [36c06694](https://github.com/openshift/k8s-prometheus-adapter/commit/36c06694097a1a09a8c4e1f70a9025187814cb1a) `sha256:98c55660028b5cae876b9c10af0f969d9b0e8164d438c193172109d2125e35b3`
* [keepalived-ipfailover](https://github.com/openshift/images) git [7e8a0105](https://github.com/openshift/images/commit/7e8a0105eb7369f3f92ad7b2581a2efffab5b28e) `sha256:cd62a53b4f531f842bf9b5dd9254ecc703a39e12f08de0d35809277f73602ae7`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [748f7131](https://github.com/openshift/kube-state-metrics/commit/748f71317b9d3e3e5a96b14131294e2695f26434) `sha256:cab048d02858152cc5e87781cb0592e2c40629f987009bbc42638dafd2f2310f`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a19615cd](https://github.com/openshift/cloud-provider-kubevirt/commit/a19615cda3daf69008253d75cc848ac0ad397179) `sha256:16b261488403e4dbd1b96bfaf8576081d2402c255b0a0bba4827e4b30c553042`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [f407c8a7](https://github.com/openshift/kubevirt-csi-driver/commit/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6) `sha256:7051fe678bef8ea8debccf66615017ce6a6086124b3f6cd06df98074d5b9edec`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8fd2f8b0](https://github.com/openshift/kuryr-kubernetes/commit/8fd2f8b0f7e2849b1a7db252beba0c8250552e36) `sha256:65933f0a21ebc73a52bda0f5b847879bc011cfa20668172be20ff0047735f7ce`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8fd2f8b0](https://github.com/openshift/kuryr-kubernetes/commit/8fd2f8b0f7e2849b1a7db252beba0c8250552e36) `sha256:e292dfd6c75cf80ba9f5cd19957de9cc7027584494f5fbe4e27c0a90cdf71809`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a2882f7a](https://github.com/openshift/cluster-api-provider-libvirt/commit/a2882f7aa56d4059a20bdc02486da905b5764062) `sha256:c0b404e457c68cea6c5c2b12bdae32b327fb494eba9056d75e639b62e3ccfa59`
* machine-os-content `sha256:a6a2e1c090b7ec1edf86eff170501d3f776182ad910415f03a22302801853be6`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [644461f2](https://github.com/openshift/multus-networkpolicy/commit/644461f25fb6b45054d1a8be7a996670959a5a9d) `sha256:df1f0484ba964b54c921469b72fb4a7abede86af7f1dc7f710f8fda202289511`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [30386d6b](https://github.com/openshift/bond-cni/commit/30386d6b8d4f3b05931842b6a9b85f15c241b09a) `sha256:4e653a12e7db3f40a15078739435bb09cfe99e176254810fcc2000b7d5ee25b5`
* [network-tools](https://github.com/openshift/network-tools) git [c76613c7](https://github.com/openshift/network-tools/commit/c76613c77c8785b91611bb3c4245bc34f3b14f76) `sha256:e1dfe5c980e4f70ee70dd5c24fe9b1d6335efaeef4960c78315201955ae1f301`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [03e5b13b](https://github.com/openshift/oauth-proxy/commit/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f) `sha256:2481d77652da9a3c87cd3e542b6679069c6dfd8d078bcd5bb3f3ecf3ce164f0a`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3d5dc18d](https://github.com/openshift/openshift-state-metrics/commit/3d5dc18d2bee5ba7132560bf40790af997952d33) `sha256:41060780d093094ecb886101b7a0b603d1efcc7a0e8724046f1dae206d42172b`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [05657663](https://github.com/openshift/machine-api-provider-openstack/commit/05657663c02be6d03d074d0f39a2b247cef9286a) `sha256:0a2c6de4e08de24da7f3c852a2bb5a0e9f26f7753e56aa58f8b24a0c480c9a8c`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [f13e381e](https://github.com/openshift/cluster-api-provider-openstack/commit/f13e381e962777d48fadcaa3570a583e72aa80c7) `sha256:9cbc5f388a732e60e5b044a35abe1795418c59af479ff0adfb4c84e89d91e302`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [87ab3789](https://github.com/openshift/ovirt-csi-driver/commit/87ab37895e56ea3c80be0163571fa593ce96d86b) `sha256:552e345d57ff44a53b11102cb47eaffa1dbecc0de47c189581e6b88baea908f1`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [03e8cb50](https://github.com/openshift/cluster-api-provider-ovirt/commit/03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1) `sha256:4d1de4075c6b0d736865845a851f3d7f312e15ae7f0815cd307328eac005c4d7`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [b78e8e78](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/b78e8e7871bd50ff77a68fdae320775a17856373) `sha256:e49b183279134dfa57e7a8fd9efcd7c9a59b0dfa62af2db0e34ebdff80aa3842`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [4fb4334c](https://github.com/openshift/cloud-provider-powervs/commit/4fb4334ca8aa9eb8290488359dd8d1cc5261da49) `sha256:f78f863c99ad79e7994d2e328dc5f00d3455a45480bbb688b5c1ac1c49b5bd60`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b1907888](https://github.com/openshift/prom-label-proxy/commit/b1907888004888b977918cf911b189de736642b2) `sha256:0ce388ce7c4a948ff3df46a41b28d25618c4f01a3c401d3d42b806bd08c76038`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [d1e399d5](https://github.com/openshift/prometheus-operator/commit/d1e399d5cead91c677cee4a80a032f5057cb43e3) `sha256:040f209d54440d70a88a216ab423de6724e2d5c6de4efd78dbaca112ed4d441e`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [99077a3c](https://github.com/openshift/node_exporter/commit/99077a3c8c3b0fce152fe0affce1e31fc2c6efaa) `sha256:9b85dbc1ed7f9c8e3cfb385ae5deb3ebfd73e0624f5338db20fbc1cd93b9bc81`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [d1e399d5](https://github.com/openshift/prometheus-operator/commit/d1e399d5cead91c677cee4a80a032f5057cb43e3) `sha256:afa4423cdf4be2b4b34a10e4d2a5c8b869812b22e5cd97e8c984b70319ae91ed`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [d1e399d5](https://github.com/openshift/prometheus-operator/commit/d1e399d5cead91c677cee4a80a032f5057cb43e3) `sha256:783dd70962c557da4814f400269deafd64071df945d8935655d126c6469141c8`
* rhel-coreos-8 `sha256:18af236fc4d55e5a5898b20fa09226cbbb32f8c3c59ee1624fd1620eb44e18ef`
* rhel-coreos-8-extensions `sha256:a709082f5fb17129684cfaa825d478255c066d2658b68dc1c4557bcd757464a1`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [0f141ce9](https://github.com/openshift/route-controller-manager/commit/0f141ce9d349fb30755e3d0d7f9f196a91782957) `sha256:f77eae9606aebe9122b74070da6803ddc393fd421ca420522800f7291aafb198`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [ef1d057d](https://github.com/openshift/service-ca-operator/commit/ef1d057db0bf8d0846d96e09cdd1f55998a1f80b) `sha256:a18548d9496fc16f0beef19d8b1e3bb4b2a99c3acdf461241bf878c1ec6e0344`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/3e474f363f79765d6a572e55e49d691cf41489fc)

* [OCPBUGS-78114](https://issues.redhat.com/browse/OCPBUGS-78114): [release-4.12] NO-JIRA: hermetic 4.12 [#9956](https://github.com/openshift/assisted-service/pull/9956)
* [OCPBUGS-67386](https://issues.redhat.com/browse/OCPBUGS-67386): Bump logrus from 1.9.0 to 19.3 [#8768](https://github.com/openshift/assisted-service/pull/8768)
* And 6 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8149b9ca554ae6e1d716daa9f1c4f322ad710e07...3e474f363f79765d6a572e55e49d691cf41489fc)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/8c32c801f72d2069db05aa75f30cf20dd23cfc0a)

* [OCPBUGS-67388](https://issues.redhat.com/browse/OCPBUGS-67388): Bump logrus v1.9.0 to v1.9.3 [#1465](https://github.com/openshift/assisted-installer/pull/1465)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/61115db06f970b8fab00f8e0beeb49d4db3ee041...8c32c801f72d2069db05aa75f30cf20dd23cfc0a)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/07762001765a8fbc59a0f511be5ff7dafc361344)

* [OCPBUGS-67390](https://issues.redhat.com/browse/OCPBUGS-67390): Bump logrus v1.9.0 to v1.9.3 [#1287](https://github.com/openshift/assisted-installer-agent/pull/1287)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/a61cd6e1819f60b151bdad2efaf9afbdf453ed0d...07762001765a8fbc59a0f511be5ff7dafc361344)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/871dac7e8e349607a5a71d0332d36713170aba16)

* Updating ose-alibaba-machine-controllers images to be consistent with ART [#35](https://github.com/openshift/cluster-api-provider-alibaba/pull/35)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/b9287c05091424c4d21fd95454020ccc225f5bcb...871dac7e8e349607a5a71d0332d36713170aba16)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f56c606ae15041b0c981e654ab577d2b0a3a0a8f)

* [OCPBUGS-38066](https://issues.redhat.com/browse/OCPBUGS-38066): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#61](https://github.com/openshift/apiserver-network-proxy/pull/61)
* [OCPBUGS-31984](https://issues.redhat.com/browse/OCPBUGS-31984): Bump golang.org/x/net to v0.23.0 [#52](https://github.com/openshift/apiserver-network-proxy/pull/52)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/3362d673b054807a4974b4d600486933f7e0bd42...f56c606ae15041b0c981e654ab577d2b0a3a0a8f)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/f90fb443bc71b2319d8cce276b280c26d0f18fb7)

* [OCPBUGS-32079](https://issues.redhat.com/browse/OCPBUGS-32079): update for CVE-2023-45288 [release-4.12] [#85](https://github.com/openshift/cloud-provider-aws/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/fa3185192cdd5a707f11879de370d8ca85d2f8d8...f90fb443bc71b2319d8cce276b280c26d0f18fb7)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/e202ba30735bcc8ebcf7bacaa11a8e3bfdb1c2dd)

* [OCPBUGS-78231](https://issues.redhat.com/browse/OCPBUGS-78231): [release-4.12] hermetic 4.12 [#595](https://github.com/openshift/cluster-api-provider-aws/pull/595)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/16156accbe3b9bcedbe39ef988170e1f644fcd75...e202ba30735bcc8ebcf7bacaa11a8e3bfdb1c2dd)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/bbab20f9559a1be6f39fed8e604712d41f507b49)

* [OCPBUGS-33457](https://issues.redhat.com/browse/OCPBUGS-33457): UPSTREAM: 1919: Add reserved-volume-attachments [#267](https://github.com/openshift/aws-ebs-csi-driver/pull/267)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/722a0bacdba3235f3f5d209d0b8006180c6f8446...bbab20f9559a1be6f39fed8e604712d41f507b49)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/ec6236c7dcd9d84e3d2972bae5171a028a20f903)

* [OCPBUGS-67399](https://issues.redhat.com/browse/OCPBUGS-67399): Updated logrus to v1.8.3 [#315](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/315)
* [OCPBUGS-33457](https://issues.redhat.com/browse/OCPBUGS-33457): Explicitly reserve 1 attachment for the root disk [#308](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/308)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/0c97ef8f1171e0fc3a94b093131a89a2f225f73b...ec6236c7dcd9d84e3d2972bae5171a028a20f903)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/7744fb3df32e168dc70d55859a76e83d21ef81fd)

* [OCPBUGS-78268](https://issues.redhat.com/browse/OCPBUGS-78268): hermetic 4.12 [#176](https://github.com/openshift/machine-api-provider-aws/pull/176)
* [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce metrics cardinality [#97](https://github.com/openshift/machine-api-provider-aws/pull/97)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/d9412def9795e7d7d3d8c118b3d99b1eab8f1b46...7744fb3df32e168dc70d55859a76e83d21ef81fd)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/31917a5f3e7557916b8e92a0a9ae529ab176f738)

* [OCPBUGS-32880](https://issues.redhat.com/browse/OCPBUGS-32880): Upgrade go-jose module to 2.6.3 [#191](https://github.com/openshift/aws-pod-identity-webhook/pull/191)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/684520730e011b5d6d9ae829dfa23fcb6dcfdd52...31917a5f3e7557916b8e92a0a9ae529ab176f738)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/45b8076509ac2502a71aa398bb7157ddd0acd59b)

* [OCPBUGS-78180](https://issues.redhat.com/browse/OCPBUGS-78180): [release-4.12] Hermetic 4.12 [#368](https://github.com/openshift/cluster-api-provider-azure/pull/368)
* [OCPBUGS-36021](https://issues.redhat.com/browse/OCPBUGS-36021): Update go-retryablehttp to v0.7.7 [#315](https://github.com/openshift/cluster-api-provider-azure/pull/315)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/32491247e933ad705424d5bdac0ab7770ac63789...45b8076509ac2502a71aa398bb7157ddd0acd59b)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/eaff73991bfa79e71e20ec858497e30df5f10cc2)

* [OCPBUGS-56067](https://issues.redhat.com/browse/OCPBUGS-56067): tech debt: rework vendor patches [#106](https://github.com/openshift/azure-disk-csi-driver/pull/106)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a930c89beac514d4d98f6055bf6cfe78eeec25a5...eaff73991bfa79e71e20ec858497e30df5f10cc2)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/71d2f5699b1ecf3c9e366a795d684dfed22fcbaf)

* [OCPBUGS-67404](https://issues.redhat.com/browse/OCPBUGS-67404): Bump github.com/sirupsen/logrus to v1.8.3 [#116](https://github.com/openshift/azure-file-csi-driver-operator/pull/116)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/060ba825fead5953bef544017ef4b3d0cbabe3e5...71d2f5699b1ecf3c9e366a795d684dfed22fcbaf)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/437b084b1d6f1e38a0eb0c421580a4ed253ebdd1)

* [OCPBUGS-78266](https://issues.redhat.com/browse/OCPBUGS-78266): hermetic 4.12 [#188](https://github.com/openshift/machine-api-provider-azure/pull/188)
* [OCPBUGS-36148](https://issues.redhat.com/browse/OCPBUGS-36148): Fix mapi_instance_create_failed metric with accelerated networking [#115](https://github.com/openshift/machine-api-provider-azure/pull/115)
* [OCPBUGS-30809](https://issues.redhat.com/browse/OCPBUGS-30809): Don't create availability set when using spot instances [#105](https://github.com/openshift/machine-api-provider-azure/pull/105)
* [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce cardinality [#97](https://github.com/openshift/machine-api-provider-azure/pull/97)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/dd5d926015b8c102f021bed0ead4c8d9a5c09697...437b084b1d6f1e38a0eb0c421580a4ed253ebdd1)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b86064a94ccd47a4547bd16771de98dc36a4abb0)

* [OCPBUGS-83750](https://issues.redhat.com/browse/OCPBUGS-83750): Azure UPI ARM template: use storageAccountId [#10511](https://github.com/openshift/installer/pull/10511)
* [OCPBUGS-78352](https://issues.redhat.com/browse/OCPBUGS-78352): terraform/providers/google: Fixing inconsistencies with the service account creation [#10385](https://github.com/openshift/installer/pull/10385)
* [OCPBUGS-66250](https://issues.redhat.com/browse/OCPBUGS-66250): Replace terraform-provider-google with Openshift fork [#10144](https://github.com/openshift/installer/pull/10144)
* [OCPBUGS-62820](https://issues.redhat.com/browse/OCPBUGS-62820): Release 4.12 bump terraform provider azurerm [#10002](https://github.com/openshift/installer/pull/10002)
* [OCPBUGS-55035](https://issues.redhat.com/browse/OCPBUGS-55035): IBMCloud: Move to IBM TF openshift fork [#9670](https://github.com/openshift/installer/pull/9670)
* [OTA-1310](https://issues.redhat.com/browse/OTA-1310): data/manifests/bootkube/cvo-overrides: Default to eus-4.12 [#9373](https://github.com/openshift/installer/pull/9373)
* [OCPBUGS-36087](https://issues.redhat.com/browse/OCPBUGS-36087): [release-4.12]: bump go-retryablehttp for CVE fix [#8660](https://github.com/openshift/installer/pull/8660)
* [OCPBUGS-39290](https://issues.redhat.com/browse/OCPBUGS-39290): Add yq v4 to ci image [#8929](https://github.com/openshift/installer/pull/8929)
* [OCPBUGS-36179](https://issues.redhat.com/browse/OCPBUGS-36179): [release-4.12]: bump github.com/container/images for CVE fix [#8663](https://github.com/openshift/installer/pull/8663)
* [OCPBUGS-22981](https://issues.redhat.com/browse/OCPBUGS-22981): IBMCloud: Add eu-es region [#7686](https://github.com/openshift/installer/pull/7686)
* [OCPBUGS-30630](https://issues.redhat.com/browse/OCPBUGS-30630): baremetal: populate customDeploy in advance [#8144](https://github.com/openshift/installer/pull/8144)
* [OCPBUGS-32449](https://issues.redhat.com/browse/OCPBUGS-32449): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8290](https://github.com/openshift/installer/pull/8290)
* [OCPBUGS-30768](https://issues.redhat.com/browse/OCPBUGS-30768): update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 [#8140](https://github.com/openshift/installer/pull/8140)
* [OCPBUGS-30134](https://issues.redhat.com/browse/OCPBUGS-30134): [release-4.12] bump containerd for vulnerability fix [#8091](https://github.com/openshift/installer/pull/8091)
* [OCPBUGS-27454](https://issues.redhat.com/browse/OCPBUGS-27454): baremetal: correct external_http_url for v6-only BMCs [#7900](https://github.com/openshift/installer/pull/7900)
* [Full changelog](https://github.com/openshift/installer/compare/d1ec11d0765e50e9be81fb9fd88fe7d0747e1aea...b86064a94ccd47a4547bd16771de98dc36a4abb0)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/018883ee274f8f329f84f1d0ba3d24138a6a8545)

* [OCPBUGS-78103](https://issues.redhat.com/browse/OCPBUGS-78103): [release-4.12] fix vendor/ for hermetic migration [#247](https://github.com/openshift/cluster-api-provider-baremetal/pull/247)
* [OCPBUGS-46642](https://issues.redhat.com/browse/OCPBUGS-46642): Bump x/net to 0.33.0 [#230](https://github.com/openshift/cluster-api-provider-baremetal/pull/230)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/24a47014aa42d649008687c5bd81771d6477c33c...018883ee274f8f329f84f1d0ba3d24138a6a8545)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/6817f4e2b1d2005492b380381a2a960d912d5c2c)

* [OCPBUGS-53335](https://issues.redhat.com/browse/OCPBUGS-53335): CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] [#412](https://github.com/openshift/baremetal-operator/pull/412)
* [OCPBUGS-30630](https://issues.redhat.com/browse/OCPBUGS-30630): Do not update instance_info and deploy_interface for active nodes [#338](https://github.com/openshift/baremetal-operator/pull/338)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/83283488bfa2b39c2ebde08a6cc4e36c3227263a...6817f4e2b1d2005492b380381a2a960d912d5c2c)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d691257345aeeec951c763e11658a944037f9b39)

* [OCPBUGS-30289](https://issues.redhat.com/browse/OCPBUGS-30289): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1701](https://github.com/openshift/oc/pull/1701)
* [Full changelog](https://github.com/openshift/oc/compare/d4c9e3c75516a96850ac843d0384f4b1eb4f4957...d691257345aeeec951c763e11658a944037f9b39)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/5a4483cd9e34aaced47484339874cb4a8aeda9b9)

* [OCPBUGS-53420](https://issues.redhat.com/browse/OCPBUGS-53420): github.com/golang/glog v1.2.4 [#847](https://github.com/openshift/cloud-credential-operator/pull/847)
* [OCPBUGS-51538](https://issues.redhat.com/browse/OCPBUGS-51538): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#832](https://github.com/openshift/cloud-credential-operator/pull/832)
* [OCPBUGS-37322](https://issues.redhat.com/browse/OCPBUGS-37322): update modules: grpc, protobuf, logrus [#764](https://github.com/openshift/cloud-credential-operator/pull/764)
* [OCPBUGS-42166](https://issues.redhat.com/browse/OCPBUGS-42166): Resolve SNYK errors in security job. [#760](https://github.com/openshift/cloud-credential-operator/pull/760)
* [OCPBUGS-37422](https://issues.redhat.com/browse/OCPBUGS-37422): SNYK ignore go-client misreporting [#744](https://github.com/openshift/cloud-credential-operator/pull/744)
* NO-JIRA: Add jstuever to OWNERS [#733](https://github.com/openshift/cloud-credential-operator/pull/733)
* [OCPBUGS-36027](https://issues.redhat.com/browse/OCPBUGS-36027): IBM/go-sdk-core update to v5.17.4 [#723](https://github.com/openshift/cloud-credential-operator/pull/723)
* [OCPBUGS-32897](https://issues.redhat.com/browse/OCPBUGS-32897): Upgrade go-jose module to 2.6.3 [#699](https://github.com/openshift/cloud-credential-operator/pull/699)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c1c1417e8e9003a4289fb5a0fc9e92dc37bc2e3e...5a4483cd9e34aaced47484339874cb4a8aeda9b9)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/c086bed76ee3d3b3fe9f516f873414e7b4348acd)

* [OCPBUGS-33198](https://issues.redhat.com/browse/OCPBUGS-33198): Avoid nil pointer panic while assigning private IP on Azure [#141](https://github.com/openshift/cloud-network-config-controller/pull/141)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/0b191405af9a0632a09d9f857bb550c7efbba20f...c086bed76ee3d3b3fe9f516f873414e7b4348acd)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d16352d90b619d85e9934346116a5812611ebdff)

* [OCPBUGS-45152](https://issues.redhat.com/browse/OCPBUGS-45152): [release-4.12] VPA: Update OWNERS file [#329](https://github.com/openshift/kubernetes-autoscaler/pull/329)
* [OCPBUGS-40928](https://issues.redhat.com/browse/OCPBUGS-40928): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#318](https://github.com/openshift/kubernetes-autoscaler/pull/318)
* [OCPBUGS-30911](https://issues.redhat.com/browse/OCPBUGS-30911): Fix unstructured taint parsing in Cluster API provider [#291](https://github.com/openshift/kubernetes-autoscaler/pull/291)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/dd2b39d6fa6f1d139e1f34f8335215411660b9c8...d16352d90b619d85e9934346116a5812611ebdff)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/29a6e57c10cf027f5f04e9bcb2e8842497f63bf6)

* [OCPBUGS-32005](https://issues.redhat.com/browse/OCPBUGS-32005): Update x/net to v0.25.0 [#325](https://github.com/openshift/cluster-autoscaler-operator/pull/325)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/67999a5e79d0200ee0a4aab3dcfbfd18e097b514...29a6e57c10cf027f5f04e9bcb2e8842497f63bf6)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/497529d0cc55285f1dd625975cfcceba0ecfb1f8)

* [OCPBUGS-77451](https://issues.redhat.com/browse/OCPBUGS-77451): Bump github.com/go-errors/errors to v1.5.1 [#566](https://github.com/openshift/cluster-baremetal-operator/pull/566)
* [OCPBUGS-32006](https://issues.redhat.com/browse/OCPBUGS-32006): bump x/net to 0.23.0 [#440](https://github.com/openshift/cluster-baremetal-operator/pull/440)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/18c92d2feec0eb2e0665fcf6e914b5f512e634f6...497529d0cc55285f1dd625975cfcceba0ecfb1f8)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/2838134e495b5cfd18f501444a414bed28d8c5b2)

* [OCPBUGS-77976](https://issues.redhat.com/browse/OCPBUGS-77976): fix vendor for hermetic [#267](https://github.com/openshift/cluster-api/pull/267)
* [Full changelog](https://github.com/openshift/cluster-api/compare/03d89f216e0f2c3e1b2a647b0e37d52bbfdaefee...2838134e495b5cfd18f501444a414bed28d8c5b2)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/641193101844d52ca0ab3f9fb5e6137f990d5d18)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#564](https://github.com/openshift/cluster-capi-operator/pull/564)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/60a36d8320ddfd196840a1597e61c065603778ee...641193101844d52ca0ab3f9fb5e6137f990d5d18)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/92c3b10237c1ebf7ab7a0c744db3949377614e52)

* [OCPBUGS-16243](https://issues.redhat.com/browse/OCPBUGS-16243): retire LatencySensitive featureset [#336](https://github.com/openshift/cluster-config-operator/pull/336)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/4699df19b2c6e8b4ba9fe101f25cd5d1c434c380...92c3b10237c1ebf7ab7a0c744db3949377614e52)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/fb7f08a2a6e85f3ca76c40dcf980ba0ec904a617)

* [OCPBUGS-48325](https://issues.redhat.com/browse/OCPBUGS-48325): Add unreadyNodeGracePeriod for allowing brief node hiccups [#344](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/344)
* [OCPBUGS-35421](https://issues.redhat.com/browse/OCPBUGS-35421): Improved debugging of API listing errors [#306](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/306)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b7ca2f16de7ae23b3793abee945d0453223f7aaf...fb7f08a2a6e85f3ca76c40dcf980ba0ec904a617)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/f573eded61847fc153874615b29704d93ddcad8d)

* [OCPBUGS-32429](https://issues.redhat.com/browse/OCPBUGS-32429): create suitable role and roleBinding for csi-snapshot-webhook [#207](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/207)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/afc1c5d34086fc7522bf98af7b2d9c58bc9bd03a...f573eded61847fc153874615b29704d93ddcad8d)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/09a1de9faff75611ce9bdbfc472f052159780922)

* [OCPBUGS-52502](https://issues.redhat.com/browse/OCPBUGS-52502): [release-4.12] Add runbook_url for CoreDNSErrorsHigh [#435](https://github.com/openshift/cluster-dns-operator/pull/435)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/e955534113ef9a65ad055198eab63ba7d60fbd21...09a1de9faff75611ce9bdbfc472f052159780922)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/a357bfbe683cf1652a94ef9b3add4b6dfce46777)

* [OCPBUGS-67421](https://issues.redhat.com/browse/OCPBUGS-67421): Update logrus to 1.9.3 to address CVE-2025-65637 [#1550](https://github.com/openshift/cluster-etcd-operator/pull/1550)
* [OCPBUGS-53508](https://issues.redhat.com/browse/OCPBUGS-53508): fix CVE-2025-30204 [#1416](https://github.com/openshift/cluster-etcd-operator/pull/1416)
* [OCPBUGS-35501](https://issues.redhat.com/browse/OCPBUGS-35501): return errors in wait-for-ceo [#1277](https://github.com/openshift/cluster-etcd-operator/pull/1277)
* [OCPBUGS-32001](https://issues.redhat.com/browse/OCPBUGS-32001): update golang x net [#1256](https://github.com/openshift/cluster-etcd-operator/pull/1256)
* [OCPBUGS-30914](https://issues.redhat.com/browse/OCPBUGS-30914): Replace nodelister with master nodelister everywhere [#1224](https://github.com/openshift/cluster-etcd-operator/pull/1224)
* [OCPBUGS-30938](https://issues.redhat.com/browse/OCPBUGS-30938): fix panic in health check timeouts [#1228](https://github.com/openshift/cluster-etcd-operator/pull/1228)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/ea5555a4551686bce78c44af004bd87191da2d0d...a357bfbe683cf1652a94ef9b3add4b6dfce46777)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/ea0cf34fca0ba26418abfbf10160bdc714bce288)

* [OCPBUGS-67422](https://issues.redhat.com/browse/OCPBUGS-67422): Bump logrus to 1.8.3 [#1292](https://github.com/openshift/cluster-image-registry-operator/pull/1292)
* [OCPBUGS-53868](https://issues.redhat.com/browse/OCPBUGS-53868): Bump github.com/golang-jwt/jwt [#1236](https://github.com/openshift/cluster-image-registry-operator/pull/1236)
* [OCPBUGS-51594](https://issues.redhat.com/browse/OCPBUGS-51594): bump golang.org/x/oauth2 [#1223](https://github.com/openshift/cluster-image-registry-operator/pull/1223)
* [OCPBUGS-36033](https://issues.redhat.com/browse/OCPBUGS-36033): go.*,vendor: bump go-retryablehttp [#1071](https://github.com/openshift/cluster-image-registry-operator/pull/1071)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/0e04e37acf8ea366dd94dfadec274df06e35eb44...ea0cf34fca0ba26418abfbf10160bdc714bce288)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/85e2d05159b7b4b2f16c8a95815c7d9927b68597)

* [OCPBUGS-43703](https://issues.redhat.com/browse/OCPBUGS-43703): Add e2e test for duplicate Transfer-Encoding headers [#1158](https://github.com/openshift/cluster-ingress-operator/pull/1158)
* [OCPBUGS-43703](https://issues.redhat.com/browse/OCPBUGS-43703): Add alert for RFC 7230 violation in Transfer-Encoding headers [#1162](https://github.com/openshift/cluster-ingress-operator/pull/1162)
* [OCPBUGS-35454](https://issues.redhat.com/browse/OCPBUGS-35454): internal service changed fix target port logic [#1092](https://github.com/openshift/cluster-ingress-operator/pull/1092)
* [OCPBUGS-35304](https://issues.redhat.com/browse/OCPBUGS-35304): TestHostNetworkPortBinding: Delete t.Parallel() [#1083](https://github.com/openshift/cluster-ingress-operator/pull/1083)
* [OCPBUGS-35027](https://issues.redhat.com/browse/OCPBUGS-35027): Don't add clientca-configmap finalizer if deleting [#1080](https://github.com/openshift/cluster-ingress-operator/pull/1080)
* [OCPBUGS-34888](https://issues.redhat.com/browse/OCPBUGS-34888): desiredRouterDeployment: Set HostPort if needed [#1076](https://github.com/openshift/cluster-ingress-operator/pull/1076)
* [OCPBUGS-34757](https://issues.redhat.com/browse/OCPBUGS-34757): Avoid spurious updates for internalTrafficPolicy [#1070](https://github.com/openshift/cluster-ingress-operator/pull/1070)
* [OCPBUGS-34110](https://issues.redhat.com/browse/OCPBUGS-34110): Avoid spurious updates for scope in IngressClass [#1056](https://github.com/openshift/cluster-ingress-operator/pull/1056)
* [OCPBUGS-34548](https://issues.redhat.com/browse/OCPBUGS-34548): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1068](https://github.com/openshift/cluster-ingress-operator/pull/1068)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/5e62d563730970b50de6463a035e0e033210484d...85e2d05159b7b4b2f16c8a95815c7d9927b68597)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/780e87cb488fdeba4ec57b47ade541bd7ccb918b)

* [OCPBUGS-67424](https://issues.redhat.com/browse/OCPBUGS-67424): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.12.z] [#2048](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2048)
* [OCPBUGS-50880](https://issues.redhat.com/browse/OCPBUGS-50880): Increase waitForFallbackDegradedConditionTimeout [#1811](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1811)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/09d7ddbaba9eb5715313e716476e6a33848d045c...780e87cb488fdeba4ec57b47ade541bd7ccb918b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/a0e7f248ac0e15fccbc2aa45e75261fc616791a0)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#628](https://github.com/openshift/cluster-kube-scheduler-operator/pull/628)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/48cd96c9dc27c801beff17fa5ea8c3dac374f10d...a0e7f248ac0e15fccbc2aa45e75261fc616791a0)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/0b5686a5b40808b3548d1d2899d1899788b489a2)

* [OCPBUGS-67429](https://issues.redhat.com/browse/OCPBUGS-67429): Bump github.com/sirupsen/logrus to v1.8.3 [#143](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/143)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/1a251f4d00c050404dc313c698279da435d08c07...0b5686a5b40808b3548d1d2899d1899788b489a2)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/16c55ea0b724ac2b28c92a4af599a5772c942c83)

* [OCPBUGS-76642](https://issues.redhat.com/browse/OCPBUGS-76642): test: remove image registry e2e tests [#2816](https://github.com/openshift/cluster-monitoring-operator/pull/2816)
* [OCPBUGS-77403](https://issues.redhat.com/browse/OCPBUGS-77403): test/e2e: improve prometheus remote-write test [#2819](https://github.com/openshift/cluster-monitoring-operator/pull/2819)
* [OCPBUGS-35558](https://issues.redhat.com/browse/OCPBUGS-35558): label for infra nodes for metric cluster:capacity_cpu_cores:sum [#2383](https://github.com/openshift/cluster-monitoring-operator/pull/2383)
* [OCPBUGS-28766](https://issues.redhat.com/browse/OCPBUGS-28766): fix generation of telemeter token hash [#2306](https://github.com/openshift/cluster-monitoring-operator/pull/2306)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/60117fa0c7cf54be1dd1ea275e592ab54f85db53...16c55ea0b724ac2b28c92a4af599a5772c942c83)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/28db40f169f64f881b0628c19bf7c64a7a9a2467)

* [OCPBUGS-43872](https://issues.redhat.com/browse/OCPBUGS-43872): manifests/02-cncc-credentials: Set skipServiceCheck for GCP [#2548](https://github.com/openshift/cluster-network-operator/pull/2548)
* [OCPBUGS-38905](https://issues.redhat.com/browse/OCPBUGS-38905): Add missing runbook for OVNKubernetesNorthdInactive [#2479](https://github.com/openshift/cluster-network-operator/pull/2479)
* [OCPBUGS-37942](https://issues.redhat.com/browse/OCPBUGS-37942): [release-4.12] update whereabouts crd [#2461](https://github.com/openshift/cluster-network-operator/pull/2461)
* [OCPBUGS-29167](https://issues.redhat.com/browse/OCPBUGS-29167): fix whereabouts conformance test failures [#2256](https://github.com/openshift/cluster-network-operator/pull/2256)
* [OCPBUGS-29884](https://issues.redhat.com/browse/OCPBUGS-29884): add env var in whereabouts-reconciler daemonset [#2284](https://github.com/openshift/cluster-network-operator/pull/2284)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/9d32b4605a13909860bcd723c8e046b974d2e501...28db40f169f64f881b0628c19bf7c64a7a9a2467)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/20966da941ab8773261b5b4c133f3a1716699243)

* irqbalance: set banned cpus list to 0 (#1006) [#1006](https://github.com/openshift/cluster-node-tuning-operator/pull/1006)
* Refactor IRQ load balancing enable/disable test (#1038) [#1038](https://github.com/openshift/cluster-node-tuning-operator/pull/1038)
* Scheduler plugin: ignore IRQs (#1034) [#1034](https://github.com/openshift/cluster-node-tuning-operator/pull/1034)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/dd95a4d7dbf6e5188a9c260e3d331f627c124747...20966da941ab8773261b5b4c133f3a1716699243)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/a1d5d0d7948019bea4fd18bb9f60d5c31fd277ed)

* [OCPBUGS-76594](https://issues.redhat.com/browse/OCPBUGS-76594): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] [#660](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/b870fc67ef5a0e92df5e5bed1ba0cb1cf197d8c6...a1d5d0d7948019bea4fd18bb9f60d5c31fd277ed)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/24b10d4192fcc08e5aa9918caf3c571398a047e2)

* [OCPBUGS-63521](https://issues.redhat.com/browse/OCPBUGS-63521): references to github.com/sclorg/django-ex.git now also refer to the branch [#663](https://github.com/openshift/cluster-samples-operator/pull/663)
* [OCPBUGS-54913](https://issues.redhat.com/browse/OCPBUGS-54913): add rhdmalone to owners [#629](https://github.com/openshift/cluster-samples-operator/pull/629)
* [OCPBUGS-49664](https://issues.redhat.com/browse/OCPBUGS-49664): add shannon and aroyoredhat as owners [#600](https://github.com/openshift/cluster-samples-operator/pull/600)
* [OCPBUGS-21179](https://issues.redhat.com/browse/OCPBUGS-21179): update k8s.io/apiserver version [#590](https://github.com/openshift/cluster-samples-operator/pull/590)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/f1b49e34512d38bf908183318edd1f9f9aeef883...24b10d4192fcc08e5aa9918caf3c571398a047e2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/29fce41d2bac26b61d2f8ebaa0aa29a15a18a190)

* [OCPBUGS-67444](https://issues.redhat.com/browse/OCPBUGS-67444): Bump logrus to v1.8.3 [#657](https://github.com/openshift/cluster-storage-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/21ebf328f53182111eb7dce344487ba633d09b1a...29fce41d2bac26b61d2f8ebaa0aa29a15a18a190)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/da2578c6dd81e83d331daacb357c4f1cc60bf234)

* [OCPBUGS-45333](https://issues.redhat.com/browse/OCPBUGS-45333): deps: bump golang.org/x/net to 0.31.0 [#1122](https://github.com/openshift/cluster-version-operator/pull/1122)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/8e2c472a67964065c8aa271f85ef7f7e57726ac4...da2578c6dd81e83d331daacb357c4f1cc60bf234)


### [console](https://github.com/openshift/console/tree/e5e64b8070a00233dc346881b3256b000b37c48f)

* [ART-18753](https://issues.redhat.com/browse/ART-18753): pin fsevents to latest [#16482](https://github.com/openshift/console/pull/16482)
* NO-JIRA: enable multi-architecture yarn builds [#16422](https://github.com/openshift/console/pull/16422)
* NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.12 [#12539](https://github.com/openshift/console/pull/12539)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16084](https://github.com/openshift/console/pull/16084)
* NO-JIRA: Bump builder image to v29 [#15988](https://github.com/openshift/console/pull/15988)
* [OCPBUGS-74435](https://issues.redhat.com/browse/OCPBUGS-74435): Bump lodash to latest [#15973](https://github.com/openshift/console/pull/15973)
* [OCPBUGS-44155](https://issues.redhat.com/browse/OCPBUGS-44155): bump dompurify to latest [#15595](https://github.com/openshift/console/pull/15595)
* [OCPBUGS-57101](https://issues.redhat.com/browse/OCPBUGS-57101): Add all files to `vendor` regardless of gitignore [#15137](https://github.com/openshift/console/pull/15137)
* [OCPBUGS-55210](https://issues.redhat.com/browse/OCPBUGS-55210): Show Observe section without PROMETHEUS and MONITORING flags [#14986](https://github.com/openshift/console/pull/14986)
* Dockerfile yarn line update [#14838](https://github.com/openshift/console/pull/14838)
* [OCPBUGS-45291](https://issues.redhat.com/browse/OCPBUGS-45291): Application creation fail when manually entering input scaling value in local setup [#14572](https://github.com/openshift/console/pull/14572)
* [OCPBUGS-45235](https://issues.redhat.com/browse/OCPBUGS-45235): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#14561](https://github.com/openshift/console/pull/14561)
* [OCPBUGS-36561](https://issues.redhat.com/browse/OCPBUGS-36561): Increase login flow state paramater length/entropy [#14539](https://github.com/openshift/console/pull/14539)
* [OCPBUGS-43639](https://issues.redhat.com/browse/OCPBUGS-43639): Copy response code from proxied plugin requests [#14423](https://github.com/openshift/console/pull/14423)
* [OCPBUGS-33519](https://issues.redhat.com/browse/OCPBUGS-33519): Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). [#14334](https://github.com/openshift/console/pull/14334)
* [OCPBUGS-41600](https://issues.redhat.com/browse/OCPBUGS-41600): Fix plugin proxy handler [#14266](https://github.com/openshift/console/pull/14266)
* [OCPBUGS-41854](https://issues.redhat.com/browse/OCPBUGS-41854): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14283](https://github.com/openshift/console/pull/14283)
* [OCPBUGS-34564](https://issues.redhat.com/browse/OCPBUGS-34564): Routes created by devfiles do not always use HTTPS [#13907](https://github.com/openshift/console/pull/13907)
* [OCPBUGS-34933](https://issues.redhat.com/browse/OCPBUGS-34933): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13930](https://github.com/openshift/console/pull/13930)
* [OCPBUGS-32146](https://issues.redhat.com/browse/OCPBUGS-32146): Bump graphql-go to v1.3.0 [#13923](https://github.com/openshift/console/pull/13923)
* [OCPBUGS-34845](https://issues.redhat.com/browse/OCPBUGS-34845): Fix PipelineRun Logs tab navigation [#13920](https://github.com/openshift/console/pull/13920)
* [OCPBUGS-33778](https://issues.redhat.com/browse/OCPBUGS-33778): fix issues with Edit Route form [#13859](https://github.com/openshift/console/pull/13859)
* [OCPBUGS-27479](https://issues.redhat.com/browse/OCPBUGS-27479): Bump helm pkg [#13528](https://github.com/openshift/console/pull/13528)
* [OCPBUGS-29746](https://issues.redhat.com/browse/OCPBUGS-29746): Add Pipeline metrics tab using plugin [#13621](https://github.com/openshift/console/pull/13621)
* [Full changelog](https://github.com/openshift/console/compare/a84fbcf5b3cf88f4d620d79b513f08fbe4ab8441...e5e64b8070a00233dc346881b3256b000b37c48f)


### [console-operator](https://github.com/openshift/console-operator/tree/a67babae3f15939f017e4773eb40d523980e7aaf)

* Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.12 [#1137](https://github.com/openshift/console-operator/pull/1137)
* [OCPBUGS-77996](https://issues.redhat.com/browse/OCPBUGS-77996): [release-4.12] NO-JIRA: update go mod dependency for konflux [#1119](https://github.com/openshift/console-operator/pull/1119)
* [OCPBUGS-33386](https://issues.redhat.com/browse/OCPBUGS-33386): Reset console operator's conditions [#898](https://github.com/openshift/console-operator/pull/898)
* [OCPBUGS-20988](https://issues.redhat.com/browse/OCPBUGS-20988): Disable HTTP/2 for webhook [#876](https://github.com/openshift/console-operator/pull/876)
* [OCPBUGS-30990](https://issues.redhat.com/browse/OCPBUGS-30990): [release-4.12] Bump library-go and golang.org/x/net [#867](https://github.com/openshift/console-operator/pull/867)
* [Full changelog](https://github.com/openshift/console-operator/compare/7ea10a2488ec62b73cd4a9b462ff675ef0c9af3d...a67babae3f15939f017e4773eb40d523980e7aaf)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/cd87d3d3d8f2697b993a48fe8658c3af6e8cbf46)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Fix Hermeto build issues [#198](https://github.com/openshift/containernetworking-plugins/pull/198)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/1b33971993ca1013be9f24690c44560d2c58c70a...cd87d3d3d8f2697b993a48fe8658c3af6e8cbf46)


### [coredns](https://github.com/openshift/coredns/tree/95d00296af2965045ef25de7d04da21d8846b9da)

* [OCPBUGS-59711](https://issues.redhat.com/browse/OCPBUGS-59711): Bump github.com/golang/glog to v1.2.4 [#151](https://github.com/openshift/coredns/pull/151)
* [Full changelog](https://github.com/openshift/coredns/compare/cc1194ea004f6b4bcb132fd1c6cebee68666d38f...95d00296af2965045ef25de7d04da21d8846b9da)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/e4b52b8b2922041dafbdd4b31adf89d2ef46b84b)

* [OCPBUGS-67448](https://issues.redhat.com/browse/OCPBUGS-67448): CVE-2025-65637 [#365](https://github.com/openshift/cloud-provider-openstack/pull/365)
* [OCPBUGS-58889](https://issues.redhat.com/browse/OCPBUGS-58889): CARRY: don't ignore json files [#345](https://github.com/openshift/cloud-provider-openstack/pull/345)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/2f1d9f8ac6af4364d8118c874b0071d9e9f3ee65...e4b52b8b2922041dafbdd4b31adf89d2ef46b84b)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/8cdb2f63ca1d9816e932afd4c18430c9d708458f)

* [OCPBUGS-67449](https://issues.redhat.com/browse/OCPBUGS-67449): Bump logrus [#255](https://github.com/openshift/csi-driver-manila-operator/pull/255)
* [OCPBUGS-30295](https://issues.redhat.com/browse/OCPBUGS-30295): Fix selector for manila-csi-driver-controller-metrics service [#228](https://github.com/openshift/csi-driver-manila-operator/pull/228)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/a0d079a079603589b9e272465f99befb001c23db...8cdb2f63ca1d9816e932afd4c18430c9d708458f)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/239935ec6666f4c0e86f8f955a68c67d97880b86)

* [OCPBUGS-84927](https://issues.redhat.com/browse/OCPBUGS-84927): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#186](https://github.com/openshift/csi-driver-nfs/pull/186)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/d90992573acb3df6c7fbb6dbe1b215125d26fc34...239935ec6666f4c0e86f8f955a68c67d97880b86)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf)

* [OCPBUGS-29244](https://issues.redhat.com/browse/OCPBUGS-29244): cherry-pick:release-4.12: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#140](https://github.com/openshift/csi-external-snapshotter/pull/140)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/7f04d8aa1bf09e22bf750aa8757345ca2098609b...6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf)


### [docker-builder](https://github.com/openshift/builder/tree/e3554521a3e6270238c4ad4e765187bc77d99e2d)

* [OCPBUGS-43296](https://issues.redhat.com/browse/OCPBUGS-43296): Bump buildah to 1.26.9 [#449](https://github.com/openshift/builder/pull/449)
* [OCPBUGS-43187](https://issues.redhat.com/browse/OCPBUGS-43187): runc library bump to 1.1.12 [#440](https://github.com/openshift/builder/pull/440)
* [OCPBUGS-49345](https://issues.redhat.com/browse/OCPBUGS-49345): skipping some unit tests to avoid failures as they are duplicate [#437](https://github.com/openshift/builder/pull/437)
* [OCPBUGS-48738](https://issues.redhat.com/browse/OCPBUGS-48738): Add new team members to the OWNERS file [#433](https://github.com/openshift/builder/pull/433)
* Replace 'coreydaley' with 'sayan-biswas' [#408](https://github.com/openshift/builder/pull/408)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#406](https://github.com/openshift/builder/pull/406)
* [Full changelog](https://github.com/openshift/builder/compare/a1cce53440f2f491c16c1b2c5a5b9986ba28c3fc...e3554521a3e6270238c4ad4e765187bc77d99e2d)


### [docker-registry](https://github.com/openshift/image-registry/tree/e96baf4be1a6f236a44740d0c23847a6d614cf09)

* [OCPBUGS-53652](https://issues.redhat.com/browse/OCPBUGS-53652): bump jwt and oauth dependencies [#442](https://github.com/openshift/image-registry/pull/442)
* [Full changelog](https://github.com/openshift/image-registry/compare/9e75355ca282cf5abac5595585a4b089e6a95e6f...e96baf4be1a6f236a44740d0c23847a6d614cf09)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/8ab7a753b01301be406dfbbb0064836dcc6dd2de)

* [OCPBUGS-63597](https://issues.redhat.com/browse/OCPBUGS-63597): Remove realtime kernel from 4.12.z [#176](https://github.com/openshift/driver-toolkit/pull/176)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/6e5c04c066a428047d1755478cf88b290d32ad8f...8ab7a753b01301be406dfbbb0064836dcc6dd2de)


### [etcd](https://github.com/openshift/etcd/tree/bb82e891abeaddd57e1a07775874d71f2ddd9e85)

* [OCPBUGS-28736](https://issues.redhat.com/browse/OCPBUGS-28736): Rebase etcd 3.5.12 openshift 4.12 [#246](https://github.com/openshift/etcd/pull/246)
* [Full changelog](https://github.com/openshift/etcd/compare/bb43fb58e2284fb9732045bdfafb9e702490f449...bb82e891abeaddd57e1a07775874d71f2ddd9e85)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/88879fd12aafb43bd4ce15dc09be6fbd911fb799)

* [OCPBUGS-78284](https://issues.redhat.com/browse/OCPBUGS-78284): [release-4.12] hermetic migration 4.12 [#278](https://github.com/openshift/cluster-api-provider-gcp/pull/278)
* [OCPBUGS-78284](https://issues.redhat.com/browse/OCPBUGS-78284): [release-4.12] hermetic migration 4.12 [#271](https://github.com/openshift/cluster-api-provider-gcp/pull/271)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/e00019faa4bd74f70826344a8cc085ba13768422...88879fd12aafb43bd4ce15dc09be6fbd911fb799)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/3fef2d75db28e9cac5a5027d70d02e29f940bab4)

* [OCPBUGS-78183](https://issues.redhat.com/browse/OCPBUGS-78183): hermetic 4.12 [#143](https://github.com/openshift/machine-api-provider-gcp/pull/143)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/d6d8c1cc5b58ff7cf311bcb72dbeb00eb704511a...3fef2d75db28e9cac5a5027d70d02e29f940bab4)


### [haproxy-router](https://github.com/openshift/router/tree/186bf224d0460677a0ba4e4d341212ed71440b92)

* [OCPBUGS-78110](https://issues.redhat.com/browse/OCPBUGS-78110): [release-4.12] hermetic 4.12 [#744](https://github.com/openshift/router/pull/744)
* [OCPBUGS-43703](https://issues.redhat.com/browse/OCPBUGS-43703): add duplicate_te_header_total metric [#632](https://github.com/openshift/router/pull/632)
* [OCPBUGS-35875](https://issues.redhat.com/browse/OCPBUGS-35875): Properly handle rewrite-target annotation [#610](https://github.com/openshift/router/pull/610)
* [OCPBUGS-33432](https://issues.redhat.com/browse/OCPBUGS-33432): Route 'haproxy.router.openshift.io/timeout' value is not validated [#593](https://github.com/openshift/router/pull/593)
* [OCPBUGS-34212](https://issues.redhat.com/browse/OCPBUGS-34212): Reject routes with MD5 certs [#601](https://github.com/openshift/router/pull/601)
* [OCPBUGS-33517](https://issues.redhat.com/browse/OCPBUGS-33517): Count active services before setting weight to 1 [#581](https://github.com/openshift/router/pull/581)
* [Full changelog](https://github.com/openshift/router/compare/bfb66253ac1ed27efea087d6cf0f9ba9d9cb73df...186bf224d0460677a0ba4e4d341212ed71440b92)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/0e18cfc68b3480db08fb30be0edfb886cf24dd1a)

* [OCPBUGS-77661](https://issues.redhat.com/browse/OCPBUGS-77661): Skip E2e: attach on previously attached volumes should work [#2649](https://github.com/openshift/kubernetes/pull/2649)
* [OCPBUGS-77469](https://issues.redhat.com/browse/OCPBUGS-77469): hermetic 4.12 [#2652](https://github.com/openshift/kubernetes/pull/2652)
* [OCPBUGS-67374](https://issues.redhat.com/browse/OCPBUGS-67374), [OCPBUGS-67472](https://issues.redhat.com/browse/OCPBUGS-67472): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.12] [#2596](https://github.com/openshift/kubernetes/pull/2596)
* [OCPBUGS-78226](https://issues.redhat.com/browse/OCPBUGS-78226): UPSTREAM: 133262: Remove permafailing tests using an expired GCP project [#2625](https://github.com/openshift/kubernetes/pull/2625)
* [OCPBUGS-37282](https://issues.redhat.com/browse/OCPBUGS-37282): UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … [#2046](https://github.com/openshift/kubernetes/pull/2046)
* [OCPBUGS-30454](https://issues.redhat.com/browse/OCPBUGS-30454): CVE 2024-24786 [#1974](https://github.com/openshift/kubernetes/pull/1974)
* UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 [#1940](https://github.com/openshift/kubernetes/pull/1940)
* Address CVE [#13](https://github.com/openshift/kubernetes/pull/13)
* [OCPBUGS-15527](https://issues.redhat.com/browse/OCPBUGS-15527): Prevent partially filled HPA behaviors from crashing kube-controller-manager [#1887](https://github.com/openshift/kubernetes/pull/1887)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6df21776c7879727ab53895df8a03e53fb725d74...0e18cfc68b3480db08fb30be0edfb886cf24dd1a)


### [hypershift](https://github.com/openshift/hypershift/tree/10dcc7d5d8f606955361ec81b1c7560c8e0fa5a2)

* [OCPBUGS-77768](https://issues.redhat.com/browse/OCPBUGS-77768): fix vendor for hermetic 4.12 [#7823](https://github.com/openshift/hypershift/pull/7823)
* Updating ose-hypershift-container image to be consistent with ART for 4.12 [#6976](https://github.com/openshift/hypershift/pull/6976)
* [OCPBUGS-41516](https://issues.redhat.com/browse/OCPBUGS-41516): set Konnectivity cipher suites [#4283](https://github.com/openshift/hypershift/pull/4283)
* [Full changelog](https://github.com/openshift/hypershift/compare/6f1e70162329ed38cb7e58622fc79955e4338f02...10dcc7d5d8f606955361ec81b1c7560c8e0fa5a2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/b35fb49bf4dbb45930bd9588d94343aeac24221d)

* [OCPBUGS-77214](https://issues.redhat.com/browse/OCPBUGS-77214): [release-4.12] standardize build paths [#128](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/128)
* [OCPBUGS-58873](https://issues.redhat.com/browse/OCPBUGS-58873): bump github.com/golang/glog to v1.2.4 [#111](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/111)
* [OCPBUGS-56067](https://issues.redhat.com/browse/OCPBUGS-56067): tech debt: rework vendor patches [#95](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/95)
* [OCPBUGS-53908](https://issues.redhat.com/browse/OCPBUGS-53908): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#88](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/88)
* [OCPBUGS-36063](https://issues.redhat.com/browse/OCPBUGS-36063): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#75](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/75)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/3ddaa8298f63cf342aa344003dcef6ecd4a721f2...b35fb49bf4dbb45930bd9588d94343aeac24221d)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/76a18c3fbebfaf630c2e7b86a5a56cc67aa35c7f)

* [OCPBUGS-67476](https://issues.redhat.com/browse/OCPBUGS-67476), [OCPBUGS-67477](https://issues.redhat.com/browse/OCPBUGS-67477): bump github.com/sirupsen/logrus to v1.8.3 [#163](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/163)
* [OCPBUGS-60058](https://issues.redhat.com/browse/OCPBUGS-60058): [IBM VPC] set offlineExpansion to false in e2e test manifest [#153](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/153)
* [OCPBUGS-36069](https://issues.redhat.com/browse/OCPBUGS-36069): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#124](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/124)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/946ac1326c83727a7791218f1cdf3290dd55ed17...76a18c3fbebfaf630c2e7b86a5a56cc67aa35c7f)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/3cca5da2818c414e11e594c1d1087f86a39b2de2)

* [OCPBUGS-56067](https://issues.redhat.com/browse/OCPBUGS-56067): tech debt: rework vendor patches [#52](https://github.com/openshift/ibm-vpc-node-label-updater/pull/52)
* [OCPBUGS-53540](https://issues.redhat.com/browse/OCPBUGS-53540): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#48](https://github.com/openshift/ibm-vpc-node-label-updater/pull/48)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/f9da23ac8abe04dc1615763e120cd174bde6e617...3cca5da2818c414e11e594c1d1087f86a39b2de2)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/42fddaf18dee49d6ea02e63cbcc2053dbdce4f14)

* [OCPBUGS-67292](https://issues.redhat.com/browse/OCPBUGS-67292): [release-4.12] Fix incomplete vendor/ [#134](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/134)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/0fe74f674bf5a1e464a5e2f872def13e1a9bb2a9...42fddaf18dee49d6ea02e63cbcc2053dbdce4f14)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/f83d5a49544df1740a25777c86a3364c3087d33c)

* [OCPBUGS-78276](https://issues.redhat.com/browse/OCPBUGS-78276): hermetic 4.12 [#79](https://github.com/openshift/machine-api-provider-ibmcloud/pull/79)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/31a67daca92c374cb4d9a87928ec8c28528a0c0e...f83d5a49544df1740a25777c86a3364c3087d33c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/6b543885144d6eb40c7c8342dac15f80e77bb4fa)

* [OCPBUGS-32004](https://issues.redhat.com/browse/OCPBUGS-32004): bump golang.org/x/net version (#932) [#932](https://github.com/openshift/insights-operator/pull/932)
* [OCPBUGS-28519](https://issues.redhat.com/browse/OCPBUGS-28519): Add extra check in ids to bypass validations (#906) [#906](https://github.com/openshift/insights-operator/pull/906)
* [Full changelog](https://github.com/openshift/insights-operator/compare/e69d6282f7b5f1422e14e73427c828571643f4da...6b543885144d6eb40c7c8342dac15f80e77bb4fa)


### [ironic](https://github.com/openshift/ironic-image/tree/50383ca9cdbdfaea185eae833f35917430a4969e)

* [OCPBUGS-69787](https://issues.redhat.com/browse/OCPBUGS-69787): Bump eventlet version to 0.30.2-5 [#767](https://github.com/openshift/ironic-image/pull/767)
* [OCPBUGS-48145](https://issues.redhat.com/browse/OCPBUGS-48145), [OCPBUGS-48596](https://issues.redhat.com/browse/OCPBUGS-48596): Bump jinja to 3.0.1-6.el9.2 [#627](https://github.com/openshift/ironic-image/pull/627)
* [OCPBUGS-43949](https://issues.redhat.com/browse/OCPBUGS-43949), [OCPBUGS-43957](https://issues.redhat.com/browse/OCPBUGS-43957): Bump python-waitress [4.12] [#609](https://github.com/openshift/ironic-image/pull/609)
* [OCPBUGS-37766](https://issues.redhat.com/browse/OCPBUGS-37766), [OCPBUGS-39385](https://issues.redhat.com/browse/OCPBUGS-39385): Include fixes for CVE-2024-44082 [#586](https://github.com/openshift/ironic-image/pull/586)
* [OCPBUGS-38513](https://issues.redhat.com/browse/OCPBUGS-38513): set min version for python3-webob [#558](https://github.com/openshift/ironic-image/pull/558)
* [OCPBUGS-33373](https://issues.redhat.com/browse/OCPBUGS-33373): bump werkzeug [#547](https://github.com/openshift/ironic-image/pull/547)
* [OCPBUGS-34897](https://issues.redhat.com/browse/OCPBUGS-34897): bump jinja2 [#541](https://github.com/openshift/ironic-image/pull/541)
* [OCPBUGS-32362](https://issues.redhat.com/browse/OCPBUGS-32362): [4.12] remove unused prometheus-exporter [#489](https://github.com/openshift/ironic-image/pull/489)
* [OCPBUGS-32386](https://issues.redhat.com/browse/OCPBUGS-32386): Use unix sockets by default for reverse proxy communication [#477](https://github.com/openshift/ironic-image/pull/477)
* [Full changelog](https://github.com/openshift/ironic-image/compare/4d127a2c0af92a5f31d166e84bb5dd9df8a78b64...50383ca9cdbdfaea185eae833f35917430a4969e)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d630b85f80405f798e22f77f6c0f2679d927a8e9)

* [OCPBUGS-69778](https://issues.redhat.com/browse/OCPBUGS-69778): adding eventlet 0.30.2-5 [#236](https://github.com/openshift/ironic-agent-image/pull/236)
* [OCPBUGS-39385](https://issues.redhat.com/browse/OCPBUGS-39385): Include fixes for CVE-2024-44082 [#165](https://github.com/openshift/ironic-agent-image/pull/165)
* [OCPBUGS-38513](https://issues.redhat.com/browse/OCPBUGS-38513): set webob and bump werkzeug [#153](https://github.com/openshift/ironic-agent-image/pull/153)
* [OCPBUGS-29769](https://issues.redhat.com/browse/OCPBUGS-29769): Always add ignition to set hostname on /etc/hostname [#112](https://github.com/openshift/ironic-agent-image/pull/112)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/726ddd3666be569f6bf443cbc7fa2ac67f6d5d26...d630b85f80405f798e22f77f6c0f2679d927a8e9)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/5fe565c4c0255b77ee1b2e45cc48e64f39f33e4c)

* [OCPBUGS-56130](https://issues.redhat.com/browse/OCPBUGS-56130): Handle `openshift-host-network` namespace as special when it modifies [#657](https://github.com/openshift/sdn/pull/657)
* [Full changelog](https://github.com/openshift/sdn/compare/9706f967ca7bb1ade1a789123c71fe6cb55a025e...5fe565c4c0255b77ee1b2e45cc48e64f39f33e4c)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/c69fae7877557d64dce64f36e0a78751952571c4)

* [OCPBUGS-32000](https://issues.redhat.com/browse/OCPBUGS-32000): CVE-2023-45288 [4.12] [#106](https://github.com/openshift/kube-rbac-proxy/pull/106)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b17014fefeb55512dd015d3024184c8c4692588b...c69fae7877557d64dce64f36e0a78751952571c4)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/74ce8d51565468765cbb41a8ebf65fb9519522d5)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-11). [#231](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/231)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/596745cec38b8401d1d906bfb9d3d78fdaeabcde...74ce8d51565468765cbb41a8ebf65fb9519522d5)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/de697f7f0e8b77eca18b135f02aa53af32a996fe)

* [OCPBUGS-78271](https://issues.redhat.com/browse/OCPBUGS-78271): hermetic 4.12 [#1470](https://github.com/openshift/machine-api-operator/pull/1470)
* [OCPBUGS-43872](https://issues.redhat.com/browse/OCPBUGS-43872): install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP [#1305](https://github.com/openshift/machine-api-operator/pull/1305)
* [OCPBUGS-32007](https://issues.redhat.com/browse/OCPBUGS-32007): Update x/net to v0.25.0 [#1257](https://github.com/openshift/machine-api-operator/pull/1257)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/04504fbb32683c4d06fe2ccf0ef941305a61bc2e...de697f7f0e8b77eca18b135f02aa53af32a996fe)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1d4cfffaad8dba651fd3bac6006d82e7a15b81d6)

* [OCPBUGS-77981](https://issues.redhat.com/browse/OCPBUGS-77981): hermetic 4.12 [#5734](https://github.com/openshift/machine-config-operator/pull/5734)
* [OCPBUGS-58874](https://issues.redhat.com/browse/OCPBUGS-58874): [release-4.12] Bump golang/glog to fix  CVE-2024-45339 [#5174](https://github.com/openshift/machine-config-operator/pull/5174)
* [OCPBUGS-44325](https://issues.redhat.com/browse/OCPBUGS-44325): Panic seen in CI job for MCC pod [#4689](https://github.com/openshift/machine-config-operator/pull/4689)
* [OCPBUGS-38382](https://issues.redhat.com/browse/OCPBUGS-38382): [release-4.12] daemon/update: disable systemd unit before overwriting [#4530](https://github.com/openshift/machine-config-operator/pull/4530)
* [OCPBUGS-33665](https://issues.redhat.com/browse/OCPBUGS-33665): Run resolv-prepender entirely async [#4364](https://github.com/openshift/machine-config-operator/pull/4364)
* [OCPBUGS-30829](https://issues.redhat.com/browse/OCPBUGS-30829): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4257](https://github.com/openshift/machine-config-operator/pull/4257)
* [OCPBUGS-30823](https://issues.redhat.com/browse/OCPBUGS-30823): Introduce kubelet-dependencies.target and firstboot-osupdate.target [#4268](https://github.com/openshift/machine-config-operator/pull/4268)
* [OCPBUGS-30329](https://issues.redhat.com/browse/OCPBUGS-30329): set nodeStatusReportFrequency [#4246](https://github.com/openshift/machine-config-operator/pull/4246)
* [OCPBUGS-19659](https://issues.redhat.com/browse/OCPBUGS-19659): After dual-stack conversion reconcile IPFamilies [#3936](https://github.com/openshift/machine-config-operator/pull/3936)
* [OCPBUGS-29366](https://issues.redhat.com/browse/OCPBUGS-29366): release-4.12: fix nodeStatusUpdateFrequency [#4180](https://github.com/openshift/machine-config-operator/pull/4180)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f9a34f91a7f0b5b2e40e75710cbfcfd6410c3fc6...1d4cfffaad8dba651fd3bac6006d82e7a15b81d6)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/173be204157dc254ac5f7e9e44044d19dab7b66a)

* [OCPBUGS-67478](https://issues.redhat.com/browse/OCPBUGS-67478): bumped logrus to v1.9.3 [#161](https://github.com/openshift/image-customization-controller/pull/161)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/e456249dbf0c5456bd0671d41a4445bd266b3660...173be204157dc254ac5f7e9e44044d19dab7b66a)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/1964124713ead86fb22c93fd21b2a1a170551ff5)

* [OCPBUGS-54173](https://issues.redhat.com/browse/OCPBUGS-54173): Change rhcos release browser url [#61](https://github.com/openshift/machine-os-images/pull/61)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/566bf59501f178bd80e410fda66cc424de6a4891...1964124713ead86fb22c93fd21b2a1a170551ff5)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0a12d741af986ef1f8c4609b452cb96594088eb3)

* [OCPBUGS-60292](https://issues.redhat.com/browse/OCPBUGS-60292): Bump github.com/golang/glog to v1.2.4 [#107](https://github.com/openshift/multus-admission-controller/pull/107)
* [OCPBUGS-60850](https://issues.redhat.com/browse/OCPBUGS-60850): Update owners [#109](https://github.com/openshift/multus-admission-controller/pull/109)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/e27952fc813ac994e64f715a8690f3d36a9ec778...0a12d741af986ef1f8c4609b452cb96594088eb3)


### [multus-cni](https://github.com/openshift/multus-cni/tree/07d8af54f06652b283dc0aa8db68d438c4bfe741)

* [OCPBUGS-28520](https://issues.redhat.com/browse/OCPBUGS-28520): Fix SAST scan issues for multus-cni-container [4.12] [#225](https://github.com/openshift/multus-cni/pull/225)
* [Full changelog](https://github.com/openshift/multus-cni/compare/f677359951fac9e8d292974d30d2693078f9093d...07d8af54f06652b283dc0aa8db68d438c4bfe741)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/2350c1df922293782cb9452f63f627b1c63f9c2b)

* [OCPBUGS-78160](https://issues.redhat.com/browse/OCPBUGS-78160): hermetic 4.12 [#64](https://github.com/openshift/route-override-cni/pull/64)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/efd6ffbb275a133196e30edfe9f241e2a3b4f0c0...2350c1df922293782cb9452f63f627b1c63f9c2b)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/5993d022e7fad3a1bede89235502f1a90f618bf2)

* [OCPBUGS-37942](https://issues.redhat.com/browse/OCPBUGS-37942), [OCPBUGS-38019](https://issues.redhat.com/browse/OCPBUGS-38019): [release-4.12] Stateful fixes [#310](https://github.com/openshift/whereabouts-cni/pull/310)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/60a4bcef7c21402cb7c69dad7ab58bc4b4c24fa1...5993d022e7fad3a1bede89235502f1a90f618bf2)


### [must-gather](https://github.com/openshift/must-gather/tree/a4db96b0b046ee976cd63b1de4570d698eb6341a)

* [OCPBUGS-48086](https://issues.redhat.com/browse/OCPBUGS-48086): Update owners [#477](https://github.com/openshift/must-gather/pull/477)
* [Full changelog](https://github.com/openshift/must-gather/compare/dc23fd8103fdf54262f101c16b11102242d9d002...a4db96b0b046ee976cd63b1de4570d698eb6341a)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/98d9349d6f0c71d5eecf4391da7a471a1e205471)

* -sOCPBUGS-59700:Bump github.com/golang/glog to v1.2.4 (#125) [#125](https://github.com/openshift/network-metrics-daemon/pull/125)
* Replace e2e test image (#134) [#134](https://github.com/openshift/network-metrics-daemon/pull/134)
* swtich golint install method (#133) [#133](https://github.com/openshift/network-metrics-daemon/pull/133)
* Correct 4.16 owners file (#131) [#131](https://github.com/openshift/network-metrics-daemon/pull/131)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/fad45782360032bdde3a10b9a28ba30ecc14684f...98d9349d6f0c71d5eecf4391da7a471a1e205471)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/c5b73369e16870569b4e34608c080d6d1b1867b9)

* [OCPBUGS-78158](https://issues.redhat.com/browse/OCPBUGS-78158): hermetic 4.12 [#132](https://github.com/openshift/machine-api-provider-nutanix/pull/132)
* [OCPBUGS-51849](https://issues.redhat.com/browse/OCPBUGS-51849): Fixing CVE-2025-22868 [#121](https://github.com/openshift/machine-api-provider-nutanix/pull/121)
* [OCPBUGS-47263](https://issues.redhat.com/browse/OCPBUGS-47263): fixing CVE-2024-45338 [#114](https://github.com/openshift/machine-api-provider-nutanix/pull/114)
* [OCPBUGS-20956](https://issues.redhat.com/browse/OCPBUGS-20956): bump golang.org/x/net to v0.17.0 [#88](https://github.com/openshift/machine-api-provider-nutanix/pull/88)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/708c6daea2aba7d0de0b8c55590e1c777639829f...c5b73369e16870569b4e34608c080d6d1b1867b9)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/1053f14213faf18c67162760598a8fc47a5ad4b5)

* [OCPBUGS-32010](https://issues.redhat.com/browse/OCPBUGS-32010): bump x/net to 0.24.0 [#113](https://github.com/openshift/oauth-apiserver/pull/113)
* [OCPBUGS-21049](https://issues.redhat.com/browse/OCPBUGS-21049): Bump K8s to v1.25 [#104](https://github.com/openshift/oauth-apiserver/pull/104)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/cfafdccf09150ab55b8b853df16e4395ff3bda4b...1053f14213faf18c67162760598a8fc47a5ad4b5)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0c434f420b178093a2e940dfb2c445ff638d1914)

* [OCPBUGS-27478](https://issues.redhat.com/browse/OCPBUGS-27478): bump osin deps [#144](https://github.com/openshift/oauth-server/pull/144)
* [Full changelog](https://github.com/openshift/oauth-server/compare/0f83669be9b7caa6f82799b4bd2fd659d3b31aee...0c434f420b178093a2e940dfb2c445ff638d1914)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/072aeade7ac676473fe24c06c0a9433ea187915f)

* changes the owners file (#1011) [#1011](https://github.com/openshift/oc-mirror/pull/1011)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1027) [#1027](https://github.com/openshift/oc-mirror/pull/1027)
* Bump version to include v5.11.0 of go-git (#825) [#825](https://github.com/openshift/oc-mirror/pull/825)
* [OCPBUGS-385](https://issues.redhat.com/browse/OCPBUGS-385): Capability to override default channel (#749) (#796) [#749](https://github.com/openshift/oc-mirror/pull/749)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e99effe1e09ed375063bca6891395cd43d3a8e65...072aeade7ac676473fe24c06c0a9433ea187915f)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/bb06dd0133acc2d10fa5425d90557edc068f48a7)

* : OCPBUGS-27593,OCPBUGS-27678: Update go-git to v5.11.0 [#76](https://github.com/openshift/operator-framework-rukpak/pull/76)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/7a78cacecdce2d4184be257457185be51c81d1db...bb06dd0133acc2d10fa5425d90557edc068f48a7)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/bf103aa8a65d4c5ec97ff3862ebd8c306fecc89f)

* [OCPBUGS-76481](https://issues.redhat.com/browse/OCPBUGS-76481): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] [#614](https://github.com/openshift/openshift-apiserver/pull/614)
* [OCPBUGS-79381](https://issues.redhat.com/browse/OCPBUGS-79381): Fix image reference in TestImageStreamImportQuayIO [#623](https://github.com/openshift/openshift-apiserver/pull/623)
* [OCPBUGS-32447](https://issues.redhat.com/browse/OCPBUGS-32447): ose-openshift-apiserver-container: golang: net/http, x… [#481](https://github.com/openshift/openshift-apiserver/pull/481)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/e9ad64992e81a10230e1759db6577db078f18b38...bf103aa8a65d4c5ec97ff3862ebd8c306fecc89f)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/d32006c1a8ac30273ea040dccbe6307db8e1fcba)

* [OCPBUGS-58296](https://issues.redhat.com/browse/OCPBUGS-58296): Inconsistencies in dependencies are fixed [#410](https://github.com/openshift/openshift-controller-manager/pull/410)
* [OCPBUGS-58157](https://issues.redhat.com/browse/OCPBUGS-58157): Set node-pullsecrets volume to read-only to protect image pull credentials [#403](https://github.com/openshift/openshift-controller-manager/pull/403)
* [OCPBUGS-57171](https://issues.redhat.com/browse/OCPBUGS-57171): Empty proxy variables are causing issues during the build [#389](https://github.com/openshift/openshift-controller-manager/pull/389)
* [OCPBUGS-49644](https://issues.redhat.com/browse/OCPBUGS-49644): Add new team members to the OWNERS file [#364](https://github.com/openshift/openshift-controller-manager/pull/364)
* [OCPBUGS-41953](https://issues.redhat.com/browse/OCPBUGS-41953): Add adambkaplan as approver [#336](https://github.com/openshift/openshift-controller-manager/pull/336)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/b6528f9ea28164af9f1ceea0e50f18116fe3c90e...d32006c1a8ac30273ea040dccbe6307db8e1fcba)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/55bc4372711947d12d7f89d7a414e2b694e71933)

* [OCPBUGS-67502](https://issues.redhat.com/browse/OCPBUGS-67502): Bump logrus [#191](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/191)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/d09e51ae44b3ac6d27236b515c1f7c6da847689d...55bc4372711947d12d7f89d7a414e2b694e71933)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/fb533b02cdbe23831048f719f84eeb263f79f3d4)

* [OCPBUGS-61471](https://issues.redhat.com/browse/OCPBUGS-61471): [release-4.12] Add NetworkPolicy as a supported kind [#1054](https://github.com/openshift/operator-framework-olm/pull/1054)
* [OCPBUGS-61392](https://issues.redhat.com/browse/OCPBUGS-61392): [4.12] e2e stability fixes [#1087](https://github.com/openshift/operator-framework-olm/pull/1087)
* [OCPBUGS-46925](https://issues.redhat.com/browse/OCPBUGS-46925), [OCPBUGS-46932](https://issues.redhat.com/browse/OCPBUGS-46932), [OCPBUGS-47312](https://issues.redhat.com/browse/OCPBUGS-47312): x/net bump to v0.34.0 [release-4.12] [#943](https://github.com/openshift/operator-framework-olm/pull/943)
* NO-ISSUE: [release-4.12] Backport e2e fixes [#880](https://github.com/openshift/operator-framework-olm/pull/880)
* [OCPBUGS-38610](https://issues.redhat.com/browse/OCPBUGS-38610): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) [#875](https://github.com/openshift/operator-framework-olm/pull/875)
* [OCPBUGS-42161](https://issues.redhat.com/browse/OCPBUGS-42161): adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs [#873](https://github.com/openshift/operator-framework-olm/pull/873)
* [OCPBUGS-41881](https://issues.redhat.com/browse/OCPBUGS-41881): [CARRY] perform operator apiService certificate validity checks directly [#866](https://github.com/openshift/operator-framework-olm/pull/866)
* [OCPBUGS-32854](https://issues.redhat.com/browse/OCPBUGS-32854): bump go-jose to v2.6.3 [#782](https://github.com/openshift/operator-framework-olm/pull/782)
* [OCPBUGS-35242](https://issues.redhat.com/browse/OCPBUGS-35242): Unblock CI [#773](https://github.com/openshift/operator-framework-olm/pull/773)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/9dd28b4133df91b7c14b48d1ca6e7042c5dab25b...fb533b02cdbe23831048f719f84eeb263f79f3d4)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/a3aeac97943021b26c29c5eadcb5db364f6dfcd5)

* [OCPBUGS-49426](https://issues.redhat.com/browse/OCPBUGS-49426): Upgrade golang.org/x/net [release-4.12] [#591](https://github.com/operator-framework/operator-marketplace/pull/591)
* NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] [#510](https://github.com/operator-framework/operator-marketplace/pull/510)
* [OCPBUGS-32081](https://issues.redhat.com/browse/OCPBUGS-32081): update golang.org/x/net for CVE-2023-45288 [#567](https://github.com/operator-framework/operator-marketplace/pull/567)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/06a56643da746dee338cf1625f82a7ff07c9cdac...a3aeac97943021b26c29c5eadcb5db364f6dfcd5)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/bb427c3d60b793ba881221176bf6d292f329706f)

* [OCPBUGS-67542](https://issues.redhat.com/browse/OCPBUGS-67542): Bump github.com/sirupsen/logrus to v1.8.3 [#148](https://github.com/openshift/ovirt-csi-driver-operator/pull/148)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/e5e02335951010745a42f472a0656b5948ffdade...bb427c3d60b793ba881221176bf6d292f329706f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/31f239e3c862ae1531f838c4511429367cbb2565)

* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-84636](https://issues.redhat.com/browse/OCPBUGS-84636): [release-4.12] Dockerfile: Unpin OVN and consume the latest from FDP [#3075](https://github.com/openshift/ovn-kubernetes/pull/3075)
* [OCPBUGS-59935](https://issues.redhat.com/browse/OCPBUGS-59935): Dockerfile: Remove ovs version pinning [#2698](https://github.com/openshift/ovn-kubernetes/pull/2698)
* NO-JIRA: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.12 [#2092](https://github.com/openshift/ovn-kubernetes/pull/2092)
* [OCPBUGS-55951](https://issues.redhat.com/browse/OCPBUGS-55951): Bump ovn and ovs to latest 23.06 and 3.1 respectively [#2554](https://github.com/openshift/ovn-kubernetes/pull/2554)
* [OCPBUGS-50502](https://issues.redhat.com/browse/OCPBUGS-50502): EgressIP: Reload certificates for the grpc heatlhcheck server [#2457](https://github.com/openshift/ovn-kubernetes/pull/2457)
* [OCPBUGS-35876](https://issues.redhat.com/browse/OCPBUGS-35876): [release-4.12] ipv6+all protocols conntrack flush [#2214](https://github.com/openshift/ovn-kubernetes/pull/2214)
* [OCPBUGS-29864](https://issues.redhat.com/browse/OCPBUGS-29864): CVE-2022-41723: avoid quadratic complexity in HPACK decoding [#2204](https://github.com/openshift/ovn-kubernetes/pull/2204)
* [OCPBUGS-34273](https://issues.redhat.com/browse/OCPBUGS-34273), [OCPBUGS-34414](https://issues.redhat.com/browse/OCPBUGS-34414): Improves service iptables efficiency on start up + ICMP error messages to pass through [#2184](https://github.com/openshift/ovn-kubernetes/pull/2184)
* [OCPBUGS-32990](https://issues.redhat.com/browse/OCPBUGS-32990): Bump OVS [#2144](https://github.com/openshift/ovn-kubernetes/pull/2144)
* [OCPBUGS-33422](https://issues.redhat.com/browse/OCPBUGS-33422): [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2135](https://github.com/openshift/ovn-kubernetes/pull/2135)
* [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889): [release-4.12] OVN bump to 23.06.1-112 [#2154](https://github.com/openshift/ovn-kubernetes/pull/2154)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/cc7638a92466b13cf6d0b304b661b3be13acd78b...31f239e3c862ae1531f838c4511429367cbb2565)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/830cd86b7f4449eedd7bc5c23166ae9d3bdf2f3e)

* [OCPBUGS-67511](https://issues.redhat.com/browse/OCPBUGS-67511): Fix CVE-2025-65637 by bumping logrus to v1.8.3 [#102](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/102)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7dadc08acb9f515735c6c3fdb417424d0c668d44...830cd86b7f4449eedd7bc5c23166ae9d3bdf2f3e)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/e1a1e5552061f5307e7cdc69402ff13a99a2aa33)

* [OCPBUGS-78043](https://issues.redhat.com/browse/OCPBUGS-78043): hermetic 4.12 [#138](https://github.com/openshift/machine-api-provider-powervs/pull/138)
* [OCPBUGS-54012](https://issues.redhat.com/browse/OCPBUGS-54012): Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.12 [#123](https://github.com/openshift/machine-api-provider-powervs/pull/123)
* [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce metrics cardinality [#75](https://github.com/openshift/machine-api-provider-powervs/pull/75)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/440c84f592978a5431da8236299904c0eb681d44...e1a1e5552061f5307e7cdc69402ff13a99a2aa33)


### [prometheus](https://github.com/openshift/prometheus/tree/6270bda049ab6be49c275f4d2412c78d040aeed8)

* [OCPBUGS-67512](https://issues.redhat.com/browse/OCPBUGS-67512): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#291](https://github.com/openshift/prometheus/pull/291)
* [Full changelog](https://github.com/openshift/prometheus/compare/72ceaef4a59ec0cfb0639563ba9bd28928f4bcc0...6270bda049ab6be49c275f4d2412c78d040aeed8)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/ff0bec9fc4cc6b0309546f37b810f57504a303b0)

* [OCPBUGS-77906](https://issues.redhat.com/browse/OCPBUGS-77906): Include go-verify-deps expected files in gitignore [#124](https://github.com/openshift/prometheus-alertmanager/pull/124)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/914cad827e9a177b29b23e02eb48b4065da8dca2...ff0bec9fc4cc6b0309546f37b810f57504a303b0)


### [telemeter](https://github.com/openshift/telemeter/tree/c9592ded3e9a8daa8dfddfb7b8d874a2aaf1972c)

* [OCPBUGS-34827](https://issues.redhat.com/browse/OCPBUGS-34827): fix issuer check during JWT authentication 4.12 [#541](https://github.com/openshift/telemeter/pull/541)
* [Full changelog](https://github.com/openshift/telemeter/compare/9c8092bb329c90d4ae12daf16906adb9b9620e20...c9592ded3e9a8daa8dfddfb7b8d874a2aaf1972c)


### [tests](https://github.com/openshift/origin/tree/f638948e47267d022e847bad64ae822c6701d5bf)

* [OCPBUGS-56120](https://issues.redhat.com/browse/OCPBUGS-56120): [build] Ensure Git Clone Does Not Run Privileged [#29788](https://github.com/openshift/origin/pull/29788)
* [OCPBUGS-37799](https://issues.redhat.com/browse/OCPBUGS-37799): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29621](https://github.com/openshift/origin/pull/29621)
* [OCPBUGS-54772](https://issues.redhat.com/browse/OCPBUGS-54772): Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed [#29662](https://github.com/openshift/origin/pull/29662)
* [OCPBUGS-54147](https://issues.redhat.com/browse/OCPBUGS-54147): Add/remove team members to the OWNERS file for Builds [#29622](https://github.com/openshift/origin/pull/29622)
* [OCPBUGS-52585](https://issues.redhat.com/browse/OCPBUGS-52585): Use payload pullspec for image info test [#29593](https://github.com/openshift/origin/pull/29593)
* [OCPBUGS-41585](https://issues.redhat.com/browse/OCPBUGS-41585): Removes dependency on samples operator images [#29080](https://github.com/openshift/origin/pull/29080)
* [Full changelog](https://github.com/openshift/origin/compare/7b7d4ef2acfb10117f21af59d5b99da177b19d3d...f638948e47267d022e847bad64ae822c6701d5bf)


### [thanos](https://github.com/openshift/thanos/tree/584813ece70e05b26d4cbd797f6d7233427d1bd7)

* [OCPBUGS-67525](https://issues.redhat.com/browse/OCPBUGS-67525): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#169](https://github.com/openshift/thanos/pull/169)
* [Full changelog](https://github.com/openshift/thanos/compare/2867a6b552eaddefd73aa979f13e95f6df338070...584813ece70e05b26d4cbd797f6d7233427d1bd7)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/e3f1193d17a0168713d29ba09fdbc38feec6f6b6)

* [OCPBUGS-78036](https://issues.redhat.com/browse/OCPBUGS-78036): hermetic migration 4.12 [#111](https://github.com/openshift/cloud-provider-vsphere/pull/111)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/e170dce5c1fe5d3a025ccd8264e78c4c987b1d7a...e3f1193d17a0168713d29ba09fdbc38feec6f6b6)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/e2d65947c5d7a91616a8187d3f73c5bd3d97fcd5)

* [OCPBUGS-78026](https://issues.redhat.com/browse/OCPBUGS-78026): hermetic migration 4.12 [#90](https://github.com/openshift/cluster-api-provider-vsphere/pull/90)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/a61d43b751249c1a74376a48498571da1d665685...e2d65947c5d7a91616a8187d3f73c5bd3d97fcd5)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/bec44875e5c478888a890559a905168d15b8e3e1)

* [OCPBUGS-67529](https://issues.redhat.com/browse/OCPBUGS-67529): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#162](https://github.com/openshift/vmware-vsphere-csi-driver/pull/162)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/e4c0e103ddbf264387d6efb26b612a4b915d362a...bec44875e5c478888a890559a905168d15b8e3e1)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/aa18ace8c49f1004db45d3f429acd1c66a422b16)

* [OCPBUGS-67528](https://issues.redhat.com/browse/OCPBUGS-67528), [OCPBUGS-67534](https://issues.redhat.com/browse/OCPBUGS-67534): CVE-2025-65637:  Bump github.com/sirupsen/logrus to v1.8.3 [#327](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/327)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d7cca470e82158e8240a09b3586f99e6a84f121f...aa18ace8c49f1004db45d3f429acd1c66a422b16)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/361f219af2ed815a4cb652615f453b6e78dcda2a)

* [OCPBUGS-67540](https://issues.redhat.com/browse/OCPBUGS-67540): bump github.com/sirupsen/logrus to v1.9.3 [#204](https://github.com/openshift/vsphere-problem-detector/pull/204)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/f25ae2add899bbd4b63b476c2e6178cfbaf68ac4...361f219af2ed815a4cb652615f453b6e78dcda2a)