# 4.12.103

Created: 2026-11-06 10:44:58 +0000 UTC

Image Digest: `sha256:8d31fe41fbd8e2065d676840f79ed9287dbdb5630e39c9a7a9b87d7ba874307e`


## Changes from 4.12.72

### Components

* Kubernetes 1.25.16
* Red Hat Enterprise Linux CoreOS upgraded from 412.86.202501011408-0 to 412.86.202611041725-0


### Rebuilt images without code change

* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [4d3b1125](https://github.com/openshift/alibaba-cloud-csi-driver/commit/4d3b1125cfd3acfe3fbafa4c83543bbb89de97a2) `sha256:17cee3e1d7352cd0c89de2132c310d17aade201c9ae43e8d1895e36d28f2cc8b`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [99bcda8d](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/99bcda8da7c9c2e4415f30b82371f0b79d527d3d) `sha256:532d86fdea964d72b66ca58de7b9866cc4818e0c472fbcd0e161c067e01a1f5f`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [f56c606a](https://github.com/openshift/apiserver-network-proxy/commit/f56c606ae15041b0c981e654ab577d2b0a3a0a8f) `sha256:d88e552200c105157eda12aaf81e8142bdb035af4ff8a7dbe4c438664ead7e38`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [f90fb443](https://github.com/openshift/cloud-provider-aws/commit/f90fb443bc71b2319d8cce276b280c26d0f18fb7) `sha256:81fdac85fe16e4ddffa11c8f7da650f0268dc6b721195aebd3816698425429e7`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [bbab20f9](https://github.com/openshift/aws-ebs-csi-driver/commit/bbab20f9559a1be6f39fed8e604712d41f507b49) `sha256:8a2367e88e00d8ce1eb7a7c73430b1152a985e8aed6d901ab549e05b98e0de00`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [31917a5f](https://github.com/openshift/aws-pod-identity-webhook/commit/31917a5f3e7557916b8e92a0a9ae529ab176f738) `sha256:f2f6b676630ae0fa16e905ea02d59863c1ea83848d3f24a884688a203569d470`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [474ed48e](https://github.com/openshift/baremetal-runtimecfg/commit/474ed48e840fdb7bf859d769cd673b29705a7b91) `sha256:1187b9a55bf4cd33a74e3c02f2dd2100680b9b999c20733c1262b07c95adfc9d`
* [cli](https://github.com/openshift/oc) git [d6912573](https://github.com/openshift/oc/commit/d691257345aeeec951c763e11658a944037f9b39) `sha256:b3043f5cc95e2646a977d72fbea27fb42e76eda177ccc0becf336b32b5fa6055`
* [cli-artifacts](https://github.com/openshift/oc) git [d6912573](https://github.com/openshift/oc/commit/d691257345aeeec951c763e11658a944037f9b39) `sha256:caff8b7230990ff34ddc9e8da39b3a06039c89fcd91434e4ab4a98113bc9c157`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [c086bed7](https://github.com/openshift/cloud-network-config-controller/commit/c086bed76ee3d3b3fe9f516f873414e7b4348acd) `sha256:0a80241917f1f3d71e848ecb7de1db88eeb5c94a24b00751c8a66b066c46eac6`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [4f7f6b1a](https://github.com/openshift/cluster-authentication-operator/commit/4f7f6b1af4b674b24270e65c40728b19071ab3e3) `sha256:12808d9116729fe4d7a1449f77132b319a97b32708cedb93640e4466108d23bb`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [d16352d9](https://github.com/openshift/kubernetes-autoscaler/commit/d16352d90b619d85e9934346116a5812611ebdff) `sha256:9570f951ccfa837f3eb2a9f15bb642d285505423fe5b38bcae7482cc638f0044`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [138a1cf2](https://github.com/openshift/cluster-bootstrap/commit/138a1cf2b98578acb4ccf098736bdf08614d2d6a) `sha256:1de6a12b0456553c02442536de3e3d65f2b5b067a44e777f77632725586d2d10`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [3b1f0843](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/3b1f0843e2bd25fb4e39659ef47424f67ccaa727) `sha256:0ed3e2b6ed58d6846412110caaf57d54d914f293e3236f59c6926f008a4d9587`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [92c3b102](https://github.com/openshift/cluster-config-operator/commit/92c3b10237c1ebf7ab7a0c744db3949377614e52) `sha256:0bdda109aa8b0a7e58f9ed04f73e02997917b7bdedb712a2d2454ff6872104fb`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [fb7f08a2](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/fb7f08a2a6e85f3ca76c40dcf980ba0ec904a617) `sha256:f9a28bf55fb865ed4fab159d199013dc8d4c7cb7f16b661b5cf9c403834f2b3e`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [d50f7322](https://github.com/openshift/cluster-api-operator/commit/d50f7322addd997cc73a0ba8294eadb977974c3f) `sha256:a1631a0364e6df476f220845bb14a118e47c209c17f1b0c862206a789503555b`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [c3c07beb](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/c3c07bebb7a644fe75bccd590fa088bcccd3749a) `sha256:dcb0e59b6f5f3c3d6f1e67ec6c3ea65fba4d0816c8fae3fe56c2e0657b5dba13`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [7b08a4de](https://github.com/openshift/cluster-machine-approver/commit/7b08a4de4a08da8cdb341948e0902395eb0da961) `sha256:5074ec3b999ce1c18c8d5530b9b89c8d16b4dce15eb18132dfa8545c4bad2e19`
* [cluster-network-operator](https://github.com/openshift/cluster-network-operator) git [28db40f1](https://github.com/openshift/cluster-network-operator/commit/28db40f169f64f881b0628c19bf7c64a7a9a2467) `sha256:20f2418607da04fedf734b0a117e87248b01b9b4ca7bf9f325b5ec3c7714ba37`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [20966da9](https://github.com/openshift/cluster-node-tuning-operator/commit/20966da941ab8773261b5b4c133f3a1716699243) `sha256:f5d97a1d85b011fc6a9b557052899f7fd56a4b8bdbd1e4e3a356108710c399a2`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [c930dc74](https://github.com/openshift/platform-operators/commit/c930dc745f23ee5bde8b48d13557976186c21c7c) `sha256:f682aa279333b08c07dc279129947f3b37cf62b1cf81b62ce8ff5b6893382f45`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cb8862b0](https://github.com/openshift/cluster-policy-controller/commit/cb8862b0042ac2e7130a7c018e3e083ebc46705e) `sha256:79bdd77016e95eddec69b75cef907b90b50d0b4284030b7c90c63af35d0ada16`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2796e173](https://github.com/openshift/cluster-update-keys/commit/2796e1732615521e818be82663058e0a3f1b3941) `sha256:0270d05de706183559c5d371399f65ed805e6e2c9a306d090769d98b1ee62ed3`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [da2578c6](https://github.com/openshift/cluster-version-operator/commit/da2578c6dd81e83d331daacb357c4f1cc60bf234) `sha256:7847acc4b12b137cd25b1c3151960cc3177aa722aad2aba3cb76f788307ed466`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e4d9170e](https://github.com/openshift/configmap-reload/commit/e4d9170e71bdf8a79e9cde94dac53575a30f46f3) `sha256:04fc1b1d5a55071ca1f369ba153c2c0066f467d0f1f25af6eb6629507fb21c5c`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [cc297702](https://github.com/openshift/csi-driver-shared-resource-operator/commit/cc297702e6d2d4fb5a2b57a734c26d0d0a7bec1c) `sha256:228a176635e3eef2e3e6410d54a3002f5f3997f59b4c7786f6fbf015f90002c4`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [fac7b8fd](https://github.com/openshift/csi-external-attacher/commit/fac7b8fd905b4c68beadc2c968e6f981385463e8) `sha256:644f9dc9f34cefe747a3fdf554f59920e39c31691f2f1ab4e48edc7817093f24`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [3aa7c527](https://github.com/openshift/csi-external-provisioner/commit/3aa7c527732e288c71119ea3e78fac739dfbd438) `sha256:f8db0f4719f58fac624300a0795003d31a07e9400e50b4d6511b21f00aa79ad4`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [5b066ba4](https://github.com/openshift/csi-external-resizer/commit/5b066ba420bd74ec5327978d2731da989d57d4f2) `sha256:9fa10f22de19e1aa36983634bd6de081dd81ce269136d3494f7e6af2d5830890`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e6545e71](https://github.com/openshift/csi-livenessprobe/commit/e6545e71597df1da4635c266eb8f499fc376d970) `sha256:9d3226e256815f66b8bd18bfa746f7c6904bafb7f6642247bb562894893ac2eb`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c316b896](https://github.com/openshift/csi-node-driver-registrar/commit/c316b8963a0b0ff8d45f2b32c56de972d55bfd37) `sha256:6828029f1ec15fd78cce521a2ab79afbecdacf286e1a6ad7f4ddd09d987c0b6c`
* [deployer](https://github.com/openshift/oc) git [d6912573](https://github.com/openshift/oc/commit/d691257345aeeec951c763e11658a944037f9b39) `sha256:8baa6f148a7f09a333ff014947999a521cd676a862b682424f959cbf7dd0dcb6`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [a92e4157](https://github.com/openshift/egress-router-cni/commit/a92e415791b531ca15ec84953550b71bd3534566) `sha256:4ef3864e75a8c4f66a3430b396e3ca3dc3ca932599bddb8763983cc8dbf4b34d`
* [etcd](https://github.com/openshift/etcd) git [bb82e891](https://github.com/openshift/etcd/commit/bb82e891abeaddd57e1a07775874d71f2ddd9e85) `sha256:e33672226fdbcf4381eea3f6fb2556843f209c3a3c231bc9db2d17f0d0474437`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8a84952e](https://github.com/openshift/cloud-provider-gcp/commit/8a84952ec7ff1aa001f885b10ec583540f298c73) `sha256:cd9c6dc1a3ff883a64730210656d0bd2dcaa97b6a231efbe846a3b48ea3f89a5`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5dcfd675](https://github.com/openshift/gcp-pd-csi-driver/commit/5dcfd6755ea1eff7dcf1c0c831b048eda1b41736) `sha256:7117a8b08563aadaa8abb6d9eb864b88da9db317fb1ab16efb7c1b9467f1ff3e`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [30e97ba5](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/30e97ba511547edb057071b63498e1ca4c68ec16) `sha256:bea4e656d23315b596c6595fc7de861c67f555c916134f19fc5193362216fc85`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [8bd0ea8f](https://github.com/openshift/cloud-provider-ibm/commit/8bd0ea8fadbbb09ed912984d3dc6903a0aad0562) `sha256:ea670941edf20b63cd1bfaa533c8dbb05827762863abab0c8814e5f0ac72df57`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a8ade8fe](https://github.com/openshift/ironic-static-ip-manager/commit/a8ade8fe60ad5fb1ab225a514ec331123b256cff) `sha256:07539be8cebacd1879a4eafd2b421c854db5b641b67fd3c46e6d612050d4005c`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [36c06694](https://github.com/openshift/k8s-prometheus-adapter/commit/36c06694097a1a09a8c4e1f70a9025187814cb1a) `sha256:06ae3fb21b7fdb1786b347571a849b0d64c748276b58ec3077490e8427a14409`
* [keepalived-ipfailover](https://github.com/openshift/images) git [7e8a0105](https://github.com/openshift/images/commit/7e8a0105eb7369f3f92ad7b2581a2efffab5b28e) `sha256:a99aac4700fef867bb0851eafe02a3a6418dc69e80b497848c4f14499c032eeb`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [c69fae78](https://github.com/openshift/kube-rbac-proxy/commit/c69fae7877557d64dce64f36e0a78751952571c4) `sha256:b322ff5740d219a0c2f7ad4a2a315fa876ad4706da8977cde7224404c7d5c2ab`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8fd2f8b0](https://github.com/openshift/kuryr-kubernetes/commit/8fd2f8b0f7e2849b1a7db252beba0c8250552e36) `sha256:bb81711d576fdd9df98d0e1f2503d01339f9ee1e838e923bba0f375842dbd5ca`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8fd2f8b0](https://github.com/openshift/kuryr-kubernetes/commit/8fd2f8b0f7e2849b1a7db252beba0c8250552e36) `sha256:d23f7460aa51b8baff19f91b4c6bc78a73822f19d90f0c289dfdce2d2a058fb2`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a2882f7a](https://github.com/openshift/cluster-api-provider-libvirt/commit/a2882f7aa56d4059a20bdc02486da905b5764062) `sha256:4a913b616243e3ca9d2133afe4b2efa9f23174eeffb22c4867e1447b7626da3b`
* machine-os-content `sha256:dcfa817a551c9bf20b3a86ce979c99890dbcd4571c19bee288929c2a18d183bd`
* [multus-cni](https://github.com/openshift/multus-cni) git [07d8af54](https://github.com/openshift/multus-cni/commit/07d8af54f06652b283dc0aa8db68d438c4bfe741) `sha256:c44123ee485aa1d5f976f61c40637f13f53d38591c25598e24b1d2d31f5bb531`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [644461f2](https://github.com/openshift/multus-networkpolicy/commit/644461f25fb6b45054d1a8be7a996670959a5a9d) `sha256:89f91d738c2f96b02c9f8cf8e42801fe00902059b379697855dde6208ebd4a33`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [5993d022](https://github.com/openshift/whereabouts-cni/commit/5993d022e7fad3a1bede89235502f1a90f618bf2) `sha256:80aeb960453a734f0884f826838918953b631370b3b3dd6e3850c59f9220e8aa`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [30386d6b](https://github.com/openshift/bond-cni/commit/30386d6b8d4f3b05931842b6a9b85f15c241b09a) `sha256:7182fba5984b95ce2f803d5968a86c8df056e7143b0fec433c686bba1bd26753`
* [network-tools](https://github.com/openshift/network-tools) git [c76613c7](https://github.com/openshift/network-tools/commit/c76613c77c8785b91611bb3c4245bc34f3b14f76) `sha256:8f5c2e8ab38bcde365431608a9688652a10ab8b274390767887600ef450ffc7f`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [1053f142](https://github.com/openshift/oauth-apiserver/commit/1053f14213faf18c67162760598a8fc47a5ad4b5) `sha256:698f7a9ffb8d96d8fb31be06db1ec9185c3ece98f67eeacac99112886ea2d095`
* [oauth-server](https://github.com/openshift/oauth-server) git [0c434f42](https://github.com/openshift/oauth-server/commit/0c434f420b178093a2e940dfb2c445ff638d1914) `sha256:32ce619a55834fedc00f37c0c55f67f2982efb8a2b313886d407ddc99fdb8612`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [bb06dd01](https://github.com/openshift/operator-framework-rukpak/commit/bb06dd0133acc2d10fa5425d90557edc068f48a7) `sha256:73478c685d4859e027499f35eb30d6723fad64ff188be009c45687bf48938d2d`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [05657663](https://github.com/openshift/machine-api-provider-openstack/commit/05657663c02be6d03d074d0f39a2b247cef9286a) `sha256:18fa19e95180c02edafbe7015a08a1727b995225a5a79b0d4f165fccd3c4f596`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [f13e381e](https://github.com/openshift/cluster-api-provider-openstack/commit/f13e381e962777d48fadcaa3570a583e72aa80c7) `sha256:38b867925c13d48dbb80097ce5b16f25009828de9015d1c569a687d40f757aa4`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [87ab3789](https://github.com/openshift/ovirt-csi-driver/commit/87ab37895e56ea3c80be0163571fa593ce96d86b) `sha256:34be50c946a211c8a70c67671654812787a461e795590745fb55ac6ea6a82009`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [03e8cb50](https://github.com/openshift/cluster-api-provider-ovirt/commit/03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1) `sha256:aab0ee7caa936b6492cb9c39a225d30937da8f5fde374186f6a8f6977f713bc9`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [b78e8e78](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/b78e8e7871bd50ff77a68fdae320775a17856373) `sha256:48428ce7d63af0b8df4b9b9f7568f0e57fcd4fb7353bbe24f0f9ba83d3c0ae47`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [4fb4334c](https://github.com/openshift/cloud-provider-powervs/commit/4fb4334ca8aa9eb8290488359dd8d1cc5261da49) `sha256:9680c0dc4c0ad2584921536becc4ae0493e2517df3e186577ddf8524fabf72ca`
* rhel-coreos-8 `sha256:8d61187507cb6ab4a78b988f861694854c9da2dc5d0728f8449b3973b65047cf`
* rhel-coreos-8-extensions `sha256:23ac38e10a2865d9957bb3fa184c226e477a3d6662df4338642771370cfc74cc`
* [tools](https://github.com/openshift/oc) git [d6912573](https://github.com/openshift/oc/commit/d691257345aeeec951c763e11658a944037f9b39) `sha256:d3a2db0686d4da3db43557856355b80c2946bde5c6bb9c53797ad1ba8632bde2`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/e9b4a7d7a84dd0cb4a3c7c818d7c3a7926bafb32)

* [OCPBUGS-89729](https://issues.redhat.com/browse/OCPBUGS-89729): Patching golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.24.0-sec.4.1 to address CVE-2026-39829 [#11236](https://github.com/openshift/assisted-service/pull/11236)
* [OCPBUGS-78114](https://issues.redhat.com/browse/OCPBUGS-78114): [release-4.12] NO-JIRA: hermetic 4.12 [#9956](https://github.com/openshift/assisted-service/pull/9956)
* [OCPBUGS-67386](https://issues.redhat.com/browse/OCPBUGS-67386): Bump logrus from 1.9.0 to 19.3 [#8768](https://github.com/openshift/assisted-service/pull/8768)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/844e6efd0d1c9d583afdefc6bc5ae744471ef9c1...e9b4a7d7a84dd0cb4a3c7c818d7c3a7926bafb32)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/8c32c801f72d2069db05aa75f30cf20dd23cfc0a)

* [OCPBUGS-67388](https://issues.redhat.com/browse/OCPBUGS-67388): Bump logrus v1.9.0 to v1.9.3 [#1465](https://github.com/openshift/assisted-installer/pull/1465)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/bc8fd423f1f7b47c46a9d97ede546f989785015d...8c32c801f72d2069db05aa75f30cf20dd23cfc0a)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/4c31fc8b7e161d30886e64f8600d0da92ab19c81)

* [OCPBUGS-102069](https://issues.redhat.com/browse/OCPBUGS-102069): CVE-2026-33814 - replace golang.org/x/net with openshift-sustaining fork v0.35.0-sec.3 [#1629](https://github.com/openshift/assisted-installer-agent/pull/1629)
* [OCPBUGS-67390](https://issues.redhat.com/browse/OCPBUGS-67390): Bump logrus v1.9.0 to v1.9.3 [#1287](https://github.com/openshift/assisted-installer-agent/pull/1287)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/ce915b7d0a3d3b225b6a190d2babf20cc864d22e...4c31fc8b7e161d30886e64f8600d0da92ab19c81)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/c96592bc62b63f1df2041d840f1558fe4d2e1eb9)

* [OCPBUGS-102079](https://issues.redhat.com/browse/OCPBUGS-102079): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#66](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/66)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/191c9e34c1e70cf585d78f6293f95a2b89061a48...c96592bc62b63f1df2041d840f1558fe4d2e1eb9)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/871dac7e8e349607a5a71d0332d36713170aba16)

* Updating ose-alibaba-machine-controllers images to be consistent with ART [#35](https://github.com/openshift/cluster-api-provider-alibaba/pull/35)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/b9287c05091424c4d21fd95454020ccc225f5bcb...871dac7e8e349607a5a71d0332d36713170aba16)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/e202ba30735bcc8ebcf7bacaa11a8e3bfdb1c2dd)

* [OCPBUGS-78231](https://issues.redhat.com/browse/OCPBUGS-78231): [release-4.12] hermetic 4.12 [#595](https://github.com/openshift/cluster-api-provider-aws/pull/595)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/16156accbe3b9bcedbe39ef988170e1f644fcd75...e202ba30735bcc8ebcf7bacaa11a8e3bfdb1c2dd)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/d7cd56035e8def7001b1b1e6ff40473825545660)

* [OCPBUGS-102107](https://issues.redhat.com/browse/OCPBUGS-102107): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#318](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/318)
* [OCPBUGS-67399](https://issues.redhat.com/browse/OCPBUGS-67399): Updated logrus to v1.8.3 [#315](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/315)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/71bb7838f93bc88e679b0a967fbf1660cdf8aff1...d7cd56035e8def7001b1b1e6ff40473825545660)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/7744fb3df32e168dc70d55859a76e83d21ef81fd)

* [OCPBUGS-78268](https://issues.redhat.com/browse/OCPBUGS-78268): hermetic 4.12 [#176](https://github.com/openshift/machine-api-provider-aws/pull/176)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/440886d004a6ecbc45d5bc04c2f703fb0efaa632...7744fb3df32e168dc70d55859a76e83d21ef81fd)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/d03bdddc5faf5860cf5f9622feb29ce276a7bec2)

* [OCPBUGS-102109](https://issues.redhat.com/browse/OCPBUGS-102109): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#214](https://github.com/openshift/cloud-provider-azure/pull/214)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/2193ccfa8575aeb0520a25b77ec963097a66cd6e...d03bdddc5faf5860cf5f9622feb29ce276a7bec2)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/45b8076509ac2502a71aa398bb7157ddd0acd59b)

* [OCPBUGS-78180](https://issues.redhat.com/browse/OCPBUGS-78180): [release-4.12] Hermetic 4.12 [#368](https://github.com/openshift/cluster-api-provider-azure/pull/368)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/a1b2a37b7d31951708a8f6e1db201fe0c1ff687a...45b8076509ac2502a71aa398bb7157ddd0acd59b)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/eaff73991bfa79e71e20ec858497e30df5f10cc2)

* [OCPBUGS-56067](https://issues.redhat.com/browse/OCPBUGS-56067): tech debt: rework vendor patches [#106](https://github.com/openshift/azure-disk-csi-driver/pull/106)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a930c89beac514d4d98f6055bf6cfe78eeec25a5...eaff73991bfa79e71e20ec858497e30df5f10cc2)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/63ba3d2944df7d88166e7118db6541ecad7f4698)

* [OCPBUGS-102104](https://issues.redhat.com/browse/OCPBUGS-102104): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#133](https://github.com/openshift/azure-disk-csi-driver-operator/pull/133)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/988b8cc8ead51c2904c6cb75446529bfe3674ee3...63ba3d2944df7d88166e7118db6541ecad7f4698)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/bc205eca6ff338423ea1e9dffcd86b14311d644a)

* [OCPBUGS-102098](https://issues.redhat.com/browse/OCPBUGS-102098): Bump golang.org/x/net to v0.35.0-sec.4 [#164](https://github.com/openshift/azure-file-csi-driver/pull/164)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/15aade4d58785b54ac732a660f1359132d27f9b9...bc205eca6ff338423ea1e9dffcd86b14311d644a)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/997dbdb4b73c23906e7103789aa6c1e0db861eef)

* [OCPBUGS-102096](https://issues.redhat.com/browse/OCPBUGS-102096): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#117](https://github.com/openshift/azure-file-csi-driver-operator/pull/117)
* [OCPBUGS-67404](https://issues.redhat.com/browse/OCPBUGS-67404): Bump github.com/sirupsen/logrus to v1.8.3 [#116](https://github.com/openshift/azure-file-csi-driver-operator/pull/116)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/060ba825fead5953bef544017ef4b3d0cbabe3e5...997dbdb4b73c23906e7103789aa6c1e0db861eef)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/437b084b1d6f1e38a0eb0c421580a4ed253ebdd1)

* [OCPBUGS-78266](https://issues.redhat.com/browse/OCPBUGS-78266): hermetic 4.12 [#188](https://github.com/openshift/machine-api-provider-azure/pull/188)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/6b5bfffdcf6315871d6c296025db7d0812132868...437b084b1d6f1e38a0eb0c421580a4ed253ebdd1)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b86064a94ccd47a4547bd16771de98dc36a4abb0)

* [OCPBUGS-83750](https://issues.redhat.com/browse/OCPBUGS-83750): Azure UPI ARM template: use storageAccountId [#10511](https://github.com/openshift/installer/pull/10511)
* [OCPBUGS-78352](https://issues.redhat.com/browse/OCPBUGS-78352): terraform/providers/google: Fixing inconsistencies with the service account creation [#10385](https://github.com/openshift/installer/pull/10385)
* [OCPBUGS-66250](https://issues.redhat.com/browse/OCPBUGS-66250): Replace terraform-provider-google with Openshift fork [#10144](https://github.com/openshift/installer/pull/10144)
* [OCPBUGS-62820](https://issues.redhat.com/browse/OCPBUGS-62820): Release 4.12 bump terraform provider azurerm [#10002](https://github.com/openshift/installer/pull/10002)
* [OCPBUGS-55035](https://issues.redhat.com/browse/OCPBUGS-55035): IBMCloud: Move to IBM TF openshift fork [#9670](https://github.com/openshift/installer/pull/9670)
* [Full changelog](https://github.com/openshift/installer/compare/7cb42be2b42e1246cff0e47f19b28eea7a9461e4...b86064a94ccd47a4547bd16771de98dc36a4abb0)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/018883ee274f8f329f84f1d0ba3d24138a6a8545)

* [OCPBUGS-78103](https://issues.redhat.com/browse/OCPBUGS-78103): [release-4.12] fix vendor/ for hermetic migration [#247](https://github.com/openshift/cluster-api-provider-baremetal/pull/247)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/dc5e4cefeac81e39429ab6fca6bc133318bed6f6...018883ee274f8f329f84f1d0ba3d24138a6a8545)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/1944b3bedc3bc79c588f985a92d761ec0782b31c)

* [OCPBUGS-102110](https://issues.redhat.com/browse/OCPBUGS-102110): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#519](https://github.com/openshift/baremetal-operator/pull/519)
* [OCPBUGS-53335](https://issues.redhat.com/browse/OCPBUGS-53335): CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] [#412](https://github.com/openshift/baremetal-operator/pull/412)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/9152e200990c26194a70c25033a71583e2775066...1944b3bedc3bc79c588f985a92d761ec0782b31c)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/5a4483cd9e34aaced47484339874cb4a8aeda9b9)

* [OCPBUGS-53420](https://issues.redhat.com/browse/OCPBUGS-53420): github.com/golang/glog v1.2.4 [#847](https://github.com/openshift/cloud-credential-operator/pull/847)
* [OCPBUGS-51538](https://issues.redhat.com/browse/OCPBUGS-51538): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#832](https://github.com/openshift/cloud-credential-operator/pull/832)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/7a0370568a558c37e63cebc095c9e5b913dfedf6...5a4483cd9e34aaced47484339874cb4a8aeda9b9)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/3bc1ad28b024618947461de46c9bc2c09bd1b5b3)

* [OCPBUGS-102115](https://issues.redhat.com/browse/OCPBUGS-102115): Bump x/net package in release-4.12 [#394](https://github.com/openshift/cluster-autoscaler-operator/pull/394)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/29a6e57c10cf027f5f04e9bcb2e8842497f63bf6...3bc1ad28b024618947461de46c9bc2c09bd1b5b3)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/497529d0cc55285f1dd625975cfcceba0ecfb1f8)

* [OCPBUGS-77451](https://issues.redhat.com/browse/OCPBUGS-77451): Bump github.com/go-errors/errors to v1.5.1 [#566](https://github.com/openshift/cluster-baremetal-operator/pull/566)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/537a74cd0b0cc48189684a273013c32d1269ddd9...497529d0cc55285f1dd625975cfcceba0ecfb1f8)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c45ed1ae8b20b8d0fe6b42ad002f7284f276768e)

* [OCPBUGS-86891](https://issues.redhat.com/browse/OCPBUGS-86891): update CI build root and Dockerfile tags w.r.t ART 4.12 streams [#299](https://github.com/openshift/cluster-api/pull/299)
* [OCPBUGS-77976](https://issues.redhat.com/browse/OCPBUGS-77976): fix vendor for hermetic [#267](https://github.com/openshift/cluster-api/pull/267)
* [Full changelog](https://github.com/openshift/cluster-api/compare/03d89f216e0f2c3e1b2a647b0e37d52bbfdaefee...c45ed1ae8b20b8d0fe6b42ad002f7284f276768e)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/641193101844d52ca0ab3f9fb5e6137f990d5d18)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#564](https://github.com/openshift/cluster-capi-operator/pull/564)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/60a36d8320ddfd196840a1597e61c065603778ee...641193101844d52ca0ab3f9fb5e6137f990d5d18)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/316565f79a06910ffb74403a3bfeeb7cbcc5a81d)

* [OCPBUGS-102121](https://issues.redhat.com/browse/OCPBUGS-102121): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#287](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/287)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/f573eded61847fc153874615b29704d93ddcad8d...316565f79a06910ffb74403a3bfeeb7cbcc5a81d)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/09a1de9faff75611ce9bdbfc472f052159780922)

* [OCPBUGS-52502](https://issues.redhat.com/browse/OCPBUGS-52502): [release-4.12] Add runbook_url for CoreDNSErrorsHigh [#435](https://github.com/openshift/cluster-dns-operator/pull/435)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/e955534113ef9a65ad055198eab63ba7d60fbd21...09a1de9faff75611ce9bdbfc472f052159780922)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/a357bfbe683cf1652a94ef9b3add4b6dfce46777)

* [OCPBUGS-67421](https://issues.redhat.com/browse/OCPBUGS-67421): Update logrus to 1.9.3 to address CVE-2025-65637 [#1550](https://github.com/openshift/cluster-etcd-operator/pull/1550)
* [OCPBUGS-53508](https://issues.redhat.com/browse/OCPBUGS-53508): fix CVE-2025-30204 [#1416](https://github.com/openshift/cluster-etcd-operator/pull/1416)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/4bf4f66a77b9149d92496b439f14bb9306d1f19c...a357bfbe683cf1652a94ef9b3add4b6dfce46777)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/ea0cf34fca0ba26418abfbf10160bdc714bce288)

* [OCPBUGS-67422](https://issues.redhat.com/browse/OCPBUGS-67422): Bump logrus to 1.8.3 [#1292](https://github.com/openshift/cluster-image-registry-operator/pull/1292)
* [OCPBUGS-53868](https://issues.redhat.com/browse/OCPBUGS-53868): Bump github.com/golang-jwt/jwt [#1236](https://github.com/openshift/cluster-image-registry-operator/pull/1236)
* [OCPBUGS-51594](https://issues.redhat.com/browse/OCPBUGS-51594): bump golang.org/x/oauth2 [#1223](https://github.com/openshift/cluster-image-registry-operator/pull/1223)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/77fd1a927087cd73330897a63016c23614ac3201...ea0cf34fca0ba26418abfbf10160bdc714bce288)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/98d953c92eef19726d9afdaeab8d1cdc0d85d670)

* [OCPBUGS-86709](https://issues.redhat.com/browse/OCPBUGS-86709): Add configuration override for X-SSL strip [#1494](https://github.com/openshift/cluster-ingress-operator/pull/1494)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/85e2d05159b7b4b2f16c8a95815c7d9927b68597...98d953c92eef19726d9afdaeab8d1cdc0d85d670)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0217c88fb6505e017b3d59c33ed07ca107db4832)

* NO-JIRA: refactor: Updating go builder in the CI, Dockerfile and go.mod to be consistent with ART 4.12 [#2175](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2175)
* [OCPBUGS-67424](https://issues.redhat.com/browse/OCPBUGS-67424): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.12.z] [#2048](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2048)
* [OCPBUGS-50880](https://issues.redhat.com/browse/OCPBUGS-50880): Increase waitForFallbackDegradedConditionTimeout [#1811](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1811)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/09d7ddbaba9eb5715313e716476e6a33848d045c...0217c88fb6505e017b3d59c33ed07ca107db4832)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/a0e7f248ac0e15fccbc2aa45e75261fc616791a0)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#628](https://github.com/openshift/cluster-kube-scheduler-operator/pull/628)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/48cd96c9dc27c801beff17fa5ea8c3dac374f10d...a0e7f248ac0e15fccbc2aa45e75261fc616791a0)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/a9c4d87247adb5fffbcd284060d5891b6599e911)

* NO-JIRA: Reconciling the ART and CI go tool chain versions [#173](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/173)
* [OCPBUGS-67429](https://issues.redhat.com/browse/OCPBUGS-67429): Bump github.com/sirupsen/logrus to v1.8.3 [#143](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/143)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/1a251f4d00c050404dc313c698279da435d08c07...a9c4d87247adb5fffbcd284060d5891b6599e911)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/78f9fac53f3ab7d733c1faceb2c5ca874d690f51)

* [OCPBUGS-102148](https://issues.redhat.com/browse/OCPBUGS-102148): Use patched x/net fork v0.35.0-sec.4 [#3099](https://github.com/openshift/cluster-monitoring-operator/pull/3099)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.12] [#3108](https://github.com/openshift/cluster-monitoring-operator/pull/3108)
* [OCPBUGS-76642](https://issues.redhat.com/browse/OCPBUGS-76642): test: remove image registry e2e tests [#2816](https://github.com/openshift/cluster-monitoring-operator/pull/2816)
* [OCPBUGS-77403](https://issues.redhat.com/browse/OCPBUGS-77403): test/e2e: improve prometheus remote-write test [#2819](https://github.com/openshift/cluster-monitoring-operator/pull/2819)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ee4a20d4d0214c9c8fdacaede3482683436d36e0...78f9fac53f3ab7d733c1faceb2c5ca874d690f51)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/a1d5d0d7948019bea4fd18bb9f60d5c31fd277ed)

* [OCPBUGS-76594](https://issues.redhat.com/browse/OCPBUGS-76594): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] [#660](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/b870fc67ef5a0e92df5e5bed1ba0cb1cf197d8c6...a1d5d0d7948019bea4fd18bb9f60d5c31fd277ed)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/a157fe6b39811764fd4bd2ee019a07fc827dd586)

* [OCPBUGS-102136](https://issues.redhat.com/browse/OCPBUGS-102136): Use patched x/net fork v0.35.0-sec.4 [#446](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/446)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/ab963d8ad0387788c947b884a96eb9b2fed470b6...a157fe6b39811764fd4bd2ee019a07fc827dd586)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/24b10d4192fcc08e5aa9918caf3c571398a047e2)

* [OCPBUGS-63521](https://issues.redhat.com/browse/OCPBUGS-63521): references to github.com/sclorg/django-ex.git now also refer to the branch [#663](https://github.com/openshift/cluster-samples-operator/pull/663)
* [OCPBUGS-54913](https://issues.redhat.com/browse/OCPBUGS-54913): add rhdmalone to owners [#629](https://github.com/openshift/cluster-samples-operator/pull/629)
* [OCPBUGS-49664](https://issues.redhat.com/browse/OCPBUGS-49664): add shannon and aroyoredhat as owners [#600](https://github.com/openshift/cluster-samples-operator/pull/600)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/8ea10a9ce12855db00e42055e89e35d80aa1f6bb...24b10d4192fcc08e5aa9918caf3c571398a047e2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/eb5e5081d784140e46d693b995639f52809393a5)

* [OCPBUGS-102141](https://issues.redhat.com/browse/OCPBUGS-102141): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#731](https://github.com/openshift/cluster-storage-operator/pull/731)
* [OCPBUGS-67444](https://issues.redhat.com/browse/OCPBUGS-67444): Bump logrus to v1.8.3 [#657](https://github.com/openshift/cluster-storage-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/21ebf328f53182111eb7dce344487ba633d09b1a...eb5e5081d784140e46d693b995639f52809393a5)


### [console](https://github.com/openshift/console/tree/f7e8883b5dc0627ed519112dd14253ec4a069133)

* [OCPBUGS-129171](https://issues.redhat.com/browse/OCPBUGS-129171), [OU-1589](https://issues.redhat.com/browse/OU-1589): Sanitize URLs in alert annotations [#17434](https://github.com/openshift/console/pull/17434)
* [OCPBUGS-133426](https://issues.redhat.com/browse/OCPBUGS-133426): Stabilize legacy OperatorHub Cypress waits [#17428](https://github.com/openshift/console/pull/17428)
* [OCPBUGS-129171](https://issues.redhat.com/browse/OCPBUGS-129171): Sanitize alert runbook URLs [#17192](https://github.com/openshift/console/pull/17192)
* [OCPBUGS-77114](https://issues.redhat.com/browse/OCPBUGS-77114): [release-4.12] CVE-2026-26996 Bump minimatch library [#16489](https://github.com/openshift/console/pull/16489)
* [OCPBUGS-92663](https://issues.redhat.com/browse/OCPBUGS-92663): CVE-2026-46597 openshift4/ose-console: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.12.z] [#16983](https://github.com/openshift/console/pull/16983)
* [OCPBUGS-100520](https://issues.redhat.com/browse/OCPBUGS-100520): Bump postcss to 8.5.26 to fix CVE-2026-45623 [#17110](https://github.com/openshift/console/pull/17110)
* [OCPBUGS-90615](https://issues.redhat.com/browse/OCPBUGS-90615): Fix JSON annotation parsing to prevent OperatorHub crash [#16660](https://github.com/openshift/console/pull/16660)
* Fix for OCPBUGS-92077: CVE-2026-44990 [#16723](https://github.com/openshift/console/pull/16723)
* [OCPBUGS-98415](https://issues.redhat.com/browse/OCPBUGS-98415): CVE-2026-59869 [#16756](https://github.com/openshift/console/pull/16756)
* [OCPBUGS-87984](https://issues.redhat.com/browse/OCPBUGS-87984): [release-4.12] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16594](https://github.com/openshift/console/pull/16594)
* [OCPBUGS-120132](https://issues.redhat.com/browse/OCPBUGS-120132): Fix JSON annotation parsing to prevent OperatorHub crash [#17135](https://github.com/openshift/console/pull/17135)
* Fix for OCPBUGS-81593: CVE-2026-4800 [#16570](https://github.com/openshift/console/pull/16570)
* [OCPBUGS-88398](https://issues.redhat.com/browse/OCPBUGS-88398), [OCPBUGS-88416](https://issues.redhat.com/browse/OCPBUGS-88416): Bump Axios to fix CVE-2026-44486. Requires a Patch of axios 0.33.0 types to be compatible with old version of TS [#16793](https://github.com/openshift/console/pull/16793)
* [OCPBUGS-79430](https://issues.redhat.com/browse/OCPBUGS-79430): CVE-2026-29063 Bump immutable [#16331](https://github.com/openshift/console/pull/16331)
* [ART-18753](https://issues.redhat.com/browse/ART-18753): pin fsevents to latest [#16482](https://github.com/openshift/console/pull/16482)
* NO-JIRA: enable multi-architecture yarn builds [#16422](https://github.com/openshift/console/pull/16422)
* NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.12 [#12539](https://github.com/openshift/console/pull/12539)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16084](https://github.com/openshift/console/pull/16084)
* NO-JIRA: Bump builder image to v29 [#15988](https://github.com/openshift/console/pull/15988)
* [OCPBUGS-74435](https://issues.redhat.com/browse/OCPBUGS-74435): Bump lodash to latest [#15973](https://github.com/openshift/console/pull/15973)
* [OCPBUGS-44155](https://issues.redhat.com/browse/OCPBUGS-44155): bump dompurify to latest [#15595](https://github.com/openshift/console/pull/15595)
* [OCPBUGS-57101](https://issues.redhat.com/browse/OCPBUGS-57101): Add all files to `vendor` regardless of gitignore [#15137](https://github.com/openshift/console/pull/15137)
* [OCPBUGS-55210](https://issues.redhat.com/browse/OCPBUGS-55210): Show Observe section without PROMETHEUS and MONITORING flags [#14986](https://github.com/openshift/console/pull/14986)
* Dockerfile yarn line update [#14838](https://github.com/openshift/console/pull/14838)
* [Full changelog](https://github.com/openshift/console/compare/8910d841b06e56eda4eb22a59fb514770163e238...f7e8883b5dc0627ed519112dd14253ec4a069133)


### [console-operator](https://github.com/openshift/console-operator/tree/8a1f4d46ea49c0ba31d8ed16a7993985c931ae30)

* [OCPBUGS-102152](https://issues.redhat.com/browse/OCPBUGS-102152): Use patched x/net fork v0.35.0-sec.4 [#1231](https://github.com/openshift/console-operator/pull/1231)
* Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.12 [#1137](https://github.com/openshift/console-operator/pull/1137)
* [OCPBUGS-77996](https://issues.redhat.com/browse/OCPBUGS-77996): [release-4.12] NO-JIRA: update go mod dependency for konflux [#1119](https://github.com/openshift/console-operator/pull/1119)
* [Full changelog](https://github.com/openshift/console-operator/compare/32e6d25c4ac9fe71bb64fa7b30073a72547f4974...8a1f4d46ea49c0ba31d8ed16a7993985c931ae30)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/cd87d3d3d8f2697b993a48fe8658c3af6e8cbf46)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Fix Hermeto build issues [#198](https://github.com/openshift/containernetworking-plugins/pull/198)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/1b33971993ca1013be9f24690c44560d2c58c70a...cd87d3d3d8f2697b993a48fe8658c3af6e8cbf46)


### [coredns](https://github.com/openshift/coredns/tree/95d00296af2965045ef25de7d04da21d8846b9da)

* [OCPBUGS-59711](https://issues.redhat.com/browse/OCPBUGS-59711): Bump github.com/golang/glog to v1.2.4 [#151](https://github.com/openshift/coredns/pull/151)
* [Full changelog](https://github.com/openshift/coredns/compare/cc1194ea004f6b4bcb132fd1c6cebee68666d38f...95d00296af2965045ef25de7d04da21d8846b9da)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/0fe247cdb9c61844b95b56d1b544da5f2e53d08f)

* [OCPBUGS-79763](https://issues.redhat.com/browse/OCPBUGS-79763): Apply code mitigations for CVE-2026-33186 [#401](https://github.com/openshift/cloud-provider-openstack/pull/401)
* [OCPBUGS-67448](https://issues.redhat.com/browse/OCPBUGS-67448): CVE-2025-65637 [#365](https://github.com/openshift/cloud-provider-openstack/pull/365)
* [OCPBUGS-58889](https://issues.redhat.com/browse/OCPBUGS-58889): CARRY: don't ignore json files [#345](https://github.com/openshift/cloud-provider-openstack/pull/345)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/2f1d9f8ac6af4364d8118c874b0071d9e9f3ee65...0fe247cdb9c61844b95b56d1b544da5f2e53d08f)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/dfd1c6d2b817572e517c88c2574b153f907182b7)

* [OCPBUGS-102162](https://issues.redhat.com/browse/OCPBUGS-102162): Use patched x/net fork v0.35.0-sec.4 [#258](https://github.com/openshift/csi-driver-manila-operator/pull/258)
* [OCPBUGS-67449](https://issues.redhat.com/browse/OCPBUGS-67449): Bump logrus [#255](https://github.com/openshift/csi-driver-manila-operator/pull/255)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/8dab53208f3a161af85eedd6835c2701d337d5f9...dfd1c6d2b817572e517c88c2574b153f907182b7)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/239935ec6666f4c0e86f8f955a68c67d97880b86)

* [OCPBUGS-84927](https://issues.redhat.com/browse/OCPBUGS-84927): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#186](https://github.com/openshift/csi-driver-nfs/pull/186)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/d90992573acb3df6c7fbb6dbe1b215125d26fc34...239935ec6666f4c0e86f8f955a68c67d97880b86)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/0c555f6d8da21959eaec07c967ccf6068f30eda5)

* [OCPBUGS-102157](https://issues.redhat.com/browse/OCPBUGS-102157): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#529](https://github.com/openshift/csi-driver-shared-resource/pull/529)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d054948fbc78ef04c7a55ac2a4b3ac0ed5648585...0c555f6d8da21959eaec07c967ccf6068f30eda5)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/f50a04c020db1a9ae9a8314d19aa585de9045f74)

* [OCPBUGS-102179](https://issues.redhat.com/browse/OCPBUGS-102179): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.3 [#244](https://github.com/openshift/csi-external-snapshotter/pull/244)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf...f50a04c020db1a9ae9a8314d19aa585de9045f74)


### [docker-builder](https://github.com/openshift/builder/tree/f8dfb4d65c0344fdfe69aa4fbbc9ebb8d013316a)

* [OCPBUGS-89733](https://issues.redhat.com/browse/OCPBUGS-89733), [OCPBUGS-90176](https://issues.redhat.com/browse/OCPBUGS-90176), [OCPBUGS-92261](https://issues.redhat.com/browse/OCPBUGS-92261), [OCPBUGS-92553](https://issues.redhat.com/browse/OCPBUGS-92553), [OCPBUGS-92668](https://issues.redhat.com/browse/OCPBUGS-92668): Bump golang.org/x/crypto to fix CVE-2026-39831,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832,CVE-2026-39830 [#546](https://github.com/openshift/builder/pull/546)
* [OCPBUGS-43296](https://issues.redhat.com/browse/OCPBUGS-43296): Bump buildah to 1.26.9 [#449](https://github.com/openshift/builder/pull/449)
* [OCPBUGS-43187](https://issues.redhat.com/browse/OCPBUGS-43187): runc library bump to 1.1.12 [#440](https://github.com/openshift/builder/pull/440)
* [Full changelog](https://github.com/openshift/builder/compare/b766b972406b55e39946cdfba8ff7c60d5b0a800...f8dfb4d65c0344fdfe69aa4fbbc9ebb8d013316a)


### [docker-registry](https://github.com/openshift/image-registry/tree/e96baf4be1a6f236a44740d0c23847a6d614cf09)

* [OCPBUGS-53652](https://issues.redhat.com/browse/OCPBUGS-53652): bump jwt and oauth dependencies [#442](https://github.com/openshift/image-registry/pull/442)
* [Full changelog](https://github.com/openshift/image-registry/compare/9e75355ca282cf5abac5595585a4b089e6a95e6f...e96baf4be1a6f236a44740d0c23847a6d614cf09)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/8ab7a753b01301be406dfbbb0064836dcc6dd2de)

* [OCPBUGS-63597](https://issues.redhat.com/browse/OCPBUGS-63597): Remove realtime kernel from 4.12.z [#176](https://github.com/openshift/driver-toolkit/pull/176)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/6e5c04c066a428047d1755478cf88b290d32ad8f...8ab7a753b01301be406dfbbb0064836dcc6dd2de)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/88879fd12aafb43bd4ce15dc09be6fbd911fb799)

* [OCPBUGS-78284](https://issues.redhat.com/browse/OCPBUGS-78284): [release-4.12] hermetic migration 4.12 [#278](https://github.com/openshift/cluster-api-provider-gcp/pull/278)
* [OCPBUGS-78284](https://issues.redhat.com/browse/OCPBUGS-78284): [release-4.12] hermetic migration 4.12 [#271](https://github.com/openshift/cluster-api-provider-gcp/pull/271)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/e00019faa4bd74f70826344a8cc085ba13768422...88879fd12aafb43bd4ce15dc09be6fbd911fb799)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/c3c0911c653bb77300e5d5ddb35beb0a8d1f42f0)

* [OCPBUGS-102202](https://issues.redhat.com/browse/OCPBUGS-102202): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#196](https://github.com/openshift/machine-api-provider-gcp/pull/196)
* [OCPBUGS-83657](https://issues.redhat.com/browse/OCPBUGS-83657): Address CVE-2026-33186 [#174](https://github.com/openshift/machine-api-provider-gcp/pull/174)
* [OCPBUGS-78183](https://issues.redhat.com/browse/OCPBUGS-78183): hermetic 4.12 [#143](https://github.com/openshift/machine-api-provider-gcp/pull/143)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/d6d8c1cc5b58ff7cf311bcb72dbeb00eb704511a...c3c0911c653bb77300e5d5ddb35beb0a8d1f42f0)


### [haproxy-router](https://github.com/openshift/router/tree/7ae57ca0ce34b953ae2b23acad3f9d747f8c4c79)

* [OCPBUGS-86709](https://issues.redhat.com/browse/OCPBUGS-86709): Strip X-SSL-* headers for plain HTTP [#809](https://github.com/openshift/router/pull/809)
* [OCPBUGS-74943](https://issues.redhat.com/browse/OCPBUGS-74943): Adding escapeHAProxySingleQuotes for sanitize [release-4.12] [#784](https://github.com/openshift/router/pull/784)
* [OCPBUGS-78110](https://issues.redhat.com/browse/OCPBUGS-78110): [release-4.12] hermetic 4.12 [#744](https://github.com/openshift/router/pull/744)
* [Full changelog](https://github.com/openshift/router/compare/6a092687d2ed1b709403e3bdebc2f069c0ce4a01...7ae57ca0ce34b953ae2b23acad3f9d747f8c4c79)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/0e18cfc68b3480db08fb30be0edfb886cf24dd1a)

* [OCPBUGS-77661](https://issues.redhat.com/browse/OCPBUGS-77661): Skip E2e: attach on previously attached volumes should work [#2649](https://github.com/openshift/kubernetes/pull/2649)
* [OCPBUGS-77469](https://issues.redhat.com/browse/OCPBUGS-77469): hermetic 4.12 [#2652](https://github.com/openshift/kubernetes/pull/2652)
* [OCPBUGS-67374](https://issues.redhat.com/browse/OCPBUGS-67374), [OCPBUGS-67472](https://issues.redhat.com/browse/OCPBUGS-67472): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.12] [#2596](https://github.com/openshift/kubernetes/pull/2596)
* [OCPBUGS-78226](https://issues.redhat.com/browse/OCPBUGS-78226): UPSTREAM: 133262: Remove permafailing tests using an expired GCP project [#2625](https://github.com/openshift/kubernetes/pull/2625)
* [Full changelog](https://github.com/openshift/kubernetes/compare/1eb868227a9b8ed70f88be1681321405094d7adf...0e18cfc68b3480db08fb30be0edfb886cf24dd1a)


### [hypershift](https://github.com/openshift/hypershift/tree/10dcc7d5d8f606955361ec81b1c7560c8e0fa5a2)

* [OCPBUGS-77768](https://issues.redhat.com/browse/OCPBUGS-77768): fix vendor for hermetic 4.12 [#7823](https://github.com/openshift/hypershift/pull/7823)
* Updating ose-hypershift-container image to be consistent with ART for 4.12 [#6976](https://github.com/openshift/hypershift/pull/6976)
* [Full changelog](https://github.com/openshift/hypershift/compare/da93f69c5c56fe938e65115dd08428604ed42bed...10dcc7d5d8f606955361ec81b1c7560c8e0fa5a2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/083cfee7b6bd8b394070bd458daf66795d119e64)

* [OCPBUGS-79756](https://issues.redhat.com/browse/OCPBUGS-79756): Bump google.golang.org/grpc to v1.79.3 [#158](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/158)
* [OCPBUGS-77214](https://issues.redhat.com/browse/OCPBUGS-77214): [release-4.12] standardize build paths [#128](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/128)
* [OCPBUGS-58873](https://issues.redhat.com/browse/OCPBUGS-58873): bump github.com/golang/glog to v1.2.4 [#111](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/111)
* [OCPBUGS-56067](https://issues.redhat.com/browse/OCPBUGS-56067): tech debt: rework vendor patches [#95](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/95)
* [OCPBUGS-53908](https://issues.redhat.com/browse/OCPBUGS-53908): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#88](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/88)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/921509f3833b7b69a08d63fddd13890125e974fa...083cfee7b6bd8b394070bd458daf66795d119e64)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/a898571f08341044821be368bed39e754d5b2585)

* [OCPBUGS-102199](https://issues.redhat.com/browse/OCPBUGS-102199): Use patched x/net fork v0.35.0-sec.4 [#183](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/183)
* [OCPBUGS-67476](https://issues.redhat.com/browse/OCPBUGS-67476), [OCPBUGS-67477](https://issues.redhat.com/browse/OCPBUGS-67477): bump github.com/sirupsen/logrus to v1.8.3 [#163](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/163)
* [OCPBUGS-60058](https://issues.redhat.com/browse/OCPBUGS-60058): [IBM VPC] set offlineExpansion to false in e2e test manifest [#153](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/153)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f2b726d578e020d369902c14173307a6e13853b4...a898571f08341044821be368bed39e754d5b2585)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/3cca5da2818c414e11e594c1d1087f86a39b2de2)

* [OCPBUGS-56067](https://issues.redhat.com/browse/OCPBUGS-56067): tech debt: rework vendor patches [#52](https://github.com/openshift/ibm-vpc-node-label-updater/pull/52)
* [OCPBUGS-53540](https://issues.redhat.com/browse/OCPBUGS-53540): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#48](https://github.com/openshift/ibm-vpc-node-label-updater/pull/48)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/f9da23ac8abe04dc1615763e120cd174bde6e617...3cca5da2818c414e11e594c1d1087f86a39b2de2)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/79a10b3300a954d5094b5a03465bfa387fd0437e)

* [OCPBUGS-102194](https://issues.redhat.com/browse/OCPBUGS-102194): Replace golang.org/x/net with openshift-sustaining/net [#166](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/166)
* [OCPBUGS-115549](https://issues.redhat.com/browse/OCPBUGS-115549): Fetch envtest assets from the controller-tools releases [#177](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/177)
* [OCPBUGS-67292](https://issues.redhat.com/browse/OCPBUGS-67292): [release-4.12] Fix incomplete vendor/ [#134](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/134)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/0fe74f674bf5a1e464a5e2f872def13e1a9bb2a9...79a10b3300a954d5094b5a03465bfa387fd0437e)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1283d23dca3c7fffcfa2eb9bb085821264ad10ba)

* [OCPBUGS-102189](https://issues.redhat.com/browse/OCPBUGS-102189): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#110](https://github.com/openshift/machine-api-provider-ibmcloud/pull/110)
* [OCPBUGS-78276](https://issues.redhat.com/browse/OCPBUGS-78276): hermetic 4.12 [#79](https://github.com/openshift/machine-api-provider-ibmcloud/pull/79)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/31a67daca92c374cb4d9a87928ec8c28528a0c0e...1283d23dca3c7fffcfa2eb9bb085821264ad10ba)


### [insights-operator](https://github.com/openshift/insights-operator/tree/bd5256fdb8075dddf2d8106c563347bf18d803ed)

* [OCPBUGS-102197](https://issues.redhat.com/browse/OCPBUGS-102197): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.3 to mitigate CVE-2026-33814 [#1373](https://github.com/openshift/insights-operator/pull/1373)
* [Full changelog](https://github.com/openshift/insights-operator/compare/6b543885144d6eb40c7c8342dac15f80e77bb4fa...bd5256fdb8075dddf2d8106c563347bf18d803ed)


### [ironic](https://github.com/openshift/ironic-image/tree/f86d98c09df027a8de2adb7f957a84c9d1fbd439)

* [OCPBUGS-97988](https://issues.redhat.com/browse/OCPBUGS-97988): bump openstack-ironic RPM for CVE-2026-44918 fix [#930](https://github.com/openshift/ironic-image/pull/930)
* [OCPBUGS-69787](https://issues.redhat.com/browse/OCPBUGS-69787): Bump eventlet version to 0.30.2-5 [#767](https://github.com/openshift/ironic-image/pull/767)
* [Full changelog](https://github.com/openshift/ironic-image/compare/2869b1ec37e19ccf364d95c7fb7dac458032c5bd...f86d98c09df027a8de2adb7f957a84c9d1fbd439)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/6ae26fe4385a31db8cd5b8a8456b220acb2e5050)

* [OCPBUGS-96903](https://issues.redhat.com/browse/OCPBUGS-96903): Replace individual package removal with a single rpm -e loop [#280](https://github.com/openshift/ironic-agent-image/pull/280)
* [OCPBUGS-69778](https://issues.redhat.com/browse/OCPBUGS-69778): adding eventlet 0.30.2-5 [#236](https://github.com/openshift/ironic-agent-image/pull/236)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/fc37dec83ae7cbd6878a5ddcc25126f424586095...6ae26fe4385a31db8cd5b8a8456b220acb2e5050)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/521873a83feffb7be9dc76833a846d3a2de49c89)

* [OCPBUGS-87168](https://issues.redhat.com/browse/OCPBUGS-87168): CI Build root image tag and go version in go.mod sync with ART 4.12 [#118](https://github.com/openshift/ironic-rhcos-downloader/pull/118)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29...521873a83feffb7be9dc76833a846d3a2de49c89)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/5fe565c4c0255b77ee1b2e45cc48e64f39f33e4c)

* [OCPBUGS-56130](https://issues.redhat.com/browse/OCPBUGS-56130): Handle `openshift-host-network` namespace as special when it modifies [#657](https://github.com/openshift/sdn/pull/657)
* [Full changelog](https://github.com/openshift/sdn/compare/9706f967ca7bb1ade1a789123c71fe6cb55a025e...5fe565c4c0255b77ee1b2e45cc48e64f39f33e4c)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/1c9312d09816c278088c0abb13899c96b1a7c3c1)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.12] [#179](https://github.com/openshift/kube-state-metrics/pull/179)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/748f71317b9d3e3e5a96b14131294e2695f26434...1c9312d09816c278088c0abb13899c96b1a7c3c1)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/74ce8d51565468765cbb41a8ebf65fb9519522d5)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-11). [#231](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/231)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/596745cec38b8401d1d906bfb9d3d78fdaeabcde...74ce8d51565468765cbb41a8ebf65fb9519522d5)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/b1997e72460ba21f5c322d74293be0b8a8805f57)

* [OCPBUGS-95078](https://issues.redhat.com/browse/OCPBUGS-95078): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#76](https://github.com/openshift/cloud-provider-kubevirt/pull/76)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/a19615cda3daf69008253d75cc848ac0ad397179...b1997e72460ba21f5c322d74293be0b8a8805f57)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/8667e8c1622775f9f2f9e0f48a84b3a60a8075cf)

* [OCPBUGS-83660](https://issues.redhat.com/browse/OCPBUGS-83660): Bump google.golang.org/grpc to v1.79.3 [#110](https://github.com/openshift/kubevirt-csi-driver/pull/110)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6...8667e8c1622775f9f2f9e0f48a84b3a60a8075cf)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/819556b739c09d2efc1d79bc87da06032b1a33c3)

* [OCPBUGS-102207](https://issues.redhat.com/browse/OCPBUGS-102207): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#1551](https://github.com/openshift/machine-api-operator/pull/1551)
* [OCPBUGS-78271](https://issues.redhat.com/browse/OCPBUGS-78271): hermetic 4.12 [#1470](https://github.com/openshift/machine-api-operator/pull/1470)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/b6c243d139f4345a88d5678eb6ba6041a2abb405...819556b739c09d2efc1d79bc87da06032b1a33c3)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1d4cfffaad8dba651fd3bac6006d82e7a15b81d6)

* [OCPBUGS-77981](https://issues.redhat.com/browse/OCPBUGS-77981): hermetic 4.12 [#5734](https://github.com/openshift/machine-config-operator/pull/5734)
* [OCPBUGS-58874](https://issues.redhat.com/browse/OCPBUGS-58874): [release-4.12] Bump golang/glog to fix  CVE-2024-45339 [#5174](https://github.com/openshift/machine-config-operator/pull/5174)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f319faad0f2a538159dac610068952488d800ebf...1d4cfffaad8dba651fd3bac6006d82e7a15b81d6)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/3e5e177c137875918a5365ab8798acc1b0a7b568)

* [OCPBUGS-102198](https://issues.redhat.com/browse/OCPBUGS-102198): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#188](https://github.com/openshift/image-customization-controller/pull/188)
* [OCPBUGS-67478](https://issues.redhat.com/browse/OCPBUGS-67478): bumped logrus to v1.9.3 [#161](https://github.com/openshift/image-customization-controller/pull/161)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/e456249dbf0c5456bd0671d41a4445bd266b3660...3e5e177c137875918a5365ab8798acc1b0a7b568)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/9827fc859cba5e6ea9ff9dc23c0b5318fbeaafc3)

* [OCPBUGS-87882](https://issues.redhat.com/browse/OCPBUGS-87882): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#106](https://github.com/openshift/machine-os-images/pull/106)
* [OCPBUGS-54173](https://issues.redhat.com/browse/OCPBUGS-54173): Change rhcos release browser url [#61](https://github.com/openshift/machine-os-images/pull/61)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/566bf59501f178bd80e410fda66cc424de6a4891...9827fc859cba5e6ea9ff9dc23c0b5318fbeaafc3)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0a12d741af986ef1f8c4609b452cb96594088eb3)

* [OCPBUGS-60292](https://issues.redhat.com/browse/OCPBUGS-60292): Bump github.com/golang/glog to v1.2.4 [#107](https://github.com/openshift/multus-admission-controller/pull/107)
* [OCPBUGS-60850](https://issues.redhat.com/browse/OCPBUGS-60850): Update owners [#109](https://github.com/openshift/multus-admission-controller/pull/109)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/e27952fc813ac994e64f715a8690f3d36a9ec778...0a12d741af986ef1f8c4609b452cb96594088eb3)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/2350c1df922293782cb9452f63f627b1c63f9c2b)

* [OCPBUGS-78160](https://issues.redhat.com/browse/OCPBUGS-78160): hermetic 4.12 [#64](https://github.com/openshift/route-override-cni/pull/64)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/efd6ffbb275a133196e30edfe9f241e2a3b4f0c0...2350c1df922293782cb9452f63f627b1c63f9c2b)


### [must-gather](https://github.com/openshift/must-gather/tree/a4db96b0b046ee976cd63b1de4570d698eb6341a)

* [OCPBUGS-48086](https://issues.redhat.com/browse/OCPBUGS-48086): Update owners [#477](https://github.com/openshift/must-gather/pull/477)
* [Full changelog](https://github.com/openshift/must-gather/compare/dc23fd8103fdf54262f101c16b11102242d9d002...a4db96b0b046ee976cd63b1de4570d698eb6341a)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/98d9349d6f0c71d5eecf4391da7a471a1e205471)

* -sOCPBUGS-59700:Bump github.com/golang/glog to v1.2.4 (#125) [#125](https://github.com/openshift/network-metrics-daemon/pull/125)
* Replace e2e test image (#134) [#134](https://github.com/openshift/network-metrics-daemon/pull/134)
* swtich golint install method (#133) [#133](https://github.com/openshift/network-metrics-daemon/pull/133)
* Correct 4.16 owners file (#131) [#131](https://github.com/openshift/network-metrics-daemon/pull/131)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/fad45782360032bdde3a10b9a28ba30ecc14684f...98d9349d6f0c71d5eecf4391da7a471a1e205471)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/c5b73369e16870569b4e34608c080d6d1b1867b9)

* [OCPBUGS-78158](https://issues.redhat.com/browse/OCPBUGS-78158): hermetic 4.12 [#132](https://github.com/openshift/machine-api-provider-nutanix/pull/132)
* [OCPBUGS-51849](https://issues.redhat.com/browse/OCPBUGS-51849): Fixing CVE-2025-22868 [#121](https://github.com/openshift/machine-api-provider-nutanix/pull/121)
* [OCPBUGS-47263](https://issues.redhat.com/browse/OCPBUGS-47263): fixing CVE-2024-45338 [#114](https://github.com/openshift/machine-api-provider-nutanix/pull/114)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/336a4889d4464be26bc3f0f7d85ba704fe3ccb02...c5b73369e16870569b4e34608c080d6d1b1867b9)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/257f6be9a01b0dd8e984a5b033d54e83fd74c1b7)

* [OCPBUGS-112091](https://issues.redhat.com/browse/OCPBUGS-112091): bugfix: rewrite open redirect strings to '/' [#390](https://github.com/openshift/oauth-proxy/pull/390)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...257f6be9a01b0dd8e984a5b033d54e83fd74c1b7)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/dbc632e4afdfd06bc34e1ad3da5679f4971eb632)

* [OCPBUGS-90518](https://issues.redhat.com/browse/OCPBUGS-90518): Address CVE-2026-35469 [#663](https://github.com/openshift/openshift-apiserver/pull/663)
* [OCPBUGS-76481](https://issues.redhat.com/browse/OCPBUGS-76481): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] [#614](https://github.com/openshift/openshift-apiserver/pull/614)
* [OCPBUGS-79381](https://issues.redhat.com/browse/OCPBUGS-79381): Fix image reference in TestImageStreamImportQuayIO [#623](https://github.com/openshift/openshift-apiserver/pull/623)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/b0407e37de04934135f86b69d4629e8c6a190fdf...dbc632e4afdfd06bc34e1ad3da5679f4971eb632)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/d32006c1a8ac30273ea040dccbe6307db8e1fcba)

* [OCPBUGS-58296](https://issues.redhat.com/browse/OCPBUGS-58296): Inconsistencies in dependencies are fixed [#410](https://github.com/openshift/openshift-controller-manager/pull/410)
* [OCPBUGS-58157](https://issues.redhat.com/browse/OCPBUGS-58157): Set node-pullsecrets volume to read-only to protect image pull credentials [#403](https://github.com/openshift/openshift-controller-manager/pull/403)
* [OCPBUGS-57171](https://issues.redhat.com/browse/OCPBUGS-57171): Empty proxy variables are causing issues during the build [#389](https://github.com/openshift/openshift-controller-manager/pull/389)
* [OCPBUGS-49644](https://issues.redhat.com/browse/OCPBUGS-49644): Add new team members to the OWNERS file [#364](https://github.com/openshift/openshift-controller-manager/pull/364)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/bde7e3af208ac9079de5646a3b47120dc762606f...d32006c1a8ac30273ea040dccbe6307db8e1fcba)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/0dbf31668f5753d692d1d6256757660b9989d3f2)

* NO-ISSUE: synchronize OWNERS from main branch [#155](https://github.com/openshift/openshift-state-metrics/pull/155)
* [OCPBUGS-102220](https://issues.redhat.com/browse/OCPBUGS-102220): CVE-2026-33814 openshift4/ose-openshift-state-metrics-rhel8: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.12.z] [#138](https://github.com/openshift/openshift-state-metrics/pull/138)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/3d5dc18d2bee5ba7132560bf40790af997952d33...0dbf31668f5753d692d1d6256757660b9989d3f2)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/55bc4372711947d12d7f89d7a414e2b694e71933)

* [OCPBUGS-67502](https://issues.redhat.com/browse/OCPBUGS-67502): Bump logrus [#191](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/191)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/d09e51ae44b3ac6d27236b515c1f7c6da847689d...55bc4372711947d12d7f89d7a414e2b694e71933)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/b308a848093885884bb3f5c876d5bb544c66b098)

* [OCPBUGS-102215](https://issues.redhat.com/browse/OCPBUGS-102215): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#1371](https://github.com/openshift/operator-framework-olm/pull/1371)
* [OCPBUGS-87894](https://issues.redhat.com/browse/OCPBUGS-87894), [OCPBUGS-87897](https://issues.redhat.com/browse/OCPBUGS-87897): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.12] [#1383](https://github.com/openshift/operator-framework-olm/pull/1383)
* [OCPBUGS-86254](https://issues.redhat.com/browse/OCPBUGS-86254): Drop github.com/distribution/distribution in go.mod [#1312](https://github.com/openshift/operator-framework-olm/pull/1312)
* [OCPBUGS-61471](https://issues.redhat.com/browse/OCPBUGS-61471): [release-4.12] Add NetworkPolicy as a supported kind [#1054](https://github.com/openshift/operator-framework-olm/pull/1054)
* [OCPBUGS-61392](https://issues.redhat.com/browse/OCPBUGS-61392): [4.12] e2e stability fixes [#1087](https://github.com/openshift/operator-framework-olm/pull/1087)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/701a1221f2877c41a5ab7fa6422617fc130de63c...b308a848093885884bb3f5c876d5bb544c66b098)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/a3aeac97943021b26c29c5eadcb5db364f6dfcd5)

* [OCPBUGS-49426](https://issues.redhat.com/browse/OCPBUGS-49426): Upgrade golang.org/x/net [release-4.12] [#591](https://github.com/operator-framework/operator-marketplace/pull/591)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/38b9ed80140123508ab5012e8fa0b067e7aafc12...a3aeac97943021b26c29c5eadcb5db364f6dfcd5)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/bb427c3d60b793ba881221176bf6d292f329706f)

* [OCPBUGS-67542](https://issues.redhat.com/browse/OCPBUGS-67542): Bump github.com/sirupsen/logrus to v1.8.3 [#148](https://github.com/openshift/ovirt-csi-driver-operator/pull/148)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/e5e02335951010745a42f472a0656b5948ffdade...bb427c3d60b793ba881221176bf6d292f329706f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/31f239e3c862ae1531f838c4511429367cbb2565)

* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-84636](https://issues.redhat.com/browse/OCPBUGS-84636): [release-4.12] Dockerfile: Unpin OVN and consume the latest from FDP [#3075](https://github.com/openshift/ovn-kubernetes/pull/3075)
* [OCPBUGS-59935](https://issues.redhat.com/browse/OCPBUGS-59935): Dockerfile: Remove ovs version pinning [#2698](https://github.com/openshift/ovn-kubernetes/pull/2698)
* NO-JIRA: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.12 [#2092](https://github.com/openshift/ovn-kubernetes/pull/2092)
* [OCPBUGS-55951](https://issues.redhat.com/browse/OCPBUGS-55951): Bump ovn and ovs to latest 23.06 and 3.1 respectively [#2554](https://github.com/openshift/ovn-kubernetes/pull/2554)
* [OCPBUGS-50502](https://issues.redhat.com/browse/OCPBUGS-50502): EgressIP: Reload certificates for the grpc heatlhcheck server [#2457](https://github.com/openshift/ovn-kubernetes/pull/2457)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2996be215b6dc887d9c439ad4256e47568eb7a0e...31f239e3c862ae1531f838c4511429367cbb2565)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/830cd86b7f4449eedd7bc5c23166ae9d3bdf2f3e)

* [OCPBUGS-67511](https://issues.redhat.com/browse/OCPBUGS-67511): Fix CVE-2025-65637 by bumping logrus to v1.8.3 [#102](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/102)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7dadc08acb9f515735c6c3fdb417424d0c668d44...830cd86b7f4449eedd7bc5c23166ae9d3bdf2f3e)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/e1a1e5552061f5307e7cdc69402ff13a99a2aa33)

* [OCPBUGS-78043](https://issues.redhat.com/browse/OCPBUGS-78043): hermetic 4.12 [#138](https://github.com/openshift/machine-api-provider-powervs/pull/138)
* [OCPBUGS-54012](https://issues.redhat.com/browse/OCPBUGS-54012): Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.12 [#123](https://github.com/openshift/machine-api-provider-powervs/pull/123)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/8a37e70af86197341dfe33077565cc1f7c919333...e1a1e5552061f5307e7cdc69402ff13a99a2aa33)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/13b22b194c71ef8ac74fa6f7ca8955f65e82e31c)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.12] [#408](https://github.com/openshift/prom-label-proxy/pull/408)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/b1907888004888b977918cf911b189de736642b2...13b22b194c71ef8ac74fa6f7ca8955f65e82e31c)


### [prometheus](https://github.com/openshift/prometheus/tree/d07243730e7545d1fd1e7e886b7754aa91eeb37d)

* NO-ISSUE: synchronize OWNERS from main branch [#388](https://github.com/openshift/prometheus/pull/388)
* [OCPBUGS-88580](https://issues.redhat.com/browse/OCPBUGS-88580): remote: validate snappy decoded length before allocation in read endpoint [#356](https://github.com/openshift/prometheus/pull/356)
* [OCPBUGS-86876](https://issues.redhat.com/browse/OCPBUGS-86876): Bump google.golang.org/grpc [#325](https://github.com/openshift/prometheus/pull/325)
* [OCPBUGS-67512](https://issues.redhat.com/browse/OCPBUGS-67512): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#291](https://github.com/openshift/prometheus/pull/291)
* [Full changelog](https://github.com/openshift/prometheus/compare/72ceaef4a59ec0cfb0639563ba9bd28928f4bcc0...d07243730e7545d1fd1e7e886b7754aa91eeb37d)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/ef2d98d26e5e137e67bb39d6254b1b5ecac81da1)

* [OCPBUGS-98171](https://issues.redhat.com/browse/OCPBUGS-98171): bump github.com/hashicorp/memberlist to a forked version to fix CVE-2026-14362 [#207](https://github.com/openshift/prometheus-alertmanager/pull/207)
* NO-JIRA: synchronize OWNERS with main [#195](https://github.com/openshift/prometheus-alertmanager/pull/195)
* [OCPBUGS-100365](https://issues.redhat.com/browse/OCPBUGS-100365): Set testdata CA expiry to 20 years from issue date (#4112) [#154](https://github.com/openshift/prometheus-alertmanager/pull/154)
* [OCPBUGS-77906](https://issues.redhat.com/browse/OCPBUGS-77906): Include go-verify-deps expected files in gitignore [#124](https://github.com/openshift/prometheus-alertmanager/pull/124)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/914cad827e9a177b29b23e02eb48b4065da8dca2...ef2d98d26e5e137e67bb39d6254b1b5ecac81da1)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/7a10d84ef08f1247f9d0ad515b8ef6517f754314)

* NO-ISSUE: synchronize OWNERS from main branch [#418](https://github.com/openshift/prometheus-operator/pull/418)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/d1e399d5cead91c677cee4a80a032f5057cb43e3...7a10d84ef08f1247f9d0ad515b8ef6517f754314)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/fa6a3650ab530a701bed73e013a31416bd7303a9)

* [OCPBUGS-102236](https://issues.redhat.com/browse/OCPBUGS-102236): Use patched x/net fork v0.35.0-sec.4 [#190](https://github.com/openshift/node_exporter/pull/190)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.12] [#210](https://github.com/openshift/node_exporter/pull/210)
* [Full changelog](https://github.com/openshift/node_exporter/compare/99077a3c8c3b0fce152fe0affce1e31fc2c6efaa...fa6a3650ab530a701bed73e013a31416bd7303a9)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/be0ede7a4bbb479ba3416b9dde72de9c3aa2bba4)

* [OCPBUGS-86881](https://issues.redhat.com/browse/OCPBUGS-86881): [release-4.12] bump google.golang.org/grpc to v1.64.1-sec.1 [#97](https://github.com/openshift/route-controller-manager/pull/97)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/0f141ce9d349fb30755e3d0d7f9f196a91782957...be0ede7a4bbb479ba3416b9dde72de9c3aa2bba4)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/46487800f3ffdd77935a70860a2d044a9ffbe14a)

* NO-JIRA: Updating ose-service-ca-operator-container image to be consistent with ART for 4.12 [#360](https://github.com/openshift/service-ca-operator/pull/360)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/ef1d057db0bf8d0846d96e09cdd1f55998a1f80b...46487800f3ffdd77935a70860a2d044a9ffbe14a)


### [telemeter](https://github.com/openshift/telemeter/tree/547ca0b2fb80b95c65cf83204d57e4a591fff7f7)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.12] [#624](https://github.com/openshift/telemeter/pull/624)
* [Full changelog](https://github.com/openshift/telemeter/compare/c9592ded3e9a8daa8dfddfb7b8d874a2aaf1972c...547ca0b2fb80b95c65cf83204d57e4a591fff7f7)


### [tests](https://github.com/openshift/origin/tree/583710d8f5f4a391be7e53dd1fba824cfcb42a05)

* [OCPBUGS-132673](https://issues.redhat.com/browse/OCPBUGS-132673): replace centos with ubi8 in build test dockerfile [#31758](https://github.com/openshift/origin/pull/31758)
* [OCPBUGS-56120](https://issues.redhat.com/browse/OCPBUGS-56120): [build] Ensure Git Clone Does Not Run Privileged [#29788](https://github.com/openshift/origin/pull/29788)
* [OCPBUGS-37799](https://issues.redhat.com/browse/OCPBUGS-37799): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29621](https://github.com/openshift/origin/pull/29621)
* [OCPBUGS-54772](https://issues.redhat.com/browse/OCPBUGS-54772): Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed [#29662](https://github.com/openshift/origin/pull/29662)
* [OCPBUGS-54147](https://issues.redhat.com/browse/OCPBUGS-54147): Add/remove team members to the OWNERS file for Builds [#29622](https://github.com/openshift/origin/pull/29622)
* [OCPBUGS-52585](https://issues.redhat.com/browse/OCPBUGS-52585): Use payload pullspec for image info test [#29593](https://github.com/openshift/origin/pull/29593)
* [Full changelog](https://github.com/openshift/origin/compare/daedb2e584a91e7384b765d0599ad096aa2e78df...583710d8f5f4a391be7e53dd1fba824cfcb42a05)


### [thanos](https://github.com/openshift/thanos/tree/6804e2189337ddee268fc02dea2f74d3cf577ec9)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.12] [#218](https://github.com/openshift/thanos/pull/218)
* [OCPBUGS-67525](https://issues.redhat.com/browse/OCPBUGS-67525): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#169](https://github.com/openshift/thanos/pull/169)
* [Full changelog](https://github.com/openshift/thanos/compare/2867a6b552eaddefd73aa979f13e95f6df338070...6804e2189337ddee268fc02dea2f74d3cf577ec9)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/e3f1193d17a0168713d29ba09fdbc38feec6f6b6)

* [OCPBUGS-78036](https://issues.redhat.com/browse/OCPBUGS-78036): hermetic migration 4.12 [#111](https://github.com/openshift/cloud-provider-vsphere/pull/111)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/e170dce5c1fe5d3a025ccd8264e78c4c987b1d7a...e3f1193d17a0168713d29ba09fdbc38feec6f6b6)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/e2d65947c5d7a91616a8187d3f73c5bd3d97fcd5)

* [OCPBUGS-78026](https://issues.redhat.com/browse/OCPBUGS-78026): hermetic migration 4.12 [#90](https://github.com/openshift/cluster-api-provider-vsphere/pull/90)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/a61d43b751249c1a74376a48498571da1d665685...e2d65947c5d7a91616a8187d3f73c5bd3d97fcd5)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/bec44875e5c478888a890559a905168d15b8e3e1)

* [OCPBUGS-67529](https://issues.redhat.com/browse/OCPBUGS-67529): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#162](https://github.com/openshift/vmware-vsphere-csi-driver/pull/162)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/e4c0e103ddbf264387d6efb26b612a4b915d362a...bec44875e5c478888a890559a905168d15b8e3e1)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/944440b47969130eb46ac9c2beaeed3a8cc895d4)

* [OCPBUGS-102278](https://issues.redhat.com/browse/OCPBUGS-102278): Use patched x/net fork v0.35.0-sec.4 [#363](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/363)
* [OCPBUGS-67528](https://issues.redhat.com/browse/OCPBUGS-67528), [OCPBUGS-67534](https://issues.redhat.com/browse/OCPBUGS-67534): CVE-2025-65637:  Bump github.com/sirupsen/logrus to v1.8.3 [#327](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/327)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d7cca470e82158e8240a09b3586f99e6a84f121f...944440b47969130eb46ac9c2beaeed3a8cc895d4)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/dd0ea91ad95ef9a840258363ca1412c1c24005ff)

* [OCPBUGS-102283](https://issues.redhat.com/browse/OCPBUGS-102283): Bump golang.org/x/net to v0.35.0-sec.4 [#239](https://github.com/openshift/vsphere-problem-detector/pull/239)
* [OCPBUGS-67540](https://issues.redhat.com/browse/OCPBUGS-67540): bump github.com/sirupsen/logrus to v1.9.3 [#204](https://github.com/openshift/vsphere-problem-detector/pull/204)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/f25ae2add899bbd4b63b476c2e6178cfbaf68ac4...dd0ea91ad95ef9a840258363ca1412c1c24005ff)