# 4.14.74

Created: 2026-09-16 13:40:19 +0000 UTC

Image Digest: `sha256:b2feecdc0ab865bd24a3cc74b3ce18af33f73b41a13dea29a794ad08d99e4320`


## Changes from 4.14.40

### Components

* Kubernetes 1.27.16
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202410290222-0 to 414.92.202609111941-0


### Removed images

* ovirt-csi-driver
* ovirt-csi-driver-operator


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3fa10c2](https://github.com/openshift/agent-installer-utils/commit/b3fa10c2f6a890f982a983510e8315b084867782) `sha256:ca5af5fb4971e6d226e81cdd3a26ddf45a7188939b70cd5e68a319b6084c534d`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [8ba0b37a](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/8ba0b37a45510404a842d6dbd84d40a18008e81d) `sha256:f74633922b58b9a8c05e3868176725ebd7fdd09907c35db74c97fa50a8c3d652`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [3dc363d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/3dc363d364c43c1fb03e223147e25d9057273428) `sha256:c91cc38596d89d1de6efc65c2a998dfb2176580792b38ce3b6f4910557aa0eb6`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [8853e6ef](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/8853e6ef4966018b96f9d8bfbf99df3a984bb454) `sha256:fc216107a84c4df90a8fa96708187c8c9c7599cace159391fe36ca14ee562882`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [27f105d3](https://github.com/openshift/cluster-api-provider-alibaba/commit/27f105d3b722e19f76b72588d36eeae9dac0a444) `sha256:05191daebcf275ab67fa2637e44674929cb543741a1dec74d2f362cdd09cf837`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [f56c606a](https://github.com/openshift/apiserver-network-proxy/commit/f56c606ae15041b0c981e654ab577d2b0a3a0a8f) `sha256:67fd5a9b65339f2c5700cd746b0762bf6a4f149779e5782739e1a527295780f9`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [9a7820e8](https://github.com/openshift/cloud-provider-aws/commit/9a7820e81baa6ba8885b47a71416026036d53d79) `sha256:74d749c5ffbaebd2d9298fd8b0eb87d6fcee02a490e568c44027c72f4b9f422e`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [4622deec](https://github.com/openshift/aws-ebs-csi-driver/commit/4622deecace538b375edc782a19cb5da977ae458) `sha256:53125e8bf26e2a74eec5deae6c762025d041809ef9b4d3f020c54189b509afc6`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [2c864ca0](https://github.com/openshift/aws-pod-identity-webhook/commit/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63) `sha256:fa69c4ffc43d216efe30a70ed5d518934f8dcdaa8c592f1d0f7dc8639ace6e9e`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6d3558a3](https://github.com/openshift/azure-disk-csi-driver/commit/6d3558a3b5ae9d383988495cc64dc05b4bba0382) `sha256:f28e36bacf6a18a0539cf43c6c51fc3393f738de174dc8f85a9e270bb340d67f`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [91893576](https://github.com/openshift/azure-disk-csi-driver-operator/commit/918935767350f9f330b9d6a9c3ee03e9869e7828) `sha256:7a7240d953761d7e7e732a11c33752b1d92d2c4300f0bf8a85e8873f92966bb1`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [d526284e](https://github.com/openshift/machine-api-provider-azure/commit/d526284e26f37f36f9d5297faa801ea117d81f48) `sha256:7c90c54b6080544349a06d4bbf7629d2f7513f47e6494fadd95ddef7e54d2ee3`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [0ba9e555](https://github.com/openshift/baremetal-runtimecfg/commit/0ba9e555eeb173d42e5adf6f65e982e17acfdb9d) `sha256:28e9084a57b8eaf54ee499447cc35799ba4f06a612bde0ec2c0f5bb2706580c1`
* [cli](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:139e3b11ff5b538e34d321c2bfbd68d8169ee6e32ccc69f5a39d6963b28e4e59`
* [cli-artifacts](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:dbb56be3feb74eb1fc6a96fabc9eb548e4dabb804ffaf0c562cc16312aaf8ea9`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [1bd04641](https://github.com/openshift/cloud-network-config-controller/commit/1bd04641f210d19370f782086949f827bfb7a264) `sha256:3db659b9a7d3b1331d0416efe0ad8aefa1fd772bbdf99a6b651f000bde785fbe`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [9203d4d5](https://github.com/openshift/cluster-authentication-operator/commit/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e) `sha256:bb1b8db6bc58008c9933e396fcb76665f5550fd757c054209998097fc469d810`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [32854baa](https://github.com/openshift/cluster-autoscaler-operator/commit/32854baae386c4d6854d7fd8658fdff75588e919) `sha256:718e29eae55175d428ec382c254f39c4982aaa7a0c08cbe7174588543805c34a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [93fba13f](https://github.com/openshift/cluster-bootstrap/commit/93fba13f576831ba0953190663ab26aaf5766984) `sha256:907b1b3cee0c8b393209a31e876fe7c6952520f930672d9ef518310c7107c64d`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [d4a11625](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/d4a1162514ecbf248b04e6e8625d17bc2b775ccd) `sha256:4a67cbb582d0689c12ddf804429783f4a6e335a34f38f680e6083e27d955bbf8`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [b287d08b](https://github.com/openshift/cluster-api-operator/commit/b287d08b3dabe6b3b67b87a8a284f19ed12a165e) `sha256:b54ccfdc4ef20713467b557897e0fc0b90134eee386425699a2aa1674b5977b9`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [4e059638](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/4e059638c2cbf003551ee699106dc024760eece3) `sha256:ec5ed8f08613a827d6cd185ff3a72eb5c44da54be778b405479cae85165aa860`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [08fb27e7](https://github.com/openshift/platform-operators/commit/08fb27e72e32ea0a06ab02b3b746114148d96c25) `sha256:d279eced09a4df5df702afc037ffbea4c314eba169c10eb16106f1b028ffd0fd`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [219f6f6f](https://github.com/openshift/cluster-policy-controller/commit/219f6f6f072d867201d4923d39fd8bcaecbe7c59) `sha256:b1655bd5476aa2e81d42d9636ce4a00b27466a798f171de261e3a955298eb6b6`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [1a7a6e22](https://github.com/openshift/cluster-update-keys/commit/1a7a6e229dc980540f51b969c4f1d9ef5dbc3ab5) `sha256:61950686bd3f956d04e1d5d485593772a4065ae023e52563c37b4499d64188ca`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [716a0c33](https://github.com/openshift/configmap-reload/commit/716a0c33bb693127fba3b3512622710785a59e8e) `sha256:f9435a98e331835de545f68ebbdb2dec579a881f39fa36c07d88659aa4ac5986`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:279df0f84c3af80c7b551b76e1764707bf642736d77d3f3190b9eec53e623d63`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c273cd52](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c273cd52b791e69da41ac23fafb6d926c0530276) `sha256:0d1def23b8490a7d7d86204ffb4f0d66ff37087505835e3cfedfa890d7037743`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:f5a9faac55ef0c5922a23a6c4affef82150c06288517a3260db07ed601ea4040`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [06e8ce0d](https://github.com/openshift/csi-external-attacher/commit/06e8ce0d36f7c23f0906327cd66ec6bd15165366) `sha256:f71be043c0ad81ba1d7e932e5fe836ccd940d36fae5db898f9ef975488f577dc`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [e18ed7f0](https://github.com/openshift/csi-external-provisioner/commit/e18ed7f00d8c80564a8dd5827013cd49f33ff0d7) `sha256:e6475d25f21cbe204a898da067353b6cbb6adf5fd4264b34e2da9e8cd85b92f4`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [59a701a4](https://github.com/openshift/csi-external-resizer/commit/59a701a4c8cd3105e272b12afdb1e62e411b2772) `sha256:b2a5038c0eef217ef796fc7b1f2c1dfebcc635bcee990ec923787abef31c9c3c`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:5e3dd19ca9154d3f5a3443bb151c8865784ec78a4acd7605b3fe45fb4abf97a8`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a9bcbde1](https://github.com/openshift/csi-livenessprobe/commit/a9bcbde134a17d3335f68a49aaad4befa8d7cc08) `sha256:4cdeed9aa357ee430abe39d349fde9ca0566a4f9a326315c476944bf1f98fb0d`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9dcaa7f5](https://github.com/openshift/csi-node-driver-registrar/commit/9dcaa7f5b7573e7ef9dbec1439abc32171003799) `sha256:2fd481deb82ba5a93a293bb783925f52d8d3650246873bb28c00d97632cc3596`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:17b61a548ddb734fc583eb2452f5f411a85b66386c5f758e7709a7c39bea1eac`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:3bb25c5709bdb1ecebcd6d272528f777a1ecf5bf2cd3fc43eb74ce37bfe892c1`
* [deployer](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:ffaa9c85d0b56f07087eb4cea6dc4bcd1c186dcb312a818fa82c5c6be8001a66`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:7ddda0f3d367587d8214806b0fc19e0477c95384c6d7694a9fc12ea25905f44b`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [96f2f54f](https://github.com/openshift/egress-router-cni/commit/96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f) `sha256:1d0ae685889dace1614912376fc1ae304a51a92671fe2181c6a3b8061d5cbccd`
* [etcd](https://github.com/openshift/etcd) git [5ed5044c](https://github.com/openshift/etcd/commit/5ed5044c5661c55d297ab0348056b50969af9627) `sha256:f0f15befb7358db3f02daca82ec5465d9af70d69fe54762738488c15c42b063e`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [09e96a91](https://github.com/openshift/cloud-provider-gcp/commit/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c) `sha256:a69922cbe434d1e6e85be03666498fdfaa5e680cdf99c49f99987164c609b21e`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [8a626fe5](https://github.com/openshift/gcp-pd-csi-driver/commit/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03) `sha256:a52eb874993a3fe7ced182ce60efe35497bfdae202670cf8989fdd4163202439`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [95d55a04](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/95d55a043a60b584a9fe28d37825761282305840) `sha256:8fead685cb52af2ee29896735e71e0b85b3f972e5c839807cb8bea0b709feb6a`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f39488c5](https://github.com/openshift/cloud-provider-ibm/commit/f39488c53ab5151cebf11e8f82510a255a8005d3) `sha256:ce2361516e51f87bc46ed19323b70a5a8872e7f164825b4f622390510def28c1`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [801a912b](https://github.com/openshift/k8s-prometheus-adapter/commit/801a912b3a60d7e840fb1ff38b5ca992f47327fd) `sha256:4ff0ac4ce9a1a81ef0f41bcab801d5f3393eb03ed7ceea5397301a6c5fc35d84`
* [keepalived-ipfailover](https://github.com/openshift/images) git [03e5f407](https://github.com/openshift/images/commit/03e5f40783e1b573f3d07d7640619ad9592f9a77) `sha256:38dc9734ffb45c56796c78a271b560ef2bebecd4f974f2eaf76c1b73b450c19a`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b8b82595](https://github.com/openshift/kube-rbac-proxy/commit/b8b8259584046eabb7565f262c8105c2686107a4) `sha256:3ce7999295a0e188277824a004816316e58f0f2f4f76a790c62736357bd26bc9`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [db0c5499](https://github.com/openshift/kube-state-metrics/commit/db0c54994a6aad9155a94513eaa3480c1812f45e) `sha256:c7fec752ba4e9cf0867a846161a1c9f06beaf53b9806db01ada2662ee688c23c`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:0f5eb58863e2eadfb4a5b3d0107ddd2cd85d1dd25f61bdec3217f25fc395ceba`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:8a5d7d9491a3699fec5506b11a097e6a38c3af37d707495a20f5aceb5511d82f`
* machine-os-content `sha256:695334e426647a077ecb8fe06322b650696f426c8b56c297c8d7baaf08ea051b`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f670647c](https://github.com/openshift/multus-networkpolicy/commit/f670647c0cb7b6f870f8176b26f83ce6614e209e) `sha256:33fab17ac92954091b2fc8737aeadcc03f8bc5c1e047d20146c1e78093a5875a`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [5965fed6](https://github.com/openshift/route-override-cni/commit/5965fed661f71112104ca6cef22aa883f542226d) `sha256:e2f2b9e8e6b11cecf323c4780c373c5d3d809b6941b2a42cc2df7a190f52a39a`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [29f61f6b](https://github.com/openshift/bond-cni/commit/29f61f6b05d958c40e7213937064f26a63a8e6d9) `sha256:4b50daadb6940b5978e689044382480da9df005bcb5d9b498f70573b90bebdb3`
* [network-tools](https://github.com/openshift/network-tools) git [e79d8173](https://github.com/openshift/network-tools/commit/e79d8173c5628065da85425bc7e4cb1d94f3c919) `sha256:f608f560602a218d22d74831f46dce1ee8e21a2904bab668ca41976473a452fb`
* [oauth-server](https://github.com/openshift/oauth-server) git [35f4739f](https://github.com/openshift/oauth-server/commit/35f4739f342a5838fe6ceaf7a459c78f3777166d) `sha256:b50e43f78316b4f4b7b9c8c5aeb7524b360cef3da9968ee419d59b06dce73200`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [a333cb0b](https://github.com/openshift/operator-framework-catalogd/commit/a333cb0b558abf8d9f8da0eccd5618d767629050) `sha256:8cf8587247c7a11314db36c4533fcb94c194f4b15a347282eacea3d51b41799c`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fb6fb278](https://github.com/openshift/operator-framework-operator-controller/commit/fb6fb278d987faacb4da17b96a109da261fbb962) `sha256:c145390324ca715d278a6fc8f20da1b60bebbaa9fea03959aa26552477201408`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [c9409c62](https://github.com/openshift/operator-framework-rukpak/commit/c9409c62cb6bc57cde167452f1da7f3eab8cff79) `sha256:b55c863d7489e468604931dfd27a26a6cbef68fd05c20593c38f961530095aef`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [dff4b0f4](https://github.com/openshift/openshift-state-metrics/commit/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf) `sha256:d912bb1c3e31bfeefe1324f9c15961a04662b90c1a9d9b2d758f8c81888e0ac0`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:e50472754d25fc99ec8abd744922bffeb35d34811a6ed7ce04a9cbe99678513e`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [988f7109](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/988f7109b4493f62cb13187bc190eae60c77d1e7) `sha256:71c24068592414ba041466b235c34057b6f650fe9f054eaf70b2df3124a319d7`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [19cf1d3f](https://github.com/openshift/cloud-provider-powervs/commit/19cf1d3f4985a22e9777aad16531a382c4feed45) `sha256:20563a94a40bd1df7dac019c11659e5945803146a182aaa1e1acfa820d3044db`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [af40ed09](https://github.com/openshift/prom-label-proxy/commit/af40ed09f69fab6c4bf054436f537a3e569d5f02) `sha256:11f430311f27c3d3a336859f390c5c54b996906a35e3e76337ca0a4e56ea4eca`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:c94c6b7b5c033accec2756a3629960f79ec68392bb3e5b9e1685bc333014a1b7`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [5ee0a9d9](https://github.com/openshift/node_exporter/commit/5ee0a9d957a04756ba76623a8bbc12be9949109f) `sha256:5eed68f07d2f82ae8a449aa49101c510c85de32e702b798a7f1c5838adaf9f86`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:372e23cb472dffdfd6493264e046b5fae2258aaa520c70726bc982584969d89c`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:98a46aef6f2464b481aab4ccf90aeda32894d2b40b45daa9670a5a9f7bc9838c`
* rhel-coreos `sha256:f1cc81da5a5422a34a3a5ebc1bf3ec70fc5f24ba1ffc9344efc1e6a89f69af94`
* rhel-coreos-extensions `sha256:2ea41bdf24faae34ac468fec42f152e7ad61bbdc045a51d04038747b85c733ca`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [3c3f82f7](https://github.com/openshift/service-ca-operator/commit/3c3f82f7112ee4b5656e5c554f9887acdf881175) `sha256:12442679d555932f6b019ca927721c3553b22eea5cf90373961fba20091995b5`
* [telemeter](https://github.com/openshift/telemeter) git [1f726816](https://github.com/openshift/telemeter/commit/1f7268163afc74f9f3c1ff89d8c0149760694e6c) `sha256:0b8fbc138f5dccc055c07a467899108d1c4ac6637e2e8e0b4038b7d7f22ecbcf`
* [tools](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:7cd6f9980ca3e8c63458af6f4a2b18725bfa1bf2921e7870aa8408530be959f9`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f09936a257b0f83cc808ad6e70cfaa8e1632e7eb)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Bump Go 1.18 to 1.20 and regenerate code [#10042](https://github.com/openshift/assisted-service/pull/10042)
* [OCPBUGS-78112](https://issues.redhat.com/browse/OCPBUGS-78112): [release-4.14] NO-JIRA: hermetic 4.14 [#9955](https://github.com/openshift/assisted-service/pull/9955)
* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Use archived dnf repositories for CentOS Stream 8 [#10018](https://github.com/openshift/assisted-service/pull/10018)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/cb552dbc547508ec273f55c11d36ca7ae76248cc...f09936a257b0f83cc808ad6e70cfaa8e1632e7eb)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/54aa57eb81d052a36ae8b78f2905d870ee0718ad)

* [OCPBUGS-58642](https://issues.redhat.com/browse/OCPBUGS-58642): CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) [#1194](https://github.com/openshift/assisted-installer/pull/1194)
* [OCPBUGS-53715](https://issues.redhat.com/browse/OCPBUGS-53715): Bump jwt to 4.5.2 in release-4.14 (#1093) [#1093](https://github.com/openshift/assisted-installer/pull/1093)
* Bump golang.org/x/net to v0.33.0 (#1012) [#1012](https://github.com/openshift/assisted-installer/pull/1012)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/53ccc4826f0f9b470f4672024bb62c50c17df8f2...54aa57eb81d052a36ae8b78f2905d870ee0718ad)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/91a728121bc65eae12af93ae003695d879a8f019)

* [OCPBUGS-58652](https://issues.redhat.com/browse/OCPBUGS-58652), [OCPBUGS-58657](https://issues.redhat.com/browse/OCPBUGS-58657): Bump glog to v1.2.5 in release-4.14 (#1073) [#1073](https://github.com/openshift/assisted-installer-agent/pull/1073)
* [OCPBUGS-53707](https://issues.redhat.com/browse/OCPBUGS-53707): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) [#973](https://github.com/openshift/assisted-installer-agent/pull/973)
* [OCPBUGS-46955](https://issues.redhat.com/browse/OCPBUGS-46955): Bump golang.org/x/net to 0.33.0 (#885) [#885](https://github.com/openshift/assisted-installer-agent/pull/885)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/4106eb47e61f78e89002fa8e11b2d4b4e986c3f7...91a728121bc65eae12af93ae003695d879a8f019)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/01508fcd4a006ce6bd5bcc63de6d9fc4e4d41f4e)

* [OCPBUGS-78229](https://issues.redhat.com/browse/OCPBUGS-78229): [release-4.14] hermetic 4.14 [#593](https://github.com/openshift/cluster-api-provider-aws/pull/593)
* [OCPBUGS-61944](https://issues.redhat.com/browse/OCPBUGS-61944): UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#574](https://github.com/openshift/cluster-api-provider-aws/pull/574)
* [OCPBUGS-58667](https://issues.redhat.com/browse/OCPBUGS-58667), [OCPBUGS-58672](https://issues.redhat.com/browse/OCPBUGS-58672): bump github.com/golang/glog to v1.2.5 [#563](https://github.com/openshift/cluster-api-provider-aws/pull/563)
* [OCPBUGS-44295](https://issues.redhat.com/browse/OCPBUGS-44295): [release-4.14] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#533](https://github.com/openshift/cluster-api-provider-aws/pull/533)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/4efe12cbfebbb27fe78b07da4f7e7f264a9812fb...01508fcd4a006ce6bd5bcc63de6d9fc4e4d41f4e)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/71ff9a8f5252482815f3d7b2b154b5c282f3bfcb)

* [OCPBUGS-102508](https://issues.redhat.com/browse/OCPBUGS-102508): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#316](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/316)
* [OCPBUGS-67748](https://issues.redhat.com/browse/OCPBUGS-67748): Updated logrus to v1.9.3 [#313](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/313)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/609879c3f1b9a65936e385f798398a2d1673aacd...71ff9a8f5252482815f3d7b2b154b5c282f3bfcb)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e2bb8297ff39438a8adae059a652e0687f56700a)

* [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): client: re-use a single file for building the session instead of randomly named files [#154](https://github.com/openshift/machine-api-provider-aws/pull/154)
* [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): revert: client: re-use a single file for building the session instead of randomly named files [#151](https://github.com/openshift/machine-api-provider-aws/pull/151)
* [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): client: re-use a single file for building the session instead of randomly named files [#142](https://github.com/openshift/machine-api-provider-aws/pull/142)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/e292817c27d83d6cba27def4461a9795bd3a68a7...e2bb8297ff39438a8adae059a652e0687f56700a)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0d11981dfcb36ed0e0315de3027a37e5ef3f82cd)

* [OCPBUGS-79820](https://issues.redhat.com/browse/OCPBUGS-79820), [OCPBUGS-79821](https://issues.redhat.com/browse/OCPBUGS-79821): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] [#192](https://github.com/openshift/cloud-provider-azure/pull/192)
* [OCPBUGS-57111](https://issues.redhat.com/browse/OCPBUGS-57111): Adds acr-credential-provider spec file and build script [#144](https://github.com/openshift/cloud-provider-azure/pull/144)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/d9800e1edcbe9bab5a7ca628cf05fc54cb46f5a9...0d11981dfcb36ed0e0315de3027a37e5ef3f82cd)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/728723125921ca6f44f38b3d90318cb98f74bd72)

* [OCPBUGS-78178](https://issues.redhat.com/browse/OCPBUGS-78178): [release-4.14] Hermetic 4.14 [#366](https://github.com/openshift/cluster-api-provider-azure/pull/366)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/8c2203f9d13e91a3a7e4825067b01a9f7fe0fd4f...728723125921ca6f44f38b3d90318cb98f74bd72)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/71fa09b11075da73a8934127a181ee03abd738f8)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Regenerate go.mod to fix build failures [#95](https://github.com/openshift/azure-file-csi-driver/pull/95)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/a737d1c4366b11757ca20478208f1e1275047418...71fa09b11075da73a8934127a181ee03abd738f8)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/9a5a5a6950401d6587e128e2c149fd05cf7201a3)

* [OCPBUGS-67753](https://issues.redhat.com/browse/OCPBUGS-67753): Bump github.com/sirupsen/logrus to v1.9.3 [#114](https://github.com/openshift/azure-file-csi-driver-operator/pull/114)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/4469d80589595dd5d05f0f0f296505800e3ad527...9a5a5a6950401d6587e128e2c149fd05cf7201a3)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2cb82019194364a2f7ba1a9aa318fa6e5b4a7346)

* [OCPBUGS-53795](https://issues.redhat.com/browse/OCPBUGS-53795): github.com/golang-jwt/jwt/v4 v4.5.2 [#35](https://github.com/openshift/azure-workload-identity/pull/35)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/bcb88d949151223362ecefc12f4e90566599e0e7...2cb82019194364a2f7ba1a9aa318fa6e5b4a7346)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/4dd5abdf12a97ef0f32f6774ab79fa8dc6482f34)

* [OCPBUGS-79654](https://issues.redhat.com/browse/OCPBUGS-79654): Azure UPI ARM template: use storageAccountId [#10435](https://github.com/openshift/installer/pull/10435)
* [OCPBUGS-76930](https://issues.redhat.com/browse/OCPBUGS-76930): terraform/provider/google: Fixing inconsistencies with service account creation [#10324](https://github.com/openshift/installer/pull/10324)
* [OCPBUGS-62601](https://issues.redhat.com/browse/OCPBUGS-62601): update resolv.conf every time on bootstrap node [#9985](https://github.com/openshift/installer/pull/9985)
* [OCPBUGS-62814](https://issues.redhat.com/browse/OCPBUGS-62814): Release 4.14 bump terraform provider azurerm [#10001](https://github.com/openshift/installer/pull/10001)
* [OCPBUGS-55193](https://issues.redhat.com/browse/OCPBUGS-55193): data/manifests/bootkube/cvo-overrides: Default to eus-4.14 [#9643](https://github.com/openshift/installer/pull/9643)
* [OCPBUGS-54323](https://issues.redhat.com/browse/OCPBUGS-54323): Update upi references to api-internal [#9609](https://github.com/openshift/installer/pull/9609)
* [OCPBUGS-54264](https://issues.redhat.com/browse/OCPBUGS-54264): IBMCloud: Move to IBM TF openshift fork [#9605](https://github.com/openshift/installer/pull/9605)
* [OCPBUGS-54260](https://issues.redhat.com/browse/OCPBUGS-54260): vsphere-fix convert if only provided name [#9602](https://github.com/openshift/installer/pull/9602)
* [OCPBUGS-52996](https://issues.redhat.com/browse/OCPBUGS-52996): Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation [#9587](https://github.com/openshift/installer/pull/9587)
* [OCPBUGS-53210](https://issues.redhat.com/browse/OCPBUGS-53210): PowerVS: remove system pools [#9572](https://github.com/openshift/installer/pull/9572)
* [OCPBUGS-46606](https://issues.redhat.com/browse/OCPBUGS-46606): Power VS: Create region-zone-sysType hierarchy [#9331](https://github.com/openshift/installer/pull/9331)
* [OCPBUGS-48196](https://issues.redhat.com/browse/OCPBUGS-48196): IBMCloud: Ignore failed VPC regions [#9350](https://github.com/openshift/installer/pull/9350)
* [OCPBUGS-45464](https://issues.redhat.com/browse/OCPBUGS-45464): add chrony.conf file when additional NTP sources are configured [#9269](https://github.com/openshift/installer/pull/9269)
* [Full changelog](https://github.com/openshift/installer/compare/ae4205b647bf201c46c7cf3b3728a332216b8a9f...4dd5abdf12a97ef0f32f6774ab79fa8dc6482f34)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/0c1c23f3a63168ec2deb171dc66149fe7ec558ac)

* [OCPBUGS-78101](https://issues.redhat.com/browse/OCPBUGS-78101): [release-4.14] fix vendor/ for hermetic migration [#245](https://github.com/openshift/cluster-api-provider-baremetal/pull/245)
* [OCPBUGS-46643](https://issues.redhat.com/browse/OCPBUGS-46643): Bump x/net to 0.33.0 [#228](https://github.com/openshift/cluster-api-provider-baremetal/pull/228)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb20cdac93ab9647e9c9cabafb45c7811789b477...0c1c23f3a63168ec2deb171dc66149fe7ec558ac)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/483d019146b8495b9299c08c57461747e727f3f7)

* [OCPBUGS-53337](https://issues.redhat.com/browse/OCPBUGS-53337): BMO can expose any secret via BMCEventSubscription CRD [#409](https://github.com/openshift/baremetal-operator/pull/409)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/68e882497c1ff28c6a7361c5f188819edc823c5a...483d019146b8495b9299c08c57461747e727f3f7)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/b491a81980f16adba3dcdb95356302d8a00d5454)

* [OCPBUGS-60975](https://issues.redhat.com/browse/OCPBUGS-60975): ccoctl: aws to use proper issuer url on subsequent runs [#911](https://github.com/openshift/cloud-credential-operator/pull/911)
* [OCPBUGS-58677](https://issues.redhat.com/browse/OCPBUGS-58677): github.com/golang/glog v1.2.5 [#895](https://github.com/openshift/cloud-credential-operator/pull/895)
* [OCPBUGS-53418](https://issues.redhat.com/browse/OCPBUGS-53418): github.com/golang/glog v1.2.4 [#845](https://github.com/openshift/cloud-credential-operator/pull/845)
* [OCPBUGS-53819](https://issues.redhat.com/browse/OCPBUGS-53819): update github.com/golang-jwt/jwt [#841](https://github.com/openshift/cloud-credential-operator/pull/841)
* [OCPBUGS-51542](https://issues.redhat.com/browse/OCPBUGS-51542): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#830](https://github.com/openshift/cloud-credential-operator/pull/830)
* [OCPBUGS-47069](https://issues.redhat.com/browse/OCPBUGS-47069): golang.org/x/net v0.33.0 [#810](https://github.com/openshift/cloud-credential-operator/pull/810)
* [OCPBUGS-46487](https://issues.redhat.com/browse/OCPBUGS-46487): Add AWS region to aws-pod-identity-webhook [#801](https://github.com/openshift/cloud-credential-operator/pull/801)
* [OCPBUGS-45009](https://issues.redhat.com/browse/OCPBUGS-45009): Add retry to ccoctl gcp create functions [#791](https://github.com/openshift/cloud-credential-operator/pull/791)
* [OCPBUGS-45004](https://issues.redhat.com/browse/OCPBUGS-45004): github.com/golang-jwt/jwt/v4 v4.5.1 [#785](https://github.com/openshift/cloud-credential-operator/pull/785)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/df1e69b881368a3e18025a9e994b9ffd0773ed3e...b491a81980f16adba3dcdb95356302d8a00d5454)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d030dbaade38e116d27d5039a3597f694f73ea2b)

* [OCPBUGS-45150](https://issues.redhat.com/browse/OCPBUGS-45150): [release-4.14] VPA: Update OWNERS file [#327](https://github.com/openshift/kubernetes-autoscaler/pull/327)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c8e7aaeda2819e1f61a392541ef8537308faaf53...d030dbaade38e116d27d5039a3597f694f73ea2b)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/a23843eff0e827107921a13ab9ef871c2ee34ffd)

* [OCPBUGS-77449](https://issues.redhat.com/browse/OCPBUGS-77449): Bump github.com/go-errors/errors to v1.5.1 [#564](https://github.com/openshift/cluster-baremetal-operator/pull/564)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/affcfb54666c47e569d1ba4f2e44aeaf9ef28bf7...a23843eff0e827107921a13ab9ef871c2ee34ffd)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/eb617d0f25600eacf3b5971fce8c2fdb60642118)

* [OCPBUGS-77974](https://issues.redhat.com/browse/OCPBUGS-77974): [release-4.14] fix vendor for hermetic [#265](https://github.com/openshift/cluster-api/pull/265)
* [Full changelog](https://github.com/openshift/cluster-api/compare/ae83c5533706d539dc492229eebd67533468e48b...eb617d0f25600eacf3b5971fce8c2fdb60642118)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/0d033265ffd31be8061ee53f4940b4dd71192bbd)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#562](https://github.com/openshift/cluster-capi-operator/pull/562)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/60cc3e65ff4817e43fe3114bccbbdb14374bac2c...0d033265ffd31be8061ee53f4940b4dd71192bbd)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/54dce160186799ac2d6e21f9609f8f8b1e493003)

* [OCPBUGS-63170](https://issues.redhat.com/browse/OCPBUGS-63170): ccm: disable unused secure-serving port and webhook [#425](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/425)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a0b9c0d70748ff24de5a40874207de3ea5bfa91e...54dce160186799ac2d6e21f9609f8f8b1e493003)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/2378670aee1858db6b1ff425a1d208eb7d73afec)

* [OCPBUGS-44095](https://issues.redhat.com/browse/OCPBUGS-44095): Backport SDN live migration [#425](https://github.com/openshift/cluster-config-operator/pull/425)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/91fa980a5be1d3c91786ff41a0a9394adb75671f...2378670aee1858db6b1ff425a1d208eb7d73afec)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/783d9dd134451c12f0c1abf7e53c30b61ddd74bf)

* [OCPBUGS-48211](https://issues.redhat.com/browse/OCPBUGS-48211): Add unreadyNodeGracePeriod for allowing brief node hiccups [#340](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/340)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/bcb227e2c5775ce4f33416de60df0eb974549ff2...783d9dd134451c12f0c1abf7e53c30b61ddd74bf)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0164e3c4464f03d5ddbbba5d426f4bf02822753d)

* [OCPBUGS-52500](https://issues.redhat.com/browse/OCPBUGS-52500): [release-4.14] Add runbook_url for CoreDNSErrorsHigh [#433](https://github.com/openshift/cluster-dns-operator/pull/433)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0ea96c98243f4f0afae3331fc3766200a4c038b5...0164e3c4464f03d5ddbbba5d426f4bf02822753d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/8892946e2c4748e38971c69b370f2db79cdb8a4d)

* [OCPBUGS-67770](https://issues.redhat.com/browse/OCPBUGS-67770): Update logrus to 1.9.3 to address CVE-2025-65637 [#1548](https://github.com/openshift/cluster-etcd-operator/pull/1548)
* [OCPBUGS-53507](https://issues.redhat.com/browse/OCPBUGS-53507): fix CVE-2025-30204 [#1405](https://github.com/openshift/cluster-etcd-operator/pull/1405)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a85f3135b23924ceb5bb5c05ab72af99b23ba061...8892946e2c4748e38971c69b370f2db79cdb8a4d)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c9f6afc6a929632395ded838792a9f1289eaaa1f)

* [OCPBUGS-67771](https://issues.redhat.com/browse/OCPBUGS-67771): Bump logrus to 1.9.1 [#1290](https://github.com/openshift/cluster-image-registry-operator/pull/1290)
* [OCPBUGS-53867](https://issues.redhat.com/browse/OCPBUGS-53867): Bump github.com/golang-jwt/jwt [#1229](https://github.com/openshift/cluster-image-registry-operator/pull/1229)
* [OCPBUGS-53867](https://issues.redhat.com/browse/OCPBUGS-53867): Bump github.com/golang-jwt/jwt [#1224](https://github.com/openshift/cluster-image-registry-operator/pull/1224)
* [OCPBUGS-51598](https://issues.redhat.com/browse/OCPBUGS-51598): bump golang.org/x/oauth2 [#1213](https://github.com/openshift/cluster-image-registry-operator/pull/1213)
* [OCPBUGS-51312](https://issues.redhat.com/browse/OCPBUGS-51312): ensure that storage names don't end in dashes [#1185](https://github.com/openshift/cluster-image-registry-operator/pull/1185)
* [OCPBUGS-44048](https://issues.redhat.com/browse/OCPBUGS-44048): fix proxy config and leader election test flakes [#1153](https://github.com/openshift/cluster-image-registry-operator/pull/1153)
* [OCPBUGS-44002](https://issues.redhat.com/browse/OCPBUGS-44002): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1152](https://github.com/openshift/cluster-image-registry-operator/pull/1152)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/591b8831ea60eb553e8f74a370b1552f1be35a07...c9f6afc6a929632395ded838792a9f1289eaaa1f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/5fcaab01bd320a9d35bcbe1a7474891c3a51786a)

* [OCPBUGS-86711](https://issues.redhat.com/browse/OCPBUGS-86711): Add configuration override for X-SSL strip [#1492](https://github.com/openshift/cluster-ingress-operator/pull/1492)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e302d85665274cb299d873eb624867384e5c37b1...5fcaab01bd320a9d35bcbe1a7474891c3a51786a)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/67e982f05404a1ec1e08eaaa66cc408199181a68)

* [OCPBUGS-67775](https://issues.redhat.com/browse/OCPBUGS-67775): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.14.z] [#2045](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2045)
* [OCPBUGS-50662](https://issues.redhat.com/browse/OCPBUGS-50662): Increase waitForFallbackDegradedConditionTimeout [#1807](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1807)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/1fe5769f9c30c79140484b11340f40e5208b5d2c...67e982f05404a1ec1e08eaaa66cc408199181a68)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0ae603324e89e65037136d7623e4dd2fd223faf9)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#626](https://github.com/openshift/cluster-kube-scheduler-operator/pull/626)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4...0ae603324e89e65037136d7623e4dd2fd223faf9)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/55a86078bfc7ee57757532598bcb21495994202a)

* [OCPBUGS-67780](https://issues.redhat.com/browse/OCPBUGS-67780): Bump github.com/sirupsen/logrus to v1.9.1 [#141](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/141)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/9cd9922a42a64fe058718f10e3b4123b943bb55f...55a86078bfc7ee57757532598bcb21495994202a)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/38a758d0026346b751774b2459520174b46e39bf)

* [OCPBUGS-46057](https://issues.redhat.com/browse/OCPBUGS-46057): Ensure trailing dots on DNS names do not block serving cert auth [#259](https://github.com/openshift/cluster-machine-approver/pull/259)
* [OCPBUGS-46057](https://issues.redhat.com/browse/OCPBUGS-46057): Client internal DNS checks should ignore trailing dot [#255](https://github.com/openshift/cluster-machine-approver/pull/255)
* [OCPBUGS-44774](https://issues.redhat.com/browse/OCPBUGS-44774): Client internal DNS checks should be case insensitive [#246](https://github.com/openshift/cluster-machine-approver/pull/246)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/711b4f6eeb038f8c7bd88db3ea51ebad350a116d...38a758d0026346b751774b2459520174b46e39bf)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c58a1bda8cd18c79f15a0ff39cbc9fc06f10569c)

* [OCPBUGS-76415](https://issues.redhat.com/browse/OCPBUGS-76415): test: remove image registry e2e tests [#2811](https://github.com/openshift/cluster-monitoring-operator/pull/2811)
* [OCPBUGS-48368](https://issues.redhat.com/browse/OCPBUGS-48368): Add new metrics for OpenShift logging telemetry [#2556](https://github.com/openshift/cluster-monitoring-operator/pull/2556)
* [OCPBUGS-44007](https://issues.redhat.com/browse/OCPBUGS-44007): fix(monitoring-plugin): disable emitting nginx version on error pages [#2520](https://github.com/openshift/cluster-monitoring-operator/pull/2520)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/881aa70ef91f17abfd56ba68211c858c3f9ca421...c58a1bda8cd18c79f15a0ff39cbc9fc06f10569c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/af41a362017b8f85e180d2f5e0db8f16c7db4b94)

* [OCPBUGS-84184](https://issues.redhat.com/browse/OCPBUGS-84184): fix(hypershift): use net.JoinHostPort for URL construction [#2996](https://github.com/openshift/cluster-network-operator/pull/2996)
* [OCPBUGS-78105](https://issues.redhat.com/browse/OCPBUGS-78105): fix vendor for hermetic 4.14 [#2913](https://github.com/openshift/cluster-network-operator/pull/2913)
* [OCPBUGS-51170](https://issues.redhat.com/browse/OCPBUGS-51170): Use applyconfigurations for updating network.oprerator status [#2660](https://github.com/openshift/cluster-network-operator/pull/2660)
* [OCPBUGS-48323](https://issues.redhat.com/browse/OCPBUGS-48323): Pass transit_switch_subnet options in ovnkube-node pod for single-zone [#2617](https://github.com/openshift/cluster-network-operator/pull/2617)
* [OCPBUGS-42754](https://issues.redhat.com/browse/OCPBUGS-42754): Set mount propagation to HostToContainer for /var/lib/kubelet [#2521](https://github.com/openshift/cluster-network-operator/pull/2521)
* [OCPBUGS-47320](https://issues.redhat.com/browse/OCPBUGS-47320): Pass transit_switch_subnet options in ovnkube-node pod [#2607](https://github.com/openshift/cluster-network-operator/pull/2607)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/3c4bce8f481b42bd42faa52350f04763d1a5cf05...af41a362017b8f85e180d2f5e0db8f16c7db4b94)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/5511c8df81e608a45bf37cb021707f7b9ede9c9a)

* e2e:performance: decode to valid kubeletconfig object (#1276) [#1276](https://github.com/openshift/cluster-node-tuning-operator/pull/1276)
* Fix context deadlines in ExecCommandOnPod() (#1272) [#1272](https://github.com/openshift/cluster-node-tuning-operator/pull/1272)
* [OCPBUGS-44506](https://issues.redhat.com/browse/OCPBUGS-44506): Drop sched_migration_cost_ns setting (#1215) [#1215](https://github.com/openshift/cluster-node-tuning-operator/pull/1215)
* [OCPBUGS-44283](https://issues.redhat.com/browse/OCPBUGS-44283): right-hand-side profile_dirs take precedence (#1210) [#1210](https://github.com/openshift/cluster-node-tuning-operator/pull/1210)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/099cc7b137f1c34f89e4352a6b7c82fe78e7ebbf...5511c8df81e608a45bf37cb021707f7b9ede9c9a)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/99298b153e668ddacc40e3790bbe22ab32cc0e0d)

* [OCPBUGS-86344](https://issues.redhat.com/browse/OCPBUGS-86344): Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 [#209](https://github.com/openshift/cluster-olm-operator/pull/209)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/0dbbb6132ced379602040731ff889eebb4202e73...99298b153e668ddacc40e3790bbe22ab32cc0e0d)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7125dc64ece6de40fa14e181e220e67bdfb8101f)

* [OCPBUGS-76593](https://issues.redhat.com/browse/OCPBUGS-76593): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] [#658](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/658)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/700dc111fd98c315648a78371b11be34fa4dbba3...7125dc64ece6de40fa14e181e220e67bdfb8101f)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/09d62091346f86f54938587acfd680f6bd6b7af6)

* [OCPBUGS-48841](https://issues.redhat.com/browse/OCPBUGS-48841): Add new team members to the OWNERS file [#380](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/accd87730fd3652584bef210626cab3b6d49271f...09d62091346f86f54938587acfd680f6bd6b7af6)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/63a0ae4b409b7eea4d7335f6c372e5b03be91238)

* [OCPBUGS-63518](https://issues.redhat.com/browse/OCPBUGS-63518): references to github.com/sclorg/django-ex.git now also refer to the branch [#661](https://github.com/openshift/cluster-samples-operator/pull/661)
* [OCPBUGS-55655](https://issues.redhat.com/browse/OCPBUGS-55655): Adding mutex to func createSamples on handler.go [#635](https://github.com/openshift/cluster-samples-operator/pull/635)
* [OCPBUGS-54537](https://issues.redhat.com/browse/OCPBUGS-54537): add rhdmalone to owners [#624](https://github.com/openshift/cluster-samples-operator/pull/624)
* [OCPBUGS-49421](https://issues.redhat.com/browse/OCPBUGS-49421): add shannon and aroyoredhat as owners [#598](https://github.com/openshift/cluster-samples-operator/pull/598)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/61a34659e4499188ab6f790e3a07aba8be9e9bdd...63a0ae4b409b7eea4d7335f6c372e5b03be91238)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/133655e33ac7c8623be39dd3d3f7dd09d82c99ca)

* [OCPBUGS-87736](https://issues.redhat.com/browse/OCPBUGS-87736): remove oVirt code from CSO 4.14 [#711](https://github.com/openshift/cluster-storage-operator/pull/711)
* [OCPBUGS-67795](https://issues.redhat.com/browse/OCPBUGS-67795): Bump logrus to v1.9.3 [#655](https://github.com/openshift/cluster-storage-operator/pull/655)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192...133655e33ac7c8623be39dd3d3f7dd09d82c99ca)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/a1bf930103a77b25e99130644504c3fecdcc4c67)

* [OCPBUGS-50592](https://issues.redhat.com/browse/OCPBUGS-50592): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1151](https://github.com/openshift/cluster-version-operator/pull/1151)
* [OCPBUGS-45331](https://issues.redhat.com/browse/OCPBUGS-45331): deps: bump golang.org/x/net to 0.31.0 [#1120](https://github.com/openshift/cluster-version-operator/pull/1120)
* [OCPBUGS-44704](https://issues.redhat.com/browse/OCPBUGS-44704): Fix desired before sync_worker's work is initialized [#1109](https://github.com/openshift/cluster-version-operator/pull/1109)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/af210dc66d38bce5793155aac8bfb6220a7085d9...a1bf930103a77b25e99130644504c3fecdcc4c67)


### [console](https://github.com/openshift/console/tree/492dc3981e99ba21c858c0d18cf330a7381b5eea)

* [OCPBUGS-100511](https://issues.redhat.com/browse/OCPBUGS-100511): Bump postcss to fix CVE-2026-45623 [#17109](https://github.com/openshift/console/pull/17109)
* [OCPBUGS-105791](https://issues.redhat.com/browse/OCPBUGS-105791): Disable failing OLM and pipelines e2e tests to unblock CI [#16956](https://github.com/openshift/console/pull/16956)
* [OCPBUGS-90614](https://issues.redhat.com/browse/OCPBUGS-90614): Fix JSON annotation parsing to prevent OperatorHub crash [#16659](https://github.com/openshift/console/pull/16659)
* [OCPBUGS-87989](https://issues.redhat.com/browse/OCPBUGS-87989): [release-4.14] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16597](https://github.com/openshift/console/pull/16597)
* [OCPBUGS-77116](https://issues.redhat.com/browse/OCPBUGS-77116): [release-4.14] CVE-2026-26996 Bump minimatch library [#16348](https://github.com/openshift/console/pull/16348)
* Fix for OCPBUGS-81595: CVE-2026-4800 [#16568](https://github.com/openshift/console/pull/16568)
* [OCPBUGS-88422](https://issues.redhat.com/browse/OCPBUGS-88422): Bump axios to ^0.33.0 Addresses CVE-2026-44486 [#16789](https://github.com/openshift/console/pull/16789)
* [OCPBUGS-79434](https://issues.redhat.com/browse/OCPBUGS-79434): CVE-2026-29063 Bump immutable [#16329](https://github.com/openshift/console/pull/16329)
* [ART-18713](https://issues.redhat.com/browse/ART-18713): pin fsevents to latest [#16473](https://github.com/openshift/console/pull/16473)
* NO-JIRA: enable multi-architecture yarn builds [#16424](https://github.com/openshift/console/pull/16424)
* [OCPBUGS-83297](https://issues.redhat.com/browse/OCPBUGS-83297): [release-4.14] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation [#16311](https://github.com/openshift/console/pull/16311)
* NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.14 [#16168](https://github.com/openshift/console/pull/16168)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16082](https://github.com/openshift/console/pull/16082)
* NO-JIRA: Bump builder image to v29 [#15991](https://github.com/openshift/console/pull/15991)
* [OCPBUGS-74439](https://issues.redhat.com/browse/OCPBUGS-74439): Bump lodash to latest [#15971](https://github.com/openshift/console/pull/15971)
* [OCPBUGS-44158](https://issues.redhat.com/browse/OCPBUGS-44158): bump dompurify to latest [#15593](https://github.com/openshift/console/pull/15593)
* [OCPBUGS-59998](https://issues.redhat.com/browse/OCPBUGS-59998): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15464](https://github.com/openshift/console/pull/15464)
* [OCPBUGS-58274](https://issues.redhat.com/browse/OCPBUGS-58274): Fix TypeError Cannot read properties of null (reading 'metadata') [#15228](https://github.com/openshift/console/pull/15228)
* [OCPBUGS-57099](https://issues.redhat.com/browse/OCPBUGS-57099): Add all files to `vendor` regardless of gitignore [#15135](https://github.com/openshift/console/pull/15135)
* [OCPBUGS-55942](https://issues.redhat.com/browse/OCPBUGS-55942): fix bug where operator appears twice [#15033](https://github.com/openshift/console/pull/15033)
* [OCPBUGS-55427](https://issues.redhat.com/browse/OCPBUGS-55427): Add missing pipelines plugin name to known plugins [#15005](https://github.com/openshift/console/pull/15005)
* [OCPBUGS-39010](https://issues.redhat.com/browse/OCPBUGS-39010): fix crash if helm chart metadata is nil [#14198](https://github.com/openshift/console/pull/14198)
* [OCPBUGS-53437](https://issues.redhat.com/browse/OCPBUGS-53437): Show Observe section without PROMETHEUS and MONITORING flags [#14892](https://github.com/openshift/console/pull/14892)
* [OCPBUGS-54404](https://issues.redhat.com/browse/OCPBUGS-54404): Update the monitoring topic used by the console team [#14910](https://github.com/openshift/console/pull/14910)
* [OCPBUGS-54167](https://issues.redhat.com/browse/OCPBUGS-54167): fix run time error when no completed version exists [#14899](https://github.com/openshift/console/pull/14899)
* [OCPBUGS-51118](https://issues.redhat.com/browse/OCPBUGS-51118): redirect to correct alert [#14823](https://github.com/openshift/console/pull/14823)
* [OCPBUGS-49753](https://issues.redhat.com/browse/OCPBUGS-49753): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14711](https://github.com/openshift/console/pull/14711)
* [OCPBUGS-46603](https://issues.redhat.com/browse/OCPBUGS-46603): Unable to remove finally tasks in pipeline builder mode [#14642](https://github.com/openshift/console/pull/14642)
* [OCPBUGS-33145](https://issues.redhat.com/browse/OCPBUGS-33145): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14370](https://github.com/openshift/console/pull/14370)
* [OCPBUGS-45323](https://issues.redhat.com/browse/OCPBUGS-45323): Use vCenterCluster value from CM as primary resource [#14574](https://github.com/openshift/console/pull/14574)
* [OCPBUGS-39368](https://issues.redhat.com/browse/OCPBUGS-39368): Remove deprecated resources from spec of the Pipeline [#14230](https://github.com/openshift/console/pull/14230)
* [OCPBUGS-45283](https://issues.redhat.com/browse/OCPBUGS-45283): Add IBM Block Storage CSI driver support for RWX [#14569](https://github.com/openshift/console/pull/14569)
* [OCPBUGS-44791](https://issues.redhat.com/browse/OCPBUGS-44791): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14518](https://github.com/openshift/console/pull/14518)
* [OCPBUGS-42962](https://issues.redhat.com/browse/OCPBUGS-42962): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14386](https://github.com/openshift/console/pull/14386)
* [OCPBUGS-43000](https://issues.redhat.com/browse/OCPBUGS-43000): List of default Camel K event sources disappears when adding a custom event source [#14388](https://github.com/openshift/console/pull/14388)
* [OCPBUGS-36558](https://issues.redhat.com/browse/OCPBUGS-36558): Increase login flow state paramater length/entropy [#14439](https://github.com/openshift/console/pull/14439)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/856a444e8453e707bea27e2516a715edd38da374...492dc3981e99ba21c858c0d18cf330a7381b5eea)


### [console-operator](https://github.com/openshift/console-operator/tree/0920157ed70793287449904114540bc8bb1a31eb)

* [OCPBUGS-77994](https://issues.redhat.com/browse/OCPBUGS-77994): [release-4.14] hermetic 4.14 [#1131](https://github.com/openshift/console-operator/pull/1131)
* [OCPBUGS-77994](https://issues.redhat.com/browse/OCPBUGS-77994): [release-4.14] NO-JIRA: update go mod dependency for konflux [#1117](https://github.com/openshift/console-operator/pull/1117)
* [Full changelog](https://github.com/openshift/console-operator/compare/e5d3f29136a89a273ed48023ce3a89c27980cf4f...0920157ed70793287449904114540bc8bb1a31eb)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/f769225964a6505cb706eb74e78c3d6eb3cae355)

* [OCPBUGS-78286](https://issues.redhat.com/browse/OCPBUGS-78286): fix vendor for hermetic 4.14 [#225](https://github.com/openshift/containernetworking-plugins/pull/225)
* [OCPBUGS-56046](https://issues.redhat.com/browse/OCPBUGS-56046): Check error returned by ipv6 SettleAddresses [#193](https://github.com/openshift/containernetworking-plugins/pull/193)
* [OCPBUGS-46121](https://issues.redhat.com/browse/OCPBUGS-46121): [4.14] cherry-pick containernetworking/plugins#997 [#168](https://github.com/openshift/containernetworking-plugins/pull/168)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/bab8a4f7a868f47f87171c2ef5c1e0b9ae388407...f769225964a6505cb706eb74e78c3d6eb3cae355)


### [coredns](https://github.com/openshift/coredns/tree/d10f7ff3322ac6844fc1ff070528664c8931ed24)

* [OCPBUGS-58713](https://issues.redhat.com/browse/OCPBUGS-58713): [release-4.14] Bump github.com/golang/glog to v1.2.4 [#139](https://github.com/openshift/coredns/pull/139)
* [Full changelog](https://github.com/openshift/coredns/compare/fdd6037bf7380a48358b269d78bc8c61c311342c...d10f7ff3322ac6844fc1ff070528664c8931ed24)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/5ffe43c8ba7f7bb0549424daeec905b2c287cc21)

* [OCPBUGS-79847](https://issues.redhat.com/browse/OCPBUGS-79847): Apply code mitigations for CVE-2026-33186 [#399](https://github.com/openshift/cloud-provider-openstack/pull/399)
* [OCPBUGS-67800](https://issues.redhat.com/browse/OCPBUGS-67800): fix CVE-2025-65637 [#363](https://github.com/openshift/cloud-provider-openstack/pull/363)
* [OCPBUGS-58887](https://issues.redhat.com/browse/OCPBUGS-58887): CARRY: don't ignore json files [#343](https://github.com/openshift/cloud-provider-openstack/pull/343)
* [OCPBUGS-52413](https://issues.redhat.com/browse/OCPBUGS-52413): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 [#315](https://github.com/openshift/cloud-provider-openstack/pull/315)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/697083a8e5e1f68978458a0a00c426e094665271...5ffe43c8ba7f7bb0549424daeec905b2c287cc21)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/dfad3e86768684058148cc46c4ed3d97ae978f2b)

* [OCPBUGS-67801](https://issues.redhat.com/browse/OCPBUGS-67801): Bump logrus [#253](https://github.com/openshift/csi-driver-manila-operator/pull/253)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/d93a218ff323960eb1dea529f0173f069ccfab42...dfad3e86768684058148cc46c4ed3d97ae978f2b)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/155b6abebd6815614a25e2fe471a8aba3b9a768c)

* [OCPBUGS-84929](https://issues.redhat.com/browse/OCPBUGS-84929): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#184](https://github.com/openshift/csi-driver-nfs/pull/184)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e1dd45373456cf8e47a58d6764212317fb2f8a97...155b6abebd6815614a25e2fe471a8aba3b9a768c)


### [docker-builder](https://github.com/openshift/builder/tree/57539b86d3c60b773090f6dc05790aad032444c3)

* [OCPBUGS-66112](https://issues.redhat.com/browse/OCPBUGS-66112): BuildConfig inline Dockerfile fails with heredoc syntax [#492](https://github.com/openshift/builder/pull/492)
* [OCPBUGS-58140](https://issues.redhat.com/browse/OCPBUGS-58140): S2I build cpu limits observed by assemble are limited to 1 cpu [#476](https://github.com/openshift/builder/pull/476)
* [OCPBUGS-42915](https://issues.redhat.com/browse/OCPBUGS-42915), [OCPBUGS-43297](https://issues.redhat.com/browse/OCPBUGS-43297): Bump buildah to 1.33.12 [#447](https://github.com/openshift/builder/pull/447)
* [OCPBUGS-43190](https://issues.redhat.com/browse/OCPBUGS-43190): runc library bump to 1.1.12 [#438](https://github.com/openshift/builder/pull/438)
* [OCPBUGS-48495](https://issues.redhat.com/browse/OCPBUGS-48495): skipping some unit tests to avoid failures as they are duplicate [#430](https://github.com/openshift/builder/pull/430)
* [OCPBUGS-48477](https://issues.redhat.com/browse/OCPBUGS-48477): Add team members to the OWNERS file [#429](https://github.com/openshift/builder/pull/429)
* [Full changelog](https://github.com/openshift/builder/compare/2845ad95e1d2f592e895e3d26de49a1fbd387cb9...57539b86d3c60b773090f6dc05790aad032444c3)


### [docker-registry](https://github.com/openshift/image-registry/tree/ce0483f140c5065a1b4aafbbbb94b1b9ca5f29e1)

* [OCPBUGS-53651](https://issues.redhat.com/browse/OCPBUGS-53651): bump jwt and oauth dependencies [#434](https://github.com/openshift/image-registry/pull/434)
* [Full changelog](https://github.com/openshift/image-registry/compare/f03c24040cea924f846aca8b4e02bf802159a238...ce0483f140c5065a1b4aafbbbb94b1b9ca5f29e1)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/8fa3332c2730fbc5bd8b886885052b6a593c0d72)

* [OCPBUGS-78282](https://issues.redhat.com/browse/OCPBUGS-78282): [release-4.14] update go mod dependency for konflux [#269](https://github.com/openshift/cluster-api-provider-gcp/pull/269)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/d99fb31aa7280f6b5da00880a64b4774600817a2...8fa3332c2730fbc5bd8b886885052b6a593c0d72)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b4b551be8c8bca597db25cae752277da957dfacd)

* [OCPBUGS-79841](https://issues.redhat.com/browse/OCPBUGS-79841): Bump google.golang.org/grpc to v1.79.3 [#168](https://github.com/openshift/machine-api-provider-gcp/pull/168)
* [OCPBUGS-79841](https://issues.redhat.com/browse/OCPBUGS-79841): Fix setup-envtest GCS 401 by downloading binaries directly [#178](https://github.com/openshift/machine-api-provider-gcp/pull/178)
* [OCPBUGS-56194](https://issues.redhat.com/browse/OCPBUGS-56194): Disable shielded VMs for non-UEFI disks [#118](https://github.com/openshift/machine-api-provider-gcp/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a676e6b6a8eefee8b921b47674c6fb9c0b1b5125...b4b551be8c8bca597db25cae752277da957dfacd)


### [haproxy-router](https://github.com/openshift/router/tree/20c72c83cc4ba4e2250e0de58709d100898aeb7b)

* [OCPBUGS-86711](https://issues.redhat.com/browse/OCPBUGS-86711): Strip X-SSL-* headers for plain HTTP [#807](https://github.com/openshift/router/pull/807)
* [OCPBUGS-74947](https://issues.redhat.com/browse/OCPBUGS-74947): Adding escapeHAProxySingleQuotes for sanitize [release-4.14] [#782](https://github.com/openshift/router/pull/782)
* [OCPBUGS-86966](https://issues.redhat.com/browse/OCPBUGS-86966): Regenerate expired test certificate for unit tests [#781](https://github.com/openshift/router/pull/781)
* [Full changelog](https://github.com/openshift/router/compare/c3a2430c09ccea623bb8a599ce56a6e267009620...20c72c83cc4ba4e2250e0de58709d100898aeb7b)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/288be6b27cc18fa1d0d547dea2f02ac89c0a425b)

* [OCPBUGS-59473](https://issues.redhat.com/browse/OCPBUGS-59473): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2364](https://github.com/openshift/kubernetes/pull/2364)
* [OCPBUGS-67736](https://issues.redhat.com/browse/OCPBUGS-67736), [OCPBUGS-67822](https://issues.redhat.com/browse/OCPBUGS-67822): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.14] [#2586](https://github.com/openshift/kubernetes/pull/2586)
* NO-JIRA: fix verify job failure [#2584](https://github.com/openshift/kubernetes/pull/2584)
* [OCPBUGS-74302](https://issues.redhat.com/browse/OCPBUGS-74302): Skip E2e: attach on previously attached volumes should work [#2570](https://github.com/openshift/kubernetes/pull/2570)
* [OCPBUGS-59473](https://issues.redhat.com/browse/OCPBUGS-59473): UPSTREAM: <carry>: disable some legacy cloud provider Azure tests [#2579](https://github.com/openshift/kubernetes/pull/2579)
* [Full changelog](https://github.com/openshift/kubernetes/compare/03a907c6d182353a0e9b83a224a6f0398406f6d5...288be6b27cc18fa1d0d547dea2f02ac89c0a425b)


### [hypershift](https://github.com/openshift/hypershift/tree/463e60b5ecfbde6866651e3bd4a9bf72646a5e9a)

* [release 4.14] Fix OCPBUGS-99086: CVE-2026-16242 konnectivity agent auth [#9131](https://github.com/openshift/hypershift/pull/9131)
* [CNTRLPLANE-3979](https://issues.redhat.com/browse/CNTRLPLANE-3979): Update release-4.14 Konflux pipelines to use shared pipelineRef [#9196](https://github.com/openshift/hypershift/pull/9196)
* [OCPBUGS-84184](https://issues.redhat.com/browse/OCPBUGS-84184): fix(cno): use brackets only for IPv6 in server URL [#8370](https://github.com/openshift/hypershift/pull/8370)
* [OCPBUGS-61176](https://issues.redhat.com/browse/OCPBUGS-61176): Add missing service network DNS entries to KAS cert [#6742](https://github.com/openshift/hypershift/pull/6742)
* [OCPBUGS-57321](https://issues.redhat.com/browse/OCPBUGS-57321): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 [#6252](https://github.com/openshift/hypershift/pull/6252)
* [OCPBUGS-55936](https://issues.redhat.com/browse/OCPBUGS-55936): [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… [#6129](https://github.com/openshift/hypershift/pull/6129)
* [CNTRLPLANE-921](https://issues.redhat.com/browse/CNTRLPLANE-921): Konflux build pipeline service account migration [#6080](https://github.com/openshift/hypershift/pull/6080)
* [CNTRLPLANE-921](https://issues.redhat.com/browse/CNTRLPLANE-921): Konflux build pipeline service account migration [#6085](https://github.com/openshift/hypershift/pull/6085)
* [OCPBUGS-51802](https://issues.redhat.com/browse/OCPBUGS-51802): Fix golang crypto dependency go.mod replacement [#5996](https://github.com/openshift/hypershift/pull/5996)
* [OCPBUGS-53899](https://issues.redhat.com/browse/OCPBUGS-53899): bump golang-jwt v4 [#5909](https://github.com/openshift/hypershift/pull/5909)
* [OCPBUGS-53433](https://issues.redhat.com/browse/OCPBUGS-53433): Prevent IgnitionServer from flooding the API server with patch requests [#5878](https://github.com/openshift/hypershift/pull/5878)
* [OCPBUGS-51731](https://issues.redhat.com/browse/OCPBUGS-51731), [OCPBUGS-51802](https://issues.redhat.com/browse/OCPBUGS-51802): Bump dependencies to OCP fork in backports [#5899](https://github.com/openshift/hypershift/pull/5899)
* Red Hat Konflux update control-plane-operator-4-14 [#5953](https://github.com/openshift/hypershift/pull/5953)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5921](https://github.com/openshift/hypershift/pull/5921)
* [OCPBUGS-53314](https://issues.redhat.com/browse/OCPBUGS-53314): Fix IsIPv4 function identifying also addresses instead of CIDRs [#5867](https://github.com/openshift/hypershift/pull/5867)
* [OCPBUGS-45559](https://issues.redhat.com/browse/OCPBUGS-45559): Add Network Policies for Konnectivity server and Ignition server proxy [#5816](https://github.com/openshift/hypershift/pull/5816)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 [#5730](https://github.com/openshift/hypershift/pull/5730)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 [#5725](https://github.com/openshift/hypershift/pull/5725)
* chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 [#5687](https://github.com/openshift/hypershift/pull/5687)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 [#5681](https://github.com/openshift/hypershift/pull/5681)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5688](https://github.com/openshift/hypershift/pull/5688)
* [OCPBUGS-50700](https://issues.redhat.com/browse/OCPBUGS-50700): add region to AWS creds passed to operators managed by CPO [#5668](https://github.com/openshift/hypershift/pull/5668)
* NO-JIRA:  Red Hat Konflux update control-plane-operator-4-14 [#5339](https://github.com/openshift/hypershift/pull/5339)
* [OCPBUGS-47630](https://issues.redhat.com/browse/OCPBUGS-47630): Separate CPO containerfiles [#5619](https://github.com/openshift/hypershift/pull/5619)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 [#5538](https://github.com/openshift/hypershift/pull/5538)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 [#5537](https://github.com/openshift/hypershift/pull/5537)
* [OCPBUGS-49405](https://issues.redhat.com/browse/OCPBUGS-49405): add ValidIDPConfiguration condition to report IDP config issues [#5520](https://github.com/openshift/hypershift/pull/5520)
* NO-JIRA: chore: update konflux references & bump up go version to 1.20 [#5517](https://github.com/openshift/hypershift/pull/5517)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) [#5444](https://github.com/openshift/hypershift/pull/5444)
* NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) [#5430](https://github.com/openshift/hypershift/pull/5430)
* NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net [#5372](https://github.com/openshift/hypershift/pull/5372)
* NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) [#5331](https://github.com/openshift/hypershift/pull/5331)
* NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) [#5330](https://github.com/openshift/hypershift/pull/5330)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.14) - abandoned [#5308](https://github.com/openshift/hypershift/pull/5308)
* [OCPBUGS-44279](https://issues.redhat.com/browse/OCPBUGS-44279): Configure OAuth https proxy to dial cloud endpoints directly [#5067](https://github.com/openshift/hypershift/pull/5067)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.14) [#5162](https://github.com/openshift/hypershift/pull/5162)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#5145](https://github.com/openshift/hypershift/pull/5145)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#5121](https://github.com/openshift/hypershift/pull/5121)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.14) [#5105](https://github.com/openshift/hypershift/pull/5105)
* NO-JIRA: Update Konflux references (release-4.14) [#5100](https://github.com/openshift/hypershift/pull/5100)
* chore(deps): update konflux references (release-4.14) [#5076](https://github.com/openshift/hypershift/pull/5076)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#5055](https://github.com/openshift/hypershift/pull/5055)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.14) [#5056](https://github.com/openshift/hypershift/pull/5056)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.14) [#5043](https://github.com/openshift/hypershift/pull/5043)
* chore(deps): update konflux references (release-4.14) [#5026](https://github.com/openshift/hypershift/pull/5026)
* chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.43 (release-4.14) [#5021](https://github.com/openshift/hypershift/pull/5021)
* chore(deps): update konflux references to f53fe54 (release-4.14) [#5020](https://github.com/openshift/hypershift/pull/5020)
* NO-JIRA: Update Konflux references (release-4.14) [#5011](https://github.com/openshift/hypershift/pull/5011)
* [Full changelog](https://github.com/openshift/hypershift/compare/7cd5ee0093c42f79bdd4ca8adb8f289df1aeabad...463e60b5ecfbde6866651e3bd4a9bf72646a5e9a)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/be8d8432dafa168febfd5efbcc9c13a8aef1f9ec)

* [OCPBUGS-79836](https://issues.redhat.com/browse/OCPBUGS-79836): Bump google.golang.org/grpc to v1.79.3 [#156](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/156)
* [OCPBUGS-77212](https://issues.redhat.com/browse/OCPBUGS-77212): [release-4.14] standardize build paths [#126](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/126)
* [OCPBUGS-58738](https://issues.redhat.com/browse/OCPBUGS-58738): bump github.com/golang/glog to v1.2.4 [#109](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/109)
* [OCPBUGS-56065](https://issues.redhat.com/browse/OCPBUGS-56065): tech debt: rework vendor patches [#93](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/93)
* [OCPBUGS-53907](https://issues.redhat.com/browse/OCPBUGS-53907): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#86](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/86)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ea2bc158887427c5278fb6a4c8c7a49d8e89c494...be8d8432dafa168febfd5efbcc9c13a8aef1f9ec)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/a38b8d883fc282608c22d8e0dcde24aaa97de8bf)

* [OCPBUGS-67825](https://issues.redhat.com/browse/OCPBUGS-67825), [OCPBUGS-67826](https://issues.redhat.com/browse/OCPBUGS-67826): bump github.com/sirupsen/logrus to v1.9.3 [#166](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/166)
* [OCPBUGS-59791](https://issues.redhat.com/browse/OCPBUGS-59791): [IBM VPC] set offlineExpansion to false in e2e test manifest [#151](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/151)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/620220eae119f1fc51f0657563e96655d16a726d...a38b8d883fc282608c22d8e0dcde24aaa97de8bf)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/8fd3b84526e7c8258035bffbd04ee5a1f2f7697c)

* [OCPBUGS-102599](https://issues.redhat.com/browse/OCPBUGS-102599): Bump golang.org/x/net to v0.35.0-sec.4 [#63](https://github.com/openshift/ibm-vpc-node-label-updater/pull/63)
* [OCPBUGS-56065](https://issues.redhat.com/browse/OCPBUGS-56065): tech debt: rework vendor patches [#50](https://github.com/openshift/ibm-vpc-node-label-updater/pull/50)
* [OCPBUGS-53539](https://issues.redhat.com/browse/OCPBUGS-53539): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#46](https://github.com/openshift/ibm-vpc-node-label-updater/pull/46)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/da6823b06c120347d64216a04e37543aec515dec...8fd3b84526e7c8258035bffbd04ee5a1f2f7697c)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/c747ee2102a8fc19971b3161f1439b9bb3740ea8)

* [OCPBUGS-102592](https://issues.redhat.com/browse/OCPBUGS-102592): Replace golang.org/x/net with openshift-sustaining/net [#168](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/168)
* [OCPBUGS-115546](https://issues.redhat.com/browse/OCPBUGS-115546): Fetch envtest assets from the controller-tools releases [#179](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/179)
* [OCPBUGS-67290](https://issues.redhat.com/browse/OCPBUGS-67290): [release-4.14] Fix incomplete vendor/ [#136](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/136)
* [OCPBUGS-51816](https://issues.redhat.com/browse/OCPBUGS-51816): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#123](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/123)
* [OCPBUGS-36077](https://issues.redhat.com/browse/OCPBUGS-36077): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.14 [#88](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/88)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/004ecde5e7e5394abdb9fe62b3063fd20300bb9c...c747ee2102a8fc19971b3161f1439b9bb3740ea8)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1c221dfad369f41185d93e34e7356fc2395ec9a1)

* [OCPBUGS-102612](https://issues.redhat.com/browse/OCPBUGS-102612): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#108](https://github.com/openshift/machine-api-provider-ibmcloud/pull/108)
* NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket [#111](https://github.com/openshift/machine-api-provider-ibmcloud/pull/111)
* [OCPBUGS-36083](https://issues.redhat.com/browse/OCPBUGS-36083): Bump dependency for CVE [#57](https://github.com/openshift/machine-api-provider-ibmcloud/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c28b2232ab1c0dcd951a23b324506eaab510389c...1c221dfad369f41185d93e34e7356fc2395ec9a1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/acc99f557871cbf137f57a540f26989c27bb1301)

* Ignore previous status when disabling alerts (#1059) [#1059](https://github.com/openshift/insights-operator/pull/1059)
* [OCPBUGS-45044](https://issues.redhat.com/browse/OCPBUGS-45044): insightsoperator.operator.openshift.io resource is create-only (#1058) [#1058](https://github.com/openshift/insights-operator/pull/1058)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8c2ae5821123ae7902a4e2c709a0adf18a4f280f...acc99f557871cbf137f57a540f26989c27bb1301)


### [ironic](https://github.com/openshift/ironic-image/tree/e1286a77bcdfcc21b4739327c27a9c0a07e247ce)

* [OCPBUGS-97806](https://issues.redhat.com/browse/OCPBUGS-97806): bump openstack-ironic pin for CVE-2026-54423 fix(release-4.14) [#879](https://github.com/openshift/ironic-image/pull/879)
* [OCPBUGS-69788](https://issues.redhat.com/browse/OCPBUGS-69788): Bump eventlet version to 0.33.1-7 [#765](https://github.com/openshift/ironic-image/pull/765)
* [OCPBUGS-48147](https://issues.redhat.com/browse/OCPBUGS-48147), [OCPBUGS-48594](https://issues.redhat.com/browse/OCPBUGS-48594): Bump jinja2 to 3.0.1-6.el9.2 [#625](https://github.com/openshift/ironic-image/pull/625)
* [OCPBUGS-43954](https://issues.redhat.com/browse/OCPBUGS-43954), [OCPBUGS-43962](https://issues.redhat.com/browse/OCPBUGS-43962): Bump python-waitress [4.14] [#607](https://github.com/openshift/ironic-image/pull/607)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0b1212c6acca609cdc751ce5652b8f91987c8b71...e1286a77bcdfcc21b4739327c27a9c0a07e247ce)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/cc4f46696731ac4262df5ba4d1acf42fdf27e08e)

* [OCPBUGS-96901](https://issues.redhat.com/browse/OCPBUGS-96901): Replace individual package removal with a single rpm -e loop [#278](https://github.com/openshift/ironic-agent-image/pull/278)
* [OCPBUGS-69779](https://issues.redhat.com/browse/OCPBUGS-69779): Bump eventlet version to 0.33.1-7 [#234](https://github.com/openshift/ironic-agent-image/pull/234)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/e839a4e87eb09b78e562a3bab8f23f1c767742a4...cc4f46696731ac4262df5ba4d1acf42fdf27e08e)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/ac636fd1a6f5a42b9317207403838466ca129766)

* [OCPBUGS-87171](https://issues.redhat.com/browse/OCPBUGS-87171): CI image build root tag and go version in go.mod sync with ART 4.14 config [#120](https://github.com/openshift/ironic-rhcos-downloader/pull/120)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/7b56c30661e39b212fc632e8e184c70b14dcf3a2...ac636fd1a6f5a42b9317207403838466ca129766)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/1b194fd16b59c4a48223a2c9ac1bfb998a55c615)

* [OCPBUGS-49890](https://issues.redhat.com/browse/OCPBUGS-49890): Fix subnet validation [#50](https://github.com/openshift/ironic-static-ip-manager/pull/50)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/c038d5a43e7355099d8f9845a8b14052437b787e...1b194fd16b59c4a48223a2c9ac1bfb998a55c615)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/1f611c53ca22ebcf23d6a34ca07121f4fa2808d6)

* [OCPBUGS-54991](https://issues.redhat.com/browse/OCPBUGS-54991): Handle `openshift-host-network` namespace as special when it modifies [#655](https://github.com/openshift/sdn/pull/655)
* [OCPBUGS-46536](https://issues.redhat.com/browse/OCPBUGS-46536): Bump openvswitch [#647](https://github.com/openshift/sdn/pull/647)
* [Full changelog](https://github.com/openshift/sdn/compare/3f515e75606cf7f18005ceef718ae8453d3b7382...1f611c53ca22ebcf23d6a34ca07121f4fa2808d6)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/b533e08c1ee5ac79d5b9219ec0ac2fefca353d9d)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). [#229](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/229)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...b533e08c1ee5ac79d5b9219ec0ac2fefca353d9d)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/e320958fd283d9f9995fc5e3b6441e6d4c57782a)

* [OCPBUGS-95080](https://issues.redhat.com/browse/OCPBUGS-95080): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#81](https://github.com/openshift/cloud-provider-kubevirt/pull/81)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/7d96f56d4bbc8449fdddbdbc630d9337097f0030...e320958fd283d9f9995fc5e3b6441e6d4c57782a)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/6068e9c1cc4a20f0230592618a80180740f80ebd)

* [OCPBUGS-83659](https://issues.redhat.com/browse/OCPBUGS-83659): Bump google.golang.org/grpc to v1.79.3 [#104](https://github.com/openshift/kubevirt-csi-driver/pull/104)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/48fafc4a9edc202c5ff674b5f631568b4d62f7f5...6068e9c1cc4a20f0230592618a80180740f80ebd)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/3d82606aad9b4a1b3a77e960a160bbc59975954b)

* [OCPBUGS-77198](https://issues.redhat.com/browse/OCPBUGS-77198): Fix incomplete vendor [#304](https://github.com/openshift/cluster-api-provider-libvirt/pull/304)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/34dfccba84a23b871d4f29dcec55929c11696e91...3d82606aad9b4a1b3a77e960a160bbc59975954b)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/19133ba974fbf8039a1551702ca7f21f91689ffb)

* [OCPBUGS-67840](https://issues.redhat.com/browse/OCPBUGS-67840): bumped logrus to v1.9.3 [#1459](https://github.com/openshift/machine-api-operator/pull/1459)
* [OCPBUGS-53296](https://issues.redhat.com/browse/OCPBUGS-53296): add image/read permissions [#1350](https://github.com/openshift/machine-api-operator/pull/1350)
* [OCPBUGS-48245](https://issues.redhat.com/browse/OCPBUGS-48245): VSphere: Handle cloned instance with lost taskID [#1322](https://github.com/openshift/machine-api-operator/pull/1322)
* [OCPBUGS-47659](https://issues.redhat.com/browse/OCPBUGS-47659): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1318](https://github.com/openshift/machine-api-operator/pull/1318)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/4765fd58260995b48ec6f05372f51b5f02fc7477...19133ba974fbf8039a1551702ca7f21f91689ffb)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/00b2e0b1cc83e119995bbbe2ae06665c3d1655d7)

* [OCPBUGS-57341](https://issues.redhat.com/browse/OCPBUGS-57341): Do not enable on-prem-resolv-prepender.path for UPI [#5114](https://github.com/openshift/machine-config-operator/pull/5114)
* [OCPBUGS-43743](https://issues.redhat.com/browse/OCPBUGS-43743): Soften haproxy timeout for kubeapi probe [#4664](https://github.com/openshift/machine-config-operator/pull/4664)
* [OCPBUGS-54228](https://issues.redhat.com/browse/OCPBUGS-54228): Update ObservedGeneration in KubeletConfig [#4950](https://github.com/openshift/machine-config-operator/pull/4950)
* [OCPBUGS-50631](https://issues.redhat.com/browse/OCPBUGS-50631): Add clarification to invalid maxUnavailable alert [#4848](https://github.com/openshift/machine-config-operator/pull/4848)
* [OCPBUGS-48801](https://issues.redhat.com/browse/OCPBUGS-48801): Wait for all subcontrollers [#4808](https://github.com/openshift/machine-config-operator/pull/4808)
* [OCPBUGS-46057](https://issues.redhat.com/browse/OCPBUGS-46057): Remove trailing periods from AWS provided hostnames [#4747](https://github.com/openshift/machine-config-operator/pull/4747)
* [OCPBUGS-45271](https://issues.redhat.com/browse/OCPBUGS-45271): Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously [#4725](https://github.com/openshift/machine-config-operator/pull/4725)
* [OCPBUGS-42111](https://issues.redhat.com/browse/OCPBUGS-42111): Do not use 'restart' for 'oneshot' service [#4622](https://github.com/openshift/machine-config-operator/pull/4622)
* [MCO-1278](https://issues.redhat.com/browse/MCO-1278): Backport Telemetry to 4.14 [#4672](https://github.com/openshift/machine-config-operator/pull/4672)
* [OCPBUGS-43981](https://issues.redhat.com/browse/OCPBUGS-43981): Panic seen in CI job for MCC pod [#4671](https://github.com/openshift/machine-config-operator/pull/4671)
* [OCPBUGS-43980](https://issues.redhat.com/browse/OCPBUGS-43980): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4673](https://github.com/openshift/machine-config-operator/pull/4673)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/dc45d313d876f6a60162bc220365b6dc21078cbe...00b2e0b1cc83e119995bbbe2ae06665c3d1655d7)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/1bff221eb64c41124fdf72c90b72498197291a6a)

* [OCPBUGS-67827](https://issues.redhat.com/browse/OCPBUGS-67827): bumped logrus to v1.9.3 [#159](https://github.com/openshift/image-customization-controller/pull/159)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/2a6627bafcbb00437ab97308fe1d7df9039104ad...1bff221eb64c41124fdf72c90b72498197291a6a)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/197f328f2b1459b03883464ab0e13158ec84d130)

* [OCPBUGS-87880](https://issues.redhat.com/browse/OCPBUGS-87880): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#104](https://github.com/openshift/machine-os-images/pull/104)
* [OCPBUGS-54171](https://issues.redhat.com/browse/OCPBUGS-54171): Change rhcos release browser url [#59](https://github.com/openshift/machine-os-images/pull/59)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/d3a4a6c3b46e26fa260de80465b45879311e23c4...197f328f2b1459b03883464ab0e13158ec84d130)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/0a9fb3af5b891c689ffa50446a4b7820372e6e79)

* [OCPBUGS-74442](https://issues.redhat.com/browse/OCPBUGS-74442): [release-4.14] fix: upgrade lodash to remove vulnerable code [#906](https://github.com/openshift/monitoring-plugin/pull/906)
* [OCPBUGS-78495](https://issues.redhat.com/browse/OCPBUGS-78495): fix for CVE-2025-69873 [#851](https://github.com/openshift/monitoring-plugin/pull/851)
* [OCPBUGS-44392](https://issues.redhat.com/browse/OCPBUGS-44392): fix cross-spawn vulnerable dependency [#278](https://github.com/openshift/monitoring-plugin/pull/278)
* NO-JIRA: [release-4.14] OU-179: Fix the root cause of externalLabels not present on alerts [#244](https://github.com/openshift/monitoring-plugin/pull/244)
* [OCPBUGS-44137](https://issues.redhat.com/browse/OCPBUGS-44137): upgrade dompurify dependency [#243](https://github.com/openshift/monitoring-plugin/pull/243)
* [OCPBUGS-43243](https://issues.redhat.com/browse/OCPBUGS-43243): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.14 [#219](https://github.com/openshift/monitoring-plugin/pull/219)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/6fb208108720b9a35782f7d4f6738010ec97ba85...0a9fb3af5b891c689ffa50446a4b7820372e6e79)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/75d37a9cae194ebba203a9e6442dc0d90c02aba4)

* [OCPBUGS-58763](https://issues.redhat.com/browse/OCPBUGS-58763): Bump github.com/golang/glog to v1.2.4 [#105](https://github.com/openshift/multus-admission-controller/pull/105)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/68db19a47283e55e6eda1eb4f9e80dbf6d5e3077...75d37a9cae194ebba203a9e6442dc0d90c02aba4)


### [multus-cni](https://github.com/openshift/multus-cni/tree/e3c26de3692410c14a4a2f075b6c0946fa9f1e4c)

* [OCPBUGS-85381](https://issues.redhat.com/browse/OCPBUGS-85381): Sanitize bracketed hostnames in kubeconfig server URLs [#295](https://github.com/openshift/multus-cni/pull/295)
* Bump Go to 1.21 and fix CI build root image [#293](https://github.com/openshift/multus-cni/pull/293)
* [OCPBUGS-85253](https://issues.redhat.com/browse/OCPBUGS-85253): Fix server url in kubeconfig [#287](https://github.com/openshift/multus-cni/pull/287)
* [OCPBUGS-48160](https://issues.redhat.com/browse/OCPBUGS-48160): [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket [#262](https://github.com/openshift/multus-cni/pull/262)
* [Full changelog](https://github.com/openshift/multus-cni/compare/af796f2dbf470ef30390456aa9bc3aa3d951385e...e3c26de3692410c14a4a2f075b6c0946fa9f1e4c)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/f95487b0831b560de7b8d7c5d1c986338224800b)

* [OCPBUGS-55620](https://issues.redhat.com/browse/OCPBUGS-55620): Fixes leftover podref issue [#367](https://github.com/openshift/whereabouts-cni/pull/367)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/7a6bc35369fe413ca190b3c680aa097c867d4f73...f95487b0831b560de7b8d7c5d1c986338224800b)


### [must-gather](https://github.com/openshift/must-gather/tree/b8585ca862a3fbe77134e5cbe6155d7c04efc269)

* [OCPBUGS-42971](https://issues.redhat.com/browse/OCPBUGS-42971): Collect etcd object count [#457](https://github.com/openshift/must-gather/pull/457)
* [OCPBUGS-48084](https://issues.redhat.com/browse/OCPBUGS-48084): Update owners [#475](https://github.com/openshift/must-gather/pull/475)
* [OCPBUGS-48058](https://issues.redhat.com/browse/OCPBUGS-48058): Support gathering IPsec data [#472](https://github.com/openshift/must-gather/pull/472)
* [Full changelog](https://github.com/openshift/must-gather/compare/ec45c997def7aa0632a7576ceabf02c4efd0a85e...b8585ca862a3fbe77134e5cbe6155d7c04efc269)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/84d7ac4e326e55fea98629d3851e98730c8d44a9)

* [OCPBUGS-58778](https://issues.redhat.com/browse/OCPBUGS-58778): Bump github.com/golang/glog to v1.2.4 (#115) [#115](https://github.com/openshift/network-metrics-daemon/pull/115)
* [OCPBUGS-60394](https://issues.redhat.com/browse/OCPBUGS-60394): Replace e2e test image (#128) [#128](https://github.com/openshift/network-metrics-daemon/pull/128)
* swtich golint install method (#127) [#127](https://github.com/openshift/network-metrics-daemon/pull/127)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/d8a8c94e523242b441b3714ae31e4c7608c0c797...84d7ac4e326e55fea98629d3851e98730c8d44a9)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/8930f295dfa97cc63321c63192c93a78306fe23b)

* [OCPBUGS-23873](https://issues.redhat.com/browse/OCPBUGS-23873): fix for CVE-2023-47108 [#43](https://github.com/openshift/cloud-provider-nutanix/pull/43)
* [OCPBUGS-17304](https://issues.redhat.com/browse/OCPBUGS-17304), [OCPBUGS-20899](https://issues.redhat.com/browse/OCPBUGS-20899): bump golang.org/x/net to v0.17.0 [#39](https://github.com/openshift/cloud-provider-nutanix/pull/39)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/bc568865fe7d5cd598c89e7f189de9e07150f29a...8930f295dfa97cc63321c63192c93a78306fe23b)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/c06616804f2de1635fb34fd45fdb625fd0b1b506)

* [OCPBUGS-47265](https://issues.redhat.com/browse/OCPBUGS-47265): fixing CVE-2024-45338 [#116](https://github.com/openshift/machine-api-provider-nutanix/pull/116)
* [OCPBUGS-51852](https://issues.redhat.com/browse/OCPBUGS-51852): Fixing CVE-2025-22868 [#108](https://github.com/openshift/machine-api-provider-nutanix/pull/108)
* [OCPBUGS-17305](https://issues.redhat.com/browse/OCPBUGS-17305): bump golang.org/x/net to 0.17.0 [#85](https://github.com/openshift/machine-api-provider-nutanix/pull/85)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/93a782e897c28724ae8cdf5251c2dc5502d83e6b...c06616804f2de1635fb34fd45fdb625fd0b1b506)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/245539e8902062afc29bb4efa59b4eab7c0bc48f)

* [OCPBUGS-74926](https://issues.redhat.com/browse/OCPBUGS-74926): bump kubernetes-apiserver to pick up loopback cert expiration update [#174](https://github.com/openshift/oauth-apiserver/pull/174)
* NO-JIRA: (chore): update OWNERS [#176](https://github.com/openshift/oauth-apiserver/pull/176)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e1cd9d05b032fbe83df7f68c813309ad7df5d59e...245539e8902062afc29bb4efa59b4eab7c0bc48f)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/056043d10e0713432e541d58a285f41829c0be6e)

* changes the owners file (#1013) [#1013](https://github.com/openshift/oc-mirror/pull/1013)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1023) [#1023](https://github.com/openshift/oc-mirror/pull/1023)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/a0733c17322f96d14f9158604fe74f1bfecc4a53...056043d10e0713432e541d58a285f41829c0be6e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/b699a1b2211928d91676e46c09bc95b481e9e246)

* [OCPBUGS-82649](https://issues.redhat.com/browse/OCPBUGS-82649): Address CVE-2026-35469 [#659](https://github.com/openshift/openshift-apiserver/pull/659)
* [OCPBUGS-74924](https://issues.redhat.com/browse/OCPBUGS-74924): bump kubernetes-apiserver to pick up loopback cert expiration update [#602](https://github.com/openshift/openshift-apiserver/pull/602)
* [OCPBUGS-76483](https://issues.redhat.com/browse/OCPBUGS-76483): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] [#612](https://github.com/openshift/openshift-apiserver/pull/612)
* [OCPBUGS-56613](https://issues.redhat.com/browse/OCPBUGS-56613): Fix image reference in TestImageStreamImportQuayIO [#518](https://github.com/openshift/openshift-apiserver/pull/518)
* [OCPBUGS-50477](https://issues.redhat.com/browse/OCPBUGS-50477): Pass expected type to deploymentconfig/scale object validation. [#497](https://github.com/openshift/openshift-apiserver/pull/497)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/433fd32ed98ad482ecad9006e7765075a3beb7ae...b699a1b2211928d91676e46c09bc95b481e9e246)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1c76570bb6ca3b55faa0461f085e43097cc06c50)

* [OCPBUGS-57940](https://issues.redhat.com/browse/OCPBUGS-57940): Set node-pullsecrets volume to read-only to protect image pull credentials [#398](https://github.com/openshift/openshift-controller-manager/pull/398)
* [OCPBUGS-56951](https://issues.redhat.com/browse/OCPBUGS-56951): Empty proxy variables are causing issues during the build [#386](https://github.com/openshift/openshift-controller-manager/pull/386)
* [OCPBUGS-48480](https://issues.redhat.com/browse/OCPBUGS-48480): Add team members to the OWNERS file [#360](https://github.com/openshift/openshift-controller-manager/pull/360)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/a25aab6f01ae68758978ca449a640d75c25562f4...1c76570bb6ca3b55faa0461f085e43097cc06c50)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/ae646edbc646b7120891870d23fef2908ac69172)

* [OCPBUGS-67853](https://issues.redhat.com/browse/OCPBUGS-67853): Bump logrus [#189](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/189)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/1713e9716ce9efe64bc87c3203e0f991e72132d2...ae646edbc646b7120891870d23fef2908ac69172)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/471ed47556b6fa51cef6c270e70cc6a48feab0aa)

* [OCPBUGS-78172](https://issues.redhat.com/browse/OCPBUGS-78172): hermetic 4.14 [#165](https://github.com/openshift/machine-api-provider-openstack/pull/165)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/51f8e4d69014bfa7a8815662ab0117b6505a6e29...471ed47556b6fa51cef6c270e70cc6a48feab0aa)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/905f2870ad2518975103720e89a41062b448739f)

* [OCPBUGS-87896](https://issues.redhat.com/browse/OCPBUGS-87896), [OCPBUGS-87899](https://issues.redhat.com/browse/OCPBUGS-87899): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] [#1326](https://github.com/openshift/operator-framework-olm/pull/1326)
* [OCPBUGS-86253](https://issues.redhat.com/browse/OCPBUGS-86253): Drop github.com/distribution/distribution dep [#1304](https://github.com/openshift/operator-framework-olm/pull/1304)
* [OCPBUGS-61469](https://issues.redhat.com/browse/OCPBUGS-61469): [release-4.14] Add NetworkPolicy as a supported kind [#1052](https://github.com/openshift/operator-framework-olm/pull/1052)
* [OCPBUGS-61390](https://issues.redhat.com/browse/OCPBUGS-61390): [4.14] e2e stability fixes [#1085](https://github.com/openshift/operator-framework-olm/pull/1085)
* [OCPBUGS-46927](https://issues.redhat.com/browse/OCPBUGS-46927), [OCPBUGS-46934](https://issues.redhat.com/browse/OCPBUGS-46934), [OCPBUGS-47314](https://issues.redhat.com/browse/OCPBUGS-47314): x/net bump to v0.34.0 [release-4.14] [#941](https://github.com/openshift/operator-framework-olm/pull/941)
* [OCPBUGS-46595](https://issues.redhat.com/browse/OCPBUGS-46595): CRD upgrade existing CR validation fix (#3442) [#921](https://github.com/openshift/operator-framework-olm/pull/921)
* [OCPBUGS-45080](https://issues.redhat.com/browse/OCPBUGS-45080): SSA for Services and ClusterRoleBindings [#905](https://github.com/openshift/operator-framework-olm/pull/905)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b18c1b3a87100e6a3b441041e7401f4e6042cd54...905f2870ad2518975103720e89a41062b448739f)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/63ccdc559d1944457375d190b4a209ce0c85d27c)

* [OCPBUGS-62222](https://issues.redhat.com/browse/OCPBUGS-62222): Remove Expect func so that the test case can use the retry logic [#673](https://github.com/operator-framework/operator-marketplace/pull/673)
* [OCPBUGS-49427](https://issues.redhat.com/browse/OCPBUGS-49427): Upgrade golang.org/x/net [release-4.14] [#589](https://github.com/operator-framework/operator-marketplace/pull/589)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/3ca78f1ca72fe96c35a6e89c65073f3ea1f0ebb9...63ccdc559d1944457375d190b4a209ce0c85d27c)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8260351058debcdd785dbdc675ba4f800143204f)

* [OCPBUGS-97816](https://issues.redhat.com/browse/OCPBUGS-97816): External gateway: Remove routes for external gateway pods in terminating or not ready state [#3286](https://github.com/openshift/ovn-kubernetes/pull/3286)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-78982](https://issues.redhat.com/browse/OCPBUGS-78982): [release-4.14] Dockerfile: Unpin OVN and consume the latest from FDP [#3073](https://github.com/openshift/ovn-kubernetes/pull/3073)
* [OCPBUGS-59872](https://issues.redhat.com/browse/OCPBUGS-59872): Dockerfile: Remove ovs version pinning [#2695](https://github.com/openshift/ovn-kubernetes/pull/2695)
* [OCPBUGS-57102](https://issues.redhat.com/browse/OCPBUGS-57102): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.14 [#2590](https://github.com/openshift/ovn-kubernetes/pull/2590)
* [OCPBUGS-56420](https://issues.redhat.com/browse/OCPBUGS-56420): Update to FDP25.A.1 24.03.5-40. [#2574](https://github.com/openshift/ovn-kubernetes/pull/2574)
* [OCPBUGS-48522](https://issues.redhat.com/browse/OCPBUGS-48522): Let OVN-northd bind remote ports [#2418](https://github.com/openshift/ovn-kubernetes/pull/2418)
* [OCPBUGS-54732](https://issues.redhat.com/browse/OCPBUGS-54732): Dockerfile.base: bump OVS version to 3.3 [#2511](https://github.com/openshift/ovn-kubernetes/pull/2511)
* [OCPBUGS-50584](https://issues.redhat.com/browse/OCPBUGS-50584): Bump OVN to 23.09.6-12 to consume fix for FDP-905 [#2455](https://github.com/openshift/ovn-kubernetes/pull/2455)
* [OCPBUGS-45096](https://issues.redhat.com/browse/OCPBUGS-45096): pin libreswan to 4.6-3.el9_0.3 [#2368](https://github.com/openshift/ovn-kubernetes/pull/2368)
* [OCPBUGS-44784](https://issues.redhat.com/browse/OCPBUGS-44784): Bump ovs to 3.1.0-137 [#2360](https://github.com/openshift/ovn-kubernetes/pull/2360)
* [OCPBUGS-44793](https://issues.redhat.com/browse/OCPBUGS-44793): Delete EgressIP LRP stale nexthops when node is not found [#2361](https://github.com/openshift/ovn-kubernetes/pull/2361)
* [OCPBUGS-42944](https://issues.redhat.com/browse/OCPBUGS-42944): Fix egress gateway pod cleanup for remote zone pods. [#2356](https://github.com/openshift/ovn-kubernetes/pull/2356)
* [OCPBUGS-44379](https://issues.redhat.com/browse/OCPBUGS-44379): Revert "Pin libreswan to the known working version 4.5" [#2344](https://github.com/openshift/ovn-kubernetes/pull/2344)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/eb3869e0d6f71407e33b8a8dcbc67d2132359d63...8260351058debcdd785dbdc675ba4f800143204f)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/d89d56a28875917e4d00c61c5eba7a6a6e271f25)

* [OCPBUGS-67860](https://issues.redhat.com/browse/OCPBUGS-67860): Fix CVE-2025-65637 by bumping logrus to v1.9.1 [#100](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/100)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7436369afce33811e543b13fcbea8d1e1ff65502...d89d56a28875917e4d00c61c5eba7a6a6e271f25)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/dcca41df34618fa0dad8cfceeb79f3afd6d98a4b)

* [OCPBUGS-78039](https://issues.redhat.com/browse/OCPBUGS-78039): hermetic 4.14 [#136](https://github.com/openshift/machine-api-provider-powervs/pull/136)
* [OCPBUGS-54754](https://issues.redhat.com/browse/OCPBUGS-54754): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.14 [#116](https://github.com/openshift/machine-api-provider-powervs/pull/116)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/55b16c1553b9f08fa237cbd650102f440cdb0fbc...dcca41df34618fa0dad8cfceeb79f3afd6d98a4b)


### [prometheus](https://github.com/openshift/prometheus/tree/6b8edf05384647f80af0247c5c84720dc889eac6)

* [OCPBUGS-88588](https://issues.redhat.com/browse/OCPBUGS-88588): remote: validate snappy decoded length before allocation in read endpoint [#353](https://github.com/openshift/prometheus/pull/353)
* [OCPBUGS-86878](https://issues.redhat.com/browse/OCPBUGS-86878): Fix the inconsistent vendor directory [#336](https://github.com/openshift/prometheus/pull/336)
* [OCPBUGS-86878](https://issues.redhat.com/browse/OCPBUGS-86878): Bump google.golang.org/grpc [#323](https://github.com/openshift/prometheus/pull/323)
* [OCPBUGS-43670](https://issues.redhat.com/browse/OCPBUGS-43670): fix(discovery): Handle cache.DeletedFinalStateUnknown … [#239](https://github.com/openshift/prometheus/pull/239)
* [Full changelog](https://github.com/openshift/prometheus/compare/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd...6b8edf05384647f80af0247c5c84720dc889eac6)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/7194ce3011495510c7f0e8803e65f151ba695618)

* [OCPBUGS-100361](https://issues.redhat.com/browse/OCPBUGS-100361): Set testdata CA expiry to 20 years from issue date (#4112) [#147](https://github.com/openshift/prometheus-alertmanager/pull/147)
* [OCPBUGS-77837](https://issues.redhat.com/browse/OCPBUGS-77837): Include go-verify-deps expected files in gitignore [#121](https://github.com/openshift/prometheus-alertmanager/pull/121)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e3725166cf8ef228f1672b00d063c488b69687aa...7194ce3011495510c7f0e8803e65f151ba695618)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9a12e08adc28a8de13eb6e36679db94ff4a518b5)

* [OCPBUGS-86883](https://issues.redhat.com/browse/OCPBUGS-86883): [release-4.14] bump google.golang.org/grpc to v1.64.1-sec.1 [#94](https://github.com/openshift/route-controller-manager/pull/94)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e...9a12e08adc28a8de13eb6e36679db94ff4a518b5)


### [tests](https://github.com/openshift/origin/tree/d885e43f7985efe72dbf3e949ea3caf7dcee81b8)

* [OCPBUGS-74302](https://issues.redhat.com/browse/OCPBUGS-74302): Skip E2e: attach on previously attached volumes should work [#30727](https://github.com/openshift/origin/pull/30727)
* [OCPBUGS-63674](https://issues.redhat.com/browse/OCPBUGS-63674): Fix regex parser [#30391](https://github.com/openshift/origin/pull/30391)
* [OCPBUGS-61233](https://issues.redhat.com/browse/OCPBUGS-61233): images/tests: Remove rteval [#30208](https://github.com/openshift/origin/pull/30208)
* [OCPBUGS-55747](https://issues.redhat.com/browse/OCPBUGS-55747): [build] Ensure Git Clone Does Not Run Privileged [#29758](https://github.com/openshift/origin/pull/29758)
* [OCPBUGS-54770](https://issues.redhat.com/browse/OCPBUGS-54770): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29665](https://github.com/openshift/origin/pull/29665)
* [OCPBUGS-52583](https://issues.redhat.com/browse/OCPBUGS-52583): Use payload pullspec for image info test [#29591](https://github.com/openshift/origin/pull/29591)
* [OCPBUGS-51363](https://issues.redhat.com/browse/OCPBUGS-51363): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29567](https://github.com/openshift/origin/pull/29567)
* [OCPBUGS-51044](https://issues.redhat.com/browse/OCPBUGS-51044): Add/remove team members to the OWNERS file for Builds [#29554](https://github.com/openshift/origin/pull/29554)
* [OCPBUGS-44107](https://issues.redhat.com/browse/OCPBUGS-44107): Adjust createDNSPod() to support hypershift dual-stack test [#29256](https://github.com/openshift/origin/pull/29256)
* [Full changelog](https://github.com/openshift/origin/compare/c2c5a8e5706c61d0adfa613deaea3a3af2ed9cc0...d885e43f7985efe72dbf3e949ea3caf7dcee81b8)


### [thanos](https://github.com/openshift/thanos/tree/25bdf4b7cf52346785549eb39b3c62803dd95688)

* [OCPBUGS-67876](https://issues.redhat.com/browse/OCPBUGS-67876): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#167](https://github.com/openshift/thanos/pull/167)
* [Full changelog](https://github.com/openshift/thanos/compare/a26712509e3f9c511926ca9d8bba3e3ea8e95ada...25bdf4b7cf52346785549eb39b3c62803dd95688)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/b1aaff4cb5acd1df600322dbbf5a7b8ee65952e0)

* [OCPBUGS-78031](https://issues.redhat.com/browse/OCPBUGS-78031): hermetic migration 4.14 [#109](https://github.com/openshift/cloud-provider-vsphere/pull/109)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/efaed5cdb8c7d4b0b7fe38e203c545278ccfab4d...b1aaff4cb5acd1df600322dbbf5a7b8ee65952e0)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/c1758a0d0531d551f47c068762f3b9d232ce7164)

* [OCPBUGS-78023](https://issues.redhat.com/browse/OCPBUGS-78023): hermetic migration 4.14 [#88](https://github.com/openshift/cluster-api-provider-vsphere/pull/88)
* [OCPBUGS-61655](https://issues.redhat.com/browse/OCPBUGS-61655): Fix unit tests [#74](https://github.com/openshift/cluster-api-provider-vsphere/pull/74)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/b5346ad9d07fc212c58ad52cd757fa31da3c5f77...c1758a0d0531d551f47c068762f3b9d232ce7164)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/96d5fbc02df71945bd76b4bbad3911cf19a2c16e)

* [OCPBUGS-79856](https://issues.redhat.com/browse/OCPBUGS-79856): Bump Bump google.golang.org/grpc [#179](https://github.com/openshift/vmware-vsphere-csi-driver/pull/179)
* [OCPBUGS-67880](https://issues.redhat.com/browse/OCPBUGS-67880): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#160](https://github.com/openshift/vmware-vsphere-csi-driver/pull/160)
* [OCPBUGS-51045](https://issues.redhat.com/browse/OCPBUGS-51045): Prevent node cache update during attach & detach [#139](https://github.com/openshift/vmware-vsphere-csi-driver/pull/139)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0181d4f650241bc399e071941a561344f182a31d...96d5fbc02df71945bd76b4bbad3911cf19a2c16e)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/6593723fbb3189b25df4634e3b75bb02b5b9e611)

* [OCPBUGS-67879](https://issues.redhat.com/browse/OCPBUGS-67879), [OCPBUGS-67885](https://issues.redhat.com/browse/OCPBUGS-67885): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#325](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/325)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5d5105f93e02ba0c4c07890b3db630b11d839abf...6593723fbb3189b25df4634e3b75bb02b5b9e611)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/47656bdd6f3f58168e79aa6f8a7141f64c8a456b)

* [OCPBUGS-102657](https://issues.redhat.com/browse/OCPBUGS-102657): Bump golang.org/x/net to v0.35.0-sec.4 [#237](https://github.com/openshift/vsphere-problem-detector/pull/237)
* [OCPBUGS-67891](https://issues.redhat.com/browse/OCPBUGS-67891): bump github.com/sirupsen/logrus to v1.9.3 [#202](https://github.com/openshift/vsphere-problem-detector/pull/202)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a9c08425f59d37495d655ee16d4fc7fa200a5ea8...47656bdd6f3f58168e79aa6f8a7141f64c8a456b)