# 4.15.63

Created: 2026-04-23 09:44:16 +0000 UTC

Image Digest: `sha256:244f3af7f15fb151cc1f1b8f464240ea0e376a6706ce1d3458bb78914ae553f7`


## Changes from 4.15.45

### Components

* Kubernetes 1.28.15
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202501281917-0 to 415.92.202604080121-0


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [33b7d855](https://github.com/openshift/agent-installer-utils/commit/33b7d855fdebd24a972f32dafafd29e40b117e46) `sha256:4067caf59cdb7aeec25e5b1a9011ef2628bfe801293e0b271318e9a36f3a945d`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [abf4fa96](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/abf4fa96550caf09e788b66fc06f1df802768397) `sha256:8123a5380b81c71de691f9814118fd5c9bd07260dbfb037d62c9d121f45d9324`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [41b367ae](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/41b367ae3bb6de9292539c0ecd98c81c5edc8294) `sha256:19f833d17adb2a071bda8f8febbf50149a1619c05271db0179010529ad608ee2`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [f7f5eed8](https://github.com/openshift/cluster-api-provider-alibaba/commit/f7f5eed811b33b9beee1ed6a34f956449fbf7fc7) `sha256:4cd74ccff9cf2af567c78894d402db9c4b23f96e30ccf6f625c2f910ad2fe6a3`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [adccbd5c](https://github.com/openshift/apiserver-network-proxy/commit/adccbd5c16daecfe861fa530acdcbba5ec682a3a) `sha256:b06f49af123f31f74b206f2cdeb082604a7e94ef6e2a00a08469c05889754bb7`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [fd77d92c](https://github.com/openshift/cloud-provider-aws/commit/fd77d92ced47559dadf53fb8c97d1cbeb64dde8c) `sha256:99c93f03ffac8f9874dea33b62787082e5179a990c66bb65dd1ad5cd53e8c651`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [7043c1cc](https://github.com/openshift/aws-ebs-csi-driver/commit/7043c1cca6e17dd3c90006140f6361cf0e776d69) `sha256:b8614177aa1723acd11a0e8d7d934a49e5df6d57ed75f082fdf0a7a1987a2fc9`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [13385034](https://github.com/openshift/aws-pod-identity-webhook/commit/13385034ec9a843a6b40f8b3aec9966ada785115) `sha256:305f15f151e9117c5794d0fd1d55dcd7737e5b3f75bd79e9313d3308f8f2399c`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [0d799a26](https://github.com/openshift/cloud-provider-azure/commit/0d799a261f70bbdf546d911f5f8b59e2c324bd16) `sha256:55c81e9ba738c30a8fa9ded19cd202fccfb8e1bb04a9fc31d426d65a43facd84`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [0d799a26](https://github.com/openshift/cloud-provider-azure/commit/0d799a261f70bbdf546d911f5f8b59e2c324bd16) `sha256:8f11eca9bd3189079b8a6b1c670c4e7ac4908517502cb5b6fbeab29bd07cbbf0`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [dcb7e1c7](https://github.com/openshift/azure-disk-csi-driver/commit/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d) `sha256:1f1fd92f5cf27e169e247c12ebe2bb90ad816523cd819fb7729a7abb4087b807`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [160cf624](https://github.com/openshift/azure-disk-csi-driver-operator/commit/160cf624a88f500de7a1f79e6dd9384bb7d17842) `sha256:1b111eaf6d0ef22d300bf0833857de87bcbf7f39d707f54885b4317eeffb90ae`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [1fbb2c0c](https://github.com/openshift/baremetal-runtimecfg/commit/1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c) `sha256:678bce7a1b56500a7b0bc4ed3acc602366e7cdcbe81917dff26064efc3d1c0cc`
* [cli](https://github.com/openshift/oc) git [82316376](https://github.com/openshift/oc/commit/82316376e25f6453b58258df6bf1e11ec4abb670) `sha256:f93b3ae5bc09f8151d3459ff9bb03024e3855305a2cb3c05a8ab594b65293e7a`
* [cli-artifacts](https://github.com/openshift/oc) git [82316376](https://github.com/openshift/oc/commit/82316376e25f6453b58258df6bf1e11ec4abb670) `sha256:586d00953976f5c1e821dd16a75e560d42bdc46c64c96e98f8236e3b238e896c`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [6864da06](https://github.com/openshift/cloud-network-config-controller/commit/6864da0642026d6004df171539fa9fd5bcb6c2df) `sha256:75690e02a1f92efa6dcfaa7d8cb5ca1e3d190639207c861b38970eabf0488df8`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [7aaa40eb](https://github.com/openshift/cluster-authentication-operator/commit/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1) `sha256:f82b474c6fefbf2b24c015481ac2165b6b304ba7fb234b83e594cfba5615e8ce`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [89149896](https://github.com/openshift/kubernetes-autoscaler/commit/89149896bc6a3d02ebf117c61d5e9ea50ad73129) `sha256:225859d218ae2007cc7fc9a729f5ac9e5c63b483ebd60306d34ba690e6921d0b`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [8425d88b](https://github.com/openshift/cluster-autoscaler-operator/commit/8425d88b5bedd5d22acfb0f6c0edf929ec401288) `sha256:e064f9f79936a75b8cb8211a7f159bf8001760067417bf516d12d36ce4a5f362`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [0849c462](https://github.com/openshift/cluster-bootstrap/commit/0849c462de13b9a5765b9a8c882acb9e6e8bf39e) `sha256:edd2c60a32e8d26a7aae6dd9817ecb84096c285d976dec4e1effcfa6a3990191`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [2053e13c](https://github.com/openshift/cluster-api/commit/2053e13cb0fda9188e9b685db83c1e1f492e6efa) `sha256:2196ad731c826530f35034c79fa55496987e38a13b0a3edda4a6a8ca453c5329`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [203435ef](https://github.com/openshift/cluster-capi-operator/commit/203435ef87a2bed13fc43db893deb8bee1dff97f) `sha256:7fc5825eb83c8f9774d9846be89da952be47a39c2f8f7a5b3b7814a75078f260`
* [cluster-config-api](https://github.com/openshift/api) git [0a58f8c3](https://github.com/openshift/api/commit/0a58f8c30a8c309baaa4aecd05580039b4d3888b) `sha256:250fe5fa6c17bb9e4f842e388ab0eb7890571f1b520fdb1753af9038fbe5b989`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0b4c69fd](https://github.com/openshift/cluster-config-operator/commit/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818) `sha256:d57b89694d7d55c43b09e8e52ebe55a9b9c3421888312adfe5bc5b37c6a339ea`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [e1b692b1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/e1b692b1e9552db95c17f6a03b41d258237ab480) `sha256:e9f01e744d8c3c647cf59f90d0e72a2490986f3a6a78f44874102b582eedfe75`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [65dbb12b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/65dbb12b710b7126f662f5f7f2d8272f9f6868cc) `sha256:d0b8eabbb1ae6e57841d2065eeb0dd710a650943cdeec60149813afa69b887e1`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [128d8e08](https://github.com/openshift/cluster-api-operator/commit/128d8e08c48e2002c416e84d0dec816bf5999c7e) `sha256:a672a91631f0fbf215bde2d7d77d009eab30641c80685c06145f366e5d0bef04`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [863813ec](https://github.com/openshift/cluster-machine-approver/commit/863813ecd7b4c1416e76120896add365c492a59e) `sha256:eca669999b98f176759e157ea4962bf70ba7bf53e4db54a8965531be7a520a33`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [e828bd93](https://github.com/openshift/cluster-node-tuning-operator/commit/e828bd93defc0cc9c3fcf799d9715b95b2c03f79) `sha256:c2b3f28143321bdabd1aef8336928ed7d1481c96fc220f427f6e68e8aa0d6e66`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [a7ba8987](https://github.com/openshift/cluster-olm-operator/commit/a7ba89874970cd10765e1d0753405e32fb357d84) `sha256:c68de0a0848e7f961054ee2dea869ed4059757ba375c91d07ef0927449fddad8`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [1ae0ba75](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/1ae0ba75cfdb910990437ab2898690b9e3f8f94a) `sha256:5f65281001f896bb501f87ccc5286f9ee51f43f9ca2b731a6e6a557c46569a06`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [37a0a919](https://github.com/openshift/platform-operators/commit/37a0a919b1032f7affa49b756eda4762d77751d5) `sha256:35c6b3998bd8bbe629194c55826027b04b9eb215ef7d45dd62f058ea9c92ecce`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cc48f315](https://github.com/openshift/cluster-policy-controller/commit/cc48f3152213bfe6e42fdd82f760246e862d208f) `sha256:177a1d0618cd1df0e13349f9ec4b8c9b8d313a483a7b8ad3e1295af74b985261`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [802233d8](https://github.com/openshift/cluster-update-keys/commit/802233d84243d3eeceef50a29579501e94ebbf26) `sha256:bac19481b117f901d2fb6282a53d72f2228b58828ebac8360ac261dd13fc2d27`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [617398f5](https://github.com/openshift/configmap-reload/commit/617398f581faadbad2c7ded993bfa3169a87b6ab) `sha256:ced858069033fbfd887891091fddc44088e974d813d8a1a86cd51d76ffa5eeb2`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [d032dc10](https://github.com/openshift/csi-driver-nfs/commit/d032dc1050b58a965e6bb9f923baef6d3c95538e) `sha256:7dc314fda0c96e94cf643579c0f28eadc42a3b18ed35ed3432eada05abdc78d9`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:add7189a7d4768537bfc14eb7632dffb0c2a8a4d07f1c7fbee4c4c5ac30d6df2`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [8d017b7f](https://github.com/openshift/csi-driver-shared-resource-operator/commit/8d017b7f19f0226dfd4fc7933271939c550d180f) `sha256:7896fae1754fe65cf48520aad2ed5cdb4d98df4e445c36f8f2a68616702636e0`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:7064904f2a543daea61ff83e32a2ca8f45e64c349849edb3dfa60c64dd84e685`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f806f266](https://github.com/openshift/csi-external-attacher/commit/f806f266600fbc0db4d072e4d041fc80e28deee7) `sha256:c942c4fe82a88ee726df3364365beeb4003710536396a4fe0ce0f76c048fc01c`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [ce5a1a33](https://github.com/openshift/csi-external-provisioner/commit/ce5a1a33fadf10bba0c90510c09dfc879dcfec87) `sha256:770b0ad22bbc28ea19ab6758a467f8e474f7c4203db0f5e38475faa6b6398423`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [3b4236d3](https://github.com/openshift/csi-external-resizer/commit/3b4236d382e4593ca41ecc6f394775be467b1a0d) `sha256:db751e6054e6ab0e22c7b3bb6dc68d7b336717472ca8c7385284189f5824f948`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:17f946b4805be3dc232b993306136d921cb03be787a3df4a21b6165ce25aadcf`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [240bb8c0](https://github.com/openshift/csi-livenessprobe/commit/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3) `sha256:9b072929e5760e3b674a146a1dc267b54285e306653547bd08e30b0f58e9772a`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9005584e](https://github.com/openshift/csi-node-driver-registrar/commit/9005584ee45c4d3158e383870aafa5d78a03b141) `sha256:b1a547dfe4c31a5e280426ee0c261fe4b9b3ca90b026fe8c7d8566e6c5446399`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:864e2315925ca603b6e4b0c6f47580776143fb16c81e4709cb2896dc8636527d`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:c7aa1d7512f624e8bc5ad310a27eaeb7676bf7348e7490d2be31cd59264d11c0`
* [deployer](https://github.com/openshift/oc) git [82316376](https://github.com/openshift/oc/commit/82316376e25f6453b58258df6bf1e11ec4abb670) `sha256:21c847b74ee5272028bb896181d73bdb5fdb859587299345d5532d0b24451b5f`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7a448c2e](https://github.com/openshift/driver-toolkit/commit/7a448c2ee026c772e293dd344da587493c859f82) `sha256:81a36c9e3b3c957b24b55dfa60fb50e117610c28a66caf0eefabd56659d944a9`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [f8ec690b](https://github.com/openshift/egress-router-cni/commit/f8ec690bc12a13ec7c9c45f0e3696ad02e143581) `sha256:ffb7c49b602fdcf92f92d53521d155edcf13b9a0c074d9ed2f66308f6199f9ac`
* [etcd](https://github.com/openshift/etcd) git [a7005ef1](https://github.com/openshift/etcd/commit/a7005ef1eae85eec6c59411860538169cea182fd) `sha256:4d4dff0c9549a6db109bb6a0ee0e0941c64956716d8084f85d34142c758ed9af`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [fc50272a](https://github.com/openshift/cloud-provider-gcp/commit/fc50272ac32348a96455688c470bf256b1042825) `sha256:5d58936ec6cfaecacf29276b1f3ff1c22dfba0d0e42f8d5e34831b8453c04805`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [cc0d5415](https://github.com/openshift/cloud-provider-ibm/commit/cc0d54159c5d626aaa91eef94a92a80b3d1a3870) `sha256:45b6a99f5d5e6a9356780c92a2c30d58dd1064c2dba3b5637cc1b65029b7c786`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [6846b9a7](https://github.com/openshift/machine-api-provider-ibmcloud/commit/6846b9a79e2f2dfc39061fe7625202db30a9a6b4) `sha256:e61674b576a558b67dd4d5e33ab875cb90a0dac33e70e496750d34a105a93dbb`
* [insights-operator](https://github.com/openshift/insights-operator) git [975bba98](https://github.com/openshift/insights-operator/commit/975bba9802ebd6c0f1e52117584b82c38831eda8) `sha256:4ac8f014e6e455568ccca457ecf7229ddee5efb1b0bbc234769903f492fd6455`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [bcbcd95b](https://github.com/openshift/ironic-rhcos-downloader/commit/bcbcd95b6209afc8248b34c55294686dbd3831a3) `sha256:67e875202d4ceb2ace39002a5a67b14e254638da8070d4fef270b5902457ae59`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [34e20193](https://github.com/openshift/k8s-prometheus-adapter/commit/34e201936898455995cd60c6699c6329a696f288) `sha256:dae4b1e037aa778e109e951aa4c87305f5bb9a6eed49236cdac9cacf2bc87c12`
* [keepalived-ipfailover](https://github.com/openshift/images) git [87c23b5a](https://github.com/openshift/images/commit/87c23b5aa611556ff5013822c7779e6c7551a0f0) `sha256:234c82fd34ae068e09851e7f5cb4f5633a3b6eba8a1433549f973c0ec18aa922`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [bcbf241c](https://github.com/openshift/kubernetes-metrics-server/commit/bcbf241cece8ef455be32a910f1570bae827b4a1) `sha256:b20b151c7013670b23e3a9a2c8815ba83b32604aa96239fc16efa052a7e88bf1`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [9308e7f2](https://github.com/openshift/kube-rbac-proxy/commit/9308e7f2a6d984fa7b8ddc125524d7b7356f92ce) `sha256:ed35d01005aa3509b3748fe6091985bac2555b93cc848837b1a8635d23729483`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [037b59c2](https://github.com/openshift/kube-state-metrics/commit/037b59c265454c599dfb0829a856e14b1ab07896) `sha256:c0d37a923aab82f527a4077583417236a41af39e8ba356b72bbd415860136d59`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [dbaf9ea1](https://github.com/openshift/cloud-provider-kubevirt/commit/dbaf9ea1edd5a953606a80cb45f723c934a73ded) `sha256:5a1781df6ae9ff2b6066fac8cf6332424cfd31f5f19addb08ee4e92b02b0abb9`
* machine-os-content `sha256:00829e7ac2c5dbf2abd95e29b24ec441ffc12df209bbdc13357ab45dc5a10c11`
* [multus-cni](https://github.com/openshift/multus-cni) git [05497ad1](https://github.com/openshift/multus-cni/commit/05497ad135c629de9b4ffb0a13fb91d58a335d25) `sha256:7c482b8bd7e66f28ed9dd372722f50e595ec26929698a50221ce4f75da4c1751`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [b377b4b5](https://github.com/openshift/multus-networkpolicy/commit/b377b4b5fd3029cd5cabc773ca6223cabd6b2af7) `sha256:d1314e7865c8c8f15b1fbbac694ebfd552c1ece4b280255486c266bf58e50917`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1ccafc34](https://github.com/openshift/route-override-cni/commit/1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee) `sha256:77b58126b628acd5f06c2a3db0ae87bb0a1b6a88d807c21fc42fbfa40da03fdf`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f91decaa](https://github.com/openshift/bond-cni/commit/f91decaa10cfa233c9e680c96ec7ae642e30a03c) `sha256:215f1b9eeb7f535c3e4bcdcae0fb3b6c275f9b44fe9800c0114c36a4bd161c6d`
* [network-tools](https://github.com/openshift/network-tools) git [17536c8d](https://github.com/openshift/network-tools/commit/17536c8dff76d50efb604187ba763020bd084771) `sha256:b99d5e7b78dcdb4900e836874bfb9a4655cd0cc4dfe1b77ecc264347f7190956`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [040d4e01](https://github.com/openshift/cloud-provider-nutanix/commit/040d4e016058c188d2ba0a7575054ee44b94af9e) `sha256:44aac1d03918d16e1aaa5f2ae77a3571e7abf27e2bd518d17881e68206723abc`
* [oauth-server](https://github.com/openshift/oauth-server) git [c055dbb9](https://github.com/openshift/oauth-server/commit/c055dbb9a84e04575ade106e9a43cc638a8aeaef) `sha256:7dc05ef33648105cc8ff0d553bfaf1d96e669f1243e3b3af2df405a81bfb0400`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [035d3835](https://github.com/openshift/operator-framework-catalogd/commit/035d3835e581bee8ba59ec8919b43c8d7ce4ecfd) `sha256:035b072b08a654151824d0853356b0983863d30c49d5def140d0be29d7b3abb1`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [303b954f](https://github.com/openshift/operator-framework-operator-controller/commit/303b954fa5a92e810aebbe55ab8fafe8dbc06c58) `sha256:fd8c4e75dc2c97da3382b2d70d2637118588cd6799e1026e8439b27eebe49eef`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [5b09cd44](https://github.com/openshift/operator-framework-rukpak/commit/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) `sha256:2fc0933c1048390a9607acd346f1ed7e5ba95a07ec3beda7db7aa9a9fbd11671`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1915f645](https://github.com/openshift/openshift-state-metrics/commit/1915f64591a18c11138d10c00c50b3f5cff632ce) `sha256:8c983198805367621c590d17e0ccf806b9a337f4a7c739bf9ce2dd7a15a66ac5`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [232472ea](https://github.com/openshift/cluster-api-provider-openstack/commit/232472ea527aa86764d93e77dc67b0c7db9cc050) `sha256:df19a05baedeca7a89b1c8ddfc24b6019edbec2cc69e9c1b347f1f7333706e81`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [b8d25ad6](https://github.com/openshift/ovirt-csi-driver/commit/b8d25ad6d140a198e96527b46a9dbde65aae41ce) `sha256:60cd415e3f5e86475932b50904d7260f96513f349e772d1981db567e88e76a6c`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [38bee567](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/38bee567a703d3d5ab2ca6e1e047eea8e799c3c5) `sha256:9c4020b4fcfe1a469bfafde500fa73f3abd22f370893645f0ed9f6e4b2f1b563`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [1d6a7ed9](https://github.com/openshift/cloud-provider-powervs/commit/1d6a7ed991427b1c8048b0b44b706228e5c2a001) `sha256:5f70b689702544f01e3d0e23078cb2ada6c448ff3326bf689bdf1051bee14872`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f3f1f5d1](https://github.com/openshift/prom-label-proxy/commit/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4) `sha256:82fdfd9195d6cfbd02395667196e83a87ad4b0f32ba1691ebac9728310660abc`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [902436ac](https://github.com/openshift/prometheus-operator/commit/902436ac6a8eec8f2f3f8b91f519a3d319924833) `sha256:928553c2f9e73fca75c65858fa7f03dbada109d09e7eec00dd25cdec4b79cbab`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [aed837c3](https://github.com/openshift/node_exporter/commit/aed837c322b6eb54d88956acada07b5b390b5c25) `sha256:fb8eef2173a26ebf6290f74ae723e89bde14543f48d8306ade5b61f94c83ce5d`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [902436ac](https://github.com/openshift/prometheus-operator/commit/902436ac6a8eec8f2f3f8b91f519a3d319924833) `sha256:ea4f3277a0c5d78e521205ab2e79c41a444273483db0d8e901a60cf16a968181`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [902436ac](https://github.com/openshift/prometheus-operator/commit/902436ac6a8eec8f2f3f8b91f519a3d319924833) `sha256:3580b1d349bc8e6a55af9fdfa7905cd031487cc58923ea0b6c66e2a20263e09a`
* rhel-coreos `sha256:545aa0e81161643e59833fff1f68b0b93d41a715a73ff93ac72ebba38185a07e`
* rhel-coreos-extensions `sha256:d7064c4b578779e2c01ce49d3c9a8ea81b63a9dd75a1f3418fa588775f2063d8`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [c5cc7a73](https://github.com/openshift/route-controller-manager/commit/c5cc7a73705e4086759e2a36811b055b7716def4) `sha256:0d55c41282068f7d92943364afcd32f0a1da54643ce3d96c4ff09d28a1895442`
* [telemeter](https://github.com/openshift/telemeter) git [14489f7d](https://github.com/openshift/telemeter/commit/14489f7dc656175e11a3ef962fcbcd113b3651a9) `sha256:806c94f774012734be31eeb4bb731e8720329f6c1ae60bc834302252e70185b3`
* [thanos](https://github.com/openshift/thanos) git [66161ad4](https://github.com/openshift/thanos/commit/66161ad4e03e5593f5a3a33aaaffbcd41555d62a) `sha256:def23f0cb808d7e3af4ecc19549a91ee463fffe043d7eb34a9b0ff592f3edbf6`
* [tools](https://github.com/openshift/oc) git [82316376](https://github.com/openshift/oc/commit/82316376e25f6453b58258df6bf1e11ec4abb670) `sha256:2f7907b63e79913f4784bf80ab071adb5efdbf2ff599a68988d54a38b625879d`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b7cfbf8fa8d25329ab1e4e46571e4c4bbdfdc1b2)

* [OCPBUGS-58633](https://issues.redhat.com/browse/OCPBUGS-58633), [OCPBUGS-58638](https://issues.redhat.com/browse/OCPBUGS-58638): Bump glog to v1.2.5 in release-4.15 (#7905) [#7905](https://github.com/openshift/assisted-service/pull/7905)
* [OCPBUGS-54402](https://issues.redhat.com/browse/OCPBUGS-54402): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) [#7487](https://github.com/openshift/assisted-service/pull/7487)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0633fcd67ab72c54049724df0de04838b5044e2e...b7cfbf8fa8d25329ab1e4e46571e4c4bbdfdc1b2)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/f0b1275e58633382222af71a6cac527e6f8cec24)

* [OCPBUGS-58643](https://issues.redhat.com/browse/OCPBUGS-58643): Bump github.com/golang/glog pkg version to 1.2.4 (#1189) [#1189](https://github.com/openshift/assisted-installer/pull/1189)
* [OCPBUGS-53714](https://issues.redhat.com/browse/OCPBUGS-53714): Bump jwt to 4.5.2 in release-4.15 (#1092) [#1092](https://github.com/openshift/assisted-installer/pull/1092)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/1370ce1c7ac16ec7f31cff32581ffcb98fc91ad8...f0b1275e58633382222af71a6cac527e6f8cec24)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/051696d004b70c305a2feb80fe6ea4f35f7a1b09)

* run go mod tidy / vendor [#1020](https://github.com/openshift/assisted-installer-agent/pull/1020)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/c6bf88e0a099b0d66f071fd671def4dbd7757839...051696d004b70c305a2feb80fe6ea4f35f7a1b09)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/4fb95a28e02d9f080ca41caa209896c1c5f9a563)

* [OCPBUGS-67910](https://issues.redhat.com/browse/OCPBUGS-67910): Bump github.com/sirupsen/logrus to v1.8.3 [#47](https://github.com/openshift/alibaba-cloud-csi-driver/pull/47)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/be4888d3dc176b9801364981fbb34d831f6d6ffe...4fb95a28e02d9f080ca41caa209896c1c5f9a563)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5c673e1d6207e934a4e27da1ef165ddf03bf6a1a)

* [OCPBUGS-78228](https://issues.redhat.com/browse/OCPBUGS-78228): [release-4.15] hermetic 4.15 [#592](https://github.com/openshift/cluster-api-provider-aws/pull/592)
* [OCPBUGS-61943](https://issues.redhat.com/browse/OCPBUGS-61943): UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#573](https://github.com/openshift/cluster-api-provider-aws/pull/573)
* [OCPBUGS-58668](https://issues.redhat.com/browse/OCPBUGS-58668), [OCPBUGS-58673](https://issues.redhat.com/browse/OCPBUGS-58673): bump github.com/golang/glog to v1.2.5 [#562](https://github.com/openshift/cluster-api-provider-aws/pull/562)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/7f00d2cde7a40b8438c5e0d5e64a4d15a035883a...5c673e1d6207e934a4e27da1ef165ddf03bf6a1a)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/242c3b9ba85478220ecf75a0a91d5c061615029c)

* [OCPBUGS-67913](https://issues.redhat.com/browse/OCPBUGS-67913): Bumped logrus to 1.9.3 [#492](https://github.com/openshift/csi-operator/pull/492)
* [Full changelog](https://github.com/openshift/csi-operator/compare/2a2b9dd109ba9d4abce11411c96787b21887f929...242c3b9ba85478220ecf75a0a91d5c061615029c)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/fb9a59a0f7636ffece8cc585f5ab8844e67cd198)

* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): client: re-use a single file for building the session instead of randomly named files [#153](https://github.com/openshift/machine-api-provider-aws/pull/153)
* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): revert: client: re-use a single file for building the session instead of randomly named files [#150](https://github.com/openshift/machine-api-provider-aws/pull/150)
* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): client: re-use a single file for building the session instead of randomly named files [#143](https://github.com/openshift/machine-api-provider-aws/pull/143)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/2a29507984be7dc56553fdcb7cbd80d3f102117e...fb9a59a0f7636ffece8cc585f5ab8844e67cd198)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/7896f4a94ae32cf038daa77e255ec207832c1081)

* [OCPBUGS-78177](https://issues.redhat.com/browse/OCPBUGS-78177): [release-4.15] update go mod dependency for konflux [#365](https://github.com/openshift/cluster-api-provider-azure/pull/365)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/44832d2da09778d7ff4d2413c9e10852f330a55d...7896f4a94ae32cf038daa77e255ec207832c1081)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/491c4df6880bf450a854b8e003e10d880d7e8550)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Regenerate go.mod to fix build failure [#94](https://github.com/openshift/azure-file-csi-driver/pull/94)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/bcf919dc0467f84192758155aac4976df5054da6...491c4df6880bf450a854b8e003e10d880d7e8550)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/ef087772a9ed3299d776c28be78f8017762bcd08)

* [OCPBUGS-67918](https://issues.redhat.com/browse/OCPBUGS-67918): Bump github.com/sirupsen/logrus to v1.9.3 [#113](https://github.com/openshift/azure-file-csi-driver-operator/pull/113)
* [OCPBUGS-60544](https://issues.redhat.com/browse/OCPBUGS-60544): add tag matching to Azure File storage class [#110](https://github.com/openshift/azure-file-csi-driver-operator/pull/110)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/367c4e45899033f7fb7494c0004b83157b6723aa...ef087772a9ed3299d776c28be78f8017762bcd08)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/9f1015edb8cb141cd6aaff2de7894f32336719c8)

* [OCPBUGS-56657](https://issues.redhat.com/browse/OCPBUGS-56657): Fix failure when attempting to modify immutable availabilitySet [#150](https://github.com/openshift/machine-api-provider-azure/pull/150)
* [OCPBUGS-53226](https://issues.redhat.com/browse/OCPBUGS-53226): dynamically setting the amount of fault domains [#134](https://github.com/openshift/machine-api-provider-azure/pull/134)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/615b457bcfa1a40e7900585154952aac8194bed4...9f1015edb8cb141cd6aaff2de7894f32336719c8)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/5db478a9876556666b10f135487a2fd9f82e8653)

* [OCPBUGS-53794](https://issues.redhat.com/browse/OCPBUGS-53794): github.com/golang-jwt/jwt/v4 v4.5.2 [#34](https://github.com/openshift/azure-workload-identity/pull/34)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/2333b7fae0592ae26d77cbac49ce23e7fbaa00b1...5db478a9876556666b10f135487a2fd9f82e8653)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/83c823bf5cb70c42dcbbc93306a570759ac6aaf8)

* [OCPBUGS-79036](https://issues.redhat.com/browse/OCPBUGS-79036): Azure UPI ARM template: use storageAccountId [#10418](https://github.com/openshift/installer/pull/10418)
* [OCPBUGS-76929](https://issues.redhat.com/browse/OCPBUGS-76929): terraform/provider/google: Fixing GCP inconsistencies present with the service account creation [#10316](https://github.com/openshift/installer/pull/10316)
* [OCPBUGS-42554](https://issues.redhat.com/browse/OCPBUGS-42554): only allow a single network in failure domain topology [#9060](https://github.com/openshift/installer/pull/9060)
* [OCPBUGS-62849](https://issues.redhat.com/browse/OCPBUGS-62849): Release 4.15 bump terraform provider azurerm [#10007](https://github.com/openshift/installer/pull/10007)
* [OCPBUGS-62410](https://issues.redhat.com/browse/OCPBUGS-62410): Make swift containers removal not fatal for UPI. [#9978](https://github.com/openshift/installer/pull/9978)
* [OCPBUGS-60497](https://issues.redhat.com/browse/OCPBUGS-60497): update resolv.conf every time on bootstrap node [#9885](https://github.com/openshift/installer/pull/9885)
* [OCPBUGS-39416](https://issues.redhat.com/browse/OCPBUGS-39416): OpenStack: Install CI dependencies from rpm [#9103](https://github.com/openshift/installer/pull/9103)
* [OCPBUGS-54353](https://issues.redhat.com/browse/OCPBUGS-54353): aws/edge/byovpc: tag edge subnets with shared value [#9612](https://github.com/openshift/installer/pull/9612)
* [OCPBUGS-54367](https://issues.redhat.com/browse/OCPBUGS-54367): IBMCloud: Move to IBM TF openshift fork [#9614](https://github.com/openshift/installer/pull/9614)
* [OCPBUGS-45961](https://issues.redhat.com/browse/OCPBUGS-45961): Update upi references to api-internal [#9298](https://github.com/openshift/installer/pull/9298)
* [OCPBUGS-50994](https://issues.redhat.com/browse/OCPBUGS-50994): Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation [#9509](https://github.com/openshift/installer/pull/9509)
* [OCPBUGS-41815](https://issues.redhat.com/browse/OCPBUGS-41815): Validate MTU for custom network [#9294](https://github.com/openshift/installer/pull/9294)
* [OCPBUGS-28706](https://issues.redhat.com/browse/OCPBUGS-28706): [azure] update tested x86 instance type on 4.15 [#7966](https://github.com/openshift/installer/pull/7966)
* [OCPBUGS-47716](https://issues.redhat.com/browse/OCPBUGS-47716): [release-4.15] Power VS: Create region-zone-sysType hierarchy [#9340](https://github.com/openshift/installer/pull/9340)
* [Full changelog](https://github.com/openshift/installer/compare/b097fc8d9f762277357589aa75e6ebd5bfee94e7...83c823bf5cb70c42dcbbc93306a570759ac6aaf8)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/abd5d24efd670cfb719757c0d5af3409ee3c0058)

* [OCPBUGS-78100](https://issues.redhat.com/browse/OCPBUGS-78100): [release-4.15] fix vendor/ for hermetic migration [#244](https://github.com/openshift/cluster-api-provider-baremetal/pull/244)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/ec953728a15f32d551ee34233192324c8a276172...abd5d24efd670cfb719757c0d5af3409ee3c0058)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/880ee0500b561ac9d0dc70d88c3f2fdfa4c7edee)

* [OCPBUGS-53336](https://issues.redhat.com/browse/OCPBUGS-53336): BMO can expose any secret via BMCEventSubscription CRD [#408](https://github.com/openshift/baremetal-operator/pull/408)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/62a7d56e20785c3f4cf02cb2511270a7aa32deea...880ee0500b561ac9d0dc70d88c3f2fdfa4c7edee)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/cffd42537ac64a3936a12de001db938d0904126e)

* [OCPBUGS-60974](https://issues.redhat.com/browse/OCPBUGS-60974): ccoctl: aws to use proper issuer url on subsequent runs [#910](https://github.com/openshift/cloud-credential-operator/pull/910)
* [OCPBUGS-58678](https://issues.redhat.com/browse/OCPBUGS-58678): github.com/golang/glog v1.2.5 [#894](https://github.com/openshift/cloud-credential-operator/pull/894)
* [OCPBUGS-53417](https://issues.redhat.com/browse/OCPBUGS-53417): github.com/golang/glog v1.2.4 [#844](https://github.com/openshift/cloud-credential-operator/pull/844)
* [OCPBUGS-53818](https://issues.redhat.com/browse/OCPBUGS-53818): update github.com/golang-jwt/jwt [#840](https://github.com/openshift/cloud-credential-operator/pull/840)
* [OCPBUGS-51540](https://issues.redhat.com/browse/OCPBUGS-51540): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#833](https://github.com/openshift/cloud-credential-operator/pull/833)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/e4c38ac50c6b4033155d7d83d7f22ac36bfc789e...cffd42537ac64a3936a12de001db938d0904126e)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/9508bd334d661b6e8e76d452082f9a6f822a7739)

* [OCPBUGS-77448](https://issues.redhat.com/browse/OCPBUGS-77448): Bump github.com/go-errors/errors to v1.5.1 [#563](https://github.com/openshift/cluster-baremetal-operator/pull/563)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/6e850eedbb24f90b67a08ed29af62f353a621d9d...9508bd334d661b6e8e76d452082f9a6f822a7739)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/445ccbfe8aba60c99931701d7728ae7ee012eba8)

* [OCPBUGS-63169](https://issues.redhat.com/browse/OCPBUGS-63169): ccm: disable unused secure-serving port and webhook [#424](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/424)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/56181136d91dff7bac4aa5acb2c1461381ac6e34...445ccbfe8aba60c99931701d7728ae7ee012eba8)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/73aa60d1fd4e86aed93d67ddac62586ecbb70644)

* [OCPBUGS-52499](https://issues.redhat.com/browse/OCPBUGS-52499): [release-4.15] Add runbook_url for CoreDNSErrorsHigh [#432](https://github.com/openshift/cluster-dns-operator/pull/432)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/49290d7db2194df73dfaeb1e719580dabf166690...73aa60d1fd4e86aed93d67ddac62586ecbb70644)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f1569c6cc1c4e98ee538433416165542acf600a9)

* [OCPBUGS-67931](https://issues.redhat.com/browse/OCPBUGS-67931): Update logrus to 1.9.3 to address CVE-2025-65637 [#1547](https://github.com/openshift/cluster-etcd-operator/pull/1547)
* [OCPBUGS-53506](https://issues.redhat.com/browse/OCPBUGS-53506): fix CVE-2025-30204 [#1404](https://github.com/openshift/cluster-etcd-operator/pull/1404)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b72a596d1f588da8eca821f28f286dfd609691d1...f1569c6cc1c4e98ee538433416165542acf600a9)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/8558f479e1cfc437a898bdf895bfdbd7ae5fb070)

* [OCPBUGS-67932](https://issues.redhat.com/browse/OCPBUGS-67932): Bump logrus to 1.9.1 [#1289](https://github.com/openshift/cluster-image-registry-operator/pull/1289)
* [OCPBUGS-53866](https://issues.redhat.com/browse/OCPBUGS-53866): bump github.com/golang-jwt/jwt [#1220](https://github.com/openshift/cluster-image-registry-operator/pull/1220)
* [OCPBUGS-51596](https://issues.redhat.com/browse/OCPBUGS-51596): bump golang.org/x/oauth2 [#1211](https://github.com/openshift/cluster-image-registry-operator/pull/1211)
* [OCPBUGS-51264](https://issues.redhat.com/browse/OCPBUGS-51264): ensure that storage names don't end in dashes [#1183](https://github.com/openshift/cluster-image-registry-operator/pull/1183)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/6776f554e8b0664f6e7f54abc4a2c03f42a2a378...8558f479e1cfc437a898bdf895bfdbd7ae5fb070)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/815632b1ddb29f55ddc7a8fdba63292b4797b3ae)

* [OCPBUGS-49392](https://issues.redhat.com/browse/OCPBUGS-49392): Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 [#1172](https://github.com/openshift/cluster-ingress-operator/pull/1172)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/9e0d092565a4589dbcbafb7b1212651afa6d36fa...815632b1ddb29f55ddc7a8fdba63292b4797b3ae)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9e3f9ec8a3c1c42643af78c61e984d077a692da2)

* [OCPBUGS-67937](https://issues.redhat.com/browse/OCPBUGS-67937): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] [#2044](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2044)
* [OCPBUGS-50661](https://issues.redhat.com/browse/OCPBUGS-50661): Increase waitForFallbackDegradedConditionTimeout [#1806](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1806)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/aabc7863cdbd76f8909a10fbc1be53b032e4ec31...9e3f9ec8a3c1c42643af78c61e984d077a692da2)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/4c1078415f28ca8b9ea051f1a505bee61763ea3c)

* [OCPBUGS-67987](https://issues.redhat.com/browse/OCPBUGS-67987): CVE-2025-65637 openshift4/ose-kube-proxy-rhel9: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] [#910](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/910)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f...4c1078415f28ca8b9ea051f1a505bee61763ea3c)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/183510ee50bb135bfe685bf40b3a7d6aecad27fe)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#625](https://github.com/openshift/cluster-kube-scheduler-operator/pull/625)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/f054dfaf189b43b262c11ef7f97038c79592c796...183510ee50bb135bfe685bf40b3a7d6aecad27fe)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/acf9540b9d87be60f2bee90d38e06eac674a3e20)

* [OCPBUGS-67942](https://issues.redhat.com/browse/OCPBUGS-67942): Bump github.com/sirupsen/logrus to v1.9.1 [#145](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/145)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e76cea5f52bd5a125d051c6a0da4127a4dae6700...acf9540b9d87be60f2bee90d38e06eac674a3e20)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/93b9d9424899b6215c1915c21ffe4bece71f7ebf)

* [OCPBUGS-66047](https://issues.redhat.com/browse/OCPBUGS-66047): test: remove image registry e2e tests [#2757](https://github.com/openshift/cluster-monitoring-operator/pull/2757)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/0496cad17bd374c56395a63fcae5037e4d5ebe8d...93b9d9424899b6215c1915c21ffe4bece71f7ebf)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fa9184fd3c9053760c7cde923cc9ce2a6a83de55)

* [OCPBUGS-62980](https://issues.redhat.com/browse/OCPBUGS-62980): Update CNO reviewers/approvers [#2817](https://github.com/openshift/cluster-network-operator/pull/2817)
* [OCPBUGS-56649](https://issues.redhat.com/browse/OCPBUGS-56649): Fix live migration with feature migration configured explicitly [#2715](https://github.com/openshift/cluster-network-operator/pull/2715)
* [OCPBUGS-36688](https://issues.redhat.com/browse/OCPBUGS-36688), [OCPBUGS-43099](https://issues.redhat.com/browse/OCPBUGS-43099): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2658](https://github.com/openshift/cluster-network-operator/pull/2658)
* [OCPBUGS-53282](https://issues.redhat.com/browse/OCPBUGS-53282): Not update status.migration of the network.config CR to empty [#2669](https://github.com/openshift/cluster-network-operator/pull/2669)
* [Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status [#2653](https://github.com/openshift/cluster-network-operator/pull/2653)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d69278e76edaa4fcde0c9c78edd686fecad16a95...fa9184fd3c9053760c7cde923cc9ce2a6a83de55)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/031c048d17690cf5601addfe7de3eb6b067fabbd)

* [OCPBUGS-67946](https://issues.redhat.com/browse/OCPBUGS-67946): CVE-2025-65637 -  Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] [#655](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/655)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/078c81f6e3e39675e8b1edd864e1ddf72472bb73...031c048d17690cf5601addfe7de3eb6b067fabbd)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/a01ebb5009c7dd0f0adcd0647660797fb5f3aa74)

* [OCPBUGS-63517](https://issues.redhat.com/browse/OCPBUGS-63517): references to github.com/sclorg/django-ex.git now also refer to the branch [#660](https://github.com/openshift/cluster-samples-operator/pull/660)
* [OCPBUGS-55475](https://issues.redhat.com/browse/OCPBUGS-55475): Adding mutex to func createSamples on handler.go [#634](https://github.com/openshift/cluster-samples-operator/pull/634)
* [OCPBUGS-54481](https://issues.redhat.com/browse/OCPBUGS-54481): add rhdmalone to owners [#623](https://github.com/openshift/cluster-samples-operator/pull/623)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/fbf51ae11681a9c2c0129b6387ee68d1b34ddd90...a01ebb5009c7dd0f0adcd0647660797fb5f3aa74)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/cc5d4c754f99044112c10cc19338c5c3370eaa59)

* [OCPBUGS-67955](https://issues.redhat.com/browse/OCPBUGS-67955): bump github.com/sirupsen/logrus to v1.9.3 [#654](https://github.com/openshift/cluster-storage-operator/pull/654)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/4c2b89d6a00e5a0c300b61dbad2a9e289c404e98...cc5d4c754f99044112c10cc19338c5c3370eaa59)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2cb8ce9ef5c3311be9f1ea266356f1ce95bec1d1)

* [OCPBUGS-50591](https://issues.redhat.com/browse/OCPBUGS-50591): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1152](https://github.com/openshift/cluster-version-operator/pull/1152)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/18c8e15cd85c1a87b449c3bd24f66cb44dfaf427...2cb8ce9ef5c3311be9f1ea266356f1ce95bec1d1)


### [console](https://github.com/openshift/console/tree/d51cb3c3cc31805fe805501518c1bfcb7e92d161)

* [OCPBUGS-76575](https://issues.redhat.com/browse/OCPBUGS-76575): Bump axios [#16033](https://github.com/openshift/console/pull/16033)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16081](https://github.com/openshift/console/pull/16081)
* NO-JIRA: Bump builder image to v29 [#15992](https://github.com/openshift/console/pull/15992)
* [OCPBUGS-74443](https://issues.redhat.com/browse/OCPBUGS-74443): Bump lodash to latest [#15970](https://github.com/openshift/console/pull/15970)
* [OCPBUGS-69767](https://issues.redhat.com/browse/OCPBUGS-69767): Disallowed Pipelines-plugin Pipelines navigation section [#15864](https://github.com/openshift/console/pull/15864)
* [OCPBUGS-65822](https://issues.redhat.com/browse/OCPBUGS-65822): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15749](https://github.com/openshift/console/pull/15749)
* [OCPBUGS-65601](https://issues.redhat.com/browse/OCPBUGS-65601): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15727](https://github.com/openshift/console/pull/15727)
* [OCPBUGS-44159](https://issues.redhat.com/browse/OCPBUGS-44159): bump dompurify to latest [#15592](https://github.com/openshift/console/pull/15592)
* [OCPBUGS-60672](https://issues.redhat.com/browse/OCPBUGS-60672): Secret key with binary file changes when edited via Console [#15422](https://github.com/openshift/console/pull/15422)
* [OCPBUGS-59997](https://issues.redhat.com/browse/OCPBUGS-59997): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15359](https://github.com/openshift/console/pull/15359)
* [OCPBUGS-59564](https://issues.redhat.com/browse/OCPBUGS-59564): Add flags in console static plugin for all the components of this epic [#15306](https://github.com/openshift/console/pull/15306)
* [OCPBUGS-60029](https://issues.redhat.com/browse/OCPBUGS-60029): fix bug where / in console.tab/horizontalNav href brea… [#15353](https://github.com/openshift/console/pull/15353)
* [OCPBUGS-57521](https://issues.redhat.com/browse/OCPBUGS-57521): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15181](https://github.com/openshift/console/pull/15181)
* [OCPBUGS-58223](https://issues.redhat.com/browse/OCPBUGS-58223): Fix TypeError Cannot read properties of null (reading 'metadata') [#15221](https://github.com/openshift/console/pull/15221)
* [OCPBUGS-57097](https://issues.redhat.com/browse/OCPBUGS-57097): Add all files to `vendor` regardless of gitignore [#15134](https://github.com/openshift/console/pull/15134)
* [OCPBUGS-45257](https://issues.redhat.com/browse/OCPBUGS-45257): Enabling topology e2e tests on CI [#14721](https://github.com/openshift/console/pull/14721)
* [OCPBUGS-55733](https://issues.redhat.com/browse/OCPBUGS-55733): fix bug where operator appears twice [#15021](https://github.com/openshift/console/pull/15021)
* [OCPBUGS-55174](https://issues.redhat.com/browse/OCPBUGS-55174): Add missing pipelines plugin name to known plugins [#14982](https://github.com/openshift/console/pull/14982)
* [OCPBUGS-54673](https://issues.redhat.com/browse/OCPBUGS-54673): Added token to proxy header [#14943](https://github.com/openshift/console/pull/14943)
* [OCPBUGS-54252](https://issues.redhat.com/browse/OCPBUGS-54252): Update the monitoring topic used by the console team [#14904](https://github.com/openshift/console/pull/14904)
* [OCPBUGS-53138](https://issues.redhat.com/browse/OCPBUGS-53138): fix run time error when no completed version exists [#14879](https://github.com/openshift/console/pull/14879)
* [OCPBUGS-53055](https://issues.redhat.com/browse/OCPBUGS-53055): Show Observe section without PROMETHEUS and MONITORING flags [#14867](https://github.com/openshift/console/pull/14867)
* [OCPBUGS-52344](https://issues.redhat.com/browse/OCPBUGS-52344): fix alert rule link [#14828](https://github.com/openshift/console/pull/14828)
* [OCPBUGS-51332](https://issues.redhat.com/browse/OCPBUGS-51332): Do not pass CSV name to operand list page when an exen… [#14800](https://github.com/openshift/console/pull/14800)
* [OCPBUGS-49849](https://issues.redhat.com/browse/OCPBUGS-49849): include external labels so silenced alerts not displayed in notifications [#14718](https://github.com/openshift/console/pull/14718)
* [Full changelog](https://github.com/openshift/console/compare/68767b82cf3ef5bc878e14a7a4e6e3de0bbcd9bd...d51cb3c3cc31805fe805501518c1bfcb7e92d161)


### [console-operator](https://github.com/openshift/console-operator/tree/62e16389f77d5f4b9dfab6a9e902f69bfce2ae0d)

* [OCPBUGS-77993](https://issues.redhat.com/browse/OCPBUGS-77993): [release-4.15] hermetic 4.15 [#1130](https://github.com/openshift/console-operator/pull/1130)
* [OCPBUGS-77993](https://issues.redhat.com/browse/OCPBUGS-77993): [release-4.15] NO-JIRA: update go mod dependency for konflux [#1116](https://github.com/openshift/console-operator/pull/1116)
* [Full changelog](https://github.com/openshift/console-operator/compare/91f5c97029199a96764f9af7b4f0f304b441f7bf...62e16389f77d5f4b9dfab6a9e902f69bfce2ae0d)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/bf16e4c1c49319efaa94ccb0ac16dfcdb29dcac6)

* [OCPBUGS-55948](https://issues.redhat.com/browse/OCPBUGS-55948): Check error returned by ipv6 SettleAddresses [#190](https://github.com/openshift/containernetworking-plugins/pull/190)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/b54e81bc320967fef5ccdf71abb019bbf12f3dc5...bf16e4c1c49319efaa94ccb0ac16dfcdb29dcac6)


### [coredns](https://github.com/openshift/coredns/tree/d3a19e6731ea414a520cfad85c11634f4824c895)

* [OCPBUGS-77512](https://issues.redhat.com/browse/OCPBUGS-77512): Modify .gitignore to not exclude vendor build folders [#169](https://github.com/openshift/coredns/pull/169)
* [Full changelog](https://github.com/openshift/coredns/compare/1326282c9e158078634be4261b75ded247d233d7...d3a19e6731ea414a520cfad85c11634f4824c895)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/3cd808550d2eb2749e331be522fe88fb16ba2a6a)

* [OCPBUGS-67958](https://issues.redhat.com/browse/OCPBUGS-67958): fix CVE-2025-65637 [#362](https://github.com/openshift/cloud-provider-openstack/pull/362)
* [OCPBUGS-58885](https://issues.redhat.com/browse/OCPBUGS-58885): CARRY: don't ignore json files [#342](https://github.com/openshift/cloud-provider-openstack/pull/342)
* [OCPBUGS-43375](https://issues.redhat.com/browse/OCPBUGS-43375): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 [#297](https://github.com/openshift/cloud-provider-openstack/pull/297)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/6ab1226a552376801e1f5712e3189a27729a23ed...3cd808550d2eb2749e331be522fe88fb16ba2a6a)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/0b072d27aceb3e2589c962530a02b2de450d5f08)

* [OCPBUGS-67959](https://issues.redhat.com/browse/OCPBUGS-67959): Bump logrus [#252](https://github.com/openshift/csi-driver-manila-operator/pull/252)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/9bcf382eb68d3dd13a553dce41822d24da3870d0...0b072d27aceb3e2589c962530a02b2de450d5f08)


### [docker-builder](https://github.com/openshift/builder/tree/5c5fbe01beb8eb7a82fde14efff6385fed88e72a)

* [OCPBUGS-65960](https://issues.redhat.com/browse/OCPBUGS-65960): BuildConfig inline Dockerfile fails with heredoc syntax [#491](https://github.com/openshift/builder/pull/491)
* [OCPBUGS-58141](https://issues.redhat.com/browse/OCPBUGS-58141): S2I build cpu limits observed by assemble are limited to 1 cpu [#477](https://github.com/openshift/builder/pull/477)
* [OCPBUGS-42917](https://issues.redhat.com/browse/OCPBUGS-42917), [OCPBUGS-43294](https://issues.redhat.com/browse/OCPBUGS-43294): Bump buildah to 1.33.12 [#442](https://github.com/openshift/builder/pull/442)
* [OCPBUGS-43188](https://issues.redhat.com/browse/OCPBUGS-43188): runc library bump to 1.1.12 [#436](https://github.com/openshift/builder/pull/436)
* [Full changelog](https://github.com/openshift/builder/compare/b786d2dfb3211bd1a4457bdd11b60147973d36fb...5c5fbe01beb8eb7a82fde14efff6385fed88e72a)


### [docker-registry](https://github.com/openshift/image-registry/tree/89c03ea33937f22ce59a0b4faff51cff8c237176)

* [OCPBUGS-53650](https://issues.redhat.com/browse/OCPBUGS-53650): bump jwt and oauth dependencies [#433](https://github.com/openshift/image-registry/pull/433)
* [Full changelog](https://github.com/openshift/image-registry/compare/b9de67d83c9f850ed42317495b7b340109b3c9ac...89c03ea33937f22ce59a0b4faff51cff8c237176)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/3a2055f00aa0b2c1960b13639b10603a613eac85)

* [OCPBUGS-78281](https://issues.redhat.com/browse/OCPBUGS-78281): [release-4.15] update go mod dependency for konflux [#268](https://github.com/openshift/cluster-api-provider-gcp/pull/268)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/bad54034ed075b24ee8962661e78cfbd84a7dd0a...3a2055f00aa0b2c1960b13639b10603a613eac85)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/0af06c047e5f751d77056f4ba288edb17e8d92a1)

* [OCPBUGS-55410](https://issues.redhat.com/browse/OCPBUGS-55410), [OCPBUGS-55411](https://issues.redhat.com/browse/OCPBUGS-55411): Disable shielded VMs for non-UEFI disks [#117](https://github.com/openshift/machine-api-provider-gcp/pull/117)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b15daaf5836910277b7154a006800505f018aa5a...0af06c047e5f751d77056f4ba288edb17e8d92a1)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/9016f437233494ce9b224bb1adae6f6e0ac7e102)

* [OCPBUGS-67973](https://issues.redhat.com/browse/OCPBUGS-67973): Update logrus to v1.9.3 [#93](https://github.com/openshift/gcp-pd-csi-driver/pull/93)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/856ee3e23802cd341619cc4fc3181cf6ebbbd548...9016f437233494ce9b224bb1adae6f6e0ac7e102)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/7cec5854d50298a19ae85290fbdbde5a3de6c898)

* [OCPBUGS-67971](https://issues.redhat.com/browse/OCPBUGS-67971): bump github.com/sirupsen/logrus to v1.9.3 [#161](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/161)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/3b91ee310c8a7394ceb2d4de6a51dd18a3800312...7cec5854d50298a19ae85290fbdbde5a3de6c898)


### [haproxy-router](https://github.com/openshift/router/tree/61b6fc9f69a6f7f2baf0e6a980f5f469de8a0be7)

* [OCPBUGS-49392](https://issues.redhat.com/browse/OCPBUGS-49392): Block Upgrades for CA-Signed Certs Using SHA1 [#641](https://github.com/openshift/router/pull/641)
* [Full changelog](https://github.com/openshift/router/compare/dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3...61b6fc9f69a6f7f2baf0e6a980f5f469de8a0be7)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/5cb2ef48f2e7e6cd14abc5e7a5ee90cd25f0d744)

* [OCPBUGS-67902](https://issues.redhat.com/browse/OCPBUGS-67902), [OCPBUGS-67977](https://issues.redhat.com/browse/OCPBUGS-67977): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.15] [#2583](https://github.com/openshift/kubernetes/pull/2583)
* [OCPBUGS-74300](https://issues.redhat.com/browse/OCPBUGS-74300): Skip E2e: attach on previously attached volumes should work [#2569](https://github.com/openshift/kubernetes/pull/2569)
* [OCPBUGS-59147](https://issues.redhat.com/browse/OCPBUGS-59147): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2358](https://github.com/openshift/kubernetes/pull/2358)
* [OCPBUGS-59147](https://issues.redhat.com/browse/OCPBUGS-59147): UPSTREAM: <carry>: disable some legacy cloud provider Azure tests [#2359](https://github.com/openshift/kubernetes/pull/2359)
* [OCPBUGS-52183](https://issues.redhat.com/browse/OCPBUGS-52183): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2227](https://github.com/openshift/kubernetes/pull/2227)
* [OCPBUGS-53139](https://issues.redhat.com/browse/OCPBUGS-53139): UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm [#2244](https://github.com/openshift/kubernetes/pull/2244)
* [Full changelog](https://github.com/openshift/kubernetes/compare/ff493be70058d7324491442be6d57c92cfccb92d...5cb2ef48f2e7e6cd14abc5e7a5ee90cd25f0d744)


### [hypershift](https://github.com/openshift/hypershift/tree/e1d4abe933cb6c8bf1a57ee74e6712924c856678)

* [OCPBUGS-74670](https://issues.redhat.com/browse/OCPBUGS-74670), [OCPBUGS-74671](https://issues.redhat.com/browse/OCPBUGS-74671): Support proxy authentication when user/pass is included in URL [#7606](https://github.com/openshift/hypershift/pull/7606)
* [CNTRLPLANE-1266](https://issues.redhat.com/browse/CNTRLPLANE-1266): Drop extinct mce-2.5 pipeline [#6655](https://github.com/openshift/hypershift/pull/6655)
* [CNTRLPLANE-1232](https://issues.redhat.com/browse/CNTRLPLANE-1232): Move CPO pipeline to hermetic builds [#6601](https://github.com/openshift/hypershift/pull/6601)
* [OCPBUGS-58506](https://issues.redhat.com/browse/OCPBUGS-58506): [release-4.15] Add missing service network DNS entries to KAS cert [#6394](https://github.com/openshift/hypershift/pull/6394)
* [OCPBUGS-57553](https://issues.redhat.com/browse/OCPBUGS-57553): Add proxy variables for the MCD Pod [#6293](https://github.com/openshift/hypershift/pull/6293)
* [OCPBUGS-57121](https://issues.redhat.com/browse/OCPBUGS-57121): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6231](https://github.com/openshift/hypershift/pull/6231)
* [OCPBUGS-46467](https://issues.redhat.com/browse/OCPBUGS-46467): Consistently look up and dial cloud API hostnames [#5300](https://github.com/openshift/hypershift/pull/5300)
* [OCPBUGS-52590](https://issues.redhat.com/browse/OCPBUGS-52590): Honor proxy vars in the util insecure http client [#5791](https://github.com/openshift/hypershift/pull/5791)
* [CNTRLPLANE-920](https://issues.redhat.com/browse/CNTRLPLANE-920): Konflux build pipeline service account migration [#6086](https://github.com/openshift/hypershift/pull/6086)
* [CNTRLPLANE-920](https://issues.redhat.com/browse/CNTRLPLANE-920): Konflux build pipeline service account migration [#6081](https://github.com/openshift/hypershift/pull/6081)
* [OCPBUGS-55266](https://issues.redhat.com/browse/OCPBUGS-55266): [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6070](https://github.com/openshift/hypershift/pull/6070)
* [OCPBUGS-51800](https://issues.redhat.com/browse/OCPBUGS-51800): Fix golang crypto dependency go.mod replacement [#5995](https://github.com/openshift/hypershift/pull/5995)
* [OCPBUGS-53898](https://issues.redhat.com/browse/OCPBUGS-53898): bump golang-jwt v4 and v5 [#5908](https://github.com/openshift/hypershift/pull/5908)
* Red Hat Konflux update control-plane-operator-4-15 [#5955](https://github.com/openshift/hypershift/pull/5955)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5923](https://github.com/openshift/hypershift/pull/5923)
* [OCPBUGS-51729](https://issues.redhat.com/browse/OCPBUGS-51729), [OCPBUGS-51800](https://issues.redhat.com/browse/OCPBUGS-51800): Bump dependencies to OCP fork in backports [#5902](https://github.com/openshift/hypershift/pull/5902)
* [OCPBUGS-50867](https://issues.redhat.com/browse/OCPBUGS-50867): Prevent IgnitionServer from flooding the API server with patch requests [#5633](https://github.com/openshift/hypershift/pull/5633)
* [OCPBUGS-52992](https://issues.redhat.com/browse/OCPBUGS-52992): [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller [#5815](https://github.com/openshift/hypershift/pull/5815)
* [OCPBUGS-52896](https://issues.redhat.com/browse/OCPBUGS-52896): Make managed-trust-bundle optional [#5813](https://github.com/openshift/hypershift/pull/5813)
* [OCPBUGS-50699](https://issues.redhat.com/browse/OCPBUGS-50699): add region to AWS creds passed to operators managed by CPO [#5669](https://github.com/openshift/hypershift/pull/5669)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 [#5729](https://github.com/openshift/hypershift/pull/5729)
* [OCPBUGS-51253](https://issues.redhat.com/browse/OCPBUGS-51253): OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs [#5701](https://github.com/openshift/hypershift/pull/5701)
* [OCPBUGS-52172](https://issues.redhat.com/browse/OCPBUGS-52172): [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5722](https://github.com/openshift/hypershift/pull/5722)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 [#5683](https://github.com/openshift/hypershift/pull/5683)
* chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 [#5624](https://github.com/openshift/hypershift/pull/5624)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5642](https://github.com/openshift/hypershift/pull/5642)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 [#5576](https://github.com/openshift/hypershift/pull/5576)
* NO-JIRA: chore(deps): update konflux references [#5588](https://github.com/openshift/hypershift/pull/5588)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 [#5338](https://github.com/openshift/hypershift/pull/5338)
* NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 [#5589](https://github.com/openshift/hypershift/pull/5589)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 [#5586](https://github.com/openshift/hypershift/pull/5586)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 [#5577](https://github.com/openshift/hypershift/pull/5577)
* [Full changelog](https://github.com/openshift/hypershift/compare/afe9e06a34663e0fa57f407f356a881646467a19...e1d4abe933cb6c8bf1a57ee74e6712924c856678)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/79e28ea988b734f6687464f82156d3d48706e6cb)

* [OCPBUGS-77211](https://issues.redhat.com/browse/OCPBUGS-77211): [release-4.15] standardize build paths [#125](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/125)
* [OCPBUGS-58739](https://issues.redhat.com/browse/OCPBUGS-58739): bump github.com/golang/glog to version v1.2.4 [#107](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/107)
* [OCPBUGS-56064](https://issues.redhat.com/browse/OCPBUGS-56064): tech debt: rework vendor patches [#92](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/92)
* [OCPBUGS-53906](https://issues.redhat.com/browse/OCPBUGS-53906): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#85](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/85)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d...79e28ea988b734f6687464f82156d3d48706e6cb)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/b039b8e368063df3ef5985600250515680f7fa25)

* [OCPBUGS-67980](https://issues.redhat.com/browse/OCPBUGS-67980), [OCPBUGS-67981](https://issues.redhat.com/browse/OCPBUGS-67981): bump github.com/sirupsen/logrus to v1.9.3 [#165](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/165)
* [OCPBUGS-59775](https://issues.redhat.com/browse/OCPBUGS-59775): [IBM VPC] set offlineExpansion to false in e2e test manifest [#150](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/150)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/1c5b0f9fd714a3df22f6f0273aa8479bd37bbe18...b039b8e368063df3ef5985600250515680f7fa25)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/9b13bd4c73e7fa58c109dc3e3b9221773cd7e0e3)

* [OCPBUGS-56064](https://issues.redhat.com/browse/OCPBUGS-56064): tech debt: rework vendor patches [#49](https://github.com/openshift/ibm-vpc-node-label-updater/pull/49)
* [OCPBUGS-53538](https://issues.redhat.com/browse/OCPBUGS-53538): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#45](https://github.com/openshift/ibm-vpc-node-label-updater/pull/45)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/5d72ced58e4ff3c4d4ad02f181578755dfa0312a...9b13bd4c73e7fa58c109dc3e3b9221773cd7e0e3)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/bdc981bde680b3a1bc3a80a2c2cfd1c7b2c110e8)

* [OCPBUGS-67289](https://issues.redhat.com/browse/OCPBUGS-67289): [release-4.15] Fix incomplete vendor/ [#137](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/137)
* [OCPBUGS-51814](https://issues.redhat.com/browse/OCPBUGS-51814): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#122](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/122)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/b934c68cd083ea3abb65faf463cb6ab5383e5d7d...bdc981bde680b3a1bc3a80a2c2cfd1c7b2c110e8)


### [ironic](https://github.com/openshift/ironic-image/tree/943b1100380f2d3d02d524bbff2a8553cdde2718)

* [OCPBUGS-69784](https://issues.redhat.com/browse/OCPBUGS-69784): Bump eventlet version to 0.33.1-7 [#764](https://github.com/openshift/ironic-image/pull/764)
* [Full changelog](https://github.com/openshift/ironic-image/compare/3bf0111ba3952bac33403a5adc3533c8f35d674c...943b1100380f2d3d02d524bbff2a8553cdde2718)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/1b2bae2c44e836fcde4df24e6f2075c38ed27140)

* [OCPBUGS-69782](https://issues.redhat.com/browse/OCPBUGS-69782): Bump eventlet version to 0.33.1-7 [#233](https://github.com/openshift/ironic-agent-image/pull/233)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/d339f3ffb3bbf9879037c1f3d88303880dcb3068...1b2bae2c44e836fcde4df24e6f2075c38ed27140)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/989bcb4f50a98c741f3c9c02c2f0fb118be216c8)

* [OCPBUGS-49836](https://issues.redhat.com/browse/OCPBUGS-49836): Fix subnet validation [#49](https://github.com/openshift/ironic-static-ip-manager/pull/49)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/472000211344be4a5e9581820e94895144cf2bfc...989bcb4f50a98c741f3c9c02c2f0fb118be216c8)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/53680a50f8ca7bbcfa6c258c557c765fa6f8471a)

* [OCPBUGS-54868](https://issues.redhat.com/browse/OCPBUGS-54868): Handle `openshift-host-network` namespace as special when it modifies [#654](https://github.com/openshift/sdn/pull/654)
* [Full changelog](https://github.com/openshift/sdn/compare/e38935d97144fb3fc640bd526b93b427853e38ed...53680a50f8ca7bbcfa6c258c557c765fa6f8471a)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/a6a9ab1a765ea5bf5815e6b15a5a39840a03bb3e)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). [#228](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/228)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/e8749689edb8e7fea42eca5f2b67c3187192cdeb...a6a9ab1a765ea5bf5815e6b15a5a39840a03bb3e)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/23b66bfa19c2eae23dc9ef715f244e937dee9e64)

* fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver [#69](https://github.com/openshift/kubevirt-csi-driver/pull/69)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3...23b66bfa19c2eae23dc9ef715f244e937dee9e64)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/416999a8de40238abc7be3b24e54857f8e5e97e6)

* [OCPBUGS-77197](https://issues.redhat.com/browse/OCPBUGS-77197): Fix incomplete vendor [#303](https://github.com/openshift/cluster-api-provider-libvirt/pull/303)
* [OCPBUGS-26506](https://issues.redhat.com/browse/OCPBUGS-26506): Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 [#282](https://github.com/openshift/cluster-api-provider-libvirt/pull/282)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a...416999a8de40238abc7be3b24e54857f8e5e97e6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d2712ea2ad4c4a93524ae363f617e1e82aa28458)

* [OCPBUGS-67989](https://issues.redhat.com/browse/OCPBUGS-67989): bumped logrus to v1.9.3 [#1460](https://github.com/openshift/machine-api-operator/pull/1460)
* [OCPBUGS-59861](https://issues.redhat.com/browse/OCPBUGS-59861): Updates GCP CredentialsRequest [#1397](https://github.com/openshift/machine-api-operator/pull/1397)
* [OCPBUGS-55410](https://issues.redhat.com/browse/OCPBUGS-55410), [OCPBUGS-55411](https://issues.redhat.com/browse/OCPBUGS-55411): Updates GCP credentials request [#1356](https://github.com/openshift/machine-api-operator/pull/1356)
* [OCPBUGS-53251](https://issues.redhat.com/browse/OCPBUGS-53251): add image/read permissions [#1349](https://github.com/openshift/machine-api-operator/pull/1349)
* [OCPBUGS-52481](https://issues.redhat.com/browse/OCPBUGS-52481): Drop oVirt support [#1340](https://github.com/openshift/machine-api-operator/pull/1340)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/e171461b8831ba5278703d753dfc8a6e5d7d8d8d...d2712ea2ad4c4a93524ae363f617e1e82aa28458)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/717ca858c5e2c15c97f82b880ffc8b5b901fd59e)

* [OCPBUGS-77636](https://issues.redhat.com/browse/OCPBUGS-77636): Machine-config controller should not log about non-existent pull-secret changes [#5573](https://github.com/openshift/machine-config-operator/pull/5573)
* [OCPBUGS-60214](https://issues.redhat.com/browse/OCPBUGS-60214): [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host [#4988](https://github.com/openshift/machine-config-operator/pull/4988)
* [OCPBUGS-59737](https://issues.redhat.com/browse/OCPBUGS-59737): Remove MachineConfigNode CRD from manifests [#5188](https://github.com/openshift/machine-config-operator/pull/5188)
* [OCPBUGS-48284](https://issues.redhat.com/browse/OCPBUGS-48284): Do not run resolv-prepender from NM dispatcher [#4783](https://github.com/openshift/machine-config-operator/pull/4783)
* [OCPBUGS-57340](https://issues.redhat.com/browse/OCPBUGS-57340): Do not enable on-prem-resolv-prepender.path for UPI [#5115](https://github.com/openshift/machine-config-operator/pull/5115)
* [OCPBUGS-36688](https://issues.redhat.com/browse/OCPBUGS-36688): Add ipsec connect wait service [#4937](https://github.com/openshift/machine-config-operator/pull/4937)
* [OCPBUGS-54206](https://issues.redhat.com/browse/OCPBUGS-54206): Update format verbs for alert logs [#4943](https://github.com/openshift/machine-config-operator/pull/4943)
* [OCPBUGS-54176](https://issues.redhat.com/browse/OCPBUGS-54176): Update ObservedGeneration in KubeletConfig [#4944](https://github.com/openshift/machine-config-operator/pull/4944)
* [OCPBUGS-43742](https://issues.redhat.com/browse/OCPBUGS-43742): Soften haproxy timeout for kubeapi probe [#4663](https://github.com/openshift/machine-config-operator/pull/4663)
* [OCPBUGS-50526](https://issues.redhat.com/browse/OCPBUGS-50526): Add clarification to invalid maxUnavailable alert [#4842](https://github.com/openshift/machine-config-operator/pull/4842)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b608d409f85d9d2f5ec8837d33490fdc6b6883a6...717ca858c5e2c15c97f82b880ffc8b5b901fd59e)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/213f5c866a3ae996170f6a28ffb7048327ae66d2)

* [OCPBUGS-67983](https://issues.redhat.com/browse/OCPBUGS-67983): [4.15] uplift logrus [#154](https://github.com/openshift/image-customization-controller/pull/154)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/97d87657caab4323f82f9d0958e6d30fc8fd1846...213f5c866a3ae996170f6a28ffb7048327ae66d2)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/b7f83c7d1c2df17f824f4e427433973b848f44cb)

* [OCPBUGS-54170](https://issues.redhat.com/browse/OCPBUGS-54170): Change rhcos release browser url [#58](https://github.com/openshift/machine-os-images/pull/58)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9e9c920f985a375536e8d4caafd2d7ed579e27f3...b7f83c7d1c2df17f824f4e427433973b848f44cb)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/968cfd1910680feeecaccfe87a4160fce6e66c1a)

* [OCPBUGS-78493](https://issues.redhat.com/browse/OCPBUGS-78493): fix for CVE-2025-69873 [#850](https://github.com/openshift/monitoring-plugin/pull/850)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/1217bc1ead005c2232fa9f21da5b2174a9b25140...968cfd1910680feeecaccfe87a4160fce6e66c1a)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/a2e3c6e5d5dcb6dd059f87a2f5a519482d955c45)

* [OCPBUGS-58769](https://issues.redhat.com/browse/OCPBUGS-58769): Update the github.com/golang/glog module to v1.2.4 [#104](https://github.com/openshift/multus-admission-controller/pull/104)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/9ea52de962dd644573c99b2f9554a6c4dfaacf62...a2e3c6e5d5dcb6dd059f87a2f5a519482d955c45)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/cfa4f975508177d8daee9652ca75fe16f9e5dc27)

* [OCPBUGS-55619](https://issues.redhat.com/browse/OCPBUGS-55619): Fixes leftover podref issue [#366](https://github.com/openshift/whereabouts-cni/pull/366)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d80fe46e1895698f3d1073ab965c859a89be2a47...cfa4f975508177d8daee9652ca75fe16f9e5dc27)


### [must-gather](https://github.com/openshift/must-gather/tree/0f70f31cc6a01d849fef5262e20f934bf87a91ee)

* [OCPBUGS-36371](https://issues.redhat.com/browse/OCPBUGS-36371): Run ppc node collection in parallel [#430](https://github.com/openshift/must-gather/pull/430)
* [OCPBUGS-42970](https://issues.redhat.com/browse/OCPBUGS-42970): Collect etcd object count [#456](https://github.com/openshift/must-gather/pull/456)
* [OCPBUGS-48083](https://issues.redhat.com/browse/OCPBUGS-48083): Update owners [#474](https://github.com/openshift/must-gather/pull/474)
* [Full changelog](https://github.com/openshift/must-gather/compare/2491e021d486f9fb7bd4d1fa613b3c944e91a0b1...0f70f31cc6a01d849fef5262e20f934bf87a91ee)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/1b188fa1f7efdda0dafbdd409deed32450017dfc)

* [OCPBUGS-58779](https://issues.redhat.com/browse/OCPBUGS-58779): Bump github.com/golang/glog to v1.2.4 (#114) [#114](https://github.com/openshift/network-metrics-daemon/pull/114)
* [OCPBUGS-60374](https://issues.redhat.com/browse/OCPBUGS-60374): Replace e2e test image (#126) [#126](https://github.com/openshift/network-metrics-daemon/pull/126)
* swtich golint install method (#124) [#124](https://github.com/openshift/network-metrics-daemon/pull/124)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/9e21740225af47318a9ed6d03c2eb9ee2aaea883...1b188fa1f7efdda0dafbdd409deed32450017dfc)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/ec58a6114b305b91d9a476e5f29c98b1a059c2ad)

* [OCPBUGS-47264](https://issues.redhat.com/browse/OCPBUGS-47264): fixing CVE-2024-45338 [#117](https://github.com/openshift/machine-api-provider-nutanix/pull/117)
* [OCPBUGS-51850](https://issues.redhat.com/browse/OCPBUGS-51850): CVE-2025-22868 [#109](https://github.com/openshift/machine-api-provider-nutanix/pull/109)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/8de6f944d35b2fefaf926006aecf8445be4e6149...ec58a6114b305b91d9a476e5f29c98b1a059c2ad)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/2a98b2ccd96215b432c018b817d238766613df5d)

* [OCPBUGS-74925](https://issues.redhat.com/browse/OCPBUGS-74925): bump kubernetes-apiserver to pick up loopback cert expiration update [#173](https://github.com/openshift/oauth-apiserver/pull/173)
* NO-JIRA: (chore): update OWNERS [#175](https://github.com/openshift/oauth-apiserver/pull/175)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/0e158441dbfdf232d7fea50b7c4eae3023d2cdbb...2a98b2ccd96215b432c018b817d238766613df5d)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/2e0585db0922491e4ad26a969678df629c78c637)

* [OCPBUGS-61447](https://issues.redhat.com/browse/OCPBUGS-61447): Update x/crypto to v0.31.0 [#336](https://github.com/openshift/oauth-proxy/pull/336)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e...2e0585db0922491e4ad26a969678df629c78c637)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/18d55d6a096fa9713d9fbd8e9bd35f9c6112706d)

* [OCPBUGS-77858](https://issues.redhat.com/browse/OCPBUGS-77858): fix vendor for hermetic 4.15 [#1361](https://github.com/openshift/oc-mirror/pull/1361)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/553681632fb168ccf003b47b67e0f15350b1beaf...18d55d6a096fa9713d9fbd8e9bd35f9c6112706d)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/38f778ce61623e5c7d473fb15593239d87a5dd32)

* [OCPBUGS-67998](https://issues.redhat.com/browse/OCPBUGS-67998): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] [#611](https://github.com/openshift/openshift-apiserver/pull/611)
* [OCPBUGS-74923](https://issues.redhat.com/browse/OCPBUGS-74923): bump kubernetes-apiserver to pick up loopback cert expiration update [#600](https://github.com/openshift/openshift-apiserver/pull/600)
* [OCPBUGS-58822](https://issues.redhat.com/browse/OCPBUGS-58822): Fix image reference in TestImageStreamImportQuayIO [#517](https://github.com/openshift/openshift-apiserver/pull/517)
* [OCPBUGS-47766](https://issues.redhat.com/browse/OCPBUGS-47766): Pass expected type to deploymentconfig/scale object validation. [#466](https://github.com/openshift/openshift-apiserver/pull/466)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/08f4c422eed5d9584799244c0d9755708686c0c8...38f778ce61623e5c7d473fb15593239d87a5dd32)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/110a10ad9c720400f87e3428354ccff051b70af3)

* [OCPBUGS-57761](https://issues.redhat.com/browse/OCPBUGS-57761): Set node-pullsecrets volume to read-only to protect image pull credentials [#396](https://github.com/openshift/openshift-controller-manager/pull/396)
* [OCPBUGS-56474](https://issues.redhat.com/browse/OCPBUGS-56474): Empty proxy variables are causing issues during the build [#383](https://github.com/openshift/openshift-controller-manager/pull/383)
* [OCPBUGS-54344](https://issues.redhat.com/browse/OCPBUGS-54344): Unable to look up the service account secrets for build [#370](https://github.com/openshift/openshift-controller-manager/pull/370)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/ff69ddfb8f9c752f77e96e867f667e5b8c149935...110a10ad9c720400f87e3428354ccff051b70af3)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/c44a604df76d9f889e8366387396d2cfdb5a6424)

* [OCPBUGS-68000](https://issues.redhat.com/browse/OCPBUGS-68000): CVE-2025-65637 openshift4/ose-openstack-cinder-csi-driver-rhel8-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] [#192](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/192)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/d0c24077b4e4ac1e00a6a529a814066cd9b5521c...c44a604df76d9f889e8366387396d2cfdb5a6424)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/bf81e212f644e7d09a66fd111566e71f0538851e)

* [OCPBUGS-78171](https://issues.redhat.com/browse/OCPBUGS-78171): hermetic 4.15 [#164](https://github.com/openshift/machine-api-provider-openstack/pull/164)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/396a09fffe401679f18e8a7db56c77bbf2dee246...bf81e212f644e7d09a66fd111566e71f0538851e)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/38fcbe47376549c4a9de485200b3b968dbb6efc9)

* [OCPBUGS-61466](https://issues.redhat.com/browse/OCPBUGS-61466): [release-4.15] Add NetworkPolicy as a supported kind [#1051](https://github.com/openshift/operator-framework-olm/pull/1051)
* [OCPBUGS-61389](https://issues.redhat.com/browse/OCPBUGS-61389): [4.15] e2e stability fixes [#1084](https://github.com/openshift/operator-framework-olm/pull/1084)
* [OCPBUGS-57430](https://issues.redhat.com/browse/OCPBUGS-57430): reduce cache expiry frequency [release-4.19] [#1023](https://github.com/openshift/operator-framework-olm/pull/1023)
* [OCPBUGS-56463](https://issues.redhat.com/browse/OCPBUGS-56463): fix(olm): improve error logging for missing olm.managed label (#3558) [#1010](https://github.com/openshift/operator-framework-olm/pull/1010)
* [OCPBUGS-48662](https://issues.redhat.com/browse/OCPBUGS-48662): Fix concurrent namespace resolution [#948](https://github.com/openshift/operator-framework-olm/pull/948)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ba9df23efe901d3e5e8e0d51fcf378b20a622fd3...38fcbe47376549c4a9de485200b3b968dbb6efc9)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/47c104b84bb2af0f589d8e06eccb6a8933b25e2f)

* [OCPBUGS-62221](https://issues.redhat.com/browse/OCPBUGS-62221): Remove Expect func so that the test case can use the retry logic [#672](https://github.com/operator-framework/operator-marketplace/pull/672)
* [OCPBUGS-62119](https://issues.redhat.com/browse/OCPBUGS-62119): Update memoryTarget on catalog source pods [#666](https://github.com/operator-framework/operator-marketplace/pull/666)
* [OCPBUGS-49428](https://issues.redhat.com/browse/OCPBUGS-49428): Upgrade golang.org/x/net [release-4.15] [#588](https://github.com/operator-framework/operator-marketplace/pull/588)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/1f1bc1988527f01b7326f63953aacbd400fd8426...47c104b84bb2af0f589d8e06eccb6a8933b25e2f)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/4385a4ac61cf5693ab694d381f8f9e69a826cbe3)

* [OCPBUGS-68032](https://issues.redhat.com/browse/OCPBUGS-68032): Bump github.com/sirupsen/logrus to v1.8.3 [#144](https://github.com/openshift/ovirt-csi-driver-operator/pull/144)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/e9b0fa233d75a97e6d29106265938b42bc16d677...4385a4ac61cf5693ab694d381f8f9e69a826cbe3)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/001b26d3d149d45e94b00d3c03f2837623d63741)

* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-76403](https://issues.redhat.com/browse/OCPBUGS-76403): [release-4.15] Dockerfile: Unpin OVN and consume the latest from FDP [#2974](https://github.com/openshift/ovn-kubernetes/pull/2974)
* [OCPBUGS-56660](https://issues.redhat.com/browse/OCPBUGS-56660), [OCPBUGS-58162](https://issues.redhat.com/browse/OCPBUGS-58162): Unpin OVS patch versions #2649 [#2649](https://github.com/openshift/ovn-kubernetes/pull/2649)
* [OCPBUGS-56419](https://issues.redhat.com/browse/OCPBUGS-56419): Update to FDP25.A.1 24.03.5-40. [#2573](https://github.com/openshift/ovn-kubernetes/pull/2573)
* [OCPBUGS-50583](https://issues.redhat.com/browse/OCPBUGS-50583): Bump OVN to 23.09.6-12 to consume fix for FDP-905 [#2454](https://github.com/openshift/ovn-kubernetes/pull/2454)
* [OCPBUGS-53384](https://issues.redhat.com/browse/OCPBUGS-53384): [release-4.15] Dockerfile.base: bump OVS version to 3.3 [#2492](https://github.com/openshift/ovn-kubernetes/pull/2492)
* [OCPBUGS-43605](https://issues.redhat.com/browse/OCPBUGS-43605): Add SDN node subnet gateway IP to host-network address_set [#2419](https://github.com/openshift/ovn-kubernetes/pull/2419)
* [OCPBUGS-46403](https://issues.redhat.com/browse/OCPBUGS-46403): Add static route to the hairpin masquerade IPs to pod [#2396](https://github.com/openshift/ovn-kubernetes/pull/2396)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/cc1522a772fbd586a192a8ceb02980a41734f7b6...001b26d3d149d45e94b00d3c03f2837623d63741)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/766c2e6af74efa696364cef21c2b9915ed886e42)

* [OCPBUGS-68006](https://issues.redhat.com/browse/OCPBUGS-68006): Fix CVE-2025-65637 by bumping logrus to v1.9.1 [#99](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951...766c2e6af74efa696364cef21c2b9915ed886e42)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/5c68b044b7fc3e70e39f6d67e4df440d8206d929)

* [OCPBUGS-61702](https://issues.redhat.com/browse/OCPBUGS-61702): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#128](https://github.com/openshift/machine-api-provider-powervs/pull/128)
* [OCPBUGS-54753](https://issues.redhat.com/browse/OCPBUGS-54753): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 [#115](https://github.com/openshift/machine-api-provider-powervs/pull/115)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/4121cfc4304dcbb698993a388368f4025ab9c24a...5c68b044b7fc3e70e39f6d67e4df440d8206d929)


### [prometheus](https://github.com/openshift/prometheus/tree/79fa623a51580ca0cfc30609b27da0a56a4f2282)

* [OCPBUGS-56740](https://issues.redhat.com/browse/OCPBUGS-56740): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#256](https://github.com/openshift/prometheus/pull/256)
* [Full changelog](https://github.com/openshift/prometheus/compare/1b43998cd9f209984fa10d01847930113191d05a...79fa623a51580ca0cfc30609b27da0a56a4f2282)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/7dd2d96be59404ff22748eb9f0a853da5b238572)

* [OCPBUGS-77058](https://issues.redhat.com/browse/OCPBUGS-77058): Include go-verify-deps expected files in gitignore [#117](https://github.com/openshift/prometheus-alertmanager/pull/117)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/870ade52a6097bc55cec29c1a9cc028967c5d23c...7dd2d96be59404ff22748eb9f0a853da5b238572)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/57a122c2a6c6a2fe0c6ab11946859c435cf593b9)

* [OCPBUGS-68019](https://issues.redhat.com/browse/OCPBUGS-68019): update logrus to v1.9.1 [#321](https://github.com/openshift/service-ca-operator/pull/321)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/19f312e96bb4e5b7da9f61ea4cab202b227a60c6...57a122c2a6c6a2fe0c6ab11946859c435cf593b9)


### [tests](https://github.com/openshift/origin/tree/8acddbb71da35dcc067d5009b72ad5917674faf9)

* [OCPBUGS-74300](https://issues.redhat.com/browse/OCPBUGS-74300): Skip E2e: attach on previously attached volumes should work [#30725](https://github.com/openshift/origin/pull/30725)
* [OCPBUGS-66329](https://issues.redhat.com/browse/OCPBUGS-66329): Replace RunHostCmd with Exec function to censor bearer token being exposed [#30528](https://github.com/openshift/origin/pull/30528)
* [OCPBUGS-57335](https://issues.redhat.com/browse/OCPBUGS-57335): Fix regex parser for censoring private key [#29913](https://github.com/openshift/origin/pull/29913)
* [OCPBUGS-61229](https://issues.redhat.com/browse/OCPBUGS-61229): images/tests: Remove rteval [#30207](https://github.com/openshift/origin/pull/30207)
* [OCPBUGS-57136](https://issues.redhat.com/browse/OCPBUGS-57136): aws/edge: prevent test using unschedulable nodes [#29897](https://github.com/openshift/origin/pull/29897)
* [OCPBUGS-55477](https://issues.redhat.com/browse/OCPBUGS-55477): support provider type external [#29739](https://github.com/openshift/origin/pull/29739)
* NO-JIRA: Sync OWNERS from main branch [#29856](https://github.com/openshift/origin/pull/29856)
* [OCPBUGS-55695](https://issues.redhat.com/browse/OCPBUGS-55695): [build] Ensure Git Clone Does Not Run Privileged [#29752](https://github.com/openshift/origin/pull/29752)
* [OCPBUGS-54769](https://issues.redhat.com/browse/OCPBUGS-54769): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29664](https://github.com/openshift/origin/pull/29664)
* [OCPBUGS-52582](https://issues.redhat.com/browse/OCPBUGS-52582): Use payload pullspec for image info test [#29590](https://github.com/openshift/origin/pull/29590)
* [OCPBUGS-41614](https://issues.redhat.com/browse/OCPBUGS-41614): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29502](https://github.com/openshift/origin/pull/29502)
* [OCPBUGS-49647](https://issues.redhat.com/browse/OCPBUGS-49647): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29503](https://github.com/openshift/origin/pull/29503)
* [OCPBUGS-48749](https://issues.redhat.com/browse/OCPBUGS-48749): Add/remove team members to the OWNERS file for Builds [#29551](https://github.com/openshift/origin/pull/29551)
* [Full changelog](https://github.com/openshift/origin/compare/1ec96648894ae137d5d976aed612e203e2eb8184...8acddbb71da35dcc067d5009b72ad5917674faf9)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/429abecf805b4a6876c576f3f1c572866e23f235)

* [OCPBUGS-78030](https://issues.redhat.com/browse/OCPBUGS-78030): hermetic migration 4.15 [#108](https://github.com/openshift/cloud-provider-vsphere/pull/108)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/81ad52ad7bcf37b225bc50a6e6150ca0572057b7...429abecf805b4a6876c576f3f1c572866e23f235)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/c0212e3276d0270d369d306317026a87d727d180)

* [OCPBUGS-78021](https://issues.redhat.com/browse/OCPBUGS-78021): hermetic migration 4.15 [#87](https://github.com/openshift/cluster-api-provider-vsphere/pull/87)
* [OCPBUGS-61654](https://issues.redhat.com/browse/OCPBUGS-61654): Fix unit tests [#73](https://github.com/openshift/cluster-api-provider-vsphere/pull/73)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/5611168658586d68b5a92c77c07304694fc2cc64...c0212e3276d0270d369d306317026a87d727d180)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/870ede98a449b038c0c3c2fd058bb4580e17d9ab)

* [OCPBUGS-68022](https://issues.redhat.com/browse/OCPBUGS-68022): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#159](https://github.com/openshift/vmware-vsphere-csi-driver/pull/159)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4b15e93bd578484c4bfb1c124fa655c451bbd1ca...870ede98a449b038c0c3c2fd058bb4580e17d9ab)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/cb86a71f40db49e599591fd59a70ffc56a7fa99f)

* [OCPBUGS-68020](https://issues.redhat.com/browse/OCPBUGS-68020), [OCPBUGS-68024](https://issues.redhat.com/browse/OCPBUGS-68024): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#323](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/323)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/e0d46570a06caff3439b410b9c9f75cb383a3d2d...cb86a71f40db49e599591fd59a70ffc56a7fa99f)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/b5411c84f19f7b7eb550a9ea5eff273bec67c7ce)

* [OCPBUGS-68031](https://issues.redhat.com/browse/OCPBUGS-68031): bump github.com/sirupsen/logrus to v1.9.3 [#201](https://github.com/openshift/vsphere-problem-detector/pull/201)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/15ed0ae1d7bcfc9fd24e32bf3650e0e960c115be...b5411c84f19f7b7eb550a9ea5eff273bec67c7ce)