# 4.15.71

Created: 2026-11-08 23:57:22 +0000 UTC

Image Digest: `sha256:f38b4b30160584e04166a69480438f34538cb8ad2dbc2db5a0efb0fa34e99af0`


## Changes from 4.15.68

### Components

* Kubernetes 1.28.15
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202608180329-0 to 415.92.202611051005-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [33b7d855](https://github.com/openshift/agent-installer-utils/commit/33b7d855fdebd24a972f32dafafd29e40b117e46) `sha256:6ea822ced093386e9cab8bb20052775630fad30c33d3107729336d56b984af9c`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [4fb95a28](https://github.com/openshift/alibaba-cloud-csi-driver/commit/4fb95a28e02d9f080ca41caa209896c1c5f9a563) `sha256:51359ffe5bd73472165631e1c21dc7f4dfef3595ab5ca78b8ff463743d3e02c7`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [41b367ae](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/41b367ae3bb6de9292539c0ecd98c81c5edc8294) `sha256:5807b98ba550a228bae4cb3eb81ce2352d1d3c6744a76450e913f38345cd451a`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [f7f5eed8](https://github.com/openshift/cluster-api-provider-alibaba/commit/f7f5eed811b33b9beee1ed6a34f956449fbf7fc7) `sha256:fc5f0391564f79e78ba7783b5775479811383cce937300a3a80c8bcb07cec6b0`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [adccbd5c](https://github.com/openshift/apiserver-network-proxy/commit/adccbd5c16daecfe861fa530acdcbba5ec682a3a) `sha256:a7dc0ad378a85d5aa4e4debc3bececd0675c69a70c19349340a47b0834f21068`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [7043c1cc](https://github.com/openshift/aws-ebs-csi-driver/commit/7043c1cca6e17dd3c90006140f6361cf0e776d69) `sha256:3e12654286e12b5c05ae3fa8b3f0b0f3f45e3be34e9d91c08fd59d9128ccd35f`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [fb9a59a0](https://github.com/openshift/machine-api-provider-aws/commit/fb9a59a0f7636ffece8cc585f5ab8844e67cd198) `sha256:4b3201f17f2a347092784c75e0be8b9f04bc26a60c9d78d8c6528f8dd430702b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [13385034](https://github.com/openshift/aws-pod-identity-webhook/commit/13385034ec9a843a6b40f8b3aec9966ada785115) `sha256:0e1b1f216a90ace8721d0ac64416134027704f1b39b5e5b5ebfa1dd38d5c5d16`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [7896f4a9](https://github.com/openshift/cluster-api-provider-azure/commit/7896f4a94ae32cf038daa77e255ec207832c1081) `sha256:3e6baa56a36e5e961212597577caf7752abf029f9e72d98dd77654ff50014bd5`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [dcb7e1c7](https://github.com/openshift/azure-disk-csi-driver/commit/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d) `sha256:9a52a7c67af6fa5de53ab368412cdabe74a72cb07ebc19e6c3eab73c68bbcb30`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [5db478a9](https://github.com/openshift/azure-workload-identity/commit/5db478a9876556666b10f135487a2fd9f82e8653) `sha256:00b9f4b745b02750d1fe10e08bb9ee6b0901022db54886e46e68af2ea6476fc3`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [abd5d24e](https://github.com/openshift/cluster-api-provider-baremetal/commit/abd5d24efd670cfb719757c0d5af3409ee3c0058) `sha256:894516a12c13fe9eefcdb842a7df0e8b42dee7024e2a9db266f2ad36ffaf482a`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [880ee050](https://github.com/openshift/baremetal-operator/commit/880ee0500b561ac9d0dc70d88c3f2fdfa4c7edee) `sha256:08f082c7e3ccc0ead741ee949802edd38aa5586f83f8a8f7f7041f12363099c9`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [1fbb2c0c](https://github.com/openshift/baremetal-runtimecfg/commit/1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c) `sha256:4005b970da93c0144bae6e921761f814c3200b5224efcf6f82e1eaa923c64f7e`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [cffd4253](https://github.com/openshift/cloud-credential-operator/commit/cffd42537ac64a3936a12de001db938d0904126e) `sha256:6aa7911c11b9ae58a4fcf6d1e0005c57e2f42120d9148081a8206b630f5f43d7`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [6864da06](https://github.com/openshift/cloud-network-config-controller/commit/6864da0642026d6004df171539fa9fd5bcb6c2df) `sha256:8b428083a0ab8e3ed0de3dbb6d997b22721537953aa50d8db63133490cda569a`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [89149896](https://github.com/openshift/kubernetes-autoscaler/commit/89149896bc6a3d02ebf117c61d5e9ea50ad73129) `sha256:db86a65e88071329e20bc426cc099eed125cacea261ff0dcfa0cbace4cecf745`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [9508bd33](https://github.com/openshift/cluster-baremetal-operator/commit/9508bd334d661b6e8e76d452082f9a6f822a7739) `sha256:7e97ea5cbafeeed0274aa7872d6d01037b57f49d2f45612425900c3e472a514a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [0849c462](https://github.com/openshift/cluster-bootstrap/commit/0849c462de13b9a5765b9a8c882acb9e6e8bf39e) `sha256:fc33204cbdde8a47f74c48a6183ffcd67ff3c17a68f4f5b69a5fab8b5852cf89`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [2053e13c](https://github.com/openshift/cluster-api/commit/2053e13cb0fda9188e9b685db83c1e1f492e6efa) `sha256:ceb31067f7d13a3b3115c839850cc8242f9a22cfbadebb6c4adf6c2ef7b22810`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [e5aeca52](https://github.com/openshift/cluster-capi-operator/commit/e5aeca52d0a0739f1a87f39c9e5d4fa3592370ea) `sha256:34cc3708d21d65891934782807e8157ff2205248b6b55e4a40a5120209930d4c`
* [cluster-config-api](https://github.com/openshift/api) git [0a58f8c3](https://github.com/openshift/api/commit/0a58f8c30a8c309baaa4aecd05580039b4d3888b) `sha256:ee11e86048a832887d49711298853442a3bdaad5aa7a8757f824f060a3842a36`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0b4c69fd](https://github.com/openshift/cluster-config-operator/commit/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818) `sha256:ea0e0514a6cd3296d52b41437096c5705a6c0f12da68b6768bafce8fd6845c76`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [e1b692b1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/e1b692b1e9552db95c17f6a03b41d258237ab480) `sha256:745715934035c8b17e220abd591ab1ee5b92eba838eafba035c8086bd7a62a95`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [8558f479](https://github.com/openshift/cluster-image-registry-operator/commit/8558f479e1cfc437a898bdf895bfdbd7ae5fb070) `sha256:5c360020f32ae7f0c141021135d3cd03c38b55bd8748a3a70d557dbd06bf4d8e`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [9e3f9ec8](https://github.com/openshift/cluster-kube-apiserver-operator/commit/9e3f9ec8a3c1c42643af78c61e984d077a692da2) `sha256:bfbd1b0e5eeeaef0431d23ed87b3b34f0c22621680e668bcce6d7fb015898318`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [128d8e08](https://github.com/openshift/cluster-api-operator/commit/128d8e08c48e2002c416e84d0dec816bf5999c7e) `sha256:e888a1b0e601e4b47f6202721fa31aa8d0929331dbbb03165106fcb85fa6dc2f`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [183510ee](https://github.com/openshift/cluster-kube-scheduler-operator/commit/183510ee50bb135bfe685bf40b3a7d6aecad27fe) `sha256:0696e64d27eb29336b02aba33d6532709c31860c9c136af8a3f24cf3426906b7`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [acf9540b](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/acf9540b9d87be60f2bee90d38e06eac674a3e20) `sha256:99fb250b00c668edf2ff240b5f7f132ec91f736fcd171450126e08ee57691346`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [863813ec](https://github.com/openshift/cluster-machine-approver/commit/863813ecd7b4c1416e76120896add365c492a59e) `sha256:5e0805b05f543039582badb69c512fac3527019effd87002e30239c992785a2f`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [e828bd93](https://github.com/openshift/cluster-node-tuning-operator/commit/e828bd93defc0cc9c3fcf799d9715b95b2c03f79) `sha256:ba79518e086b57b27efa666ee6577341e0cb31c626a1ff7dabe8e6390a7552dd`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [0a671315](https://github.com/openshift/cluster-olm-operator/commit/0a6713150279776bada78c64717c2a8af0dce16b) `sha256:4546b0c56776e4892d3c6c37e0ad184da0c71cdc431c1873e067bcda0bd14a50`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [031c048d](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/031c048d17690cf5601addfe7de3eb6b067fabbd) `sha256:a1d540b7c67777a421b11e8f880d372a0dd7fcd7a1dd994cb6bf045ebb378e59`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [1ae0ba75](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/1ae0ba75cfdb910990437ab2898690b9e3f8f94a) `sha256:fc6399de22a4f1640a8ed929a10133d341867dad25e36645e272b88d41baf443`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [37a0a919](https://github.com/openshift/platform-operators/commit/37a0a919b1032f7affa49b756eda4762d77751d5) `sha256:85db24ab428e888254b975ea729808badf0be470d108d6f7a999e278238084bc`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cc48f315](https://github.com/openshift/cluster-policy-controller/commit/cc48f3152213bfe6e42fdd82f760246e862d208f) `sha256:e30557be670bd6a685feeebc18789795fe8a1ad0291045247e330648ba54d94c`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [a01ebb50](https://github.com/openshift/cluster-samples-operator/commit/a01ebb5009c7dd0f0adcd0647660797fb5f3aa74) `sha256:e04c155332ce10e59e3e5f6a0bb73ac67f3b9891ceaf6e9dd2e9cc8241d68120`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [802233d8](https://github.com/openshift/cluster-update-keys/commit/802233d84243d3eeceef50a29579501e94ebbf26) `sha256:f6a80728169ee801a6db1291c56fc4c59feb90dc3bf4cb373710bd7887a882c1`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [617398f5](https://github.com/openshift/configmap-reload/commit/617398f581faadbad2c7ded993bfa3169a87b6ab) `sha256:95b40a4edc518ea7864f11f7590ed78a0b1b135714371a7c80d2f4f1ff71158e`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [ffce799a](https://github.com/openshift/containernetworking-plugins/commit/ffce799a1d110ae86e2f86052e3f930020782fb4) `sha256:64f9cffeaaed6a0d85aad2aa6e0a7bb22ac4d6d8f167603c54120490fae4db83`
* [coredns](https://github.com/openshift/coredns) git [d3a19e67](https://github.com/openshift/coredns/commit/d3a19e6731ea414a520cfad85c11634f4824c895) `sha256:472864162529da5a1067edbd625ea06f736b86b99b95ae6e467fd9a7a13d5d7e`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [f55d6f0d](https://github.com/openshift/csi-driver-nfs/commit/f55d6f0de700a7d30634a870d5cc5ccb0fc24f98) `sha256:3cb19d84871d78b77753abc3cedd4f6278ab5950d4065712123926b0600f3276`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:bd5db4288c45b14c8e040d576858b93b0bf4336ca3e6348b274e51f8f02d6c97`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [8d017b7f](https://github.com/openshift/csi-driver-shared-resource-operator/commit/8d017b7f19f0226dfd4fc7933271939c550d180f) `sha256:3df4be424029358662fd5640cafe98e8a4218f3925cbcd4386bf455e52acfeef`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:6f9529dcf0c09a7a639ad8099f2ab3d02f558cf9c087acf3f197dfc9cfb03f02`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [ce5a1a33](https://github.com/openshift/csi-external-provisioner/commit/ce5a1a33fadf10bba0c90510c09dfc879dcfec87) `sha256:cd17c4e1cfb90215cacdc7e074beb9e507de8f2f63f916e97b2acbd294e0613f`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [240bb8c0](https://github.com/openshift/csi-livenessprobe/commit/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3) `sha256:0a3e479529bf3704c256dd2f81039b068f1d4b74a505a7debcea38474a9a366f`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9005584e](https://github.com/openshift/csi-node-driver-registrar/commit/9005584ee45c4d3158e383870aafa5d78a03b141) `sha256:1aaf9ef5aee46a848e6d442fe11d28ba31bc47ebe408c8a63d993ceca58f1b65`
* [docker-registry](https://github.com/openshift/image-registry) git [89c03ea3](https://github.com/openshift/image-registry/commit/89c03ea33937f22ce59a0b4faff51cff8c237176) `sha256:7f95602206f67a974bc7ff48f044ec3ae6e4469defd76e432f30996855fcdbbe`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7a448c2e](https://github.com/openshift/driver-toolkit/commit/7a448c2ee026c772e293dd344da587493c859f82) `sha256:f18c5bde512dddb75b35dc9534cf6c81d9f2436a182927da643cd6aeca0c64bb`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [f8ec690b](https://github.com/openshift/egress-router-cni/commit/f8ec690bc12a13ec7c9c45f0e3696ad02e143581) `sha256:9e7c9b7c655e4191b9e6a871a80493d4644933f3604433d3dd2ef4d441732e2c`
* [etcd](https://github.com/openshift/etcd) git [a7005ef1](https://github.com/openshift/etcd/commit/a7005ef1eae85eec6c59411860538169cea182fd) `sha256:648dd59754d18097f32d7e21c7a62c292aeff553503c5a35ff536ab20e73219b`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [fc50272a](https://github.com/openshift/cloud-provider-gcp/commit/fc50272ac32348a96455688c470bf256b1042825) `sha256:5368af186ba1ccdc2ca5f2fb889f23c021fb4b7d941dfe415582704da1fce34f`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [3a2055f0](https://github.com/openshift/cluster-api-provider-gcp/commit/3a2055f00aa0b2c1960b13639b10603a613eac85) `sha256:9c41753c6bf16e52782f2d9369e5c19f3657087ad5efde6df2baf301ad99005b`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cec5854](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cec5854d50298a19ae85290fbdbde5a3de6c898) `sha256:cc97528badebbdfdda09845be0b8d73b0f34cb60db8fccf3a1f1bf0f4a675348`
* [hyperkube](https://github.com/openshift/kubernetes) git [5cb2ef48](https://github.com/openshift/kubernetes/commit/5cb2ef48f2e7e6cd14abc5e7a5ee90cd25f0d744) `sha256:cd3e74e3cdb4c0678fe3ff3b170f54dc751e8fe95fcf7b0c1cdeb24f4235b623`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [5b58d112](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/5b58d112224287f6d6491b0143c73d37817cb3fd) `sha256:22d914d4f9aea7cd76eff2bdcdac92b6b15bb9a7ca843a54777003dd108d15ab`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [705a69ae](https://github.com/openshift/ironic-rhcos-downloader/commit/705a69ae94d273a2975ce19aa8fdd74b193e7a7c) `sha256:5a67d4c3c7e01c6e20334d2ac4816f7dc15bfb19991f0716da8e42d3d969d9c1`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [989bcb4f](https://github.com/openshift/ironic-static-ip-manager/commit/989bcb4f50a98c741f3c9c02c2f0fb118be216c8) `sha256:ce7cf70e22e26aa6ee8a1a788fc8062f890a02d8597e397ff06bb828b9a3855e`
* [keepalived-ipfailover](https://github.com/openshift/images) git [87c23b5a](https://github.com/openshift/images/commit/87c23b5aa611556ff5013822c7779e6c7551a0f0) `sha256:b14bcbfe21bb0849e747dec542b04ce4e3ff6984b71ac764cbf41fd94d59a315`
* [kube-proxy](https://github.com/openshift/sdn) git [53680a50](https://github.com/openshift/sdn/commit/53680a50f8ca7bbcfa6c258c557c765fa6f8471a) `sha256:92c47334f6d297081a98a408b89bf056e9dce2fa0a9d26faf80736408cc7d95e`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [9308e7f2](https://github.com/openshift/kube-rbac-proxy/commit/9308e7f2a6d984fa7b8ddc125524d7b7356f92ce) `sha256:ef471676dc66764f5cdf30a1547260c5271cc241154b4af70adae5040abab9bb`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [a6a9ab1a](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/a6a9ab1a765ea5bf5815e6b15a5a39840a03bb3e) `sha256:c912f2e8a6d444d3d2ed34bf7457e2a75c4a6a5e9a8aac8b0bdb09fe0069c1b6`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [379c50d5](https://github.com/openshift/cloud-provider-kubevirt/commit/379c50d50b7158efd554b8ff69bea6a2a443e1a8) `sha256:05d9458b00b85cb755fab73a1c6a684a8703a41c08686228f7114854a0189257`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [ebe618a5](https://github.com/openshift/kubevirt-csi-driver/commit/ebe618a56a660c5b4199aa51fc06933129024cbb) `sha256:cb454820bf0df3a8123df45ebc4b9233ba7dcb34b8eeabd1d4de4877833624fd`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [416999a8](https://github.com/openshift/cluster-api-provider-libvirt/commit/416999a8de40238abc7be3b24e54857f8e5e97e6) `sha256:d5d52228fc81e6608068b439f09ca079e825408abae29ca28c37cc6011e31fe6`
* [machine-config-operator](https://github.com/openshift/machine-config-operator) git [1ffa8341](https://github.com/openshift/machine-config-operator/commit/1ffa8341fb18365b72398fc4eedffcbe4d423256) `sha256:4054abf4d75d147b9d5b61117b8849dec820b995061683a9dbd3df092a3d8acc`
* machine-os-content `sha256:3aa5693113e6db09400a9ac2506963ded33da9eb4bea93db87141ee7ba915af6`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ad1c48fc](https://github.com/openshift/machine-os-images/commit/ad1c48fc1654d6e4b8ceb22f500e90ca6eb25230) `sha256:61c2815cee3a7aa699d54b4d39fc25a2d9f5738deb8b32118fe83ebcb6be22b2`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [a2e3c6e5](https://github.com/openshift/multus-admission-controller/commit/a2e3c6e5d5dcb6dd059f87a2f5a519482d955c45) `sha256:ec00f33ac503f6da1a7d65fc946f4a873e519b5df3e763e5ac6cfddf8bddc066`
* [multus-cni](https://github.com/openshift/multus-cni) git [d7c59498](https://github.com/openshift/multus-cni/commit/d7c59498b60c2a93bfdfe49f2d9ab5c923239b66) `sha256:e61aecaac0d24d270fd532eb906cbea861245b37cac92bdc927b6837ac0b4900`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [b377b4b5](https://github.com/openshift/multus-networkpolicy/commit/b377b4b5fd3029cd5cabc773ca6223cabd6b2af7) `sha256:1f21d5458c808ed6a25df5d6cdc9de935634471c570513e9988782b74129adad`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1ccafc34](https://github.com/openshift/route-override-cni/commit/1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee) `sha256:3bf9616a5e115503fc48449b89bb3a21784b0bdb59e9247da5643695cbd07368`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [cfa4f975](https://github.com/openshift/whereabouts-cni/commit/cfa4f975508177d8daee9652ca75fe16f9e5dc27) `sha256:9c6fab0b48cfe24e0d1a6de5d461f5679531ec86bfb62318dccf408c043f0fef`
* [must-gather](https://github.com/openshift/must-gather) git [0f70f31c](https://github.com/openshift/must-gather/commit/0f70f31cc6a01d849fef5262e20f934bf87a91ee) `sha256:90be1d98f4ae15621b0cc5b3ab0ec1b96ff56dc2f51f4d7e3925ea088afc57c3`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f91decaa](https://github.com/openshift/bond-cni/commit/f91decaa10cfa233c9e680c96ec7ae642e30a03c) `sha256:18ec1ce73b758997c6a1a19c2714cd6e4bf1a0355f98db9045c9777acd21d8eb`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [1b188fa1](https://github.com/openshift/network-metrics-daemon/commit/1b188fa1f7efdda0dafbdd409deed32450017dfc) `sha256:d6cd4f700233dd2582d768c7f2156caee509a682b8be3f516435c439c69c5d87`
* [network-tools](https://github.com/openshift/network-tools) git [17536c8d](https://github.com/openshift/network-tools/commit/17536c8dff76d50efb604187ba763020bd084771) `sha256:760d01bbdb64a0ae6c9e8aff985a4838ef0d6f0a6b89db8d1f33df9c0203f895`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [040d4e01](https://github.com/openshift/cloud-provider-nutanix/commit/040d4e016058c188d2ba0a7575054ee44b94af9e) `sha256:b1558b7aba6f3134f414017d5c7fce7eaff8b1e43366a1e7cb6b74a605d4dae1`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [ec58a611](https://github.com/openshift/machine-api-provider-nutanix/commit/ec58a6114b305b91d9a476e5f29c98b1a059c2ad) `sha256:25adc359a5e3c4ff88f479e31e7220bc5cd078f1a48fc0c1a9c01f5dfd917b5d`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [2a98b2cc](https://github.com/openshift/oauth-apiserver/commit/2a98b2ccd96215b432c018b817d238766613df5d) `sha256:03e14488bfc5028f9d2fdacd2b798ccb08f8bcf2cf3d29db2c059ba5eef290b8`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [035d3835](https://github.com/openshift/operator-framework-catalogd/commit/035d3835e581bee8ba59ec8919b43c8d7ce4ecfd) `sha256:4ae266fba861cfb08bbb3b0afe35a3df3726c7e9d4e908fa83954a9d597ccb36`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [303b954f](https://github.com/openshift/operator-framework-operator-controller/commit/303b954fa5a92e810aebbe55ab8fafe8dbc06c58) `sha256:7b2309e652deff79e3805d15c2f8a85e1f3c231842550bc5ec671c6427d30513`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [5b09cd44](https://github.com/openshift/operator-framework-rukpak/commit/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) `sha256:e5d4a1f8049bdbdafc987489736e8b8552a9d954679ee42cebc712b9eb8d81c0`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [e488c1f6](https://github.com/openshift/openshift-apiserver/commit/e488c1f6be78eef974989890ce99526518d66ec4) `sha256:fae97ef48b6ba5579f74e64e33bdf303796f5068718cd97380a1a8278ed33a2d`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [110a10ad](https://github.com/openshift/openshift-controller-manager/commit/110a10ad9c720400f87e3428354ccff051b70af3) `sha256:470debc7830dcd9f240ed29157f126bba1f35d40507b36dfee88b5f63d155dba`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [232472ea](https://github.com/openshift/cluster-api-provider-openstack/commit/232472ea527aa86764d93e77dc67b0c7db9cc050) `sha256:db1e381844bcfb5f01161dc5e3279306138ee7bddbb4676f0b50c96fb10cfc33`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [bf81e212](https://github.com/openshift/machine-api-provider-openstack/commit/bf81e212f644e7d09a66fd111566e71f0538851e) `sha256:9c01a3ad5e9bcdca666d640aeaa9e46dd51cf78b5dd04ef53552233ba876b7c2`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5c7af29b](https://github.com/operator-framework/operator-marketplace/commit/5c7af29b454e253322d8650c7d125c842eca92c8) `sha256:44594062293eb589b975dfc01f4360422fdc67977f7c664ce4960961ebef9019`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [871ee755](https://github.com/openshift/ovn-kubernetes/commit/871ee75596467e467b6123f66e135b363af14086) `sha256:a5e379df8d25c27c105d781083681370ee90fc8ad9754a13aecdea1bbc526cca`
* [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [871ee755](https://github.com/openshift/ovn-kubernetes/commit/871ee75596467e467b6123f66e135b363af14086) `sha256:3a4fdb763221f1725e3fbd02a0ec23a24cd47eb69271a3891deb2c158fa70b16`
* [pod](https://github.com/openshift/kubernetes) git [5cb2ef48](https://github.com/openshift/kubernetes/commit/5cb2ef48f2e7e6cd14abc5e7a5ee90cd25f0d744) `sha256:f93547c89df52874675ba5acac4ceb0eafd5450de3c3eedd4d3ec6fa499bafb4`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [766c2e6a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/766c2e6af74efa696364cef21c2b9915ed886e42) `sha256:ff27a452e8bf7af631c3e27d39132d3087661efe7850ddd68d5b75660fdc40c7`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [1d6a7ed9](https://github.com/openshift/cloud-provider-powervs/commit/1d6a7ed991427b1c8048b0b44b706228e5c2a001) `sha256:3e56562c01a833e2b12cc898d4f7b8331837db3e70b41c788c423f35de1c58cf`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [5c68b044](https://github.com/openshift/machine-api-provider-powervs/commit/5c68b044b7fc3e70e39f6d67e4df440d8206d929) `sha256:00ecba2005b17949cb3449f8d85a8106dee61487562ba8ec7d7f634e0a0ffc71`
* rhel-coreos `sha256:3c7f91a44117a3045c9d5d4b774cdeefec690dd6721ff2eb456173ce05b10c35`
* rhel-coreos-extensions `sha256:00d5f4ae0c741166eb0dbdcfdb8a30993a5ed0418bd8466930ba8620fc4ad7e6`
* [sdn](https://github.com/openshift/sdn) git [53680a50](https://github.com/openshift/sdn/commit/53680a50f8ca7bbcfa6c258c557c765fa6f8471a) `sha256:6f50c1ea7b1e453d244193be7f15fa7b4bd7e2af9c0af740a6cf96e8d9a7041b`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [57a122c2](https://github.com/openshift/service-ca-operator/commit/57a122c2a6c6a2fe0c6ab11946859c435cf593b9) `sha256:224762772c67cdd9cab9cdbba10db5b07f74e182df699864f24e1a0a4a80b7f2`
* [telemeter](https://github.com/openshift/telemeter) git [14489f7d](https://github.com/openshift/telemeter/commit/14489f7dc656175e11a3ef962fcbcd113b3651a9) `sha256:bd84baa9f5b30d159f6673df242d97242f554427c86aac1ac6a3fd435ebb7394`
* [thanos](https://github.com/openshift/thanos) git [66161ad4](https://github.com/openshift/thanos/commit/66161ad4e03e5593f5a3a33aaaffbcd41555d62a) `sha256:aa2668606184952be40720b82c63df51414849576676759eb62509aa78920f92`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [c0212e32](https://github.com/openshift/cluster-api-provider-vsphere/commit/c0212e3276d0270d369d306317026a87d727d180) `sha256:e6f6fdd0521d5ee21cf1c750359cf2677c5ee7e3790cad3bca7c7264c0a5bf8c`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [6ff97bb1](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6ff97bb1441a4edf2ccf451a6c63c206e9cf61d6) `sha256:51543835f98089b4f334119fe93ad465608534f4999677b8f565753cbcd4c5b6`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [6ff97bb1](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6ff97bb1441a4edf2ccf451a6c63c206e9cf61d6) `sha256:ab545e1e4b2f9486992939023223a78a5684661a8231897e44be946a49836d42`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/25cb7a738aeebf34e4ef80f33013d01b0ec8f009)

* [OCPBUGS-89785](https://issues.redhat.com/browse/OCPBUGS-89785): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.4 [#10820](https://github.com/openshift/assisted-service/pull/10820)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b7cfbf8fa8d25329ab1e4e46571e4c4bbdfdc1b2...25cb7a738aeebf34e4ef80f33013d01b0ec8f009)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/d8fd2fad663073fd27ca36e93057a14eddebf4e3)

* [OCPBUGS-102698](https://issues.redhat.com/browse/OCPBUGS-102698): Use patched x/net fork v0.35.0-sec.4 [#2367](https://github.com/openshift/assisted-installer/pull/2367)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/f0b1275e58633382222af71a6cac527e6f8cec24...d8fd2fad663073fd27ca36e93057a14eddebf4e3)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/0c3edd1e323da04b61a12690d8bbef0c76b6f5f9)

* [OCPBUGS-102685](https://issues.redhat.com/browse/OCPBUGS-102685): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1615](https://github.com/openshift/assisted-installer-agent/pull/1615)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/051696d004b70c305a2feb80fe6ea4f35f7a1b09...0c3edd1e323da04b61a12690d8bbef0c76b6f5f9)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/3e41eb029ceb3d398805fd9d31c839a649a46ec4)

* [OCPBUGS-102693](https://issues.redhat.com/browse/OCPBUGS-102693): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#63](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/63)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/abf4fa96550caf09e788b66fc06f1df802768397...3e41eb029ceb3d398805fd9d31c839a649a46ec4)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/3fb5e1be24c6fce2a2dacd1bbb22426a120dee92)

* [OCPBUGS-102874](https://issues.redhat.com/browse/OCPBUGS-102874): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#176](https://github.com/openshift/cloud-provider-aws/pull/176)
* [OCPBUGS-88139](https://issues.redhat.com/browse/OCPBUGS-88139): replace golang.org/x/net with sustaining fork v0.35.0-sec.4 [#179](https://github.com/openshift/cloud-provider-aws/pull/179)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/fd77d92ced47559dadf53fb8c97d1cbeb64dde8c...3fb5e1be24c6fce2a2dacd1bbb22426a120dee92)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/4b8f5705ffea0f5723d574e966e73fd938944167)

* [OCPBUGS-102702](https://issues.redhat.com/browse/OCPBUGS-102702): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#655](https://github.com/openshift/cluster-api-provider-aws/pull/655)
* 🌱 OCPBUGS-123713: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#646](https://github.com/openshift/cluster-api-provider-aws/pull/646)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5c673e1d6207e934a4e27da1ef165ddf03bf6a1a...4b8f5705ffea0f5723d574e966e73fd938944167)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/278e6de61d2906006a73abe8737573983cc9d896)

* [OCPBUGS-102714](https://issues.redhat.com/browse/OCPBUGS-102714): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#614](https://github.com/openshift/csi-operator/pull/614)
* [Full changelog](https://github.com/openshift/csi-operator/compare/242c3b9ba85478220ecf75a0a91d5c061615029c...278e6de61d2906006a73abe8737573983cc9d896)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/f32ed28d823a70fdc099a874dd34bab32d59b4b2)

* [OCPBUGS-88144](https://issues.redhat.com/browse/OCPBUGS-88144): Replace golang.org/x/net with sustaining fork v0.35.0-sec.4 to address CVE-2026-39821 [#217](https://github.com/openshift/cloud-provider-azure/pull/217)
* [OCPBUGS-102708](https://issues.redhat.com/browse/OCPBUGS-102708), [OCPBUGS-102879](https://issues.redhat.com/browse/OCPBUGS-102879): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#211](https://github.com/openshift/cloud-provider-azure/pull/211)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/5638728df093f0daccd559842aa5f527495146b6...f32ed28d823a70fdc099a874dd34bab32d59b4b2)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/31f3f12949f25b386774890cfc3c338c73fda94b)

* [OCPBUGS-102724](https://issues.redhat.com/browse/OCPBUGS-102724): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#130](https://github.com/openshift/azure-disk-csi-driver-operator/pull/130)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/160cf624a88f500de7a1f79e6dd9384bb7d17842...31f3f12949f25b386774890cfc3c338c73fda94b)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/1f24659375a5fec1eab8a5444f544b2a3175a3ea)

* [OCPBUGS-102709](https://issues.redhat.com/browse/OCPBUGS-102709): Bump golang.org/x/net to v0.35.0-sec.4 [#161](https://github.com/openshift/azure-file-csi-driver/pull/161)
* UPSTREAM: 3221: OCPBUGS-92749: Bump golang.org/x/crypto to v0.33.0-sec.5 [#166](https://github.com/openshift/azure-file-csi-driver/pull/166)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/23df7785cd9a0ad41470d02336b6ec510248984d...1f24659375a5fec1eab8a5444f544b2a3175a3ea)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/1d4249e82998e0a9f1d0763a8a344a0a0843a471)

* [OCPBUGS-102716](https://issues.redhat.com/browse/OCPBUGS-102716): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#120](https://github.com/openshift/azure-file-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/ef087772a9ed3299d776c28be78f8017762bcd08...1d4249e82998e0a9f1d0763a8a344a0a0843a471)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/737d2a61a4a06b379cf35a6a2ba3992f980bcb17)

* [OCPBUGS-102803](https://issues.redhat.com/browse/OCPBUGS-102803): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#216](https://github.com/openshift/machine-api-provider-azure/pull/216)
* [OCPBUGS-130942](https://issues.redhat.com/browse/OCPBUGS-130942): Fix unit tests [#224](https://github.com/openshift/machine-api-provider-azure/pull/224)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/9f1015edb8cb141cd6aaff2de7894f32336719c8...737d2a61a4a06b379cf35a6a2ba3992f980bcb17)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/bf73b4efbb441d052415866ef4c7b1d466153f11)

* no-jira: upi: install gcloud 447.0.0 from versioned archive [#10999](https://github.com/openshift/installer/pull/10999)
* [OCPBUGS-102719](https://issues.redhat.com/browse/OCPBUGS-102719): Bump golang.org/x/net to v0.35.0-sec.4 [#11011](https://github.com/openshift/installer/pull/11011)
* [OCPBUGS-89836](https://issues.redhat.com/browse/OCPBUGS-89836), [OCPBUGS-92734](https://issues.redhat.com/browse/OCPBUGS-92734): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.5 to address CVE-2026-39829, CVE-2026-46597 [#10952](https://github.com/openshift/installer/pull/10952)
* [OCPBUGS-127709](https://issues.redhat.com/browse/OCPBUGS-127709): Update gcloud version to one that can be found [#10920](https://github.com/openshift/installer/pull/10920)
* [Full changelog](https://github.com/openshift/installer/compare/83c823bf5cb70c42dcbbc93306a570759ac6aaf8...bf73b4efbb441d052415866ef4c7b1d466153f11)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/b1ed7ae497594b4c1b9637667ebd101020cd3103)

* [OCPBUGS-102683](https://issues.redhat.com/browse/OCPBUGS-102683), [OCPBUGS-102721](https://issues.redhat.com/browse/OCPBUGS-102721), [OCPBUGS-88167](https://issues.redhat.com/browse/OCPBUGS-88167), [OCPBUGS-88282](https://issues.redhat.com/browse/OCPBUGS-88282), [OCPBUGS-90959](https://issues.redhat.com/browse/OCPBUGS-90959): Use patched x/net fork v0.35.0-sec.4 [#2415](https://github.com/openshift/oc/pull/2415)
* [Full changelog](https://github.com/openshift/oc/compare/82316376e25f6453b58258df6bf1e11ec4abb670...b1ed7ae497594b4c1b9637667ebd101020cd3103)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/17b7617a5c7adce0176f9e2a17a8904d0d6c0735)

* [OCPBUGS-102735](https://issues.redhat.com/browse/OCPBUGS-102735): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#992](https://github.com/openshift/cluster-authentication-operator/pull/992)
* [OCPBUGS-132017](https://issues.redhat.com/browse/OCPBUGS-132017): test/e2e: pin Keycloak IdP test image to 24.0 [#1033](https://github.com/openshift/cluster-authentication-operator/pull/1033)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1...17b7617a5c7adce0176f9e2a17a8904d0d6c0735)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/091858c1143356956231dd7416f0dd0ae2ee789a)

* [OCPBUGS-102738](https://issues.redhat.com/browse/OCPBUGS-102738): Bump x/net package in release-4.15 [#391](https://github.com/openshift/cluster-autoscaler-operator/pull/391)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/8425d88b5bedd5d22acfb0f6c0edf929ec401288...091858c1143356956231dd7416f0dd0ae2ee789a)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/aa3b6faf9cc55b87f59101adcb780d3e62ea53c5)

* [OCPBUGS-102730](https://issues.redhat.com/browse/OCPBUGS-102730): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#516](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/516)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/445ccbfe8aba60c99931701d7728ae7ee012eba8...aa3b6faf9cc55b87f59101adcb780d3e62ea53c5)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/835086f2b9dbc5194bb570a01d59d695d38f9f90)

* [OCPBUGS-102745](https://issues.redhat.com/browse/OCPBUGS-102745): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#290](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/290)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/65dbb12b710b7126f662f5f7f2d8272f9f6868cc...835086f2b9dbc5194bb570a01d59d695d38f9f90)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0d5e29f5802d4fc05d8956c0b4ada75acaf8925d)

* [OCPBUGS-102734](https://issues.redhat.com/browse/OCPBUGS-102734): Use patched x/net fork v0.35.0-sec.4 [#492](https://github.com/openshift/cluster-dns-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/73aa60d1fd4e86aed93d67ddac62586ecbb70644...0d5e29f5802d4fc05d8956c0b4ada75acaf8925d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/28b7be0f2c4d86d72d1fb6f296e9251e24fe441d)

* [OCPBUGS-102736](https://issues.redhat.com/browse/OCPBUGS-102736): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#1698](https://github.com/openshift/cluster-etcd-operator/pull/1698)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/f1569c6cc1c4e98ee538433416165542acf600a9...28b7be0f2c4d86d72d1fb6f296e9251e24fe441d)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/5ef0efade292a92de4debfe2b7cc02ae0027729e)

* [OCPBUGS-102733](https://issues.redhat.com/browse/OCPBUGS-102733): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#1574](https://github.com/openshift/cluster-ingress-operator/pull/1574)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/06d213a748af01d9c94de4dc823e945e1138af2a...5ef0efade292a92de4debfe2b7cc02ae0027729e)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/399d82eaa7093d0982cdf7e1b53838ace3e6cc41)

* [OCPBUGS-102747](https://issues.redhat.com/browse/OCPBUGS-102747): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#964](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/964)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/4c1078415f28ca8b9ea051f1a505bee61763ea3c...399d82eaa7093d0982cdf7e1b53838ace3e6cc41)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/dac9f08e35d755ff7df78bd5d9db5b46d7054655)

* [OCPBUGS-102754](https://issues.redhat.com/browse/OCPBUGS-102754): [release-4.15] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame- #3090 [#3091](https://github.com/openshift/cluster-monitoring-operator/pull/3091)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.15] [#3109](https://github.com/openshift/cluster-monitoring-operator/pull/3109)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/93b9d9424899b6215c1915c21ffe4bece71f7ebf...dac9f08e35d755ff7df78bd5d9db5b46d7054655)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4bc7f18710e781f1a230cf3417eeb36fcafc0b9b)

* [OCPBUGS-51287](https://issues.redhat.com/browse/OCPBUGS-51287): Manual feature backport of cert rotation for whereabouts [#3122](https://github.com/openshift/cluster-network-operator/pull/3122)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/aaa0f93307493501fbad73002311b7d65005387e...4bc7f18710e781f1a230cf3417eeb36fcafc0b9b)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/953a330cf44b0ff3c786b333313bd5b7fafd00da)

* [OCPBUGS-102758](https://issues.redhat.com/browse/OCPBUGS-102758): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#732](https://github.com/openshift/cluster-storage-operator/pull/732)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d9bee3eaafae6fc37e8286bb04011cad1fd1dbc5...953a330cf44b0ff3c786b333313bd5b7fafd00da)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/175e43980db809314c35bd80b2b2b22d40059aaa)

* [OCPBUGS-102770](https://issues.redhat.com/browse/OCPBUGS-102770): Bump golang.org/x/net to v0.35.0-sec.3 [#1462](https://github.com/openshift/cluster-version-operator/pull/1462)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/2cb8ce9ef5c3311be9f1ea266356f1ce95bec1d1...175e43980db809314c35bd80b2b2b22d40059aaa)


### [console](https://github.com/openshift/console/tree/d6a6ce977b7f6327ac63ecc4410261edcf7235b3)

* [OCPBUGS-105795](https://issues.redhat.com/browse/OCPBUGS-105795): Fix operator-hub e2e test by replacing unavailable Red Hat catalog source with Community [#17460](https://github.com/openshift/console/pull/17460)
* [OCPBUGS-133310](https://issues.redhat.com/browse/OCPBUGS-133310): Stabilize legacy OperatorHub Cypress waits [#17422](https://github.com/openshift/console/pull/17422)
* [OCPBUGS-101788](https://issues.redhat.com/browse/OCPBUGS-101788): Bump postcss to fix CVE-2026-69153 [#17113](https://github.com/openshift/console/pull/17113)
* [OCPBUGS-98421](https://issues.redhat.com/browse/OCPBUGS-98421): CVE-2026-59869 [#16753](https://github.com/openshift/console/pull/16753)
* Fix for OCPBUGS-92070: CVE-2026-44990 [#16720](https://github.com/openshift/console/pull/16720)
* [OCPBUGS-100512](https://issues.redhat.com/browse/OCPBUGS-100512): Bump postcss to fix CVE-2026-45623 [#17034](https://github.com/openshift/console/pull/17034)
* [OCPBUGS-92747](https://issues.redhat.com/browse/OCPBUGS-92747): CVE-2026-46597 openshift4/ose-console: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.15.z] [#16962](https://github.com/openshift/console/pull/16962)
* [OCPBUGS-105792](https://issues.redhat.com/browse/OCPBUGS-105792): Disable operator-hub e2e tests to unblock CI [#16957](https://github.com/openshift/console/pull/16957)
* [OCPBUGS-112512](https://issues.redhat.com/browse/OCPBUGS-112512): Fix JSON annotation parsing to prevent OperatorHub crash [#17070](https://github.com/openshift/console/pull/17070)
* [Full changelog](https://github.com/openshift/console/compare/e7d7a6129f7e003bdb91215c99a9643f3211eef7...d6a6ce977b7f6327ac63ecc4410261edcf7235b3)


### [console-operator](https://github.com/openshift/console-operator/tree/5666a545a321589881619fdf352aefc4873317c6)

* [OCPBUGS-102761](https://issues.redhat.com/browse/OCPBUGS-102761): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#1226](https://github.com/openshift/console-operator/pull/1226)
* [Full changelog](https://github.com/openshift/console-operator/compare/62e16389f77d5f4b9dfab6a9e902f69bfce2ae0d...5666a545a321589881619fdf352aefc4873317c6)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/88bc46808fe0b18ec73c259e73639702a5a74ba7)

* [OCPBUGS-102846](https://issues.redhat.com/browse/OCPBUGS-102846), [OCPBUGS-102852](https://issues.redhat.com/browse/OCPBUGS-102852): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork- #419 [#419](https://github.com/openshift/cloud-provider-openstack/pull/419)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/cacadb5f282c92a9f8ca290a6d101182a55d957b...88bc46808fe0b18ec73c259e73639702a5a74ba7)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/5d02c9d86b784658714e8041917493cfb8819025)

* [OCPBUGS-102769](https://issues.redhat.com/browse/OCPBUGS-102769): Use patched x/net fork v0.35.0-sec.4 [#261](https://github.com/openshift/csi-driver-manila-operator/pull/261)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/0b072d27aceb3e2589c962530a02b2de450d5f08...5d02c9d86b784658714e8041917493cfb8819025)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/4d4bda957c386adaa531cb79cd1330a7336b35fc)

* [OCPBUGS-102764](https://issues.redhat.com/browse/OCPBUGS-102764): Bump golang.org/x/net to v0.35.0-sec.4 [#118](https://github.com/openshift/csi-external-attacher/pull/118)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/f806f266600fbc0db4d072e4d041fc80e28deee7...4d4bda957c386adaa531cb79cd1330a7336b35fc)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/15aa4c705bd1858a1f3bd4529fada4944386506a)

* [OCPBUGS-102768](https://issues.redhat.com/browse/OCPBUGS-102768): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#205](https://github.com/openshift/csi-external-resizer/pull/205)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/3b4236d382e4593ca41ecc6f394775be467b1a0d...15aa4c705bd1858a1f3bd4529fada4944386506a)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/d4bda1840678e420c4f17881f6a644ac01683349)

* [OCPBUGS-102760](https://issues.redhat.com/browse/OCPBUGS-102760), [OCPBUGS-102784](https://issues.redhat.com/browse/OCPBUGS-102784): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#231](https://github.com/openshift/csi-external-snapshotter/pull/231)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/4f2955c7c90cd150f9dfae782148d0fa8eba7342...d4bda1840678e420c4f17881f6a644ac01683349)


### [docker-builder](https://github.com/openshift/builder/tree/a5f0f0a5b74f9157158cdf561b29a61884c7faf1)

* [OCPBUGS-89799](https://issues.redhat.com/browse/OCPBUGS-89799), [OCPBUGS-90277](https://issues.redhat.com/browse/OCPBUGS-90277), [OCPBUGS-92299](https://issues.redhat.com/browse/OCPBUGS-92299), [OCPBUGS-92583](https://issues.redhat.com/browse/OCPBUGS-92583), [OCPBUGS-92728](https://issues.redhat.com/browse/OCPBUGS-92728): Bump golang.org/x/crypto to fix CVE-2026-39829,CVE-2026-39830,CVE-2026-39831,CVE-2026-39832,CVE-2026-46597 [#544](https://github.com/openshift/builder/pull/544)
* [Full changelog](https://github.com/openshift/builder/compare/5c5fbe01beb8eb7a82fde14efff6385fed88e72a...a5f0f0a5b74f9157158cdf561b29a61884c7faf1)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/7ac1a063ec541ea6e1d5fa37ec43f19581066821)

* [OCPBUGS-102832](https://issues.redhat.com/browse/OCPBUGS-102832): Bump golang.org/x/net to v0.35.0-sec.3 [#192](https://github.com/openshift/machine-api-provider-gcp/pull/192)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/ebf48aea8055ab0996f110d262f4225e4200cd35...7ac1a063ec541ea6e1d5fa37ec43f19581066821)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1cc8b7512f16b7ab8eac8a431561d5ec23f8ab83)

* [OCPBUGS-102786](https://issues.redhat.com/browse/OCPBUGS-102786): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#142](https://github.com/openshift/gcp-pd-csi-driver/pull/142)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/9016f437233494ce9b224bb1adae6f6e0ac7e102...1cc8b7512f16b7ab8eac8a431561d5ec23f8ab83)


### [haproxy-router](https://github.com/openshift/router/tree/a46169719b2a76c0fc157fd2c23ecb6893f83c83)

* [OCPBUGS-102779](https://issues.redhat.com/browse/OCPBUGS-102779): Use patched x/net fork v0.35.0-sec.4 [#857](https://github.com/openshift/router/pull/857)
* [Full changelog](https://github.com/openshift/router/compare/cd8a009efd84c29c462f67dfe20a2a7d12dc577b...a46169719b2a76c0fc157fd2c23ecb6893f83c83)


### [hypershift](https://github.com/openshift/hypershift/tree/0c79962920bc370a74252fbb3b5ccb1d45ba82f0)

* Sync approver aliases with main for release-4.15 [#10197](https://github.com/openshift/hypershift/pull/10197)
* [Full changelog](https://github.com/openshift/hypershift/compare/78af170b990b7f57c31498d234b7e5325d23106e...0c79962920bc370a74252fbb3b5ccb1d45ba82f0)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/9aee59216203bd2e5fc8afbfffef988736a469de)

* [OCPBUGS-102785](https://issues.redhat.com/browse/OCPBUGS-102785): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#117](https://github.com/openshift/cloud-provider-ibm/pull/117)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/cc0d54159c5d626aaa91eef94a92a80b3d1a3870...9aee59216203bd2e5fc8afbfffef988736a469de)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/5a701801611b4117c67170306b2149e429dd55a7)

* [OCPBUGS-102790](https://issues.redhat.com/browse/OCPBUGS-102790): Use patched x/net fork v0.35.0-sec.4 [#186](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/186)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/b039b8e368063df3ef5985600250515680f7fa25...5a701801611b4117c67170306b2149e429dd55a7)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/ef4e3cd1150421793938eaeddf8b1e177864282e)

* [OCPBUGS-102789](https://issues.redhat.com/browse/OCPBUGS-102789): Bump golang.org/x/net to v0.35.0-sec.4 [#62](https://github.com/openshift/ibm-vpc-node-label-updater/pull/62)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/9b13bd4c73e7fa58c109dc3e3b9221773cd7e0e3...ef4e3cd1150421793938eaeddf8b1e177864282e)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/b15667b0e420e7e5a40e4b903fd4947849c06ada)

* [OCPBUGS-102817](https://issues.redhat.com/browse/OCPBUGS-102817): Replace golang.org/x/net with openshift-sustaining/net [#169](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/169)
* [OCPBUGS-115545](https://issues.redhat.com/browse/OCPBUGS-115545): Fetch envtest assets from the controller-tools releases [#180](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/180)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/bdc981bde680b3a1bc3a80a2c2cfd1c7b2c110e8...b15667b0e420e7e5a40e4b903fd4947849c06ada)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/60300f023a8f6d01d4bd799ac01ff6ad47b352c0)

* [OCPBUGS-102807](https://issues.redhat.com/browse/OCPBUGS-102807): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#107](https://github.com/openshift/machine-api-provider-ibmcloud/pull/107)
* NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket [#112](https://github.com/openshift/machine-api-provider-ibmcloud/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/6846b9a79e2f2dfc39061fe7625202db30a9a6b4...60300f023a8f6d01d4bd799ac01ff6ad47b352c0)


### [insights-operator](https://github.com/openshift/insights-operator/tree/475f6a31bb52b65065d4f3e971b197a5e8cb0a3f)

* [OCPBUGS-102804](https://issues.redhat.com/browse/OCPBUGS-102804): Bump golang.org/x/net to v0.35.0-sec.3 [#1358](https://github.com/openshift/insights-operator/pull/1358)
* [Full changelog](https://github.com/openshift/insights-operator/compare/975bba9802ebd6c0f1e52117584b82c38831eda8...475f6a31bb52b65065d4f3e971b197a5e8cb0a3f)


### [ironic](https://github.com/openshift/ironic-image/tree/4ad23bcc3442cdf21c95221126c929af8e4fed20)

* [OCPBUGS-97990](https://issues.redhat.com/browse/OCPBUGS-97990): bump openstack-ironic pin for CVE-2026-44918 fix [#913](https://github.com/openshift/ironic-image/pull/913)
* [OCPBUGS-97807](https://issues.redhat.com/browse/OCPBUGS-97807): bump openstack-ironic pin for CVE-2026-54423 fix(release-4.15) [#878](https://github.com/openshift/ironic-image/pull/878)
* [Full changelog](https://github.com/openshift/ironic-image/compare/943b1100380f2d3d02d524bbff2a8553cdde2718...4ad23bcc3442cdf21c95221126c929af8e4fed20)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/bcf0cdbc51481669651e8315a06f3940377508da)

* [OCPBUGS-99889](https://issues.redhat.com/browse/OCPBUGS-99889): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#311](https://github.com/openshift/ironic-agent-image/pull/311)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/7b3d8c155e6b8e3cb79e525f1db2dd8d905bef8c...bcf0cdbc51481669651e8315a06f3940377508da)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/6e3ef168ef09794d1d3b8c2582f8938c21c0a568)

* [OCPBUGS-102809](https://issues.redhat.com/browse/OCPBUGS-102809): [release-4.15] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#112](https://github.com/openshift/k8s-prometheus-adapter/pull/112)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/34e201936898455995cd60c6699c6329a696f288...6e3ef168ef09794d1d3b8c2582f8938c21c0a568)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/b93e2b984066ae4cdd61fcd3a8d9147ad902c0c8)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.15] [#86](https://github.com/openshift/kubernetes-metrics-server/pull/86)
* [OCPBUGS-102707](https://issues.redhat.com/browse/OCPBUGS-102707): CVE-2026-33814 openshift4/kube-metrics-server-rhel8:… [#73](https://github.com/openshift/kubernetes-metrics-server/pull/73)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/bcbf241cece8ef455be32a910f1570bae827b4a1...b93e2b984066ae4cdd61fcd3a8d9147ad902c0c8)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/22a00b8143a69d7af15e45609e594f0d87a730aa)

* [OCPBUGS-102811](https://issues.redhat.com/browse/OCPBUGS-102811): Use patched x/net fork v0.35.0-sec.4 [#161](https://github.com/openshift/kube-state-metrics/pull/161)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.15] [#190](https://github.com/openshift/kube-state-metrics/pull/190)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/037b59c265454c599dfb0829a856e14b1ab07896...22a00b8143a69d7af15e45609e594f0d87a730aa)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/659757f603394f0adfd59b4b9a2b5457427bea24)

* [OCPBUGS-102825](https://issues.redhat.com/browse/OCPBUGS-102825): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#1548](https://github.com/openshift/machine-api-operator/pull/1548)
* [OCPBUGS-130682](https://issues.redhat.com/browse/OCPBUGS-130682): Fix unit and vsphere namespace tests [#1580](https://github.com/openshift/machine-api-operator/pull/1580)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/d2712ea2ad4c4a93524ae363f617e1e82aa28458...659757f603394f0adfd59b4b9a2b5457427bea24)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/1290e685f133f927ccbf656d8988b9a7765fbd9d)

* [OCPBUGS-102816](https://issues.redhat.com/browse/OCPBUGS-102816): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#197](https://github.com/openshift/image-customization-controller/pull/197)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/213f5c866a3ae996170f6a28ffb7048327ae66d2...1290e685f133f927ccbf656d8988b9a7765fbd9d)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/80e192ab68ecf5c067b8a6453c24be870fca7b65)

* NO-JIRA: Updating monitoring-plugin-container image to be consistent with ART for 4.15 [#1399](https://github.com/openshift/monitoring-plugin/pull/1399)
* [OCPBUGS-127147](https://issues.redhat.com/browse/OCPBUGS-127147): Replace react-linkify with linkify-react to fix CVE-2026-59887 [#1355](https://github.com/openshift/monitoring-plugin/pull/1355)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/f19703f53dbf0943b02d42ec301af453dc7d697b...80e192ab68ecf5c067b8a6453c24be870fca7b65)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/75df1732d90b178391ce9ae218d95cf4bb26c3d7)

* [OCPBUGS-136606](https://issues.redhat.com/browse/OCPBUGS-136606): [release-4.15] Sync OWNERS and OWNERS_ALIASES with master [#400](https://github.com/openshift/oauth-proxy/pull/400)
* [OCPBUGS-112089](https://issues.redhat.com/browse/OCPBUGS-112089): bugfix: rewrite open redirect strings to '/' [#387](https://github.com/openshift/oauth-proxy/pull/387)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/d0833dc677a573e14ecd5be3dafeaac03e15aac4...75df1732d90b178391ce9ae218d95cf4bb26c3d7)


### [oauth-server](https://github.com/openshift/oauth-server/tree/25c9f9a789ea84e50052bcce7b713666d0325597)

* [OCPBUGS-102830](https://issues.redhat.com/browse/OCPBUGS-102830): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#292](https://github.com/openshift/oauth-server/pull/292)
* [OCPBUGS-87066](https://issues.redhat.com/browse/OCPBUGS-87066): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#275](https://github.com/openshift/oauth-server/pull/275)
* [Full changelog](https://github.com/openshift/oauth-server/compare/c055dbb9a84e04575ade106e9a43cc638a8aeaef...25c9f9a789ea84e50052bcce7b713666d0325597)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/55da6c9d28fcbd0c975fd42cf5916a10d7c192d9)

* [OCPBUGS-130909](https://issues.redhat.com/browse/OCPBUGS-130909): v1 accept catalog root entries and relative symlink targets [#1597](https://github.com/openshift/oc-mirror/pull/1597)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/18d55d6a096fa9713d9fbd8e9bd35f9c6112706d...55da6c9d28fcbd0c975fd42cf5916a10d7c192d9)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/4b6dd0e358b8e75d880adc4967567e31f0f79ff6)

* NO-ISSUE: synchronize OWNERS from main branch [#149](https://github.com/openshift/openshift-state-metrics/pull/149)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/1915f64591a18c11138d10c00c50b3f5cff632ce...4b6dd0e358b8e75d880adc4967567e31f0f79ff6)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/3bf0fd40a4534c6b13cbbc59fe18b5dd4ba7e8bf)

* [OCPBUGS-102841](https://issues.redhat.com/browse/OCPBUGS-102841): Use patched x/net fork v0.35.0-sec.4 [#200](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/200)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/c44a604df76d9f889e8366387396d2cfdb5a6424...3bf0fd40a4534c6b13cbbc59fe18b5dd4ba7e8bf)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/91512e7b67ac94df9568cc33d53cb49fc28cbb8e)

* [OCPBUGS-102858](https://issues.redhat.com/browse/OCPBUGS-102858): Use patched x/net fork v0.35.0-sec.4 [#1381](https://github.com/openshift/operator-framework-olm/pull/1381)
* [OCPBUGS-102857](https://issues.redhat.com/browse/OCPBUGS-102857): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#1375](https://github.com/openshift/operator-framework-olm/pull/1375)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b7cee7e4946c39704b192e78b34e2b0d621f915b...91512e7b67ac94df9568cc33d53cb49fc28cbb8e)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/ac7311a4ece482ff94f12a5854d56277234924f6)

* [OCPBUGS-105269](https://issues.redhat.com/browse/OCPBUGS-105269): Mitigate CVE-2025-30204 by bumping github.com/golang-jwt/jwt/v4 to v4.5.2 [#140](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/140)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/38bee567a703d3d5ab2ca6e1e047eea8e799c3c5...ac7311a4ece482ff94f12a5854d56277234924f6)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/dbafe465622fd6d5cbd6b3c538865b30e722233e)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.15] [#402](https://github.com/openshift/prom-label-proxy/pull/402)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4...dbafe465622fd6d5cbd6b3c538865b30e722233e)


### [prometheus](https://github.com/openshift/prometheus/tree/2eab5cdc63f4bbeb16478b726ec8f7af41977024)

* [OCPBUGS-129665](https://issues.redhat.com/browse/OCPBUGS-129665): fix for CVE-2026-42151 [#397](https://github.com/openshift/prometheus/pull/397)
* [OCPBUGS-93655](https://issues.redhat.com/browse/OCPBUGS-93655): remote/azuread: use Secret type for OAuth client_secret [release-4.15] [#362](https://github.com/openshift/prometheus/pull/362)
* [OCPBUGS-102853](https://issues.redhat.com/browse/OCPBUGS-102853): Use patched x/net fork v0.35.0-sec.4 [#377](https://github.com/openshift/prometheus/pull/377)
* NO-ISSUE: synchronize OWNERS from main branch [#385](https://github.com/openshift/prometheus/pull/385)
* [Full changelog](https://github.com/openshift/prometheus/compare/f5ef2c4a07c3ef1ca3d152d46312cdc10728bd82...2eab5cdc63f4bbeb16478b726ec8f7af41977024)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/9f4d4f4d59634739cf7d8cb33a0b75121cafd1b7)

* [OCPBUGS-98170](https://issues.redhat.com/browse/OCPBUGS-98170): bump github.com/hashicorp/memberlist to a forked version to fix CVE-2026-14362 [#204](https://github.com/openshift/prometheus-alertmanager/pull/204)
* NO-JIRA: synchronize OWNERS with main [#199](https://github.com/openshift/prometheus-alertmanager/pull/199)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/683f4f217cdfa0f8847844f57ef961bb307c32d0...9f4d4f4d59634739cf7d8cb33a0b75121cafd1b7)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/d4b95df2391f127284c961b7e25854e617a462b7)

* NO-ISSUE: synchronize OWNERS from main branch [#421](https://github.com/openshift/prometheus-operator/pull/421)
* [OCPBUGS-102842](https://issues.redhat.com/browse/OCPBUGS-102842), [OCPBUGS-102845](https://issues.redhat.com/browse/OCPBUGS-102845): release-4.15] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#402](https://github.com/openshift/prometheus-operator/pull/402)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/902436ac6a8eec8f2f3f8b91f519a3d319924833...d4b95df2391f127284c961b7e25854e617a462b7)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/8003e3df372926ac663b618d49d13ac99e99feb8)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.15] [#206](https://github.com/openshift/node_exporter/pull/206)
* [OCPBUGS-102844](https://issues.redhat.com/browse/OCPBUGS-102844): Use patched x/net fork v0.35.0-sec.4 [#193](https://github.com/openshift/node_exporter/pull/193)
* [Full changelog](https://github.com/openshift/node_exporter/compare/aed837c322b6eb54d88956acada07b5b390b5c25...8003e3df372926ac663b618d49d13ac99e99feb8)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/54e5f5a9654986f73f079c90a8bf7c078e61b22e)

* [OCPBUGS-102695](https://issues.redhat.com/browse/OCPBUGS-102695): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#106](https://github.com/openshift/route-controller-manager/pull/106)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/eb7ed133e99c6ed6c31ca89c3a056e688c593378...54e5f5a9654986f73f079c90a8bf7c078e61b22e)


### [tests](https://github.com/openshift/origin/tree/5f7fd13dd62088759c24d734528c1c6f18ba732b)

* [OCPBUGS-130859](https://issues.redhat.com/browse/OCPBUGS-130859): stage the creation of test pods to minimize etcd impact [#31743](https://github.com/openshift/origin/pull/31743)
* [Full changelog](https://github.com/openshift/origin/compare/8acddbb71da35dcc067d5009b72ad5917674faf9...5f7fd13dd62088759c24d734528c1c6f18ba732b)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/177878b3f35d938242ccd9c6ab268c424e95e650)

* [OCPBUGS-102888](https://issues.redhat.com/browse/OCPBUGS-102888): Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.15 [#138](https://github.com/openshift/cloud-provider-vsphere/pull/138)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/429abecf805b4a6876c576f3f1c572866e23f235...177878b3f35d938242ccd9c6ab268c424e95e650)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/744f9ec239096ad3abecb33f784e6d1ca060c1b2)

* [OCPBUGS-102873](https://issues.redhat.com/browse/OCPBUGS-102873): Use patched x/net fork v0.35.0-sec.4 [#366](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/366)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/cb86a71f40db49e599591fd59a70ffc56a7fa99f...744f9ec239096ad3abecb33f784e6d1ca060c1b2)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/afb0e767f4920fbc3cc88016ab506a4ccb554ac5)

* [OCPBUGS-102889](https://issues.redhat.com/browse/OCPBUGS-102889): Bump golang.org/x/net to v0.35.0-sec.4 [#236](https://github.com/openshift/vsphere-problem-detector/pull/236)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/b5411c84f19f7b7eb550a9ea5eff273bec67c7ce...afb0e767f4920fbc3cc88016ab506a4ccb554ac5)