# 4.16.70
Created: 2026-09-02 18:49:10 +0000 UTC
Image Digest: `sha256:077bb2d0f053cfadc673374237b206740ab78f2663d3dbd1b49713c2ced88994`
## Changes from 4.16.54
### Components
* Kubectl 1.29.7
* Kubernetes 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202512030118-0 to 416.94.202609011112-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| StreamingCollectionEncodingToJSON
(0 tests)| Enabled| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| StreamingCollectionEncodingToProtobuf
(0 tests)| Enabled| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
### Removed images
* ovirt-csi-driver
* ovirt-csi-driver-operator
### Rebuilt images without code change
* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [5c16119a](https://github.com/openshift/assisted-service/commit/5c16119aeedc4c30e960a59ca91bbfe704879ad8) `sha256:94870fbf44675d8deccdc268397ed87d0b0188b56c530fd3abf8629f53d0328f`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [302f47ff](https://github.com/openshift/assisted-installer/commit/302f47ff8d1bf6f69159453722346f850515bcab) `sha256:5fa013be1c5fb30430e1d0dfe83f72cd83556fdf68035d253d0e16340946fcab`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [720b5023](https://github.com/openshift/assisted-installer-agent/commit/720b5023664bf91db7bccfed476545bdd21ae94d) `sha256:fc082ba0c720622a376c489c05281f218c65fd3f865d9e0b360c6e524c1061a2`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [302f47ff](https://github.com/openshift/assisted-installer/commit/302f47ff8d1bf6f69159453722346f850515bcab) `sha256:bd3a21b769c0ce890a656739afb440f45c504f9f12bf594ae20dacb30a8d7e60`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:491064fb8a56393a6211357e9d0dbff49b35e336236ffa3798ac70d0faa541ed`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [248372a4](https://github.com/openshift/cluster-api-provider-alibaba/commit/248372a4f668111a7bf134527911cb656c44d47a) `sha256:efb85722a2c30335d508d4279ca11aefd380d02ae4001c6c2cc51c8849d295b4`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ca81b6a3](https://github.com/openshift/apiserver-network-proxy/commit/ca81b6a32aff6ccb327f6889ec89c01afedd8efd) `sha256:dce135a72cb79591bfd13959fadb673583b88f2df363cd232da554fa5031f070`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [a53e9def](https://github.com/openshift/cloud-provider-aws/commit/a53e9def2e60eecd390575b59c85d54c5412ecd3) `sha256:4876ec5f664e0ab0d22142fad9b9e0207ffa2d6fdec9045c03b350deed63ca16`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:ba5f8cea0243810e8c235f6de0fb3cd21f0a40a85cc85363083f9530f2f062ca`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [ea7977e7](https://github.com/openshift/csi-operator/commit/ea7977e7c6e9e7372498218ac50976fb155815e7) `sha256:78302bdde40e00a7072c3c2b17e62232791fd18ba0e99781ca1df329551647f6`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [c66065de](https://github.com/openshift/aws-encryption-provider/commit/c66065de639016b770f512e7cfcfcee9519fb89f) `sha256:9c9382e36a4042b56fbf0191c687cb098615cf3a397247acc04dabbb1241dafc`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [459c5314](https://github.com/openshift/aws-pod-identity-webhook/commit/459c531487ae4dd94301e2996bf817d47124854c) `sha256:a07586a7dea25905a2e85220101595666da39e0fe79c4d1848741625f14fb1fa`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:523a688e96985ac45c06c4e0fcdc1fc366e520058cddf94271dc559915793312`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [ea7977e7](https://github.com/openshift/csi-operator/commit/ea7977e7c6e9e7372498218ac50976fb155815e7) `sha256:50f12a96b65b8b4e24b9b188772ee19cbf5a2b190dc7e68469f93d85ffbcffd8`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [ea7977e7](https://github.com/openshift/csi-operator/commit/ea7977e7c6e9e7372498218ac50976fb155815e7) `sha256:7f7561fd5d034fbf24e396d0befa35d473ad72bca738bd5ea61c1ed365490150`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [5d4b4f31](https://github.com/openshift/machine-api-provider-azure/commit/5d4b4f31f704af72810ed3f403aae478e52140b0) `sha256:187f048f61dc32068f70e80086f8085912f69a83262db420a0fd20b76767ec67`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [5b8d171e](https://github.com/openshift/azure-workload-identity/commit/5b8d171e853d10ba151bfac4ac1e76109524ca4b) `sha256:7eddd364a3caba046ba5e6348a99db3722e9af06cd8d306de20010e2d30cd3ee`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [0e39ace5](https://github.com/openshift/cluster-authentication-operator/commit/0e39ace55e81b082a50f67402e7776adb8c6c8a7) `sha256:b073c7f12a1dee270561f8da7f37e82832ce3894205429ee14955ee679f8d731`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [70164fc6](https://github.com/openshift/cluster-autoscaler-operator/commit/70164fc606a7b05352d92a8d07bd6ac42421c0ae) `sha256:dc6fb4c9b72c0fb9b37a0c7d6db833c26aa88c7414ef5b1e43243ae754917fa4`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:a9e7d2d5bbe7da786bf8b880bd403cb8c1e57ce57690dc7c13871246aabf220d`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [5830a10a](https://github.com/openshift/cluster-api/commit/5830a10a2f545dc25ff4ca4c4efd9005088676aa) `sha256:a0a8e6cb81a64e252f3d3457b9523ec31f0f8322c4f593de3f0761c554d87a8a`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [d721cd62](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/d721cd62b5edec3f1b0b7a61b3e6e2af50bb71bc) `sha256:183bc58d2ddd6520d05fa321e4de3738fefb6879522dc39ebc55479a33b0777f`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [441d29c9](https://github.com/openshift/cluster-config-operator/commit/441d29c92b1759d1780a525112e764280b78b0d6) `sha256:8eea32bbbcfc7eaa94eafb8ec485b2090a8e9dd7f34487329155268e7fc05dec`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [14571e8a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c) `sha256:928535eb636810a23406373dd6853f3720719651b265492827c8b33e523b013c`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [439826e1](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/439826e1a723c094717877db0f2ca1848d0fb10a) `sha256:1e974877d26a1df28d8c2a049aaebbeafac7be1f761572af9795d54f905283fb`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [a4b1cfb4](https://github.com/openshift/cluster-dns-operator/commit/a4b1cfb4927052f4e21e919d0af05f78ca4fcace) `sha256:96427d9ba809fa73392a536498c8fa684d8cba763e59e7e6cea409587f4e3fa4`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:92b98837e6c3645838464ea31e074aa5766c0da851d699c6f71a21a62167bc49`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [b3faac1f](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/b3faac1f48914e94fa9af074f387c871dad84a9c) `sha256:36cd1c7071ff26b32683ca8aa8c815fc271867faa667bed52330405a9e2bac82`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [7685374f](https://github.com/openshift/cluster-machine-approver/commit/7685374f0e84181801b6390876a0d12c61fa9913) `sha256:69d00e5a9037568e19e4880e423b84d90e0af1b0ef87e0b5b42e92b048c4c5a1`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2ed3cf99](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2ed3cf9965f8e6832cffde84f3de2fe210b79b49) `sha256:ea3861c7da90de9149483db7454c795fafc36530931e66b8cdda000cf8ad9aec`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:a678cf5cca22d674605692c4896fcc8d007abb1ee3755463bd36d2b992a74c2f`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [f9a02d5c](https://github.com/openshift/cluster-samples-operator/commit/f9a02d5c843839ee2031995459d38e4bddc6a84a) `sha256:e7f473671ae08b7b27ca6aecc4d35a44720215935a1d6daf33a0ca543144f6c0`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:f590be6b1469f5df13c7f20d8ae45987feebc7767598c1d25882cafa1514d29e`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [be820285](https://github.com/openshift/cluster-version-operator/commit/be820285dcf7b0ca4a712192ccb47fd0c843ea02) `sha256:d837970f6d197256617a272eae9f88cb7364a73bcc23baddee45e422a9405288`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:6e6aeb8e7b47afafe4122b0c2039fc169dbeca605782727228f4807bf0d3a38e`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [c25d1ff2](https://github.com/openshift/csi-driver-manila-operator/commit/c25d1ff2677a882504b18220dcbbe153781f3883) `sha256:1467e9b1a047d20cd66f74c3109948a9df9c7d865281ef44815787f8aa63d0ab`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:de9f285338280c4ede5f3d931df303483150232de794686d7ded3e5a6fe7b731`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:e9c5329a4230dfed3ca278201daece3760e7887f85697f2ee177bc1c19c9079e`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:48b176668db6f361f73b98585df837a1f9cff95286320ac6771ec69249386d4b`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:766de216287820e3242c025e2dce2655d35f01de74b852340a17e3cb774b258a`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:1fbfe0badb3b61465e05e0bc3de877afef136a35daf2b0256c261d7dd281990a`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [06e08fd2](https://github.com/openshift/csi-external-resizer/commit/06e08fd2e3c63e218e2973e4c711e9ae302948a4) `sha256:c56e137b48adc22c8204529f8f50c1278987a1b32817f3666a826c155a826757`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [ee32ba01](https://github.com/openshift/csi-external-snapshotter/commit/ee32ba01e1f89bac057611ad4580589652f250a3) `sha256:cba7a04770db8bc95cbd421c7cb83ff9e7363cd81dd3595cfe83a86237a9ee83`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:61cd6c86296716162a0beb8c17307475f4d027a2098be96626e0ca57c96da59f`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d1a2105b](https://github.com/openshift/csi-node-driver-registrar/commit/d1a2105b2bacd60f02495cbe571960caf41a1830) `sha256:25e697055f06b9a149495a5ebae67359efc124c96164ef39a705463c0042faf9`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [ee32ba01](https://github.com/openshift/csi-external-snapshotter/commit/ee32ba01e1f89bac057611ad4580589652f250a3) `sha256:4e240d2bff837102b5b9f6b1fb62b405719f2f80111ed777bf78af949cc00d27`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [ee32ba01](https://github.com/openshift/csi-external-snapshotter/commit/ee32ba01e1f89bac057611ad4580589652f250a3) `sha256:e604a92ca902b29f05de425f1c981d07130cd5f2deb673841550ab73ac43ec47`
* [docker-builder](https://github.com/openshift/builder) git [b602ffcb](https://github.com/openshift/builder/commit/b602ffcb9e84143cff71ce5591836ca876b6056e) `sha256:7a0aebc87fb1b51caf41fa771924dcdf13321ae4a58424f1f165af81b9f731df`
* [docker-registry](https://github.com/openshift/image-registry) git [072c544c](https://github.com/openshift/image-registry/commit/072c544c1eaab6d0e43fc63ab6c12c18bf524afb) `sha256:85c34b1ed899ec89bb45d704f765eb9079acc17596b976a3aeb6bcb9e359f379`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:f0cc975003ad1c4bf6407863742a7ba595fd64214c2561f3bdb650b484c3669c`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7089efe6](https://github.com/openshift/egress-router-cni/commit/7089efe6100c1f52f28adccf1dccc722b8dcacdc) `sha256:1f64ffb4b7a273f6680861b0db52266d979a234991f1a168f0aa0b9cba781156`
* [etcd](https://github.com/openshift/etcd) git [e7911c0d](https://github.com/openshift/etcd/commit/e7911c0d19925c0a67328052a8580a80fb40cb5b) `sha256:53fa02620d8a289670d66a75f60b97f9e6dfc960713dfd42b1da32dd0c631380`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:32dfd2b8d90a4d4c6f1b744cb4e4801e46f094adca64850635da8e4170574739`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:32bdb92942e4b4b1b78c1b8c8e6ef6a99721219114808e7598e1b8249cffbb27`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:fa8712d6f1fccada2c34ab4f5c089449f6ca8bc8345f7e60e59bcbadf1eb3c6d`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [9ca53768](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/9ca537683fc2ae2e7847032441fde42ff3171a48) `sha256:7e6c82fcc829112200763e31833d4482459e3c8dc341faa300040ddeb7fe9115`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [d29506e7](https://github.com/openshift/machine-api-provider-ibmcloud/commit/d29506e7fea609bc8f004256c9c057e5429f72a1) `sha256:afb6a411686dbfbad5085b1678ae2ac2692de51d590a70fb38bbf75aaca2df24`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:2885e24c25439d61c6755941cf674061f9b670ffb8a5f394f920d122fb029ded`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [f44e8a08](https://github.com/openshift/ironic-static-ip-manager/commit/f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f) `sha256:743e8e80852b9d92e101dcbbadae863dc6bf2f0b0e035b73755d8f118a577c5b`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:cce7aac6954ac5db1ec62b4a1f9fe446f30a65d69215c343db10f3dd474f9f20`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b58673a3](https://github.com/openshift/images/commit/b58673a314f0e8253fabadada2ee1a9e5b11c5cf) `sha256:214d663d79651726a17e391b5270c93ff629d6305f70daafb1893cc84d80383b`
* [kube-proxy](https://github.com/openshift/sdn) git [53fea06b](https://github.com/openshift/sdn/commit/53fea06bf50bdeff168cdf1ca3f5e19375c56f02) `sha256:f458e5c975cb035e877a2123cd14ae1ae533d24f5f46caea358e6c37451468c5`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [c38f4734](https://github.com/openshift/kube-rbac-proxy/commit/c38f4734c6b6931c75d46674122fb4b838b6e64b) `sha256:a81c48f4323f5b0b14d652198ca1b4edd865e60f6e6326ed1c0110015550b333`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [6f213320](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/6f2133209d90d822e79d679ed483eeb755ceaaf8) `sha256:8828ac79f0b7677b2b5a5deba5ebe2793911da81c70e9e3c3f0160fa9fa73f4c`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [a15bf454](https://github.com/openshift/multus-admission-controller/commit/a15bf454ad4446cefdb708ea3f121d08a0df83ee) `sha256:c474f29a3079a616ae8a10f4ae430c7c864e87136fc2136988611721eda27013`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f988f894](https://github.com/openshift/multus-networkpolicy/commit/f988f894ded7e6645a1b3cc0d6090601809d4e7c) `sha256:ab5f4a66a85d641908071d24d06995841563ef2a4a9ec9994aea1a3dfe06faa2`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [73594f77](https://github.com/openshift/route-override-cni/commit/73594f7759e76600c95601138ab5be4969978f63) `sha256:2927caab24d29c5a098f9320d6e130f5c3d92b275da7cd841e861061f612ad5e`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [e6880659](https://github.com/openshift/bond-cni/commit/e6880659ea1327c5b48dcf64a426eadfbafc0f1b) `sha256:3b932cb7a89b60737943261f85a77b3305cdf22d77ddabd5d6f598cd54fbdede`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [1210db38](https://github.com/openshift/network-metrics-daemon/commit/1210db38beff72968f1227f10312a9086b1b914e) `sha256:6180fd657b5173900ae2a6c8ace61dab4cfa0c62fedcc72e5bbd6bfe88583d2a`
* [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:9479ba3d1caacc67967c2e22b08d781410ce4d4255c168998f2cb28a2341b3be`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [28bf5963](https://github.com/openshift/cloud-provider-nutanix/commit/28bf5963c7f82ae8d966a69562a19f038d819950) `sha256:461742630bbdabafcfdba3680acfc33ff63e674e47db718103c60cb2697619ab`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [2f2e121b](https://github.com/openshift/machine-api-provider-nutanix/commit/2f2e121b6caea7073a5b7d64312f08f9d91233bb) `sha256:aaff855168a8c865e061c4c005854f924872e67597e8d57b589dc9c9cddb18d2`
* [oauth-server](https://github.com/openshift/oauth-server) git [3739138c](https://github.com/openshift/oauth-server/commit/3739138c8ebbeb73f6e89f61591dd16a3ece32e3) `sha256:e4b9e0ce4eab1821b07eeb9ba6db92540dc758a7d68d513cb9011b28d8a3fdc9`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [b137a53a](https://github.com/openshift/oc-mirror/commit/b137a53a5360a41a70432ea2bfc98a6cee6f7a4a) `sha256:c8af6b418d83ea79b7ff7ac875495a38d05730f33f35da9084cc48fa651dc9ce`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [79975a51](https://github.com/openshift/operator-framework-catalogd/commit/79975a511e1d31a09ef9b3b9e01262c8c69ff633) `sha256:49082060713aa608343d2898c90a73173b35d56341e3a2e3853b232459f06fa9`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [80b8649c](https://github.com/openshift/operator-framework-operator-controller/commit/80b8649cf7a57098d03eff0d155531cf63728f41) `sha256:788b6af3628d405c78560a0c07b5f63f9b639fbd95d50b52806c404aa685adb0`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [282cc84c](https://github.com/openshift/operator-framework-rukpak/commit/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6) `sha256:fa8d43edde1f0e56cacff8155d2fb53dc9cac37ad2852b1b8f976ce90fb4c5ef`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [90f73f7e](https://github.com/openshift/openshift-controller-manager/commit/90f73f7ea939b221b79684ebe6d2feb843fc1f83) `sha256:e324b2d02588dbee29f19fcd9a0974054fd9882cbbb8b16fe61fe4ebb35aa8dc`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:d1c527466208feb702aa123016f1fe20a1aa2dae799625169797cab9159d3898`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [85b52097](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7) `sha256:63af5ad9d13b01ac32a2b66a7018894edb41427a906aac5a7409e7a02cce97a5`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [3b972b2b](https://github.com/openshift/cluster-api-provider-openstack/commit/3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c) `sha256:c42fc17bc0d19e43a93820e737f68fb05b565517f4bca5b2fc05a72deb257833`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [26162bad](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/26162badb8422f36d9b52fac8467d48bf6078f5a) `sha256:10382018fbee14b08e2342cb0741efb6cf60d22364b31fe29504780a391b0e6f`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:57e54e5dc77a4659e25fe3c28cf3f097d5838b800387d970f3e402a3e928adc8`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [20e6dc70](https://github.com/openshift/cloud-provider-powervs/commit/20e6dc70d665e5d085df17d757a07e17c0e18fe0) `sha256:2f8b716a2e2e19d9b900d0c6eaaad97f50a42d83ac1375fa238d2ec1bfc685ce`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [2bfcc0f8](https://github.com/openshift/machine-api-provider-powervs/commit/2bfcc0f832d5237690ea900996e7679a5b5f0cd7) `sha256:ca4ecf36a802f9ee428f8d9f4f873388341b494efdd98549979d5441a723b7c5`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:ab21ca2412f995585e11596ece3c01b18777be542c24f399a9e155f73e2ab48e`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:6e1116e4d9b94e2f94f2b1a41c1349aac4199433cfa5be1697bacae2aa823b5e`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:280a399fd6fa0fe411d456af0577fa0d34f568e02e944c6b70ee189a98bda73e`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:3050be625c30b92e089dfda13b9c9a2e869a327c08a4ab4281444709e28dae1b`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:67ce0af5e9159ffff2bc54ebc37c889e1b2cc3703309b400f39921f51df26ee0`
* rhel-coreos `sha256:2663693e022cdf1d6bc3a4c75e278e30db65c8daf0686622f4774adce23d1c2a`
* rhel-coreos-extensions `sha256:81b7773f82ec328bc720c8d4b9b2df7033e18cfcf9eabf2d05d84b30e691ceac`
* [sdn](https://github.com/openshift/sdn) git [53fea06b](https://github.com/openshift/sdn/commit/53fea06bf50bdeff168cdf1ca3f5e19375c56f02) `sha256:d23a113b975273fcef819fa812f204568703276d2da6e2c282d329754b9f5940`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [538c7b98](https://github.com/openshift/service-ca-operator/commit/538c7b98a689e573b61e1abb1cb649da470c5fac) `sha256:3b26ea23eac36897ee2c869edbb67ed7e88a94ae1498d051c3a3feb9534b689b`
* [telemeter](https://github.com/openshift/telemeter) git [c1ecd105](https://github.com/openshift/telemeter/commit/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a) `sha256:b99d5fc9357b2ff2cd88948b918cd85a57cb2821d6ac8be7bcefd22c5ce2c1c8`
* [thanos](https://github.com/openshift/thanos) git [85eee25c](https://github.com/openshift/thanos/commit/85eee25c36702ec14b86dc3157856d2aa2634642) `sha256:4d3e5b2173f1dba567c82622e7203cb134eccff85f1eb041eb7a1ea06f52dc95`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [7940ea16](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/7940ea1685dee6d3f29a6360dac9a82dd1b09230) `sha256:46a3a19e79df07f344c0ad273564940f99d9b976b254cb40a447346e12a68718`
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/2b81ca4678230f5a9e518e49022960990ae68ee6)
* [OCPBUGS-68046](https://issues.redhat.com/browse/OCPBUGS-68046): bump github.com/sirupsen/logrus to v1.9.3 [#239](https://github.com/openshift/agent-installer-utils/pull/239)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/6e6bb40d95bd966eb6b152e66c5b91794806c4bc...2b81ca4678230f5a9e518e49022960990ae68ee6)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/8ab43ce562be1e8e4cd2e8bc5ecd434d3db907de)
* [OCPBUGS-78227](https://issues.redhat.com/browse/OCPBUGS-78227): [release-4.16] update go mod dependency for konflux [#591](https://github.com/openshift/cluster-api-provider-aws/pull/591)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b7868f0f14f7bd45bd697bd21c0528f9ff718195...8ab43ce562be1e8e4cd2e8bc5ecd434d3db907de)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/169f6ab7eda8badff93a34074b03841e8f716dbb)
* [OCPBUGS-73903](https://issues.redhat.com/browse/OCPBUGS-73903): Fix reconciler consistency checks in Update and Exists [#168](https://github.com/openshift/machine-api-provider-aws/pull/168)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/249ee5ce8c79986e0ce593c736f4d26fab35696e...169f6ab7eda8badff93a34074b03841e8f716dbb)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/a3ebdc0ff7017b46f6eb23503140c90a738cdeb1)
* [OCPBUGS-79998](https://issues.redhat.com/browse/OCPBUGS-79998), [OCPBUGS-85635](https://issues.redhat.com/browse/OCPBUGS-85635), [OCPBUGS-85636](https://issues.redhat.com/browse/OCPBUGS-85636): Bump google.golang.org/grpc to v1.79.3 [#182](https://github.com/openshift/cloud-provider-azure/pull/182)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/e5bac3341fce67c12047caaafcf188c3f3049dc3...a3ebdc0ff7017b46f6eb23503140c90a738cdeb1)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/d5d7c1df941bca00c137cff299a5e7c63dc3f077)
* [OCPBUGS-78176](https://issues.redhat.com/browse/OCPBUGS-78176): [release-4.16] update go mod dependency for konflux [#364](https://github.com/openshift/cluster-api-provider-azure/pull/364)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/a81e3b31948468d76ac744bbbb74b0c423fc969e...d5d7c1df941bca00c137cff299a5e7c63dc3f077)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/9d919fe14d7266a495d4b9b31eb3f08910167b28)
* [OCPBUGS-89335](https://issues.redhat.com/browse/OCPBUGS-89335): Address CVE-2026-33186 [#139](https://github.com/openshift/azure-file-csi-driver/pull/139)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/7a36778add73d12eb08ff6be357d8d351af651a7...9d919fe14d7266a495d4b9b31eb3f08910167b28)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/de2338968fa1fd9ee8ee7dc44ef4120008affbca)
* [OCPBUGS-79927](https://issues.redhat.com/browse/OCPBUGS-79927): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#48](https://github.com/openshift/azure-kubernetes-kms/pull/48)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/af633e05305c7adf67419ded3671903060ea4c66...de2338968fa1fd9ee8ee7dc44ef4120008affbca)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/441e0e5469d5698ce147c092c7c802d7c44b1557)
* [OCPBUGS-74885](https://issues.redhat.com/browse/OCPBUGS-74885): Azure UPI ARM template: use storageAccountId [#10282](https://github.com/openshift/installer/pull/10282)
* [OCPBUGS-76586](https://issues.redhat.com/browse/OCPBUGS-76586): terraform/provider/google: Fixing GCP inconsistencies present with the service account creation [#10298](https://github.com/openshift/installer/pull/10298)
* [OCPBUGS-73879](https://issues.redhat.com/browse/OCPBUGS-73879): data/manifests/bootkube/cvo-overrides: Default to eus-4.16 [#10226](https://github.com/openshift/installer/pull/10226)
* [Full changelog](https://github.com/openshift/installer/compare/2a152f886e2b9e1f9d9410799fa730a24a0a5b29...441e0e5469d5698ce147c092c7c802d7c44b1557)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/e8c0c0eddddf4c23ead0b0d9d63371d18edf2ea9)
* [OCPBUGS-78099](https://issues.redhat.com/browse/OCPBUGS-78099): [release-4.16] fix vendor/ for hermetic migration 4.16 [#243](https://github.com/openshift/cluster-api-provider-baremetal/pull/243)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/2b396e06c0a92acbfa688cd782ec4bf319ff3608...e8c0c0eddddf4c23ead0b0d9d63371d18edf2ea9)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/df0d060090789a9e1e40a9e5939758b8c1259411)
* [OCPBUGS-77278](https://issues.redhat.com/browse/OCPBUGS-77278): Unblock BMH direct deletion when detached annotation is present [#463](https://github.com/openshift/baremetal-operator/pull/463)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/84aeac37bd09c663278bf60faedd15241412f2fb...df0d060090789a9e1e40a9e5939758b8c1259411)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/db2c4c714cfe25c1fc2ab015aadd2c124b6cb5f8)
* [OCPBUGS-60113](https://issues.redhat.com/browse/OCPBUGS-60113): Re-add ENABLE_NODEIP_DEBUG env var [#362](https://github.com/openshift/baremetal-runtimecfg/pull/362)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/f55a330f8139ef660b3f60b735ef77538f7b9cbe...db2c4c714cfe25c1fc2ab015aadd2c124b6cb5f8)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/33afbae38573e7a0944ab0d00c8acee6b321c196)
* [OCPBUGS-91215](https://issues.redhat.com/browse/OCPBUGS-91215), [OCPBUGS-91552](https://issues.redhat.com/browse/OCPBUGS-91552), [OCPBUGS-91589](https://issues.redhat.com/browse/OCPBUGS-91589): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 [#2346](https://github.com/openshift/oc/pull/2346)
* [OCPBUGS-111894](https://issues.redhat.com/browse/OCPBUGS-111894): Fix pre-existing unit test failures [#2374](https://github.com/openshift/oc/pull/2374)
* [Full changelog](https://github.com/openshift/oc/compare/6f88b5846ab96ac1808c20038646d4dd669395cb...33afbae38573e7a0944ab0d00c8acee6b321c196)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/89ea129d6b1759840fc256ee8780190a0f500b3a)
* [OCPBUGS-81849](https://issues.redhat.com/browse/OCPBUGS-81849): Bump go-jose/go-jose/v4@v4.1.4 [#1040](https://github.com/openshift/cloud-credential-operator/pull/1040)
* [OCPBUGS-79941](https://issues.redhat.com/browse/OCPBUGS-79941): Bump google.golang.org/grpc to v1.79.3 [#1026](https://github.com/openshift/cloud-credential-operator/pull/1026)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d66c192eb6b2d0cba3b77427afcbec914a8b96be...89ea129d6b1759840fc256ee8780190a0f500b3a)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/b3854cc9ce8b5823078d9fe837f43106d807435a)
* [OCPBUGS-66346](https://issues.redhat.com/browse/OCPBUGS-66346): [release-4.16] Fix capacity calculation [#195](https://github.com/openshift/cloud-network-config-controller/pull/195)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/d24b0f07ced353d55cba263e25001e4f18ea905b...b3854cc9ce8b5823078d9fe837f43106d807435a)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/1f7a1aa91071c56901a8be989beb341731c8a4ff)
* [OCPBUGS-78702](https://issues.redhat.com/browse/OCPBUGS-78702): allow clusterapi provider to skip paused resources [#415](https://github.com/openshift/kubernetes-autoscaler/pull/415)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/8e627d3d74cc34c9789645070b4937d2c0bb52d9...1f7a1aa91071c56901a8be989beb341731c8a4ff)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/c6f66328514396b014ce76779297f9181d886983)
* [OCPBUGS-77447](https://issues.redhat.com/browse/OCPBUGS-77447): Bump github.com/go-errors/errors to v1.5.1 [#562](https://github.com/openshift/cluster-baremetal-operator/pull/562)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2e9eed1ba9f51e3176b48e22c28c96cd5479ccde...c6f66328514396b014ce76779297f9181d886983)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/be91ee59e14dff88506df6e70e35470638bc3589)
* [OCPBUGS-79943](https://issues.redhat.com/browse/OCPBUGS-79943): Bump google.golang.org/grpc to v1.79.3 [#573](https://github.com/openshift/cluster-capi-operator/pull/573)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#560](https://github.com/openshift/cluster-capi-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c699f6cfedbcd8509a85db2be3e6f90712b728fe...be91ee59e14dff88506df6e70e35470638bc3589)
### [cluster-config-api](https://github.com/openshift/api/tree/0677a8879a4608a5b6ecafd490fbbeb0ff77c6ef)
* [CNTRLPLANE-1982](https://issues.redhat.com/browse/CNTRLPLANE-1982): Promote streaming list encoding to Default [#2600](https://github.com/openshift/api/pull/2600)
* [OCPBUGS-71202](https://issues.redhat.com/browse/OCPBUGS-71202): Add HTTPKeepAliveTimeout to IngressController API [#2640](https://github.com/openshift/api/pull/2640)
* [Full changelog](https://github.com/openshift/api/compare/a010e8fb33bc906116a284003bd7384f0887c56c...0677a8879a4608a5b6ecafd490fbbeb0ff77c6ef)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/d9e83020b9eb7346dc8ef00961cf7837db18034e)
* [OCPBUGS-68058](https://issues.redhat.com/browse/OCPBUGS-68058): Update logrus to 1.9.3 to address CVE-2025-65637 [#1546](https://github.com/openshift/cluster-etcd-operator/pull/1546)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/ffa6c8229c2cf908fc20c9e5bf5c45cb1c7a6d08...d9e83020b9eb7346dc8ef00961cf7837db18034e)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/ed0afa7a74765b857ec0c51b84151df84d48fb3f)
* [OCPBUGS-68059](https://issues.redhat.com/browse/OCPBUGS-68059): : Bump github.com/sirupsen/logrus to v1.9.1 [#1285](https://github.com/openshift/cluster-image-registry-operator/pull/1285)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/0f1869b1ed6b73023a46072311064ce6de6bcc33...ed0afa7a74765b857ec0c51b84151df84d48fb3f)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/486cf49118585fbb2431a28002f0f6406f9b5b62)
* [OCPBUGS-86713](https://issues.redhat.com/browse/OCPBUGS-86713): Add configuration override for X-SSL strip [#1487](https://github.com/openshift/cluster-ingress-operator/pull/1487)
* [OCPBUGS-71202](https://issues.redhat.com/browse/OCPBUGS-71202): Implement HTTPKeepAliveTimeout tuning option [#1337](https://github.com/openshift/cluster-ingress-operator/pull/1337)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/218159f7b060760c7e910b57429beea2f3eb3146...486cf49118585fbb2431a28002f0f6406f9b5b62)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d0b79035dcec4011d4968e4701f8ff13d921cf2e)
* [OCPBUGS-68064](https://issues.redhat.com/browse/OCPBUGS-68064): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.16.z] [#2043](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2043)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/511bc434f628cf364966b53a5d350908e51d4b9c...d0b79035dcec4011d4968e4701f8ff13d921cf2e)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/39dd141c918da30da848fdb87ee333f909a16b84)
* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#624](https://github.com/openshift/cluster-kube-scheduler-operator/pull/624)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/630f63bc7a30d2662bbb5115233144079de6eef6...39dd141c918da30da848fdb87ee333f909a16b84)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/a26352fcbeebaab395b88fb011c39ed40185e0dd)
* [OCPBUGS-68069](https://issues.redhat.com/browse/OCPBUGS-68069): Bump github.com/sirupsen/logrus to v1.9.1 [#144](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/144)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e825811333c05b705c35d2e9a9a62e55e9ab0935...a26352fcbeebaab395b88fb011c39ed40185e0dd)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/404da202f052559d390c085a9d22f37e152502ec)
* [OCPBUGS-77276](https://issues.redhat.com/browse/OCPBUGS-77276): AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change [#2831](https://github.com/openshift/cluster-monitoring-operator/pull/2831)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ec12cd4fd5629b2dd54b77bd7211c175191271ca...404da202f052559d390c085a9d22f37e152502ec)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/69b8dae17be7eae9345b86a378a356f0f323f44f)
* [OCPBUGS-67000](https://issues.redhat.com/browse/OCPBUGS-67000): Re-disable metrics server [#2855](https://github.com/openshift/cluster-network-operator/pull/2855)
* [OCPBUGS-63233](https://issues.redhat.com/browse/OCPBUGS-63233): Manual feature backport of cert rotation for whereabouts [#3040](https://github.com/openshift/cluster-network-operator/pull/3040)
* [OCPBUGS-84182](https://issues.redhat.com/browse/OCPBUGS-84182): fix(hypershift): use net.JoinHostPort for URL construction [#2981](https://github.com/openshift/cluster-network-operator/pull/2981)
* [OCPBUGS-75890](https://issues.redhat.com/browse/OCPBUGS-75890): Tweak iptables-alerter to try to avoid crictl bug [#2898](https://github.com/openshift/cluster-network-operator/pull/2898)
* : NO-JIRA: Update CNO reviewers/approvers [#2768](https://github.com/openshift/cluster-network-operator/pull/2768)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e83d7d8449cff5fe79978f2e19971aad5aff5edc...69b8dae17be7eae9345b86a378a356f0f323f44f)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/26411b2287daa532bc8daad12e489ba1af0348fd)
* [OCPBUGS-82675](https://issues.redhat.com/browse/OCPBUGS-82675): Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 [#1551](https://github.com/openshift/cluster-node-tuning-operator/pull/1551)
* [OCPBUGS-78766](https://issues.redhat.com/browse/OCPBUGS-78766): [4.16] PPC: filter out namespaces dir [#1466](https://github.com/openshift/cluster-node-tuning-operator/pull/1466)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/eacd6ee98ab26722603083768d4f58727a390dbe...26411b2287daa532bc8daad12e489ba1af0348fd)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/822ed169b2ecce43e75ad649467712d13c3a32ba)
* [OCPBUGS-86243](https://issues.redhat.com/browse/OCPBUGS-86243): Update grpc-go to v1.67.3-sec.1 to fix CVE-2026-33186 [#206](https://github.com/openshift/cluster-olm-operator/pull/206)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/27bf70ddf9421637e1da18b249785b2cca177272...822ed169b2ecce43e75ad649467712d13c3a32ba)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/2497afd389d884f90d3b1950f81f2d2b4116fa3d)
* [OCPBUGS-68072](https://issues.redhat.com/browse/OCPBUGS-68072): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] [#654](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/654)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/d26f3002e10be6f206f69a829d1511130e8188d9...2497afd389d884f90d3b1950f81f2d2b4116fa3d)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/fba24ed11cebba1a3f6986e0e468a1e9a1964285)
* [OCPBUGS-87613](https://issues.redhat.com/browse/OCPBUGS-87613): remove oVirt code from CSO 4.16 [#709](https://github.com/openshift/cluster-storage-operator/pull/709)
* [OCPBUGS-78769](https://issues.redhat.com/browse/OCPBUGS-78769): Add patch permission to provisioner role [#685](https://github.com/openshift/cluster-storage-operator/pull/685)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a5de0226c9aee515fb937fc7458d5edb0e487a19...fba24ed11cebba1a3f6986e0e468a1e9a1964285)
### [console](https://github.com/openshift/console/tree/5444707d82a8728925edeaa269efb040bbe639da)
* [OCPBUGS-114417](https://issues.redhat.com/browse/OCPBUGS-114417): Prevent binary secret data corruption when editing [#17101](https://github.com/openshift/console/pull/17101)
* [OCPBUGS-105793](https://issues.redhat.com/browse/OCPBUGS-105793): Disable failing OLM and other e2e tests to unblock CI [#16958](https://github.com/openshift/console/pull/16958)
* [OCPBUGS-105796](https://issues.redhat.com/browse/OCPBUGS-105796): Fix operator-hub e2e test by replacing unavailable Red Hat catalog source with Community [#17081](https://github.com/openshift/console/pull/17081)
* [OCPBUGS-87987](https://issues.redhat.com/browse/OCPBUGS-87987): [release-4.16] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16599](https://github.com/openshift/console/pull/16599)
* [OCPBUGS-81597](https://issues.redhat.com/browse/OCPBUGS-81597): CVE-2026-4800 [#16566](https://github.com/openshift/console/pull/16566)
* [OCPBUGS-77123](https://issues.redhat.com/browse/OCPBUGS-77123): [release-4.16] CVE-2026-26996 Bump minimatch library [#16346](https://github.com/openshift/console/pull/16346)
* [OCPBUGS-79439](https://issues.redhat.com/browse/OCPBUGS-79439): Bump immutable [#16657](https://github.com/openshift/console/pull/16657)
* [OCPBUGS-88027](https://issues.redhat.com/browse/OCPBUGS-88027): Fix JSON annotation parsing to prevent OperatorHub crash [#16588](https://github.com/openshift/console/pull/16588)
* [OCPBUGS-88377](https://issues.redhat.com/browse/OCPBUGS-88377), [OCPBUGS-88380](https://issues.redhat.com/browse/OCPBUGS-88380), [OCPBUGS-88412](https://issues.redhat.com/browse/OCPBUGS-88412), [OCPBUGS-88419](https://issues.redhat.com/browse/OCPBUGS-88419), [OCPBUGS-88444](https://issues.redhat.com/browse/OCPBUGS-88444): CVE-2026-44495 [#16612](https://github.com/openshift/console/pull/16612)
* [OCPBUGS-88554](https://issues.redhat.com/browse/OCPBUGS-88554): Stabilize legacy OperatorHub Cypress waits [#16608](https://github.com/openshift/console/pull/16608)
* NO-JIRA: enable multi-architecture yarn builds [#16417](https://github.com/openshift/console/pull/16417)
* [OCPBUGS-83299](https://issues.redhat.com/browse/OCPBUGS-83299): [release-4.16] openshift4/ose-console-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#16298](https://github.com/openshift/console/pull/16298)
* [OCPBUGS-78673](https://issues.redhat.com/browse/OCPBUGS-78673): Namespace is not persisting when switching to developer view from the topology page of admin page [#16161](https://github.com/openshift/console/pull/16161)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16078](https://github.com/openshift/console/pull/16078)
* [OCPBUGS-76578](https://issues.redhat.com/browse/OCPBUGS-76578): Bump axios [#16032](https://github.com/openshift/console/pull/16032)
* NO-JIRA: Bump builder image to v29 [#15993](https://github.com/openshift/console/pull/15993)
* [OCPBUGS-74447](https://issues.redhat.com/browse/OCPBUGS-74447): Bump lodash to latest [#15967](https://github.com/openshift/console/pull/15967)
* [OCPBUGS-69678](https://issues.redhat.com/browse/OCPBUGS-69678): Disallowed Pipelines-plugin Pipelines navigation section [#15857](https://github.com/openshift/console/pull/15857)
* [Full changelog](https://github.com/openshift/console/compare/7eae27421a802014fc60cf891a71fa6ff1a85b50...5444707d82a8728925edeaa269efb040bbe639da)
### [console-operator](https://github.com/openshift/console-operator/tree/52a864c8aee7cbf431304b24d16e9d86f8a584f6)
* [OCPBUGS-77992](https://issues.redhat.com/browse/OCPBUGS-77992): update go mod dependency for konflux [#1115](https://github.com/openshift/console-operator/pull/1115)
* [Full changelog](https://github.com/openshift/console-operator/compare/04f80faf396b645582e5a19041e7faa5bf203443...52a864c8aee7cbf431304b24d16e9d86f8a584f6)
### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/b37e7f891eeff87fe5ae0a3ce8f7897933f525cb)
* [OCPBUGS-85669](https://issues.redhat.com/browse/OCPBUGS-85669): CI Build root image tag sync with ART [#234](https://github.com/openshift/containernetworking-plugins/pull/234)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/5f9ee066b2b7768606ffae81b52e8bd0f25cb471...b37e7f891eeff87fe5ae0a3ce8f7897933f525cb)
### [coredns](https://github.com/openshift/coredns/tree/6704e15689cbc58c40c2747d04a39a1d55104fef)
* [OCPBUGS-77463](https://issues.redhat.com/browse/OCPBUGS-77463): Modify .gitignore to not exclude vendor build folders [#168](https://github.com/openshift/coredns/pull/168)
* [Full changelog](https://github.com/openshift/coredns/compare/1e417656c1c72d3410b31ee08caf25bcdf8836e3...6704e15689cbc58c40c2747d04a39a1d55104fef)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/9217d4a54f8308f7fea8d50d5c973cdcb6134a3c)
* [OCPBUGS-79978](https://issues.redhat.com/browse/OCPBUGS-79978): Bump google.golang.org/grpc [#389](https://github.com/openshift/cloud-provider-openstack/pull/389)
* [OCPBUGS-68080](https://issues.redhat.com/browse/OCPBUGS-68080): fix CVE-2025-65637 [#361](https://github.com/openshift/cloud-provider-openstack/pull/361)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/83d0aa3221daba495868a8b186c893cf12e44251...9217d4a54f8308f7fea8d50d5c973cdcb6134a3c)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/e1c714d2fa98555261d242f730b1a4f567fa53bf)
* [OCPBUGS-84931](https://issues.redhat.com/browse/OCPBUGS-84931): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.67.3-sec.1 to avoid go version bump and fix CVE-2026-33186 [#182](https://github.com/openshift/csi-driver-nfs/pull/182)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/406cec72a10684a7545a976a8c31e60712bcc5b2...e1c714d2fa98555261d242f730b1a4f567fa53bf)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/9366599d967db2b09061fef6fb9297963a78d5e4)
* [OCPBUGS-78280](https://issues.redhat.com/browse/OCPBUGS-78280): [release-4.16] update go mod dependency for konflux [#267](https://github.com/openshift/cluster-api-provider-gcp/pull/267)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/02432df87df9a731c8d630311854fbd515602e91...9366599d967db2b09061fef6fb9297963a78d5e4)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/9ddcc1043e0ca2b8933bb8b4f002a582f6da2cd9)
* [OCPBUGS-79970](https://issues.redhat.com/browse/OCPBUGS-79970): Bump google.golang.org/grpc to v1.79.3 [#167](https://github.com/openshift/machine-api-provider-gcp/pull/167)
* [OCPBUGS-79970](https://issues.redhat.com/browse/OCPBUGS-79970): [release-4.16] Fix setup-envtest GCS 401 by downloading binaries directly [#176](https://github.com/openshift/machine-api-provider-gcp/pull/176)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/8851888abd5f7f47edd12a56f515b8f333c09372...9ddcc1043e0ca2b8933bb8b4f002a582f6da2cd9)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/7d08d6facf2acfd6252f401bdbdb4425c059fdb9)
* [OCPBUGS-68087](https://issues.redhat.com/browse/OCPBUGS-68087): Update logrus to 1.9.3 [#92](https://github.com/openshift/gcp-pd-csi-driver/pull/92)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/5ed71c64ce9c1879f0d2a17976387f1b0292796d...7d08d6facf2acfd6252f401bdbdb4425c059fdb9)
### [haproxy-router](https://github.com/openshift/router/tree/94888b69fccf33ebd6ef87fb21fbde1318f0c1e2)
* [OCPBUGS-86713](https://issues.redhat.com/browse/OCPBUGS-86713): Strip X-SSL-* headers for plain HTTP [#805](https://github.com/openshift/router/pull/805)
* [OCPBUGS-79960](https://issues.redhat.com/browse/OCPBUGS-79960): Bump google.golang.org/grpc to v1.79.3 [#769](https://github.com/openshift/router/pull/769)
* [Full changelog](https://github.com/openshift/router/compare/7c4b47201b75421631739feb42e7ae86ae047739...94888b69fccf33ebd6ef87fb21fbde1318f0c1e2)
### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/41c4e9ba94f4f1bfece6b81f287a9e3cf63e79cd)
* [OCPBUGS-68041](https://issues.redhat.com/browse/OCPBUGS-68041), [OCPBUGS-68091](https://issues.redhat.com/browse/OCPBUGS-68091): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.16] [#2582](https://github.com/openshift/kubernetes/pull/2582)
* [OCPBUGS-74299](https://issues.redhat.com/browse/OCPBUGS-74299): Skip E2e: attach on previously attached volumes should work [#2568](https://github.com/openshift/kubernetes/pull/2568)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7b5d27f7df0938daa221007d80cf397885480af2...41c4e9ba94f4f1bfece6b81f287a9e3cf63e79cd)
### [hypershift](https://github.com/openshift/hypershift/tree/9f79ec9a8b77b41a6485924f42d74ffa9d902507)
* [OCPBUGS-99075](https://issues.redhat.com/browse/OCPBUGS-99075): fix(backport): konnectivity agent auth [#9097](https://github.com/openshift/hypershift/pull/9097)
* [OCPBUGS-84182](https://issues.redhat.com/browse/OCPBUGS-84182): fix(cno): use brackets only for IPv6 in server URL [#8348](https://github.com/openshift/hypershift/pull/8348)
* [OCPBUGS-76534](https://issues.redhat.com/browse/OCPBUGS-76534): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7704](https://github.com/openshift/hypershift/pull/7704)
* [OCPBUGS-74375](https://issues.redhat.com/browse/OCPBUGS-74375), [OCPBUGS-74376](https://issues.redhat.com/browse/OCPBUGS-74376): Support proxy authentication when user/pass is included in URL [#7578](https://github.com/openshift/hypershift/pull/7578)
* [OCPBUGS-73118](https://issues.redhat.com/browse/OCPBUGS-73118): Fix Konflux EC voilation, update deprecated base … [#7459](https://github.com/openshift/hypershift/pull/7459)
* [Full changelog](https://github.com/openshift/hypershift/compare/15dc3b5da0676c6022e2e73ebcd177c254cf9352...9f79ec9a8b77b41a6485924f42d74ffa9d902507)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/eb7b9c09f81b2e9a78bfa75d57cd4eab37989b52)
* [OCPBUGS-79964](https://issues.redhat.com/browse/OCPBUGS-79964): Bump google.golang.org/grpc to v1.79.3 [#145](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/145)
* [OCPBUGS-77210](https://issues.redhat.com/browse/OCPBUGS-77210): [release-4.16] standardize build paths [#124](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/124)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/668c884b139f2ed0ea89ebcbe1a6b915f8de66a9...eb7b9c09f81b2e9a78bfa75d57cd4eab37989b52)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/6d2887ad5bd40e9e2f8edfe1aab24d1f3675cc4f)
* [OCPBUGS-67288](https://issues.redhat.com/browse/OCPBUGS-67288): [release-4.16] Fix incomplete vendor/ [#138](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/138)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/f19534d79cdf99790c46da6721f29f3ed9027027...6d2887ad5bd40e9e2f8edfe1aab24d1f3675cc4f)
### [insights-operator](https://github.com/openshift/insights-operator/tree/a06a980f229864e7e5894416f2583e03f4b03fcd)
* [OCPBUGS-68370](https://issues.redhat.com/browse/OCPBUGS-68370): Add filtering to add other possible pod status to QEMU gatherer [#1200](https://github.com/openshift/insights-operator/pull/1200)
* [OCPBUGS-67009](https://issues.redhat.com/browse/OCPBUGS-67009): QEMU logs are not gathered if there are pending status virt-launcher pods [#1197](https://github.com/openshift/insights-operator/pull/1197)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0bb63f81c90506b58ba05f4823de648f187e4db0...a06a980f229864e7e5894416f2583e03f4b03fcd)
### [ironic](https://github.com/openshift/ironic-image/tree/dcaf30a843e422b2b41472b64332d6cceeb78d6b)
* [OCPBUGS-104459](https://issues.redhat.com/browse/OCPBUGS-104459): bump openstack-ironic pin for CVE-2026-54423 fix(release-4.16) [#877](https://github.com/openshift/ironic-image/pull/877)
* [OCPBUGS-76457](https://issues.redhat.com/browse/OCPBUGS-76457): Bump pyasn1 to 0.5.1-4 [#828](https://github.com/openshift/ironic-image/pull/828)
* [OCPBUGS-69789](https://issues.redhat.com/browse/OCPBUGS-69789): Bump eventlet version to 0.33.1-7 [#763](https://github.com/openshift/ironic-image/pull/763)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d08ca1e28ec84a3b34e87aea3dcb67a475b342e5...dcaf30a843e422b2b41472b64332d6cceeb78d6b)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/735c02f8c2747c4a9b29a97dd54c1c5f9d2e859b)
* [OCPBUGS-95070](https://issues.redhat.com/browse/OCPBUGS-95070): Replace individual package removal with a single rpm -e loop [#288](https://github.com/openshift/ironic-agent-image/pull/288)
* [OCPBUGS-95070](https://issues.redhat.com/browse/OCPBUGS-95070): Replace dnf remove with rpm -e to prevent dependency removal [#276](https://github.com/openshift/ironic-agent-image/pull/276)
* [OCPBUGS-61165](https://issues.redhat.com/browse/OCPBUGS-61165): netutils: Use ethtool ioctl to get permanent mac address [#215](https://github.com/openshift/ironic-agent-image/pull/215)
* [OCPBUGS-69781](https://issues.redhat.com/browse/OCPBUGS-69781): Bump eventlet version to 0.33.1-7 [#232](https://github.com/openshift/ironic-agent-image/pull/232)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/aea138cd4ac822092199c141bb925b37527389cd...735c02f8c2747c4a9b29a97dd54c1c5f9d2e859b)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/f56f783a5a918e0d7fc2f1d0630aed5e72a12bb1)
* [OCPBUGS-79929](https://issues.redhat.com/browse/OCPBUGS-79929): Bump google.golang.org/grpc to v1.79.3 [#66](https://github.com/openshift/kubernetes-metrics-server/pull/66)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a...f56f783a5a918e0d7fc2f1d0630aed5e72a12bb1)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/7861a865875eaa2b5ce956f842fd2b3bb588192a)
* [OCPBUGS-74875](https://issues.redhat.com/browse/OCPBUGS-74875): Deduplicate CRS stores [#133](https://github.com/openshift/kube-state-metrics/pull/133)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/9b67b8d1adbd63e27b622b3d050e0673766a6f2d...7861a865875eaa2b5ce956f842fd2b3bb588192a)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/f331bdbaf28fd6249d83e46bacd926c0c395e1ff)
* [OCPBUGS-95082](https://issues.redhat.com/browse/OCPBUGS-95082): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#82](https://github.com/openshift/cloud-provider-kubevirt/pull/82)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3db76104a38bd9160ca24e2ed4a33649843f210a...f331bdbaf28fd6249d83e46bacd926c0c395e1ff)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/0a4bf7557b991e554df1613473f1d7e700ab5a6f)
* [OCPBUGS-79930](https://issues.redhat.com/browse/OCPBUGS-79930): Bump google.golang.org/grpc to v1.79.3 [#108](https://github.com/openshift/kubevirt-csi-driver/pull/108)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/d474c42ed4486f36cbcc8bfecac6b184483e92ee...0a4bf7557b991e554df1613473f1d7e700ab5a6f)
### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/0e11df99c202c12d1d58dd6e46d3e6d50b2ad252)
* [OCPBUGS-77196](https://issues.redhat.com/browse/OCPBUGS-77196): Fix incomplete vendor/ [#302](https://github.com/openshift/cluster-api-provider-libvirt/pull/302)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/4bd420eb2a0c79d0ec1b7f81a70e6c367f513914...0e11df99c202c12d1d58dd6e46d3e6d50b2ad252)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/77f20f3ab94f7cd55555d7ef58134505ec24e8cd)
* [OCPBUGS-98439](https://issues.redhat.com/browse/OCPBUGS-98439): Use resource group when generating default Azure image [#1516](https://github.com/openshift/machine-api-operator/pull/1516)
* [OCPBUGS-76849](https://issues.redhat.com/browse/OCPBUGS-76849): bumped logrus to v1.9.3 [#1463](https://github.com/openshift/machine-api-operator/pull/1463)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/0f08bd6aceaca6fd83d047faac51186d90d9c946...77f20f3ab94f7cd55555d7ef58134505ec24e8cd)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/7327bb2359dd01f5b98c6bc3bd43ae134b080d02)
* [OCPBUGS-98960](https://issues.redhat.com/browse/OCPBUGS-98960): Remove sensitive ControllerConfig logging [#6315](https://github.com/openshift/machine-config-operator/pull/6315)
* [OCPBUGS-98253](https://issues.redhat.com/browse/OCPBUGS-98253): Bootstrap MCS logging entire ignition [#6290](https://github.com/openshift/machine-config-operator/pull/6290)
* [OCPBUGS-62171](https://issues.redhat.com/browse/OCPBUGS-62171): Fix - NetworkManager restart or crash renders br-ex unusable [#5354](https://github.com/openshift/machine-config-operator/pull/5354)
* [OCPBUGS-60113](https://issues.redhat.com/browse/OCPBUGS-60113): Enable debug logging for nodeip-configuration [#5218](https://github.com/openshift/machine-config-operator/pull/5218)
* [OCPBUGS-77253](https://issues.redhat.com/browse/OCPBUGS-77253): Machine-config controller should not log about non-existent pull-secret changes [#5694](https://github.com/openshift/machine-config-operator/pull/5694)
* [OCPBUGS-77184](https://issues.redhat.com/browse/OCPBUGS-77184): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5685](https://github.com/openshift/machine-config-operator/pull/5685)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/67c9ad546b13e9f04f96524c8bbbb405725b7d61...7327bb2359dd01f5b98c6bc3bd43ae134b080d02)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/5460f7c3af5d8f6e63bff592373141bf23a3d192)
* [OCPBUGS-68093](https://issues.redhat.com/browse/OCPBUGS-68093): [4.16] uplift logrus [#153](https://github.com/openshift/image-customization-controller/pull/153)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/394809633b6b2e33ea1af444f7237f066bf0abb1...5460f7c3af5d8f6e63bff592373141bf23a3d192)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/4a52a4593fea1b939142add3dd7e9e5c7a06f880)
* [OCPBUGS-87878](https://issues.redhat.com/browse/OCPBUGS-87878): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#102](https://github.com/openshift/machine-os-images/pull/102)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/a99847b4450d58dbd0e487dd7e834586cd3e9289...4a52a4593fea1b939142add3dd7e9e5c7a06f880)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/12dce511332a9f749660c503456587bf3da9f09b)
* Fix for OCPBUGS-113514: CVE-2026-18446 [#1184](https://github.com/openshift/monitoring-plugin/pull/1184)
* Fix for OCPBUGS-94001: CVE-2026-13676 [#1049](https://github.com/openshift/monitoring-plugin/pull/1049)
* Fix for OCPBUGS-90069 OCPBUGS-90073: CVE-2026-12151 CVE-2026-9697 [#1007](https://github.com/openshift/monitoring-plugin/pull/1007)
* [OCPBUGS-79441](https://issues.redhat.com/browse/OCPBUGS-79441): immutable bump [#898](https://github.com/openshift/monitoring-plugin/pull/898)
* [OU-1260](https://issues.redhat.com/browse/OU-1260): [release-4.16] feat: use npm instead of yarn [#813](https://github.com/openshift/monitoring-plugin/pull/813)
* [OCPBUGS-76807](https://issues.redhat.com/browse/OCPBUGS-76807): fix for CVE-2025-69873 [#849](https://github.com/openshift/monitoring-plugin/pull/849)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/b3e669b974bff4240a547bfebcb443cf5d16a841...12dce511332a9f749660c503456587bf3da9f09b)
### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/89c3e1cc0eb7a7c8b0686916bfcb375edb78f7dd)
* [OCPBUGS-85251](https://issues.redhat.com/browse/OCPBUGS-85251): Fix server url in kubeconfig [#300](https://github.com/openshift/multus-cni/pull/300)
* NO-ISSUE: [release-4.16] Bump Go to 1.21 and fix CI build root image [#292](https://github.com/openshift/multus-cni/pull/292)
* [Full changelog](https://github.com/openshift/multus-cni/compare/e88ad2bbc482feb728c61783cfed85509b2a2db6...89c3e1cc0eb7a7c8b0686916bfcb375edb78f7dd)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/b8c8fc124b5933ae8bc08107b1d992bc607b325b)
* [OCPBUGS-70215](https://issues.redhat.com/browse/OCPBUGS-70215): Prevent accidental IP deallocation in statefulsets [#396](https://github.com/openshift/whereabouts-cni/pull/396)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/467d84ad05ef97ab2a36d27258185942e21d1636...b8c8fc124b5933ae8bc08107b1d992bc607b325b)
### [must-gather](https://github.com/openshift/must-gather/tree/fd6cbc7b46924094c746ae024c80a4b8a5e57ce6)
* [OCPBUGS-86218](https://issues.redhat.com/browse/OCPBUGS-86218): Collect object size with the object count [#550](https://github.com/openshift/must-gather/pull/550)
* [OCPBUGS-66106](https://issues.redhat.com/browse/OCPBUGS-66106): Separate resources with comma to fix malformed inspect [#515](https://github.com/openshift/must-gather/pull/515)
* [Full changelog](https://github.com/openshift/must-gather/compare/774a4e024925cc6034969eb84c9030a338a187e5...fd6cbc7b46924094c746ae024c80a4b8a5e57ce6)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/6f6120779248fcd0941c6d4f507f56e66cb06cc7)
* [OCPBUGS-74112](https://issues.redhat.com/browse/OCPBUGS-74112): UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update [#166](https://github.com/openshift/oauth-apiserver/pull/166)
* NO-JIRA: (chore): update OWNERS file [#172](https://github.com/openshift/oauth-apiserver/pull/172)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/f09a9be33b6455664a6842980fca4bd8008e9e6e...6f6120779248fcd0941c6d4f507f56e66cb06cc7)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/aeebf898c582b48dda33f083b38d143b9d37ec7c)
* [OCPBUGS-82682](https://issues.redhat.com/browse/OCPBUGS-82682): Address CVE-2026-35469 [#649](https://github.com/openshift/openshift-apiserver/pull/649)
* [OCPBUGS-68104](https://issues.redhat.com/browse/OCPBUGS-68104): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] [#610](https://github.com/openshift/openshift-apiserver/pull/610)
* [OCPBUGS-74113](https://issues.redhat.com/browse/OCPBUGS-74113): UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update [#595](https://github.com/openshift/openshift-apiserver/pull/595)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/575627db4295c204620c50c4e5ab12990f2ae08a...aeebf898c582b48dda33f083b38d143b9d37ec7c)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/84d4c65669fd54d91e33bc378d7eb45a3974399a)
* [OCPBUGS-78170](https://issues.redhat.com/browse/OCPBUGS-78170): hermetic 4.16 [#163](https://github.com/openshift/machine-api-provider-openstack/pull/163)
* [OCPBUGS-76794](https://issues.redhat.com/browse/OCPBUGS-76794): Fix make test [#155](https://github.com/openshift/machine-api-provider-openstack/pull/155)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/5ada1cbab3a9354488b1e74e85c36285302c3382...84d4c65669fd54d91e33bc378d7eb45a3974399a)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/6dabe49ae51c3a93043cee45062fdd5ffb1e4645)
* [OCPBUGS-79980](https://issues.redhat.com/browse/OCPBUGS-79980), [OCPBUGS-79981](https://issues.redhat.com/browse/OCPBUGS-79981), [OCPBUGS-87898](https://issues.redhat.com/browse/OCPBUGS-87898): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.67.3-sec.1 [release-4.16] [#1318](https://github.com/openshift/operator-framework-olm/pull/1318)
* [OCPBUGS-82057](https://issues.redhat.com/browse/OCPBUGS-82057): Drop github.com/distribution/distribution dep [#1302](https://github.com/openshift/operator-framework-olm/pull/1302)
* [OCPBUGS-77959](https://issues.redhat.com/browse/OCPBUGS-77959): Remove the collect-profiles info from the microshift kustomization file [#1251](https://github.com/openshift/operator-framework-olm/pull/1251)
* [OCPBUGS-77169](https://issues.redhat.com/browse/OCPBUGS-77169): Remove the collect-profiles job [#1235](https://github.com/openshift/operator-framework-olm/pull/1235)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e48ec38c748a5cb90cdaf2fe017fb161301886ae...6dabe49ae51c3a93043cee45062fdd5ffb1e4645)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/5d0e13792f967e2809b99f2b4cb43b00e2e5ef8d)
* [OCPBUGS-68108](https://issues.redhat.com/browse/OCPBUGS-68108), [OCPBUGS-68109](https://issues.redhat.com/browse/OCPBUGS-68109): CVE-2025-65637 fixed in logrus v1.9.3+ [#722](https://github.com/operator-framework/operator-marketplace/pull/722)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/f6d328d06a7546579c8456a3822f9c1596aec9cc...5d0e13792f967e2809b99f2b4cb43b00e2e5ef8d)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/5b36fd8eb481809b4d2e2d65c5a6ce8f03407749)
* [OCPBUGS-83497](https://issues.redhat.com/browse/OCPBUGS-83497): External gateway: Remove routes for external gateway pods in terminating or not ready state [#3140](https://github.com/openshift/ovn-kubernetes/pull/3140)
* [OCPBUGS-78033](https://issues.redhat.com/browse/OCPBUGS-78033): Add pperiyasamy to OWNERS for release-4.16 [#3047](https://github.com/openshift/ovn-kubernetes/pull/3047)
* [OCPBUGS-77685](https://issues.redhat.com/browse/OCPBUGS-77685): Clear stale conntrack UDP entries for nodePorts [#3038](https://github.com/openshift/ovn-kubernetes/pull/3038)
* [OCPBUGS-77187](https://issues.redhat.com/browse/OCPBUGS-77187): Fix conntrack reconciliation to use service port instead of endpoint port [#2998](https://github.com/openshift/ovn-kubernetes/pull/2998)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-76277](https://issues.redhat.com/browse/OCPBUGS-76277): [release-4.16] Dockerfile: Unpin OVN and consume the latest from FDP [#2972](https://github.com/openshift/ovn-kubernetes/pull/2972)
* [OCPBUGS-71219](https://issues.redhat.com/browse/OCPBUGS-71219): [release-4.16] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) [#2906](https://github.com/openshift/ovn-kubernetes/pull/2906)
* [OCPBUGS-72541](https://issues.redhat.com/browse/OCPBUGS-72541): NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated [#2933](https://github.com/openshift/ovn-kubernetes/pull/2933)
* [OCPBUGS-68349](https://issues.redhat.com/browse/OCPBUGS-68349): Add ricky-rav to OWNERS for release-4.16 [#2899](https://github.com/openshift/ovn-kubernetes/pull/2899)
* [OCPBUGS-66155](https://issues.redhat.com/browse/OCPBUGS-66155): Skip Pending pods in EgressIP status updates [#2880](https://github.com/openshift/ovn-kubernetes/pull/2880)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b1144476cf7e585d3ab765a5a9e0367e7b9801c5...5b36fd8eb481809b4d2e2d65c5a6ce8f03407749)
### [prometheus](https://github.com/openshift/prometheus/tree/9e07787900a6116c45788511755ef29d27a08444)
* [OCPBUGS-88616](https://issues.redhat.com/browse/OCPBUGS-88616): remote: validate snappy decoded length before allocation in read endpoint [#349](https://github.com/openshift/prometheus/pull/349)
* [OCPBUGS-79985](https://issues.redhat.com/browse/OCPBUGS-79985): Bump google.golang.org/grpc [#321](https://github.com/openshift/prometheus/pull/321)
* [Full changelog](https://github.com/openshift/prometheus/compare/e9fa80af084868b1e0f69e35b69e8ebca5ae1ddc...9e07787900a6116c45788511755ef29d27a08444)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/3543a1d78bc8acc6ac9d9bcfb1530996e4e76522)
* [OCPBUGS-100357](https://issues.redhat.com/browse/OCPBUGS-100357): Set testdata CA expiry to 20 years from issue date (#4112) [#146](https://github.com/openshift/prometheus-alertmanager/pull/146)
* [OCPBUGS-76536](https://issues.redhat.com/browse/OCPBUGS-76536): Include go-verify-deps expected files in gitignore [#116](https://github.com/openshift/prometheus-alertmanager/pull/116)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e9aea929f309f412678fdf1064e1f74db3ba08b4...3543a1d78bc8acc6ac9d9bcfb1530996e4e76522)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/c1af9e08f34658e703dd0d1bce5f2df8207c7cfd)
* [OCPBUGS-79934](https://issues.redhat.com/browse/OCPBUGS-79934): Bump google.golang.org/grpc to v1.79.3 [#87](https://github.com/openshift/route-controller-manager/pull/87)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/5da234dd58c092cba019807979f9c29664ddb860...c1af9e08f34658e703dd0d1bce5f2df8207c7cfd)
### [tests](https://github.com/openshift/origin/tree/ad93a681f5fdebdab588ee5402181c29aba4af10)
* [OCPBUGS-105460](https://issues.redhat.com/browse/OCPBUGS-105460): Use tagged version for openshift/kubernetes dependency [#31541](https://github.com/openshift/origin/pull/31541)
* [OCPBUGS-74299](https://issues.redhat.com/browse/OCPBUGS-74299): Update to latest openshift/kubernetes [#30825](https://github.com/openshift/origin/pull/30825)
* [Full changelog](https://github.com/openshift/origin/compare/eb4358f069c5ce04b311295adb4eb21d55a177d6...ad93a681f5fdebdab588ee5402181c29aba4af10)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/54af90db28cb799836ebce77ae9a266f106d8cc5)
* [OCPBUGS-78028](https://issues.redhat.com/browse/OCPBUGS-78028): hermetic migration 4.16 [#107](https://github.com/openshift/cloud-provider-vsphere/pull/107)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/023a3655c181512a870fe1c865dbdbd31690f439...54af90db28cb799836ebce77ae9a266f106d8cc5)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/dc5cdf19ea688fbbd2bceb7209d09611647a9d51)
* [OCPBUGS-78020](https://issues.redhat.com/browse/OCPBUGS-78020): hermetic migration 4.16 [#86](https://github.com/openshift/cluster-api-provider-vsphere/pull/86)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/f489582e5e92f2a8fffb7a39e70dadff54351af4...dc5cdf19ea688fbbd2bceb7209d09611647a9d51)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/5a7e624152717123899ac967d24be592456da44b)
* [OCPBUGS-86874](https://issues.redhat.com/browse/OCPBUGS-86874): Bump google.golang.org/grpc [#182](https://github.com/openshift/vmware-vsphere-csi-driver/pull/182)
* [OCPBUGS-68119](https://issues.redhat.com/browse/OCPBUGS-68119): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#158](https://github.com/openshift/vmware-vsphere-csi-driver/pull/158)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/03b7e8ebf2c6347b40a340d892e1a66d47806300...5a7e624152717123899ac967d24be592456da44b)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/34a9237a6b8b23b5056be2158b6cfe8679038140)
* [OCPBUGS-86445](https://issues.redhat.com/browse/OCPBUGS-86445): fix concurrent map writes [#219](https://github.com/openshift/vsphere-problem-detector/pull/219)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/3683c120278fb79a30340f66d22948aaddf3c16a...34a9237a6b8b23b5056be2158b6cfe8679038140)