# 4.16.75

Created: 2026-11-05 10:31:37 +0000 UTC

Image Digest: `sha256:4eda35319bd4f1cf62676d74e2ca48c772e55114f81c373fc09d01f75f83b4ce`


## Changes from 4.16.68

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202608011020-0 to 416.94.202611031928-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [2b81ca46](https://github.com/openshift/agent-installer-utils/commit/2b81ca4678230f5a9e518e49022960990ae68ee6) `sha256:70f2972881b81a08c45fd78609b78ef86749d5183b9de3a20da35b9b049eb198`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [248372a4](https://github.com/openshift/cluster-api-provider-alibaba/commit/248372a4f668111a7bf134527911cb656c44d47a) `sha256:f78374d567304f21ad852cde6550d9e8180a42f34ae78d028ba3272afc567a7d`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ca81b6a3](https://github.com/openshift/apiserver-network-proxy/commit/ca81b6a32aff6ccb327f6889ec89c01afedd8efd) `sha256:2537164fb1d3baaa3eee137d445a2ce4d1a25c4f91c0a467823c592e8c0ed178`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:9b9a2c996f5eee57cd61ccec7bf5b9926aa0a673ba014eb77d01263761a1cf7c`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [c66065de](https://github.com/openshift/aws-encryption-provider/commit/c66065de639016b770f512e7cfcfcee9519fb89f) `sha256:333e7b82b7062f0dd97b9e04b6f85cbd3156ca91e6057b5ce01a6dfbf176c6de`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [169f6ab7](https://github.com/openshift/machine-api-provider-aws/commit/169f6ab7eda8badff93a34074b03841e8f716dbb) `sha256:4c307ab0afca3d9a91b23bce12bb8f9fb31d734833bbfdf9b29d6f415ff5b96c`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [459c5314](https://github.com/openshift/aws-pod-identity-webhook/commit/459c531487ae4dd94301e2996bf817d47124854c) `sha256:eb6f2ec7e35f2e42a75352da7c0f13c11ea683e8f33c2751df421dcf9fa08f74`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d5d7c1df](https://github.com/openshift/cluster-api-provider-azure/commit/d5d7c1df941bca00c137cff299a5e7c63dc3f077) `sha256:6a87797428e46105b3c93e9db32ff8f8e1bdeb94269807231465a552715a76c4`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [de233896](https://github.com/openshift/azure-kubernetes-kms/commit/de2338968fa1fd9ee8ee7dc44ef4120008affbca) `sha256:7bc02b5b58c021feabf8bde3f6820ecda751e9de88b6cd2f8e4d931404d81cf1`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [e8c0c0ed](https://github.com/openshift/cluster-api-provider-baremetal/commit/e8c0c0eddddf4c23ead0b0d9d63371d18edf2ea9) `sha256:1cfdf0f999efff5c0844c263277fbad8a6edb7b1b7727c0592df0b3f91f883a6`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [df0d0600](https://github.com/openshift/baremetal-operator/commit/df0d060090789a9e1e40a9e5939758b8c1259411) `sha256:364c5cf6f5e05901a3f4ff8d5fdac02249f2c4519d58b6ebb631070bf2d44c89`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [db2c4c71](https://github.com/openshift/baremetal-runtimecfg/commit/db2c4c714cfe25c1fc2ab015aadd2c124b6cb5f8) `sha256:93e1626e12fe0d0ee7fd2caac29245259ad8749d88e066d89985beaac053de95`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [b3854cc9](https://github.com/openshift/cloud-network-config-controller/commit/b3854cc9ce8b5823078d9fe837f43106d807435a) `sha256:b0cf774703d31d59b7305b2e302e58cd2047f5e7b93ce899c50862a0a92ac416`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [1f7a1aa9](https://github.com/openshift/kubernetes-autoscaler/commit/1f7a1aa91071c56901a8be989beb341731c8a4ff) `sha256:dca24e3fce0312f7ed7007b790a167787f6c99f4692d865841946b3b78273f39`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [c6f66328](https://github.com/openshift/cluster-baremetal-operator/commit/c6f66328514396b014ce76779297f9181d886983) `sha256:1dae4ffa99eb6e69d800bab1ed715c36f445dcea5961c90c938207dbbe8c75d7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:a7d2bae00dcc68b7138771b174c448f11866a0c9b2c6e5c3f29c5fd57fdc4b42`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [5830a10a](https://github.com/openshift/cluster-api/commit/5830a10a2f545dc25ff4ca4c4efd9005088676aa) `sha256:22d1f5ca68cd4973671a1bcac6f1609720844a38217ba12b16415e23aa7339af`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [be91ee59](https://github.com/openshift/cluster-capi-operator/commit/be91ee59e14dff88506df6e70e35470638bc3589) `sha256:44c300619194be231d3ee3c576d7cdd2d28dcb6af741119641add486a81c2c3a`
* [cluster-config-api](https://github.com/openshift/api) git [0677a887](https://github.com/openshift/api/commit/0677a8879a4608a5b6ecafd490fbbeb0ff77c6ef) `sha256:6739dc2500a64e8c3c1216b9dda9c4a91c9270ad2024dccd891e41280887e84d`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [441d29c9](https://github.com/openshift/cluster-config-operator/commit/441d29c92b1759d1780a525112e764280b78b0d6) `sha256:70787175d3edd319b39206b5f2e3067d53d7103316557d0469dc1b558fc201f1`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [14571e8a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c) `sha256:5515bd1124a1b91ead8a7a09af4cb955b1c3fd45f78579a584c00a4ecb67b939`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [ed0afa7a](https://github.com/openshift/cluster-image-registry-operator/commit/ed0afa7a74765b857ec0c51b84151df84d48fb3f) `sha256:e57914188387a2c78f4103bb063e9a904343e697697725fa156b54ef6ab7b6bd`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [d0b79035](https://github.com/openshift/cluster-kube-apiserver-operator/commit/d0b79035dcec4011d4968e4701f8ff13d921cf2e) `sha256:b03046a2db8c62a59592d675eb8d8597a094967d9b144d13f65d5a8ade852ae3`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:762d372eb4d893fa02ca423c290cfa7f233a0e5b50858626a098fbf2c82b14e6`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [39dd141c](https://github.com/openshift/cluster-kube-scheduler-operator/commit/39dd141c918da30da848fdb87ee333f909a16b84) `sha256:1950dd5dd32370f817ba486b3e50635222d2c003aec800e1a108d348592c0aee`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [a26352fc](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/a26352fcbeebaab395b88fb011c39ed40185e0dd) `sha256:14e52eb157a35de81765dcfb226e595f7f2fb159bd4ea96583ca2d0e7a97013a`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [7685374f](https://github.com/openshift/cluster-machine-approver/commit/7685374f0e84181801b6390876a0d12c61fa9913) `sha256:1c058f73a86c478c05a2ec346e8a2962f2b1acac331e0a1c53c36e358a9c2290`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [26411b22](https://github.com/openshift/cluster-node-tuning-operator/commit/26411b2287daa532bc8daad12e489ba1af0348fd) `sha256:f4142eb54fec37b9e892cf75a1ccee865490bc9d6da3d2cb65b33b27df4b7f33`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [822ed169](https://github.com/openshift/cluster-olm-operator/commit/822ed169b2ecce43e75ad649467712d13c3a32ba) `sha256:85e9743c097371f4795016b213d7dd6fc5bab415fd91211fee414ea50bdc8f4e`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [2497afd3](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/2497afd389d884f90d3b1950f81f2d2b4116fa3d) `sha256:d9eb33ea3efa34a4cc6b777a10f5d5a844be592399ad93f5a000301af37da53c`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2ed3cf99](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2ed3cf9965f8e6832cffde84f3de2fe210b79b49) `sha256:2f20f6428b2ae4a25bde89cd59e3f97666ee8460d3a8a5802b26767f59acd43d`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:8e1c649643d248eb9e776b25200563c9fddcd6e3bf38d8bc0ed11a8e6ad387f5`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [f9a02d5c](https://github.com/openshift/cluster-samples-operator/commit/f9a02d5c843839ee2031995459d38e4bddc6a84a) `sha256:e265732cac3d736f2aebe460f267b28571240a3c81a96f4544d41ee82cd9266f`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:21b2dd99056f75dd73e643c1af8481d3cb08bcbdde46c9424b53bb11857aaf9a`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:c0261fb56b4e6153c9fa19c82811cb009267fa7e7002e04e2f2fd9c4892534b7`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [b37e7f89](https://github.com/openshift/containernetworking-plugins/commit/b37e7f891eeff87fe5ae0a3ce8f7897933f525cb) `sha256:476d21fa803c2350ab1b373ecee68d2242da50fe1963b342ad322663a18bd2fa`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [b37e7f89](https://github.com/openshift/containernetworking-plugins/commit/b37e7f891eeff87fe5ae0a3ce8f7897933f525cb) `sha256:b2dedb4d5ee97c1c9b90e273c44c53ee114805ac3bd17a8ce22f7a4073ddc5b7`
* [coredns](https://github.com/openshift/coredns) git [6704e156](https://github.com/openshift/coredns/commit/6704e15689cbc58c40c2747d04a39a1d55104fef) `sha256:99ae261a11eb6afc564c230da7d7384f7aaa534a48a1e5907f95d72e8f517569`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [e1c714d2](https://github.com/openshift/csi-driver-nfs/commit/e1c714d2fa98555261d242f730b1a4f567fa53bf) `sha256:581b502c8218c36ccbb0ef4108ec1e94ffa27b60eadb3b4ecf6b530e7a4290bc`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:f08949776c0da652bda712b6464be99603c6c18e84f060a61d3c5e1c875fafc1`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:de572ffd2ba9ab6527aa54c959a672626a3dc882aec5d1c0feed1eed07d3e969`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:e6b0c3823f83b07c05d25edc75f63c550b8e09a64b9e4f970c3942228a480856`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d1a2105b](https://github.com/openshift/csi-node-driver-registrar/commit/d1a2105b2bacd60f02495cbe571960caf41a1830) `sha256:c7a42318f31344ba91beac9594e53bcbad0e99dca7adca770719f7655c10a388`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:b603860a28bcd4394bb93ee79230dfaa810d38c9b62210090dbb69f304818716`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7089efe6](https://github.com/openshift/egress-router-cni/commit/7089efe6100c1f52f28adccf1dccc722b8dcacdc) `sha256:f7208f1b55357d616002941db2a011ee8b193af6aed3fc0e2b343cef7f8cadcf`
* [etcd](https://github.com/openshift/etcd) git [e7911c0d](https://github.com/openshift/etcd/commit/e7911c0d19925c0a67328052a8580a80fb40cb5b) `sha256:70d53c8a8b6ef42183d3ef83c27bcaf512f8eeb44f3ce598571eb7d891808b8c`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:bf455758878c2b337b76dd1736550dfaf12f181f90a21b3ef61a1c97f18f6dee`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [9366599d](https://github.com/openshift/cluster-api-provider-gcp/commit/9366599d967db2b09061fef6fb9297963a78d5e4) `sha256:69110724d4cb46169e7e306e85e7ec5bc556f3fa75793b20da07d5ae60208202`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:d979a5deb3f72eca40d08a4b22fd3b6915a37c390e325d37dabc17bddeb22edc`
* [hyperkube](https://github.com/openshift/kubernetes) git [41c4e9ba](https://github.com/openshift/kubernetes/commit/41c4e9ba94f4f1bfece6b81f287a9e3cf63e79cd) `sha256:ec651ec42427a199ef618cc757474f7c764831bb9864c8cf8601dcf787fa5728`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [eb7b9c09](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/eb7b9c09f81b2e9a78bfa75d57cd4eab37989b52) `sha256:42cf173ab84b50e07074c2e7fb38d7187575de006698a7dcd2ba8381a682f3a9`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:0f4c56d61808f25b299b23b37020efe68f4c92e720c626581a12b0e9a64ba3eb`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [f44e8a08](https://github.com/openshift/ironic-static-ip-manager/commit/f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f) `sha256:1d32f886034daba483dbed0831013d7aa1c1eb09aa97ba41fc2f7af0162e3683`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:283b532fe7fd1213296647690b93cba4dc1b2d6062e2a173d9a063977d7fd0c3`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b58673a3](https://github.com/openshift/images/commit/b58673a314f0e8253fabadada2ee1a9e5b11c5cf) `sha256:9f001785867f3b8d9d1cb99911a9cc580c909f25bafde867c4d5e138abcc6c71`
* [kube-proxy](https://github.com/openshift/sdn) git [53fea06b](https://github.com/openshift/sdn/commit/53fea06bf50bdeff168cdf1ca3f5e19375c56f02) `sha256:d337a77f476ca258474a4ac42ca7ec5a5743ef7fd2ddf73b11a389b275da6971`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [c38f4734](https://github.com/openshift/kube-rbac-proxy/commit/c38f4734c6b6931c75d46674122fb4b838b6e64b) `sha256:34b361d65ba030921bf33473ae195df8a4327fcc1fea9a0f1d34a985a1a1280a`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [6f213320](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/6f2133209d90d822e79d679ed483eeb755ceaaf8) `sha256:cde05f51c462953e51a72f9a405582e4a0f027d748877d179d82b323e3c95d2d`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [f331bdba](https://github.com/openshift/cloud-provider-kubevirt/commit/f331bdbaf28fd6249d83e46bacd926c0c395e1ff) `sha256:7d60e4e6491039cf598732082da550d91cd2efb55eb7b3404d376d0d0c4e0a8f`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [0a4bf755](https://github.com/openshift/kubevirt-csi-driver/commit/0a4bf7557b991e554df1613473f1d7e700ab5a6f) `sha256:5cacb831fafc5167e2ee557e5c9fa803f460667671ce4257acae2f43a30f3906`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [0e11df99](https://github.com/openshift/cluster-api-provider-libvirt/commit/0e11df99c202c12d1d58dd6e46d3e6d50b2ad252) `sha256:312eca38badafd8c0592d5420a77b0f1eab561dc25a04ab900d31108b359d727`
* [machine-config-operator](https://github.com/openshift/machine-config-operator) git [7327bb23](https://github.com/openshift/machine-config-operator/commit/7327bb2359dd01f5b98c6bc3bd43ae134b080d02) `sha256:8ecf992faef96b9c90e54684938fb9593535c0ef0ccc9062924c34d4e6b5c60e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [4a52a459](https://github.com/openshift/machine-os-images/commit/4a52a4593fea1b939142add3dd7e9e5c7a06f880) `sha256:66eb281706afcbce5fe1a22b9d812f6b813a910fba9fd90a5ba68c07f0f2f7d4`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [a15bf454](https://github.com/openshift/multus-admission-controller/commit/a15bf454ad4446cefdb708ea3f121d08a0df83ee) `sha256:0e5951909c40a70d9e6a49278024060d8f3a8958c9100bdc885774d20e0263f0`
* [multus-cni](https://github.com/openshift/multus-cni) git [89c3e1cc](https://github.com/openshift/multus-cni/commit/89c3e1cc0eb7a7c8b0686916bfcb375edb78f7dd) `sha256:e4e82487b71c9e6cfe9aee467ed6da10c1c16a6ce67c3b717127294ccb0ca7d5`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [89c3e1cc](https://github.com/openshift/multus-cni/commit/89c3e1cc0eb7a7c8b0686916bfcb375edb78f7dd) `sha256:68812ffd76fcc8ec51f0866c36425da9280742d13e6e1fb4b3cecd4bb60ddf08`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f988f894](https://github.com/openshift/multus-networkpolicy/commit/f988f894ded7e6645a1b3cc0d6090601809d4e7c) `sha256:f4945a13f7d47e2f4defbb1af256b38947c5fe9e0ea8420b22b29af73a504fdc`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [73594f77](https://github.com/openshift/route-override-cni/commit/73594f7759e76600c95601138ab5be4969978f63) `sha256:105bac2d1c74422eeeaf68f79f4051d35cda48f4aa51d41cde9b55ffdb4abfb0`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [b8c8fc12](https://github.com/openshift/whereabouts-cni/commit/b8c8fc124b5933ae8bc08107b1d992bc607b325b) `sha256:268618906bf541985c361ac33837da9996378585027bf05db41501a882526a13`
* [must-gather](https://github.com/openshift/must-gather) git [fd6cbc7b](https://github.com/openshift/must-gather/commit/fd6cbc7b46924094c746ae024c80a4b8a5e57ce6) `sha256:7498852900e2785c78647d02ded7354d5990b835e9f4fdfd258810943514becf`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [e6880659](https://github.com/openshift/bond-cni/commit/e6880659ea1327c5b48dcf64a426eadfbafc0f1b) `sha256:900df84036f696072fc816445eee814a9d356d5e209e2244df22670b1878f607`
* [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:65192e608077752f2f58804ec5025697d166257e0e39cd51163294659c0fda2e`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [28bf5963](https://github.com/openshift/cloud-provider-nutanix/commit/28bf5963c7f82ae8d966a69562a19f038d819950) `sha256:cdb698f0008ba9f3d2ab47d6dd843e9cad97d45531b81710836e0d2814d62ec3`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [2f2e121b](https://github.com/openshift/machine-api-provider-nutanix/commit/2f2e121b6caea7073a5b7d64312f08f9d91233bb) `sha256:bbd6cd727e168cd16074cd73c477b5ecf768ac7c89fa2cb7845758c2bec536d9`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [6f612077](https://github.com/openshift/oauth-apiserver/commit/6f6120779248fcd0941c6d4f507f56e66cb06cc7) `sha256:ba44f6aef2ff24f1d8dabf52c15839f100bec270136aa3c38c9010c2999a872f`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [282cc84c](https://github.com/openshift/operator-framework-rukpak/commit/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6) `sha256:1bbdee4a0de16bd4a9f15030fb733c475345591d10dbb83826decec9d4326008`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [aeebf898](https://github.com/openshift/openshift-apiserver/commit/aeebf898c582b48dda33f083b38d143b9d37ec7c) `sha256:2658d7e8571f785e3cb5ecb873ca4f588116875970a434c71a45b7d08623336b`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [90f73f7e](https://github.com/openshift/openshift-controller-manager/commit/90f73f7ea939b221b79684ebe6d2feb843fc1f83) `sha256:b6450d4040052edf47bd7c0ecfd20518d98fe717152217fb25355748bfec992d`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [3b972b2b](https://github.com/openshift/cluster-api-provider-openstack/commit/3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c) `sha256:ade12728831d104b78e76b6b04e826de8d0099f01313ead54dcaa318a8c9f4ab`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [84d4c656](https://github.com/openshift/machine-api-provider-openstack/commit/84d4c65669fd54d91e33bc378d7eb45a3974399a) `sha256:b8406457f86c73fe6e83434a3b4ac2bc7af903b58fe359bdd86a448f4773f03e`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5d0e1379](https://github.com/operator-framework/operator-marketplace/commit/5d0e13792f967e2809b99f2b4cb43b00e2e5ef8d) `sha256:1ed140225549bcad9f4086b16f5d593c426054048af8331b464e5c15b44a6f11`
* [pod](https://github.com/openshift/kubernetes) git [41c4e9ba](https://github.com/openshift/kubernetes/commit/41c4e9ba94f4f1bfece6b81f287a9e3cf63e79cd) `sha256:9162dfd5fecdb98ef74123a94e880b834d0ca52430402f4382aca2746802b7c2`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:2b35affc31891fa300d60e62f0348ba637a2920e3a3bb254e55216034f617490`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [20e6dc70](https://github.com/openshift/cloud-provider-powervs/commit/20e6dc70d665e5d085df17d757a07e17c0e18fe0) `sha256:06804cdf0a6391d197ab4a49cfb9d16917d0f29701f0b354b889b339b511d2d0`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [2bfcc0f8](https://github.com/openshift/machine-api-provider-powervs/commit/2bfcc0f832d5237690ea900996e7679a5b5f0cd7) `sha256:a631fdcbf3a41dedeadd8ccaaec4de9b104ae0a8a50f34067a02bc3d70b07a9b`
* rhel-coreos `sha256:b5ba1caa664a9f55c732bbf03665af3685c22479c7449dceb7234160607a9582`
* rhel-coreos-extensions `sha256:9fe08c99482c15e533c0002d0eb33d8938e62df7e37ddfa9381dfacb78c99d27`
* [sdn](https://github.com/openshift/sdn) git [53fea06b](https://github.com/openshift/sdn/commit/53fea06bf50bdeff168cdf1ca3f5e19375c56f02) `sha256:a6701f12fd4e88f41f73c827d22b3fe588818f9ec53f00b63cac505f2e36a38a`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [538c7b98](https://github.com/openshift/service-ca-operator/commit/538c7b98a689e573b61e1abb1cb649da470c5fac) `sha256:14febd47961a785d03b537965fe9557a73a9bcf25be38c9f10115fafc2756b6b`
* [telemeter](https://github.com/openshift/telemeter) git [c1ecd105](https://github.com/openshift/telemeter/commit/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a) `sha256:a39fc28233540408bf28871fb2ee120f18ef046f19edafcf807eed28c774756d`
* [thanos](https://github.com/openshift/thanos) git [85eee25c](https://github.com/openshift/thanos/commit/85eee25c36702ec14b86dc3157856d2aa2634642) `sha256:b393c971c75a054b8ba5ddf3ec485fc81dfe0eeda0a65df377f7cff693653d94`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [dc5cdf19](https://github.com/openshift/cluster-api-provider-vsphere/commit/dc5cdf19ea688fbbd2bceb7209d09611647a9d51) `sha256:0531e062cae122868ad375065490ef7e19e51a82eef7ebf7a97d9967e5d2b177`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [5a7e6241](https://github.com/openshift/vmware-vsphere-csi-driver/commit/5a7e624152717123899ac967d24be592456da44b) `sha256:4e01932a1bef17a6515110bec33d8a184fd9e9c09a1a921242fec910df17c4b1`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [5a7e6241](https://github.com/openshift/vmware-vsphere-csi-driver/commit/5a7e624152717123899ac967d24be592456da44b) `sha256:a5534c40fe0a2214ad915b6a87184a5c53f16c63e1deebe984f1f03ea9f10a0f`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/1b4bbb39c8452b6768262eb8ba41d385be45c63b)

* [OCPBUGS-89848](https://issues.redhat.com/browse/OCPBUGS-89848): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 [#10802](https://github.com/openshift/assisted-service/pull/10802)
* [Full changelog](https://github.com/openshift/assisted-service/compare/5c16119aeedc4c30e960a59ca91bbfe704879ad8...1b4bbb39c8452b6768262eb8ba41d385be45c63b)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/64b3aebaaf12e7a8c776314cfa0f3ca31778ac61)

* [OCPBUGS-102901](https://issues.redhat.com/browse/OCPBUGS-102901): Bump x/net to v0.35.0-sec.4 [#2295](https://github.com/openshift/assisted-installer/pull/2295)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/302f47ff8d1bf6f69159453722346f850515bcab...64b3aebaaf12e7a8c776314cfa0f3ca31778ac61)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9aa0f8edb70a8dcf9a10389fc50e70e4903c2572)

* [OCPBUGS-102913](https://issues.redhat.com/browse/OCPBUGS-102913): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1616](https://github.com/openshift/assisted-installer-agent/pull/1616)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/720b5023664bf91db7bccfed476545bdd21ae94d...9aa0f8edb70a8dcf9a10389fc50e70e4903c2572)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/bfcd3da8dab1170e279c5cc2dcc394c18da25793)

* [OCPBUGS-102906](https://issues.redhat.com/browse/OCPBUGS-102906): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#62](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/62)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/97e8335e2f0bc9ee48fe04f2c19820b557035d37...bfcd3da8dab1170e279c5cc2dcc394c18da25793)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/d39ac87149f736ddb6c7e9ba6e43f6e040658fdb)

* [OCPBUGS-103119](https://issues.redhat.com/browse/OCPBUGS-103119): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#177](https://github.com/openshift/cloud-provider-aws/pull/177)
* [OCPBUGS-88174](https://issues.redhat.com/browse/OCPBUGS-88174): replace golang.org/x/net with sustaining fork v0.35.0-sec.4 [#180](https://github.com/openshift/cloud-provider-aws/pull/180)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/a53e9def2e60eecd390575b59c85d54c5412ecd3...d39ac87149f736ddb6c7e9ba6e43f6e040658fdb)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/249a44626f6299b2b19289feede7b04097eaf136)

* [OCPBUGS-102914](https://issues.redhat.com/browse/OCPBUGS-102914): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#654](https://github.com/openshift/cluster-api-provider-aws/pull/654)
* 🌱 OCPBUGS-123712: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#645](https://github.com/openshift/cluster-api-provider-aws/pull/645)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8ab43ce562be1e8e4cd2e8bc5ecd434d3db907de...249a44626f6299b2b19289feede7b04097eaf136)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/c1c48cd02b9dcf3cc19993b448301ec78b586f28)

* [OCPBUGS-102919](https://issues.redhat.com/browse/OCPBUGS-102919), [OCPBUGS-102939](https://issues.redhat.com/browse/OCPBUGS-102939): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#608](https://github.com/openshift/csi-operator/pull/608)
* [Full changelog](https://github.com/openshift/csi-operator/compare/ea7977e7c6e9e7372498218ac50976fb155815e7...c1c48cd02b9dcf3cc19993b448301ec78b586f28)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/90fa18b0eaddca96014585962b72379eee9bd8d0)

* [OCPBUGS-102933](https://issues.redhat.com/browse/OCPBUGS-102933), [OCPBUGS-103121](https://issues.redhat.com/browse/OCPBUGS-103121): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#210](https://github.com/openshift/cloud-provider-azure/pull/210)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/a3ebdc0ff7017b46f6eb23503140c90a738cdeb1...90fa18b0eaddca96014585962b72379eee9bd8d0)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/c52f90bceeefcc0c381ed85e30339425db63fa7b)

* [OCPBUGS-102930](https://issues.redhat.com/browse/OCPBUGS-102930): Bump golang.org/x/net to v0.35.0-sec.4 [#174](https://github.com/openshift/azure-disk-csi-driver/pull/174)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/6b55f6fb004454f743aa0f2e1d96010396be4c45...c52f90bceeefcc0c381ed85e30339425db63fa7b)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/308c5c2e6ad62302139a51b8315f11c2360982d0)

* [OCPBUGS-102923](https://issues.redhat.com/browse/OCPBUGS-102923): Bump golang.org/x/net to v0.35.0-sec.4 [#160](https://github.com/openshift/azure-file-csi-driver/pull/160)
* UPSTREAM: 3221: OCPBUGS-115466: Bump golang.org/x/crypto to v0.33.0-sec.5 [#165](https://github.com/openshift/azure-file-csi-driver/pull/165)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/9d919fe14d7266a495d4b9b31eb3f08910167b28...308c5c2e6ad62302139a51b8315f11c2360982d0)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/ca4fe52f8d7ca8cd634752eac8a84e0cbc355be8)

* [OCPBUGS-103039](https://issues.redhat.com/browse/OCPBUGS-103039): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#215](https://github.com/openshift/machine-api-provider-azure/pull/215)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/5d4b4f31f704af72810ed3f403aae478e52140b0...ca4fe52f8d7ca8cd634752eac8a84e0cbc355be8)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/7cf6c9709971495a3d7681311bb41bef70429fe0)

* [OCPBUGS-102932](https://issues.redhat.com/browse/OCPBUGS-102932): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#65](https://github.com/openshift/azure-workload-identity/pull/65)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/5b8d171e853d10ba151bfac4ac1e76109524ca4b...7cf6c9709971495a3d7681311bb41bef70429fe0)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/1c9e8f873f1364f998e6ada04cc28ed9885d01e0)

* [OCPBUGS-134633](https://issues.redhat.com/browse/OCPBUGS-134633): Update RHCOS-release-4.16 bootimage metadata to 416.94.202610242150-0 [#11042](https://github.com/openshift/installer/pull/11042)
* [OCPBUGS-102938](https://issues.redhat.com/browse/OCPBUGS-102938): Bump golang.org/x/net to v0.35.0-sec.4 [#10973](https://github.com/openshift/installer/pull/10973)
* [OCPBUGS-89841](https://issues.redhat.com/browse/OCPBUGS-89841), [OCPBUGS-89843](https://issues.redhat.com/browse/OCPBUGS-89843), [OCPBUGS-89847](https://issues.redhat.com/browse/OCPBUGS-89847), [OCPBUGS-92760](https://issues.redhat.com/browse/OCPBUGS-92760): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.4 [#10924](https://github.com/openshift/installer/pull/10924)
* [OCPBUGS-127603](https://issues.redhat.com/browse/OCPBUGS-127603): Update gcloud version to one that can be found [#10918](https://github.com/openshift/installer/pull/10918)
* [OCPBUGS-67206](https://issues.redhat.com/browse/OCPBUGS-67206): Update RHCOS-release-4.16 bootimage metadata to 416.94.202608150307-0 [#10798](https://github.com/openshift/installer/pull/10798)
* Revert "OCPBUGS-60668: Update RHCOS-release-4.16 bootimage metadata to 416.94.202601221345-0" [#10846](https://github.com/openshift/installer/pull/10846)
* [OCPBUGS-60668](https://issues.redhat.com/browse/OCPBUGS-60668): Update RHCOS-release-4.16 bootimage metadata to 416.94.202601221345-0 [#10281](https://github.com/openshift/installer/pull/10281)
* [Full changelog](https://github.com/openshift/installer/compare/441e0e5469d5698ce147c092c7c802d7c44b1557...1c9e8f873f1364f998e6ada04cc28ed9885d01e0)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/cb89b608d4c8d322c5aa5d2776ec43936f1f47e3)

* [OCPBUGS-102912](https://issues.redhat.com/browse/OCPBUGS-102912), [OCPBUGS-102935](https://issues.redhat.com/browse/OCPBUGS-102935), [OCPBUGS-103104](https://issues.redhat.com/browse/OCPBUGS-103104): Use patched x/net fork v0.35.0-sec.4 [#2416](https://github.com/openshift/oc/pull/2416)
* [OCPBUGS-91215](https://issues.redhat.com/browse/OCPBUGS-91215), [OCPBUGS-91552](https://issues.redhat.com/browse/OCPBUGS-91552), [OCPBUGS-91589](https://issues.redhat.com/browse/OCPBUGS-91589): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 [#2346](https://github.com/openshift/oc/pull/2346)
* [OCPBUGS-111894](https://issues.redhat.com/browse/OCPBUGS-111894): Fix pre-existing unit test failures [#2374](https://github.com/openshift/oc/pull/2374)
* [Full changelog](https://github.com/openshift/oc/compare/6f88b5846ab96ac1808c20038646d4dd669395cb...cb89b608d4c8d322c5aa5d2776ec43936f1f47e3)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/89ea129d6b1759840fc256ee8780190a0f500b3a)

* [OCPBUGS-81849](https://issues.redhat.com/browse/OCPBUGS-81849): Bump go-jose/go-jose/v4@v4.1.4 [#1040](https://github.com/openshift/cloud-credential-operator/pull/1040)
* [OCPBUGS-79941](https://issues.redhat.com/browse/OCPBUGS-79941): Bump google.golang.org/grpc to v1.79.3 [#1026](https://github.com/openshift/cloud-credential-operator/pull/1026)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d66c192eb6b2d0cba3b77427afcbec914a8b96be...89ea129d6b1759840fc256ee8780190a0f500b3a)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/168cb690fad1317be897c65a25a885610db7afd8)

* [OCPBUGS-102924](https://issues.redhat.com/browse/OCPBUGS-102924): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#990](https://github.com/openshift/cluster-authentication-operator/pull/990)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/0e39ace55e81b082a50f67402e7776adb8c6c8a7...168cb690fad1317be897c65a25a885610db7afd8)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/075e448e1b5530fcf2905a69d04387218c6d90ec)

* [OCPBUGS-102934](https://issues.redhat.com/browse/OCPBUGS-102934): Bump x/net package in release-4.16 [#390](https://github.com/openshift/cluster-autoscaler-operator/pull/390)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/70164fc606a7b05352d92a8d07bd6ac42421c0ae...075e448e1b5530fcf2905a69d04387218c6d90ec)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/52dac3510ecfd43349c4db23e14a87a395c1cffa)

* [OCPBUGS-102954](https://issues.redhat.com/browse/OCPBUGS-102954): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#515](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/515)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/d721cd62b5edec3f1b0b7a61b3e6e2af50bb71bc...52dac3510ecfd43349c4db23e14a87a395c1cffa)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/3cdc34f90e64ad44099e7a7add0811e170f51c5d)

* [OCPBUGS-102965](https://issues.redhat.com/browse/OCPBUGS-102965): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#291](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/291)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/439826e1a723c094717877db0f2ca1848d0fb10a...3cdc34f90e64ad44099e7a7add0811e170f51c5d)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/683d36c622086a2a19d37052d423a02c4024bd25)

* [OCPBUGS-102964](https://issues.redhat.com/browse/OCPBUGS-102964): Use patched x/net fork v0.35.0-sec.4 [#493](https://github.com/openshift/cluster-dns-operator/pull/493)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/a4b1cfb4927052f4e21e919d0af05f78ca4fcace...683d36c622086a2a19d37052d423a02c4024bd25)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/55e73746a285f080f882bf64376afa5a22497170)

* [OCPBUGS-102962](https://issues.redhat.com/browse/OCPBUGS-102962): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#1697](https://github.com/openshift/cluster-etcd-operator/pull/1697)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/d9e83020b9eb7346dc8ef00961cf7837db18034e...55e73746a285f080f882bf64376afa5a22497170)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/fd63a64723ae8d734aef449ec140e7884fa8bdf1)

* [OCPBUGS-102952](https://issues.redhat.com/browse/OCPBUGS-102952): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#1573](https://github.com/openshift/cluster-ingress-operator/pull/1573)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/486cf49118585fbb2431a28002f0f6406f9b5b62...fd63a64723ae8d734aef449ec140e7884fa8bdf1)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0979b657820d11eec286cd0ccebae3af42a101a9)

* [OCPBUGS-102957](https://issues.redhat.com/browse/OCPBUGS-102957): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#963](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/963)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/b3faac1f48914e94fa9af074f387c871dad84a9c...0979b657820d11eec286cd0ccebae3af42a101a9)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5cc2998068f123dec944beb8a813a79d369c60cd)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.16] [#3113](https://github.com/openshift/cluster-monitoring-operator/pull/3113)
* [OCPBUGS-102945](https://issues.redhat.com/browse/OCPBUGS-102945): [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#3090](https://github.com/openshift/cluster-monitoring-operator/pull/3090)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/404da202f052559d390c085a9d22f37e152502ec...5cc2998068f123dec944beb8a813a79d369c60cd)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/69b8dae17be7eae9345b86a378a356f0f323f44f)

* [OCPBUGS-67000](https://issues.redhat.com/browse/OCPBUGS-67000): Re-disable metrics server [#2855](https://github.com/openshift/cluster-network-operator/pull/2855)
* [OCPBUGS-63233](https://issues.redhat.com/browse/OCPBUGS-63233): Manual feature backport of cert rotation for whereabouts [#3040](https://github.com/openshift/cluster-network-operator/pull/3040)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/880e60166a881fb00bbb0b15755517870997709b...69b8dae17be7eae9345b86a378a356f0f323f44f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/2a0a5f87f67150140d9b532f1c4b2e0e05b06aa2)

* [OCPBUGS-102969](https://issues.redhat.com/browse/OCPBUGS-102969): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#733](https://github.com/openshift/cluster-storage-operator/pull/733)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/fba24ed11cebba1a3f6986e0e468a1e9a1964285...2a0a5f87f67150140d9b532f1c4b2e0e05b06aa2)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/67ed9eee6421c25affb69bd9f0c98f747204d41a)

* [OCPBUGS-102971](https://issues.redhat.com/browse/OCPBUGS-102971): Bump golang.org/x/net to v0.35.0-sec.3 [#1461](https://github.com/openshift/cluster-version-operator/pull/1461)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/be820285dcf7b0ca4a712192ccb47fd0c843ea02...67ed9eee6421c25affb69bd9f0c98f747204d41a)


### [console](https://github.com/openshift/console/tree/d50e2f0f098af842d8798033fcaed37ba84826ac)

* [OCPBUGS-98424](https://issues.redhat.com/browse/OCPBUGS-98424): CVE-2026-59869 bump js-yaml [#17158](https://github.com/openshift/console/pull/17158)
* Fix for OCPBUGS-92076: CVE-2026-44990 [#16719](https://github.com/openshift/console/pull/16719)
* [OCPBUGS-100513](https://issues.redhat.com/browse/OCPBUGS-100513), [OCPBUGS-101789](https://issues.redhat.com/browse/OCPBUGS-101789): Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss [#17060](https://github.com/openshift/console/pull/17060)
* [OCPBUGS-114417](https://issues.redhat.com/browse/OCPBUGS-114417): Prevent binary secret data corruption when editing [#17101](https://github.com/openshift/console/pull/17101)
* [OCPBUGS-105793](https://issues.redhat.com/browse/OCPBUGS-105793): Disable failing OLM and other e2e tests to unblock CI [#16958](https://github.com/openshift/console/pull/16958)
* [OCPBUGS-105796](https://issues.redhat.com/browse/OCPBUGS-105796): Fix operator-hub e2e test by replacing unavailable Red Hat catalog source with Community [#17081](https://github.com/openshift/console/pull/17081)
* [OCPBUGS-87987](https://issues.redhat.com/browse/OCPBUGS-87987): [release-4.16] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16599](https://github.com/openshift/console/pull/16599)
* [OCPBUGS-81597](https://issues.redhat.com/browse/OCPBUGS-81597): CVE-2026-4800 [#16566](https://github.com/openshift/console/pull/16566)
* [Full changelog](https://github.com/openshift/console/compare/da1bb649bdff0937f926c26a7eef514b1e022265...d50e2f0f098af842d8798033fcaed37ba84826ac)


### [console-operator](https://github.com/openshift/console-operator/tree/5a0c5336bf35596dc74382548c0b3681ec49cbcd)

* [OCPBUGS-102982](https://issues.redhat.com/browse/OCPBUGS-102982): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#1225](https://github.com/openshift/console-operator/pull/1225)
* [Full changelog](https://github.com/openshift/console-operator/compare/52a864c8aee7cbf431304b24d16e9d86f8a584f6...5a0c5336bf35596dc74382548c0b3681ec49cbcd)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/65937f19b40fdf24200157ae8ab7b09b7bda0b79)

* [OCPBUGS-103061](https://issues.redhat.com/browse/OCPBUGS-103061): CVE-2026-33814,OCPBUGS-103068: replace golang.org/x/net with openshift-sustaining fork [#420](https://github.com/openshift/cloud-provider-openstack/pull/420)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/9217d4a54f8308f7fea8d50d5c973cdcb6134a3c...65937f19b40fdf24200157ae8ab7b09b7bda0b79)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/f4a9abd6b0e4150c27f24e1de12940fb8ebc9de6)

* [OCPBUGS-102975](https://issues.redhat.com/browse/OCPBUGS-102975): Use patched x/net fork v0.35.0-sec.4 [#262](https://github.com/openshift/csi-driver-manila-operator/pull/262)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/c25d1ff2677a882504b18220dcbbe153781f3883...f4a9abd6b0e4150c27f24e1de12940fb8ebc9de6)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/6ea4b3116010b80975a4fb71e5a64ed45cd37220)

* [OCPBUGS-102984](https://issues.redhat.com/browse/OCPBUGS-102984): Bump golang.org/x/net to v0.35.0-sec.3 [#128](https://github.com/openshift/csi-driver-shared-resource-operator/pull/128)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7...6ea4b3116010b80975a4fb71e5a64ed45cd37220)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/702221dc77cb20faba147587249c59f401e2708a)

* [OCPBUGS-102988](https://issues.redhat.com/browse/OCPBUGS-102988): Bump golang.org/x/net to v0.35.0-sec.4 [#117](https://github.com/openshift/csi-external-attacher/pull/117)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/7da80aab15cabd182ee35742443c0b836de4e180...702221dc77cb20faba147587249c59f401e2708a)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/b0fd154a19f6c4917599d95305d32d7971af1592)

* [OCPBUGS-102985](https://issues.redhat.com/browse/OCPBUGS-102985): Bump golang.org/x/net to v0.35.0-sec.4 [#215](https://github.com/openshift/csi-external-resizer/pull/215)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/06e08fd2e3c63e218e2973e4c711e9ae302948a4...b0fd154a19f6c4917599d95305d32d7971af1592)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/6a67c0a4642ff68c8ca62046c0a24f44da403ab7)

* [OCPBUGS-102978](https://issues.redhat.com/browse/OCPBUGS-102978), [OCPBUGS-102990](https://issues.redhat.com/browse/OCPBUGS-102990): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#230](https://github.com/openshift/csi-external-snapshotter/pull/230)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/ee32ba01e1f89bac057611ad4580589652f250a3...6a67c0a4642ff68c8ca62046c0a24f44da403ab7)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/7a123e02f3dc55803162235717bb871f190fc5f2)

* [OCPBUGS-102974](https://issues.redhat.com/browse/OCPBUGS-102974): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#111](https://github.com/openshift/csi-livenessprobe/pull/111)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/f5e3ff5532d58af34b5b407be2cac6934c1ff223...7a123e02f3dc55803162235717bb871f190fc5f2)


### [docker-builder](https://github.com/openshift/builder/tree/1ad0db4517bd877ff36dfe48a704762a32688c7f)

* [OCPBUGS-89824](https://issues.redhat.com/browse/OCPBUGS-89824), [OCPBUGS-90269](https://issues.redhat.com/browse/OCPBUGS-90269), [OCPBUGS-92346](https://issues.redhat.com/browse/OCPBUGS-92346), [OCPBUGS-92576](https://issues.redhat.com/browse/OCPBUGS-92576), [OCPBUGS-92768](https://issues.redhat.com/browse/OCPBUGS-92768): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#553](https://github.com/openshift/builder/pull/553)
* [Full changelog](https://github.com/openshift/builder/compare/b602ffcb9e84143cff71ce5591836ca876b6056e...1ad0db4517bd877ff36dfe48a704762a32688c7f)


### [docker-registry](https://github.com/openshift/image-registry/tree/299e748515e3b5540ca10882ac6243243b84136b)

* [OCPBUGS-102994](https://issues.redhat.com/browse/OCPBUGS-102994): [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#482](https://github.com/openshift/image-registry/pull/482)
* [Full changelog](https://github.com/openshift/image-registry/compare/072c544c1eaab6d0e43fc63ab6c12c18bf524afb...299e748515e3b5540ca10882ac6243243b84136b)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/7dc2012deda5ee6ad6a55a47e68a2b813ef36c3a)

* [OCPBUGS-103045](https://issues.redhat.com/browse/OCPBUGS-103045): Bump golang.org/x/net to v0.35.0-sec.3 [#191](https://github.com/openshift/machine-api-provider-gcp/pull/191)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/9ddcc1043e0ca2b8933bb8b4f002a582f6da2cd9...7dc2012deda5ee6ad6a55a47e68a2b813ef36c3a)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/d3203b52b0abcdfd1503d3280d333056ae8118fb)

* [OCPBUGS-103000](https://issues.redhat.com/browse/OCPBUGS-103000): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#143](https://github.com/openshift/gcp-pd-csi-driver/pull/143)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/7d08d6facf2acfd6252f401bdbdb4425c059fdb9...d3203b52b0abcdfd1503d3280d333056ae8118fb)


### [haproxy-router](https://github.com/openshift/router/tree/c9c28f5d129bb4c4217b29170196b0d451190e8d)

* [OCPBUGS-103005](https://issues.redhat.com/browse/OCPBUGS-103005): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#844](https://github.com/openshift/router/pull/844)
* [Full changelog](https://github.com/openshift/router/compare/94888b69fccf33ebd6ef87fb21fbde1318f0c1e2...c9c28f5d129bb4c4217b29170196b0d451190e8d)


### [hypershift](https://github.com/openshift/hypershift/tree/2b2baf208e95d4b4035155dca4675a7510c630ed)

* Sync approver aliases with main for release-4.16 [#10196](https://github.com/openshift/hypershift/pull/10196)
* [ACM-45149](https://issues.redhat.com/browse/ACM-45149): Migrate Go builder for hypershift-cli, hypershift-release [#10067](https://github.com/openshift/hypershift/pull/10067)
* [OCPBUGS-33097](https://issues.redhat.com/browse/OCPBUGS-33097): [release-4.16] fix(api): remove deprecated OVNSbDb service type [#9820](https://github.com/openshift/hypershift/pull/9820)
* [OCPBUGS-120748](https://issues.redhat.com/browse/OCPBUGS-120748): update Containerfile.cli base images to floating tags [release-4.16] [#9560](https://github.com/openshift/hypershift/pull/9560)
* [Full changelog](https://github.com/openshift/hypershift/compare/9f79ec9a8b77b41a6485924f42d74ffa9d902507...2b2baf208e95d4b4035155dca4675a7510c630ed)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/6b104aebff49bc56114a85bc9c83a1e1c9575ad5)

* [OCPBUGS-120701](https://issues.redhat.com/browse/OCPBUGS-120701): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#116](https://github.com/openshift/cloud-provider-ibm/pull/116)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494...6b104aebff49bc56114a85bc9c83a1e1c9575ad5)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/5f4d174ca69ddd6e2b01dbcf80e06baf33ad7ee9)

* [OCPBUGS-102992](https://issues.redhat.com/browse/OCPBUGS-102992): Use patched x/net fork v0.35.0-sec.4 [#187](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/187)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/9ca537683fc2ae2e7847032441fde42ff3171a48...5f4d174ca69ddd6e2b01dbcf80e06baf33ad7ee9)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/509d38bce1d5b272b3ddac09e28f77270d688f92)

* [OCPBUGS-103009](https://issues.redhat.com/browse/OCPBUGS-103009): Replace golang.org/x/net with openshift-sustaining/net [#170](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/170)
* [OCPBUGS-115544](https://issues.redhat.com/browse/OCPBUGS-115544): Fetch envtest assets from the controller-tools releases [#181](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/181)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/6d2887ad5bd40e9e2f8edfe1aab24d1f3675cc4f...509d38bce1d5b272b3ddac09e28f77270d688f92)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/aabc3a7fdf353d651289f16c65af1660530f677f)

* [OCPBUGS-103003](https://issues.redhat.com/browse/OCPBUGS-103003): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#106](https://github.com/openshift/machine-api-provider-ibmcloud/pull/106)
* NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket [#113](https://github.com/openshift/machine-api-provider-ibmcloud/pull/113)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/d29506e7fea609bc8f004256c9c057e5429f72a1...aabc3a7fdf353d651289f16c65af1660530f677f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/00dc94ed5c5c46d3daa897898f167ebf7f290b59)

* [OCPBUGS-102999](https://issues.redhat.com/browse/OCPBUGS-102999): Bump golang.org/x/net to v0.35.0-sec.3 [#1357](https://github.com/openshift/insights-operator/pull/1357)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a06a980f229864e7e5894416f2583e03f4b03fcd...00dc94ed5c5c46d3daa897898f167ebf7f290b59)


### [ironic](https://github.com/openshift/ironic-image/tree/2cdb8c3b0d533f223e8d6728f20af9642d83697d)

* [OCPBUGS-85333](https://issues.redhat.com/browse/OCPBUGS-85333): update ironic-image commit hash to address CVE-2026-43003 [#912](https://github.com/openshift/ironic-image/pull/912)
* [OCPBUGS-100162](https://issues.redhat.com/browse/OCPBUGS-100162): bump openstack-ironic pin for CVE-2026-44918 fix [#908](https://github.com/openshift/ironic-image/pull/908)
* [OCPBUGS-104459](https://issues.redhat.com/browse/OCPBUGS-104459): bump openstack-ironic pin for CVE-2026-54423 fix(release-4.16) [#877](https://github.com/openshift/ironic-image/pull/877)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8820e32ef2642f38d44e378dd03b0ff10262da6d...2cdb8c3b0d533f223e8d6728f20af9642d83697d)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/eff76836721d2b4b507ff2ba33ff61b389c9b57c)

* [OCPBUGS-85333](https://issues.redhat.com/browse/OCPBUGS-85333): Update ironic-python-agent commit hash to address CVE-2026-43003 [#316](https://github.com/openshift/ironic-agent-image/pull/316)
* [OCPBUGS-99890](https://issues.redhat.com/browse/OCPBUGS-99890): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#310](https://github.com/openshift/ironic-agent-image/pull/310)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/735c02f8c2747c4a9b29a97dd54c1c5f9d2e859b...eff76836721d2b4b507ff2ba33ff61b389c9b57c)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/4659393c07e7c262c582d13461e60465c40d0e43)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.16] [#85](https://github.com/openshift/kubernetes-metrics-server/pull/85)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/f56f783a5a918e0d7fc2f1d0630aed5e72a12bb1...4659393c07e7c262c582d13461e60465c40d0e43)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/fa23969687aba7e345ce9ef9cd0ae5e4d5a253e2)

* [OCPBUGS-103043](https://issues.redhat.com/browse/OCPBUGS-103043): Use patched x/net fork v0.35.0-sec.4 [#162](https://github.com/openshift/kube-state-metrics/pull/162)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.16] [#192](https://github.com/openshift/kube-state-metrics/pull/192)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/7861a865875eaa2b5ce956f842fd2b3bb588192a...fa23969687aba7e345ce9ef9cd0ae5e4d5a253e2)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/9d3d2df5ed3448705090af014c781d5f1edffca2)

* [OCPBUGS-103044](https://issues.redhat.com/browse/OCPBUGS-103044): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#1547](https://github.com/openshift/machine-api-operator/pull/1547)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/77f20f3ab94f7cd55555d7ef58134505ec24e8cd...9d3d2df5ed3448705090af014c781d5f1edffca2)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/3b4304c47b277bfba1d9c11a57772539464d34a0)

* [OCPBUGS-103007](https://issues.redhat.com/browse/OCPBUGS-103007): Use patched x/net fork v0.35.0-sec.4 [#191](https://github.com/openshift/image-customization-controller/pull/191)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/5460f7c3af5d8f6e63bff592373141bf23a3d192...3b4304c47b277bfba1d9c11a57772539464d34a0)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/1da03153bf7b268c5d569fe38e640d661d7fa336)

* [OU-1589](https://issues.redhat.com/browse/OU-1589): [release-4.16] sanitize linkified URLs in alert annotations [#1377](https://github.com/openshift/monitoring-plugin/pull/1377)
* [OCPBUGS-118240](https://issues.redhat.com/browse/OCPBUGS-118240): [release-4.16] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 [#1337](https://github.com/openshift/monitoring-plugin/pull/1337)
* [OCPBUGS-127152](https://issues.redhat.com/browse/OCPBUGS-127152): Replace react-linkify with linkify-react to fix CVE-2026-59887 [#1356](https://github.com/openshift/monitoring-plugin/pull/1356)
* NO-JIRA: [release-4.16] Sanitize alert runbook URLs [#1292](https://github.com/openshift/monitoring-plugin/pull/1292)
* Fix for OCPBUGS-113514: CVE-2026-18446 [#1184](https://github.com/openshift/monitoring-plugin/pull/1184)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/d9c7ece79d816714714ce0495ed6bc37feffd3ff...1da03153bf7b268c5d569fe38e640d661d7fa336)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/ed802a821b55dad0958ba833c27b19d78f71dfa4)

* [OCPBUGS-130599](https://issues.redhat.com/browse/OCPBUGS-130599): add ./bin to PATH in check_golint.sh [#163](https://github.com/openshift/network-metrics-daemon/pull/163)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/1210db38beff72968f1227f10312a9086b1b914e...ed802a821b55dad0958ba833c27b19d78f71dfa4)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/b9f2cb4093b549603d7b28d0ff1b5d2413f00c7e)

* [OCPBUGS-112100](https://issues.redhat.com/browse/OCPBUGS-112100): bugfix: rewrite open redirect strings to '/' [#386](https://github.com/openshift/oauth-proxy/pull/386)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/d17d71703099c69d02644fe7f777beed63d2b30f...b9f2cb4093b549603d7b28d0ff1b5d2413f00c7e)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0fb50f67c7fea14d6dfeebaba54a4ae97ced3be4)

* [OCPBUGS-103063](https://issues.redhat.com/browse/OCPBUGS-103063): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#279](https://github.com/openshift/oauth-server/pull/279)
* [OCPBUGS-87068](https://issues.redhat.com/browse/OCPBUGS-87068): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#274](https://github.com/openshift/oauth-server/pull/274)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3739138c8ebbeb73f6e89f61591dd16a3ece32e3...0fb50f67c7fea14d6dfeebaba54a4ae97ced3be4)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/8742b66e535666ae474e7cd40aece737bb4d8538)

* [OCPBUGS-129584](https://issues.redhat.com/browse/OCPBUGS-129584): v1 accept catalog root entries and relative symlink targets [#1581](https://github.com/openshift/oc-mirror/pull/1581)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/b137a53a5360a41a70432ea2bfc98a6cee6f7a4a...8742b66e535666ae474e7cd40aece737bb4d8538)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/8470dd916bc86359f8abf9225829d2aba4693e58)

* [OCPBUGS-103064](https://issues.redhat.com/browse/OCPBUGS-103064): [release-4.16]  Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#149](https://github.com/openshift/operator-framework-catalogd/pull/149)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/79975a511e1d31a09ef9b3b9e01262c8c69ff633...8470dd916bc86359f8abf9225829d2aba4693e58)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/76156391727ece7f955f2a4d2646c751589488f3)

* [OCPBUGS-131845](https://issues.redhat.com/browse/OCPBUGS-131845): Fix test-unit target: download envtest binaries from GitHub releases [release-4.16] [#834](https://github.com/openshift/operator-framework-operator-controller/pull/834)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/80b8649cf7a57098d03eff0d155531cf63728f41...76156391727ece7f955f2a4d2646c751589488f3)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/c3e5ef7bc5af7ea75e09f4cfb5b2e361df8c0baa)

* NO-ISSUE: synchronize OWNERS from main branch [#144](https://github.com/openshift/openshift-state-metrics/pull/144)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/59b8a0ffc0a472e819e0c30911201c34c85a4684...c3e5ef7bc5af7ea75e09f4cfb5b2e361df8c0baa)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/6736158fc40b20712668a7f5af7df86cba61220e)

* [OCPBUGS-103055](https://issues.redhat.com/browse/OCPBUGS-103055): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#195](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/195)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7...6736158fc40b20712668a7f5af7df86cba61220e)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c6bdcdc0f8d54b42e0ee12ded744b0cd3914ba20)

* [OCPBUGS-103065](https://issues.redhat.com/browse/OCPBUGS-103065), [OCPBUGS-103070](https://issues.redhat.com/browse/OCPBUGS-103070), [OCPBUGS-103078](https://issues.redhat.com/browse/OCPBUGS-103078): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#1367](https://github.com/openshift/operator-framework-olm/pull/1367)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6dabe49ae51c3a93043cee45062fdd5ffb1e4645...c6bdcdc0f8d54b42e0ee12ded744b0cd3914ba20)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/5b9965d5d19411ac369126a15863210ed2cb4110)

* [OCPBUGS-128828](https://issues.redhat.com/browse/OCPBUGS-128828): node: fix serviceUpdateNotNeeded nil pointer comparison [#3497](https://github.com/openshift/ovn-kubernetes/pull/3497)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5b36fd8eb481809b4d2e2d65c5a6ce8f03407749...5b9965d5d19411ac369126a15863210ed2cb4110)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/f8017f850d974ab5bb9978430d29f7d5f9a60397)

* [OCPBUGS-105268](https://issues.redhat.com/browse/OCPBUGS-105268): Mitigate CVE-2025-30204 by bumping github.com/golang-jwt/jwt/v4 to v4.5.2 [#139](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/139)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/26162badb8422f36d9b52fac8467d48bf6078f5a...f8017f850d974ab5bb9978430d29f7d5f9a60397)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/d2a9459d0ede714fc75612ee19c98a6c9aaebbee)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.16] [#404](https://github.com/openshift/prom-label-proxy/pull/404)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040...d2a9459d0ede714fc75612ee19c98a6c9aaebbee)


### [prometheus](https://github.com/openshift/prometheus/tree/5c9d9e98ece25bdadca3251d7508eb78767fc906)

* [OCPBUGS-93677](https://issues.redhat.com/browse/OCPBUGS-93677): fix for CVE-2026-42151 [#395](https://github.com/openshift/prometheus/pull/395)
* NO-ISSUE: synchronize OWNERS from main branch [#387](https://github.com/openshift/prometheus/pull/387)
* [Full changelog](https://github.com/openshift/prometheus/compare/9e07787900a6116c45788511755ef29d27a08444...5c9d9e98ece25bdadca3251d7508eb78767fc906)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/7cc9edf14c244feadd4f06b78b07cb095c4919d6)

* [OCPBUGS-98169](https://issues.redhat.com/browse/OCPBUGS-98169): bump github.com/hashicorp/memberlist to a forked version to fix CVE-2026-14362 [#203](https://github.com/openshift/prometheus-alertmanager/pull/203)
* NO-JIRA: synchronize OWNERS with main [#188](https://github.com/openshift/prometheus-alertmanager/pull/188)
* [OCPBUGS-103072](https://issues.redhat.com/browse/OCPBUGS-103072): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#174](https://github.com/openshift/prometheus-alertmanager/pull/174)
* [OCPBUGS-100357](https://issues.redhat.com/browse/OCPBUGS-100357): Set testdata CA expiry to 20 years from issue date (#4112) [#146](https://github.com/openshift/prometheus-alertmanager/pull/146)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/013dd1abf97523078d57d3170c22befd951fb062...7cc9edf14c244feadd4f06b78b07cb095c4919d6)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/259da0cdb63c9e7c38a1dd00e78a1a6cf07517fe)

* NO-ISSUE: synchronize OWNERS from main branch [#420](https://github.com/openshift/prometheus-operator/pull/420)
* [OCPBUGS-103085](https://issues.redhat.com/browse/OCPBUGS-103085), [OCPBUGS-103089](https://issues.redhat.com/browse/OCPBUGS-103089): [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#401](https://github.com/openshift/prometheus-operator/pull/401)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/c7262a43c0ddf2adc6be3863ac9a5056cb89c177...259da0cdb63c9e7c38a1dd00e78a1a6cf07517fe)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/f3dfe5c40908c0bf3dfb411ee7817243edcc28ab)

* [OCPBUGS-103088](https://issues.redhat.com/browse/OCPBUGS-103088): Use patched x/net fork v0.35.0-sec.4 [#194](https://github.com/openshift/node_exporter/pull/194)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.16] [#203](https://github.com/openshift/node_exporter/pull/203)
* [Full changelog](https://github.com/openshift/node_exporter/compare/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897...f3dfe5c40908c0bf3dfb411ee7817243edcc28ab)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/dc2237575c23c04a1ed68fac63094446a7f3ebde)

* [OCPBUGS-102896](https://issues.redhat.com/browse/OCPBUGS-102896): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#112](https://github.com/openshift/route-controller-manager/pull/112)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/c1af9e08f34658e703dd0d1bce5f2df8207c7cfd...dc2237575c23c04a1ed68fac63094446a7f3ebde)


### [tests](https://github.com/openshift/origin/tree/db6fb19f4d2319ff093edf26a86da087ed6d6a8b)

* [OCPBUGS-130858](https://issues.redhat.com/browse/OCPBUGS-130858): stage the creation of test pods to minimize etcd impact [#31742](https://github.com/openshift/origin/pull/31742)
* [OCPBUGS-105460](https://issues.redhat.com/browse/OCPBUGS-105460): Use tagged version for openshift/kubernetes dependency [#31541](https://github.com/openshift/origin/pull/31541)
* [Full changelog](https://github.com/openshift/origin/compare/3a9e3762f33a64340ca3271282a15246fb73307e...db6fb19f4d2319ff093edf26a86da087ed6d6a8b)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/9c4614f2609c51e00bbe8266ae253aa4d584f5db)

* [OCPBUGS-103096](https://issues.redhat.com/browse/OCPBUGS-103096): Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.16 [#137](https://github.com/openshift/cloud-provider-vsphere/pull/137)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/54af90db28cb799836ebce77ae9a266f106d8cc5...9c4614f2609c51e00bbe8266ae253aa4d584f5db)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2f79b98fbcb40c7af8b7477a5f7ba3d16eebc18d)

* [OCPBUGS-103111](https://issues.redhat.com/browse/OCPBUGS-103111): Bump golang.org/x/net to v0.35.0-sec.3 [#358](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/358)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/7940ea1685dee6d3f29a6360dac9a82dd1b09230...2f79b98fbcb40c7af8b7477a5f7ba3d16eebc18d)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/cd51b622232c45f73a8c468845ab8f3ee2624e80)

* [OCPBUGS-103110](https://issues.redhat.com/browse/OCPBUGS-103110): Bump golang.org/x/net to v0.35.0-sec.4 [#235](https://github.com/openshift/vsphere-problem-detector/pull/235)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/34a9237a6b8b23b5056be2158b6cfe8679038140...cd51b622232c45f73a8c468845ab8f3ee2624e80)