# 4.17.56
Created: 2026-07-29 12:23:54 +0000 UTC
Image Digest: `sha256:424acee89e2db0e1be3213da3db28967da2c61fcf2830ee8f83f51a48d973394`
## Changes from 4.17.38
### Components
* Kubectl 1.30.5
* Kubernetes 1.30.14
* Kubernetes Tests 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202508141510-0 to 417.94.202607240132-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| StreamingCollectionEncodingToJSON
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| StreamingCollectionEncodingToProtobuf
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### Removed images
* ovirt-csi-driver
* ovirt-csi-driver-operator
### Rebuilt images without code change
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [63b2da6e](https://github.com/openshift/assisted-installer/commit/63b2da6ef83a82468cf0c5baea4fef27a36be267) `sha256:63512436e5ab4f16a38b8f37ac0068119fc3939be69cd249185b537cffc06577`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [df4660b4](https://github.com/openshift/assisted-installer-agent/commit/df4660b4ca1ae19ccff3f2dba31e2be14b2a1d09) `sha256:44deef21039a8bdea4c97fcc5fa7dd25d97a7ff3530f78a01c40647a0b057b9d`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [63b2da6e](https://github.com/openshift/assisted-installer/commit/63b2da6ef83a82468cf0c5baea4fef27a36be267) `sha256:408328fc528567618df98ce26af929fd26151b78cb46de61fa952edca11fbec4`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:1c80d38014eaf0f570ad41ed8a823b410d1074362693e65f5fac854197c1d46e`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [144bace6](https://github.com/openshift/cloud-provider-aws/commit/144bace6c7a2ae52fcab3dabb2d9636a1465365a) `sha256:01bf6617b6b68d0a7075502c2d8ba09d62576f3a4d07f1fa76e227743abd2884`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [80efc4ea](https://github.com/openshift/aws-pod-identity-webhook/commit/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56) `sha256:eb26772c29c628fb94984e4699442f1d7d0ae8278742bc274f75c6ebae46b3ea`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [6707f899](https://github.com/openshift/azure-workload-identity/commit/6707f899c269e98a102ac72900bb96fa826ba652) `sha256:6649b3cea4adb7815c1a6844064eb405cc3da73838243ff4a9b854a47ca995f9`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:c037c4f7565853fa41f610fd5179a7d19c6aaad94afbd3dcbad1ccc8de781fc1`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [ea4a8878](https://github.com/openshift/cluster-autoscaler-operator/commit/ea4a88786cf9b237dc446e01fdacd6fd65b73144) `sha256:dfb6cedcd7c5f40f81608631123b5d31907511da9d91ca6629ae1b8e92eef27d`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:da84253a0c365c2ea065d3ebed64dfba43d752b72a1f40aaad63878691d7dc2f`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:220324e75c99ac4051d0869219fc5e62fe0c327f4f5f9e33a0e1e2124168e723`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:6bf4355a98a5d0a7509120512f65ef3c29eab4e9da14d54c74226a55b9371e54`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [81507f04](https://github.com/openshift/cluster-dns-operator/commit/81507f04686df3e16793b270084ead0a2a67fb38) `sha256:9ab9148e6c5b0d0bc9675652d61ceb49beee44992926f8b1418b75a5b80d6bc9`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:e02a46e3b0228dbc6778b6c42d7883171342128f40c5a40cefc44715f20479cc`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:36e156d1b0caada6f93349b2dbd803bd45fa9aebd8c25b348a934e658218e88c`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:8c293318313ed8d373af8e6fb9a77e130264242f8f3adc61ff7e18a1da3055a2`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:3e19c0fb3143153ceb7de60a7434e15c2cb748d1677afc5c3d4de38b18962733`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:aae65a20079863b82305cba1aff48a6993e56dbea84e36362db4cc40f4523f69`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [efc99a2a](https://github.com/openshift/csi-driver-manila-operator/commit/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8) `sha256:f4621b28d38bd8f0b455cc0023be8dc28067ff3f7e90ad2f73580ba3b0e93db4`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:e116813e8b19ac01542216603bd48d1daabfe90b5699b1e557a560d67b35f2ec`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:92c2b101a069d94a7adbac2e06832103c67499a3eff9fa34b3df9c6960c41a70`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e7d841dc](https://github.com/openshift/csi-livenessprobe/commit/e7d841dc545b9fb3a8a3303b8cac62d35620905b) `sha256:efc57d00276b7f45fb22fb8385de79bd6c39c79165173262d7e2e4adbabf1b08`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:e7e0c08a7aad804c694546ec68a4848772e40e267c49d10bb69d0d3d1498eb84`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:d37345ef8cd2767324980766171dad7959b2b001d30e04b8ce699449f7548ee1`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:4f9a9b8d448491e80a694998870a2b89d55c384e25c2e1abf1388349c37640b1`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:c480d3718d6e49c09367bfc7dffd040125c203af3633baaf37c3c96aaa7fa339`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:3d709f3c3d0f78ed6f92375b0b6b91919ecef78c5c1725085d8a29cca81bec25`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:2799053c492b6c5c43c3a6869544a2c0bdbad132eeec9d2fa41854da8fc8322b`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [ee301303](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/ee301303640e89a985108bf3b055051a644b5c37) `sha256:4974a198241d981d0f5a803c21f33f49d204e5197dc4393915b5611f25bcb7bf`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9e6596c3](https://github.com/openshift/ironic-rhcos-downloader/commit/9e6596c3f9d239d91c358299a19871905fa914fe) `sha256:794e17956ca8ff2c27bfe023580f89de61c30c9f9b1708e210012fd513e8a884`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [bc5b8a2c](https://github.com/openshift/ironic-static-ip-manager/commit/bc5b8a2c3209873231a7eabd83ace578c8e182f7) `sha256:a61bb6c29cb6c076259a658b062911695be3e0eb6fbed58a2f39f099786646bb`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:4309d34ded2fe919eeb88f712aa51c85ff39738c93e28ee4ee7988ed81b8d057`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:9170af0c21030f748adab9ca024c118e745c9cea57f021c726bd49ab35e8f9c1`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:1f88cd51b331e0ae7802d12a745f3d8f8afaec015867083175c1fff5fe28f0ad`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [041b743a](https://github.com/openshift/multus-admission-controller/commit/041b743a1172af3c8ace0cf046fe95bda7a9d5a2) `sha256:0da41d54c686719750c0019df11a7a10350700b84af27aac6b4f58116e0b6a65`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:35dcb2b09f7cfb1112d9ce5cfee69d4e2c176e57ff133d07b60e8ec19a73edf9`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:99fff9bc51176cc78db5f03311d7ab57ab6df47e9849770cc48fc70a36f319d1`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [f56bbf7a](https://github.com/openshift/network-metrics-daemon/commit/f56bbf7af25fbae200c966378337db85c6b17126) `sha256:350be1cf020b50e169655904b33247fbf890891636093852e97e7e3aa3d15db7`
* [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:079efaf89ab0ee2a9c01772908e1950ecfc044b85b4e49e77bb58d616439a31b`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:5b067cf820f08f9fcf4a4b734eac213bf6e6ffe47b13a1c82ac0671eb24c7c60`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a4fadcbc](https://github.com/openshift/machine-api-provider-nutanix/commit/a4fadcbc22579320fdf7cd7d98071c15f32aa163) `sha256:f42d3aee6790930318c18d13d8879c8db4265a5723b1fb57956ff161d07aa8cd`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:cfeff23ba80d6bdd77aab38b351d7fa49f811c297a40dcffc3c91996c8063919`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [adf64920](https://github.com/openshift/openshift-state-metrics/commit/adf649209467aef8d5da1d17851fa991285edbc2) `sha256:3c75f24e743128bb8164ca58e8bfe0c34fdb751ed3d2da890b1e20224a8574c0`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:afc5a01c00260dd97524814da3af006e4c418e9fd51d08bed995212c55e9ade9`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c84c4898](https://github.com/openshift/prom-label-proxy/commit/c84c4898843d6a1b0d16a59e3c42d99d1f636c43) `sha256:2aee9b9bfe9e33e6309d534d028df3fe1943da8e59e1c6856671fb6f6b715b1a`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [8f095361](https://github.com/openshift/node_exporter/commit/8f095361ae68660fbcf0c3e32020a3df9568ae90) `sha256:ef92cc9c5d27f0df81568fff5540a05f1e12fb67138843f8cc658e2ec7545e76`
* rhel-coreos `sha256:e8b8497fcb7483d75c5266f905c6be8355eb1ce5a7c35213107244ce6f0abbf8`
* rhel-coreos-extensions `sha256:d0e2517546edf578e0994b24cf85a707c5359b7080037b571feffba0f1fdfb3e`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e1de36a2](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d) `sha256:2027f36126187e102e8e0f0a73e6faf354738228a538a028b61793a8ed9fa46b`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/c18512cd02435454b6c92e8a708ddd5b1f188dcd)
* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.20 compatibility [#10016](https://github.com/openshift/assisted-service/pull/10016)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/645afc30ed106c26a16d4feccef0b7c5a68a7de2...c18512cd02435454b6c92e8a708ddd5b1f188dcd)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b359528186b9df8ff5796f2bbfdab7f6bbaad491)
* [OCPBUGS-68141](https://issues.redhat.com/browse/OCPBUGS-68141): bump github.com/sirupsen/logrus to v1.9.3 [#238](https://github.com/openshift/agent-installer-utils/pull/238)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/79b73e6ad3610497323a821409406a1d5d174120...b359528186b9df8ff5796f2bbfdab7f6bbaad491)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/fe17b330747fab0949a718ce050e2d6bf0cd1ba9)
* [OCPBUGS-78175](https://issues.redhat.com/browse/OCPBUGS-78175): [release-4.17] update go mod dependency for konflux [#590](https://github.com/openshift/cluster-api-provider-aws/pull/590)
* [OCPBUGS-61940](https://issues.redhat.com/browse/OCPBUGS-61940): UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#571](https://github.com/openshift/cluster-api-provider-aws/pull/571)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9e1c55c7136cc9e5517321ea725565b5a7428906...fe17b330747fab0949a718ce050e2d6bf0cd1ba9)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/51a0563331da53390b3b2a493fa5251e716de890)
* [OCPBUGS-82699](https://issues.redhat.com/browse/OCPBUGS-82699): Address CVE-2026-35469 [#328](https://github.com/openshift/aws-ebs-csi-driver/pull/328)
* [OCPBUGS-86234](https://issues.redhat.com/browse/OCPBUGS-86234): UPSTREAM: 2367: cleanup: `make verify` should ignore copyright year [#323](https://github.com/openshift/aws-ebs-csi-driver/pull/323)
* [OCPBUGS-80031](https://issues.redhat.com/browse/OCPBUGS-80031): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 [#314](https://github.com/openshift/aws-ebs-csi-driver/pull/314)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/2bb5b316f5941788e398f22974f9c816dd37d428...51a0563331da53390b3b2a493fa5251e716de890)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/91f568529983b9402bf7e155a8d8d80365792fd3)
* [OCPBUGS-80133](https://issues.redhat.com/browse/OCPBUGS-80133): Bump google.golang.org/grpc [#543](https://github.com/openshift/csi-operator/pull/543)
* [OCPBUGS-64704](https://issues.redhat.com/browse/OCPBUGS-64704): Use 127.0.0.1 for healtz http-endpoints [#462](https://github.com/openshift/csi-operator/pull/462)
* [OCPBUGS-63557](https://issues.redhat.com/browse/OCPBUGS-63557): Add RBAC ClusterRole and Binding for driver node [#453](https://github.com/openshift/csi-operator/pull/453)
* [OCPBUGS-62974](https://issues.redhat.com/browse/OCPBUGS-62974): Add withCABundleDaemonSetHook() to AWS EFS operator [#449](https://github.com/openshift/csi-operator/pull/449)
* [OCPBUGS-60597](https://issues.redhat.com/browse/OCPBUGS-60597): Bump library-go to fix assignment to nil map issue [#422](https://github.com/openshift/csi-operator/pull/422)
* [Full changelog](https://github.com/openshift/csi-operator/compare/04dca0ed13080ebe898b8e6165679728c79e15fa...91f568529983b9402bf7e155a8d8d80365792fd3)
### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/9b1719e3c46f18fe763ee7cdf34012a969550b0b)
* [OCPBUGS-80009](https://issues.redhat.com/browse/OCPBUGS-80009): Bump google.golang.org/grpc to v1.79.3 [#44](https://github.com/openshift/aws-encryption-provider/pull/44)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/9d4016701d355cd3a47f5ebe10f266d8971febc6...9b1719e3c46f18fe763ee7cdf34012a969550b0b)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7)
* [OCPBUGS-73822](https://issues.redhat.com/browse/OCPBUGS-73822): Fix reconciler consistency checks in Update and Exists [#167](https://github.com/openshift/machine-api-provider-aws/pull/167)
* [OCPBUGS-63139](https://issues.redhat.com/browse/OCPBUGS-63139): client: re-use a single file for building the session instead of randomly named files [#145](https://github.com/openshift/machine-api-provider-aws/pull/145)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e...2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86)
* [OCPBUGS-80035](https://issues.redhat.com/browse/OCPBUGS-80035), [OCPBUGS-80036](https://issues.redhat.com/browse/OCPBUGS-80036), [OCPBUGS-80174](https://issues.redhat.com/browse/OCPBUGS-80174): Bump google.golang.org/grpc to v1.79.3 [#181](https://github.com/openshift/cloud-provider-azure/pull/181)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/626ecd1c32f50953e84fd1cb499077d52fe53e43...5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/08c5419ade9e988a7286b714f8b9fd3be05b0e0b)
* [OCPBUGS-80037](https://issues.redhat.com/browse/OCPBUGS-80037): Bump google.golang.org/grpc to v1.79.3 [#386](https://github.com/openshift/cluster-api-provider-azure/pull/386)
* [OCPBUGS-77983](https://issues.redhat.com/browse/OCPBUGS-77983): [release-4.17] update go mod dependency for konflux [#363](https://github.com/openshift/cluster-api-provider-azure/pull/363)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/d359bfe56764238e2881f0f003fd8206b2b40dec...08c5419ade9e988a7286b714f8b9fd3be05b0e0b)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d)
* [OCPBUGS-80038](https://issues.redhat.com/browse/OCPBUGS-80038): Address CVE-2026-33186 [#143](https://github.com/openshift/azure-disk-csi-driver/pull/143)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a544f30bb48dbf6325efbb75e7114b9837c32505...e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/91141cb7c4195e8c9871f3e68a56cb856049158c)
* [OCPBUGS-80041](https://issues.redhat.com/browse/OCPBUGS-80041): Bump google.golang.org/grpc to v1.79.3 [#130](https://github.com/openshift/azure-file-csi-driver/pull/130)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/9f4c38c2bb28347ed5c4fd082666bfdea7382243...91141cb7c4195e8c9871f3e68a56cb856049158c)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/cc562120ff540e237cc170b8a82a8cbbc3a32ad2)
* [OCPBUGS-80010](https://issues.redhat.com/browse/OCPBUGS-80010): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#47](https://github.com/openshift/azure-kubernetes-kms/pull/47)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/190a0fabf17b28762b5578c0b9ffc25cf35cac64...cc562120ff540e237cc170b8a82a8cbbc3a32ad2)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/439c54987c20d056ae23681d456e4e7f6a68c96d)
* [OCPBUGS-65954](https://issues.redhat.com/browse/OCPBUGS-65954): Set updateDomainCount to one when faultDomainCount is one [#176](https://github.com/openshift/machine-api-provider-azure/pull/176)
* [OCPBUGS-63700](https://issues.redhat.com/browse/OCPBUGS-63700): Support datadisks on Stack Hub [#168](https://github.com/openshift/machine-api-provider-azure/pull/168)
* [OCPBUGS-56168](https://issues.redhat.com/browse/OCPBUGS-56168): [release-4.17] Update virtualmachines service to armcompute/v5 SDK [#146](https://github.com/openshift/machine-api-provider-azure/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4018b3642933575afa71ccee4b31efaf841262fb...439c54987c20d056ae23681d456e4e7f6a68c96d)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/b102c3acc6afdc1aed628f8d5604a467fba9b8c4)
* [OCPBUGS-67204](https://issues.redhat.com/browse/OCPBUGS-67204): Update the RHCOS 4.17 bootimage metadata [#10285](https://github.com/openshift/installer/pull/10285)
* [OCPBUGS-77791](https://issues.redhat.com/browse/OCPBUGS-77791): [Release 4.17] pkg/asset/manifests/azure: save cidr blocks [#10218](https://github.com/openshift/installer/pull/10218)
* [OCPBUGS-74677](https://issues.redhat.com/browse/OCPBUGS-74677): [release-4.17] GCP: skip AI zones [#10276](https://github.com/openshift/installer/pull/10276)
* [OCPBUGS-74555](https://issues.redhat.com/browse/OCPBUGS-74555): Azure UPI ARM template: use storageAccountId [#10264](https://github.com/openshift/installer/pull/10264)
* [OCPBUGS-68142](https://issues.redhat.com/browse/OCPBUGS-68142): [4.17] uplift logrus [#10167](https://github.com/openshift/installer/pull/10167)
* [OCPBUGS-53236](https://issues.redhat.com/browse/OCPBUGS-53236): Validation for API and Ingress VIPs when using user-managed load balancer [#10047](https://github.com/openshift/installer/pull/10047)
* [OCPBUGS-62951](https://issues.redhat.com/browse/OCPBUGS-62951): Update the RHCOS 4.17 bootimage metadata [#10021](https://github.com/openshift/installer/pull/10021)
* [OCPBUGS-62054](https://issues.redhat.com/browse/OCPBUGS-62054): Make swift containers removal not fatal for UPI. [#9952](https://github.com/openshift/installer/pull/9952)
* [Full changelog](https://github.com/openshift/installer/compare/8d7150cc88197d085f672dab4b228289a67be1e8...b102c3acc6afdc1aed628f8d5604a467fba9b8c4)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/ae674d7808379c454f972ff0cccac8bb9adcc98f)
* [OCPBUGS-68143](https://issues.redhat.com/browse/OCPBUGS-68143): [4.17] uplift logrus [#239](https://github.com/openshift/cluster-api-provider-baremetal/pull/239)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/6e7aa77e5e144adc97b498ada5a6ab400f97ca39...ae674d7808379c454f972ff0cccac8bb9adcc98f)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/087a24f21f11bc85a6d922c156bda6270e7eadfa)
* [OCPBUGS-77185](https://issues.redhat.com/browse/OCPBUGS-77185): Unblock BMH direct deletion when detached annotation is present [#462](https://github.com/openshift/baremetal-operator/pull/462)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e6e5d54abf92a20d1b0d273a90581206b7ca0b15...087a24f21f11bc85a6d922c156bda6270e7eadfa)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/745189508eec80ee07a921d1b2c227812db37237)
* [OCPBUGS-71209](https://issues.redhat.com/browse/OCPBUGS-71209): Bump logrus version [#377](https://github.com/openshift/baremetal-runtimecfg/pull/377)
* [OCPBUGS-60112](https://issues.redhat.com/browse/OCPBUGS-60112): Re-add ENABLE_NODEIP_DEBUG env var [#363](https://github.com/openshift/baremetal-runtimecfg/pull/363)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/8956d91bd982929d780580b8e2fe5f5351dad881...745189508eec80ee07a921d1b2c227812db37237)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d76df14ea3d7ff9916ea576b6335cd3a220cd1bf)
* [OCPBUGS-64615](https://issues.redhat.com/browse/OCPBUGS-64615): Help with must-gather scheduling through suggesting preferance of nodes [#2150](https://github.com/openshift/oc/pull/2150)
* [Full changelog](https://github.com/openshift/oc/compare/fd2be5da398d8287664836e4838b68082a9f1bb8...d76df14ea3d7ff9916ea576b6335cd3a220cd1bf)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/121f2e429056ddfe93dd36252d3606657aed403c)
* [OCPBUGS-80044](https://issues.redhat.com/browse/OCPBUGS-80044): Bump google.golang.org/grpc to v1.79.3 [#1025](https://github.com/openshift/cloud-credential-operator/pull/1025)
* [OCPBUGS-65801](https://issues.redhat.com/browse/OCPBUGS-65801): ccoctl azure: retry custom role creation on consistency errors [#951](https://github.com/openshift/cloud-credential-operator/pull/951)
* [OCPBUGS-65480](https://issues.redhat.com/browse/OCPBUGS-65480): ccoctl: use pagination when listing resources in aws [#945](https://github.com/openshift/cloud-credential-operator/pull/945)
* [OCPBUGS-63549](https://issues.redhat.com/browse/OCPBUGS-63549): ccoctl: add public-key-file flag to create-all [#939](https://github.com/openshift/cloud-credential-operator/pull/939)
* [OCPBUGS-55128](https://issues.redhat.com/browse/OCPBUGS-55128): snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 [#917](https://github.com/openshift/cloud-credential-operator/pull/917)
* [OCPBUGS-60972](https://issues.redhat.com/browse/OCPBUGS-60972): ccoctl: aws to use proper issuer url on subsequent runs [#908](https://github.com/openshift/cloud-credential-operator/pull/908)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c426a2bb41b139274f1c9c088fc4510f16744d40...121f2e429056ddfe93dd36252d3606657aed403c)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/241af368428cb2deedeaf8e21d237aa01216292a)
* [OCPBUGS-66132](https://issues.redhat.com/browse/OCPBUGS-66132): [release-4.17] Fix capacity calculation [#194](https://github.com/openshift/cloud-network-config-controller/pull/194)
* [OCPBUGS-65520](https://issues.redhat.com/browse/OCPBUGS-65520): Change the capacity struct from int to ptrOfInt [#191](https://github.com/openshift/cloud-network-config-controller/pull/191)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/225a27a533d123f0b816e59afa431b1c34e9ae5f...241af368428cb2deedeaf8e21d237aa01216292a)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9f93cafccca989417378a804f134f68fb4fea40d)
* [OCPBUGS-68150](https://issues.redhat.com/browse/OCPBUGS-68150): Update library-go to fix CVE-2025-65637 [#840](https://github.com/openshift/cluster-authentication-operator/pull/840)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/f641a4c6f858607f233866bb835704e784d57ef2...9f93cafccca989417378a804f134f68fb4fea40d)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/efa6fd9b220e841591d8be2208cdec4ffc826429)
* [OCPBUGS-78700](https://issues.redhat.com/browse/OCPBUGS-78700): allow clusterapi provider to skip paused resources [#414](https://github.com/openshift/kubernetes-autoscaler/pull/414)
* [OCPBUGS-68151](https://issues.redhat.com/browse/OCPBUGS-68151): update logrus to version 1.9.3 [#398](https://github.com/openshift/kubernetes-autoscaler/pull/398)
* [OCPBUGS-60913](https://issues.redhat.com/browse/OCPBUGS-60913): revert openshift replica fix [#376](https://github.com/openshift/kubernetes-autoscaler/pull/376)
* [OCPBUGS-60608](https://issues.redhat.com/browse/OCPBUGS-60608): fix checkpoint gc of unknown recommenders [#371](https://github.com/openshift/kubernetes-autoscaler/pull/371)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d7a91a2aa3c3c172bf2b228974a1d4838dd06f52...efa6fd9b220e841591d8be2208cdec4ffc826429)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/16ed4727250a72342b3da7b280d3456f7055a6c9)
* [OCPBUGS-77446](https://issues.redhat.com/browse/OCPBUGS-77446): Bump github.com/go-errors/errors to v1.5.1 [#561](https://github.com/openshift/cluster-baremetal-operator/pull/561)
* [OCPBUGS-63715](https://issues.redhat.com/browse/OCPBUGS-63715): Always have a service for ironic-api port [#519](https://github.com/openshift/cluster-baremetal-operator/pull/519)
* [OCPBUGS-63666](https://issues.redhat.com/browse/OCPBUGS-63666): Allow provisioningIP when network disabled [#518](https://github.com/openshift/cluster-baremetal-operator/pull/518)
* [OCPBUGS-61097](https://issues.redhat.com/browse/OCPBUGS-61097): Remove webhookport (9447) as HostPort [#505](https://github.com/openshift/cluster-baremetal-operator/pull/505)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/caa33e34f41c689d4043550f1efe4716279a3581...16ed4727250a72342b3da7b280d3456f7055a6c9)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/3b417931b1e94534cbde2c435c262befad8a57f1)
* [OCPBUGS-80045](https://issues.redhat.com/browse/OCPBUGS-80045): Bump google.golang.org/grpc to v1.79.3 [#291](https://github.com/openshift/cluster-api/pull/291)
* [Full changelog](https://github.com/openshift/cluster-api/compare/77ef4fc55392dd02232da73cc06a504659d08b48...3b417931b1e94534cbde2c435c262befad8a57f1)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/17abd1d9c801288347f4134965b268389a90c342)
* [OCPBUGS-80049](https://issues.redhat.com/browse/OCPBUGS-80049): Bump google.golang.org/grpc to v1.79.3 [#570](https://github.com/openshift/cluster-capi-operator/pull/570)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#559](https://github.com/openshift/cluster-capi-operator/pull/559)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459...17abd1d9c801288347f4134965b268389a90c342)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1)
* [OCPBUGS-63167](https://issues.redhat.com/browse/OCPBUGS-63167): ccm: disable unused secure-serving port and webhook [#423](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/423)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/fbddd2c72401174f00a6fe70038c51e26b70f0d8...6d4c0096477d7e15f31ef0492ad9382ea1be1ef1)
### [cluster-config-api](https://github.com/openshift/api/tree/92c55bf0f372c222dc02f17685c383d18e2c2e8b)
* [CNTRLPLANE-1981](https://issues.redhat.com/browse/CNTRLPLANE-1981): Promote streaming list encoding to Default [#2599](https://github.com/openshift/api/pull/2599)
* [OCPBUGS-71184](https://issues.redhat.com/browse/OCPBUGS-71184): Add HTTPKeepAliveTimeout to IngressController API [#2639](https://github.com/openshift/api/pull/2639)
* NO-JIRA: Promote streaming list encoding to Default on Hypershift. [#2567](https://github.com/openshift/api/pull/2567)
* [CNTRLPLANE-1611](https://issues.redhat.com/browse/CNTRLPLANE-1611): Add feature gates for StreamingCollectionEncoding [#2538](https://github.com/openshift/api/pull/2538)
* [Full changelog](https://github.com/openshift/api/compare/db4fa2d6cce43c412a816c239a564c6f860218f5...92c55bf0f372c222dc02f17685c383d18e2c2e8b)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cfd318de9718f1c73b40d99900125bdca41482ef)
* [OCPBUGS-75998](https://issues.redhat.com/browse/OCPBUGS-75998): Update logrus to 1.9.3 to address CVE-2025-65637 [#465](https://github.com/openshift/cluster-config-operator/pull/465)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/361cecccf6b92ee8783c10324b0db26ccd4f6ab0...cfd318de9718f1c73b40d99900125bdca41482ef)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/bfffdcbac76071143cf554785ca2bde0ac69ac7e)
* [OCPBUGS-68156](https://issues.redhat.com/browse/OCPBUGS-68156): Update logrus to 1.9.3 to address CVE-2025-65637 [#1542](https://github.com/openshift/cluster-etcd-operator/pull/1542)
* [OCPBUGS-61337](https://issues.redhat.com/browse/OCPBUGS-61337): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1480](https://github.com/openshift/cluster-etcd-operator/pull/1480)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/7b6b65e958005149dad012250145a86269ae8c03...bfffdcbac76071143cf554785ca2bde0ac69ac7e)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/1a0cea11ec4ba91416b698ab2e87d03a09a0e367)
* [OCPBUGS-68157](https://issues.redhat.com/browse/OCPBUGS-68157): Bump github.com/sirupsen/logrus to 1.9.3 [#1284](https://github.com/openshift/cluster-image-registry-operator/pull/1284)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/790f6a59513d7a9d78ba2a5b30d5f0da5a3d481f...1a0cea11ec4ba91416b698ab2e87d03a09a0e367)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/9e8619560c6aafa5c12807bafbe4bcd51686be64)
* [OCPBUGS-86714](https://issues.redhat.com/browse/OCPBUGS-86714): Add configuration override for X-SSL strip [#1486](https://github.com/openshift/cluster-ingress-operator/pull/1486)
* [OCPBUGS-71184](https://issues.redhat.com/browse/OCPBUGS-71184): Implement HTTPKeepAliveTimeout tuning option [#1335](https://github.com/openshift/cluster-ingress-operator/pull/1335)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d95595b1c3242f5aea8b7c2ec7a548e1b4ce0581...9e8619560c6aafa5c12807bafbe4bcd51686be64)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/84e19b2149ab818a455b00717d790856c13ea387)
* [OCPBUGS-68162](https://issues.redhat.com/browse/OCPBUGS-68162): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] [#2055](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2055)
* [OCPBUGS-63614](https://issues.redhat.com/browse/OCPBUGS-63614): SCC: add hostmount-anyuid-v2 [#1954](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1954)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/51ed2ebfcfd3e177c45d9243b25bdfd36c6a5b1f...84e19b2149ab818a455b00717d790856c13ea387)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/c1947350f996bcc50c549c9e83382179d6455247)
* [OCPBUGS-80056](https://issues.redhat.com/browse/OCPBUGS-80056): Bump google.golang.org/grpc to v1.79.3 [#78](https://github.com/openshift/cluster-api-operator/pull/78)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/aed5f6c74a0e174901709f18eecad6573cd80784...c1947350f996bcc50c549c9e83382179d6455247)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/12f60539287eda85e99efbdcf85a1ecf59e021fa)
* [OCPBUGS-68164](https://issues.redhat.com/browse/OCPBUGS-68164): CVE-2025-65637 openshift4/ose-cluster-kube-controller-manager-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] [#908](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/908)
* [OCPBUGS-60249](https://issues.redhat.com/browse/OCPBUGS-60249): Missing endpoint slices for open ports the operator uses [#855](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/855)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0a9ed573e35751455bfb24842fd2de0b05379ed0...12f60539287eda85e99efbdcf85a1ecf59e021fa)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/013ff606240919fcb46eb9a8b707598a9b049ee5)
* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#623](https://github.com/openshift/cluster-kube-scheduler-operator/pull/623)
* [OCPBUGS-68165](https://issues.redhat.com/browse/OCPBUGS-68165): deps: Update library-go and logrus to fix a CVE [#613](https://github.com/openshift/cluster-kube-scheduler-operator/pull/613)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/98ca953ba6955401023e219f37e0af49879355d2...013ff606240919fcb46eb9a8b707598a9b049ee5)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/0097f21060a7e10679567eb57b87feb4f55230e3)
* [OCPBUGS-68167](https://issues.redhat.com/browse/OCPBUGS-68167): Bump github.com/sirupsen/logrus to 1.9.1 [#140](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/140)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/ab40b61142a30f21eec8301b2e98f2fafb25164b...0097f21060a7e10679567eb57b87feb4f55230e3)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/97fec1403dc61e1b2126df8c3afeb96e02055ee5)
* [OCPBUGS-77275](https://issues.redhat.com/browse/OCPBUGS-77275): AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change [#2832](https://github.com/openshift/cluster-monitoring-operator/pull/2832)
* [OCPBUGS-64580](https://issues.redhat.com/browse/OCPBUGS-64580): Fix KSM deny-list typo [#2732](https://github.com/openshift/cluster-monitoring-operator/pull/2732)
* [OCPBUGS-63489](https://issues.redhat.com/browse/OCPBUGS-63489): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 [#2725](https://github.com/openshift/cluster-monitoring-operator/pull/2725)
* [OCPBUGS-63123](https://issues.redhat.com/browse/OCPBUGS-63123): test: remove image registry e2e tests [#2715](https://github.com/openshift/cluster-monitoring-operator/pull/2715)
* [OCPBUGS-61766](https://issues.redhat.com/browse/OCPBUGS-61766): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2672](https://github.com/openshift/cluster-monitoring-operator/pull/2672)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/6d1d30914db9e1eebd62dad7206f8cf9a2d6b525...97fec1403dc61e1b2126df8c3afeb96e02055ee5)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dc98c59e223f325acb113a697771e737266876a5)
* [OCPBUGS-85244](https://issues.redhat.com/browse/OCPBUGS-85244): whereabouts-token-watcher DaemonSet improvements [#3016](https://github.com/openshift/cluster-network-operator/pull/3016)
* [OCPBUGS-84181](https://issues.redhat.com/browse/OCPBUGS-84181): fix(hypershift): use net.JoinHostPort for URL construction [#2983](https://github.com/openshift/cluster-network-operator/pull/2983)
* [OCPBUGS-73799](https://issues.redhat.com/browse/OCPBUGS-73799): Tweak iptables-alerter to try to avoid crictl bug [#2878](https://github.com/openshift/cluster-network-operator/pull/2878)
* : NO-JIRA: Update CNO reviewers/approvers [#2767](https://github.com/openshift/cluster-network-operator/pull/2767)
* [OCPBUGS-74348](https://issues.redhat.com/browse/OCPBUGS-74348): [release-4.17] fix typo in release annotation for whereabouts-token-watcher deamonset [#2888](https://github.com/openshift/cluster-network-operator/pull/2888)
* [OCPBUGS-45086](https://issues.redhat.com/browse/OCPBUGS-45086): Re-disable metrics server [#2579](https://github.com/openshift/cluster-network-operator/pull/2579)
* [OCPBUGS-63154](https://issues.redhat.com/browse/OCPBUGS-63154): Add drop flows for GARPs [#2818](https://github.com/openshift/cluster-network-operator/pull/2818)
* [Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers [#2799](https://github.com/openshift/cluster-network-operator/pull/2799)
* [OCPBUGS-58066](https://issues.redhat.com/browse/OCPBUGS-58066): [release-4.17]: Manual feature backport of cert rotation for whereabouts [#2784](https://github.com/openshift/cluster-network-operator/pull/2784)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/28b6eb3392f935ccc63d77ba307dbda7695b6adf...dc98c59e223f325acb113a697771e737266876a5)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fe37d7cf96ef3280f1bd41c55372b520fdf6c821)
* [OCPBUGS-82706](https://issues.redhat.com/browse/OCPBUGS-82706): Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 [#1548](https://github.com/openshift/cluster-node-tuning-operator/pull/1548)
* [OCPBUGS-78214](https://issues.redhat.com/browse/OCPBUGS-78214): PPC: filter out namespaces dir [#1481](https://github.com/openshift/cluster-node-tuning-operator/pull/1481)
* [OCPBUGS-63504](https://issues.redhat.com/browse/OCPBUGS-63504): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1418](https://github.com/openshift/cluster-node-tuning-operator/pull/1418)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b6712f369eddb39fa68021ffb3d31fed7e5663a6...fe37d7cf96ef3280f1bd41c55372b520fdf6c821)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f289edc3bb99197984aa392b13dfef07b075bcce)
* [OCPBUGS-80063](https://issues.redhat.com/browse/OCPBUGS-80063): Bump google.golang.org/grpc to v1.79.3 [#201](https://github.com/openshift/cluster-olm-operator/pull/201)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e31b7775ef903ff0c35f95656af27afa2dddd3e4...f289edc3bb99197984aa392b13dfef07b075bcce)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/8c61cd4bcf3719137950e3ac287346013b471a08)
* [OCPBUGS-68170](https://issues.redhat.com/browse/OCPBUGS-68170): CVE-2025-65637 - Update library-go to bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] [#653](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/653)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e...8c61cd4bcf3719137950e3ac287346013b471a08)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/1d2ba42214637c7ed7e5e3e0aec257e9b949d061)
* [OCPBUGS-63515](https://issues.redhat.com/browse/OCPBUGS-63515): references to github.com/sclorg/django-ex.git now also refer to the branch [#658](https://github.com/openshift/cluster-samples-operator/pull/658)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/6ed1b4ea953a091b617e42adb966fb9ac3bceb49...1d2ba42214637c7ed7e5e3e0aec257e9b949d061)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a039f8a2e73771f76e799ed497535705037f3bf5)
* [OCPBUGS-87591](https://issues.redhat.com/browse/OCPBUGS-87591): remove oVirt code from CSO 4.17 [#708](https://github.com/openshift/cluster-storage-operator/pull/708)
* [OCPBUGS-41160](https://issues.redhat.com/browse/OCPBUGS-41160): Move metrics to vsphere driver [#633](https://github.com/openshift/cluster-storage-operator/pull/633)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/e4b8dceaf16926b5e4b7fc339b240af00e9539c9...a039f8a2e73771f76e799ed497535705037f3bf5)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b855c68099755979a053f60a49300d3502f44325)
* [OCPBUGS-58451](https://issues.redhat.com/browse/OCPBUGS-58451): Failing=Unknown upon long CO updating [#1212](https://github.com/openshift/cluster-version-operator/pull/1212)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b06c46276c7ac146925dc927202af97b66856a38...b855c68099755979a053f60a49300d3502f44325)
### [console](https://github.com/openshift/console/tree/b392b2b920334fa0666c584daa6590ed03048948)
* [OCPBUGS-84283](https://issues.redhat.com/browse/OCPBUGS-84283): Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 [#16738](https://github.com/openshift/console/pull/16738)
* [OCPBUGS-77124](https://issues.redhat.com/browse/OCPBUGS-77124): [release-4.17] CVE-2026-26996 Bump minimatch library [#16345](https://github.com/openshift/console/pull/16345)
* [OCPBUGS-79443](https://issues.redhat.com/browse/OCPBUGS-79443): Bump immutable [#16326](https://github.com/openshift/console/pull/16326)
* NO-JIRA: enable multi-architecture yarn builds [#16419](https://github.com/openshift/console/pull/16419)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16074](https://github.com/openshift/console/pull/16074)
* NO-JIRA: Bump builder image to v29 [#15994](https://github.com/openshift/console/pull/15994)
* [OCPBUGS-74452](https://issues.redhat.com/browse/OCPBUGS-74452): Bump lodash to latest [#15966](https://github.com/openshift/console/pull/15966)
* [OCPBUGS-69403](https://issues.redhat.com/browse/OCPBUGS-69403): Disallowed Pipelines-plugin Pipelines navigation section [#15849](https://github.com/openshift/console/pull/15849)
* [OCPBUGS-65933](https://issues.redhat.com/browse/OCPBUGS-65933): Preserve URL in perspective switch + remove dev console folks from `reviewers` [#15762](https://github.com/openshift/console/pull/15762)
* [OCPBUGS-64942](https://issues.redhat.com/browse/OCPBUGS-64942): Expose prometheus tenancy label path as a proxy [#15710](https://github.com/openshift/console/pull/15710)
* [OCPBUGS-64599](https://issues.redhat.com/browse/OCPBUGS-64599): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15665](https://github.com/openshift/console/pull/15665)
* [OCPBUGS-62631](https://issues.redhat.com/browse/OCPBUGS-62631): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15554](https://github.com/openshift/console/pull/15554)
* [OCPBUGS-63212](https://issues.redhat.com/browse/OCPBUGS-63212): switch to dev perspective for `/dev-monitoring` [#15614](https://github.com/openshift/console/pull/15614)
* [OCPBUGS-63397](https://issues.redhat.com/browse/OCPBUGS-63397): fix bug where Roles list was displaying invalid data f… [#15627](https://github.com/openshift/console/pull/15627)
* [OCPBUGS-62282](https://issues.redhat.com/browse/OCPBUGS-62282): Fix desync of console and variable namespace [#15545](https://github.com/openshift/console/pull/15545)
* [OCPBUGS-44154](https://issues.redhat.com/browse/OCPBUGS-44154): bump dompurify to latest [#15590](https://github.com/openshift/console/pull/15590)
* [OCPBUGS-61737](https://issues.redhat.com/browse/OCPBUGS-61737): Remove ancient `X-XSS-Protection` header [#15494](https://github.com/openshift/console/pull/15494)
* [OCPBUGS-54241](https://issues.redhat.com/browse/OCPBUGS-54241): VolumeSnapshots are not displayed in OpenShift Web Console [#15465](https://github.com/openshift/console/pull/15465)
* [OCPBUGS-59747](https://issues.redhat.com/browse/OCPBUGS-59747): OpenShift console PVC clone cannot use B as the unit [#15324](https://github.com/openshift/console/pull/15324)
* NO-JIRA: Increase the timeout on the cypress test [#15420](https://github.com/openshift/console/pull/15420)
* [OCPBUGS-58365](https://issues.redhat.com/browse/OCPBUGS-58365): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15271](https://github.com/openshift/console/pull/15271)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/950b9f872b93e891d30ecaa3686bae846a1c4fe1...b392b2b920334fa0666c584daa6590ed03048948)
### [console-operator](https://github.com/openshift/console-operator/tree/e8032813321ac4c2daec869a7703c31cd9b2acf4)
* [OCPBUGS-77862](https://issues.redhat.com/browse/OCPBUGS-77862): update go mod dependency for konflux [#1114](https://github.com/openshift/console-operator/pull/1114)
* [OCPBUGS-60298](https://issues.redhat.com/browse/OCPBUGS-60298): Update downloads deployment configuration to use master node selector [#1033](https://github.com/openshift/console-operator/pull/1033)
* [Full changelog](https://github.com/openshift/console-operator/compare/253854e7e529fb42e90b71038eff4aabf8f31cf7...e8032813321ac4c2daec869a7703c31cd9b2acf4)
### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/621348df96a03f642716845a15dc4043cc5f85f1)
* [OCPBUGS-85671](https://issues.redhat.com/browse/OCPBUGS-85671): CI Build root image tag sync with ART [#235](https://github.com/openshift/containernetworking-plugins/pull/235)
* [OCPBUGS-68135](https://issues.redhat.com/browse/OCPBUGS-68135): Bump logrus to v1.9.1 [#224](https://github.com/openshift/containernetworking-plugins/pull/224)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/49a6faae9586d07569079904d55907c74328b6ec...621348df96a03f642716845a15dc4043cc5f85f1)
### [coredns](https://github.com/openshift/coredns/tree/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567)
* [OCPBUGS-62825](https://issues.redhat.com/browse/OCPBUGS-62825): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#155](https://github.com/openshift/coredns/pull/155)
* [Full changelog](https://github.com/openshift/coredns/compare/dea218b4eeeef8e4ed245389e697c307bcd06552...fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/3358ea3f5ed8835aa760ee5cf02b9980bcdeb528)
* [OCPBUGS-80134](https://issues.redhat.com/browse/OCPBUGS-80134): Bump google.golang.org/grpc [#388](https://github.com/openshift/cloud-provider-openstack/pull/388)
* [OCPBUGS-68209](https://issues.redhat.com/browse/OCPBUGS-68209): fix CVE-2025-65637 [#357](https://github.com/openshift/cloud-provider-openstack/pull/357)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/19b025be218d114d8cd36c25ef4cd20fb8aefae3...3358ea3f5ed8835aa760ee5cf02b9980bcdeb528)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/e09a12eda9d162b9c094032b0250b4bae7c3ef80)
* [OCPBUGS-80077](https://issues.redhat.com/browse/OCPBUGS-80077): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 [#181](https://github.com/openshift/csi-driver-nfs/pull/181)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/798855508da2df01719bf82f6344112a33b5437c...e09a12eda9d162b9c094032b0250b4bae7c3ef80)
### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/3d4b7dee3a0f0d6566a94ce0a460923b71b18895)
* [OCPBUGS-80080](https://issues.redhat.com/browse/OCPBUGS-80080): Bump google.golang.org/grpc to v1.79.3 [#125](https://github.com/openshift/csi-driver-shared-resource-operator/pull/125)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/c095a1f2bbd0c365b74e548498d13f8463c69eb2...3d4b7dee3a0f0d6566a94ce0a460923b71b18895)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/8d93b8a3560410cb2ff3dd6d285fea822720edd4)
* [OCPBUGS-80082](https://issues.redhat.com/browse/OCPBUGS-80082): Bump google.golang.org/grpc to v1.79.3 [#106](https://github.com/openshift/csi-external-attacher/pull/106)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/c3fe8e2ec46929fbad110b392337960be3c9d6a0...8d93b8a3560410cb2ff3dd6d285fea822720edd4)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/88d1fdf1716d5d69bc88fdab27677185b440e155)
* [OCPBUGS-82709](https://issues.redhat.com/browse/OCPBUGS-82709): Address CVE-2026-35469 [#142](https://github.com/openshift/csi-external-provisioner/pull/142)
* [OCPBUGS-80083](https://issues.redhat.com/browse/OCPBUGS-80083): Bump google.golang.org/grpc [#131](https://github.com/openshift/csi-external-provisioner/pull/131)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/fe460e56e19dd3cc5497fd068083da9850fc1996...88d1fdf1716d5d69bc88fdab27677185b440e155)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/73798480d1110af451e5d7c237a722bc5e901f7b)
* [OCPBUGS-62466](https://issues.redhat.com/browse/OCPBUGS-62466): Requeue PVC over PV creation [#175](https://github.com/openshift/csi-external-resizer/pull/175)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/ab87a93853882d6ede0a8fe0a61469cd4fa61a62...73798480d1110af451e5d7c237a722bc5e901f7b)
### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c)
* [OCPBUGS-80085](https://issues.redhat.com/browse/OCPBUGS-80085), [OCPBUGS-80088](https://issues.redhat.com/browse/OCPBUGS-80088), [OCPBUGS-80089](https://issues.redhat.com/browse/OCPBUGS-80089): Bump google.golang.org/grpc to v1.79.3 [#214](https://github.com/openshift/csi-external-snapshotter/pull/214)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95...59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/3dd2253ed70cb565a63a208fa667d55f3222fb19)
* [OCPBUGS-63682](https://issues.redhat.com/browse/OCPBUGS-63682): update log level verbosity to not clutter logs [#90](https://github.com/openshift/csi-node-driver-registrar/pull/90)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/0cdc4f0981e54c33d881e26e4c184eb164316aba...3dd2253ed70cb565a63a208fa667d55f3222fb19)
### [docker-builder](https://github.com/openshift/builder/tree/12fc732cf6c3f344d87b30e4a7927811ef943fab)
* [OCPBUGS-66988](https://issues.redhat.com/browse/OCPBUGS-66988): bump buildah to 1.37.7 to fix CVE-2025-52881 [#499](https://github.com/openshift/builder/pull/499)
* [OCPBUGS-65816](https://issues.redhat.com/browse/OCPBUGS-65816): BuildConfig inline Dockerfile fails with heredoc syntax [#488](https://github.com/openshift/builder/pull/488)
* [Full changelog](https://github.com/openshift/builder/compare/4611ac34471943b77dfe2d8668df475106e3c3b4...12fc732cf6c3f344d87b30e4a7927811ef943fab)
### [docker-registry](https://github.com/openshift/image-registry/tree/d0595c9e720caa5489628e49ed45a8eb85fa7b69)
* [OCPBUGS-68182](https://issues.redhat.com/browse/OCPBUGS-68182): update logrus to v1.9.1 [#465](https://github.com/openshift/image-registry/pull/465)
* [Full changelog](https://github.com/openshift/image-registry/compare/4498bed2ff5ca62d95eb9b1e9e4fed02fdbd602e...d0595c9e720caa5489628e49ed45a8eb85fa7b69)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/f2203376a8a2d8eecec7b85dc28b756b49d8c469)
* [OCPBUGS-80095](https://issues.redhat.com/browse/OCPBUGS-80095): Bump google.golang.org/grpc to v1.79.3 [#291](https://github.com/openshift/cluster-api-provider-gcp/pull/291)
* [OCPBUGS-78279](https://issues.redhat.com/browse/OCPBUGS-78279): [release-4.17] update go mod dependency for konflux [#266](https://github.com/openshift/cluster-api-provider-gcp/pull/266)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f...f2203376a8a2d8eecec7b85dc28b756b49d8c469)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/0b52f23b73beb426e8427d21db25f681d5ac986a)
* [OCPBUGS-80118](https://issues.redhat.com/browse/OCPBUGS-80118): Bump google.golang.org/grpc to v1.79.3 [#166](https://github.com/openshift/machine-api-provider-gcp/pull/166)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/86a1d902ab3989413be802a3daea422bc559012f...0b52f23b73beb426e8427d21db25f681d5ac986a)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/907b8422fcdcb0f895c5a92bb796a93d6aed23b1)
* [OCPBUGS-80099](https://issues.redhat.com/browse/OCPBUGS-80099): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 [#113](https://github.com/openshift/gcp-pd-csi-driver/pull/113)
* [OCPBUGS-68186](https://issues.redhat.com/browse/OCPBUGS-68186): Update logrus to 1.9.3 [#90](https://github.com/openshift/gcp-pd-csi-driver/pull/90)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c770b41229e39d8859fc11ec709ab57a0e0ad06a...907b8422fcdcb0f895c5a92bb796a93d6aed23b1)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/5f27231835491f40506353f04b5a895773a1b53a)
* [OCPBUGS-80098](https://issues.redhat.com/browse/OCPBUGS-80098): Replace google.golang.org/grpc with fork [#188](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/188)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/c23b064fe303ec760c0de6204577d10ef0b0f63d...5f27231835491f40506353f04b5a895773a1b53a)
### [haproxy-router](https://github.com/openshift/router/tree/61ef15ff311cbc9f18f503f76edfb651a288291e)
* [OCPBUGS-86714](https://issues.redhat.com/browse/OCPBUGS-86714): Strip X-SSL-* headers for plain HTTP [#804](https://github.com/openshift/router/pull/804)
* [OCPBUGS-80100](https://issues.redhat.com/browse/OCPBUGS-80100): Address CVE-2026-33186 [#779](https://github.com/openshift/router/pull/779)
* [Full changelog](https://github.com/openshift/router/compare/1e29d8cc87a1c9e6645a4b9aa01197d90e366152...61ef15ff311cbc9f18f503f76edfb651a288291e)
### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/4e295fa517e17429af4d8004e7a8028fe719e60f)
* [OCPBUGS-68132](https://issues.redhat.com/browse/OCPBUGS-68132), [OCPBUGS-68190](https://issues.redhat.com/browse/OCPBUGS-68190): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [#2573](https://github.com/openshift/kubernetes/pull/2573)
* [OCPBUGS-72531](https://issues.redhat.com/browse/OCPBUGS-72531): Skip E2e: attach on previously attached volumes should work [#2566](https://github.com/openshift/kubernetes/pull/2566)
* [OCPBUGS-65695](https://issues.redhat.com/browse/OCPBUGS-65695): Fix Concurrentmap Iteration [#2520](https://github.com/openshift/kubernetes/pull/2520)
* [OCPBUGS-63460](https://issues.redhat.com/browse/OCPBUGS-63460): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 [#2496](https://github.com/openshift/kubernetes/pull/2496)
* [CNTRLPLANE-1611](https://issues.redhat.com/browse/CNTRLPLANE-1611): Backport StreamingCollectionEncoding for JSON and protobuf [#2486](https://github.com/openshift/kubernetes/pull/2486)
* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): UPSTREAM: <carry>: Don't retry storage calls with side effects. [#2458](https://github.com/openshift/kubernetes/pull/2458)
* [OCPBUGS-60552](https://issues.redhat.com/browse/OCPBUGS-60552): [4.17] podresources: list: use active pods [#2426](https://github.com/openshift/kubernetes/pull/2426)
* 4.17: OCPBUGS-60998: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments [#2434](https://github.com/openshift/kubernetes/pull/2434)
* [Full changelog](https://github.com/openshift/kubernetes/compare/ce407c5220d03860b36d8640286ae48521a0dc18...4e295fa517e17429af4d8004e7a8028fe719e60f)
### [hypershift](https://github.com/openshift/hypershift/tree/a33689d822a23aa5438faf88a33eed152c610fb3)
* [OCPBUGS-99079](https://issues.redhat.com/browse/OCPBUGS-99079): fix(backport): konnectivity agent auth [#9104](https://github.com/openshift/hypershift/pull/9104)
* [OCPBUGS-89357](https://issues.redhat.com/browse/OCPBUGS-89357): build(operator): drop hypershift-no-cgo from operator container images [#8761](https://github.com/openshift/hypershift/pull/8761)
* [OCPBUGS-80103](https://issues.redhat.com/browse/OCPBUGS-80103): fix https://github.com/advisories/GHSA-p77j-4mvh-x3m3 by replacing grpc-go [#8516](https://github.com/openshift/hypershift/pull/8516)
* [OCPBUGS-84181](https://issues.redhat.com/browse/OCPBUGS-84181): fix(cno): use brackets only for IPv6 in server URL [#8347](https://github.com/openshift/hypershift/pull/8347)
* [OCPBUGS-76533](https://issues.redhat.com/browse/OCPBUGS-76533): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7703](https://github.com/openshift/hypershift/pull/7703)
* [OCPBUGS-74230](https://issues.redhat.com/browse/OCPBUGS-74230), [OCPBUGS-74294](https://issues.redhat.com/browse/OCPBUGS-74294): [release-4.17] Support proxy authentication when user/pass is included in URL [#7568](https://github.com/openshift/hypershift/pull/7568)
* fix: OCPBUGS-72956: Fix Konflux EC voilation, update deprecated base … [#7457](https://github.com/openshift/hypershift/pull/7457)
* [OCPBUGS-69865](https://issues.redhat.com/browse/OCPBUGS-69865): test: remove unit tests that depend on network communication [release-4.17] [#7411](https://github.com/openshift/hypershift/pull/7411)
* [OCPBUGS-57123](https://issues.redhat.com/browse/OCPBUGS-57123): Add support for registry root entry only in the IDMS/ICSP [#6230](https://github.com/openshift/hypershift/pull/6230)
* [CNTRLPLANE-1903](https://issues.redhat.com/browse/CNTRLPLANE-1903): Migrate 4.17 pipelines to use common pipeline [#7215](https://github.com/openshift/hypershift/pull/7215)
* [OCPBUGS-63639](https://issues.redhat.com/browse/OCPBUGS-63639): [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7112](https://github.com/openshift/hypershift/pull/7112)
* [OCPBUGS-64604](https://issues.redhat.com/browse/OCPBUGS-64604): Update DNS names for ovn-kubernetes cp metrics [#7150](https://github.com/openshift/hypershift/pull/7150)
* [OCPBUGS-63370](https://issues.redhat.com/browse/OCPBUGS-63370): fix: Make the hypershift CLI binary FIPS-compliant [#7094](https://github.com/openshift/hypershift/pull/7094)
* [CNTRLPLANE-1425](https://issues.redhat.com/browse/CNTRLPLANE-1425): feat(konflux): tag MCE HO images with latest [#6838](https://github.com/openshift/hypershift/pull/6838)
* [OCPBUGS-57143](https://issues.redhat.com/browse/OCPBUGS-57143): [release-4.17] HCP payload doesn't respect multiple mirrors [#6771](https://github.com/openshift/hypershift/pull/6771)
* [OCPBUGS-61290](https://issues.redhat.com/browse/OCPBUGS-61290): Update KCM node monitor grace period [#6760](https://github.com/openshift/hypershift/pull/6760)
* [OCPBUGS-61208](https://issues.redhat.com/browse/OCPBUGS-61208): use common MCE konflux pipeline [#6749](https://github.com/openshift/hypershift/pull/6749)
* [OCPBUGS-60149](https://issues.redhat.com/browse/OCPBUGS-60149): [release-4.17] Always compress and encode payload in token secret for inplace upgrades [#6740](https://github.com/openshift/hypershift/pull/6740)
* [OCPBUGS-61101](https://issues.redhat.com/browse/OCPBUGS-61101): Use system trust bundle in CPO IDP https client [#6735](https://github.com/openshift/hypershift/pull/6735)
* [OCPBUGS-60921](https://issues.redhat.com/browse/OCPBUGS-60921): konflux for hcp-cli [#6699](https://github.com/openshift/hypershift/pull/6699)
* [Full changelog](https://github.com/openshift/hypershift/compare/32ce0108bfb7f664cf4f5e07c20d37eeb65cbe78...a33689d822a23aa5438faf88a33eed152c610fb3)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/9c043915bd01ede967dd412034190303150a9825)
* [OCPBUGS-80105](https://issues.redhat.com/browse/OCPBUGS-80105): Bump google.golang.org/grpc to v1.79.3 [#144](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/144)
* [OCPBUGS-77209](https://issues.redhat.com/browse/OCPBUGS-77209): [release-4.17] standardize build paths [#123](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/123)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/b4d153d69797e08c13aded5400112739779091b9...9c043915bd01ede967dd412034190303150a9825)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/9c13e272406752acdc8e89d0f67eeae07a5f747f)
* [OCPBUGS-67287](https://issues.redhat.com/browse/OCPBUGS-67287): [release-4.17] Fix incomplete vendor/ [#139](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/139)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/50e6e1ad8083a36c5ead259066753d8446fc87e0...9c13e272406752acdc8e89d0f67eeae07a5f747f)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bc5d5d8359a370d0d434fdaa7b3f897e6d283aa3)
* [OCPBUGS-81667](https://issues.redhat.com/browse/OCPBUGS-81667): bump vpc go sdk [#92](https://github.com/openshift/machine-api-provider-ibmcloud/pull/92)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#88](https://github.com/openshift/machine-api-provider-ibmcloud/pull/88)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0b8dd7abc69b9a2369005517846c95c619abf613...bc5d5d8359a370d0d434fdaa7b3f897e6d283aa3)
### [insights-operator](https://github.com/openshift/insights-operator/tree/2e91ecb38e819b2b191553461ff5dc61359115c9)
* [OCPBUGS-80108](https://issues.redhat.com/browse/OCPBUGS-80108): Bump google.golang.org/grpc to v1.79.3 [#1284](https://github.com/openshift/insights-operator/pull/1284)
* [OCPBUGS-68193](https://issues.redhat.com/browse/OCPBUGS-68193): OCPBUGS-68194: [vuln] Update logrus library to 1.9.3 [#1227](https://github.com/openshift/insights-operator/pull/1227)
* [OCPBUGS-67008](https://issues.redhat.com/browse/OCPBUGS-67008): Add filtering to add other possible pod status to QEMU gatherer [#1196](https://github.com/openshift/insights-operator/pull/1196)
* [OCPBUGS-66395](https://issues.redhat.com/browse/OCPBUGS-66395): QEMU logs are not gathered if there are pending status virt-launcher pods [#1194](https://github.com/openshift/insights-operator/pull/1194)
* [OCPBUGS-66394](https://issues.redhat.com/browse/OCPBUGS-66394): [bugfix] The archive's records may include files whose names are out of bounds [#1193](https://github.com/openshift/insights-operator/pull/1193)
* [OCPBUGS-64629](https://issues.redhat.com/browse/OCPBUGS-64629): add permissions to gather clusterrole [#1170](https://github.com/openshift/insights-operator/pull/1170)
* [OCPBUGS-63500](https://issues.redhat.com/browse/OCPBUGS-63500): add missing permissions for replicasets and events [#1165](https://github.com/openshift/insights-operator/pull/1165)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/96411ec2758ccb00a34d82695329de784e22b543...2e91ecb38e819b2b191553461ff5dc61359115c9)
### [ironic](https://github.com/openshift/ironic-image/tree/82d260687a1f6bac0f4514add052d18262203acb)
* [OCPBUGS-76458](https://issues.redhat.com/browse/OCPBUGS-76458): Bump pyasn1 to 0.5.1-4 [#827](https://github.com/openshift/ironic-image/pull/827)
* [OCPBUGS-74114](https://issues.redhat.com/browse/OCPBUGS-74114): Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix [#796](https://github.com/openshift/ironic-image/pull/796)
* [OCPBUGS-69792](https://issues.redhat.com/browse/OCPBUGS-69792): Bump eventlet version to 0.33.1-7 [#761](https://github.com/openshift/ironic-image/pull/761)
* [Full changelog](https://github.com/openshift/ironic-image/compare/391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c...82d260687a1f6bac0f4514add052d18262203acb)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/1da301b9a105abd4e0e20aaff804188e9d9588f4)
* [OCPBUGS-95067](https://issues.redhat.com/browse/OCPBUGS-95067): Replace individual package removal with a single rpm -e loop [#287](https://github.com/openshift/ironic-agent-image/pull/287)
* [OCPBUGS-95067](https://issues.redhat.com/browse/OCPBUGS-95067): Replace dnf remove with rpm -e to prevent dependency removal [#275](https://github.com/openshift/ironic-agent-image/pull/275)
* [OCPBUGS-69775](https://issues.redhat.com/browse/OCPBUGS-69775): Bump eventlet version to 0.33.1-7 [#231](https://github.com/openshift/ironic-agent-image/pull/231)
* [OCPBUGS-62490](https://issues.redhat.com/browse/OCPBUGS-62490): netutils: Use ethtool ioctl to get permanent mac address [#214](https://github.com/openshift/ironic-agent-image/pull/214)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/dfc319182f7a1a2bd6b252728d3cd8a03bc9d7c0...1da301b9a105abd4e0e20aaff804188e9d9588f4)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/120aa708f669b7d771a6c2ada9cccad45fb98521)
* [OCPBUGS-80013](https://issues.redhat.com/browse/OCPBUGS-80013): Bump google.golang.org/grpc to v1.79.3 [#65](https://github.com/openshift/kubernetes-metrics-server/pull/65)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec...120aa708f669b7d771a6c2ada9cccad45fb98521)
### [kube-proxy](https://github.com/openshift/sdn/tree/fd50551b5c640fb4bda787faaab32f8b641839e9)
* [OCPBUGS-68165](https://issues.redhat.com/browse/OCPBUGS-68165): deps: Update library-go to fix a CVE [#661](https://github.com/openshift/sdn/pull/661)
* [Full changelog](https://github.com/openshift/sdn/compare/dee082def2014ab85a0e5ff9a056d3fe2461eab7...fd50551b5c640fb4bda787faaab32f8b641839e9)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/b40c02a5fe525b1a69e1cf2dbada18e28a4ccd1e)
* [OCPBUGS-74874](https://issues.redhat.com/browse/OCPBUGS-74874): Deduplicate CRS stores [#132](https://github.com/openshift/kube-state-metrics/pull/132)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/462e63f6223817d3610f030f6166a790d793c572...b40c02a5fe525b1a69e1cf2dbada18e28a4ccd1e)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/d7d7a59127ef9020cbf6339a313e7eb7346c95f6)
* [OCPBUGS-95083](https://issues.redhat.com/browse/OCPBUGS-95083): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#79](https://github.com/openshift/cloud-provider-kubevirt/pull/79)
* [OCPBUGS-34447](https://issues.redhat.com/browse/OCPBUGS-34447): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 [#44](https://github.com/openshift/cloud-provider-kubevirt/pull/44)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b...d7d7a59127ef9020cbf6339a313e7eb7346c95f6)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/b4ad2d68d25572212ca92d42bb209d103d3589d6)
* [OCPBUGS-80014](https://issues.redhat.com/browse/OCPBUGS-80014): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/kubevirt-csi-driver/pull/102)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/757a8894fe4f5b569210ec695fe0615e291f42ec...b4ad2d68d25572212ca92d42bb209d103d3589d6)
### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/931afe11b155006f805d0b029e46416e632d1a14)
* [OCPBUGS-77195](https://issues.redhat.com/browse/OCPBUGS-77195): Fix incomplete vendor/ [#301](https://github.com/openshift/cluster-api-provider-libvirt/pull/301)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...931afe11b155006f805d0b029e46416e632d1a14)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/2eb3ca6e5bb9b245c34b5df6c9ab5961e0f371fc)
* [OCPBUGS-79373](https://issues.redhat.com/browse/OCPBUGS-79373): [release-4.17] Use resource group when generating default Azure image [#1481](https://github.com/openshift/machine-api-operator/pull/1481)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/998cffed3663b5b4332a8eb0d8e7dce489b1bfa9...2eb3ca6e5bb9b245c34b5df6c9ab5961e0f371fc)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3bdd678e83da52e0754b393b82435eea968af3ed)
* [OCPBUGS-98583](https://issues.redhat.com/browse/OCPBUGS-98583): Remove sensitive ControllerConfig logging [#6300](https://github.com/openshift/machine-config-operator/pull/6300)
* [OCPBUGS-97845](https://issues.redhat.com/browse/OCPBUGS-97845): Bootstrap MCS logging entire ignition [#6274](https://github.com/openshift/machine-config-operator/pull/6274)
* [OCPBUGS-74149](https://issues.redhat.com/browse/OCPBUGS-74149): enable nodeip-configuration for platform external [#5577](https://github.com/openshift/machine-config-operator/pull/5577)
* [OCPBUGS-77979](https://issues.redhat.com/browse/OCPBUGS-77979): hermetic 4.17 [#5733](https://github.com/openshift/machine-config-operator/pull/5733)
* [OCPBUGS-77889](https://issues.redhat.com/browse/OCPBUGS-77889): reduce MCO image size [#5746](https://github.com/openshift/machine-config-operator/pull/5746)
* [OCPBUGS-77812](https://issues.redhat.com/browse/OCPBUGS-77812): mcd_config_drift not working properly [#5741](https://github.com/openshift/machine-config-operator/pull/5741)
* [OCPBUGS-77422](https://issues.redhat.com/browse/OCPBUGS-77422): Remove MCD liveness probe [#5709](https://github.com/openshift/machine-config-operator/pull/5709)
* [OCPBUGS-77242](https://issues.redhat.com/browse/OCPBUGS-77242): After OCL is enabled few phases in MCN are not updating as expected [#5575](https://github.com/openshift/machine-config-operator/pull/5575)
* [OCPBUGS-77186](https://issues.redhat.com/browse/OCPBUGS-77186): Machine-config controller should not log about non-existent pull-secret changes [#5679](https://github.com/openshift/machine-config-operator/pull/5679)
* [OCPBUGS-77090](https://issues.redhat.com/browse/OCPBUGS-77090): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5678](https://github.com/openshift/machine-config-operator/pull/5678)
* [OCPBUGS-61190](https://issues.redhat.com/browse/OCPBUGS-61190): MCO report "failed to list *v1alpha1.MachineOSConfig" when enable TechPreview after upgrading from 4.16 to 4.17 with one mcp paused [#5584](https://github.com/openshift/machine-config-operator/pull/5584)
* [OCPBUGS-60112](https://issues.redhat.com/browse/OCPBUGS-60112): Enable debug logging for nodeip-configuration [#5219](https://github.com/openshift/machine-config-operator/pull/5219)
* [OCPBUGS-62170](https://issues.redhat.com/browse/OCPBUGS-62170): Fix - NetworkManager restart or crash renders br-ex unusable [#5355](https://github.com/openshift/machine-config-operator/pull/5355)
* [OCPBUGS-66037](https://issues.redhat.com/browse/OCPBUGS-66037): Remove --mount directives [#5443](https://github.com/openshift/machine-config-operator/pull/5443)
* [OCPBUGS-63154](https://issues.redhat.com/browse/OCPBUGS-63154): [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5358](https://github.com/openshift/machine-config-operator/pull/5358)
* [OCPBUGS-63540](https://issues.redhat.com/browse/OCPBUGS-63540): Add control-plane label for master nodes on legacy clusters [#5375](https://github.com/openshift/machine-config-operator/pull/5375)
* [OCPBUGS-63364](https://issues.redhat.com/browse/OCPBUGS-63364): Invalid architecture value found in annotation during 4.19 update [#5368](https://github.com/openshift/machine-config-operator/pull/5368)
* [OCPBUGS-63055](https://issues.redhat.com/browse/OCPBUGS-63055): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5346](https://github.com/openshift/machine-config-operator/pull/5346)
* [OCPBUGS-62741](https://issues.redhat.com/browse/OCPBUGS-62741): Add /etc/docker/certs.d to template [#5335](https://github.com/openshift/machine-config-operator/pull/5335)
* [OCPBUGS-62683](https://issues.redhat.com/browse/OCPBUGS-62683): Add mcd_local_unsupported_packages recording rule [#5327](https://github.com/openshift/machine-config-operator/pull/5327)
* [OCPBUGS-60890](https://issues.redhat.com/browse/OCPBUGS-60890): Race in configure-ovs.sh affects bonding interface configuration. [#5267](https://github.com/openshift/machine-config-operator/pull/5267)
* [OCPBUGS-61859](https://issues.redhat.com/browse/OCPBUGS-61859): Override NMState service definition [#5289](https://github.com/openshift/machine-config-operator/pull/5289)
* [OCPBUGS-59930](https://issues.redhat.com/browse/OCPBUGS-59930), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5206](https://github.com/openshift/machine-config-operator/pull/5206)
* [OCPBUGS-56752](https://issues.redhat.com/browse/OCPBUGS-56752): Support NODEIP_HINT in IPI deployments too [#5080](https://github.com/openshift/machine-config-operator/pull/5080)
* [OCPBUGS-60704](https://issues.redhat.com/browse/OCPBUGS-60704): operator: switch out VAP v1beta1 to v1 [#5256](https://github.com/openshift/machine-config-operator/pull/5256)
* [OCPBUGS-57084](https://issues.redhat.com/browse/OCPBUGS-57084): scope MCD node listers to current node [#5107](https://github.com/openshift/machine-config-operator/pull/5107)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/9c354af453764786fd5efeef623ffeb1e589fc48...3bdd678e83da52e0754b393b82435eea968af3ed)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/03af8514abbbd588bcc5514ff591b769d1241c09)
* [OCPBUGS-68192](https://issues.redhat.com/browse/OCPBUGS-68192): [4.17] Uplift logrus [#152](https://github.com/openshift/image-customization-controller/pull/152)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/1a7239ebe6f6a403b54499fe92267e493293d4b1...03af8514abbbd588bcc5514ff591b769d1241c09)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/cc250001ddce8bd6342942f045ff7f9930c74040)
* [OCPBUGS-87877](https://issues.redhat.com/browse/OCPBUGS-87877): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#101](https://github.com/openshift/machine-os-images/pull/101)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/f85666be7889cd6ba95926546a005fed5f3cb68a...cc250001ddce8bd6342942f045ff7f9930c74040)
### [metallb-frr](https://github.com/openshift/frr/tree/b575d5dfac5319d7d296922de69c73baea6d142d)
* [OCPBUGS-76548](https://issues.redhat.com/browse/OCPBUGS-76548): Dockerfile: unpin FRR rpm [#124](https://github.com/openshift/frr/pull/124)
* [Full changelog](https://github.com/openshift/frr/compare/c0182036769726484b96a20db5e8be211d2f88b6...b575d5dfac5319d7d296922de69c73baea6d142d)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ffd758f816979228ae5f5d8ec526e74efcbf149a)
* Fix for OCPBUGS-98163: CVE-2026-13676 [#1050](https://github.com/openshift/monitoring-plugin/pull/1050)
* Fix for OCPBUGS-90525 OCPBUGS-90526: CVE-2026-12151 CVE-2026-9697 [#1008](https://github.com/openshift/monitoring-plugin/pull/1008)
* [OCPBUGS-79444](https://issues.redhat.com/browse/OCPBUGS-79444): immutable bump [#897](https://github.com/openshift/monitoring-plugin/pull/897)
* [OU-1260](https://issues.redhat.com/browse/OU-1260): [release-4.17] feat: use npm instead of yarn [#812](https://github.com/openshift/monitoring-plugin/pull/812)
* [OCPBUGS-76809](https://issues.redhat.com/browse/OCPBUGS-76809): fix for CVE-2025-69873 [#848](https://github.com/openshift/monitoring-plugin/pull/848)
* [OCPBUGS-70290](https://issues.redhat.com/browse/OCPBUGS-70290): Manual cherry pick qs vulnerability 4 17 [#747](https://github.com/openshift/monitoring-plugin/pull/747)
* [OCPBUGS-64942](https://issues.redhat.com/browse/OCPBUGS-64942): Use tenancy access to metric lables [#639](https://github.com/openshift/monitoring-plugin/pull/639)
* [OU-1058](https://issues.redhat.com/browse/OU-1058): Don't show TP button in non-administrator [#637](https://github.com/openshift/monitoring-plugin/pull/637)
* [OCPBUGS-62282](https://issues.redhat.com/browse/OCPBUGS-62282): align dev and admin persective tab names [#602](https://github.com/openshift/monitoring-plugin/pull/602)
* [OCPBUGS-62282](https://issues.redhat.com/browse/OCPBUGS-62282): add missing translation string [#587](https://github.com/openshift/monitoring-plugin/pull/587)
* [OCPBUGS-61891](https://issues.redhat.com/browse/OCPBUGS-61891): feat: add alerting rules tab to dev console [#538](https://github.com/openshift/monitoring-plugin/pull/538)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/8696833c59fc3d849a62af4022b5312fd18e0162...ffd758f816979228ae5f5d8ec526e74efcbf149a)
### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/659299d118afc196d66b16a7714e17e6d11d0669)
* [OCPBUGS-85250](https://issues.redhat.com/browse/OCPBUGS-85250): Fix server url in kubeconfig [#299](https://github.com/openshift/multus-cni/pull/299)
* NO-ISSUE: [release-4.17] Bump Go to 1.22 and fix CI build root image [#290](https://github.com/openshift/multus-cni/pull/290)
* [OCPBUGS-77854](https://issues.redhat.com/browse/OCPBUGS-77854): hermetic 4.17 [#277](https://github.com/openshift/multus-cni/pull/277)
* [OCPBUGS-43391](https://issues.redhat.com/browse/OCPBUGS-43391): Update net-attach-def client library to 1.7.5 for cri-o functionality [backport 4.17] [#257](https://github.com/openshift/multus-cni/pull/257)
* [Full changelog](https://github.com/openshift/multus-cni/compare/af7b9cbf4fc26091e78c2db9e7742df969a27888...659299d118afc196d66b16a7714e17e6d11d0669)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b)
* [OCPBUGS-73728](https://issues.redhat.com/browse/OCPBUGS-73728): Update tag on ci-operator.yaml file [#395](https://github.com/openshift/whereabouts-cni/pull/395)
* [OCPBUGS-70256](https://issues.redhat.com/browse/OCPBUGS-70256): Prevent accidental IP deallocation in statefulsets [#393](https://github.com/openshift/whereabouts-cni/pull/393)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/df78f6433df7f12de63f06fbc62d0f63c0642dd2...40cfb3dca70a4d37dff426c0ec1c77efcb399e1b)
### [must-gather](https://github.com/openshift/must-gather/tree/ea72c2eb404f9fe9282be70d1af7689f8f139fee)
* [OCPBUGS-86069](https://issues.redhat.com/browse/OCPBUGS-86069): Collect object size with the object count [#548](https://github.com/openshift/must-gather/pull/548)
* [OCPBUGS-60607](https://issues.redhat.com/browse/OCPBUGS-60607): Separate resources with comma to fix malformed inspect [#504](https://github.com/openshift/must-gather/pull/504)
* [Full changelog](https://github.com/openshift/must-gather/compare/2665354a16c71bb1d9af8c476bb30fa8835a00fb...ea72c2eb404f9fe9282be70d1af7689f8f139fee)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/cc7b628e6d4c0331d0515b7b59a0d22699ed6ea3)
* [OCPBUGS-59620](https://issues.redhat.com/browse/OCPBUGS-59620): Bump github.com/containernetworking/plugins from to 1.7.1 [#83](https://github.com/openshift/bond-cni/pull/83)
* [Full changelog](https://github.com/openshift/bond-cni/compare/55a2198e90df6bbc70411ee6a5f9bfaa845c9727...cc7b628e6d4c0331d0515b7b59a0d22699ed6ea3)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/45ce03c0da375f0f03e3b516810194f6910c25d9)
* [OCPBUGS-87998](https://issues.redhat.com/browse/OCPBUGS-87998): Retain namespace selection between network policies tabs [#428](https://github.com/openshift/networking-console-plugin/pull/428)
* [OCPBUGS-83379](https://issues.redhat.com/browse/OCPBUGS-83379): fix CVE-2026-34043 - Update serialize-javascript to 7.0.5 [#416](https://github.com/openshift/networking-console-plugin/pull/416)
* [release-4:17] OCPBUGS-85376: Migration from yarn to npm [#414](https://github.com/openshift/networking-console-plugin/pull/414)
* [OCPBUGS-81602](https://issues.redhat.com/browse/OCPBUGS-81602): Fix CVE-2026-CVE-2026-4800 in lodash [#402](https://github.com/openshift/networking-console-plugin/pull/402)
* [OCPBUGS-79445](https://issues.redhat.com/browse/OCPBUGS-79445): Bump immutable [#389](https://github.com/openshift/networking-console-plugin/pull/389)
* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#320](https://github.com/openshift/networking-console-plugin/pull/320)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f18dafcfe4e6ea95012ae09701c1f0298993ee3d...45ce03c0da375f0f03e3b516810194f6910c25d9)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e078aeb29048d2b37e0b8e2657641a9207fd4d84)
* [OCPBUGS-66228](https://issues.redhat.com/browse/OCPBUGS-66228): UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update [#157](https://github.com/openshift/oauth-apiserver/pull/157)
* NO-JIRA: (chore): update OWNERS file [#171](https://github.com/openshift/oauth-apiserver/pull/171)
* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): Bump openshift/kubernetes-apiserver for etcd retry patches. [#143](https://github.com/openshift/oauth-apiserver/pull/143)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/54bd97ae5d17c2f81da04697333cb0809c3867dc...e078aeb29048d2b37e0b8e2657641a9207fd4d84)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/484a750a66e287c751116d4384b37281c9951a26)
* [OCPBUGS-61445](https://issues.redhat.com/browse/OCPBUGS-61445): Update x/crypto to v0.31.0 [#334](https://github.com/openshift/oauth-proxy/pull/334)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/5cf2ba74fea754e1510fbb84af74bf9963f24e43...484a750a66e287c751116d4384b37281c9951a26)
### [oauth-server](https://github.com/openshift/oauth-server/tree/be35f2dd002c1b655397207edf65c112aa59388c)
* [OCPBUGS-81795](https://issues.redhat.com/browse/OCPBUGS-81795): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#239](https://github.com/openshift/oauth-server/pull/239)
* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): Bump openshift/kubernetes-apiserver for etcd retry patches. [#198](https://github.com/openshift/oauth-server/pull/198)
* [Full changelog](https://github.com/openshift/oauth-server/compare/ad578443e28abb61745f24caf9126dd8476b9197...be35f2dd002c1b655397207edf65c112aa59388c)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/58375b70881938be8a1e08750507e4a40943f6fd)
* Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) [#1269](https://github.com/openshift/oc-mirror/pull/1269)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/39bedc78d79bd13ea7271e5d4c72a12890b05631...58375b70881938be8a1e08750507e4a40943f6fd)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/795b313c5a491efe27207e5b3988ec9ba6f5378e)
* [OCPBUGS-80129](https://issues.redhat.com/browse/OCPBUGS-80129): Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 [#736](https://github.com/openshift/operator-framework-operator-controller/pull/736)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/e245e6612aa1773f5a17d66edca7dc01f0cb5098...795b313c5a491efe27207e5b3988ec9ba6f5378e)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/79a42c566a8c7857d23623d296c80a70fc2b8148)
* [OCPBUGS-82720](https://issues.redhat.com/browse/OCPBUGS-82720): Address CVE-2026-35469 [#658](https://github.com/openshift/openshift-apiserver/pull/658)
* [OCPBUGS-68208](https://issues.redhat.com/browse/OCPBUGS-68208): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] [#609](https://github.com/openshift/openshift-apiserver/pull/609)
* [OCPBUGS-74143](https://issues.redhat.com/browse/OCPBUGS-74143): pkg/image: conditionally parse raw image manifest [#596](https://github.com/openshift/openshift-apiserver/pull/596)
* [OCPBUGS-66229](https://issues.redhat.com/browse/OCPBUGS-66229): UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update [#584](https://github.com/openshift/openshift-apiserver/pull/584)
* [OCPBUGS-63392](https://issues.redhat.com/browse/OCPBUGS-63392): Wire dry run option to Image API server operations [#565](https://github.com/openshift/openshift-apiserver/pull/565)
* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): Bump openshift/kubernetes-apiserver for etcd retry patches. [#554](https://github.com/openshift/openshift-apiserver/pull/554)
* [OCPBUGS-53382](https://issues.redhat.com/browse/OCPBUGS-53382): Skip blocked registry check for registries with mirrors [#500](https://github.com/openshift/openshift-apiserver/pull/500)
* [OCPBUGS-58821](https://issues.redhat.com/browse/OCPBUGS-58821): Fix image reference in TestImageStreamImportQuayIO [#515](https://github.com/openshift/openshift-apiserver/pull/515)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/5b1f00eae6a9d69874f42c5df2078c2b91c3aa85...79a42c566a8c7857d23623d296c80a70fc2b8148)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/967faa66125ae77148df87d8394d07112c4c0b8c)
* [OCPBUGS-61199](https://issues.redhat.com/browse/OCPBUGS-61199): legacy image pull secret rollback controller [#413](https://github.com/openshift/openshift-controller-manager/pull/413)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/47841f6ebaedab0ac83ee904793273377daf0894...967faa66125ae77148df87d8394d07112c4c0b8c)
### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/00ba71fd3736b00d019383fce2ec74a9c5f9414c)
* [OCPBUGS-80133](https://issues.redhat.com/browse/OCPBUGS-80133): Bump google.golang.org/grpc to v1.79.3 [#194](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/194)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2...00ba71fd3736b00d019383fce2ec74a9c5f9414c)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/3b926d2094bab3c6759252b7681cc36473b29021)
* [OCPBUGS-78169](https://issues.redhat.com/browse/OCPBUGS-78169): hermetic 4.17 [#162](https://github.com/openshift/machine-api-provider-openstack/pull/162)
* [OCPBUGS-76793](https://issues.redhat.com/browse/OCPBUGS-76793): Fix make test [#160](https://github.com/openshift/machine-api-provider-openstack/pull/160)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/689718740b923e516c037d7862d81a462ecdbbd3...3b926d2094bab3c6759252b7681cc36473b29021)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/b3e9095f255735381fb4d9d8651077abcafc1a25)
* [OCPBUGS-80136](https://issues.redhat.com/browse/OCPBUGS-80136), [OCPBUGS-80137](https://issues.redhat.com/browse/OCPBUGS-80137), [OCPBUGS-80138](https://issues.redhat.com/browse/OCPBUGS-80138): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.17] [#1315](https://github.com/openshift/operator-framework-olm/pull/1315)
* [OCPBUGS-77838](https://issues.redhat.com/browse/OCPBUGS-77838): Remove the collect-profiles info from the microshift kustomization file [#1250](https://github.com/openshift/operator-framework-olm/pull/1250)
* [OCPBUGS-76953](https://issues.redhat.com/browse/OCPBUGS-76953): Remove the collect-profiles job [#1232](https://github.com/openshift/operator-framework-olm/pull/1232)
* [OCPBUGS-67301](https://issues.redhat.com/browse/OCPBUGS-67301): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1172](https://github.com/openshift/operator-framework-olm/pull/1172)
* [OCPBUGS-57092](https://issues.redhat.com/browse/OCPBUGS-57092): [release-4.17] e2e stability fixes [#1081](https://github.com/openshift/operator-framework-olm/pull/1081)
* [OCPBUGS-60791](https://issues.redhat.com/browse/OCPBUGS-60791): Add NetworkPolicy as a supported kind [#1058](https://github.com/openshift/operator-framework-olm/pull/1058)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/14f5ca00370ba75eaae689caba5ee86aa411ea74...b3e9095f255735381fb4d9d8651077abcafc1a25)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f)
* [OCPBUGS-68212](https://issues.redhat.com/browse/OCPBUGS-68212), [OCPBUGS-68213](https://issues.redhat.com/browse/OCPBUGS-68213): [release-4.17] CVE-2025-65637 fixed in logrus v1.9.3+ [#710](https://github.com/operator-framework/operator-marketplace/pull/710)
* [OCPBUGS-62219](https://issues.redhat.com/browse/OCPBUGS-62219): Remove Expect func so that the test case can use the retry logic [#670](https://github.com/operator-framework/operator-marketplace/pull/670)
* [OCPBUGS-61036](https://issues.redhat.com/browse/OCPBUGS-61036): Update memoryTarget on catalog source pods [#663](https://github.com/operator-framework/operator-marketplace/pull/663)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/456fd6e675f4fe0e5422b86ab1aae4bab49a3ddc...5cf36fde25cf22b7f58b0a3242f82cadd18acc6f)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/3f208c096347db8b0929f5176abd95c1477dc563)
* [OCPBUGS-81639](https://issues.redhat.com/browse/OCPBUGS-81639): External gateway: Remove routes for external gateway pods in terminating or not ready state [#3107](https://github.com/openshift/ovn-kubernetes/pull/3107)
* [OCPBUGS-78029](https://issues.redhat.com/browse/OCPBUGS-78029): Add pperiyasamy to OWNERS for release-4.17 [#3046](https://github.com/openshift/ovn-kubernetes/pull/3046)
* [OCPBUGS-77568](https://issues.redhat.com/browse/OCPBUGS-77568): Clear stale conntrack UDP entries for nodePorts [#3035](https://github.com/openshift/ovn-kubernetes/pull/3035)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-74492](https://issues.redhat.com/browse/OCPBUGS-74492): [release-4.17] Dockerfile: Unpin OVN and consume the latest from FDP [#2959](https://github.com/openshift/ovn-kubernetes/pull/2959)
* [release:4.17] OCPBUGS-71985: Fix conntrack reconciliation to use service port instead of endpoint port [#2936](https://github.com/openshift/ovn-kubernetes/pull/2936)
* [OCPBUGS-71218](https://issues.redhat.com/browse/OCPBUGS-71218): [release-4.17] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) [#2905](https://github.com/openshift/ovn-kubernetes/pull/2905)
* [OCPBUGS-71198](https://issues.redhat.com/browse/OCPBUGS-71198): NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated [#2923](https://github.com/openshift/ovn-kubernetes/pull/2923)
* [OCPBUGS-68348](https://issues.redhat.com/browse/OCPBUGS-68348): Add ricky-rav to OWNERS for release-4.17 [#2898](https://github.com/openshift/ovn-kubernetes/pull/2898)
* [OCPBUGS-65928](https://issues.redhat.com/browse/OCPBUGS-65928): Skip Pending pods in EgressIP status [#2871](https://github.com/openshift/ovn-kubernetes/pull/2871)
* [OCPBUGS-65569](https://issues.redhat.com/browse/OCPBUGS-65569): [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods [#2857](https://github.com/openshift/ovn-kubernetes/pull/2857)
* [OCPBUGS-64856](https://issues.redhat.com/browse/OCPBUGS-64856): Fix stale EIP assignments during failover and controller restart [#2850](https://github.com/openshift/ovn-kubernetes/pull/2850)
* [OCPBUGS-64674](https://issues.redhat.com/browse/OCPBUGS-64674): [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime [#2843](https://github.com/openshift/ovn-kubernetes/pull/2843)
* [OCPBUGS-63154](https://issues.redhat.com/browse/OCPBUGS-63154): Fix EgressIP stale GARP post reboot + pod restart [#2807](https://github.com/openshift/ovn-kubernetes/pull/2807)
* [OCPBUGS-61749](https://issues.redhat.com/browse/OCPBUGS-61749): [release-4.17] Fix dnsnameresolver address set [#2796](https://github.com/openshift/ovn-kubernetes/pull/2796)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/82ce0167fce4994b6b9286b509f8cbdd2c65f253...3f208c096347db8b0929f5176abd95c1477dc563)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/f67fdda42e37905fbc67fa8b4c47874f60441848)
* [OCPBUGS-80142](https://issues.redhat.com/browse/OCPBUGS-80142): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#131](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/131)
* [OCPBUGS-82725](https://issues.redhat.com/browse/OCPBUGS-82725): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#125](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/125)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e...f67fdda42e37905fbc67fa8b4c47874f60441848)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/aa1b744e13a0930844f24d9fb6fd9bd2164592e9)
* [OCPBUGS-80144](https://issues.redhat.com/browse/OCPBUGS-80144): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#112](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/112)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/f6f037c556d7fb8155c83e20e951944aecd102c6...aa1b744e13a0930844f24d9fb6fd9bd2164592e9)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/9f61dc1910671da364a7f9ba74f901b609ed1844)
* [OCPBUGS-80145](https://issues.redhat.com/browse/OCPBUGS-80145): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 [#103](https://github.com/openshift/cloud-provider-powervs/pull/103)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/bd3d72e5095c950964f64871253e4da4ad2acbe7...9f61dc1910671da364a7f9ba74f901b609ed1844)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/b7478d7e98f4596d01e84193222f17d4c13a2a09)
* [OCPBUGS-61204](https://issues.redhat.com/browse/OCPBUGS-61204): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#126](https://github.com/openshift/machine-api-provider-powervs/pull/126)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/1e7605e7952818875c9ec934567145bff190962a...b7478d7e98f4596d01e84193222f17d4c13a2a09)
### [prometheus](https://github.com/openshift/prometheus/tree/fe618870fc6bf9a317c63f368534cd3cb821166e)
* [OCPBUGS-88631](https://issues.redhat.com/browse/OCPBUGS-88631): remote: validate snappy decoded length before allocation in read endpoint [#348](https://github.com/openshift/prometheus/pull/348)
* [OCPBUGS-80146](https://issues.redhat.com/browse/OCPBUGS-80146): Bump google.golang.org/grpc [#320](https://github.com/openshift/prometheus/pull/320)
* [OCPBUGS-61766](https://issues.redhat.com/browse/OCPBUGS-61766): chore: compute highestTimestamp at queryManager level [#268](https://github.com/openshift/prometheus/pull/268)
* [Full changelog](https://github.com/openshift/prometheus/compare/9c44bf669fb475c9982d97b99ceff6904545ad13...fe618870fc6bf9a317c63f368534cd3cb821166e)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc)
* [OCPBUGS-75885](https://issues.redhat.com/browse/OCPBUGS-75885): Include go-verify-deps expected files in gitignore [#115](https://github.com/openshift/prometheus-alertmanager/pull/115)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d7a9814460f9581491830f57d4e8e210a73750d9...d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/ea26b9317a53713807e35d9ac26a1a363f020e56)
* [OCPBUGS-77452](https://issues.redhat.com/browse/OCPBUGS-77452): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#369](https://github.com/openshift/prometheus-operator/pull/369)
* [OCPBUGS-58408](https://issues.redhat.com/browse/OCPBUGS-58408): Fix: One Alertmanager Config failing blocks all others. (#6585) [#336](https://github.com/openshift/prometheus-operator/pull/336)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867...ea26b9317a53713807e35d9ac26a1a363f020e56)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/1e53205fa2e239df3c39a78bb50fddce77b4f3e1)
* [OCPBUGS-80022](https://issues.redhat.com/browse/OCPBUGS-80022): Bump google.golang.org/grpc to v1.79.3 [#86](https://github.com/openshift/route-controller-manager/pull/86)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/02bbf80ada3d5acaf36873b1fe69c71badc6d8d7...1e53205fa2e239df3c39a78bb50fddce77b4f3e1)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)
* [OCPBUGS-68220](https://issues.redhat.com/browse/OCPBUGS-68220): Update logrus to 1.9.3 to address CVE-2025-65637 [#316](https://github.com/openshift/service-ca-operator/pull/316)
* Fix for OCPBUGS-68221: CVE-2025-65637 bump github.com/sirupsen/logrus to v1.9.3 [#309](https://github.com/openshift/service-ca-operator/pull/309)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e...2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)
### [telemeter](https://github.com/openshift/telemeter/tree/15895a068e7e89b14292fde4601208c3eeb3a715)
* [OCPBUGS-81796](https://issues.redhat.com/browse/OCPBUGS-81796): [release-4.17] Fix CVE-2026-34986 [#597](https://github.com/openshift/telemeter/pull/597)
* [OCPBUGS-80159](https://issues.redhat.com/browse/OCPBUGS-80159): Bump google.golang.org/grpc to v1.79.3 [#600](https://github.com/openshift/telemeter/pull/600)
* [Full changelog](https://github.com/openshift/telemeter/compare/0238640e519c01f3eedd00b8dc82f34d2c502daf...15895a068e7e89b14292fde4601208c3eeb3a715)
### [tests](https://github.com/openshift/origin/tree/5abe37f6f7844abc4d088595c0631734fb46864c)
* [OCPBUGS-65492](https://issues.redhat.com/browse/OCPBUGS-65492): Add imagestream update dryrun test [#30479](https://github.com/openshift/origin/pull/30479)
* [OCPBUGS-64927](https://issues.redhat.com/browse/OCPBUGS-64927): update telemtery limit for 4.17 e2e case [#30472](https://github.com/openshift/origin/pull/30472)
* [OCPBUGS-64641](https://issues.redhat.com/browse/OCPBUGS-64641): Migrate OCP-32383 to upstream [#30455](https://github.com/openshift/origin/pull/30455)
* [OCPBUGS-63392](https://issues.redhat.com/browse/OCPBUGS-63392): Backport pr 29834 to release-4.18 [#30408](https://github.com/openshift/origin/pull/30408)
* [OCPBUGS-61162](https://issues.redhat.com/browse/OCPBUGS-61162): images/tests: Remove rteval [#30202](https://github.com/openshift/origin/pull/30202)
* NO-JIRA: Update extended/networking OWNERS [#30090](https://github.com/openshift/origin/pull/30090)
* [Full changelog](https://github.com/openshift/origin/compare/1d48f496acf98bcdd085cdf240277f15029a4a15...5abe37f6f7844abc4d088595c0631734fb46864c)
### [thanos](https://github.com/openshift/thanos/tree/51fe5fa45f6df55266ca874287b47b2825f01b32)
* [OCPBUGS-80161](https://issues.redhat.com/browse/OCPBUGS-80161): Bump google.golang.org/grpc to v1.79.3 [#185](https://github.com/openshift/thanos/pull/185)
* [Full changelog](https://github.com/openshift/thanos/compare/98c993712257ae4c1335e493d037ee1f71284793...51fe5fa45f6df55266ca874287b47b2825f01b32)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/da096b41a79e2216f643ea2addc49a571116e7d5)
* [OCPBUGS-78027](https://issues.redhat.com/browse/OCPBUGS-78027): hermetic migration 4.17 [#106](https://github.com/openshift/cloud-provider-vsphere/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/097d823bd10abbc6cd016c34a1c5c3cd1b514031...da096b41a79e2216f643ea2addc49a571116e7d5)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/8d6ea11af1d9bffddc8e06a85aeefa3a9dbbf7da)
* [OCPBUGS-80165](https://issues.redhat.com/browse/OCPBUGS-80165): Bump google.golang.org/grpc to v1.79.3 [#105](https://github.com/openshift/cluster-api-provider-vsphere/pull/105)
* [OCPBUGS-78019](https://issues.redhat.com/browse/OCPBUGS-78019): hermetic migration 4.17 [#85](https://github.com/openshift/cluster-api-provider-vsphere/pull/85)
* [OCPBUGS-61652](https://issues.redhat.com/browse/OCPBUGS-61652): Fix unit tests [#71](https://github.com/openshift/cluster-api-provider-vsphere/pull/71)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/1661cc3f7997902caf0ea71fbef9ea394f3b14ef...8d6ea11af1d9bffddc8e06a85aeefa3a9dbbf7da)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/0b036e6f1e932cfacd8a997f4dda96b5169b193f)
* [OCPBUGS-80168](https://issues.redhat.com/browse/OCPBUGS-80168): Bump google.golang.org/grpc [#177](https://github.com/openshift/vmware-vsphere-csi-driver/pull/177)
* [OCPBUGS-68224](https://issues.redhat.com/browse/OCPBUGS-68224): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#157](https://github.com/openshift/vmware-vsphere-csi-driver/pull/157)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/039ee3684d5addee3ff8436b19462def77bd5804...0b036e6f1e932cfacd8a997f4dda96b5169b193f)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/e161f04cf8f1b3727ced9dc4314b8602a39e5f48)
* [OCPBUGS-84085](https://issues.redhat.com/browse/OCPBUGS-84085): fix concurrent map writes [#216](https://github.com/openshift/vsphere-problem-detector/pull/216)
* [OCPBUGS-61755](https://issues.redhat.com/browse/OCPBUGS-61755): Check for number of FailureDomain-s in GetVCenter() [#190](https://github.com/openshift/vsphere-problem-detector/pull/190)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/cd0df71f2ec22d84676f40b042d4603e9c94c360...e161f04cf8f1b3727ced9dc4314b8602a39e5f48)