# 4.17.52

Created: 2026-03-26 16:26:07 +0000 UTC

Image Digest: `sha256:51723b1449a55cd6489cd60689b42d4c53ceb6956765ff51087fa90f806ac65d`


## Changes from 4.17.44

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.14
* Kubernetes Tests 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202511121758-0 to 417.94.202603242359-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| StreamingCollectionEncodingToJSON <br/> (0 tests)| Enabled| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)| Enabled| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [63b2da6e](https://github.com/openshift/assisted-installer/commit/63b2da6ef83a82468cf0c5baea4fef27a36be267) `sha256:ff539434c8d3bf3c3a64f040a5f7ad702ded9290ff0a894a03fd45fef9fe42d9`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [df4660b4](https://github.com/openshift/assisted-installer-agent/commit/df4660b4ca1ae19ccff3f2dba31e2be14b2a1d09) `sha256:7fd88ff4734a68d6a95733ac650eccd70d1c4d23967f32b3ef8de08cea8bb05a`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [63b2da6e](https://github.com/openshift/assisted-installer/commit/63b2da6ef83a82468cf0c5baea4fef27a36be267) `sha256:5fde232e29f5707caa6bb5219f108a563ae59bbc5d2818e368a5b9e472a1a2c7`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:d682c5746679d8dd8534b3d9c4b913880ef9d5713b7febaa3c7573fe7900b61b`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [144bace6](https://github.com/openshift/cloud-provider-aws/commit/144bace6c7a2ae52fcab3dabb2d9636a1465365a) `sha256:f1fc196ec3db364df254fda90a46e6b12bd50d50c01f2996f970ff8f9c1ea1f8`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [2bb5b316](https://github.com/openshift/aws-ebs-csi-driver/commit/2bb5b316f5941788e398f22974f9c816dd37d428) `sha256:8d89ffb1ab74d5e02fcc13d2a00d5e1fcca30720d987c140544e061ca7fc6629`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [1a178e79](https://github.com/openshift/csi-operator/commit/1a178e796560d227a903c1603e6fcb5a341f20ba) `sha256:cbd46373b97caeca24a3b22de19a294091f3d5e294f2931f01d786ef566867f6`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9d401670](https://github.com/openshift/aws-encryption-provider/commit/9d4016701d355cd3a47f5ebe10f266d8971febc6) `sha256:e6165bb623041db07759616b297f0541fcc87dc3bbb91cc77399cebe96c1b647`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [80efc4ea](https://github.com/openshift/aws-pod-identity-webhook/commit/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56) `sha256:d2005b9ade6f74ee3df518d9f124b8acfa909d0dbd34c1c3b9e044c0556fb268`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [626ecd1c](https://github.com/openshift/cloud-provider-azure/commit/626ecd1c32f50953e84fd1cb499077d52fe53e43) `sha256:f673fdfb5f29159fce99cb0ce47a31fdae2f57533aa49b84228ec7fe03274aba`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [626ecd1c](https://github.com/openshift/cloud-provider-azure/commit/626ecd1c32f50953e84fd1cb499077d52fe53e43) `sha256:54319cca65ce76d81bd7a392eb841bffc14867bdc1ae341bf8ee6f84d10c867d`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [a544f30b](https://github.com/openshift/azure-disk-csi-driver/commit/a544f30bb48dbf6325efbb75e7114b9837c32505) `sha256:53babfe25e9258b6e8564df67e1d465c9f144976af5be7b30d95b0dd910f6101`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [1a178e79](https://github.com/openshift/csi-operator/commit/1a178e796560d227a903c1603e6fcb5a341f20ba) `sha256:80bce123dd0a3488a9cac662d578f451608252e8144ee8158cc877c02c3f9d0b`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9f4c38c2](https://github.com/openshift/azure-file-csi-driver/commit/9f4c38c2bb28347ed5c4fd082666bfdea7382243) `sha256:4e01b88be4742c25c24977471d81262f8f0f391ccd5c49250b306e726e1d32e6`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [1a178e79](https://github.com/openshift/csi-operator/commit/1a178e796560d227a903c1603e6fcb5a341f20ba) `sha256:0bd4e71e9d22f6c16130426710bba8abbb82b0510cdcc9eb6cc74a412021c45a`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [190a0fab](https://github.com/openshift/azure-kubernetes-kms/commit/190a0fabf17b28762b5578c0b9ffc25cf35cac64) `sha256:b43e298d73fb723ce446344fac3e136b0d3347b38e7d199a09d2bfb85c231249`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [6707f899](https://github.com/openshift/azure-workload-identity/commit/6707f899c269e98a102ac72900bb96fa826ba652) `sha256:3b7157d6c737fa70532d96c62fa68e35fe547eedc6c50580cb89f4ce9fff4fe8`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:152e3c57d0bcd719bf1e20ef7d43ccadaf30939c8c9899a2ce115a55ad7be983`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [ea4a8878](https://github.com/openshift/cluster-autoscaler-operator/commit/ea4a88786cf9b237dc446e01fdacd6fd65b73144) `sha256:5f148616ca51bcf1c30183e095a8b5a981a9be858254938ed45229e4b4ebfdd1`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [d0f98ecf](https://github.com/openshift/cluster-baremetal-operator/commit/d0f98ecf2ef4a1761b7cc116390e73b3dd7698c0) `sha256:d024567af8fb35126a2084d9c0de93c5b349249dcbd202c0c5cfb7d2d05bcefd`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:c84a3e6dfc4b3abe1c2f3e6f63018a8d45fa3333969ac2792dce86ed5dc5f7f6`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [77ef4fc5](https://github.com/openshift/cluster-api/commit/77ef4fc55392dd02232da73cc06a504659d08b48) `sha256:1f379914cc47321de26756b1fd2fb634ab93f0d50400467df35dd4303100ad1a`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [a2cdab1b](https://github.com/openshift/cluster-capi-operator/commit/a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459) `sha256:bbd338c6ca660031115a11f293b165aef23ad28150c6a8964dad403618cef28b`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [6d4c0096](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1) `sha256:0de9a2d5418c0fadfc68e9f64335c23396fc3188b1ed7191e2e740e53aa1b29f`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:20dcf9ed5dab0354410b6c14f8476980d2bea66f42bd64ae0c1e354e185bd820`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:c8ce750189b017ec94762b6691cb9a911f97f04927615f0c802149aa3f7282fa`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [81507f04](https://github.com/openshift/cluster-dns-operator/commit/81507f04686df3e16793b270084ead0a2a67fb38) `sha256:9cfa1d58c7bc0f875b5b2d704afcc95c4321388c94202c7ecba217a12164e8c2`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [aed5f6c7](https://github.com/openshift/cluster-api-operator/commit/aed5f6c74a0e174901709f18eecad6573cd80784) `sha256:2a221eeae6e50cc04e9466e5777f829f58311b2506aa149094e5e31e0cbe6e09`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:43a9f7284fc596378453b6e3a6fa1eb553d403ee25492c8c10107aaa77d92412`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e31b7775](https://github.com/openshift/cluster-olm-operator/commit/e31b7775ef903ff0c35f95656af27afa2dddd3e4) `sha256:9865d9323ac25a120e3dbf34644b7343e650cd04b201d65518940b49432f564b`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:78d85dae433ada85e1fb57166d278887f652a03531326bce186c7d3b207df288`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:6717dfcf0c98ffe25190b97c977daafdfa53ca406572d81143430f4218a17382`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [1d2ba422](https://github.com/openshift/cluster-samples-operator/commit/1d2ba42214637c7ed7e5e3e0aec257e9b949d061) `sha256:ff72b14efa0c7c37a3795808564e00f60bee07de82fc22c7d1e0822893abeb8d`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [45cbcc96](https://github.com/openshift/cluster-storage-operator/commit/45cbcc96a5a3a7bc743076965de0cc6a262ac11a) `sha256:1694ece44a326abafa983a7fb2b3f84f671941fdaa708c21159b2164bedc8fe7`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:7b0157dfb720632e557c0c1050c643c7a9dc9b36c5f1858a37e11604b04b795a`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [b855c680](https://github.com/openshift/cluster-version-operator/commit/b855c68099755979a053f60a49300d3502f44325) `sha256:5bdbda0b9ae82292ab9dcd9c3907d42687418e591984ae30b53d93f422ca9d86`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:1d9d3b4b90eefd1714e4814e4c340d11a88f1208852b7c624fac4096ec3bae65`
* [coredns](https://github.com/openshift/coredns) git [fe89d27d](https://github.com/openshift/coredns/commit/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567) `sha256:a97d77c1235d10228e36d47b304a14c05a10944904685f344953da18f2d30866`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [efc99a2a](https://github.com/openshift/csi-driver-manila-operator/commit/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8) `sha256:7e2fdd43861a1be04f8f6cdf2fe2651d1f7ad194d7a43326e8d65d7757ee3d7d`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [79885550](https://github.com/openshift/csi-driver-nfs/commit/798855508da2df01719bf82f6344112a33b5437c) `sha256:cb11c30ff4bbdad9e25e12e2960d754cdfaa7af1507b07e74e21aa31a45b0390`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:dd74aefdaae0c24dca43a36548e371ce292af5423751718b1a6480224d5e5680`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c095a1f2](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c095a1f2bbd0c365b74e548498d13f8463c69eb2) `sha256:38f286396ef7e0557eff8cc665ca46c4248e2b060aa9b170873e13eb691b207b`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:6e201b3e5b45494f8ecd6d607bac314cc10b419d4f3a695c1aa9824b6eb9b8bc`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [c3fe8e2e](https://github.com/openshift/csi-external-attacher/commit/c3fe8e2ec46929fbad110b392337960be3c9d6a0) `sha256:fac44a7144ca9e888a74db83f6eeda24224d05238af0f8cb54627b74148f51a9`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [fe460e56](https://github.com/openshift/csi-external-provisioner/commit/fe460e56e19dd3cc5497fd068083da9850fc1996) `sha256:29f0f10ec928c8face73cd03bad8478ab4b8386f0df20ee2482102f870f198c3`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [73798480](https://github.com/openshift/csi-external-resizer/commit/73798480d1110af451e5d7c237a722bc5e901f7b) `sha256:426c0e5e5885ee0450f36a93fea6f733637011c5f5c97ea2c790e0edab5d7cbb`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [080f6bdb](https://github.com/openshift/csi-external-snapshotter/commit/080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95) `sha256:484ea3e99fe746668ca7fed6862b095326bfb8f26cc79c0bd4de143083b0dad6`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e7d841dc](https://github.com/openshift/csi-livenessprobe/commit/e7d841dc545b9fb3a8a3303b8cac62d35620905b) `sha256:382ba71516ae6c2ce3670b92bb206e5bdaf5dd0519b2f1a6fcb417b99f0ccb13`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3dd2253e](https://github.com/openshift/csi-node-driver-registrar/commit/3dd2253ed70cb565a63a208fa667d55f3222fb19) `sha256:23021b0b3a60c43895c17a9d27eb53fb5cde7b9ba6ac7a5d81d1723d804ecfbc`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [080f6bdb](https://github.com/openshift/csi-external-snapshotter/commit/080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95) `sha256:851b15fc576a1939eac61342bfc75875d4029dccacbd57bef1b12ec784523bc5`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [080f6bdb](https://github.com/openshift/csi-external-snapshotter/commit/080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95) `sha256:cea296a2222cfeabbdce7a42996be42db39f3d89321f93ffe705c0c01e7b5b30`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:07d09ce1d5c97a717dc1c0f540e21fbf7fc2ae0c27be6fd0869ce0dabc0591fc`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:2554ae05f488567b3c752c16c59f852ecfcb90746a47d48bdd39825aede43c21`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:bc326e66fe857b4090cd0e717a9976857d63a5538890171adc420d47946b2c95`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:93f2305b36ca634a2b8fbbeb4bfdc1a5c868e791430d389f0e0326ca839920f7`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [86a1d902](https://github.com/openshift/machine-api-provider-gcp/commit/86a1d902ab3989413be802a3daea422bc559012f) `sha256:aecbb57cc9a6d72de8520437e911255e51c97e4c40b55ef207fa98fa7c9dac9b`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [c23b064f](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/c23b064fe303ec760c0de6204577d10ef0b0f63d) `sha256:87ef275495cae4c69268a6375eb5e07d9895913b019bf1a73dcc5043b3a24a30`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:9f31f2da3caeba8ef97368c1ebdd3fb1df9aa911df241460d27fbecd2cfc9da8`
* [haproxy-router](https://github.com/openshift/router) git [1e29d8cc](https://github.com/openshift/router/commit/1e29d8cc87a1c9e6645a4b9aa01197d90e366152) `sha256:bb4b4fa70f8193a7cc49e278475052e1c053e1dca44298f02cf8a0c1bb95c740`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:9beab497bfb41b47b9f8599920563efcb58961c2a8166225f1935f45657843b4`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [ee301303](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/ee301303640e89a985108bf3b055051a644b5c37) `sha256:3a1c445bea72192dc031e4755bd063fecc4fc9139484f54d8d54af26dc755f45`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [0b8dd7ab](https://github.com/openshift/machine-api-provider-ibmcloud/commit/0b8dd7abc69b9a2369005517846c95c619abf613) `sha256:1099ddf483c4cfe64f687fdbe5587648756fb5b9a3d01538724b2ea2fd5ca6e2`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9e6596c3](https://github.com/openshift/ironic-rhcos-downloader/commit/9e6596c3f9d239d91c358299a19871905fa914fe) `sha256:16a4f25c37894fe7ce7a943322dee37d8419bae36e7c7ca7b4e73dbccf8372e8`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [bc5b8a2c](https://github.com/openshift/ironic-static-ip-manager/commit/bc5b8a2c3209873231a7eabd83ace578c8e182f7) `sha256:3144944813148f5acd4234b279b5569e5bc8942f390c76a5a88789fda81afc56`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:18b95158ab8c6470ea281f81f5f1dd2c0d1c198be78d3007b02f5a7937ade62d`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [07f8cd9e](https://github.com/openshift/kubernetes-metrics-server/commit/07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec) `sha256:a95c36cb709d7f9fb89eb6aedcd7cebc104b90f8d9f1be6591981dc9f96af398`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:e654a7604401da1deff9d8baedf0f7567831fe5f86f75e06fea3e5d140bb579e`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:de35e280f4e50a18f2616dfc561db85b315425ff20bbfd4e19d5f64f93f3d0ba`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [9804c42a](https://github.com/openshift/cloud-provider-kubevirt/commit/9804c42a35e122bd9a88955a11338357698d8b3c) `sha256:3b08be9a543ddd200f66178d51c0f165c380cbc845a1be672b85e9dbe2db9f12`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [757a8894](https://github.com/openshift/kubevirt-csi-driver/commit/757a8894fe4f5b569210ec695fe0615e291f42ec) `sha256:6dde5ab62c9f5e35b853112e3c04a8c856ef9260318dad58352ae36c2d30bfb6`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [f85666be](https://github.com/openshift/machine-os-images/commit/f85666be7889cd6ba95926546a005fed5f3cb68a) `sha256:64863687e7fde678af49d370c9fdd5045d47dc2c3b921b179dfe0b392aa4b447`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [041b743a](https://github.com/openshift/multus-admission-controller/commit/041b743a1172af3c8ace0cf046fe95bda7a9d5a2) `sha256:1d5ee360957a5cbcdbd54e71dd9ad1e0ee1a37f994e80081a07c289fe1be7c61`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:55402c1e07f5de8bae74f8fc9a579c2403cd12e65f9b6714c4d6b57ed42b4250`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:142d516609c278895aa3302ba638724fb63ecfcfd232e1fc6571f5856aa4e034`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [cc7b628e](https://github.com/openshift/bond-cni/commit/cc7b628e6d4c0331d0515b7b59a0d22699ed6ea3) `sha256:b15dbac78b5deda1493f959c14b14ff5344b982c4373471b13ab2f3829d520f0`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [f56bbf7a](https://github.com/openshift/network-metrics-daemon/commit/f56bbf7af25fbae200c966378337db85c6b17126) `sha256:47c1d91d614addb733f775406e764502e556f4a7414dd1a2060d3065f6c3c120`
* [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:dbf382ce2e7158ff2483336643ede99b2a4fe4cc888af72e92e19ab864c62291`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:83c6087954a19cc11c7042079ec3ca528c8a18678928c3ad9ed8b22ff07df36b`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a4fadcbc](https://github.com/openshift/machine-api-provider-nutanix/commit/a4fadcbc22579320fdf7cd7d98071c15f32aa163) `sha256:209a01330e1894300123bfbcafc53948760feb80e0c7c81e521ea7abef269d69`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [a9f1a5c8](https://github.com/openshift/oauth-proxy/commit/a9f1a5c8a04f216bdcd7fafff84b4c47d2af6ec2) `sha256:3f2283bea8d5c54ad689787a7c269022b04624d2b1ac830330a79d30364ffd47`
* [oauth-server](https://github.com/openshift/oauth-server) git [731ed82e](https://github.com/openshift/oauth-server/commit/731ed82ec3b483cbe0b8ea4ffc52479aa0f1d4b7) `sha256:f5ec95c285270e35a77f89f8da39a51c5d29fae1ac277053eda82e250c715f91`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [58375b70](https://github.com/openshift/oc-mirror/commit/58375b70881938be8a1e08750507e4a40943f6fd) `sha256:d98dff9a03e2bc6564757afd151092cc5bec438c678f5fe5e402365bc6bbfb03`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:905e494751d1e26c98857f7ec4f41b4321344f9e86d710186d9e9bf410f6e983`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [e245e661](https://github.com/openshift/operator-framework-operator-controller/commit/e245e6612aa1773f5a17d66edca7dc01f0cb5098) `sha256:e616c0d47555235cc1c7e275538b48fd10b842cd11c831a4dc719afe4dfc5092`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [967faa66](https://github.com/openshift/openshift-controller-manager/commit/967faa66125ae77148df87d8394d07112c4c0b8c) `sha256:e7c9dd297067d256671a0e06f9985a3624240158a1f4e2b97567409199ec453b`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [adf64920](https://github.com/openshift/openshift-state-metrics/commit/adf649209467aef8d5da1d17851fa991285edbc2) `sha256:49f6f4761d886208cc262f1f8e23ddcc0c05d5b4566f6cdc8abcb1a328c8c5ce`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [f89b6dbc](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2) `sha256:4ed2d42fdc6e8fa9d3d08152849754d1827dd54ed86be4507d75f5c90bdde542`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:770cacd7e4e04a786a2e55a3cd9ec21048131c8eefb7baa4225e73a09f0f0901`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:f239cce00d46794f91479cfa3c94a2edd14e206f85e684131fe857a80215fe6c`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [aaa6afa9](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e) `sha256:20dc4b1b9ab504d4192bda76eace70933c264628c091ccb4ac78faf01104f356`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [f6f037c5](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/f6f037c556d7fb8155c83e20e951944aecd102c6) `sha256:195460691d14dc4f518717e3678a9ea780eb548fea8904c5bd4e2d554b81233c`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [bd3d72e5](https://github.com/openshift/cloud-provider-powervs/commit/bd3d72e5095c950964f64871253e4da4ad2acbe7) `sha256:32acad5511e808b1b3a80aa96458ed7f1800b4f19aebc9edc4f85ec3613b8ab7`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [b7478d7e](https://github.com/openshift/machine-api-provider-powervs/commit/b7478d7e98f4596d01e84193222f17d4c13a2a09) `sha256:77abc31290209253ce09838a292be7351c02d5a7367859c430a5b3d97cef7f31`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c84c4898](https://github.com/openshift/prom-label-proxy/commit/c84c4898843d6a1b0d16a59e3c42d99d1f636c43) `sha256:b0802c5220abce4c73b650e105e42d0c1a57c5248c4f55819e15053c59f2680a`
* [prometheus](https://github.com/openshift/prometheus) git [97cd4797](https://github.com/openshift/prometheus/commit/97cd47978721d9e77d22c4d4798f43896324683b) `sha256:46910caf13bd60c69314b0a72b866a8342c1dcead811f01f91b1b1674ea1bcf1`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [8f095361](https://github.com/openshift/node_exporter/commit/8f095361ae68660fbcf0c3e32020a3df9568ae90) `sha256:cdf9da2745d57ceb97761e08b560f2de7a212f860362eea3fd445fe4f6f7c769`
* rhel-coreos `sha256:c9448a52542ca0db7aa3bd6871a687bb82d57ccc88ee6dee8b724f1652d8ff3f`
* rhel-coreos-extensions `sha256:5799f4d297c3ef266f7a69533a3b74fe05bfee40b03ae6971ba079b602d4eac5`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [02bbf80a](https://github.com/openshift/route-controller-manager/commit/02bbf80ada3d5acaf36873b1fe69c71badc6d8d7) `sha256:b9cc7a6280455a8a36e26494744d9ba540689594f8a1d8f625cd1811eec2b0b4`
* [telemeter](https://github.com/openshift/telemeter) git [0238640e](https://github.com/openshift/telemeter/commit/0238640e519c01f3eedd00b8dc82f34d2c502daf) `sha256:ef89f2da22f7b0c0f445b7e700b29cdf9ce229cfd7866ac6c7bd2ec367db3bc4`
* [thanos](https://github.com/openshift/thanos) git [98c99371](https://github.com/openshift/thanos/commit/98c993712257ae4c1335e493d037ee1f71284793) `sha256:a951a17fbd50a051cde6c2fc4e863bd70e29485fcb085c4d0c977a0bfdda5ea6`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e1de36a2](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d) `sha256:b5291a1306ef132559dcf0405c4a15d2921133356d904aba886e2577030b1af2`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [62ca90bc](https://github.com/openshift/vsphere-problem-detector/commit/62ca90bcfaf7a030eb1734e9df66366b9dc009e6) `sha256:f1ac1040078d827c434858ca528df96b41047b32c27ac522d11d6d269da755ff`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/c18512cd02435454b6c92e8a708ddd5b1f188dcd)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.20 compatibility [#10016](https://github.com/openshift/assisted-service/pull/10016)
* [Full changelog](https://github.com/openshift/assisted-service/compare/bcecf7265015a4db74aa613da2294aae92b355a8...c18512cd02435454b6c92e8a708ddd5b1f188dcd)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b359528186b9df8ff5796f2bbfdab7f6bbaad491)

* [OCPBUGS-68141](https://issues.redhat.com/browse/OCPBUGS-68141): bump github.com/sirupsen/logrus to v1.9.3 [#238](https://github.com/openshift/agent-installer-utils/pull/238)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/79b73e6ad3610497323a821409406a1d5d174120...b359528186b9df8ff5796f2bbfdab7f6bbaad491)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/fe17b330747fab0949a718ce050e2d6bf0cd1ba9)

* [OCPBUGS-78175](https://issues.redhat.com/browse/OCPBUGS-78175): [release-4.17] update go mod dependency for konflux [#590](https://github.com/openshift/cluster-api-provider-aws/pull/590)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9fda7bd72f4f44d6755d13f5351c1bb8cc55f6b0...fe17b330747fab0949a718ce050e2d6bf0cd1ba9)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7)

* [OCPBUGS-73822](https://issues.redhat.com/browse/OCPBUGS-73822): Fix reconciler consistency checks in Update and Exists [#167](https://github.com/openshift/machine-api-provider-aws/pull/167)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/ee2d52fb94cda0f46dc13a01820a890c54fa6721...2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/dffcbaad51861a807411a99551925b7e527f6c15)

* [OCPBUGS-77983](https://issues.redhat.com/browse/OCPBUGS-77983): [release-4.17] update go mod dependency for konflux [#363](https://github.com/openshift/cluster-api-provider-azure/pull/363)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/d359bfe56764238e2881f0f003fd8206b2b40dec...dffcbaad51861a807411a99551925b7e527f6c15)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/439c54987c20d056ae23681d456e4e7f6a68c96d)

* [OCPBUGS-65954](https://issues.redhat.com/browse/OCPBUGS-65954): Set updateDomainCount to one when faultDomainCount is one [#176](https://github.com/openshift/machine-api-provider-azure/pull/176)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/c1544ec24dee62ec387b2831050c0e3c3346b86a...439c54987c20d056ae23681d456e4e7f6a68c96d)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/b102c3acc6afdc1aed628f8d5604a467fba9b8c4)

* [OCPBUGS-67204](https://issues.redhat.com/browse/OCPBUGS-67204): Update the RHCOS 4.17 bootimage metadata [#10285](https://github.com/openshift/installer/pull/10285)
* [OCPBUGS-77791](https://issues.redhat.com/browse/OCPBUGS-77791): [Release 4.17] pkg/asset/manifests/azure: save cidr blocks [#10218](https://github.com/openshift/installer/pull/10218)
* [OCPBUGS-74677](https://issues.redhat.com/browse/OCPBUGS-74677): [release-4.17] GCP: skip AI zones [#10276](https://github.com/openshift/installer/pull/10276)
* [OCPBUGS-74555](https://issues.redhat.com/browse/OCPBUGS-74555): Azure UPI ARM template: use storageAccountId [#10264](https://github.com/openshift/installer/pull/10264)
* [OCPBUGS-68142](https://issues.redhat.com/browse/OCPBUGS-68142): [4.17] uplift logrus [#10167](https://github.com/openshift/installer/pull/10167)
* [Full changelog](https://github.com/openshift/installer/compare/64d3580eda47382505fab5d9bd4c019bf8f15e6e...b102c3acc6afdc1aed628f8d5604a467fba9b8c4)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/ae674d7808379c454f972ff0cccac8bb9adcc98f)

* [OCPBUGS-68143](https://issues.redhat.com/browse/OCPBUGS-68143): [4.17] uplift logrus [#239](https://github.com/openshift/cluster-api-provider-baremetal/pull/239)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/6e7aa77e5e144adc97b498ada5a6ab400f97ca39...ae674d7808379c454f972ff0cccac8bb9adcc98f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/087a24f21f11bc85a6d922c156bda6270e7eadfa)

* [OCPBUGS-77185](https://issues.redhat.com/browse/OCPBUGS-77185): Unblock BMH direct deletion when detached annotation is present [#462](https://github.com/openshift/baremetal-operator/pull/462)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e6e5d54abf92a20d1b0d273a90581206b7ca0b15...087a24f21f11bc85a6d922c156bda6270e7eadfa)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/745189508eec80ee07a921d1b2c227812db37237)

* [OCPBUGS-71209](https://issues.redhat.com/browse/OCPBUGS-71209): Bump logrus version [#377](https://github.com/openshift/baremetal-runtimecfg/pull/377)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/35010cfbc7add527e4a663010d61e0db6d6d0334...745189508eec80ee07a921d1b2c227812db37237)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d76df14ea3d7ff9916ea576b6335cd3a220cd1bf)

* [OCPBUGS-64615](https://issues.redhat.com/browse/OCPBUGS-64615): Help with must-gather scheduling through suggesting preferance of nodes [#2150](https://github.com/openshift/oc/pull/2150)
* [Full changelog](https://github.com/openshift/oc/compare/fd2be5da398d8287664836e4838b68082a9f1bb8...d76df14ea3d7ff9916ea576b6335cd3a220cd1bf)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/662db76ca9abc7dff18d3a65140a17051fa07f9a)

* [OCPBUGS-65801](https://issues.redhat.com/browse/OCPBUGS-65801): ccoctl azure: retry custom role creation on consistency errors [#951](https://github.com/openshift/cloud-credential-operator/pull/951)
* [OCPBUGS-65480](https://issues.redhat.com/browse/OCPBUGS-65480): ccoctl: use pagination when listing resources in aws [#945](https://github.com/openshift/cloud-credential-operator/pull/945)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/064b977238974f3cc1c168b4bc55de1b1b6bf0c2...662db76ca9abc7dff18d3a65140a17051fa07f9a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/241af368428cb2deedeaf8e21d237aa01216292a)

* [OCPBUGS-66132](https://issues.redhat.com/browse/OCPBUGS-66132): [release-4.17] Fix capacity calculation [#194](https://github.com/openshift/cloud-network-config-controller/pull/194)
* [OCPBUGS-65520](https://issues.redhat.com/browse/OCPBUGS-65520): Change the capacity struct from int to ptrOfInt [#191](https://github.com/openshift/cloud-network-config-controller/pull/191)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/225a27a533d123f0b816e59afa431b1c34e9ae5f...241af368428cb2deedeaf8e21d237aa01216292a)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9f93cafccca989417378a804f134f68fb4fea40d)

* [OCPBUGS-68150](https://issues.redhat.com/browse/OCPBUGS-68150): Update library-go to fix CVE-2025-65637 [#840](https://github.com/openshift/cluster-authentication-operator/pull/840)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/f641a4c6f858607f233866bb835704e784d57ef2...9f93cafccca989417378a804f134f68fb4fea40d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/238102bbc7aaceb122351acafd1dbaf77dc222c6)

* [OCPBUGS-68151](https://issues.redhat.com/browse/OCPBUGS-68151): update logrus to version 1.9.3 [#398](https://github.com/openshift/kubernetes-autoscaler/pull/398)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/bb3e96f3656719c82f6b2049100ac79e116c3a8d...238102bbc7aaceb122351acafd1dbaf77dc222c6)


### [cluster-config-api](https://github.com/openshift/api/tree/92c55bf0f372c222dc02f17685c383d18e2c2e8b)

* [CNTRLPLANE-1981](https://issues.redhat.com/browse/CNTRLPLANE-1981): Promote streaming list encoding to Default [#2599](https://github.com/openshift/api/pull/2599)
* [OCPBUGS-71184](https://issues.redhat.com/browse/OCPBUGS-71184): Add HTTPKeepAliveTimeout to IngressController API [#2639](https://github.com/openshift/api/pull/2639)
* [Full changelog](https://github.com/openshift/api/compare/b315b8f7268a44367e6ab34880093564d0923ef0...92c55bf0f372c222dc02f17685c383d18e2c2e8b)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cfd318de9718f1c73b40d99900125bdca41482ef)

* [OCPBUGS-75998](https://issues.redhat.com/browse/OCPBUGS-75998): Update logrus to 1.9.3 to address CVE-2025-65637 [#465](https://github.com/openshift/cluster-config-operator/pull/465)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/361cecccf6b92ee8783c10324b0db26ccd4f6ab0...cfd318de9718f1c73b40d99900125bdca41482ef)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/bfffdcbac76071143cf554785ca2bde0ac69ac7e)

* [OCPBUGS-68156](https://issues.redhat.com/browse/OCPBUGS-68156): Update logrus to 1.9.3 to address CVE-2025-65637 [#1542](https://github.com/openshift/cluster-etcd-operator/pull/1542)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/fe62737317e54e868e8036a06ca8dbc33ef8a190...bfffdcbac76071143cf554785ca2bde0ac69ac7e)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/1a0cea11ec4ba91416b698ab2e87d03a09a0e367)

* [OCPBUGS-68157](https://issues.redhat.com/browse/OCPBUGS-68157): Bump github.com/sirupsen/logrus to 1.9.3 [#1284](https://github.com/openshift/cluster-image-registry-operator/pull/1284)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/790f6a59513d7a9d78ba2a5b30d5f0da5a3d481f...1a0cea11ec4ba91416b698ab2e87d03a09a0e367)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1a164c16e804a4cf4f8b7aca4b8cb24d265dedb4)

* [OCPBUGS-71184](https://issues.redhat.com/browse/OCPBUGS-71184): Implement HTTPKeepAliveTimeout tuning option [#1335](https://github.com/openshift/cluster-ingress-operator/pull/1335)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d95595b1c3242f5aea8b7c2ec7a548e1b4ce0581...1a164c16e804a4cf4f8b7aca4b8cb24d265dedb4)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/84e19b2149ab818a455b00717d790856c13ea387)

* [OCPBUGS-68162](https://issues.redhat.com/browse/OCPBUGS-68162): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] [#2055](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2055)
* [OCPBUGS-63614](https://issues.redhat.com/browse/OCPBUGS-63614): SCC: add hostmount-anyuid-v2 [#1954](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1954)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/51ed2ebfcfd3e177c45d9243b25bdfd36c6a5b1f...84e19b2149ab818a455b00717d790856c13ea387)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/12f60539287eda85e99efbdcf85a1ecf59e021fa)

* [OCPBUGS-68164](https://issues.redhat.com/browse/OCPBUGS-68164): CVE-2025-65637 openshift4/ose-cluster-kube-controller-manager-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] [#908](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/908)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/d68b3764db78ad5ca2e61af75f0bc8bcdcf3e644...12f60539287eda85e99efbdcf85a1ecf59e021fa)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/013ff606240919fcb46eb9a8b707598a9b049ee5)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#623](https://github.com/openshift/cluster-kube-scheduler-operator/pull/623)
* [OCPBUGS-68165](https://issues.redhat.com/browse/OCPBUGS-68165): deps: Update library-go and logrus to fix a CVE [#613](https://github.com/openshift/cluster-kube-scheduler-operator/pull/613)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/98ca953ba6955401023e219f37e0af49879355d2...013ff606240919fcb46eb9a8b707598a9b049ee5)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/0097f21060a7e10679567eb57b87feb4f55230e3)

* [OCPBUGS-68167](https://issues.redhat.com/browse/OCPBUGS-68167): Bump github.com/sirupsen/logrus to 1.9.1 [#140](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/140)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/ab40b61142a30f21eec8301b2e98f2fafb25164b...0097f21060a7e10679567eb57b87feb4f55230e3)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/97fec1403dc61e1b2126df8c3afeb96e02055ee5)

* [OCPBUGS-77275](https://issues.redhat.com/browse/OCPBUGS-77275): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2832](https://github.com/openshift/cluster-monitoring-operator/pull/2832)
* [OCPBUGS-64580](https://issues.redhat.com/browse/OCPBUGS-64580): Fix KSM deny-list typo [#2732](https://github.com/openshift/cluster-monitoring-operator/pull/2732)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ca2c625b1716098f4d643524b270460702889805...97fec1403dc61e1b2126df8c3afeb96e02055ee5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/1aca832fab45aceebe8026077d67ac6b82b51179)

* [OCPBUGS-73799](https://issues.redhat.com/browse/OCPBUGS-73799): Tweak iptables-alerter to try to avoid crictl bug [#2878](https://github.com/openshift/cluster-network-operator/pull/2878)
* : NO-JIRA: Update CNO reviewers/approvers [#2767](https://github.com/openshift/cluster-network-operator/pull/2767)
* [OCPBUGS-74348](https://issues.redhat.com/browse/OCPBUGS-74348): [release-4.17] fix typo in release annotation for whereabouts-token-watcher deamonset [#2888](https://github.com/openshift/cluster-network-operator/pull/2888)
* [OCPBUGS-45086](https://issues.redhat.com/browse/OCPBUGS-45086): Re-disable metrics server [#2579](https://github.com/openshift/cluster-network-operator/pull/2579)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/45379d9f5db177cc97f6e856a97e8b24c8f7a23c...1aca832fab45aceebe8026077d67ac6b82b51179)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ea6abc302b56e77e272c8f5d136ea96cfa931198)

* [OCPBUGS-78214](https://issues.redhat.com/browse/OCPBUGS-78214): PPC: filter out namespaces dir [#1481](https://github.com/openshift/cluster-node-tuning-operator/pull/1481)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/65585d9988f91a0dcb71b1fd91174dc422fb6a1c...ea6abc302b56e77e272c8f5d136ea96cfa931198)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/8c61cd4bcf3719137950e3ac287346013b471a08)

* [OCPBUGS-68170](https://issues.redhat.com/browse/OCPBUGS-68170): CVE-2025-65637 - Update library-go to bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] [#653](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/653)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e...8c61cd4bcf3719137950e3ac287346013b471a08)


### [console](https://github.com/openshift/console/tree/593756f72ad618d0d63103289b3577e69689e3c8)

* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16074](https://github.com/openshift/console/pull/16074)
* NO-JIRA: Bump builder image to v29 [#15994](https://github.com/openshift/console/pull/15994)
* [OCPBUGS-74452](https://issues.redhat.com/browse/OCPBUGS-74452): Bump lodash to latest [#15966](https://github.com/openshift/console/pull/15966)
* [OCPBUGS-69403](https://issues.redhat.com/browse/OCPBUGS-69403): Disallowed Pipelines-plugin Pipelines navigation section [#15849](https://github.com/openshift/console/pull/15849)
* [OCPBUGS-65933](https://issues.redhat.com/browse/OCPBUGS-65933): Preserve URL in perspective switch + remove dev console folks from `reviewers` [#15762](https://github.com/openshift/console/pull/15762)
* [OCPBUGS-64942](https://issues.redhat.com/browse/OCPBUGS-64942): Expose prometheus tenancy label path as a proxy [#15710](https://github.com/openshift/console/pull/15710)
* [Full changelog](https://github.com/openshift/console/compare/44c89c4104056de81671e9b6cf7821d1884125bc...593756f72ad618d0d63103289b3577e69689e3c8)


### [console-operator](https://github.com/openshift/console-operator/tree/e8032813321ac4c2daec869a7703c31cd9b2acf4)

* [OCPBUGS-77862](https://issues.redhat.com/browse/OCPBUGS-77862): update go mod dependency for konflux [#1114](https://github.com/openshift/console-operator/pull/1114)
* [Full changelog](https://github.com/openshift/console-operator/compare/dc3d8515c13d3127da0aff3d20f5e61c4bd8f3d3...e8032813321ac4c2daec869a7703c31cd9b2acf4)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/a95a5efed26080ae264e2d059fb5bdcb9ba1baee)

* [OCPBUGS-68135](https://issues.redhat.com/browse/OCPBUGS-68135): Bump logrus to v1.9.1 [#224](https://github.com/openshift/containernetworking-plugins/pull/224)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/49a6faae9586d07569079904d55907c74328b6ec...a95a5efed26080ae264e2d059fb5bdcb9ba1baee)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/baec20197f8ad057abff220a0bbde18e064e2f4e)

* [OCPBUGS-68209](https://issues.redhat.com/browse/OCPBUGS-68209): fix CVE-2025-65637 [#357](https://github.com/openshift/cloud-provider-openstack/pull/357)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/19b025be218d114d8cd36c25ef4cd20fb8aefae3...baec20197f8ad057abff220a0bbde18e064e2f4e)


### [docker-builder](https://github.com/openshift/builder/tree/12fc732cf6c3f344d87b30e4a7927811ef943fab)

* [OCPBUGS-66988](https://issues.redhat.com/browse/OCPBUGS-66988): bump buildah to 1.37.7 to fix CVE-2025-52881 [#499](https://github.com/openshift/builder/pull/499)
* [OCPBUGS-65816](https://issues.redhat.com/browse/OCPBUGS-65816): BuildConfig inline Dockerfile fails with heredoc syntax [#488](https://github.com/openshift/builder/pull/488)
* [Full changelog](https://github.com/openshift/builder/compare/4611ac34471943b77dfe2d8668df475106e3c3b4...12fc732cf6c3f344d87b30e4a7927811ef943fab)


### [docker-registry](https://github.com/openshift/image-registry/tree/d0595c9e720caa5489628e49ed45a8eb85fa7b69)

* [OCPBUGS-68182](https://issues.redhat.com/browse/OCPBUGS-68182): update logrus to v1.9.1 [#465](https://github.com/openshift/image-registry/pull/465)
* [Full changelog](https://github.com/openshift/image-registry/compare/4498bed2ff5ca62d95eb9b1e9e4fed02fdbd602e...d0595c9e720caa5489628e49ed45a8eb85fa7b69)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/85f831b558d5e22104a61d6fcd53f6d5916f32a6)

* [OCPBUGS-78279](https://issues.redhat.com/browse/OCPBUGS-78279): [release-4.17] update go mod dependency for konflux [#266](https://github.com/openshift/cluster-api-provider-gcp/pull/266)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f...85f831b558d5e22104a61d6fcd53f6d5916f32a6)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/a066d98e8a4033b78a3e0fffade7d386630072f7)

* [OCPBUGS-68186](https://issues.redhat.com/browse/OCPBUGS-68186): Update logrus to 1.9.3 [#90](https://github.com/openshift/gcp-pd-csi-driver/pull/90)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c770b41229e39d8859fc11ec709ab57a0e0ad06a...a066d98e8a4033b78a3e0fffade7d386630072f7)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/4e295fa517e17429af4d8004e7a8028fe719e60f)

* [OCPBUGS-68132](https://issues.redhat.com/browse/OCPBUGS-68132), [OCPBUGS-68190](https://issues.redhat.com/browse/OCPBUGS-68190): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [#2573](https://github.com/openshift/kubernetes/pull/2573)
* [OCPBUGS-72531](https://issues.redhat.com/browse/OCPBUGS-72531): Skip E2e: attach on previously attached volumes should work [#2566](https://github.com/openshift/kubernetes/pull/2566)
* [OCPBUGS-65695](https://issues.redhat.com/browse/OCPBUGS-65695): Fix Concurrentmap Iteration [#2520](https://github.com/openshift/kubernetes/pull/2520)
* [Full changelog](https://github.com/openshift/kubernetes/compare/ac453edd5ce7d88cf916149399627c93ab30cf16...4e295fa517e17429af4d8004e7a8028fe719e60f)


### [hypershift](https://github.com/openshift/hypershift/tree/b26aa26dfb038554299756e59fb68943ebffed22)

* [OCPBUGS-76533](https://issues.redhat.com/browse/OCPBUGS-76533): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7703](https://github.com/openshift/hypershift/pull/7703)
* [OCPBUGS-74230](https://issues.redhat.com/browse/OCPBUGS-74230), [OCPBUGS-74294](https://issues.redhat.com/browse/OCPBUGS-74294): [release-4.17] Support proxy authentication when user/pass is included in URL [#7568](https://github.com/openshift/hypershift/pull/7568)
* fix: OCPBUGS-72956: Fix Konflux EC voilation, update deprecated base … [#7457](https://github.com/openshift/hypershift/pull/7457)
* [OCPBUGS-69865](https://issues.redhat.com/browse/OCPBUGS-69865): test: remove unit tests that depend on network communication [release-4.17] [#7411](https://github.com/openshift/hypershift/pull/7411)
* [OCPBUGS-57123](https://issues.redhat.com/browse/OCPBUGS-57123): Add support for registry root entry only in the IDMS/ICSP [#6230](https://github.com/openshift/hypershift/pull/6230)
* [Full changelog](https://github.com/openshift/hypershift/compare/2c3f89d015ef3089d09c388ca9f67f4259e1d13d...b26aa26dfb038554299756e59fb68943ebffed22)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/efdc56fdd3a331643b8d35567682fddf17477bec)

* [OCPBUGS-77209](https://issues.redhat.com/browse/OCPBUGS-77209): [release-4.17] standardize build paths [#123](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/123)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/b4d153d69797e08c13aded5400112739779091b9...efdc56fdd3a331643b8d35567682fddf17477bec)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/9c13e272406752acdc8e89d0f67eeae07a5f747f)

* [OCPBUGS-67287](https://issues.redhat.com/browse/OCPBUGS-67287): [release-4.17] Fix incomplete vendor/ [#139](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/139)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/50e6e1ad8083a36c5ead259066753d8446fc87e0...9c13e272406752acdc8e89d0f67eeae07a5f747f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/c1b05a654634ea3eff6e322c66e755082813479a)

* [OCPBUGS-68193](https://issues.redhat.com/browse/OCPBUGS-68193): OCPBUGS-68194: [vuln] Update logrus library to 1.9.3 [#1227](https://github.com/openshift/insights-operator/pull/1227)
* [OCPBUGS-67008](https://issues.redhat.com/browse/OCPBUGS-67008): Add filtering to add other possible pod status to QEMU gatherer [#1196](https://github.com/openshift/insights-operator/pull/1196)
* [OCPBUGS-66395](https://issues.redhat.com/browse/OCPBUGS-66395): QEMU logs are not gathered if there are pending status virt-launcher pods [#1194](https://github.com/openshift/insights-operator/pull/1194)
* [OCPBUGS-66394](https://issues.redhat.com/browse/OCPBUGS-66394): [bugfix] The archive's records may include files whose names are out of bounds [#1193](https://github.com/openshift/insights-operator/pull/1193)
* [OCPBUGS-64629](https://issues.redhat.com/browse/OCPBUGS-64629): add permissions to gather clusterrole [#1170](https://github.com/openshift/insights-operator/pull/1170)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ad51ca8a18364b6833973cf841654255afcea619...c1b05a654634ea3eff6e322c66e755082813479a)


### [ironic](https://github.com/openshift/ironic-image/tree/0e69e83d486868b4936b44712b1739072e25d55e)

* [OCPBUGS-74114](https://issues.redhat.com/browse/OCPBUGS-74114): Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix [#796](https://github.com/openshift/ironic-image/pull/796)
* [OCPBUGS-69792](https://issues.redhat.com/browse/OCPBUGS-69792): Bump eventlet version to 0.33.1-7 [#761](https://github.com/openshift/ironic-image/pull/761)
* [Full changelog](https://github.com/openshift/ironic-image/compare/391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c...0e69e83d486868b4936b44712b1739072e25d55e)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d0261c59daa50c481a68846d9da1ce855c4c1578)

* [OCPBUGS-69775](https://issues.redhat.com/browse/OCPBUGS-69775): Bump eventlet version to 0.33.1-7 [#231](https://github.com/openshift/ironic-agent-image/pull/231)
* [OCPBUGS-62490](https://issues.redhat.com/browse/OCPBUGS-62490): netutils: Use ethtool ioctl to get permanent mac address [#214](https://github.com/openshift/ironic-agent-image/pull/214)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/dfc319182f7a1a2bd6b252728d3cd8a03bc9d7c0...d0261c59daa50c481a68846d9da1ce855c4c1578)


### [kube-proxy](https://github.com/openshift/sdn/tree/fd50551b5c640fb4bda787faaab32f8b641839e9)

* [OCPBUGS-68165](https://issues.redhat.com/browse/OCPBUGS-68165): deps: Update library-go to fix a CVE [#661](https://github.com/openshift/sdn/pull/661)
* [Full changelog](https://github.com/openshift/sdn/compare/dee082def2014ab85a0e5ff9a056d3fe2461eab7...fd50551b5c640fb4bda787faaab32f8b641839e9)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/b40c02a5fe525b1a69e1cf2dbada18e28a4ccd1e)

* [OCPBUGS-74874](https://issues.redhat.com/browse/OCPBUGS-74874): Deduplicate CRS stores [#132](https://github.com/openshift/kube-state-metrics/pull/132)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/462e63f6223817d3610f030f6166a790d793c572...b40c02a5fe525b1a69e1cf2dbada18e28a4ccd1e)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/931afe11b155006f805d0b029e46416e632d1a14)

* [OCPBUGS-77195](https://issues.redhat.com/browse/OCPBUGS-77195): Fix incomplete vendor/ [#301](https://github.com/openshift/cluster-api-provider-libvirt/pull/301)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...931afe11b155006f805d0b029e46416e632d1a14)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/2eb3ca6e5bb9b245c34b5df6c9ab5961e0f371fc)

* [OCPBUGS-79373](https://issues.redhat.com/browse/OCPBUGS-79373): [release-4.17] Use resource group when generating default Azure image [#1481](https://github.com/openshift/machine-api-operator/pull/1481)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/998cffed3663b5b4332a8eb0d8e7dce489b1bfa9...2eb3ca6e5bb9b245c34b5df6c9ab5961e0f371fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b26f17094e08099aaaa7ff4cac3c3656a94297fa)

* [OCPBUGS-74149](https://issues.redhat.com/browse/OCPBUGS-74149): enable nodeip-configuration for platform external [#5577](https://github.com/openshift/machine-config-operator/pull/5577)
* [OCPBUGS-77979](https://issues.redhat.com/browse/OCPBUGS-77979): hermetic 4.17 [#5733](https://github.com/openshift/machine-config-operator/pull/5733)
* [OCPBUGS-77889](https://issues.redhat.com/browse/OCPBUGS-77889): reduce MCO image size [#5746](https://github.com/openshift/machine-config-operator/pull/5746)
* [OCPBUGS-77812](https://issues.redhat.com/browse/OCPBUGS-77812): mcd_config_drift not working properly [#5741](https://github.com/openshift/machine-config-operator/pull/5741)
* [OCPBUGS-77422](https://issues.redhat.com/browse/OCPBUGS-77422): Remove MCD liveness probe [#5709](https://github.com/openshift/machine-config-operator/pull/5709)
* [OCPBUGS-77242](https://issues.redhat.com/browse/OCPBUGS-77242): After OCL is enabled few phases in MCN are not updating as expected [#5575](https://github.com/openshift/machine-config-operator/pull/5575)
* [OCPBUGS-77186](https://issues.redhat.com/browse/OCPBUGS-77186): Machine-config controller should not log about non-existent pull-secret changes [#5679](https://github.com/openshift/machine-config-operator/pull/5679)
* [OCPBUGS-77090](https://issues.redhat.com/browse/OCPBUGS-77090): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5678](https://github.com/openshift/machine-config-operator/pull/5678)
* [OCPBUGS-61190](https://issues.redhat.com/browse/OCPBUGS-61190): MCO report "failed to list *v1alpha1.MachineOSConfig" when enable TechPreview after upgrading from 4.16 to 4.17 with one mcp paused [#5584](https://github.com/openshift/machine-config-operator/pull/5584)
* [OCPBUGS-60112](https://issues.redhat.com/browse/OCPBUGS-60112): Enable debug logging for nodeip-configuration [#5219](https://github.com/openshift/machine-config-operator/pull/5219)
* [OCPBUGS-62170](https://issues.redhat.com/browse/OCPBUGS-62170): Fix - NetworkManager restart or crash renders br-ex unusable [#5355](https://github.com/openshift/machine-config-operator/pull/5355)
* [OCPBUGS-66037](https://issues.redhat.com/browse/OCPBUGS-66037): Remove --mount directives [#5443](https://github.com/openshift/machine-config-operator/pull/5443)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b1322e4881a5957b6eabe97fd850e8b6d2ae84e7...b26f17094e08099aaaa7ff4cac3c3656a94297fa)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/03af8514abbbd588bcc5514ff591b769d1241c09)

* [OCPBUGS-68192](https://issues.redhat.com/browse/OCPBUGS-68192): [4.17] Uplift logrus [#152](https://github.com/openshift/image-customization-controller/pull/152)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/1a7239ebe6f6a403b54499fe92267e493293d4b1...03af8514abbbd588bcc5514ff591b769d1241c09)


### [metallb-frr](https://github.com/openshift/frr/tree/b575d5dfac5319d7d296922de69c73baea6d142d)

* [OCPBUGS-76548](https://issues.redhat.com/browse/OCPBUGS-76548): Dockerfile: unpin FRR rpm [#124](https://github.com/openshift/frr/pull/124)
* [Full changelog](https://github.com/openshift/frr/compare/c0182036769726484b96a20db5e8be211d2f88b6...b575d5dfac5319d7d296922de69c73baea6d142d)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/190b6fc247e9487f8e6fc4504cfee9794cedbf1f)

* [OCPBUGS-76809](https://issues.redhat.com/browse/OCPBUGS-76809): fix for CVE-2025-69873 [#848](https://github.com/openshift/monitoring-plugin/pull/848)
* [OCPBUGS-70290](https://issues.redhat.com/browse/OCPBUGS-70290): Manual cherry pick qs vulnerability 4 17 [#747](https://github.com/openshift/monitoring-plugin/pull/747)
* [OCPBUGS-64942](https://issues.redhat.com/browse/OCPBUGS-64942): Use tenancy access to metric lables [#639](https://github.com/openshift/monitoring-plugin/pull/639)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/f67995debd8c8a015d74337e76886c6fa853028a...190b6fc247e9487f8e6fc4504cfee9794cedbf1f)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/1bb7489b2728d06df110dff1ece8abd2c1b74db2)

* [OCPBUGS-77854](https://issues.redhat.com/browse/OCPBUGS-77854): hermetic 4.17 [#277](https://github.com/openshift/multus-cni/pull/277)
* [Full changelog](https://github.com/openshift/multus-cni/compare/93d87533af805ff6d8ede2eb3fde4e605fbda3f9...1bb7489b2728d06df110dff1ece8abd2c1b74db2)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b)

* [OCPBUGS-73728](https://issues.redhat.com/browse/OCPBUGS-73728): Update tag on ci-operator.yaml file [#395](https://github.com/openshift/whereabouts-cni/pull/395)
* [OCPBUGS-70256](https://issues.redhat.com/browse/OCPBUGS-70256): Prevent accidental IP deallocation in statefulsets [#393](https://github.com/openshift/whereabouts-cni/pull/393)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/df78f6433df7f12de63f06fbc62d0f63c0642dd2...40cfb3dca70a4d37dff426c0ec1c77efcb399e1b)


### [must-gather](https://github.com/openshift/must-gather/tree/2429998f12191eac5ffa83f3d189bb92a29724dd)

* [OCPBUGS-60607](https://issues.redhat.com/browse/OCPBUGS-60607): Separate resources with comma to fix malformed inspect [#504](https://github.com/openshift/must-gather/pull/504)
* [Full changelog](https://github.com/openshift/must-gather/compare/2665354a16c71bb1d9af8c476bb30fa8835a00fb...2429998f12191eac5ffa83f3d189bb92a29724dd)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/2b419724d25df1e7ac0781d5a5edfe2f96b62e5a)

* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#320](https://github.com/openshift/networking-console-plugin/pull/320)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f18dafcfe4e6ea95012ae09701c1f0298993ee3d...2b419724d25df1e7ac0781d5a5edfe2f96b62e5a)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e078aeb29048d2b37e0b8e2657641a9207fd4d84)

* [OCPBUGS-66228](https://issues.redhat.com/browse/OCPBUGS-66228): UPSTREAM &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#157](https://github.com/openshift/oauth-apiserver/pull/157)
* NO-JIRA: (chore): update OWNERS file [#171](https://github.com/openshift/oauth-apiserver/pull/171)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/f970d593e755e6478bd05d88138b39bf85c1aa2d...e078aeb29048d2b37e0b8e2657641a9207fd4d84)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/2ebbed4677b90c09899a96afc4f0a750e802f65e)

* [OCPBUGS-68208](https://issues.redhat.com/browse/OCPBUGS-68208): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] [#609](https://github.com/openshift/openshift-apiserver/pull/609)
* [OCPBUGS-74143](https://issues.redhat.com/browse/OCPBUGS-74143): pkg/image: conditionally parse raw image manifest [#596](https://github.com/openshift/openshift-apiserver/pull/596)
* [OCPBUGS-66229](https://issues.redhat.com/browse/OCPBUGS-66229): UPSTREAM &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#584](https://github.com/openshift/openshift-apiserver/pull/584)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/4b8cb3381cdcd5fbdd8e7741284712ac0561bd10...2ebbed4677b90c09899a96afc4f0a750e802f65e)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/3b926d2094bab3c6759252b7681cc36473b29021)

* [OCPBUGS-78169](https://issues.redhat.com/browse/OCPBUGS-78169): hermetic 4.17 [#162](https://github.com/openshift/machine-api-provider-openstack/pull/162)
* [OCPBUGS-76793](https://issues.redhat.com/browse/OCPBUGS-76793): Fix make test [#160](https://github.com/openshift/machine-api-provider-openstack/pull/160)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/689718740b923e516c037d7862d81a462ecdbbd3...3b926d2094bab3c6759252b7681cc36473b29021)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/7c68dcc506c099477f0fff65fd187d2c9c973429)

* [OCPBUGS-77838](https://issues.redhat.com/browse/OCPBUGS-77838): Remove the collect-profiles info from the microshift kustomization file [#1250](https://github.com/openshift/operator-framework-olm/pull/1250)
* [OCPBUGS-76953](https://issues.redhat.com/browse/OCPBUGS-76953): Remove the collect-profiles job [#1232](https://github.com/openshift/operator-framework-olm/pull/1232)
* [OCPBUGS-67301](https://issues.redhat.com/browse/OCPBUGS-67301): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1172](https://github.com/openshift/operator-framework-olm/pull/1172)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/12fbe1b70635c5c100a6a5fc5734280a17a95c3d...7c68dcc506c099477f0fff65fd187d2c9c973429)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f)

* [OCPBUGS-68212](https://issues.redhat.com/browse/OCPBUGS-68212), [OCPBUGS-68213](https://issues.redhat.com/browse/OCPBUGS-68213): [release-4.17] CVE-2025-65637 fixed in logrus v1.9.3+ [#710](https://github.com/operator-framework/operator-marketplace/pull/710)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/fa21ad04ad9b72f4aaf7b0357632b9f7283b60d8...5cf36fde25cf22b7f58b0a3242f82cadd18acc6f)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/65c8e33b2d939d00e609c49d55b06334769cc0f8)

* [OCPBUGS-68230](https://issues.redhat.com/browse/OCPBUGS-68230): Bump github.com/sirupsen/logrus to v1.8.3 [#151](https://github.com/openshift/ovirt-csi-driver-operator/pull/151)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/0feae256abcc9b86c0276eaf2fc233cf899fb0ae...65c8e33b2d939d00e609c49d55b06334769cc0f8)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/0fb1abde1454b64b596657600e18f4196229fa5a)

* [OCPBUGS-77568](https://issues.redhat.com/browse/OCPBUGS-77568): Clear stale conntrack UDP entries for nodePorts [#3035](https://github.com/openshift/ovn-kubernetes/pull/3035)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-74492](https://issues.redhat.com/browse/OCPBUGS-74492): [release-4.17] Dockerfile: Unpin OVN and consume the latest from FDP [#2959](https://github.com/openshift/ovn-kubernetes/pull/2959)
* [release:4.17] OCPBUGS-71985: Fix conntrack reconciliation to use service port instead of endpoint port [#2936](https://github.com/openshift/ovn-kubernetes/pull/2936)
* [OCPBUGS-71218](https://issues.redhat.com/browse/OCPBUGS-71218): [release-4.17] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) [#2905](https://github.com/openshift/ovn-kubernetes/pull/2905)
* [OCPBUGS-71198](https://issues.redhat.com/browse/OCPBUGS-71198): NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated [#2923](https://github.com/openshift/ovn-kubernetes/pull/2923)
* [OCPBUGS-68348](https://issues.redhat.com/browse/OCPBUGS-68348): Add ricky-rav to OWNERS for release-4.17 [#2898](https://github.com/openshift/ovn-kubernetes/pull/2898)
* [OCPBUGS-65928](https://issues.redhat.com/browse/OCPBUGS-65928): Skip Pending pods in EgressIP status [#2871](https://github.com/openshift/ovn-kubernetes/pull/2871)
* [OCPBUGS-65569](https://issues.redhat.com/browse/OCPBUGS-65569): [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods [#2857](https://github.com/openshift/ovn-kubernetes/pull/2857)
* [OCPBUGS-64856](https://issues.redhat.com/browse/OCPBUGS-64856): Fix stale EIP assignments during failover and controller restart [#2850](https://github.com/openshift/ovn-kubernetes/pull/2850)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e088f8925a37e2b32708ba36fbe1be75df8feaed...0fb1abde1454b64b596657600e18f4196229fa5a)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc)

* [OCPBUGS-75885](https://issues.redhat.com/browse/OCPBUGS-75885): Include go-verify-deps expected files in gitignore [#115](https://github.com/openshift/prometheus-alertmanager/pull/115)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d7a9814460f9581491830f57d4e8e210a73750d9...d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/ea26b9317a53713807e35d9ac26a1a363f020e56)

* [OCPBUGS-77452](https://issues.redhat.com/browse/OCPBUGS-77452): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#369](https://github.com/openshift/prometheus-operator/pull/369)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9cb457b8a8dd7e245e58ecd348f6331cc7922077...ea26b9317a53713807e35d9ac26a1a363f020e56)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)

* [OCPBUGS-68220](https://issues.redhat.com/browse/OCPBUGS-68220): Update logrus to 1.9.3 to address CVE-2025-65637 [#316](https://github.com/openshift/service-ca-operator/pull/316)
* Fix for OCPBUGS-68221: CVE-2025-65637 bump github.com/sirupsen/logrus to v1.9.3 [#309](https://github.com/openshift/service-ca-operator/pull/309)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e...2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)


### [tests](https://github.com/openshift/origin/tree/5abe37f6f7844abc4d088595c0631734fb46864c)

* [OCPBUGS-65492](https://issues.redhat.com/browse/OCPBUGS-65492): Add imagestream update dryrun test [#30479](https://github.com/openshift/origin/pull/30479)
* [Full changelog](https://github.com/openshift/origin/compare/e10c09affde9136054cb4971677e7a35dfb6657a...5abe37f6f7844abc4d088595c0631734fb46864c)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/da096b41a79e2216f643ea2addc49a571116e7d5)

* [OCPBUGS-78027](https://issues.redhat.com/browse/OCPBUGS-78027): hermetic migration 4.17 [#106](https://github.com/openshift/cloud-provider-vsphere/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/097d823bd10abbc6cd016c34a1c5c3cd1b514031...da096b41a79e2216f643ea2addc49a571116e7d5)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/8dafe88984acf1584778e1e31896d92c358b2f07)

* [OCPBUGS-78019](https://issues.redhat.com/browse/OCPBUGS-78019): hermetic migration 4.17 [#85](https://github.com/openshift/cluster-api-provider-vsphere/pull/85)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6a5d803e20e05510ba93135df96ad063aaf272de...8dafe88984acf1584778e1e31896d92c358b2f07)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4b70f176dc1e93aa41ca98bd0d0152df0a616eb4)

* [OCPBUGS-68224](https://issues.redhat.com/browse/OCPBUGS-68224): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#157](https://github.com/openshift/vmware-vsphere-csi-driver/pull/157)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/039ee3684d5addee3ff8436b19462def77bd5804...4b70f176dc1e93aa41ca98bd0d0152df0a616eb4)