# 4.17.60

Created: 2026-11-09 17:00:11 +0000 UTC

Image Digest: `sha256:0be445d72f89f8141dd06ea65022e4c5c55bb62e540b197ee2206d5873242f51`


## Changes from 4.17.58

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.14
* Kubernetes Tests 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202609191027-0 to 417.94.202611061051-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:02eca1be68988be776f553ec9f377074006c78f963e78b84d6ddb68a60dd53a4`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:84152ce20e4e93667d1c080470d262fd44b4df4bbd0bbb614899f2f0332d7bd1`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3595281](https://github.com/openshift/agent-installer-utils/commit/b359528186b9df8ff5796f2bbfdab7f6bbaad491) `sha256:bbeab8ae346dbcc1fbb2ff110bef81f322ffb1f064bcd331c149d4628e39c341`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:c3cfabbc8e1cca991417eb26c74dc8ee6151212938ef8ee2843d24094b206f08`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9b1719e3](https://github.com/openshift/aws-encryption-provider/commit/9b1719e3c46f18fe763ee7cdf34012a969550b0b) `sha256:17e3115c60e17b2821515bb6183e10e57628586456b8ac6e0d91723a64ced7b5`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [2b53de06](https://github.com/openshift/machine-api-provider-aws/commit/2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7) `sha256:b80121511cbcafe62a139aec4316e59f6bbda77899d64745171644f12b363ada`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [80efc4ea](https://github.com/openshift/aws-pod-identity-webhook/commit/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56) `sha256:6db7745bb85d51a403fd6751def02ca3cf800b9d6dbb6cd48d62150cbe5f5581`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [08c5419a](https://github.com/openshift/cluster-api-provider-azure/commit/08c5419ade9e988a7286b714f8b9fd3be05b0e0b) `sha256:6baeb4e2babca2dae93736dd1b83fddcb3d00ba39b474712eca4692ad2b3ba8d`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [2201d80e](https://github.com/openshift/azure-file-csi-driver/commit/2201d80e445acaf19142a843dbd395d8e274e726) `sha256:c9053085d9656340a8b11675a7ae4a1db135dd282eaf32acb5521860b30f2502`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [cc562120](https://github.com/openshift/azure-kubernetes-kms/commit/cc562120ff540e237cc170b8a82a8cbbc3a32ad2) `sha256:1b06581c80e1f8bdbeb903ee2fc6b467f687dfe68951d2c70f271c0edf8ec501`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:e9431f547c2f24f4c51b727b69d3e137f14fed8e5a23b756b5c429921d5eac66`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [ae674d78](https://github.com/openshift/cluster-api-provider-baremetal/commit/ae674d7808379c454f972ff0cccac8bb9adcc98f) `sha256:70f102c1f41776fb4ebf46037780f53a848b0205ba09fe813b9196066f2f2438`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [087a24f2](https://github.com/openshift/baremetal-operator/commit/087a24f21f11bc85a6d922c156bda6270e7eadfa) `sha256:78cdc997841cee4e6fa34ee47ad66713402563e7a95c6a2ae22faefc30c22c85`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [6a11cde3](https://github.com/openshift/cloud-credential-operator/commit/6a11cde3b4cf42a9382c01f537f012f6df487899) `sha256:e7156fd0a675d86283a7461ee6c651186923e5d1cac39834f8b9d0a882f21113`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [241af368](https://github.com/openshift/cloud-network-config-controller/commit/241af368428cb2deedeaf8e21d237aa01216292a) `sha256:c6d63832494246ad87f59d911ff16515c3d68472665e29656c40d551fdd024c1`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [efa6fd9b](https://github.com/openshift/kubernetes-autoscaler/commit/efa6fd9b220e841591d8be2208cdec4ffc826429) `sha256:04fc5a8681b93e906623bb99b31154f08f44af09e8d4f4920613da368302bff0`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [bb407dd1](https://github.com/openshift/cluster-autoscaler-operator/commit/bb407dd17744ed46ac9eedde23e2a8cd7371bfc9) `sha256:e0eeb0555519eac87fff4db1b49d117f460b5be2b6595a227897439f56d0e07c`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:930ca757c32c28fafdca98eccbd93590ab508565d7591058a1319aa6b4af69b3`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [3b417931](https://github.com/openshift/cluster-api/commit/3b417931b1e94534cbde2c435c262befad8a57f1) `sha256:a14a82c7759721baf934ec43266059c2bdd61465d09e26debe060b3832fca6e4`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [17abd1d9](https://github.com/openshift/cluster-capi-operator/commit/17abd1d9c801288347f4134965b268389a90c342) `sha256:79977d4186bad2482941fd9e769eb0e6cb44e64a2dd4fceabd83766f14f470bf`
* [cluster-config-api](https://github.com/openshift/api) git [92c55bf0](https://github.com/openshift/api/commit/92c55bf0f372c222dc02f17685c383d18e2c2e8b) `sha256:f89a5d914e56e498a21779f199b41033ec5449b1955353a16b1fa4d856629919`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [cfd318de](https://github.com/openshift/cluster-config-operator/commit/cfd318de9718f1c73b40d99900125bdca41482ef) `sha256:adf3843a102b6e4cc548ee399ae2526642d19344a3b885a84a59a12254f9f121`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:940d6a0c4dbc89d79404dfe511b19490dcd12386103a36956fae96dfc895efa7`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1a0cea11](https://github.com/openshift/cluster-image-registry-operator/commit/1a0cea11ec4ba91416b698ab2e87d03a09a0e367) `sha256:a43feb621b95ed6672e8c3613ef9ae02e4b8a69e6b975083ccafb147d5a907ad`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [17253375](https://github.com/openshift/cluster-ingress-operator/commit/1725337535e32158f37471a2286c9142f100ff41) `sha256:0befe8cc88dfedbfe90954f2dad06ee08ff1c8c4ac36222775f756baf1d959cb`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [c1947350](https://github.com/openshift/cluster-api-operator/commit/c1947350f996bcc50c549c9e83382179d6455247) `sha256:4552dfc9dfcdf5e08c68a51e8e35aaf1ca6974438a16c20fb492a848714e388f`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [0097f210](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/0097f21060a7e10679567eb57b87feb4f55230e3) `sha256:3b3b1dce8605091190214323d6b0b6a2716ea7f1a0b4872a94a034784f330b20`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:bab1088881fa55179a15a2da6d11521f0b2639a0f1d6ad9968f1c061c3768009`
* [cluster-network-operator](https://github.com/openshift/cluster-network-operator) git [dc98c59e](https://github.com/openshift/cluster-network-operator/commit/dc98c59e223f325acb113a697771e737266876a5) `sha256:c0bea99bbd17e1ad46337735a0e18fd1e000c5518aaeddc29fcd08c2c285678d`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [fe37d7cf](https://github.com/openshift/cluster-node-tuning-operator/commit/fe37d7cf96ef3280f1bd41c55372b520fdf6c821) `sha256:d6a2768eeaec5d628aa2d7eeba3e64b3b5b43c32baa33b0e823c148f3c8ef58f`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [8c61cd4b](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/8c61cd4bcf3719137950e3ac287346013b471a08) `sha256:cb25d9066570023a4a7dc9f54f143e47de805f5f58f70bf84d72775e888955db`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:499954a31aa9f57414bd4a7c4a2f36ee4c006b9ec5ce1c0b17022505e9ebcd3e`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:8bb01cfe65daaee546655ec3f5990c241e11c62e7a46161f9d94bf1732c4f8cc`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:6e37ee47498edb07b1a5058fe9a8b5c502589b6f68bd005aab22f8551379e955`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:4e9ba8b450dd0e110a1ae567ffba9053171d768b383a2a1da0f9aebb72299c50`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:28c3f72e17fc22197bdb916e95b037301b9197b60f53d9144e77b1c1884acf2f`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:50f6fe4f865bc7784cd084acddd7301d0b7f9542711b3955055745b8a9471d5d`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [a56e0cba](https://github.com/openshift/csi-driver-nfs/commit/a56e0cbacf27e90ffda7de9a6a470911a17a52c2) `sha256:01b917ddcc509bc5b2eac209909d8f428cd7e9ae2bda792718c9c5eb1d8a8105`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:1ecc106a2c97951b53936a0545b05cac7693dbcb53801051585d65e82f4cc119`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [95be6bdf](https://github.com/openshift/csi-driver-shared-resource-operator/commit/95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a) `sha256:2e781d01ecdc98aa05c6da6078a244ce5fdbee5bfefe80046864279aec66f1df`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:2d3b1e32bdb524200b0aafd30fbe12b5020b2156751042b1a41db2f99809bcee`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3dd2253e](https://github.com/openshift/csi-node-driver-registrar/commit/3dd2253ed70cb565a63a208fa667d55f3222fb19) `sha256:9a7dc5e92107089e69790e1d4c983b89c0ee5b04c0c6387798920727482b94b7`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:0c711b5d88c69d13ba911b4169ce15ad04285f91b0901d08502d2002cd95b087`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:9a7e7ebe1cf782c4898c8f3e2648a9b0636c70dff95a1d12733f869dcf9604b0`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:f2d96fc17baf01bc37b6c092efb46292bbf7abe165d6e2f3f43e226bc6ee9464`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:64dc40c30d87a7f4f26d80d02839f113dc5d12846c070c168a830f8718c7ad9d`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [f2203376](https://github.com/openshift/cluster-api-provider-gcp/commit/f2203376a8a2d8eecec7b85dc28b756b49d8c469) `sha256:820f4f99d67f2419a680f899b14a7b312a8036d41c21d7d0e8f4f094b03b8b6a`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [96fa4696](https://github.com/openshift/machine-api-provider-gcp/commit/96fa4696da4229c4ac5bccd392750725ca5c4dc8) `sha256:95bdd2c4d4e5930377b83c1696d0ec8b1df2e62a365b4227102f60fd7abd703d`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [9c043915](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/9c043915bd01ede967dd412034190303150a9825) `sha256:ddc101f5300ffe73084b66990987e954e5ed1ce9b495293357f365a57b996c29`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [a6cc81b5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/a6cc81b5ff924e190c701c509fdfea67e6615ff9) `sha256:cb8a67e00405bcbfd54d12d5e4d8ccc742816dcb05b2c82e3e5c548f50b60106`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [89fbc4e8](https://github.com/openshift/machine-api-provider-ibmcloud/commit/89fbc4e852047a5a394a42d2334bdf02d190fcc0) `sha256:d8290f8fb04d010b8955797c942c027b1e360a4a62a484d3dcc854dd205eec1d`
* [ironic](https://github.com/openshift/ironic-image) git [005cfdf5](https://github.com/openshift/ironic-image/commit/005cfdf54b53f458283e3eae85f0c304cb8635fa) `sha256:0bf1815c82ee7cb5dbfa5dd5979add57c6197c2ae1c6bffda004b186f6a8d832`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [3e4fd09f](https://github.com/openshift/ironic-agent-image/commit/3e4fd09f7e36a8eec82627ea1e0ebafa9649d5ea) `sha256:421da1e97a2fb0ab42b90f1902289c6b200a75a67fc22c9f1b0da06583d81696`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9e6596c3](https://github.com/openshift/ironic-rhcos-downloader/commit/9e6596c3f9d239d91c358299a19871905fa914fe) `sha256:b0a7c4d0d260c7ffe95af33770e164e075136ac0844b218f35949949770929e3`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [bc5b8a2c](https://github.com/openshift/ironic-static-ip-manager/commit/bc5b8a2c3209873231a7eabd83ace578c8e182f7) `sha256:dad68d4e18292e644464d7f093721c2f6fa9c6d4bd09ce797e54b93523d5b050`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:65b2e0f76dd3595e55df6edf3fa1a6d54e803fe9e506a2ba6879eb99dc64f682`
* [kube-proxy](https://github.com/openshift/sdn) git [fd50551b](https://github.com/openshift/sdn/commit/fd50551b5c640fb4bda787faaab32f8b641839e9) `sha256:76d4ddc62c271b78c254146f22e764624388d50d725fe64f0cff411d43abfbd9`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:ae8bb228eb4213ea45dcc0d990ad66ef1eda8a687f640362b37fd8ad1d60b783`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:63cecb77dca9b0c8e13cbf132e6d008fa9d6652e6a35c721c15fe621632a5ef1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [d7d7a591](https://github.com/openshift/cloud-provider-kubevirt/commit/d7d7a59127ef9020cbf6339a313e7eb7346c95f6) `sha256:02d9ab3ea39128bef77ee339f42517c394dc5a23ed47fadf059117ed80cc628f`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [b4ad2d68](https://github.com/openshift/kubevirt-csi-driver/commit/b4ad2d68d25572212ca92d42bb209d103d3589d6) `sha256:63a568d9841513eb13b78b627156714ad225c818dc3dd25351888cf63cbed14a`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [931afe11](https://github.com/openshift/cluster-api-provider-libvirt/commit/931afe11b155006f805d0b029e46416e632d1a14) `sha256:67cb16c0d6ad4b3608c22366a9a3cca679159df1f862d0e13656e7e68f8bf8ae`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [cc250001](https://github.com/openshift/machine-os-images/commit/cc250001ddce8bd6342942f045ff7f9930c74040) `sha256:dc050bd2bf0d424b79d7dbb8eb8595895b3c5b027e8363498a883e8dc8127a72`
* [metallb-frr](https://github.com/openshift/frr) git [b575d5df](https://github.com/openshift/frr/commit/b575d5dfac5319d7d296922de69c73baea6d142d) `sha256:fb603587a4c5d9eb2eefe44e1ba6ed674503913574f7e0a474fb13ffd6039220`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:f736e3af8568cbd5f859cb625f024b93bb4aa25bd9f5bef83fcbec8a7177bfcc`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:de87fc2a01cb29ee82bc19f5b44425e7d0229c3f69bdd81ba857e1a5fe7e2b06`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [40cfb3dc](https://github.com/openshift/whereabouts-cni/commit/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b) `sha256:f3be7b67785844017a622ac2abad601b162dedb4a35df7bd7a21d2d86aa48947`
* [must-gather](https://github.com/openshift/must-gather) git [ea72c2eb](https://github.com/openshift/must-gather/commit/ea72c2eb404f9fe9282be70d1af7689f8f139fee) `sha256:348f1323b7f494bdae90f75cb3a63cf2d16d685d9591ff3d1ea46a23f64d1807`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8f7cc925](https://github.com/openshift/bond-cni/commit/8f7cc9253b83072c273c28cff64b00eb6ef3b38a) `sha256:53fbaed76eb24cccf60347733a1c49bbc3ba11486795069fb468017aba27f172`
* [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:25edf215a1c37fd0fc29dc1e8e811e18cc803af4e67b96c5c82f8727f751c089`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:c5e7452a9e8be8ae7d3ce1d942216bb5565d03b7a8ee80109d20f9944c223135`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a4fadcbc](https://github.com/openshift/machine-api-provider-nutanix/commit/a4fadcbc22579320fdf7cd7d98071c15f32aa163) `sha256:6aaac3843885942439679002412b1cb2ef5b12647c9ca044c40efa1c2694f55e`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:415ef0ccda7eaddce60a78c0ec0bd1ec2caa33200022cfa3481f3cb5871f8b3d`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [79a42c56](https://github.com/openshift/openshift-apiserver/commit/79a42c566a8c7857d23623d296c80a70fc2b8148) `sha256:a079cb5f009efe3229183219e4f6c7de23f54cf0a483f9175d3bf09c335ce624`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:c9c84be7c34b675f054552200c719b77761456f8e1be4ec25c540189ae9b7feb`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [3b926d20](https://github.com/openshift/machine-api-provider-openstack/commit/3b926d2094bab3c6759252b7681cc36473b29021) `sha256:7781bae4de77ff99b99ddd52b9ad1e8097e137716cd5f9a513b7b8d9dccc0414`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:269e9d7e2ad4af93db2ff624a9236a4be75c742f17e2620bd3be2acf66691b62`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:b19f837ffafcfb441f0074297e0ab14ee7d5d5ad0e36d00eaca1125452a1e795`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5cf36fde](https://github.com/operator-framework/operator-marketplace/commit/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f) `sha256:b49f78619289bf7fb5d6b9f12628f8c2b8564b0d47a701ae7b6ed12c9da65e11`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:d93ff30c4664ed98282a2d45ac581af35771cc9541f44198bc212c082d141c31`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [f67fdda4](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/f67fdda42e37905fbc67fa8b4c47874f60441848) `sha256:3404372794595ce664739af44ca73c7155bd103e8e1a9f8b953e96e8d6db9171`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [aa1b744e](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/aa1b744e13a0930844f24d9fb6fd9bd2164592e9) `sha256:97091ba6ce94dc7fe01e2c4b783794a7bf3e0c040ac8115c0d2e2de8f495b90f`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [9f61dc19](https://github.com/openshift/cloud-provider-powervs/commit/9f61dc1910671da364a7f9ba74f901b609ed1844) `sha256:aaa527d23441e9758ddb2f50c74ac73267adf36a63fbd78868a7743e972df129`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [b7478d7e](https://github.com/openshift/machine-api-provider-powervs/commit/b7478d7e98f4596d01e84193222f17d4c13a2a09) `sha256:3d7b13f135808e78cd4bb1a7bfb0197978bb95d175d0fadb9edde53bd6996052`
* rhel-coreos `sha256:2d8e492810960f49473880a67025f728d42e55554e141e6eca7e35260bb2ab89`
* rhel-coreos-extensions `sha256:5b4556875fc1e26c7ecd964395e9c7d5d3c9c2efd72b71a20b1c13fc71e2da6e`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [2cb0a44d](https://github.com/openshift/service-ca-operator/commit/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa) `sha256:c4757eb5d731ce9d31fd091b1ecd08bb4f905943a020c6ed79ef42faf0fba81b`
* [telemeter](https://github.com/openshift/telemeter) git [15895a06](https://github.com/openshift/telemeter/commit/15895a068e7e89b14292fde4601208c3eeb3a715) `sha256:c4b963a14499ce87d5a3b03f9ec867f243e49f5cda98b47c77b664e04b33858a`
* [thanos](https://github.com/openshift/thanos) git [51fe5fa4](https://github.com/openshift/thanos/commit/51fe5fa45f6df55266ca874287b47b2825f01b32) `sha256:07fca24e277642e2247b020c20842f726bf927ec8259df8777783cd834450900`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [8d6ea11a](https://github.com/openshift/cluster-api-provider-vsphere/commit/8d6ea11af1d9bffddc8e06a85aeefa3a9dbbf7da) `sha256:2e1f165f1a559426efdc4a62a7f1fb3ae368a1e0dacef730ba13288b6c7206c9`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [fca89d46](https://github.com/openshift/vsphere-problem-detector/commit/fca89d46c1922f682dd10abf863a2f8cb7a1f20d) `sha256:7c4a7d4a765a07da0bcb8de65e6873eef70d849c4c9c6dc25441c8b86de0481c`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/11f678ed6998c56deebdeeaec1ac755c655c694f)

* [OCPBUGS-89875](https://issues.redhat.com/browse/OCPBUGS-89875): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 [#10801](https://github.com/openshift/assisted-service/pull/10801)
* [Full changelog](https://github.com/openshift/assisted-service/compare/c18512cd02435454b6c92e8a708ddd5b1f188dcd...11f678ed6998c56deebdeeaec1ac755c655c694f)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/aee1535a922442712eafd1058d6464cda4d9335b)

* [OCPBUGS-103143](https://issues.redhat.com/browse/OCPBUGS-103143): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1617](https://github.com/openshift/assisted-installer-agent/pull/1617)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/df4660b4ca1ae19ccff3f2dba31e2be14b2a1d09...aee1535a922442712eafd1058d6464cda4d9335b)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/300430d912b9da0469c6aada6088c5df42819bb3)

* [OCPBUGS-103332](https://issues.redhat.com/browse/OCPBUGS-103332): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#172](https://github.com/openshift/cloud-provider-aws/pull/172)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/b0a5486f310691e8ae7c0dbc491c1130eb703472...300430d912b9da0469c6aada6088c5df42819bb3)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/bce95f410e44e504e8661d1dfb61832d223a0e4a)

* [OCPBUGS-103142](https://issues.redhat.com/browse/OCPBUGS-103142): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#653](https://github.com/openshift/cluster-api-provider-aws/pull/653)
* [OCPBUGS-130953](https://issues.redhat.com/browse/OCPBUGS-130953): Fix OIDC test certificate thumbprint [#663](https://github.com/openshift/cluster-api-provider-aws/pull/663)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8d4bbf28adff59be819578f702cef29236bfbfb5...bce95f410e44e504e8661d1dfb61832d223a0e4a)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/4ac925d1ee33e5672030ff107c2200535d4fb9b2)

* [OCPBUGS-90292](https://issues.redhat.com/browse/OCPBUGS-90292): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.6 [#353](https://github.com/openshift/aws-ebs-csi-driver/pull/353)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/51a0563331da53390b3b2a493fa5251e716de890...4ac925d1ee33e5672030ff107c2200535d4fb9b2)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/0dd22fb996f873c9b5809d94698fa7dd6c0be4a1)

* [OCPBUGS-103305](https://issues.redhat.com/browse/OCPBUGS-103305): Use patched x/net fork v0.35.0-sec.4 [#631](https://github.com/openshift/csi-operator/pull/631)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e67405981e4ceef37449f04c7b6a5b96e2735824...0dd22fb996f873c9b5809d94698fa7dd6c0be4a1)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/3b432f2ccad4c772bcfcf50df860a540836d52a3)

* [OCPBUGS-103148](https://issues.redhat.com/browse/OCPBUGS-103148), [OCPBUGS-103330](https://issues.redhat.com/browse/OCPBUGS-103330): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#209](https://github.com/openshift/cloud-provider-azure/pull/209)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86...3b432f2ccad4c772bcfcf50df860a540836d52a3)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/dbdd192b5b8d2dc28bc7587a4e8943f2efe557b9)

* [OCPBUGS-103158](https://issues.redhat.com/browse/OCPBUGS-103158): Bump golang.org/x/net to v0.35.0-sec.4 [#173](https://github.com/openshift/azure-disk-csi-driver/pull/173)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d...dbdd192b5b8d2dc28bc7587a4e8943f2efe557b9)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/ba741f7bf4301218bf1d4cbd0be932c567a11e78)

* [OCPBUGS-103260](https://issues.redhat.com/browse/OCPBUGS-103260): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#214](https://github.com/openshift/machine-api-provider-azure/pull/214)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/439c54987c20d056ae23681d456e4e7f6a68c96d...ba741f7bf4301218bf1d4cbd0be932c567a11e78)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/132cf08cf64b691fb586698e7610cf20287bc9d6)

* [OCPBUGS-103156](https://issues.redhat.com/browse/OCPBUGS-103156): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#64](https://github.com/openshift/azure-workload-identity/pull/64)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/6707f899c269e98a102ac72900bb96fa826ba652...132cf08cf64b691fb586698e7610cf20287bc9d6)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e)

* [OCPBUGS-103154](https://issues.redhat.com/browse/OCPBUGS-103154): Bump golang.org/x/net to v0.35.0-sec.4 [#10972](https://github.com/openshift/installer/pull/10972)
* [OCPBUGS-89851](https://issues.redhat.com/browse/OCPBUGS-89851), [OCPBUGS-89856](https://issues.redhat.com/browse/OCPBUGS-89856), [OCPBUGS-89859](https://issues.redhat.com/browse/OCPBUGS-89859), [OCPBUGS-92861](https://issues.redhat.com/browse/OCPBUGS-92861): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.4 [#10906](https://github.com/openshift/installer/pull/10906)
* [OCPBUGS-127575](https://issues.redhat.com/browse/OCPBUGS-127575): Update gcloud version to one that can be found [#10917](https://github.com/openshift/installer/pull/10917)
* [Full changelog](https://github.com/openshift/installer/compare/9ec9970b481951b96950d01a94f44a8c7344bf5b...eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/e03f273e515f919d14a718c1cb5e3b1dce236848)

* [OCPBUGS-103159](https://issues.redhat.com/browse/OCPBUGS-103159): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#409](https://github.com/openshift/baremetal-runtimecfg/pull/409)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/745189508eec80ee07a921d1b2c227812db37237...e03f273e515f919d14a718c1cb5e3b1dce236848)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/28d0040e8fb48bd4b2ca492e01ebd0f168487adb)

* [OCPBUGS-102061](https://issues.redhat.com/browse/OCPBUGS-102061), [OCPBUGS-103161](https://issues.redhat.com/browse/OCPBUGS-103161): Use patched x/net fork v0.35.0-sec.4 [#2417](https://github.com/openshift/oc/pull/2417)
* [Full changelog](https://github.com/openshift/oc/compare/7189593997f243911aeeb6e473e76d5ad0fd1e50...28d0040e8fb48bd4b2ca492e01ebd0f168487adb)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/251bf348b980326ae2edaf16f27e70d73cecb030)

* [OCPBUGS-103168](https://issues.redhat.com/browse/OCPBUGS-103168): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#989](https://github.com/openshift/cluster-authentication-operator/pull/989)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9f93cafccca989417378a804f134f68fb4fea40d...251bf348b980326ae2edaf16f27e70d73cecb030)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/519676b249b496a573f6e28f34890420529c61e0)

* [OCPBUGS-103170](https://issues.redhat.com/browse/OCPBUGS-103170): Use patched x/net fork v0.35.0-sec.4 [#672](https://github.com/openshift/cluster-baremetal-operator/pull/672)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/16ed4727250a72342b3da7b280d3456f7055a6c9...519676b249b496a573f6e28f34890420529c61e0)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/fe105e6bc242b77274a9364de13a605402de5b0b)

* [OCPBUGS-103176](https://issues.redhat.com/browse/OCPBUGS-103176): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#514](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/514)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1...fe105e6bc242b77274a9364de13a605402de5b0b)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/a07cc2b522f7f78ee985a33118b5f93c9c2bde8f)

* [OCPBUGS-103180](https://issues.redhat.com/browse/OCPBUGS-103180): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#292](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/292)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/ffba005bf839897b173cb76d0bb561dcf9c7215c...a07cc2b522f7f78ee985a33118b5f93c9c2bde8f)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/5b929d9b9f3c6c034cb90ddd405d8725fbac56d4)

* [OCPBUGS-103178](https://issues.redhat.com/browse/OCPBUGS-103178): Use patched x/net fork v0.35.0-sec.4 [#494](https://github.com/openshift/cluster-dns-operator/pull/494)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/81507f04686df3e16793b270084ead0a2a67fb38...5b929d9b9f3c6c034cb90ddd405d8725fbac56d4)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1dc16edfad74463e003c473613672236ba0cf6f1)

* [OCPBUGS-103181](https://issues.redhat.com/browse/OCPBUGS-103181): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#1696](https://github.com/openshift/cluster-etcd-operator/pull/1696)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/bfffdcbac76071143cf554785ca2bde0ac69ac7e...1dc16edfad74463e003c473613672236ba0cf6f1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a7c640c2be82d1918dcf3ac91b0e6362e8e8864a)

* [OCPBUGS-103173](https://issues.redhat.com/browse/OCPBUGS-103173): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#2300](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2300)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/84e19b2149ab818a455b00717d790856c13ea387...a7c640c2be82d1918dcf3ac91b0e6362e8e8864a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/91fe72a64d195b68b2c076f62e0513946a09e09b)

* [OCPBUGS-103172](https://issues.redhat.com/browse/OCPBUGS-103172): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#962](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/962)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/12f60539287eda85e99efbdcf85a1ecf59e021fa...91fe72a64d195b68b2c076f62e0513946a09e09b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515)

* [OCPBUGS-103171](https://issues.redhat.com/browse/OCPBUGS-103171): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#670](https://github.com/openshift/cluster-kube-scheduler-operator/pull/670)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/013ff606240919fcb46eb9a8b707598a9b049ee5...64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc)

* [OCPBUGS-129160](https://issues.redhat.com/browse/OCPBUGS-129160): don't delete admin-owned Alertmanager secrets on destroy [#3143](https://github.com/openshift/cluster-monitoring-operator/pull/3143)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#3110](https://github.com/openshift/cluster-monitoring-operator/pull/3110)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/3fd302e8d550c9d3fb02533a9c60956484a6db2d...1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/9bdb00434f4b2977ad7d7868f3656c43abadece2)

* [OCPBUGS-103193](https://issues.redhat.com/browse/OCPBUGS-103193): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#246](https://github.com/openshift/cluster-olm-operator/pull/246)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/f289edc3bb99197984aa392b13dfef07b075bcce...9bdb00434f4b2977ad7d7868f3656c43abadece2)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6fa6dfc70a6301451094b0e2f8f6be94d22816a2)

* [OCPBUGS-129480](https://issues.redhat.com/browse/OCPBUGS-129480): Restrict samples operator access to the global pull-secret [#733](https://github.com/openshift/cluster-samples-operator/pull/733)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/1d2ba42214637c7ed7e5e3e0aec257e9b949d061...6fa6dfc70a6301451094b0e2f8f6be94d22816a2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a3da8d647911554718b28762e5d2a9829acc4602)

* [OCPBUGS-103187](https://issues.redhat.com/browse/OCPBUGS-103187): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#734](https://github.com/openshift/cluster-storage-operator/pull/734)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a039f8a2e73771f76e799ed497535705037f3bf5...a3da8d647911554718b28762e5d2a9829acc4602)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/367d573e56de4f3dbe88a97ec515bd5acecbe141)

* [OCPBUGS-103186](https://issues.redhat.com/browse/OCPBUGS-103186): Bump golang.org/x/net to v0.35.0-sec.3 [#1460](https://github.com/openshift/cluster-version-operator/pull/1460)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b855c68099755979a053f60a49300d3502f44325...367d573e56de4f3dbe88a97ec515bd5acecbe141)


### [console](https://github.com/openshift/console/tree/c61250ec246c8990b9f8474fbf4ba30259143323)

* [OCPBUGS-127155](https://issues.redhat.com/browse/OCPBUGS-127155): [release-4.17] inkify-it: Denial of Service via crafted mailto: links [#17382](https://github.com/openshift/console/pull/17382)
* [Full changelog](https://github.com/openshift/console/compare/b61b5d90e1cd21fe13b05dc2d164c7d84627e358...c61250ec246c8990b9f8474fbf4ba30259143323)


### [console-operator](https://github.com/openshift/console-operator/tree/22228bba3d9289e11282f907e2278724df09b315)

* [OCPBUGS-103205](https://issues.redhat.com/browse/OCPBUGS-103205): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#1224](https://github.com/openshift/console-operator/pull/1224)
* [Full changelog](https://github.com/openshift/console-operator/compare/e8032813321ac4c2daec869a7703c31cd9b2acf4...22228bba3d9289e11282f907e2278724df09b315)


### [coredns](https://github.com/openshift/coredns/tree/532fc381de0b06d1e11715ed16ffc4f4e263b078)

* [OCPBUGS-103200](https://issues.redhat.com/browse/OCPBUGS-103200): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#206](https://github.com/openshift/coredns/pull/206)
* [Full changelog](https://github.com/openshift/coredns/compare/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567...532fc381de0b06d1e11715ed16ffc4f4e263b078)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/83846faf670b4d253debe6b6dbca996b605843b5)

* [OCPBUGS-103277](https://issues.redhat.com/browse/OCPBUGS-103277), [OCPBUGS-103279](https://issues.redhat.com/browse/OCPBUGS-103279): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork- #421 [#421](https://github.com/openshift/cloud-provider-openstack/pull/421)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/3358ea3f5ed8835aa760ee5cf02b9980bcdeb528...83846faf670b4d253debe6b6dbca996b605843b5)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/af4b4f2020919dd1035e20af7f4da90e66b4d73c)

* [OCPBUGS-103201](https://issues.redhat.com/browse/OCPBUGS-103201): Use patched x/net fork v0.35.0-sec.4 [#263](https://github.com/openshift/csi-driver-manila-operator/pull/263)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8...af4b4f2020919dd1035e20af7f4da90e66b4d73c)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/26244f2233c9627bef9dd8c3ba87e9301bf02e4a)

* [OCPBUGS-103210](https://issues.redhat.com/browse/OCPBUGS-103210): Bump golang.org/x/net to v0.35.0-sec.4 [#116](https://github.com/openshift/csi-external-attacher/pull/116)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/8d93b8a3560410cb2ff3dd6d285fea822720edd4...26244f2233c9627bef9dd8c3ba87e9301bf02e4a)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/4aef9e77fe00ca2665bd2ed4995109618f367369)

* [OCPBUGS-92864](https://issues.redhat.com/browse/OCPBUGS-92864): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.5 to address CVE-2026-46597 [#162](https://github.com/openshift/csi-external-provisioner/pull/162)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/88d1fdf1716d5d69bc88fdab27677185b440e155...4aef9e77fe00ca2665bd2ed4995109618f367369)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9)

* [OCPBUGS-80084](https://issues.redhat.com/browse/OCPBUGS-80084): Patching openshift-sustaining/grpc-go v1.71.3-sec.1 [#204](https://github.com/openshift/csi-external-resizer/pull/204)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/96012dea4582fd44513410d90b6db640fce5613a...f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/cc5ce2e5028f15429772766f6a5f4a2f93d26505)

* [OCPBUGS-103212](https://issues.redhat.com/browse/OCPBUGS-103212), [OCPBUGS-103215](https://issues.redhat.com/browse/OCPBUGS-103215): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#229](https://github.com/openshift/csi-external-snapshotter/pull/229)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c...cc5ce2e5028f15429772766f6a5f4a2f93d26505)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b)

* [OCPBUGS-103203](https://issues.redhat.com/browse/OCPBUGS-103203): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#110](https://github.com/openshift/csi-livenessprobe/pull/110)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/e7d841dc545b9fb3a8a3303b8cac62d35620905b...6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b)


### [docker-builder](https://github.com/openshift/builder/tree/865c79826e67f14dbce7cb0a21313bbb82b1fad0)

* [OCPBUGS-89852](https://issues.redhat.com/browse/OCPBUGS-89852), [OCPBUGS-90297](https://issues.redhat.com/browse/OCPBUGS-90297), [OCPBUGS-92380](https://issues.redhat.com/browse/OCPBUGS-92380), [OCPBUGS-92577](https://issues.redhat.com/browse/OCPBUGS-92577), [OCPBUGS-92854](https://issues.redhat.com/browse/OCPBUGS-92854): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#548](https://github.com/openshift/builder/pull/548)
* [Full changelog](https://github.com/openshift/builder/compare/12fc732cf6c3f344d87b30e4a7927811ef943fab...865c79826e67f14dbce7cb0a21313bbb82b1fad0)


### [docker-registry](https://github.com/openshift/image-registry/tree/13618f00551d5dcf9fba8e902682171f6fa67cc1)

* [OCPBUGS-103223](https://issues.redhat.com/browse/OCPBUGS-103223): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#481](https://github.com/openshift/image-registry/pull/481)
* [Full changelog](https://github.com/openshift/image-registry/compare/d0595c9e720caa5489628e49ed45a8eb85fa7b69...13618f00551d5dcf9fba8e902682171f6fa67cc1)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/395139386026bba828ca05c8bfed666dad91fac5)

* [OCPBUGS-103235](https://issues.redhat.com/browse/OCPBUGS-103235): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#144](https://github.com/openshift/gcp-pd-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/907b8422fcdcb0f895c5a92bb796a93d6aed23b1...395139386026bba828ca05c8bfed666dad91fac5)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3dc9a86d0324e5ba5c6c28306cfc30405bd8f067)

* [OCPBUGS-103225](https://issues.redhat.com/browse/OCPBUGS-103225): Use patched x/net fork v0.35.0-sec.4 [#217](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/217)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/5f27231835491f40506353f04b5a895773a1b53a...3dc9a86d0324e5ba5c6c28306cfc30405bd8f067)


### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/653b08cc6e4833118d13fc1a1862174030721451)

* [OCPBUGS-103230](https://issues.redhat.com/browse/OCPBUGS-103230): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#27](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/27)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62...653b08cc6e4833118d13fc1a1862174030721451)


### [haproxy-router](https://github.com/openshift/router/tree/2f5cbd9eee4856abceeace9be26b26f51f806157)

* [OCPBUGS-103220](https://issues.redhat.com/browse/OCPBUGS-103220): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#845](https://github.com/openshift/router/pull/845)
* [Full changelog](https://github.com/openshift/router/compare/216fb937c4d84bdad2c44e2659e4a69235d062fc...2f5cbd9eee4856abceeace9be26b26f51f806157)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/cbb83c80af4c43d17eab5d8828706b67e4337294)

* [OCPBUGS-136162](https://issues.redhat.com/browse/OCPBUGS-136162): Fix kubeadm preflight host URL construction [#2842](https://github.com/openshift/kubernetes/pull/2842)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4e295fa517e17429af4d8004e7a8028fe719e60f...cbb83c80af4c43d17eab5d8828706b67e4337294)


### [hypershift](https://github.com/openshift/hypershift/tree/16a7b50a548e2f9951395ff64c6f0b0825401ed6)

* Sync approver aliases with main for release-4.17 [#10188](https://github.com/openshift/hypershift/pull/10188)
* [Full changelog](https://github.com/openshift/hypershift/compare/858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2...16a7b50a548e2f9951395ff64c6f0b0825401ed6)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/b6fd9e7d13470be831e31b238eea82a7d5f6b54b)

* [OCPBUGS-120696](https://issues.redhat.com/browse/OCPBUGS-120696): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#115](https://github.com/openshift/cloud-provider-ibm/pull/115)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/ad8f7eb0ffba27fa8db8ad3692f530728312ad06...b6fd9e7d13470be831e31b238eea82a7d5f6b54b)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/0946d079c4b73c6e51d6b53c21608f2488016785)

* [OCPBUGS-103222](https://issues.redhat.com/browse/OCPBUGS-103222): Use patched x/net fork v0.35.0-sec.4 [#188](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/188)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/ee301303640e89a985108bf3b055051a644b5c37...0946d079c4b73c6e51d6b53c21608f2488016785)


### [insights-operator](https://github.com/openshift/insights-operator/tree/99dfadcb53e5dd2944eed17d0d83829247142924)

* [OCPBUGS-103241](https://issues.redhat.com/browse/OCPBUGS-103241): Bump golang.org/x/net to v0.35.0-sec.3 [#1356](https://github.com/openshift/insights-operator/pull/1356)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2e91ecb38e819b2b191553461ff5dc61359115c9...99dfadcb53e5dd2944eed17d0d83829247142924)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/df9ac95276c08cff0b295c3eeb52c835abf95900)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#89](https://github.com/openshift/kubernetes-metrics-server/pull/89)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/120aa708f669b7d771a6c2ada9cccad45fb98521...df9ac95276c08cff0b295c3eeb52c835abf95900)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/748de1c0867b7b29b5a9cc00ef34d845c5554529)

* [OCPBUGS-103237](https://issues.redhat.com/browse/OCPBUGS-103237): Use patched x/net fork v0.35.0-sec.4 [#163](https://github.com/openshift/kube-state-metrics/pull/163)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#186](https://github.com/openshift/kube-state-metrics/pull/186)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/b40c02a5fe525b1a69e1cf2dbada18e28a4ccd1e...748de1c0867b7b29b5a9cc00ef34d845c5554529)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d3564c17a7e52bdf5f92d78948ef814973ee126d)

* [OCPBUGS-103256](https://issues.redhat.com/browse/OCPBUGS-103256): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#1546](https://github.com/openshift/machine-api-operator/pull/1546)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/2eb3ca6e5bb9b245c34b5df6c9ab5961e0f371fc...d3564c17a7e52bdf5f92d78948ef814973ee126d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/dce858fb2ef61223e31d8c8c8548b841ff6e9d82)

* [OCPBUGS-103252](https://issues.redhat.com/browse/OCPBUGS-103252): Use patched x/net fork v0.35.0-sec.4 [#6578](https://github.com/openshift/machine-config-operator/pull/6578)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/3bdd678e83da52e0754b393b82435eea968af3ed...dce858fb2ef61223e31d8c8c8548b841ff6e9d82)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d8ca7944618f2ecf08e5edfccf361e462e018147)

* [OCPBUGS-103246](https://issues.redhat.com/browse/OCPBUGS-103246): Use patched x/net fork v0.35.0-sec.4 [#192](https://github.com/openshift/image-customization-controller/pull/192)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/03af8514abbbd588bcc5514ff591b769d1241c09...d8ca7944618f2ecf08e5edfccf361e462e018147)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/581000c8b25998d88d8db83f593717a6d6562fd8)

* [OCPBUGS-118233](https://issues.redhat.com/browse/OCPBUGS-118233): [release-4.17] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 [#1336](https://github.com/openshift/monitoring-plugin/pull/1336)
* [OCPBUGS-98777](https://issues.redhat.com/browse/OCPBUGS-98777): [release-4.17] replace outdated react-linkify dependency [#1343](https://github.com/openshift/monitoring-plugin/pull/1343)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ffd758f816979228ae5f5d8ec526e74efcbf149a...581000c8b25998d88d8db83f593717a6d6562fd8)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/afc6978cc2f88eea447fc10aea47078df8093ed1)

* [OCPBUGS-103264](https://issues.redhat.com/browse/OCPBUGS-103264): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#135](https://github.com/openshift/multus-admission-controller/pull/135)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/041b743a1172af3c8ace0cf046fe95bda7a9d5a2...afc6978cc2f88eea447fc10aea47078df8093ed1)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/184062f842c56ca62bd6603aa77a89160a6b3e0f)

* [OCPBUGS-103255](https://issues.redhat.com/browse/OCPBUGS-103255), [OCPBUGS-103257](https://issues.redhat.com/browse/OCPBUGS-103257): [release-4.17]  Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#358](https://github.com/openshift/multus-cni/pull/358)
* [Full changelog](https://github.com/openshift/multus-cni/compare/659299d118afc196d66b16a7714e17e6d11d0669...184062f842c56ca62bd6603aa77a89160a6b3e0f)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/88dbfcd26d195b90fea2dca4200509a29a65ecee)

* [OCPBUGS-103254](https://issues.redhat.com/browse/OCPBUGS-103254): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#154](https://github.com/openshift/network-metrics-daemon/pull/154)
* [OCPBUGS-130598](https://issues.redhat.com/browse/OCPBUGS-130598): add ./bin to PATH in check_golint.sh [#162](https://github.com/openshift/network-metrics-daemon/pull/162)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f56bbf7af25fbae200c966378337db85c6b17126...88dbfcd26d195b90fea2dca4200509a29a65ecee)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0)

* [OCPNETUI-168](https://issues.redhat.com/browse/OCPNETUI-168): Update Owners file [#646](https://github.com/openshift/networking-console-plugin/pull/646)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/02524de642295b592ad52235f9e2d6e22edf92ff...4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/994f90899b6535140c535476f09aef88d4c1e8b6)

* [OCPBUGS-103267](https://issues.redhat.com/browse/OCPBUGS-103267): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#225](https://github.com/openshift/oauth-apiserver/pull/225)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e078aeb29048d2b37e0b8e2657641a9207fd4d84...994f90899b6535140c535476f09aef88d4c1e8b6)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14)

* [OCPBUGS-136604](https://issues.redhat.com/browse/OCPBUGS-136604): [release-4.17] Sync OWNERS and OWNERS_ALIASES with master [#402](https://github.com/openshift/oauth-proxy/pull/402)
* [OCPBUGS-112108](https://issues.redhat.com/browse/OCPBUGS-112108): bugfix: rewrite open redirect strings to '/' [#385](https://github.com/openshift/oauth-proxy/pull/385)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/484a750a66e287c751116d4384b37281c9951a26...62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0b4554d1a571ecf1659b821e337bd48bb048e297)

* [OCPBUGS-103265](https://issues.redhat.com/browse/OCPBUGS-103265): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#280](https://github.com/openshift/oauth-server/pull/280)
* [OCPBUGS-87070](https://issues.redhat.com/browse/OCPBUGS-87070): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#273](https://github.com/openshift/oauth-server/pull/273)
* [Full changelog](https://github.com/openshift/oauth-server/compare/be35f2dd002c1b655397207edf65c112aa59388c...0b4554d1a571ecf1659b821e337bd48bb048e297)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/88cc22ff4099e072fb771cf897c602ca15620330)

* [OCPBUGS-130910](https://issues.redhat.com/browse/OCPBUGS-130910): v1 accept catalog root entries and relative symlink targets [#1595](https://github.com/openshift/oc-mirror/pull/1595)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/58375b70881938be8a1e08750507e4a40943f6fd...88cc22ff4099e072fb771cf897c602ca15620330)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/fa8d10c53339688c290fe3e8867df7124de04c42)

* [OCPBUGS-103266](https://issues.redhat.com/browse/OCPBUGS-103266), [OCPBUGS-103269](https://issues.redhat.com/browse/OCPBUGS-103269): Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#805](https://github.com/openshift/operator-framework-operator-controller/pull/805)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/795b313c5a491efe27207e5b3988ec9ba6f5378e...fa8d10c53339688c290fe3e8867df7124de04c42)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9)

* [OCPBUGS-103272](https://issues.redhat.com/browse/OCPBUGS-103272): Use patched x/net fork v0.35.0-sec.4 [#456](https://github.com/openshift/openshift-controller-manager/pull/456)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/967faa66125ae77148df87d8394d07112c4c0b8c...9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/ebe70417102d920f9c6b461c6885ddccd6939956)

* NO-ISSUE: synchronize OWNERS from main branch [#150](https://github.com/openshift/openshift-state-metrics/pull/150)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/adf649209467aef8d5da1d17851fa991285edbc2...ebe70417102d920f9c6b461c6885ddccd6939956)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1)

* [OCPBUGS-103280](https://issues.redhat.com/browse/OCPBUGS-103280): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#196](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/196)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/00ba71fd3736b00d019383fce2ec74a9c5f9414c...3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/12f4e7e12f583767c8e9549408e36bbf4000b1b4)

* [OCPBUGS-128826](https://issues.redhat.com/browse/OCPBUGS-128826): node: fix serviceUpdateNotNeeded nil pointer comparison [#3496](https://github.com/openshift/ovn-kubernetes/pull/3496)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/1e6f18e10f9ede7b91c3bd6039874c64b4e7a04a...12f4e7e12f583767c8e9549408e36bbf4000b1b4)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/06ec4e3af0f27ae6e8ece0d31ff1e802b7d08a50)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#403](https://github.com/openshift/prom-label-proxy/pull/403)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/c84c4898843d6a1b0d16a59e3c42d99d1f636c43...06ec4e3af0f27ae6e8ece0d31ff1e802b7d08a50)


### [prometheus](https://github.com/openshift/prometheus/tree/8b2b70879280211b7ebd0b44ea02bddc2cba825e)

* [OCPBUGS-93681](https://issues.redhat.com/browse/OCPBUGS-93681): fix for CVE-2026-42151 [#378](https://github.com/openshift/prometheus/pull/378)
* NO-ISSUE: synchronize OWNERS from main branch [#383](https://github.com/openshift/prometheus/pull/383)
* [Full changelog](https://github.com/openshift/prometheus/compare/fe618870fc6bf9a317c63f368534cd3cb821166e...8b2b70879280211b7ebd0b44ea02bddc2cba825e)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/bed9c9bd31940eeed0e082906a581bac40a3f7aa)

* NO-JIRA: synchronize OWNERS with main [#196](https://github.com/openshift/prometheus-alertmanager/pull/196)
* [OCPBUGS-103294](https://issues.redhat.com/browse/OCPBUGS-103294): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#173](https://github.com/openshift/prometheus-alertmanager/pull/173)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/f0c0bc1bf03c4d7ba0a4828c5d89716c3c0a8fac...bed9c9bd31940eeed0e082906a581bac40a3f7aa)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/4db03df9eab1a25ff35839bb5f55b7302cf57620)

* NO-ISSUE: synchronize OWNERS from main branch [#416](https://github.com/openshift/prometheus-operator/pull/416)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/2c3a4e92762622587fe91f9f8d6de4f564a968e4...4db03df9eab1a25ff35839bb5f55b7302cf57620)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/a44c23e9d59e133d5572ef885edcf26e070b612d)

* [OCPBUGS-103292](https://issues.redhat.com/browse/OCPBUGS-103292): Use patched x/net fork v0.35.0-sec.4 [#195](https://github.com/openshift/node_exporter/pull/195)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#212](https://github.com/openshift/node_exporter/pull/212)
* [Full changelog](https://github.com/openshift/node_exporter/compare/8f095361ae68660fbcf0c3e32020a3df9568ae90...a44c23e9d59e133d5572ef885edcf26e070b612d)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/b5f700bef062d92668927de6817aeea62646fff6)

* [OCPBUGS-103135](https://issues.redhat.com/browse/OCPBUGS-103135): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#111](https://github.com/openshift/route-controller-manager/pull/111)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1e53205fa2e239df3c39a78bb50fddce77b4f3e1...b5f700bef062d92668927de6817aeea62646fff6)


### [tests](https://github.com/openshift/origin/tree/187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5)

* [OCPBUGS-130857](https://issues.redhat.com/browse/OCPBUGS-130857): stage the creation of test pods to minimize etcd impact [#31741](https://github.com/openshift/origin/pull/31741)
* [Full changelog](https://github.com/openshift/origin/compare/5abe37f6f7844abc4d088595c0631734fb46864c...187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/66ce0793ef84bd539977a9c6efd94515ece2d1ae)

* [OCPBUGS-103318](https://issues.redhat.com/browse/OCPBUGS-103318): Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.17 [#136](https://github.com/openshift/cloud-provider-vsphere/pull/136)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/da096b41a79e2216f643ea2addc49a571116e7d5...66ce0793ef84bd539977a9c6efd94515ece2d1ae)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/0a92f5df58c7679bbdc701b3ab260795033dd4e0)

* [OCPBUGS-92391](https://issues.redhat.com/browse/OCPBUGS-92391): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.6 [#232](https://github.com/openshift/vmware-vsphere-csi-driver/pull/232)
* [OCPBUGS-103314](https://issues.redhat.com/browse/OCPBUGS-103314), [OCPBUGS-103319](https://issues.redhat.com/browse/OCPBUGS-103319): Use patched x/net fork v0.35.0-sec.4 [#209](https://github.com/openshift/vmware-vsphere-csi-driver/pull/209)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/2c4c4710da37239a772ac666b2be8291fc0b2006...0a92f5df58c7679bbdc701b3ab260795033dd4e0)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/a852a536a0a4232153dff37b889075748dfa049b)

* [OCPBUGS-103315](https://issues.redhat.com/browse/OCPBUGS-103315): Bump golang.org/x/net to v0.35.0-sec.3 [#357](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/357)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d...a852a536a0a4232153dff37b889075748dfa049b)