# 4.18.0-rc.6

Created: 2025-01-23 16:28:08 +0000 UTC

Image Digest: `sha256:1d261c178ac128e85455f370a78f3fea4492cd5c0367888933fe3a5b48c43c84`


## Changes from 4.18.0-rc.4

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.3 to 1.31.4
* Kubernetes Tests 1.31.1
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202501072146-0 to 418.94.202501221327-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [e5a40059](https://github.com/openshift/assisted-service/commit/e5a400590fed00f895a08245ef70df00ae97f28f) `sha256:6397d99e87606adf5c9bc7cf22c813b703e52ebbd484ec8b9bfb70e91a9e50e3`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [5348c85c](https://github.com/openshift/assisted-installer/commit/5348c85cd03dddf1852873c6bb2f08aff3b0630e) `sha256:6ffc1bdfd861be87552305596fc31845d775e4aa0bdfa4ccdb0700aa43a7201c`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:f4e9d8257b0613827d97af8b68f406021ce30d3314c50c658127915daa6fbafe`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [04c22eee](https://github.com/openshift/ironic-rhcos-downloader/commit/04c22eee43786b4a8bc53441b7e8173372251bd8) `sha256:d74706f9529bc8c9d6fda407e353ae389e751b8f7543016af93efee7e67bb3a1`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [526498ab](https://github.com/openshift/kube-rbac-proxy/commit/526498ab32996a0f67a96530ad7173f955e3fbe2) `sha256:891711f2a1d882a201e9e423b51aab2a500e9404efac0161364ed1815c870fd7`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [6d082d80](https://github.com/openshift/machine-os-images/commit/6d082d8041b06d062f95dd2ad1445150f2c0b305) `sha256:d142d93efb617fc950d589e05662614d6dc108e79508814ab1c6d02e74f76fd4`
* rhel-coreos `sha256:4753866955933dbd31d87c9f58fbf8f346f9d907381f9016d4790d7945308426`
* rhel-coreos-extensions `sha256:aedffd04a85cba865d289339709bcc87503640001a020829b9ef80e6f546fc2f`


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/51a74acb3f2e56bbeb1ffbe33cb3c5cf808a2512)

* OCPBUGS_45910: s390x: Fix cpu clockspeed and use Maschine Type for Model Name (#888) [#888](https://github.com/openshift/assisted-installer-agent/pull/888)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/226161bfce662da28738aef3de6ed984cab8aa89...51a74acb3f2e56bbeb1ffbe33cb3c5cf808a2512)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/f83c8d16e4bb6ab44b7c1a7ea8ab785395bac174)

* [OCPBUGS-48682](https://issues.redhat.com/browse/OCPBUGS-48682): Rebase to upstream v1.31.1 for OCP 4.18 and downgrade golang to 1.22 [#95](https://github.com/openshift/azure-disk-csi-driver/pull/95)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/dcf47660bacecf44e7e8054b253613e17f9a2be5...f83c8d16e4bb6ab44b7c1a7ea8ab785395bac174)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec)

* [OCPBUGS-47050](https://issues.redhat.com/browse/OCPBUGS-47050): Bump x/net to 0.33.0 [#31](https://github.com/openshift/cluster-api-provider-metal3/pull/31)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/7baca400194bc3a71cde1577fe682be2261c17d4...7ec03e9408ff7973e461da5330e1f2b63dc5e0ec)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/cbdafda290779ee90b6b3e870016f307e42cf501)

* [OCPBUGS-48581](https://issues.redhat.com/browse/OCPBUGS-48581): Run iscsiadm for agent-based iSCSI installations [#9379](https://github.com/openshift/installer/pull/9379)
* [OCPBUGS-48611](https://issues.redhat.com/browse/OCPBUGS-48611): Destroy all private cluster backend service resources [#9380](https://github.com/openshift/installer/pull/9380)
* [OCPBUGS-48451](https://issues.redhat.com/browse/OCPBUGS-48451): wait for at least 3 kube-apiserver instances [#9372](https://github.com/openshift/installer/pull/9372)
* [OCPBUGS-48576](https://issues.redhat.com/browse/OCPBUGS-48576): azure: use separate /var to avoid growfs timeouts [#9378](https://github.com/openshift/installer/pull/9378)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Update MCS Cert and Key files within bootstrap Ignition with UserProvisionedDNS [#9348](https://github.com/openshift/installer/pull/9348)
* [OCPBUGS-46391](https://issues.redhat.com/browse/OCPBUGS-46391): node-joiner PXE artifacts should be prefixed "node" [#9316](https://github.com/openshift/installer/pull/9316)
* [OCPBUGS-48240](https://issues.redhat.com/browse/OCPBUGS-48240): remove the types which failed by RHEL-59521 and add the new gpu vm type [#9351](https://github.com/openshift/installer/pull/9351)
* [OCPBUGS-48187](https://issues.redhat.com/browse/OCPBUGS-48187): Allow more time for Service Account Creation [#9347](https://github.com/openshift/installer/pull/9347)
* [OCPBUGS-48164](https://issues.redhat.com/browse/OCPBUGS-48164): Remove narrow timeout from etcd bootstrap member removal gate. [#9344](https://github.com/openshift/installer/pull/9344)
* [OCPBUGS-48118](https://issues.redhat.com/browse/OCPBUGS-48118): Always set AllowCrossTenantReplication parameter to false [#9345](https://github.com/openshift/installer/pull/9345)
* [OCPBUGS-46033](https://issues.redhat.com/browse/OCPBUGS-46033): Power VS: Create region-zone-sysType hierarchy [#9303](https://github.com/openshift/installer/pull/9303)
* [OCPBUGS-45870](https://issues.redhat.com/browse/OCPBUGS-45870): Wait for etcd bootstrap member removal [#9293](https://github.com/openshift/installer/pull/9293)
* [Full changelog](https://github.com/openshift/installer/compare/de916442654be5a846cbe7228d74512311fcca28...cbdafda290779ee90b6b3e870016f307e42cf501)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7)

* [OCPBUGS-46644](https://issues.redhat.com/browse/OCPBUGS-46644): Bump x/net to 0.33.0 [#224](https://github.com/openshift/cluster-api-provider-baremetal/pull/224)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/c34826a6b5c3b007a3941bfa71300b33709b041d...1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/9e2015c30f48013e895eb8dfc43695780e0d9162)

* [OCPBUGS-47687](https://issues.redhat.com/browse/OCPBUGS-47687): Extend haproxy-monitor fall time [#337](https://github.com/openshift/baremetal-runtimecfg/pull/337)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4dac0e7e50bd8a20159e7943292d9b06dbe4ff58...9e2015c30f48013e895eb8dfc43695780e0d9162)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/fd653741e664d1f498af2885f4f2f48cd401677e)

* [OCPBUGS-46362](https://issues.redhat.com/browse/OCPBUGS-46362): Mark --report and --pxe flags as experimental [#1953](https://github.com/openshift/oc/pull/1953)
* [Full changelog](https://github.com/openshift/oc/compare/5e62301694fdb1723bac4b293948b1bbb11cab21...fd653741e664d1f498af2885f4f2f48cd401677e)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/4674e81c349b841a139af8a5b5041722ec2f7b2f)

* [OCPBUGS-46416](https://issues.redhat.com/browse/OCPBUGS-46416): UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#333](https://github.com/openshift/kubernetes-autoscaler/pull/333)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/44d929e81fcf812ebfa357bb5470a9c515e2c338...4674e81c349b841a139af8a5b5041722ec2f7b2f)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/4e26a69d2740029b37469c5677a5ed0f129eed8f)

* [OCPBUGS-48429](https://issues.redhat.com/browse/OCPBUGS-48429): fix: always update clusteroperator status versions when differing [#249](https://github.com/openshift/cluster-capi-operator/pull/249)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/ec9120bb11ace966a9046ad8e698216f8abf5c42...4e26a69d2740029b37469c5677a5ed0f129eed8f)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/46902b494ed0a608a48d2a04faf6e4ed2f9a6a5b)

* [OCPBUGS-48405](https://issues.redhat.com/browse/OCPBUGS-48405): Enable volume groupsnapshots APIs  v1beta1 version [#224](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/224)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/42ed4cc366a40c28b22e0aea02ba8075dc2831eb...46902b494ed0a608a48d2a04faf6e4ed2f9a6a5b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/01d5fbbe0bb798db32e5168dde46e6ed0c873b36)

* [OCPBUGS-48081](https://issues.redhat.com/browse/OCPBUGS-48081): Fix race condition in CO status controller test [#265](https://github.com/openshift/cluster-machine-approver/pull/265)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/171587af094f3b05a74fdf1bc012486090865400...01d5fbbe0bb798db32e5168dde46e6ed0c873b36)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/9852f98d559a7153213164e3518ffd6576b47b87)

* [OCPBUGS-48127](https://issues.redhat.com/browse/OCPBUGS-48127): Fixing telemetry rule for accelerators [#2552](https://github.com/openshift/cluster-monitoring-operator/pull/2552)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9b0b5d0796d06f6efab0b74fa067a7456cfbe4f9...9852f98d559a7153213164e3518ffd6576b47b87)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/90fc6ab88c08cfc23778ea5377de0a216854580d)

* Add missing Polarion test case id (#1283) [#1283](https://github.com/openshift/cluster-node-tuning-operator/pull/1283)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/1dfad671f8162aa74d1b3ceabd6de3732334dbaf...90fc6ab88c08cfc23778ea5377de0a216854580d)


### [console](https://github.com/openshift/console/tree/156e453d91b70790eddbfd19be6fd362848ac759)

* [OCPBUGS-48122](https://issues.redhat.com/browse/OCPBUGS-48122): Limit payload size of GQL query [#14666](https://github.com/openshift/console/pull/14666)
* [OCPBUGS-45206](https://issues.redhat.com/browse/OCPBUGS-45206): Filter out empty params before Shipwright build creation [#14553](https://github.com/openshift/console/pull/14553)
* [OCPBUGS-47742](https://issues.redhat.com/browse/OCPBUGS-47742): fix bug where two external link icons can appear in Op… [#14654](https://github.com/openshift/console/pull/14654)
* [OCPBUGS-45196](https://issues.redhat.com/browse/OCPBUGS-45196): Add optional build strategy params under ExpandCollapse [#14551](https://github.com/openshift/console/pull/14551)
* [OCPBUGS-48106](https://issues.redhat.com/browse/OCPBUGS-48106): fix navigation from non-General User Preference tab to… [#14665](https://github.com/openshift/console/pull/14665)
* [Full changelog](https://github.com/openshift/console/compare/9999bc3a7bf8f42435c99066c86df573a8e9e8a1...156e453d91b70790eddbfd19be6fd362848ac759)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/d7c9fea63728a4996d2b84b075d7f3def21a6340)

* [OCPBUGS-48721](https://issues.redhat.com/browse/OCPBUGS-48721): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.18 [#172](https://github.com/openshift/csi-external-snapshotter/pull/172)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Bring groupsnapshot beta feature to 4.18 [#171](https://github.com/openshift/csi-external-snapshotter/pull/171)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/f52ce8b8b0799a341caf1fb864bba5d9d040a856...d7c9fea63728a4996d2b84b075d7f3def21a6340)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/6ea235614f445951c7a4b5525f64f51548461a0d)

* [OCPBUGS-48586](https://issues.redhat.com/browse/OCPBUGS-48586): Do not check for PodCIDR when determining if node is in the default subnetwork. [#73](https://github.com/openshift/cloud-provider-gcp/pull/73)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/7b60fffb9eabb5a27163213a1e9c995357d47c4c...6ea235614f445951c7a4b5525f64f51548461a0d)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/11e2f11d1e0ce2fadc11906f2bcbba1ddbb2da2f)

* [OCPBUGS-46061](https://issues.redhat.com/browse/OCPBUGS-46061): Update to Kubernetes 1.31.4 [#2163](https://github.com/openshift/kubernetes/pull/2163)
* [OCPBUGS-44787](https://issues.redhat.com/browse/OCPBUGS-44787): add support for  the LLC alignment cpumanager policy option [#2162](https://github.com/openshift/kubernetes/pull/2162)
* [Full changelog](https://github.com/openshift/kubernetes/compare/205ac00c56dd2340b90dc0e328be84e77219197c...11e2f11d1e0ce2fadc11906f2bcbba1ddbb2da2f)


### [hypershift](https://github.com/openshift/hypershift/tree/91629455eeb27a861f5e254004766cac81d7516d)

* [OCPBUGS-48748](https://issues.redhat.com/browse/OCPBUGS-48748): correct aro azureFile config and permissions [#5459](https://github.com/openshift/hypershift/pull/5459)
* [OCPBUGS-48689](https://issues.redhat.com/browse/OCPBUGS-48689): Implement Workload Identity in Azure for Data Plane Components [#5451](https://github.com/openshift/hypershift/pull/5451)
* [OCPBUGS-48632](https://issues.redhat.com/browse/OCPBUGS-48632): Compare contents of user-ca-bundle-config.yaml to the correct configmap [#5442](https://github.com/openshift/hypershift/pull/5442)
* [OCPBUGS-48579](https://issues.redhat.com/browse/OCPBUGS-48579): Allow ARM64 arch deployment on None platform type [#5432](https://github.com/openshift/hypershift/pull/5432)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Give delete permissions to snapshot-role [#5407](https://github.com/openshift/hypershift/pull/5407)
* [OCPBUGS-48169](https://issues.redhat.com/browse/OCPBUGS-48169): Adjust the multi-arch check logic to skip the check when the payload … [#5358](https://github.com/openshift/hypershift/pull/5358)
* [OCPBUGS-46630](https://issues.redhat.com/browse/OCPBUGS-46630): kubevirt, Don't break on hostname NodePort.Address [#5317](https://github.com/openshift/hypershift/pull/5317)
* [OCPBUGS-48410](https://issues.redhat.com/browse/OCPBUGS-48410): Fix mirror reference image name when ID is set [#5393](https://github.com/openshift/hypershift/pull/5393)
* [OCPBUGS-47114](https://issues.redhat.com/browse/OCPBUGS-47114): Bump golang.org/x/crypto and golang.org/x/net [#5367](https://github.com/openshift/hypershift/pull/5367)
* [OCPBUGS-45349](https://issues.redhat.com/browse/OCPBUGS-45349): CPO fails to reconcile the SecretProviderClass for CSO on ARO HCP [#5225](https://github.com/openshift/hypershift/pull/5225)
* [OCPBUGS-46666](https://issues.redhat.com/browse/OCPBUGS-46666): Correctly Reconcile CSO CSI Secrets for Managed Azure Deployments [#5319](https://github.com/openshift/hypershift/pull/5319)
* [OCPBUGS-45524](https://issues.redhat.com/browse/OCPBUGS-45524): Implement Managed Identities in HyperShift [#5233](https://github.com/openshift/hypershift/pull/5233)
* [Full changelog](https://github.com/openshift/hypershift/compare/5101e66a266807a49fb2d5ba1826aeffbc291196...91629455eeb27a861f5e254004766cac81d7516d)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/ef05fb5528638fa81cec911cebb7333d5f1d21df)

* [OCPBUGS-48120](https://issues.redhat.com/browse/OCPBUGS-48120): Handle external managed cluster's image deletion [#97](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/97)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/df604e325594ca8bfed298f34216d216fb97beb4...ef05fb5528638fa81cec911cebb7333d5f1d21df)


### [insights-operator](https://github.com/openshift/insights-operator/tree/5c8b7154a3afb0e7eed60480bed41bbb45b413f1)

* Ignore previous status when disabling alerts (#1063) [#1063](https://github.com/openshift/insights-operator/pull/1063)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7063b929d8c55ae2e911d54afc7f87e7beb632db...5c8b7154a3afb0e7eed60480bed41bbb45b413f1)


### [ironic](https://github.com/openshift/ironic-image/tree/6aca641789426d8e49e903253e05f280ff7de0c9)

* [OCPBUGS-48150](https://issues.redhat.com/browse/OCPBUGS-48150): Bump jinja2 to 3.1.5 [#620](https://github.com/openshift/ironic-image/pull/620)
* [Full changelog](https://github.com/openshift/ironic-image/compare/87e73e9a9f48cdc3a80414c27030c4ddd6e6cdf4...6aca641789426d8e49e903253e05f280ff7de0c9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/da8e8b51fda20798d8690901f01b80eb010f34db)

* [OCPBUGS-48341](https://issues.redhat.com/browse/OCPBUGS-48341): Specify interface type when adding ovs-port [#4790](https://github.com/openshift/machine-config-operator/pull/4790)
* [OCPBUGS-48253](https://issues.redhat.com/browse/OCPBUGS-48253): use new buffer for decoding clusterOverridePolicyJSON [#4781](https://github.com/openshift/machine-config-operator/pull/4781)
* [OCPBUGS-47457](https://issues.redhat.com/browse/OCPBUGS-47457), [OCPBUGS-47458](https://issues.redhat.com/browse/OCPBUGS-47458): crio: drop crun subcgroup [#4768](https://github.com/openshift/machine-config-operator/pull/4768)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a964f19a214946f0e5f1197c545d3805393d0705...da8e8b51fda20798d8690901f01b80eb010f34db)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/abef22c13414d05240661a76a3bdd90f31c4da9f)

* [OU-633](https://issues.redhat.com/browse/OU-633): Add Needed Virtualization Changed [#318](https://github.com/openshift/monitoring-plugin/pull/318)
* [OCPBUGS-48210](https://issues.redhat.com/browse/OCPBUGS-48210): Fix Dev Perspective Alert URL namespace [#315](https://github.com/openshift/monitoring-plugin/pull/315)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/4151fd1ccd2eb500a4dff6f945f1fb9c2f6f5e49...abef22c13414d05240661a76a3bdd90f31c4da9f)


### [must-gather](https://github.com/openshift/must-gather/tree/c864494e2b10793ec1de833ade2fda7afe6a7c88)

* [OCPBUGS-48112](https://issues.redhat.com/browse/OCPBUGS-48112): Collect all clustercsidriver resources [#478](https://github.com/openshift/must-gather/pull/478)
* [Full changelog](https://github.com/openshift/must-gather/compare/1e25d7af269a0517689270c9759d26528fb52e25...c864494e2b10793ec1de833ade2fda7afe6a7c88)


### [network-tools](https://github.com/openshift/network-tools/tree/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f)

* [OCPBUGS-48199](https://issues.redhat.com/browse/OCPBUGS-48199): change containerRuntime from runc to crun [#137](https://github.com/openshift/network-tools/pull/137)
* [Full changelog](https://github.com/openshift/network-tools/compare/0116901a470a75cfb16313874c842e13319add9d...f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/b25f72dfad4b230ccf8f0d6f246efded59b0d1ba)

* [OCPBUGS-48680](https://issues.redhat.com/browse/OCPBUGS-48680): fix service name [#186](https://github.com/openshift/networking-console-plugin/pull/186)
* [CNV-55131](https://issues.redhat.com/browse/CNV-55131): remove the primary name to the udn creation form [#182](https://github.com/openshift/networking-console-plugin/pull/182)
* [CNV-54827](https://issues.redhat.com/browse/CNV-54827): fix select label on ClusterUserDefinedNetwork [#176](https://github.com/openshift/networking-console-plugin/pull/176)
* [OCPBUGS-48562](https://issues.redhat.com/browse/OCPBUGS-48562): fix path-to-regex CVE [#175](https://github.com/openshift/networking-console-plugin/pull/175)
* [CNV-54111](https://issues.redhat.com/browse/CNV-54111): mark NAD managed by UDN [#170](https://github.com/openshift/networking-console-plugin/pull/170)
* [OCPBUGS-48268](https://issues.redhat.com/browse/OCPBUGS-48268): hide udn navbar when udn is not installed [#171](https://github.com/openshift/networking-console-plugin/pull/171)
* [OCPBUGS-45877](https://issues.redhat.com/browse/OCPBUGS-45877): Bump nanoid from 3.3.7 to 3.3.8 [#167](https://github.com/openshift/networking-console-plugin/pull/167)
* [OCPBUGS-44142](https://issues.redhat.com/browse/OCPBUGS-44142): Bump dompurify from 2.4.9 to 2.5.8 [#165](https://github.com/openshift/networking-console-plugin/pull/165)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/c6c73bb75969188a987e2d24f6abb0a088f3c4da...b25f72dfad4b230ccf8f0d6f246efded59b0d1ba)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/4e73f784e004a40d44d7b31d5359b619982e4a1b)

* fixes CVEs upgrading go-git dependency (#1029) [#1029](https://github.com/openshift/oc-mirror/pull/1029)
* [OCPBUGS-47688](https://issues.redhat.com/browse/OCPBUGS-47688): Fix ITMS and IDMS generated when mirror dest contains release namespace (#1026) [#1026](https://github.com/openshift/oc-mirror/pull/1026)
* changes the owners file (#1018) [#1018](https://github.com/openshift/oc-mirror/pull/1018)
* ocpbugs-44799: new concurrent worker using channels (#1008) [#1008](https://github.com/openshift/oc-mirror/pull/1008)
* [OCPBUGS-44714](https://issues.redhat.com/browse/OCPBUGS-44714): don't clear cluster-resources dir on `delete --generate` (#1006) [#1006](https://github.com/openshift/oc-mirror/pull/1006)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1019) [#1019](https://github.com/openshift/oc-mirror/pull/1019)
* [OCPBUGS-45215](https://issues.redhat.com/browse/OCPBUGS-45215): cli: fix log-level values checking (#1005) [#1005](https://github.com/openshift/oc-mirror/pull/1005)
* [OCPBUGS-47453](https://issues.redhat.com/browse/OCPBUGS-47453): Use one of the newer sha256 keys to verify release signatures (#1000) [#1000](https://github.com/openshift/oc-mirror/pull/1000)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/2baad841a0c871f2e8b0677a608ee77644d91977...4e73f784e004a40d44d7b31d5359b619982e4a1b)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/7e6937946f04cb4614884ac7cfe44132ddbc500f)

* UPSTREAM: 501: Upgrade github.com/joelanford/ignore from v0.1.0 to v0.1.1 (#501) [#501](https://github.com/openshift/operator-framework-catalogd/pull/501)
* UPSTREAM: 492: :nit: remove log saying that http is disabled (#492) [#492](https://github.com/openshift/operator-framework-catalogd/pull/492)
* UPSTREAM: 484: Disable HTTP/2 by Default for Webhooks to Mitigate CVE Risks (#484) [#484](https://github.com/openshift/operator-framework-catalogd/pull/484)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/bd22125eb5c737d7ce6764fc660a99e9ac85e1e6...7e6937946f04cb4614884ac7cfe44132ddbc500f)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/ed1dc7998a18e273bc53f89868750d1f6b7decb9)

* UPSTREAM: 1552: Upgrade golang.org/x/net (#1552) [#1552](https://github.com/openshift/operator-framework-operator-controller/pull/1552)
* UPSTREAM: 1551: Upgrade github.com/joelanford/ignore from v0.1.0 to v0.1.1 (#1551) [#1551](https://github.com/openshift/operator-framework-operator-controller/pull/1551)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/8f7aa68d82fa7dca558ff5f0a937d08a84ad3745...ed1dc7998a18e273bc53f89868750d1f6b7decb9)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/182471a8d72ee38d2ff82ce44db6903e66c4b22b)

* [OCPBUGS-48644](https://issues.redhat.com/browse/OCPBUGS-48644): Fix excessive catalog source snapshots cause severe performance regression [#950](https://github.com/openshift/operator-framework-olm/pull/950)
* [OCPBUGS-48660](https://issues.redhat.com/browse/OCPBUGS-48660): Fix concurrent namespace resolution [#946](https://github.com/openshift/operator-framework-olm/pull/946)
* [OCPBUGS-46930](https://issues.redhat.com/browse/OCPBUGS-46930), [OCPBUGS-46937](https://issues.redhat.com/browse/OCPBUGS-46937), [OCPBUGS-47317](https://issues.redhat.com/browse/OCPBUGS-47317): bump x/net to 0.34.0 [#935](https://github.com/openshift/operator-framework-olm/pull/935)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6156b61b05d6e345db44edfa7d38138ea0373631...182471a8d72ee38d2ff82ce44db6903e66c4b22b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/34fa86e259b122aa98b35349f5080ec842fba50c)

* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [01-08-2025] [#2413](https://github.com/openshift/ovn-kubernetes/pull/2413)
* [OCPBUGS-46527](https://issues.redhat.com/browse/OCPBUGS-46527), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): DownStream Merge Sync from 4.19 [12-19-2024] [#2403](https://github.com/openshift/ovn-kubernetes/pull/2403)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/24e9946a28826e1c4f4a135674261c62bc89a3b8...34fa86e259b122aa98b35349f5080ec842fba50c)


### [prometheus](https://github.com/openshift/prometheus/tree/8de8eb11dfe734331762bc8d4839ec3b47084743)

* [OCPBUGS-48313](https://issues.redhat.com/browse/OCPBUGS-48313): fix(main.go): avoid closing the query engine until it is guaranteed to no longer be in use [#242](https://github.com/openshift/prometheus/pull/242)
* [Full changelog](https://github.com/openshift/prometheus/compare/84b3db709fe196a384fc483f960a5b4504e7557a...8de8eb11dfe734331762bc8d4839ec3b47084743)


### [tests](https://github.com/openshift/origin/tree/2774b2b307da1b3bc24f7f915d7d089d8648b397)

* [OCPBUGS-48438](https://issues.redhat.com/browse/OCPBUGS-48438): images: Fix layers test to work with manifestlisted imagestreams [#29442](https://github.com/openshift/origin/pull/29442)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): virt: add GA placeholder test [#29438](https://github.com/openshift/origin/pull/29438)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): virt, udn: primary UDN requires the net seg FG [#29412](https://github.com/openshift/origin/pull/29412)
* [OCPBUGS-48407](https://issues.redhat.com/browse/OCPBUGS-48407): Remove CSI snapshot webhook tests [#29425](https://github.com/openshift/origin/pull/29425)
* [OCPBUGS-48409](https://issues.redhat.com/browse/OCPBUGS-48409): Do not check for snapshot webhook deployment conditions. [#29426](https://github.com/openshift/origin/pull/29426)
* [OCPBUGS-48157](https://issues.redhat.com/browse/OCPBUGS-48157): Add team members to the OWNERS file for PR approvals [#29406](https://github.com/openshift/origin/pull/29406)
* [OCPBUGS-46079](https://issues.redhat.com/browse/OCPBUGS-46079): managed services: allow KubeDaemonSetMisScheduled alert [#29366](https://github.com/openshift/origin/pull/29366)
* [OCPBUGS-47640](https://issues.redhat.com/browse/OCPBUGS-47640): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29390](https://github.com/openshift/origin/pull/29390)
* [Full changelog](https://github.com/openshift/origin/compare/4a58be250ab563589e987384a357bfc822e64ead...2774b2b307da1b3bc24f7f915d7d089d8648b397)