# 4.18.44

Created: 2026-06-11 12:29:56 +0000 UTC

Image Digest: `sha256:2a7a95814b1b307813552472d18ef7aee7930748f707d730c4e816bdced1dac9`


## Changes from 4.18.22

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.11 to 1.31.14
* Kubernetes Tests upgraded from 1.31.10 to 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202508060022-0 to 418.94.202606051320-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| StreamingCollectionEncodingToJSON <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* ovirt-csi-driver
* ovirt-csi-driver-operator


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [81d6bc27](https://github.com/openshift/assisted-installer/commit/81d6bc2771d3d34de3c364e349ca7f2983e454a2) `sha256:ad878a3d4424e61c84e2cef92b2b1ba20b5502f214e2dcd0d0e18df9f70f39e6`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [81d6bc27](https://github.com/openshift/assisted-installer/commit/81d6bc2771d3d34de3c364e349ca7f2983e454a2) `sha256:dbabf9512414b7a822525d6ed10900a888544b4bad45fdcc9fde816814acdf30`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [2f62712d](https://github.com/openshift/apiserver-network-proxy/commit/2f62712d5db70df25490361749e93a552ffb5a24) `sha256:4ded20c38b7c18609e5e02aeff44a53794db8c9d183ef55e65910da9c9891f51`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:4f1f5ad555af4f35a7b30f68f190d7387f1adf1ac05423dc0e5e11c4d50271ae`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [f54f9a19](https://github.com/openshift/aws-pod-identity-webhook/commit/f54f9a19adb43b395a880ca046aed0841466c28d) `sha256:dd2911b11ebf2c9e03dd23a6547dbcda60b1aa3237ffe9dff516593192c8959f`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:92347de385258ddef1be0dfb2a75d54d02fe40687b32a481ea43d0913ccdb805`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:9b8c60c7b9c4b5e587cc2dabb665e320a9c3a7511f4702315178ee02c19396b8`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [c937080f](https://github.com/openshift/azure-kubernetes-kms/commit/c937080f51cec58650daa15805be548d09310c64) `sha256:29319c83c1b32de57d726a33b713a3744fafc02506156648e84a64afcd151b9d`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [f60e4029](https://github.com/openshift/azure-workload-identity/commit/f60e4029d64de202e81d2cd114f8a90dc0a1878e) `sha256:dda7aa1a252fbd164c8dc9fd40b225369d3bb5c40ca69b890741128cf122fe7d`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:63f686198f613883c388b397d91268315a574a77260a435d6fc04aa5bbc73e7f`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:363d9ce54143696e482d94db04c8e96322f7fb8c727a3c4ab85d66a126a79662`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:b48ff8f826f113d14e9933359ca91dfe16496a3d0f8915452d248d56d58afc50`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:b2088dbe4b8fe286ead5711976022788e15218a3665c9edc2450b535a0d9a44a`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:50deaa490a76c6049d4fae64539d211eae5a1476e74d7f076e1bb7910c894f83`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [7cafd0c7](https://github.com/openshift/cluster-dns-operator/commit/7cafd0c7dca2edb154b8444602b600b5901afeba) `sha256:fe5a6577a90ba58064646a99fa8ff2853cfb25153b99abcbad261c8382c770e6`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1e3caa4b](https://github.com/openshift/cluster-image-registry-operator/commit/1e3caa4b5abe4e3dad914a337f87408d060b1fb2) `sha256:8f1490303679e2a0a3de75e3b6226862a09ebc605ecbe241b364e3e1bd0e7e19`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:b58364bc43c67ca70d3905984660598a1d8ea439d4f2e9606089e9fcce284106`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:ede4b5dbeeb9959b24a2ecd826b1cb67b8be1e826c5b6db7e2cc869abb44ebb1`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:5a59ed413f3f1442d7bc974867a62db0dc0faaef6ba599fdb0b2b4a1eea5a786`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:aad2ee6fdc5a78cc7bdba54a2b85eb6262c228c46c0669e8b213bc5e2de6a50d`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:555396da44ac07ba761ee2ebb6f00918bd7edcc58e6f0ae76816402b990c1e7e`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [8caab452](https://github.com/openshift/cluster-update-keys/commit/8caab452b91df0d77ab052b1833a4d54a1374634) `sha256:dccbe44ab1594c0613845146113fa16387e3e257e25f30a9c80ce77508bf7fd3`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e2aaf00a](https://github.com/openshift/configmap-reload/commit/e2aaf00a381b57874178a4272f3bc5257cf8dd98) `sha256:904fe02bdfec386a5e612805e27918e156ecffcadd5b64df98bf83eee398ab3a`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:95438531744d4826026a0caf884d8502f80bad0a883e5977f9792e78f5441700`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:fb8dc6150ccb18ffd8bf2b5d14907f3db88bfce22a5ed168b4ef6064e1c2134c`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:350b75d9cbd494b8a8cdeeca04e57e8ad28501b2722aa871a23916fe9a246ab6`
* [etcd](https://github.com/openshift/etcd) git [b5a4f8d0](https://github.com/openshift/etcd/commit/b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3) `sha256:ee0b887ca318f0a9b0cf275a082ee5215468b0f8249de745e14641b982f7215c`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:6c2c87e89eca27299fcf18b40427a8ac137150e78f702f5c1a12f4704f08b4b8`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:e60e4e0baacd87f6690e4960806f8019622ab3364fc04f80794b4929bcc9d249`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:4bb120cb81f9e4e6674ec760520afa508191291d438112c87c3c43337104a499`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [1c7bc07e](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/1c7bc07e69c1e74a36b39b31f878da6391fdeefe) `sha256:a2913ecb432b0bf425b12e60166f2f0bb7a35efc1cc1ffaf0e9ae699b5385e4c`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:92190bfba17fbbf407359da2dab6dcfff5d5ec1609715375448c1c57a3bc3ffd`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:7354c65f0adee6fbc5908696447a07a688b0db6aa1cf98b01da8481e69423057`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:236e732f1f785af56dd7feefd6bafd5e0fd81e1d21a1a9f8dfa83f49da3962a0`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:8b7a59b6e37815c8c341849ae37f24f0333e0938bc842862bdabc412d8dedae0`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:fb244e013d91b417ec6068068c02468558d4e8086c193670fb1466cf4d19c67e`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [0d7ea6c7](https://github.com/openshift/multus-admission-controller/commit/0d7ea6c766349243ade17707af7bd2b43c3b4b8e) `sha256:2e22f5705c106456d834d58f7e7c2d1bc9ad81438e7592882d5f1a0a6ae7db6e`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:581944a4c36b858d98c57746f899270e493dfb7086a06c5991d08b4d38d296a8`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:57bae92bf672456eec22364e6624dc1e3848fe3a2ebf327b4aa78e96c8b434de`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:f8e48495a229cabf438758f3c6bd9a26d5b4d1d484906d6cc48e7ee1c8376357`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [afe324bf](https://github.com/openshift/machine-api-provider-nutanix/commit/afe324bf56e0348fb45e5fbb9c832c1587482153) `sha256:c28104e90046a41fc3c71dcbe6a2008d3ea651e28e7354159d8d0520fcd08ebf`
* [oauth-server](https://github.com/openshift/oauth-server) git [287caff3](https://github.com/openshift/oauth-server/commit/287caff3aef5b5f8535ac2bf1242671a5c7701b7) `sha256:f6753185fc2b858f46acf08c57915bb8506649d8af7636d16da72df9fab4b361`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3cca6fee](https://github.com/openshift/openshift-state-metrics/commit/3cca6feee0d646331bdbc9d49732fbdf49448d41) `sha256:9dd548f43928d04a8f08992b4ae49110bdc980a6536eee360d3b67574af63053`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [35c11369](https://github.com/openshift/prom-label-proxy/commit/35c1136915f7a6896dfcb479e1f686fd18542856) `sha256:047531e75ef4b70439b0c100645c8dc294b7c0d5b333c0b7ac50a7be13a9b5d9`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [92e17ff5](https://github.com/openshift/node_exporter/commit/92e17ff5c45807198adc8b59f5b3f63a9b7f1726) `sha256:d29a64d0d5881ff0076ae9011ed1da461ea760e7a44cd2fa4a2f3211dc9551eb`
* rhel-coreos `sha256:0c75c2070fbbf149dafecdfc7ffc551b1cdfb633c51402a7844ac6d17cabfaf3`
* rhel-coreos-extensions `sha256:a315234e50d4fe04139edadbe7975b185cc7e7fab0e52b7775fc088ff0714272`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [30efb529](https://github.com/openshift/service-ca-operator/commit/30efb529a5b7db5d6f352f6ac0470d8385268539) `sha256:a5d14595ff0e6925bd23cee92fd62ca4b0bcd84e6c2cd9a36807be53ae81e33d`
* [thanos](https://github.com/openshift/thanos) git [f1599f65](https://github.com/openshift/thanos/commit/f1599f65c5fd652150821ae954d563747a649b53) `sha256:91a1bfd20a8a59b59d16e92a9d45e393d11cc64904ae3915ece7c60490b18790`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/73206081d00ddfc1a2d9b385b1560564642b79ee)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.21 compatibility [#10019](https://github.com/openshift/assisted-service/pull/10019)
* [OCPBUGS-74898](https://issues.redhat.com/browse/OCPBUGS-74898): Retry incomplete cluster registration in ABI [#8817](https://github.com/openshift/assisted-service/pull/8817)
* [OCPBUGS-74911](https://issues.redhat.com/browse/OCPBUGS-74911): Remove root=/dev/disk/by-label/dm-mpath-root from kargs [#8820](https://github.com/openshift/assisted-service/pull/8820)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/bb74f0ad324ba24c300d0b4f08519d0cc250c1c5...73206081d00ddfc1a2d9b385b1560564642b79ee)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/81c09fb75bccd35b2e909537b93e5aa431eeed1a)

* [MGMT-21849](https://issues.redhat.com/browse/MGMT-21849): Skip arping for remote IPs not in outgoing NIC's subnet [#1332](https://github.com/openshift/assisted-installer-agent/pull/1332)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb...81c09fb75bccd35b2e909537b93e5aa431eeed1a)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/63b87f06c5586b59ca99d7a4546d4c82b2aa0268)

* [OCPBUGS-68243](https://issues.redhat.com/browse/OCPBUGS-68243): bump github.com/sirupsen/logrus to v1.9.3 [#237](https://github.com/openshift/agent-installer-utils/pull/237)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923...63b87f06c5586b59ca99d7a4546d4c82b2aa0268)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/ed55fc2df3f3bab15f03306df692112f6f109fe4)

* [OCPBUGS-77903](https://issues.redhat.com/browse/OCPBUGS-77903): [release-4.18] update go mod dependency for konflux [#589](https://github.com/openshift/cluster-api-provider-aws/pull/589)
* [OCPBUGS-61841](https://issues.redhat.com/browse/OCPBUGS-61841): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#570](https://github.com/openshift/cluster-api-provider-aws/pull/570)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/d631c2245d9481500627297244464f553d787782...ed55fc2df3f3bab15f03306df692112f6f109fe4)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/94c78f2ed10aad63ef068583e6dd17e97e44f849)

* [OCPBUGS-86167](https://issues.redhat.com/browse/OCPBUGS-86167): UPSTREAM: 2367: cleanup: `make verify` should ignore copyright year [#321](https://github.com/openshift/aws-ebs-csi-driver/pull/321)
* [OCPBUGS-80206](https://issues.redhat.com/browse/OCPBUGS-80206): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 [#313](https://github.com/openshift/aws-ebs-csi-driver/pull/313)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/b51cd6b8e54d5682cf5491a9eb5af1570261a409...94c78f2ed10aad63ef068583e6dd17e97e44f849)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/894ba4a33023caa182bce1aeb773b971c3c55209)

* [OCPBUGS-80308](https://issues.redhat.com/browse/OCPBUGS-80308): Bump google.golang.org/grpc [#542](https://github.com/openshift/csi-operator/pull/542)
* [OCPBUGS-79429](https://issues.redhat.com/browse/OCPBUGS-79429): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 [#531](https://github.com/openshift/csi-operator/pull/531)
* [OCPBUGS-78299](https://issues.redhat.com/browse/OCPBUGS-78299): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 [#524](https://github.com/openshift/csi-operator/pull/524)
* [OCPBUGS-76582](https://issues.redhat.com/browse/OCPBUGS-76582): Fix Cinder, Manila driver metrics [#501](https://github.com/openshift/csi-operator/pull/501)
* [OCPBUGS-62664](https://issues.redhat.com/browse/OCPBUGS-62664): disable e2e snapshot tests [#463](https://github.com/openshift/csi-operator/pull/463)
* [OCPBUGS-63558](https://issues.redhat.com/browse/OCPBUGS-63558): Add RBAC ClusterRole and Binding for driver node [#454](https://github.com/openshift/csi-operator/pull/454)
* [OCPBUGS-63407](https://issues.redhat.com/browse/OCPBUGS-63407): Use 127.0.0.1 for healtz http-endpoints [#450](https://github.com/openshift/csi-operator/pull/450)
* [OCPBUGS-62973](https://issues.redhat.com/browse/OCPBUGS-62973): Add withCABundleDaemonSetHook() to AWS EFS operator [#447](https://github.com/openshift/csi-operator/pull/447)
* [OCPBUGS-55053](https://issues.redhat.com/browse/OCPBUGS-55053): Correct ASH driver inject env config [#381](https://github.com/openshift/csi-operator/pull/381)
* [OCPBUGS-54453](https://issues.redhat.com/browse/OCPBUGS-54453): Enable required driver services [#375](https://github.com/openshift/csi-operator/pull/375)
* [OCPBUGS-60596](https://issues.redhat.com/browse/OCPBUGS-60596): Bump library-go to fix assignment to nil map issue [#421](https://github.com/openshift/csi-operator/pull/421)
* [OCPBUGS-60203](https://issues.redhat.com/browse/OCPBUGS-60203): Remove stale conditions [#413](https://github.com/openshift/csi-operator/pull/413)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/csi-operator/compare/cdc9d6499cd5020d96811fd02bde14d4d06786cc...894ba4a33023caa182bce1aeb773b971c3c55209)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/075d56fd8589620b045de0a5a6bb726dd34e380c)

* [OCPBUGS-80184](https://issues.redhat.com/browse/OCPBUGS-80184): Bump google.golang.org/grpc to v1.79.3 [#43](https://github.com/openshift/aws-encryption-provider/pull/43)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...075d56fd8589620b045de0a5a6bb726dd34e380c)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/7b6bfc7421d1cc700ddbcbf150beccd0ab586183)

* [OCPBUGS-73789](https://issues.redhat.com/browse/OCPBUGS-73789): Fix reconciler consistency checks in Update and Exists [#166](https://github.com/openshift/machine-api-provider-aws/pull/166)
* [OCPBUGS-63138](https://issues.redhat.com/browse/OCPBUGS-63138): client: re-use a single file for building the session instead of randomly named files [#146](https://github.com/openshift/machine-api-provider-aws/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08...7b6bfc7421d1cc700ddbcbf150beccd0ab586183)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/5206d4fe5b564ca3be17d3f4b41707f796c2ddb9)

* [OCPBUGS-80212](https://issues.redhat.com/browse/OCPBUGS-80212): Bump google.golang.org/grpc to v1.79.3 [#390](https://github.com/openshift/cluster-api-provider-azure/pull/390)
* [OCPBUGS-77905](https://issues.redhat.com/browse/OCPBUGS-77905): [release-4.18] update go mod dependency for konflux [#362](https://github.com/openshift/cluster-api-provider-azure/pull/362)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#348](https://github.com/openshift/cluster-api-provider-azure/pull/348)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/987615c80bfa65a5c70fbed3ff06e405ef6d88ed...5206d4fe5b564ca3be17d3f4b41707f796c2ddb9)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/a16bfa27ab21ad4e663e9802cd9a36d8e1b858fe)

* [OCPBUGS-80213](https://issues.redhat.com/browse/OCPBUGS-80213): Address CVE-2026-33186 [#142](https://github.com/openshift/azure-disk-csi-driver/pull/142)
* [OCPBUGS-78037](https://issues.redhat.com/browse/OCPBUGS-78037): add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks [#130](https://github.com/openshift/azure-disk-csi-driver/pull/130)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/6cced6667a8e896c191bd678f740d2b7e0629538...a16bfa27ab21ad4e663e9802cd9a36d8e1b858fe)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/e45f39e505975f837db08b0644b0ca90ef74f059)

* [OCPBUGS-80216](https://issues.redhat.com/browse/OCPBUGS-80216): Address CVE-2026-33186 [#133](https://github.com/openshift/azure-file-csi-driver/pull/133)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd...e45f39e505975f837db08b0644b0ca90ef74f059)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/2fdaa544160658c3c4535c167960e4f3e2e70727)

* [OCPBUGS-65882](https://issues.redhat.com/browse/OCPBUGS-65882): Set updateDomainCount to one when faultDomainCount is one [#175](https://github.com/openshift/machine-api-provider-azure/pull/175)
* [OCPBUGS-63669](https://issues.redhat.com/browse/OCPBUGS-63669): Support datadisks on Stack Hub [#167](https://github.com/openshift/machine-api-provider-azure/pull/167)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/457dead4a58293dec7fb7854e14640c10cf69278...2fdaa544160658c3c4535c167960e4f3e2e70727)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/80c3a0638eacd65c0d6f54fbd3f4c593085528e8)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#51](https://github.com/openshift/cluster-api-provider-metal3/pull/51)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec...80c3a0638eacd65c0d6f54fbd3f4c593085528e8)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/488926dc2c95d96460ee9939929a76ed23e1c596)

* [OCPBUGS-78550](https://issues.redhat.com/browse/OCPBUGS-78550): fix wavelength zone name regex [#10409](https://github.com/openshift/installer/pull/10409)
* [OCPBUGS-45579](https://issues.redhat.com/browse/OCPBUGS-45579): PowerVS: Listen to machineNetwork [#9277](https://github.com/openshift/installer/pull/9277)
* [OCPBUGS-73784](https://issues.redhat.com/browse/OCPBUGS-73784): pkg/asset/manifests/azure: save cidr blocks [#10217](https://github.com/openshift/installer/pull/10217)
* [OCPBUGS-76598](https://issues.redhat.com/browse/OCPBUGS-76598): Increase agent-installer pre-network-manager timeout [#10299](https://github.com/openshift/installer/pull/10299)
* [OCPBUGS-67203](https://issues.redhat.com/browse/OCPBUGS-67203): Update the RHCOS 4.18 bootimage metadata [#10294](https://github.com/openshift/installer/pull/10294)
* [OCPBUGS-74676](https://issues.redhat.com/browse/OCPBUGS-74676): [release-4.18] GCP: skip AI zones [#10275](https://github.com/openshift/installer/pull/10275)
* [OCPBUGS-69880](https://issues.redhat.com/browse/OCPBUGS-69880): Azure UPI ARM template: use storageAccountId [#10179](https://github.com/openshift/installer/pull/10179)
* [OCPBUGS-68244](https://issues.redhat.com/browse/OCPBUGS-68244): [4.18] uplift logrus [#10166](https://github.com/openshift/installer/pull/10166)
* [OCPBUGS-57590](https://issues.redhat.com/browse/OCPBUGS-57590): Mount the user-ca-bundle into ICC [#9794](https://github.com/openshift/installer/pull/9794)
* [OCPBUGS-63494](https://issues.redhat.com/browse/OCPBUGS-63494): Catch gcp destroy cases where the operation is nil [#10030](https://github.com/openshift/installer/pull/10030)
* [OCPBUGS-52659](https://issues.redhat.com/browse/OCPBUGS-52659): [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme [#9545](https://github.com/openshift/installer/pull/9545)
* [OCPBUGS-65588](https://issues.redhat.com/browse/OCPBUGS-65588): Update the RHCOS 4.18 bootimage metadata [#10113](https://github.com/openshift/installer/pull/10113)
* [OCPBUGS-58504](https://issues.redhat.com/browse/OCPBUGS-58504): Refactor removing loadbalancer in OpenStack [#9831](https://github.com/openshift/installer/pull/9831)
* [OCPBUGS-53235](https://issues.redhat.com/browse/OCPBUGS-53235): Validation for API and Ingress VIPs when using user-managed load balancer [#10046](https://github.com/openshift/installer/pull/10046)
* [OCPBUGS-62810](https://issues.redhat.com/browse/OCPBUGS-62810): Update the RHCOS 4.18 bootimage metadata [#10014](https://github.com/openshift/installer/pull/10014)
* [OCPBUGS-59490](https://issues.redhat.com/browse/OCPBUGS-59490): Make swift containers removal not fatal for UPI. [#9839](https://github.com/openshift/installer/pull/9839)
* [OCPBUGS-61529](https://issues.redhat.com/browse/OCPBUGS-61529): Use less permissive access for /var/lib/etcd for SNO [#9937](https://github.com/openshift/installer/pull/9937)
* [OCPBUGS-61178](https://issues.redhat.com/browse/OCPBUGS-61178): Refine check for supported SNO platforms [#9923](https://github.com/openshift/installer/pull/9923)
* [OCPBUGS-60592](https://issues.redhat.com/browse/OCPBUGS-60592): baremetal: always set external v6 URL on dualstack [#9895](https://github.com/openshift/installer/pull/9895)
* [OCPBUGS-54598](https://issues.redhat.com/browse/OCPBUGS-54598): Update the RHCOS 4.18 bootimage metadata [#9900](https://github.com/openshift/installer/pull/9900)
* [Full changelog](https://github.com/openshift/installer/compare/9094202399a3ac62bbdc22f755c6995545f3089e...488926dc2c95d96460ee9939929a76ed23e1c596)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/45acfee77a49fe17a848d1625594b2d8d85b2ca8)

* [OCPBUGS-76988](https://issues.redhat.com/browse/OCPBUGS-76988): Unblock BMH direct deletion when detached annotation is present [#461](https://github.com/openshift/baremetal-operator/pull/461)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/45c6255cafc5633d1ab6b9460ececa5c9197cce8...45acfee77a49fe17a848d1625594b2d8d85b2ca8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/353410688340dadb583668215e13e2d6cc90e272)

* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Re-add ENABLE_NODEIP_DEBUG env var [#364](https://github.com/openshift/baremetal-runtimecfg/pull/364)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/7145e606c7aec1966be90d7f8cd1083886b9afc8...353410688340dadb583668215e13e2d6cc90e272)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/6febe61977471b066f08d513424b226b82ee518f)

* [OCPBUGS-83872](https://issues.redhat.com/browse/OCPBUGS-83872): pkg/cli/admin/upgrade: Tighten force warnings [#2165](https://github.com/openshift/oc/pull/2165)
* [OCPBUGS-65707](https://issues.redhat.com/browse/OCPBUGS-65707): fix(must-gather): do not set node affinity if nodename is set [#2145](https://github.com/openshift/oc/pull/2145)
* [OCPBUGS-64608](https://issues.redhat.com/browse/OCPBUGS-64608): Help with must-gather scheduling through suggesting preferance of nodes [#2127](https://github.com/openshift/oc/pull/2127)
* [Full changelog](https://github.com/openshift/oc/compare/4fcb2d07875f05d881ac90af73723db0ae5b1d6e...6febe61977471b066f08d513424b226b82ee518f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/363e98bd7ca3872072a8aad152525c61388b10a5)

* [OCPBUGS-74548](https://issues.redhat.com/browse/OCPBUGS-74548): Resolve nil pointer exception in hasResourceTags [#968](https://github.com/openshift/cloud-credential-operator/pull/968)
* [OCPBUGS-65800](https://issues.redhat.com/browse/OCPBUGS-65800): ccoctl azure: retry custom role creation on consistency errors [#950](https://github.com/openshift/cloud-credential-operator/pull/950)
* [OCPBUGS-65479](https://issues.redhat.com/browse/OCPBUGS-65479): ccoctl: use pagination when listing resources in aws [#947](https://github.com/openshift/cloud-credential-operator/pull/947)
* [OCPBUGS-63548](https://issues.redhat.com/browse/OCPBUGS-63548): ccoctl: add public-key-file flag to create-all [#938](https://github.com/openshift/cloud-credential-operator/pull/938)
* [OCPBUGS-55127](https://issues.redhat.com/browse/OCPBUGS-55127): snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 [#915](https://github.com/openshift/cloud-credential-operator/pull/915)
* [OCPBUGS-60971](https://issues.redhat.com/browse/OCPBUGS-60971): ccoctl: aws to use proper issuer url on subsequent runs [#907](https://github.com/openshift/cloud-credential-operator/pull/907)
* [OCPBUGS-60618](https://issues.redhat.com/browse/OCPBUGS-60618): ccoctl azure dnszone-resource-group-name now optional [#899](https://github.com/openshift/cloud-credential-operator/pull/899)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/e8b05b4b7c1cc48bb7af86860494f5369bba0455...363e98bd7ca3872072a8aad152525c61388b10a5)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/f892b9152672d963b667d6d644e65576946133a3)

* [OCPBUGS-73750](https://issues.redhat.com/browse/OCPBUGS-73750): [release-4.18] Fix pointers without ptr.Deref [#199](https://github.com/openshift/cloud-network-config-controller/pull/199)
* [OCPBUGS-65651](https://issues.redhat.com/browse/OCPBUGS-65651): [release-4.18] Fix capacity calculation [#193](https://github.com/openshift/cloud-network-config-controller/pull/193)
* [OCPBUGS-64779](https://issues.redhat.com/browse/OCPBUGS-64779): [release-4.18] Change the capacity struct from int to ptrOfInt [#189](https://github.com/openshift/cloud-network-config-controller/pull/189)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/beacfbc2f2afa651616ad1c3c6712c511318a8d4...f892b9152672d963b667d6d644e65576946133a3)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/c3be8cbcf52ff107f74fd363bd667d8681e1a0f6)

* [OCPBUGS-75897](https://issues.redhat.com/browse/OCPBUGS-75897): set appropriate rolling update settings [#835](https://github.com/openshift/cluster-authentication-operator/pull/835)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/882f8799b8a550605e4812479272691de3f5c0d2...c3be8cbcf52ff107f74fd363bd667d8681e1a0f6)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/34730793bf4057072ed97b421e6b3af57166cc14)

* [OCPBUGS-78699](https://issues.redhat.com/browse/OCPBUGS-78699): allow clusterapi provider to skip paused resources [#413](https://github.com/openshift/kubernetes-autoscaler/pull/413)
* [OCPBUGS-75925](https://issues.redhat.com/browse/OCPBUGS-75925): Fixes histograms becoming empty after loaded from checkpoints [#402](https://github.com/openshift/kubernetes-autoscaler/pull/402)
* [OCPBUGS-60908](https://issues.redhat.com/browse/OCPBUGS-60908): revert openshift replica fix [#375](https://github.com/openshift/kubernetes-autoscaler/pull/375)
* [OCPBUGS-60235](https://issues.redhat.com/browse/OCPBUGS-60235): fix checkpoint gc of unknown recommenders [#368](https://github.com/openshift/kubernetes-autoscaler/pull/368)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/a17340a4e2987a66a028964fb429244ee0e844c1...34730793bf4057072ed97b421e6b3af57166cc14)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/3e6d1ab1617c0ec1b5872f258a0c7ec1eb55e079)

* [OCPBUGS-81549](https://issues.redhat.com/browse/OCPBUGS-81549): Explicitly set the ReadOnlyRootFilesystem flag to false [#584](https://github.com/openshift/cluster-baremetal-operator/pull/584)
* [OCPBUGS-78708](https://issues.redhat.com/browse/OCPBUGS-78708): Update kubebuilder tools to more latest version [#579](https://github.com/openshift/cluster-baremetal-operator/pull/579)
* [OCPBUGS-57590](https://issues.redhat.com/browse/OCPBUGS-57590): Mount the user-ca-bundle into ICC [#486](https://github.com/openshift/cluster-baremetal-operator/pull/486)
* [OCPBUGS-63439](https://issues.redhat.com/browse/OCPBUGS-63439): Always have a service for ironic-api port [#514](https://github.com/openshift/cluster-baremetal-operator/pull/514)
* [OCPBUGS-63469](https://issues.redhat.com/browse/OCPBUGS-63469): Allow provisioningIP when network disabled [#515](https://github.com/openshift/cluster-baremetal-operator/pull/515)
* [OCPBUGS-60586](https://issues.redhat.com/browse/OCPBUGS-60586): Remove webhookport (9447) as HostPort [#501](https://github.com/openshift/cluster-baremetal-operator/pull/501)
* [OCPBUGS-58315](https://issues.redhat.com/browse/OCPBUGS-58315): Bump github.com/go-errors/errors to v1.5.1 [#492](https://github.com/openshift/cluster-baremetal-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/e30ce1d8ca759e861e5094e8b3665d1da6d3474f...3e6d1ab1617c0ec1b5872f258a0c7ec1eb55e079)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c4c8799ba15d9a4b7ef8d2fb98fdee351fbae027)

* [OCPBUGS-80220](https://issues.redhat.com/browse/OCPBUGS-80220): Bump google.golang.org/grpc to v1.79.3 [#297](https://github.com/openshift/cluster-api/pull/297)
* [Full changelog](https://github.com/openshift/cluster-api/compare/63df38bcdb4aa8ca25c26b1f70321d5d198e27d1...c4c8799ba15d9a4b7ef8d2fb98fdee351fbae027)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/b5b89440b706f8760fb0e26938cdbafff265c6bc)

* [OCPBUGS-80224](https://issues.redhat.com/browse/OCPBUGS-80224): Bump google.golang.org/grpc to v1.79.3 [#566](https://github.com/openshift/cluster-capi-operator/pull/566)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#558](https://github.com/openshift/cluster-capi-operator/pull/558)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/2f2737e1ed649009eef31c19ffff7468b67de32d...b5b89440b706f8760fb0e26938cdbafff265c6bc)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8abb067318de3cc68967a0f24627c26912242524)

* [OCPBUGS-63166](https://issues.redhat.com/browse/OCPBUGS-63166): ccm: disable unused secure-serving port and webhook [#421](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/421)
* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Add Service using common resource templating [#405](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/405)
* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Update service selector to match deployment label [#403](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/403)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33856906970a98ac05a042a8058902458d623e0f...8abb067318de3cc68967a0f24627c26912242524)


### [cluster-config-api](https://github.com/openshift/api/tree/319dc2e492034aab82d4820dd8d8e9a84e31b459)

* [OCPBUGS-70315](https://issues.redhat.com/browse/OCPBUGS-70315): Add HTTPKeepAliveTimeout to IngressController API [#2638](https://github.com/openshift/api/pull/2638)
* NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers [#2625](https://github.com/openshift/api/pull/2625)
* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Introduce ClosedClientConnectionPolicy to IngressController API [#2618](https://github.com/openshift/api/pull/2618)
* [CNTRLPLANE-1980](https://issues.redhat.com/browse/CNTRLPLANE-1980): Promote streaming list encoding to Default [#2598](https://github.com/openshift/api/pull/2598)
* NO-JIRA: Promote streaming list encoding to Default on Hypershift. [#2562](https://github.com/openshift/api/pull/2562)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Add feature gates for StreamingCollectionEncoding [#2528](https://github.com/openshift/api/pull/2528)
* [OCPBUGS-52347](https://issues.redhat.com/browse/OCPBUGS-52347): Add CEL validation for RegistrySources in Image API [#2218](https://github.com/openshift/api/pull/2218)
* [OCPBUGS-60904](https://issues.redhat.com/browse/OCPBUGS-60904): MachineOSConfig name should match MachineConfigPool [#2458](https://github.com/openshift/api/pull/2458)
* Update crd-schema.json to release 1.33 branch [#2459](https://github.com/openshift/api/pull/2459)
* [Full changelog](https://github.com/openshift/api/compare/c86d80652a9ed6a3a6b35d9d81c06aaeb723f8e1...319dc2e492034aab82d4820dd8d8e9a84e31b459)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/fe5e928628200b49a07aa50e4dfa634fb9452607)

* [OCPBUGS-68249](https://issues.redhat.com/browse/OCPBUGS-68249): Update logrus to 1.9.3 to address CVE-2025-65637 [#464](https://github.com/openshift/cluster-config-operator/pull/464)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/85cb40728227fac13a2983fb6e3170d67cf62075...fe5e928628200b49a07aa50e4dfa634fb9452607)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3af8b9d6ceb707462af67ebbda92ec4c2b341d81)

* [OCPBUGS-78776](https://issues.redhat.com/browse/OCPBUGS-78776): [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index [#1573](https://github.com/openshift/cluster-etcd-operator/pull/1573)
* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#1545](https://github.com/openshift/cluster-etcd-operator/pull/1545)
* [OCPBUGS-63451](https://issues.redhat.com/browse/OCPBUGS-63451): Ensure revision.json persists on ungraceful shutdown [#1503](https://github.com/openshift/cluster-etcd-operator/pull/1503)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#1518](https://github.com/openshift/cluster-etcd-operator/pull/1518)
* [OCPBUGS-61235](https://issues.redhat.com/browse/OCPBUGS-61235): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1478](https://github.com/openshift/cluster-etcd-operator/pull/1478)
* [OCPBUGS-59992](https://issues.redhat.com/browse/OCPBUGS-59992): fix ordering on bootstrap IP selection [#1458](https://github.com/openshift/cluster-etcd-operator/pull/1458)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/8460bede0e45549f1cf03c85c69380b18de44a08...3af8b9d6ceb707462af67ebbda92ec4c2b341d81)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/7ec6093b5e31b50a57eab3653dca09b1bd174fee)

* [OCPBUGS-70315](https://issues.redhat.com/browse/OCPBUGS-70315): Implement HTTPKeepAliveTimeout tuning option [#1333](https://github.com/openshift/cluster-ingress-operator/pull/1333)
* NO-JIRA: Add new NID team members to OWNERS [#1319](https://github.com/openshift/cluster-ingress-operator/pull/1319)
* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Implement ClosedClientConnectionPolicy field [#1322](https://github.com/openshift/cluster-ingress-operator/pull/1322)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d967a73c5f7da76783ee1af093f21817e7681e1d...7ec6093b5e31b50a57eab3653dca09b1bd174fee)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e9bc90906c726823f154c78d3e568c98ff77b6a5)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#2031](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2031)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#1976](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1976)
* [OCPBUGS-63119](https://issues.redhat.com/browse/OCPBUGS-63119): SCC: add hostmount-anyuid-v2 [#1937](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1937)
* [OCPBUGS-61039](https://issues.redhat.com/browse/OCPBUGS-61039): Set goaway chance to 0.001 [#1912](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1912)
* [OCPBUGS-60176](https://issues.redhat.com/browse/OCPBUGS-60176): Add missing service ports to apiserver service [#1888](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1888)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/383f10176f2509babc9dd49d135fa8bb0c2c277e...e9bc90906c726823f154c78d3e568c98ff77b6a5)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/efe651a9d382e5e41e480823c12f06e51b5b50d0)

* [OCPBUGS-80231](https://issues.redhat.com/browse/OCPBUGS-80231): Bump google.golang.org/grpc to v1.79.3 [#77](https://github.com/openshift/cluster-api-operator/pull/77)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd...efe651a9d382e5e41e480823c12f06e51b5b50d0)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/6347fc8179b2a04d51c99432ae612bf4df595dc0)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#906](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/906)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#897](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/897)
* [OCPBUGS-60131](https://issues.redhat.com/browse/OCPBUGS-60131): Missing endpoint slices for open ports the operator uses [#852](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/852)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1...6347fc8179b2a04d51c99432ae612bf4df595dc0)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4e99db62cea1d2ca48765230c6f5663d1f2c2702)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#622](https://github.com/openshift/cluster-kube-scheduler-operator/pull/622)
* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#612](https://github.com/openshift/cluster-kube-scheduler-operator/pull/612)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#590](https://github.com/openshift/cluster-kube-scheduler-operator/pull/590)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/6182930dde5ec8dd22bd50481e8b369ce673484c...4e99db62cea1d2ca48765230c6f5663d1f2c2702)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/8108394db9feefb2dedfe4574768dc080ad34476)

* [OCPBUGS-77274](https://issues.redhat.com/browse/OCPBUGS-77274): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2833](https://github.com/openshift/cluster-monitoring-operator/pull/2833)
* [OCPBUGS-67168](https://issues.redhat.com/browse/OCPBUGS-67168): Add the collection of MTV migration metrics [#2774](https://github.com/openshift/cluster-monitoring-operator/pull/2774)
* [OCPBUGS-61965](https://issues.redhat.com/browse/OCPBUGS-61965): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2723](https://github.com/openshift/cluster-monitoring-operator/pull/2723)
* [OCPBUGS-64579](https://issues.redhat.com/browse/OCPBUGS-64579): Fix KSM deny-list typo [#2731](https://github.com/openshift/cluster-monitoring-operator/pull/2731)
* [OCPBUGS-63488](https://issues.redhat.com/browse/OCPBUGS-63488): Remove AlertManager endpoints when disabled [#2737](https://github.com/openshift/cluster-monitoring-operator/pull/2737)
* [OCPBUGS-62852](https://issues.redhat.com/browse/OCPBUGS-62852): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 [#2702](https://github.com/openshift/cluster-monitoring-operator/pull/2702)
* [OCPBUGS-63410](https://issues.redhat.com/browse/OCPBUGS-63410): [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy [#2724](https://github.com/openshift/cluster-monitoring-operator/pull/2724)
* [OCPBUGS-63017](https://issues.redhat.com/browse/OCPBUGS-63017): test: remove image registry e2e tests [#2711](https://github.com/openshift/cluster-monitoring-operator/pull/2711)
* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2669](https://github.com/openshift/cluster-monitoring-operator/pull/2669)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/7337d93da1df9b60751d146f0b7df1bc2436b595...8108394db9feefb2dedfe4574768dc080ad34476)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bd2181ac81fe75f9ad611d99ec0a932624a63eaa)

* [OCPBUGS-85443](https://issues.redhat.com/browse/OCPBUGS-85443): Remove duplicated openssl parameter [#3006](https://github.com/openshift/cluster-network-operator/pull/3006)
* [OCPBUGS-84869](https://issues.redhat.com/browse/OCPBUGS-84869): wait for patch port to apply drop garp flows [#2988](https://github.com/openshift/cluster-network-operator/pull/2988)
* [OCPBUGS-84180](https://issues.redhat.com/browse/OCPBUGS-84180): fix(hypershift): use net.JoinHostPort for URL construction [#2977](https://github.com/openshift/cluster-network-operator/pull/2977)
* [OCPBUGS-77151](https://issues.redhat.com/browse/OCPBUGS-77151): Add config override for openflow-probe [#2965](https://github.com/openshift/cluster-network-operator/pull/2965)
* [OCPBUGS-78833](https://issues.redhat.com/browse/OCPBUGS-78833): Fix whereabouts-token-watcher DaemonSet improvements [#2940](https://github.com/openshift/cluster-network-operator/pull/2940)
* [OCPBUGS-74154](https://issues.redhat.com/browse/OCPBUGS-74154): whereabouts-config is a reserved name for user interaction. [#2884](https://github.com/openshift/cluster-network-operator/pull/2884)
* [OCPBUGS-73767](https://issues.redhat.com/browse/OCPBUGS-73767): Tweak iptables-alerter to try to avoid crictl bug [#2877](https://github.com/openshift/cluster-network-operator/pull/2877)
* [OCPBUGS-65704](https://issues.redhat.com/browse/OCPBUGS-65704), [OCPBUGS-65705](https://issues.redhat.com/browse/OCPBUGS-65705): Annotate whereabouts-controller [#2842](https://github.com/openshift/cluster-network-operator/pull/2842)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Add drop flows for GARP [#2810](https://github.com/openshift/cluster-network-operator/pull/2810)
* [OCPBUGS-60984](https://issues.redhat.com/browse/OCPBUGS-60984): Update CNO reviewers/approvers [#2766](https://github.com/openshift/cluster-network-operator/pull/2766)
* [OCPBUGS-60795](https://issues.redhat.com/browse/OCPBUGS-60795): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2782](https://github.com/openshift/cluster-network-operator/pull/2782)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c1a702897dc2ca3dc4cdc04f4984a718960ea46a...bd2181ac81fe75f9ad611d99ec0a932624a63eaa)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/700994b4688decd0808aec1761a2c87e9d4ef685)

* [OCPBUGS-75954](https://issues.redhat.com/browse/OCPBUGS-75954): PPC: filter out namespaces dir [#1465](https://github.com/openshift/cluster-node-tuning-operator/pull/1465)
* [OCPBUGS-69947](https://issues.redhat.com/browse/OCPBUGS-69947): [release-4.18] E2E: skip stalld test checking sched_fifo [#1451](https://github.com/openshift/cluster-node-tuning-operator/pull/1451)
* [OCPBUGS-63450](https://issues.redhat.com/browse/OCPBUGS-63450): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1417](https://github.com/openshift/cluster-node-tuning-operator/pull/1417)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/59320245b2d880a4f8cf532cd8e9958df1c12700...700994b4688decd0808aec1761a2c87e9d4ef685)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/fa9d9ab4f994caca680f0edf3563b03c2e74020c)

* [OCPBUGS-80239](https://issues.redhat.com/browse/OCPBUGS-80239): Bump google.golang.org/grpc to v1.79.3 [#200](https://github.com/openshift/cluster-olm-operator/pull/200)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/88088e4bfe9f55ea7ab2c4331cebee727c8c0c34...fa9d9ab4f994caca680f0edf3563b03c2e74020c)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bc725fd43d29758ad8f704044ccc8abb6926ad84)

* [OCPBUGS-63511](https://issues.redhat.com/browse/OCPBUGS-63511): references to github.com/sclorg/django-ex.git now also refer to the branch [#657](https://github.com/openshift/cluster-samples-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa...bc725fd43d29758ad8f704044ccc8abb6926ad84)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/fe353404924ac4646b18b8312fd213dad2efce4f)

* [OCPBUGS-87556](https://issues.redhat.com/browse/OCPBUGS-87556): remove oVirt code from CSO 4.18 [#707](https://github.com/openshift/cluster-storage-operator/pull/707)
* [OCPBUGS-77627](https://issues.redhat.com/browse/OCPBUGS-77627): add vsphere permissions for checking if users is authorized to see metrics [#670](https://github.com/openshift/cluster-storage-operator/pull/670)
* [OCPBUGS-62666](https://issues.redhat.com/browse/OCPBUGS-62666): Move metrics to vsphere driver [#632](https://github.com/openshift/cluster-storage-operator/pull/632)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/65d06444110f8044a84ccf4f977ee9520f2bdf89...fe353404924ac4646b18b8312fd213dad2efce4f)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f72d7e2c7dc8f5e0bb8687f9b9fd0c918952cbda)

* [OCPBUGS-70182](https://issues.redhat.com/browse/OCPBUGS-70182): Unify capitalization when comparing architectures for available updates [#1327](https://github.com/openshift/cluster-version-operator/pull/1327)
* NO-ISSUE: hongkai becomes an approver release-4.18 [#1286](https://github.com/openshift/cluster-version-operator/pull/1286)
* [OCPBUGS-62869](https://issues.redhat.com/browse/OCPBUGS-62869): disable metrics auth for hypershift clusters [#1242](https://github.com/openshift/cluster-version-operator/pull/1242)
* [OCPBUGS-58450](https://issues.redhat.com/browse/OCPBUGS-58450): Failing=Unknown upon long CO updating [#1211](https://github.com/openshift/cluster-version-operator/pull/1211)
* [OCPBUGS-60222](https://issues.redhat.com/browse/OCPBUGS-60222): CVO protects /metrics with authorization [#1223](https://github.com/openshift/cluster-version-operator/pull/1223)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/94c0e705d520b0eeb765f72de2dae2cd6f1159bb...f72d7e2c7dc8f5e0bb8687f9b9fd0c918952cbda)


### [console](https://github.com/openshift/console/tree/fdc8bd725cf31c3baaaa1a3f2873e2810e185b80)

* NO-JIRA: enable multi-architecture yarn builds [#16421](https://github.com/openshift/console/pull/16421)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16073](https://github.com/openshift/console/pull/16073)
* NO-JIRA: Bump builder image to v29 [#15995](https://github.com/openshift/console/pull/15995)
* [OCPBUGS-65808](https://issues.redhat.com/browse/OCPBUGS-65808): Fix PatternFly dark theme colors for charts and form inputs [#15951](https://github.com/openshift/console/pull/15951)
* [OCPBUGS-74458](https://issues.redhat.com/browse/OCPBUGS-74458): Bump lodash to latest [#15965](https://github.com/openshift/console/pull/15965)
* [OCPBUGS-73753](https://issues.redhat.com/browse/OCPBUGS-73753): Fix Helm chart installation with CA/TLS certificates [#15914](https://github.com/openshift/console/pull/15914)
* [OCPBUGS-73662](https://issues.redhat.com/browse/OCPBUGS-73662): Namespace is not persisting when switching to developer view from the topology page of admin page [#15910](https://github.com/openshift/console/pull/15910)
* [OCPBUGS-69915](https://issues.redhat.com/browse/OCPBUGS-69915): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15868](https://github.com/openshift/console/pull/15868)
* [OCPBUGS-69448](https://issues.redhat.com/browse/OCPBUGS-69448): Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in "All Projects" mode [#15855](https://github.com/openshift/console/pull/15855)
* [OCPBUGS-68361](https://issues.redhat.com/browse/OCPBUGS-68361): Disallowed Pipelines-plugin Pipelines navigation section [#15842](https://github.com/openshift/console/pull/15842)
* [OCPBUGS-65592](https://issues.redhat.com/browse/OCPBUGS-65592): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15725](https://github.com/openshift/console/pull/15725)
* [OCPBUGS-65932](https://issues.redhat.com/browse/OCPBUGS-65932): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15761](https://github.com/openshift/console/pull/15761)
* [OCPBUGS-65533](https://issues.redhat.com/browse/OCPBUGS-65533): Preserve path on perspective switch [#15716](https://github.com/openshift/console/pull/15716)
* [OCPBUGS-64735](https://issues.redhat.com/browse/OCPBUGS-64735): Expose prometheus tenancy label path as a proxy [#15685](https://github.com/openshift/console/pull/15685)
* [OCPBUGS-64682](https://issues.redhat.com/browse/OCPBUGS-64682): limit node log length to 1000 lines [#15680](https://github.com/openshift/console/pull/15680)
* [OCPBUGS-63657](https://issues.redhat.com/browse/OCPBUGS-63657): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15654](https://github.com/openshift/console/pull/15654)
* [OCPBUGS-63247](https://issues.redhat.com/browse/OCPBUGS-63247): fix bug where Roles list was displaying invalid data f… [#15619](https://github.com/openshift/console/pull/15619)
* [OCPBUGS-63041](https://issues.redhat.com/browse/OCPBUGS-63041): switch to dev perspective for `/dev-monitoring` [#15601](https://github.com/openshift/console/pull/15601)
* [OCPBUGS-44156](https://issues.redhat.com/browse/OCPBUGS-44156): bump dompurify to latest [#15589](https://github.com/openshift/console/pull/15589)
* [OCPBUGS-62326](https://issues.redhat.com/browse/OCPBUGS-62326): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15544](https://github.com/openshift/console/pull/15544)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Update CHANGELOG for 4.18 plugin SDK package publish [#15516](https://github.com/openshift/console/pull/15516)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Fix bug with Console provided PatternFly shared modules [#15479](https://github.com/openshift/console/pull/15479)
* [OCPBUGS-61697](https://issues.redhat.com/browse/OCPBUGS-61697): Remove ancient `X-XSS-Protection` header [#15493](https://github.com/openshift/console/pull/15493)
* [OCPBUGS-60236](https://issues.redhat.com/browse/OCPBUGS-60236): Make sure CSP violations are only reported to telemetry once per day per browser [#15453](https://github.com/openshift/console/pull/15453)
* NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish [#15456](https://github.com/openshift/console/pull/15456)
* [OCPBUGS-50983](https://issues.redhat.com/browse/OCPBUGS-50983): Store Topology sidebar alert in the localStorage [#15431](https://github.com/openshift/console/pull/15431)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Added patternfly/react-topology to shared module list of dynamic plugin sdk [#15371](https://github.com/openshift/console/pull/15371)
* [OCPBUGS-50570](https://issues.redhat.com/browse/OCPBUGS-50570): Fix regression where plugins were not tracking CSP violation status a… [#14754](https://github.com/openshift/console/pull/14754)
* [OCPBUGS-60140](https://issues.redhat.com/browse/OCPBUGS-60140): Recognize Detached BMH status [#15362](https://github.com/openshift/console/pull/15362)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Add BaseNode in topology folder into Dynamic Plugin SDK [#15369](https://github.com/openshift/console/pull/15369)
* : OCPBUGS-60278: Fix i18n string for event stream [#15403](https://github.com/openshift/console/pull/15403)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose OdcBaseNode through the dynamic plugin SDK [#15370](https://github.com/openshift/console/pull/15370)
* [Full changelog](https://github.com/openshift/console/compare/49e0cd6bcb4d1f90ffc963eb49d3e71b2bcef351...fdc8bd725cf31c3baaaa1a3f2873e2810e185b80)


### [console-operator](https://github.com/openshift/console-operator/tree/3f78ddd562b8a901ad30cb7b18b4c27e703561bd)

* [OCPBUGS-77861](https://issues.redhat.com/browse/OCPBUGS-77861): update go mod dependency for konflux [#1113](https://github.com/openshift/console-operator/pull/1113)
* [NETOBSERV-2023](https://issues.redhat.com/browse/NETOBSERV-2023), [OCPBUGS-60304](https://issues.redhat.com/browse/OCPBUGS-60304): Implement a quickstart for netobserv operator [#997](https://github.com/openshift/console-operator/pull/997)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/9371d7f422157c3f5283f03028aed24dd0cf242d...3f78ddd562b8a901ad30cb7b18b4c27e703561bd)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/090b88ce1854b21afacd8302ab03c7d8aa667070)

* [OCPBUGS-85672](https://issues.redhat.com/browse/OCPBUGS-85672): CI Build root image tag sync with ART [#236](https://github.com/openshift/containernetworking-plugins/pull/236)
* [OCPBUGS-60871](https://issues.redhat.com/browse/OCPBUGS-60871): [release-4.18] host-device: Return interface name in result [#208](https://github.com/openshift/containernetworking-plugins/pull/208)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/b4e1047104eb2d81dd46ebbb24fb88cdaf175b90...090b88ce1854b21afacd8302ab03c7d8aa667070)


### [coredns](https://github.com/openshift/coredns/tree/8ca7f02b8becb40f7a9919243000e2620d7036d4)

* [OCPBUGS-60462](https://issues.redhat.com/browse/OCPBUGS-60462): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#152](https://github.com/openshift/coredns/pull/152)
* [Full changelog](https://github.com/openshift/coredns/compare/eb75d9b4f41a5ce0258d6f245c6206715ecb283b...8ca7f02b8becb40f7a9919243000e2620d7036d4)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/a34070f9a9880fcbc3ac3d0d81c04f932a7afabf)

* [OCPBUGS-80309](https://issues.redhat.com/browse/OCPBUGS-80309): Bump google.golang.org/grpc [#387](https://github.com/openshift/cloud-provider-openstack/pull/387)
* [OCPBUGS-57800](https://issues.redhat.com/browse/OCPBUGS-57800): Rebase release-4.18 onto release-1.31 [#322](https://github.com/openshift/cloud-provider-openstack/pull/322)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f03b55e67d688991eb053b78e7dd2ed5a29304ba...a34070f9a9880fcbc3ac3d0d81c04f932a7afabf)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/810e0dc1c2a876dfdc04a67117031823a5f428c4)

* [OCPBUGS-80254](https://issues.redhat.com/browse/OCPBUGS-80254): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 [#180](https://github.com/openshift/csi-driver-nfs/pull/180)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/32e775900642ab9c3560a06219104d7c38f8461c...810e0dc1c2a876dfdc04a67117031823a5f428c4)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/e3557783bfedc72893bffe0a9dcb8550e47b77b6)

* [OCPBUGS-80255](https://issues.redhat.com/browse/OCPBUGS-80255): Bump google.golang.org/grpc to v1.79.3 [#105](https://github.com/openshift/csi-external-attacher/pull/105)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/39b37c06a27481c708f071464bd1049ea7db97c7...e3557783bfedc72893bffe0a9dcb8550e47b77b6)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/90b7dbd7fca4c9ff56bc6bb5edd06d81ec2ac612)

* [OCPBUGS-80256](https://issues.redhat.com/browse/OCPBUGS-80256): Bump google.golang.org/grpc [#130](https://github.com/openshift/csi-external-provisioner/pull/130)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/376f0ea04c64a41cb5166ff415fff849ff2da380...90b7dbd7fca4c9ff56bc6bb5edd06d81ec2ac612)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/a14236907d2e7f3f0342d399f01ad38ee66b3346)

* [OCPBUGS-62467](https://issues.redhat.com/browse/OCPBUGS-62467): Requeue PVC over PV creation [#176](https://github.com/openshift/csi-external-resizer/pull/176)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/cca3837a84fcade22bd7b935c68d02904faa12aa...a14236907d2e7f3f0342d399f01ad38ee66b3346)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/70500bf5ddedfc38ce3010e8007e07ac98569c56)

* [OCPBUGS-80258](https://issues.redhat.com/browse/OCPBUGS-80258), [OCPBUGS-80261](https://issues.redhat.com/browse/OCPBUGS-80261), [OCPBUGS-80262](https://issues.redhat.com/browse/OCPBUGS-80262): Bump google.golang.org/grpc to v1.79.3 [#211](https://github.com/openshift/csi-external-snapshotter/pull/211)
* [OCPBUGS-63574](https://issues.redhat.com/browse/OCPBUGS-63574): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#190](https://github.com/openshift/csi-external-snapshotter/pull/190)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/838d2484157f076bbb81f1b584898aec6f051c2f...70500bf5ddedfc38ce3010e8007e07ac98569c56)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)

* [OCPBUGS-63324](https://issues.redhat.com/browse/OCPBUGS-63324): update log level verbosity to not clutter logs [#89](https://github.com/openshift/csi-node-driver-registrar/pull/89)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c21f5d02b498e9e49d94818f4ad3eaaae77ca161...ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)


### [docker-builder](https://github.com/openshift/builder/tree/529c96880ce41820700cf38ed8b6619697b71de9)

* [OCPBUGS-66990](https://issues.redhat.com/browse/OCPBUGS-66990): bump buildah to 1.37.7 to fix CVE-2025-52881 [#498](https://github.com/openshift/builder/pull/498)
* [OCPBUGS-65655](https://issues.redhat.com/browse/OCPBUGS-65655): BuildConfig inline Dockerfile fails with heredoc syntax [#486](https://github.com/openshift/builder/pull/486)
* [Full changelog](https://github.com/openshift/builder/compare/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f...529c96880ce41820700cf38ed8b6619697b71de9)


### [docker-registry](https://github.com/openshift/image-registry/tree/5c3675514f52b485e7e369757aa9d4f7358bbd4f)

* [OCPBUGS-68253](https://issues.redhat.com/browse/OCPBUGS-68253): update logrus to v1.9.1 [#464](https://github.com/openshift/image-registry/pull/464)
* [Full changelog](https://github.com/openshift/image-registry/compare/cfa51ab4b60fc0e836547626a5fd02b97ee82708...5c3675514f52b485e7e369757aa9d4f7358bbd4f)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/6d4539447313cc3ede325e58433b3f8c450e208a)

* [OCPBUGS-80270](https://issues.redhat.com/browse/OCPBUGS-80270): Bump google.golang.org/grpc to v1.79.3 [#290](https://github.com/openshift/cluster-api-provider-gcp/pull/290)
* [OCPBUGS-78278](https://issues.redhat.com/browse/OCPBUGS-78278): [release-4.18] update go mod dependency for konflux [#265](https://github.com/openshift/cluster-api-provider-gcp/pull/265)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#247](https://github.com/openshift/cluster-api-provider-gcp/pull/247)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/af54f5287c7d363c6bc7abe4ad9e72f4131d534c...6d4539447313cc3ede325e58433b3f8c450e208a)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b2f858ba546520410f391b5f6afdbe0b1562903d)

* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Add max-concurrent-reconciles flag to machine actuator [#126](https://github.com/openshift/machine-api-provider-gcp/pull/126)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01f6b419357a539389704fcec9872997f808e540...b2f858ba546520410f391b5f6afdbe0b1562903d)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/96f27ae38782a2c62cfd6ec08406eeb3e7dfbbc6)

* [OCPBUGS-80274](https://issues.redhat.com/browse/OCPBUGS-80274): Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 [#112](https://github.com/openshift/gcp-pd-csi-driver/pull/112)
* [OCPBUGS-68258](https://issues.redhat.com/browse/OCPBUGS-68258): UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 [#89](https://github.com/openshift/gcp-pd-csi-driver/pull/89)
* [OCPBUGS-44772](https://issues.redhat.com/browse/OCPBUGS-44772): Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment [#83](https://github.com/openshift/gcp-pd-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/1b8c94ac55d8602ba6669325ade654ae47ea74cf...96f27ae38782a2c62cfd6ec08406eeb3e7dfbbc6)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/4432976ac44305e5f34e97e759728cedd44e8b85)

* [OCPBUGS-80273](https://issues.redhat.com/browse/OCPBUGS-80273): Replace google.golang.org/grpc with fork [#187](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/187)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb...4432976ac44305e5f34e97e759728cedd44e8b85)


### [haproxy-router](https://github.com/openshift/router/tree/8f68a7349a85ac34dc9de9c88767c60000713575)

* [OCPBUGS-80275](https://issues.redhat.com/browse/OCPBUGS-80275): Bump google.golang.org/grpc to v1.79.3 [#768](https://github.com/openshift/router/pull/768)
* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Add option abortonclose to HAProxy configuration template [#703](https://github.com/openshift/router/pull/703)
* [Full changelog](https://github.com/openshift/router/compare/d8058949aaf91dcdea050c58e6a34ef5f6670c67...8f68a7349a85ac34dc9de9c88767c60000713575)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/91c24081f468e7636c824f4f5a2eb68660b81012)

* [OCPBUGS-54724](https://issues.redhat.com/browse/OCPBUGS-54724): Fix implementation of ContainsCIDR to allow non-equal addresses [#2267](https://github.com/openshift/kubernetes/pull/2267)
* [OCPBUGS-65553](https://issues.redhat.com/browse/OCPBUGS-65553): Update to Kubernetes v1.31.14 [#2521](https://github.com/openshift/kubernetes/pull/2521)
* [OCPBUGS-65494](https://issues.redhat.com/browse/OCPBUGS-65494): Fix Concurrentmap Iteration [#2512](https://github.com/openshift/kubernetes/pull/2512)
* [OCPBUGS-61773](https://issues.redhat.com/browse/OCPBUGS-61773): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write #2456 [#2475](https://github.com/openshift/kubernetes/pull/2475)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Backport StreamingCollectionEncoding for JSON and protobuf [#2483](https://github.com/openshift/kubernetes/pull/2483)
* [OCPBUGS-61557](https://issues.redhat.com/browse/OCPBUGS-61557): Rebase v1.31.13 [#2465](https://github.com/openshift/kubernetes/pull/2465)
* Revert "UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated."" [#2448](https://github.com/openshift/kubernetes/pull/2448)
* [OCPBUGS-60511](https://issues.redhat.com/browse/OCPBUGS-60511): Bump to v1.31.12 [#2440](https://github.com/openshift/kubernetes/pull/2440)
* [OCPBUGS-60524](https://issues.redhat.com/browse/OCPBUGS-60524): podresources: list: use active pods [#2413](https://github.com/openshift/kubernetes/pull/2413)
* UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated." [#2422](https://github.com/openshift/kubernetes/pull/2422)
* [OCPBUGS-57488](https://issues.redhat.com/browse/OCPBUGS-57488): UPSTREAM: &lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated. [#2333](https://github.com/openshift/kubernetes/pull/2333)
* [OCPBUGS-57499](https://issues.redhat.com/browse/OCPBUGS-57499): UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image [#2399](https://github.com/openshift/kubernetes/pull/2399)
* [OCPBUGS-44757](https://issues.redhat.com/browse/OCPBUGS-44757): Adjust NodeMonitorGracePeriod to 50s [#2385](https://github.com/openshift/kubernetes/pull/2385)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0c9395f92e970f64d40ad338e9ed8918d6ab10ea...91c24081f468e7636c824f4f5a2eb68660b81012)


### [hypershift](https://github.com/openshift/hypershift/tree/826bf38632c43d1440673022e71513be4e63b7cb)

* NO-JIRA: remove path filter from control-plane-operator pipelines [#8665](https://github.com/openshift/hypershift/pull/8665)
* [OCPBUGS-80278](https://issues.redhat.com/browse/OCPBUGS-80278): fix CVE-2026-33186 by replacing grpc-go [#8515](https://github.com/openshift/hypershift/pull/8515)
* [OCPBUGS-84180](https://issues.redhat.com/browse/OCPBUGS-84180): fix(cno): use brackets only for IPv6 in server URL [#8346](https://github.com/openshift/hypershift/pull/8346)
* [OCPBUGS-76532](https://issues.redhat.com/browse/OCPBUGS-76532): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7699](https://github.com/openshift/hypershift/pull/7699)
* [OCPBUGS-77368](https://issues.redhat.com/browse/OCPBUGS-77368): Fix ignition-server pod restarts [#7878](https://github.com/openshift/hypershift/pull/7878)
* [CNTRLPLANE-1708](https://issues.redhat.com/browse/CNTRLPLANE-1708): Backport Customer Global Pull Secret to OpenShift 4.18.z [#7354](https://github.com/openshift/hypershift/pull/7354)
* [OCPBUGS-72932](https://issues.redhat.com/browse/OCPBUGS-72932): Fix Konflux EC voilation, update deprecated base … [#7456](https://github.com/openshift/hypershift/pull/7456)
* [OCPBUGS-69847](https://issues.redhat.com/browse/OCPBUGS-69847): test: remove unit tests that depend on network communication [release-4.18] [#7406](https://github.com/openshift/hypershift/pull/7406)
* [OCPBUGS-65843](https://issues.redhat.com/browse/OCPBUGS-65843): specify SCC annotation for pods in data plane [#7267](https://github.com/openshift/hypershift/pull/7267)
* [CNTRLPLANE-1902](https://issues.redhat.com/browse/CNTRLPLANE-1902): Migrate 4.18 pipelines to common pipeline template [#7211](https://github.com/openshift/hypershift/pull/7211)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): use csi-resizer image from release provider [#7103](https://github.com/openshift/hypershift/pull/7103)
* [OCPBUGS-63638](https://issues.redhat.com/browse/OCPBUGS-63638): [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7111](https://github.com/openshift/hypershift/pull/7111)
* [OCPBUGS-63034](https://issues.redhat.com/browse/OCPBUGS-63034): [release-4.18] Update DNS names for ovn-kubernetes cp metrics [#7025](https://github.com/openshift/hypershift/pull/7025)
* [OCPBUGS-63369](https://issues.redhat.com/browse/OCPBUGS-63369): Make the hypershift CLI binary FIPS-compliant [#7093](https://github.com/openshift/hypershift/pull/7093)
* [OCPBUGS-62808](https://issues.redhat.com/browse/OCPBUGS-62808): Fix driver-config ConfigMap content flapping due to random ordering #6944 [#6947](https://github.com/openshift/hypershift/pull/6947)
* [CNTRLPLANE-1424](https://issues.redhat.com/browse/CNTRLPLANE-1424): feat(konflux): tag MCE HO images with latest [#6837](https://github.com/openshift/hypershift/pull/6837)
* [OCPBUGS-62816](https://issues.redhat.com/browse/OCPBUGS-62816): set default goaway-chance to 0.001 [#6950](https://github.com/openshift/hypershift/pull/6950)
* [OCPBUGS-61904](https://issues.redhat.com/browse/OCPBUGS-61904): resolve MIRRORED_RELEASE_IMAGE flapping [#6858](https://github.com/openshift/hypershift/pull/6858)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Sync RBAC for expansion support in kubevirt CSI driver [#6355](https://github.com/openshift/hypershift/pull/6355)
* [OCPBUGS-61568](https://issues.redhat.com/browse/OCPBUGS-61568): [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution [#6793](https://github.com/openshift/hypershift/pull/6793)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): ci: konflux multi-arch images [#6867](https://github.com/openshift/hypershift/pull/6867)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): Use the common konflux pipeline and update CLI dockerfile [#6832](https://github.com/openshift/hypershift/pull/6832)
* NO-JIRA: chore(deps): update konflux references [#6667](https://github.com/openshift/hypershift/pull/6667)
* [OCPBUGS-57142](https://issues.redhat.com/browse/OCPBUGS-57142): [release-4.18] HCP payload doesn't respect multiple mirrors [#6672](https://github.com/openshift/hypershift/pull/6672)
* [OCPBUGS-60485](https://issues.redhat.com/browse/OCPBUGS-60485): feat(validations): add wildcard support to DNS SAN conflict detection [#6649](https://github.com/openshift/hypershift/pull/6649)
* [OCPBUGS-60148](https://issues.redhat.com/browse/OCPBUGS-60148): Always compress and encode payload in token secret for inplace upgrades [#6721](https://github.com/openshift/hypershift/pull/6721)
* [OCPBUGS-60923](https://issues.redhat.com/browse/OCPBUGS-60923): MCE 2.8 konflux for hcp-cli [#6700](https://github.com/openshift/hypershift/pull/6700)
* [CNTRLPLANE-1333](https://issues.redhat.com/browse/CNTRLPLANE-1333): New API to support specifying cluster-autoscaler flags [#6641](https://github.com/openshift/hypershift/pull/6641)
* [OCPBUGS-60458](https://issues.redhat.com/browse/OCPBUGS-60458): Update PSA from v1beta1 to v1 [#6644](https://github.com/openshift/hypershift/pull/6644)
* [CNTRLPLANE-1269](https://issues.redhat.com/browse/CNTRLPLANE-1269): chore(deps): update konflux references [#6658](https://github.com/openshift/hypershift/pull/6658)
* [CNTRLPLANE-1205](https://issues.redhat.com/browse/CNTRLPLANE-1205): Add missing mce-2.8 pipeline [#6656](https://github.com/openshift/hypershift/pull/6656)
* [Full changelog](https://github.com/openshift/hypershift/compare/bf8ba946b0d1cf7d0a9fd071dd9c3ff80c78aaa6...826bf38632c43d1440673022e71513be4e63b7cb)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/4f6a6d3b806def06b0d1a5a2632bc3ea014687c3)

* [OCPBUGS-80280](https://issues.redhat.com/browse/OCPBUGS-80280): Bump google.golang.org/grpc to v1.79.3 [#143](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/143)
* [OCPBUGS-77207](https://issues.redhat.com/browse/OCPBUGS-77207): [release-4.18] standardize build paths [#122](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/122)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/c7d883c586f548093481d87d7226d875502b30da...4f6a6d3b806def06b0d1a5a2632bc3ea014687c3)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/4a0c35b0464d5c0ae9d61b656b4d0d51c3085b7c)

* [OCPBUGS-67286](https://issues.redhat.com/browse/OCPBUGS-67286): [release-4.18] Fix incomplete vendor/ [#140](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/140)
* [OCPBUGS-51825](https://issues.redhat.com/browse/OCPBUGS-51825): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#120](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/120)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#119](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/119)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/2ba764f9a38c27f82a9198472c584fa633c8f2cd...4a0c35b0464d5c0ae9d61b656b4d0d51c3085b7c)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/6cc2b5e0cf0c8c36e0db6580797a8b09a5793020)

* [OCPBUGS-81647](https://issues.redhat.com/browse/OCPBUGS-81647): bump vpc go sdk [#91](https://github.com/openshift/machine-api-provider-ibmcloud/pull/91)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#87](https://github.com/openshift/machine-api-provider-ibmcloud/pull/87)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/e6eddf85c26eb056108b67fdad43bbbd2d9b4718...6cc2b5e0cf0c8c36e0db6580797a8b09a5793020)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f91e85afe7b21ca5f37ea1934b46f385b3fcb19c)

* [OCPBUGS-80283](https://issues.redhat.com/browse/OCPBUGS-80283): Bump google.golang.org/grpc to v1.79.3 [#1283](https://github.com/openshift/insights-operator/pull/1283)
* [OCPBUGS-76963](https://issues.redhat.com/browse/OCPBUGS-76963): Extends the time for the extractor liveness probe [#1234](https://github.com/openshift/insights-operator/pull/1234)
* [OCPBUGS-76537](https://issues.redhat.com/browse/OCPBUGS-76537): [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1239](https://github.com/openshift/insights-operator/pull/1239)
* [OCPBUGS-68263](https://issues.redhat.com/browse/OCPBUGS-68263): Update github.com/sirupsen/logrus to v1.9.3 [#1205](https://github.com/openshift/insights-operator/pull/1205)
* [OCPBUGS-68263](https://issues.redhat.com/browse/OCPBUGS-68263): [release-4.18] golanci-lint version update & corresponding fixes (#1045) [#1206](https://github.com/openshift/insights-operator/pull/1206)
* [OCPBUGS-66396](https://issues.redhat.com/browse/OCPBUGS-66396): Add filtering to add other possible pod status to QEMU gatherer [#1195](https://github.com/openshift/insights-operator/pull/1195)
* [OCPBUGS-66182](https://issues.redhat.com/browse/OCPBUGS-66182): QEMU logs are not gathered if there are pending status virt-launcher pods [#1189](https://github.com/openshift/insights-operator/pull/1189)
* [OCPBUGS-66181](https://issues.redhat.com/browse/OCPBUGS-66181): [bugfix] The archive's records may include files whose names are out of bounds [#1188](https://github.com/openshift/insights-operator/pull/1188)
* [OCPBUGS-61972](https://issues.redhat.com/browse/OCPBUGS-61972): add missing permissions for replicasets and events [#1146](https://github.com/openshift/insights-operator/pull/1146)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5522aaa3211a0979224ac72363e1beb4ab5b221a...f91e85afe7b21ca5f37ea1934b46f385b3fcb19c)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/3d444833113258a5606cddc55192c9183d520968)

* [OCPBUGS-77789](https://issues.redhat.com/browse/OCPBUGS-77789): remove dnf cache from the container images [#69](https://github.com/openshift/insights-runtime-extractor/pull/69)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/7149f2d5ed4682258bd429cd719ea154e1a27550...3d444833113258a5606cddc55192c9183d520968)


### [ironic](https://github.com/openshift/ironic-image/tree/75856ee3e738e9941b57881e31a307c1d79a4ee8)

* [OCPBUGS-76459](https://issues.redhat.com/browse/OCPBUGS-76459): Bump pyasn1 to 0.5.1-4 [#826](https://github.com/openshift/ironic-image/pull/826)
* [OCPBUGS-74407](https://issues.redhat.com/browse/OCPBUGS-74407): Update sushy to include DGX B200 credentials fix [#832](https://github.com/openshift/ironic-image/pull/832)
* [OCPBUGS-74115](https://issues.redhat.com/browse/OCPBUGS-74115): Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix [#795](https://github.com/openshift/ironic-image/pull/795)
* [OCPBUGS-69790](https://issues.redhat.com/browse/OCPBUGS-69790): Bump eventlet version to 0.33.1-7 [#760](https://github.com/openshift/ironic-image/pull/760)
* [OCPBUGS-65573](https://issues.redhat.com/browse/OCPBUGS-65573): Include Handle HTTP 400 and 409 race condition in Redfish power opera… [#727](https://github.com/openshift/ironic-image/pull/727)
* [OCPBUGS-62647](https://issues.redhat.com/browse/OCPBUGS-62647): Bump sushy to include etag fix [#701](https://github.com/openshift/ironic-image/pull/701)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9161a5fdb75042856bd40eec31bdba7b7c07d4a2...75856ee3e738e9941b57881e31a307c1d79a4ee8)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/e5b494596e52636ade8f462a37e74e557447b773)

* [OCPBUGS-69780](https://issues.redhat.com/browse/OCPBUGS-69780): Bump eventlet version to 0.33.1-7 [#230](https://github.com/openshift/ironic-agent-image/pull/230)
* [OCPBUGS-68360](https://issues.redhat.com/browse/OCPBUGS-68360): Include Test advertised ip reachability before assigning it [#226](https://github.com/openshift/ironic-agent-image/pull/226)
* [OCPBUGS-62456](https://issues.redhat.com/browse/OCPBUGS-62456): netutils: Use ethtool ioctl to get permanent mac address [#206](https://github.com/openshift/ironic-agent-image/pull/206)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/b79bddef03460124923c7ce8616d83f719a49960...e5b494596e52636ade8f462a37e74e557447b773)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/db0d060061c610ec87a6583aff0c8e4ba9e4fa07)

* [OCPBUGS-80190](https://issues.redhat.com/browse/OCPBUGS-80190): Bump google.golang.org/grpc to v1.79.3 [#64](https://github.com/openshift/kubernetes-metrics-server/pull/64)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf...db0d060061c610ec87a6583aff0c8e4ba9e4fa07)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/5a14ea9d338b2582c7c2a8f89f351a0c30f56371)

* [OCPBUGS-60930](https://issues.redhat.com/browse/OCPBUGS-60930): fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 [#125](https://github.com/openshift/kube-rbac-proxy/pull/125)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/526498ab32996a0f67a96530ad7173f955e3fbe2...5a14ea9d338b2582c7c2a8f89f351a0c30f56371)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/046193a8872c145150c28160577002bfd453b2f5)

* [OCPBUGS-74873](https://issues.redhat.com/browse/OCPBUGS-74873): Deduplicate CRS stores [#131](https://github.com/openshift/kube-state-metrics/pull/131)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61...046193a8872c145150c28160577002bfd453b2f5)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/815b43b7f7288da76dd314553e113aefe2a5897d)

* [OCPBUGS-78273](https://issues.redhat.com/browse/OCPBUGS-78273): fix /vendor for hermetic 4.18 [#239](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/239)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5...815b43b7f7288da76dd314553e113aefe2a5897d)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/c323ecc7e44eec1ac2f5da97e1579df29f78cd1f)

* [OCPBUGS-79362](https://issues.redhat.com/browse/OCPBUGS-79362): Add annotation-based fallback for infra VM node ID resolution [#86](https://github.com/openshift/kubevirt-csi-driver/pull/86)
* [OCPBUGS-63670](https://issues.redhat.com/browse/OCPBUGS-63670): Add awels as an approver in 4.18 branch [#73](https://github.com/openshift/kubevirt-csi-driver/pull/73)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Implement volume expansion [#71](https://github.com/openshift/kubevirt-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2111495e6d03f1bfe0702996fdd1355ca21b78cf...c323ecc7e44eec1ac2f5da97e1579df29f78cd1f)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/875b03bd28f1104af74413c3bc72e4546a428bf4)

* [OCPBUGS-77194](https://issues.redhat.com/browse/OCPBUGS-77194): Fix incomplete vendor/ [#300](https://github.com/openshift/cluster-api-provider-libvirt/pull/300)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...875b03bd28f1104af74413c3bc72e4546a428bf4)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b3a96a466d238ecc73238f57b7fc14a6d9929d9a)

* [OCPBUGS-78795](https://issues.redhat.com/browse/OCPBUGS-78795): [release-4.18] : correct aws kms permissions [#1478](https://github.com/openshift/machine-api-operator/pull/1478)
* [OCPBUGS-78796](https://issues.redhat.com/browse/OCPBUGS-78796): [release-4.18] Use resource group when generating default Azure image [#1480](https://github.com/openshift/machine-api-operator/pull/1480)
* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Enabled 10 concurrent reconciles on GCP [#1392](https://github.com/openshift/machine-api-operator/pull/1392)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc...b3a96a466d238ecc73238f57b7fc14a6d9929d9a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/33b3550f9b402d1716f1362149f4bee0ac01d245)

* [OCPBUGS-86845](https://issues.redhat.com/browse/OCPBUGS-86845): Apply password only if changes exist [#6113](https://github.com/openshift/machine-config-operator/pull/6113)
* [OCPBUGS-86695](https://issues.redhat.com/browse/OCPBUGS-86695): use --delete-if-present for karg removal [#6102](https://github.com/openshift/machine-config-operator/pull/6102)
* [OCPBUGS-86844](https://issues.redhat.com/browse/OCPBUGS-86844): Fix ssh and password rollbacks [#6096](https://github.com/openshift/machine-config-operator/pull/6096)
* [OCPBUGS-86692](https://issues.redhat.com/browse/OCPBUGS-86692): Fix re-cordon detection [#6101](https://github.com/openshift/machine-config-operator/pull/6101)
* [OCPBUGS-86300](https://issues.redhat.com/browse/OCPBUGS-86300): Add terminationMessagePolicy to build pod containers [#6074](https://github.com/openshift/machine-config-operator/pull/6074)
* [OCPBUGS-86021](https://issues.redhat.com/browse/OCPBUGS-86021): Fix units rollback if update failure [#6052](https://github.com/openshift/machine-config-operator/pull/6052)
* [OCPBUGS-79483](https://issues.redhat.com/browse/OCPBUGS-79483): set default-timeout-stop to 200s globally [#5805](https://github.com/openshift/machine-config-operator/pull/5805)
* [OCPBUGS-62692](https://issues.redhat.com/browse/OCPBUGS-62692): configure-ovs: work around a Cisco switch issue [#5329](https://github.com/openshift/machine-config-operator/pull/5329)
* [OCPBUGS-78056](https://issues.redhat.com/browse/OCPBUGS-78056): Prevent unnecessary systemd unit disable [#5758](https://github.com/openshift/machine-config-operator/pull/5758)
* [OCPBUGS-74148](https://issues.redhat.com/browse/OCPBUGS-74148): enable nodeip-configuration for platform external [#5578](https://github.com/openshift/machine-config-operator/pull/5578)
* [OCPBUGS-77777](https://issues.redhat.com/browse/OCPBUGS-77777): reduce MCO image size [#5738](https://github.com/openshift/machine-config-operator/pull/5738)
* [OCPBUGS-77576](https://issues.redhat.com/browse/OCPBUGS-77576): mcd_config_drift not working properly [#5726](https://github.com/openshift/machine-config-operator/pull/5726)
* [OCPBUGS-77421](https://issues.redhat.com/browse/OCPBUGS-77421): Remove MCD liveness probe [#5710](https://github.com/openshift/machine-config-operator/pull/5710)
* [OCPBUGS-74644](https://issues.redhat.com/browse/OCPBUGS-74644): After OCL is enabled few phases in MCN are not updating as expected [#5605](https://github.com/openshift/machine-config-operator/pull/5605)
* [OCPBUGS-77092](https://issues.redhat.com/browse/OCPBUGS-77092): Machine-config controller should not log about non-existent pull-secret changes [#5680](https://github.com/openshift/machine-config-operator/pull/5680)
* [OCPBUGS-77041](https://issues.redhat.com/browse/OCPBUGS-77041): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5671](https://github.com/openshift/machine-config-operator/pull/5671)
* [OCPBUGS-76560](https://issues.redhat.com/browse/OCPBUGS-76560): [release-4.18]: cherry pick to few fixes that needed for missing services and configuration [#5653](https://github.com/openshift/machine-config-operator/pull/5653)
* [OCPBUGS-71227](https://issues.redhat.com/browse/OCPBUGS-71227): MCP is not correctly degraded when a pivotError happens [#5534](https://github.com/openshift/machine-config-operator/pull/5534)
* [OCPBUGS-70336](https://issues.redhat.com/browse/OCPBUGS-70336): Remove log exposing kubeconfig [#5528](https://github.com/openshift/machine-config-operator/pull/5528)
* [OCPBUGS-62169](https://issues.redhat.com/browse/OCPBUGS-62169): Fix - NetworkManager restart or crash renders br-ex unusable [#5356](https://github.com/openshift/machine-config-operator/pull/5356)
* [OCPBUGS-65850](https://issues.redhat.com/browse/OCPBUGS-65850): Remove --mount directives [#5433](https://github.com/openshift/machine-config-operator/pull/5433)
* [OCPBUGS-62294](https://issues.redhat.com/browse/OCPBUGS-62294): Make static DNS with DHCP IP work [#5311](https://github.com/openshift/machine-config-operator/pull/5311)
* [OCPBUGS-63346](https://issues.redhat.com/browse/OCPBUGS-63346): Invalid architecture value found in annotation during 4.19 update [#5366](https://github.com/openshift/machine-config-operator/pull/5366)
* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Enable debug logging for nodeip-configuration [#5220](https://github.com/openshift/machine-config-operator/pull/5220)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5325](https://github.com/openshift/machine-config-operator/pull/5325)
* [OCPBUGS-62845](https://issues.redhat.com/browse/OCPBUGS-62845): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5341](https://github.com/openshift/machine-config-operator/pull/5341)
* [OCPBUGS-62499](https://issues.redhat.com/browse/OCPBUGS-62499): Add /etc/docker/certs.d to template [#5320](https://github.com/openshift/machine-config-operator/pull/5320)
* [OCPBUGS-62637](https://issues.redhat.com/browse/OCPBUGS-62637): Machine-config controller should actively manage cordon while draining [#5322](https://github.com/openshift/machine-config-operator/pull/5322)
* [OCPBUGS-62350](https://issues.redhat.com/browse/OCPBUGS-62350): Add mcd_local_unsupported_packages recording rule [#5315](https://github.com/openshift/machine-config-operator/pull/5315)
* [OCPBUGS-62321](https://issues.redhat.com/browse/OCPBUGS-62321): Add control-plane label for master nodes on legacy clusters [#5314](https://github.com/openshift/machine-config-operator/pull/5314)
* [OCPBUGS-61840](https://issues.redhat.com/browse/OCPBUGS-61840): Override NMState service definition [#5288](https://github.com/openshift/machine-config-operator/pull/5288)
* [OCPBUGS-57357](https://issues.redhat.com/browse/OCPBUGS-57357): Race in configure-ovs.sh affects bonding interface configuration. [#5118](https://github.com/openshift/machine-config-operator/pull/5118)
* [OCPBUGS-59929](https://issues.redhat.com/browse/OCPBUGS-59929), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5207](https://github.com/openshift/machine-config-operator/pull/5207)
* [OCPBUGS-60034](https://issues.redhat.com/browse/OCPBUGS-60034): Add workaround fix for static pod race [#5212](https://github.com/openshift/machine-config-operator/pull/5212)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b80d590e99b9ea3d7c8d4126ce2f801c05856d1e...33b3550f9b402d1716f1362149f4bee0ac01d245)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/c8569da6694004a87851b5d7cd0878e964f954a6)

* [OCPBUGS-82149](https://issues.redhat.com/browse/OCPBUGS-82149): Return error when network data Secret lacks nmstate key [#174](https://github.com/openshift/image-customization-controller/pull/174)
* [OCPBUGS-77888](https://issues.redhat.com/browse/OCPBUGS-77888): Clean up dnf cache to reduce container image size [#168](https://github.com/openshift/image-customization-controller/pull/168)
* [OCPBUGS-68262](https://issues.redhat.com/browse/OCPBUGS-68262): [4.18] Uplift logrus [#151](https://github.com/openshift/image-customization-controller/pull/151)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d9a71247dafd469182d4bd13ef227c9be82a1e32...c8569da6694004a87851b5d7cd0878e964f954a6)


### [metallb-frr](https://github.com/openshift/frr/tree/760c6639a0c4825745d69b389b50689ebc2b8052)

* [OCPBUGS-74485](https://issues.redhat.com/browse/OCPBUGS-74485): Dockerfile: unpin FRR rpm [#121](https://github.com/openshift/frr/pull/121)
* [Full changelog](https://github.com/openshift/frr/compare/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91...760c6639a0c4825745d69b389b50689ebc2b8052)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/01882e9e933c81141b22d0095827ec5f0ec44ccf)

* [OCPBUGS-79448](https://issues.redhat.com/browse/OCPBUGS-79448): immutable bump: fix for CVE-2026-29063 [#922](https://github.com/openshift/monitoring-plugin/pull/922)
* [OU-1241](https://issues.redhat.com/browse/OU-1241): unset frontend timeout to use the backend configuration [#905](https://github.com/openshift/monitoring-plugin/pull/905)
* [OCPBUGS-83374](https://issues.redhat.com/browse/OCPBUGS-83374): fix: re encode params when redirecting from graph to query-browser [#878](https://github.com/openshift/monitoring-plugin/pull/878)
* NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds [#870](https://github.com/openshift/monitoring-plugin/pull/870)
* [OU-993](https://issues.redhat.com/browse/OU-993): adding cypress Dockerfiles [#861](https://github.com/openshift/monitoring-plugin/pull/861)
* [OU-876](https://issues.redhat.com/browse/OU-876): monitoring automated testing backported and adjusted to pf-5 and diff UI [#777](https://github.com/openshift/monitoring-plugin/pull/777)
* NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] [#818](https://github.com/openshift/monitoring-plugin/pull/818)
* [OCPBUGS-70291](https://issues.redhat.com/browse/OCPBUGS-70291): fix: update qs vulnerable dependency [#739](https://github.com/openshift/monitoring-plugin/pull/739)
* [OCPBUGS-65958](https://issues.redhat.com/browse/OCPBUGS-65958): Fix metrics gaps 4.18 [#656](https://github.com/openshift/monitoring-plugin/pull/656)
* [OCPBUGS-64735](https://issues.redhat.com/browse/OCPBUGS-64735): allow tenancy access to metrics tag [#638](https://github.com/openshift/monitoring-plugin/pull/638)
* [OU-1059](https://issues.redhat.com/browse/OU-1059): add perspective to action injector [#632](https://github.com/openshift/monitoring-plugin/pull/632)
* NO-JIRA: update i18n strings [#508](https://github.com/openshift/monitoring-plugin/pull/508)
* [OCPBUGS-60199](https://issues.redhat.com/browse/OCPBUGS-60199): feat: add alerting rules tab to dev console [#493](https://github.com/openshift/monitoring-plugin/pull/493)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/de71b0cc8a93d8339ec708bb6ec3bc0861aea9aa...01882e9e933c81141b22d0095827ec5f0ec44ccf)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/c5fd5666c4b85bd4b7bcf0a34feedebc05b14827)

* [OCPBUGS-85249](https://issues.redhat.com/browse/OCPBUGS-85249): Fix server url in kubeconfig [#298](https://github.com/openshift/multus-cni/pull/298)
* NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image [#291](https://github.com/openshift/multus-cni/pull/291)
* [OCPBUGS-77853](https://issues.redhat.com/browse/OCPBUGS-77853): hermetic 4.18 [#276](https://github.com/openshift/multus-cni/pull/276)
* [Full changelog](https://github.com/openshift/multus-cni/compare/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d...c5fd5666c4b85bd4b7bcf0a34feedebc05b14827)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/3362bbc4c47ad7aec4f9551355e32870c30ab7c8)

* [OCPBUGS-54939](https://issues.redhat.com/browse/OCPBUGS-54939): [release-4.18]: Support default ports value [#68](https://github.com/openshift/multus-networkpolicy/pull/68)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32...3362bbc4c47ad7aec4f9551355e32870c30ab7c8)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/86191ded510a5ec05f05b77ae847b86f50673258)

* [OCPBUGS-59697](https://issues.redhat.com/browse/OCPBUGS-59697): Prevent accidental IP deallocation in statefulsets [#376](https://github.com/openshift/whereabouts-cni/pull/376)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/9b1662c04e834d5f90f300636b4249027139e663...86191ded510a5ec05f05b77ae847b86f50673258)


### [must-gather](https://github.com/openshift/must-gather/tree/bfba924cb4cbb19f4c72d27b7ea5990df60cbc30)

* [OCPBUGS-86019](https://issues.redhat.com/browse/OCPBUGS-86019): Collect object size with the object count [#547](https://github.com/openshift/must-gather/pull/547)
* [OCPBUGS-46437](https://issues.redhat.com/browse/OCPBUGS-46437): Separate resources with comma to fix malformed inspect [#470](https://github.com/openshift/must-gather/pull/470)
* [Full changelog](https://github.com/openshift/must-gather/compare/b851bd3589eb0f80471d4de2114a7635b0d12663...bfba924cb4cbb19f4c72d27b7ea5990df60cbc30)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)

* [OCPBUGS-62793](https://issues.redhat.com/browse/OCPBUGS-62793): Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted [#99](https://github.com/openshift/bond-cni/pull/99)
* [Full changelog](https://github.com/openshift/bond-cni/compare/a5e5e80be5698c12d3223cf377386baa977bc587...e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/11e2dec958aa2adcad07b9eecaf8f50479e0880a)

* [OCPBUGS-58781](https://issues.redhat.com/browse/OCPBUGS-58781): Bump github.com/golang/glog to v1.2.4 (#111) [#111](https://github.com/openshift/network-metrics-daemon/pull/111)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/c060ecaf93371d1f2492e222eb4c0bd04c568f51...11e2dec958aa2adcad07b9eecaf8f50479e0880a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/c35d7b76a6f25ced8fc3a4ee1761620444a34157)

* [OCPBUGS-41880](https://issues.redhat.com/browse/OCPBUGS-41880): Retain namespace selection between network policies tabs [#424](https://github.com/openshift/networking-console-plugin/pull/424)
* [OCPBUGS-87000](https://issues.redhat.com/browse/OCPBUGS-87000): Update Dockerfile.art to 4.22 build image [#426](https://github.com/openshift/networking-console-plugin/pull/426)
* [OCPBUGS-83382](https://issues.redhat.com/browse/OCPBUGS-83382): Fix CVE 2026 34043 serialize javascript 4.18 [#413](https://github.com/openshift/networking-console-plugin/pull/413)
* [release-4:18] OCPBUGS-85067: Migration from yarn to npm [#412](https://github.com/openshift/networking-console-plugin/pull/412)
* [OCPBUGS-81606](https://issues.redhat.com/browse/OCPBUGS-81606): Fix CVE-2026-CVE-2026-4800 in lodash [#401](https://github.com/openshift/networking-console-plugin/pull/401)
* [OCPBUGS-79449](https://issues.redhat.com/browse/OCPBUGS-79449): Bump immutable [#390](https://github.com/openshift/networking-console-plugin/pull/390)
* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#319](https://github.com/openshift/networking-console-plugin/pull/319)
* [OCPBUGS-63582](https://issues.redhat.com/browse/OCPBUGS-63582): Fixed - Extra semicolon observed before Service IP in OCP Console [#306](https://github.com/openshift/networking-console-plugin/pull/306)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/15535681de838e97e0a137fb0cc7123746019b08...c35d7b76a6f25ced8fc3a4ee1761620444a34157)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/1078b191784c375d31008aef9ee2b8484ca5fe7f)

* NO-JIRA: (chore): update OWNERS file [#170](https://github.com/openshift/oauth-apiserver/pull/170)
* [OCPBUGS-65841](https://issues.redhat.com/browse/OCPBUGS-65841): UPSTREAM: &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#155](https://github.com/openshift/oauth-apiserver/pull/155)
* [OCPBUGS-63050](https://issues.redhat.com/browse/OCPBUGS-63050): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#149](https://github.com/openshift/oauth-apiserver/pull/149)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/2575ff417406ea6680aff0de6efb524dbbe2b8d2...1078b191784c375d31008aef9ee2b8484ca5fe7f)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/9225edb9821cab67ffa628b05e0eed67973436f0)

* [OCPBUGS-61444](https://issues.redhat.com/browse/OCPBUGS-61444): Update x/crypto to v0.31.0 [#333](https://github.com/openshift/oauth-proxy/pull/333)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/91582506b4dc8344743ef8ce5e5cfa2773ff1773...9225edb9821cab67ffa628b05e0eed67973436f0)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/22a9fb8772753a2a56aa061b80bdc22ba4b2c992)

* [OCPBUGS-66051](https://issues.redhat.com/browse/OCPBUGS-66051): Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) [#1324](https://github.com/openshift/oc-mirror/pull/1324)
* [OCPBUGS-65510](https://issues.redhat.com/browse/OCPBUGS-65510): removes unintended exec permissions [#1312](https://github.com/openshift/oc-mirror/pull/1312)
* [OCPBUGS-62696](https://issues.redhat.com/browse/OCPBUGS-62696): v2/cli: show binary version in output [#1286](https://github.com/openshift/oc-mirror/pull/1286)
* [OCPBUGS-62711](https://issues.redhat.com/browse/OCPBUGS-62711): generate the archive only after mirroring [#1287](https://github.com/openshift/oc-mirror/pull/1287)
* [OCPBUGS-62432](https://issues.redhat.com/browse/OCPBUGS-62432): changes the warning message of 4.21 [#1278](https://github.com/openshift/oc-mirror/pull/1278)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/ba546132e84aabc324dba3d3f4060b4ca714d58f...22a9fb8772753a2a56aa061b80bdc22ba4b2c992)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/180aa92c13fda1aa1ae35205c9b380a4ead41e8b)

* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#139](https://github.com/openshift/operator-framework-catalogd/pull/139)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/9f981b3ee5822098c6e648aa30742da07318f954...180aa92c13fda1aa1ae35205c9b380a4ead41e8b)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/16909bf936e98f96625de2334a45f84e07b09fdb)

* [OCPBUGS-80304](https://issues.redhat.com/browse/OCPBUGS-80304): Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 [#735](https://github.com/openshift/operator-framework-operator-controller/pull/735)
* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#509](https://github.com/openshift/operator-framework-operator-controller/pull/509)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/ea60189f95af09f3c5c50c8de41d8f601bc5e881...16909bf936e98f96625de2334a45f84e07b09fdb)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/be33e23705684b7b8b0e194402d76446b45c66c0)

* [OCPBUGS-74234](https://issues.redhat.com/browse/OCPBUGS-74234): Bump library-go for route path validation fix [#603](https://github.com/openshift/openshift-apiserver/pull/603)
* [OCPBUGS-69955](https://issues.redhat.com/browse/OCPBUGS-69955): Add ValidatingAdmissionPolicy and check for omissions next time. [#589](https://github.com/openshift/openshift-apiserver/pull/589)
* [OCPBUGS-66379](https://issues.redhat.com/browse/OCPBUGS-66379): pkg/image: conditionally parse raw image manifest [#585](https://github.com/openshift/openshift-apiserver/pull/585)
* [OCPBUGS-65842](https://issues.redhat.com/browse/OCPBUGS-65842): UPSTREAM &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#581](https://github.com/openshift/openshift-apiserver/pull/581)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/5d7a65bad932a0434928571b74db27588bb9be2d...be33e23705684b7b8b0e194402d76446b45c66c0)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/8ee744063ed12b249f1a2b89e9af4f53b2f1daf7)

* [OCPBUGS-61002](https://issues.redhat.com/browse/OCPBUGS-61002): legacy image pull secret rollback controller [#411](https://github.com/openshift/openshift-controller-manager/pull/411)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/c87671821e6b05173e5bdc0aab1f80f29438e192...8ee744063ed12b249f1a2b89e9af4f53b2f1daf7)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d5e6ff9f4baf4f306374f894d7b5e3e36ef52520)

* [OCPBUGS-64816](https://issues.redhat.com/browse/OCPBUGS-64816): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#371](https://github.com/openshift/cluster-api-provider-openstack/pull/371)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/ce2c2d17d9c489d776f0383869d453dff89b0462...d5e6ff9f4baf4f306374f894d7b5e3e36ef52520)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/c43dba2c4d9edb0ffc62b71cb26815da31c8b9c8)

* [OCPBUGS-69648](https://issues.redhat.com/browse/OCPBUGS-69648): Don't record event for every reconcile [#143](https://github.com/openshift/machine-api-provider-openstack/pull/143)
* [OCPBUGS-76792](https://issues.redhat.com/browse/OCPBUGS-76792): Fix make test [#159](https://github.com/openshift/machine-api-provider-openstack/pull/159)
* [OCPBUGS-74986](https://issues.redhat.com/browse/OCPBUGS-74986): Revendor CAPO [#152](https://github.com/openshift/machine-api-provider-openstack/pull/152)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/d914e77ee67211024153b1535e8709c3cf190512...c43dba2c4d9edb0ffc62b71cb26815da31c8b9c8)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f3a32b076b409a9be12ca8082ef758f4ddffd41e)

* [OCPBUGS-80311](https://issues.redhat.com/browse/OCPBUGS-80311), [OCPBUGS-80312](https://issues.redhat.com/browse/OCPBUGS-80312), [OCPBUGS-80313](https://issues.redhat.com/browse/OCPBUGS-80313): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] [#1314](https://github.com/openshift/operator-framework-olm/pull/1314)
* [OCPBUGS-81473](https://issues.redhat.com/browse/OCPBUGS-81473): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1273](https://github.com/openshift/operator-framework-olm/pull/1273)
* [OCPBUGS-77714](https://issues.redhat.com/browse/OCPBUGS-77714): Remove the collect-profiles info from the microshift kustomization file [#1245](https://github.com/openshift/operator-framework-olm/pull/1245)
* [OCPBUGS-76924](https://issues.redhat.com/browse/OCPBUGS-76924): Remove the collect-profiles job [#1231](https://github.com/openshift/operator-framework-olm/pull/1231)
* [OCPBUGS-65700](https://issues.redhat.com/browse/OCPBUGS-65700): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1156](https://github.com/openshift/operator-framework-olm/pull/1156)
* [OCPBUGS-61364](https://issues.redhat.com/browse/OCPBUGS-61364): [4.18] e2e stability fixes [#1080](https://github.com/openshift/operator-framework-olm/pull/1080)
* [OCPBUGS-60644](https://issues.redhat.com/browse/OCPBUGS-60644): Add NetworkPolicy as a supported kind [#1048](https://github.com/openshift/operator-framework-olm/pull/1048)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/583538413e0032f33ce2236e9ea503b85226554e...f3a32b076b409a9be12ca8082ef758f4ddffd41e)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/34521c26450e93eea0379e52f86b02c69fbacb49)

* [OCPBUGS-73883](https://issues.redhat.com/browse/OCPBUGS-73883): Increase default catalog polling interval to 4h (240m) [#707](https://github.com/operator-framework/operator-marketplace/pull/707)
* [OCPBUGS-68272](https://issues.redhat.com/browse/OCPBUGS-68272), [OCPBUGS-68273](https://issues.redhat.com/browse/OCPBUGS-68273): CVE-2025-65637 fixed in logrus v1.9.3+ [#703](https://github.com/operator-framework/operator-marketplace/pull/703)
* [OCPBUGS-62218](https://issues.redhat.com/browse/OCPBUGS-62218): Remove Expect func so that the test case can use the retry logic [#669](https://github.com/operator-framework/operator-marketplace/pull/669)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c06a810b321ad79ef572ce36ed935332a58ea319...34521c26450e93eea0379e52f86b02c69fbacb49)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/7e6b238838bc25c546022ba4ef3316fa98926d79)

* [OCPBUGS-86230](https://issues.redhat.com/browse/OCPBUGS-86230): Branch Sync release-4.19 to release-4.18 [05-19-2026] [#3197](https://github.com/openshift/ovn-kubernetes/pull/3197)
* [OCPBUGS-74399](https://issues.redhat.com/browse/OCPBUGS-74399), [OCPBUGS-85434](https://issues.redhat.com/browse/OCPBUGS-85434): Branch Sync release-4.19 to release-4.18 [05-12-2026] [#3184](https://github.com/openshift/ovn-kubernetes/pull/3184)
* [OCPBUGS-77151](https://issues.redhat.com/browse/OCPBUGS-77151), [OCPBUGS-83567](https://issues.redhat.com/browse/OCPBUGS-83567): Branch Sync release-4.19 to release-4.18 [04-16-2026] [#3143](https://github.com/openshift/ovn-kubernetes/pull/3143)
* [OCPBUGS-82148](https://issues.redhat.com/browse/OCPBUGS-82148): Branch Sync release-4.19 to release-4.18 [04-05-2026] [#3117](https://github.com/openshift/ovn-kubernetes/pull/3117)
* [OCPBUGS-81479](https://issues.redhat.com/browse/OCPBUGS-81479): node: fix serviceUpdateNotNeeded nil pointer comparison [#3101](https://github.com/openshift/ovn-kubernetes/pull/3101)
* [OCPBUGS-78015](https://issues.redhat.com/browse/OCPBUGS-78015): Add pperiyasamy to OWNERS for release-4.18 [#3045](https://github.com/openshift/ovn-kubernetes/pull/3045)
* [OCPBUGS-77516](https://issues.redhat.com/browse/OCPBUGS-77516): Clear stale conntrack UDP entries for nodePorts [#3016](https://github.com/openshift/ovn-kubernetes/pull/3016)
* [OCPBUGS-77083](https://issues.redhat.com/browse/OCPBUGS-77083), [OCPBUGS-77106](https://issues.redhat.com/browse/OCPBUGS-77106): [release-4.18] combined backport PR for 2 escalations [#2987](https://github.com/openshift/ovn-kubernetes/pull/2987)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): Branch Sync release-4.19 to release-4.18 [02-04-2026] [#2970](https://github.com/openshift/ovn-kubernetes/pull/2970)
* [OCPBUGS-74270](https://issues.redhat.com/browse/OCPBUGS-74270): release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync [#2943](https://github.com/openshift/ovn-kubernetes/pull/2943)
* [OCPBUGS-70346](https://issues.redhat.com/browse/OCPBUGS-70346): Branch Sync release-4.19 to release-4.18 [01-07-2026] [#2922](https://github.com/openshift/ovn-kubernetes/pull/2922)
* [OCPBUGS-66140](https://issues.redhat.com/browse/OCPBUGS-66140): Branch Sync release-4.19 to release-4.18 [12-31-2025] [#2916](https://github.com/openshift/ovn-kubernetes/pull/2916)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [OCPBUGS-66360](https://issues.redhat.com/browse/OCPBUGS-66360), [OCPBUGS-66381](https://issues.redhat.com/browse/OCPBUGS-66381), [OCPBUGS-66428](https://issues.redhat.com/browse/OCPBUGS-66428): Branch Sync release-4.19 to release-4.18 [12-03-2025] [#2895](https://github.com/openshift/ovn-kubernetes/pull/2895)
* [OCPBUGS-68347](https://issues.redhat.com/browse/OCPBUGS-68347): Add ricky-rav to OWNERS for release-4.18 [#2897](https://github.com/openshift/ovn-kubernetes/pull/2897)
* [OCPBUGS-64855](https://issues.redhat.com/browse/OCPBUGS-64855): Fix stale EIP assignments during failover and controller restart [#2849](https://github.com/openshift/ovn-kubernetes/pull/2849)
* [OCPBUGS-64780](https://issues.redhat.com/browse/OCPBUGS-64780): kubevirt: fix bad release of IPs of live migratable pods [#2847](https://github.com/openshift/ovn-kubernetes/pull/2847)
* [OCPBUGS-63459](https://issues.redhat.com/browse/OCPBUGS-63459): Branch Sync release-4.19 to release-4.18 [10-22-2025] [#2825](https://github.com/openshift/ovn-kubernetes/pull/2825)
* [OCPBUGS-63716](https://issues.redhat.com/browse/OCPBUGS-63716): Skip Pending pods in EgressIP status updates [#2836](https://github.com/openshift/ovn-kubernetes/pull/2836)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] [#2811](https://github.com/openshift/ovn-kubernetes/pull/2811)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Fix EgressIP stale GARP post reboot + pod restart [#2775](https://github.com/openshift/ovn-kubernetes/pull/2775)
* [OCPBUGS-59744](https://issues.redhat.com/browse/OCPBUGS-59744), [OCPBUGS-61455](https://issues.redhat.com/browse/OCPBUGS-61455): [4.18] allow default network -&gt; localnet on the same node for any localnet subnet [#2785](https://github.com/openshift/ovn-kubernetes/pull/2785)
* [OCPBUGS-61748](https://issues.redhat.com/browse/OCPBUGS-61748): [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] [#2777](https://github.com/openshift/ovn-kubernetes/pull/2777)
* [OCPBUGS-59680](https://issues.redhat.com/browse/OCPBUGS-59680): [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] [#2768](https://github.com/openshift/ovn-kubernetes/pull/2768)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): Update OWNERS file: Add Patryk/Martin as approvers [#2700](https://github.com/openshift/ovn-kubernetes/pull/2700)
* [OCPBUGS-59371](https://issues.redhat.com/browse/OCPBUGS-59371): EIP OVN controller: stop pod config flap [#2703](https://github.com/openshift/ovn-kubernetes/pull/2703)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5236895f6c35e2f4b16c0fad78a05126aa2ddbd2...7e6b238838bc25c546022ba4ef3316fa98926d79)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/e8700dfa4d7b191acd1c12a0ed1d54f1c9ac5b3a)

* [OCPBUGS-80317](https://issues.redhat.com/browse/OCPBUGS-80317): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#130](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/130)
* [OCPBUGS-82774](https://issues.redhat.com/browse/OCPBUGS-82774): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#124](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/124)
* [OCPBUGS-51896](https://issues.redhat.com/browse/OCPBUGS-51896): Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 [#102](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/102)
* [OCPBUGS-70002](https://issues.redhat.com/browse/OCPBUGS-70002): Update builder image's golang version to 1.23 [#103](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/103)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/d36aea34452210f988f74e93e0640318f3db1938...e8700dfa4d7b191acd1c12a0ed1d54f1c9ac5b3a)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/9c9131b7deb794eb8b220c70d4ca6ac245623761)

* [OCPBUGS-80318](https://issues.redhat.com/browse/OCPBUGS-80318): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#111](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/111)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/01fc505abcf3b83bba284a00258b6761a9b7ce8a...9c9131b7deb794eb8b220c70d4ca6ac245623761)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/601c30ffc7d3f7303a654aa4bbd4242c8b5ac8ad)

* [OCPBUGS-80319](https://issues.redhat.com/browse/OCPBUGS-80319): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 [#99](https://github.com/openshift/cloud-provider-powervs/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/17ae6fba6eda58aa0d91f162206386105dff9962...601c30ffc7d3f7303a654aa4bbd4242c8b5ac8ad)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/74e3ece7ce84bef0f21bd1bab775f7e6dabb676b)

* [OCPBUGS-61163](https://issues.redhat.com/browse/OCPBUGS-61163): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#125](https://github.com/openshift/machine-api-provider-powervs/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/10ac06f57bface0b3481e111c4e1d5b7f52db7f4...74e3ece7ce84bef0f21bd1bab775f7e6dabb676b)


### [prometheus](https://github.com/openshift/prometheus/tree/988ce8bbdcaea76028aa84c6bbd2f6a1f08fd1a4)

* [OCPBUGS-80320](https://issues.redhat.com/browse/OCPBUGS-80320): Bump google.golang.org/grpc to v1.79.3 [#308](https://github.com/openshift/prometheus/pull/308)
* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore: compute highestTimestamp at queryManager level [#267](https://github.com/openshift/prometheus/pull/267)
* [Full changelog](https://github.com/openshift/prometheus/compare/df5ef25778ad5949c637beae1b9c303b4c044302...988ce8bbdcaea76028aa84c6bbd2f6a1f08fd1a4)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/2e844270ca5c4fc6d444a77b01d2b79a93405538)

* [OCPBUGS-74976](https://issues.redhat.com/browse/OCPBUGS-74976): Include go-verify-deps expected files in gitignore [#114](https://github.com/openshift/prometheus-alertmanager/pull/114)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/a432067579aaa60326a104f4ce2eba18e1ab444c...2e844270ca5c4fc6d444a77b01d2b79a93405538)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/9bbce0b88e6b5aa4f9069aa202ea1eab1315df82)

* [OCPBUGS-77298](https://issues.redhat.com/browse/OCPBUGS-77298): backport upstream fix to reconcile resources with inconsistent status [#370](https://github.com/openshift/prometheus-operator/pull/370)
* [OCPBUGS-77398](https://issues.redhat.com/browse/OCPBUGS-77398): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#366](https://github.com/openshift/prometheus-operator/pull/366)
* [OCPBUGS-61965](https://issues.redhat.com/browse/OCPBUGS-61965): reconcile workload configurations when a referenced secret/configmap key is updated [#347](https://github.com/openshift/prometheus-operator/pull/347)
* [OCPBUGS-58194](https://issues.redhat.com/browse/OCPBUGS-58194): Fix: One Alertmanager Config failing blocks all others [#335](https://github.com/openshift/prometheus-operator/pull/335)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/74987748a60f14816975fa1070ce485393a38f64...9bbce0b88e6b5aa4f9069aa202ea1eab1315df82)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/2484b3e8e7fbb8bf14f930a71f56781289276dfa)

* [OCPBUGS-80199](https://issues.redhat.com/browse/OCPBUGS-80199): Bump google.golang.org/grpc to v1.79.3 [#85](https://github.com/openshift/route-controller-manager/pull/85)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3...2484b3e8e7fbb8bf14f930a71f56781289276dfa)


### [telemeter](https://github.com/openshift/telemeter/tree/999cdb5f7cde3beb8dcf45fe13ba34d0fb5837c4)

* [OCPBUGS-80333](https://issues.redhat.com/browse/OCPBUGS-80333): Bump google.golang.org/grpc to v1.79.3 [#599](https://github.com/openshift/telemeter/pull/599)
* [OCPBUGS-81804](https://issues.redhat.com/browse/OCPBUGS-81804): [release-4.18] Fix CVE-2026-34986 [#596](https://github.com/openshift/telemeter/pull/596)
* [Full changelog](https://github.com/openshift/telemeter/compare/490612bdaa6412762403c8eee902c20f033ca5aa...999cdb5f7cde3beb8dcf45fe13ba34d0fb5837c4)


### [tests](https://github.com/openshift/origin/tree/43c5124437fdc7a91708070434fb6beb7d86b92c)

* [OCPBUGS-77876](https://issues.redhat.com/browse/OCPBUGS-77876): Backport: Remove duplicated graceful termination test from release-4.18 [#30702](https://github.com/openshift/origin/pull/30702)
* [OCPBUGS-74207](https://issues.redhat.com/browse/OCPBUGS-74207): Unrevert TLS tests with fixes [#30708](https://github.com/openshift/origin/pull/30708)
* [OCPBUGS-69900](https://issues.redhat.com/browse/OCPBUGS-69900): Updated the upgrade duration limit to 100 minutes for ppc64le [#30628](https://github.com/openshift/origin/pull/30628)
* [OCPBUGS-63668](https://issues.redhat.com/browse/OCPBUGS-63668): Add imagestream update dryrun test [#30436](https://github.com/openshift/origin/pull/30436)
* [OCPBUGS-63712](https://issues.redhat.com/browse/OCPBUGS-63712): Migrate OCP-32383 to upstream [#30443](https://github.com/openshift/origin/pull/30443)
* [OCPBUGS-61698](https://issues.redhat.com/browse/OCPBUGS-61698): chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster [#30253](https://github.com/openshift/origin/pull/30253)
* [OCPBUGS-60511](https://issues.redhat.com/browse/OCPBUGS-60511): Bump to latest openshift/kubernetes (v1.31.12) [#30230](https://github.com/openshift/origin/pull/30230)
* [OCPBUGS-60662](https://issues.redhat.com/browse/OCPBUGS-60662): images/tests: Remove rteval [#30135](https://github.com/openshift/origin/pull/30135)
* [OCPBUGS-60881](https://issues.redhat.com/browse/OCPBUGS-60881): Exclude RHEL nodes in verifying that nodes have no unexpected reboots test [#30170](https://github.com/openshift/origin/pull/30170)
* [OCPBUGS-60881](https://issues.redhat.com/browse/OCPBUGS-60881): extended/machines: add --no-pager to journalctl cmds [#30180](https://github.com/openshift/origin/pull/30180)
* [OCPBUGS-60927](https://issues.redhat.com/browse/OCPBUGS-60927): Wait 30s after the upgrade is complete to validate workloads [#30179](https://github.com/openshift/origin/pull/30179)
* NO-JIRA: Update extended/networking OWNERS [#30089](https://github.com/openshift/origin/pull/30089)
* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Backport pr 29834 to release-4.18 [#29968](https://github.com/openshift/origin/pull/29968)
* [Full changelog](https://github.com/openshift/origin/compare/327bae04dec0835aa4d6a09add48c97a637d8898...43c5124437fdc7a91708070434fb6beb7d86b92c)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/b4dbf34a16f6f1f269b7e3ab9409c7e888b822ab)

* [OCPBUGS-77668](https://issues.redhat.com/browse/OCPBUGS-77668): hermetic migration 4.18 [#105](https://github.com/openshift/cloud-provider-vsphere/pull/105)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/c414d1f5b0d910300cafda742aca146d41fce98a...b4dbf34a16f6f1f269b7e3ab9409c7e888b822ab)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/afae9545a3b5c205968da051a2ea28126ecba913)

* [OCPBUGS-80340](https://issues.redhat.com/browse/OCPBUGS-80340): Bump google.golang.org/grpc to v1.79.3 [#104](https://github.com/openshift/cluster-api-provider-vsphere/pull/104)
* [OCPBUGS-78018](https://issues.redhat.com/browse/OCPBUGS-78018): hermetic migration 4.18 [#84](https://github.com/openshift/cluster-api-provider-vsphere/pull/84)
* [OCPBUGS-61651](https://issues.redhat.com/browse/OCPBUGS-61651): Fix unit tests [#70](https://github.com/openshift/cluster-api-provider-vsphere/pull/70)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 [#62](https://github.com/openshift/cluster-api-provider-vsphere/pull/62)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/d664fe2b56964a5320057ac8c7b7fd4b50045851...afae9545a3b5c205968da051a2ea28126ecba913)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/350463aa3b27dcdddbddde8bb3def350e211078f)

* [OCPBUGS-80343](https://issues.redhat.com/browse/OCPBUGS-80343): Bump google.golang.org/grpc to v1.79.3 [#176](https://github.com/openshift/vmware-vsphere-csi-driver/pull/176)
* [OCPBUGS-68278](https://issues.redhat.com/browse/OCPBUGS-68278): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#156](https://github.com/openshift/vmware-vsphere-csi-driver/pull/156)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cfcad01dbca611e0bf7d54af099bba8563acfd4f...350463aa3b27dcdddbddde8bb3def350e211078f)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e64f4d7f42a14b1e710313b91c16c2c263b1204e)

* [OCPBUGS-81673](https://issues.redhat.com/browse/OCPBUGS-81673): Fix password escaping [#342](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/342)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/2b241410a972898f0ce80dec3bfdf4f974721937...e64f4d7f42a14b1e710313b91c16c2c263b1204e)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/60e2b91fa2ce44076d30bc9f41b1a9d0e9113f29)

* [OCPBUGS-81556](https://issues.redhat.com/browse/OCPBUGS-81556): fix concurrent map writes [#215](https://github.com/openshift/vsphere-problem-detector/pull/215)
* [OCPBUGS-70359](https://issues.redhat.com/browse/OCPBUGS-70359): Fixed logic for vSphere compute cluster permission [#200](https://github.com/openshift/vsphere-problem-detector/pull/200)
* [OCPBUGS-60784](https://issues.redhat.com/browse/OCPBUGS-60784): Check for number of FailureDomain-s in GetVCenter() [#189](https://github.com/openshift/vsphere-problem-detector/pull/189)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/7cf7fe24116aa9515a6fbcef3fb85567e19d21b4...60e2b91fa2ce44076d30bc9f41b1a9d0e9113f29)