# 4.18.36

Created: 2026-03-19 17:38:41 +0000 UTC

Image Digest: `sha256:7486ca2ec3bce0ee41dd2c03d75e120b6f660929ea50240463937ae1c4b118f7`


## Changes from 4.18.24

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.12 to 1.31.14
* Kubernetes Tests upgraded from 1.31.10 to 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202509100653-0 to 418.94.202603181125-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| StreamingCollectionEncodingToJSON <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [81d6bc27](https://github.com/openshift/assisted-installer/commit/81d6bc2771d3d34de3c364e349ca7f2983e454a2) `sha256:1e1faad2d9167d84e23585c1cea5962301845548043cf09578f943f79ca98016`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [81d6bc27](https://github.com/openshift/assisted-installer/commit/81d6bc2771d3d34de3c364e349ca7f2983e454a2) `sha256:46cc6ba4ada48ce4928da255d7d0ea9baccb337fc379eaea8c2063581ddb6cc2`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [2f62712d](https://github.com/openshift/apiserver-network-proxy/commit/2f62712d5db70df25490361749e93a552ffb5a24) `sha256:a55e88c5d635b90fb57a051f3de5be72c95dc6ff52f7f35c43c7e607895ee6f8`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:5b94c5577b5b32daf399f069ba98ad37b6872aedc53b395eb72e314db189620f`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b51cd6b8](https://github.com/openshift/aws-ebs-csi-driver/commit/b51cd6b8e54d5682cf5491a9eb5af1570261a409) `sha256:f9a5f406ad4ce6ecadd3e2590848bc4b5de5ab1cb5d0bb753b98188a28c44956`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:e00a86c095aa8fb842e4e16b1be65da5fa8c7cb68ac54359fd3145351f4125d9`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [f54f9a19](https://github.com/openshift/aws-pod-identity-webhook/commit/f54f9a19adb43b395a880ca046aed0841466c28d) `sha256:a28db2438421fe0949a55d72bae4a3420a62802cb6b393cb295433652707aa11`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:84c811adfae43bd1265fdf0f7048f582dbd671b0a95d5611adef7965e8bd6aff`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:00534ec2823bb58616c955b80cb8fed0fb9193cd2fa3b9b06089c9692c33175b`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:fc78ae6ff45a27c111fff14e9d15a2e9982f97577722fe519630a018ebd64a5e`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:08bd6463f232a07901d5291f750e58489438e593771d3de3f661a6b9639ec281`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [c937080f](https://github.com/openshift/azure-kubernetes-kms/commit/c937080f51cec58650daa15805be548d09310c64) `sha256:987f733bf42ad58716951c02183b4f2f4779bb74133c9da26330161e4cd546fb`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [f60e4029](https://github.com/openshift/azure-workload-identity/commit/f60e4029d64de202e81d2cd114f8a90dc0a1878e) `sha256:94b28a0da75f383085a88df3d5b3d97b976bd9cccf0defe613085e918c7126d8`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [80c3a063](https://github.com/openshift/cluster-api-provider-metal3/commit/80c3a0638eacd65c0d6f54fbd3f4c593085528e8) `sha256:2b937b631568d3bfa6b22840888949459c10777e452704260327c23bef0cffa2`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:211bc1cade81979d28be5fffa10026fac5c6006000a4da2b0e68b5ca714deed8`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [882f8799](https://github.com/openshift/cluster-authentication-operator/commit/882f8799b8a550605e4812479272691de3f5c0d2) `sha256:bfe394b58ec6195de8b8420e781b7630d85a412b9112d892fea903f92b783427`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:ce8e3088493b4a72dd766b3b5b4ccb83b7d72d514bbf64063a913dfe961273db`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:e3f1f314ed7b70c58dde895c3accc5d8aa92b8885032dbb10c2c3e0645aa526d`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [63df38bc](https://github.com/openshift/cluster-api/commit/63df38bcdb4aa8ca25c26b1f70321d5d198e27d1) `sha256:496cab5ab4728254d95c63c2bbe1bd26e9a1cc232758510b675ea359f9e4b916`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [2f2737e1](https://github.com/openshift/cluster-capi-operator/commit/2f2737e1ed649009eef31c19ffff7468b67de32d) `sha256:3675e79c54cd7414a1f020780bb1bc0cc1239ffb1213369e238401a7607cf02d`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:908eaaf624959bc7645f6d585d160431d1efb070e9a1f37fefed73a3be42b0d3`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:7c527b4e8239a1f4f4e0a851113e7dd633b7dcb9d75b0e7b21c23d26304abcb3`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [7cafd0c7](https://github.com/openshift/cluster-dns-operator/commit/7cafd0c7dca2edb154b8444602b600b5901afeba) `sha256:ea5c8a93f30e0a4932da5697d22c0da7eda9a7035c0555eb006b6755e62bb2fc`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1e3caa4b](https://github.com/openshift/cluster-image-registry-operator/commit/1e3caa4b5abe4e3dad914a337f87408d060b1fb2) `sha256:7af9f5c5af9d529840233ef4b519120cc0e3f14c4fe28cc43b0823f2c11d8f89`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [33a1141e](https://github.com/openshift/cluster-api-operator/commit/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd) `sha256:e5325f3bef54c22f95012792b1af808d8e1ad78539ac0bd6edd81fda56a6e2ae`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:5c983016b9ceed0fca1f51bd49c2653243c7e5af91cbf2f478b091db6e028252`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:cdd28dfe7132e19af9f013f72cf120d970bc31b6b74693af262f8d2e82a096e1`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [88088e4b](https://github.com/openshift/cluster-olm-operator/commit/88088e4bfe9f55ea7ab2c4331cebee727c8c0c34) `sha256:adb9f6f2fd701863c7caed747df43f83d3569ba9388cfa33ea7219ac6a606b11`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:1f23bac0a2a6cfd638e4af679dc787a8790d99c391f6e2ade8087dc477ff765e`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:313d1d8ca85e65236a59f058a3316c49436dde691b3a3930d5bc5e3b4b8c8a71`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:1fbbcb390de2563a0177b92fba1b5a65777366e2dc80e2808b61d87c41b47a2d`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [8caab452](https://github.com/openshift/cluster-update-keys/commit/8caab452b91df0d77ab052b1833a4d54a1374634) `sha256:cb1fa875572fa59d9eddcdb391c969fce678f16bcf11c9ab5e3149a94797e2e3`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e2aaf00a](https://github.com/openshift/configmap-reload/commit/e2aaf00a381b57874178a4272f3bc5257cf8dd98) `sha256:c23ff7eab2bb9025dfb885a2a695648d33cc1b24d7e480ff56fdae0ef1bd0774`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:a2c31e21ddb6b70466884f317b4ad0acb431220cb841ee2063e57cb6bde46f25`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [39b37c06](https://github.com/openshift/csi-external-attacher/commit/39b37c06a27481c708f071464bd1049ea7db97c7) `sha256:2af92f0e90f29d4329e3ad1e235e69bc2397e065bfbc6772d7e073701c7b1363`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [376f0ea0](https://github.com/openshift/csi-external-provisioner/commit/376f0ea04c64a41cb5166ff415fff849ff2da380) `sha256:74f0afca9374cee2b77efe39503e65207034c9a4a20738a65ed65b62a7fb8863`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:78976f244a2a7101390df281688f339864f3e7eda6531df18225022c768ca0b3`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:34cc8ad01ba89008f6df06d07d210e6e001b3cfda445127a9388740c542507d7`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:21b4c9cf268bb7abef7af187cd775d3f74d0bd33626250095428d53b705ee946`
* [etcd](https://github.com/openshift/etcd) git [b5a4f8d0](https://github.com/openshift/etcd/commit/b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3) `sha256:e29dc9f042f2d0471171a0611070886cb2f7c57338ab7f112613417bcd33b278`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:37df9c265224d623ea309d87a400161641366e09117162d1dc4062e6efc8b395`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [b2f858ba](https://github.com/openshift/machine-api-provider-gcp/commit/b2f858ba546520410f391b5f6afdbe0b1562903d) `sha256:e9debffefe3cb42ae97b244383c060fe120b546b5bcd9d71efc2440a17d9b658`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cb8b38c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb) `sha256:78861d4efdfa2f7b109402745c586e7e0be2529fa1d9a26b0ad3ddf3e8020953`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:6039c0124bfe0608d088f9380a0fc864f7e67d8815f8af0f00000c185b019fbb`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:c4ac1ab8a08d39ec69e318d1820bff09506cdb330901c5a0c1e680ccbb447f3f`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [1c7bc07e](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/1c7bc07e69c1e74a36b39b31f878da6391fdeefe) `sha256:53284e11f5db88ec68f5ac7fdd1d42b26e62fde221368f8a1b8f918ed6b38d4f`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [e6eddf85](https://github.com/openshift/machine-api-provider-ibmcloud/commit/e6eddf85c26eb056108b67fdad43bbbd2d9b4718) `sha256:70fbe1426e22b7695513905becd482399e450cda06257657d522050c9ef6ab64`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:d279a26db070d4a243df5391bebfd209488648a89428c9d02a345a7eacfe3cf2`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:9b6c87d38bfc523a2a99bc5e492fd23f5075b8f85f93d5163855e9fe278542c5`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:51a2902a23dc5bf60dc7f95dd8f494257fa9cf4fbc784fc36f6d16e5286cc64c`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [962ccca2](https://github.com/openshift/kubernetes-metrics-server/commit/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf) `sha256:39c122c726d1bf520dd481350fee5ad940762d5d4c9f8c012db6bf56b0ca8757`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [5a14ea9d](https://github.com/openshift/kube-rbac-proxy/commit/5a14ea9d338b2582c7c2a8f89f351a0c30f56371) `sha256:d12d0dc7eb86bbedf6b2d7689a28fd51f0d928f720e4a6783744304297c661ed`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:f09a1e83e2b26524881b832bb20cc6a924f360ae377979db74a8b8ad9de26744`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:b4b55da165fc3abad03195b2f10dcff3c539c196bc7b7fa6d6f932512ec06e5e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:086f4f012853d023bbc751b217a382c3664019c606a0e58b54fae2857b034c98`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [0d7ea6c7](https://github.com/openshift/multus-admission-controller/commit/0d7ea6c766349243ade17707af7bd2b43c3b4b8e) `sha256:bcb08821551e9a5b9f82aa794bcea673279cefb93cb47492e19ccac5e2cf18fe`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:e3a494212f1ba17f0f0980eef583218330eccb56eadf6b8cb0548c76d99b5014`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [86191ded](https://github.com/openshift/whereabouts-cni/commit/86191ded510a5ec05f05b77ae847b86f50673258) `sha256:0a09f5a3ba4f60cce0145769509bab92553c8075d210af4ac058965d2ae11efa`
* [must-gather](https://github.com/openshift/must-gather) git [02e536cc](https://github.com/openshift/must-gather/commit/02e536cc7b3a6632da0643ab78f8dd6570e7f122) `sha256:a2ea85c74215bdd9bbe5e6750d8496e2b249928e9d12e3b877878e274166b69d`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [11e2dec9](https://github.com/openshift/network-metrics-daemon/commit/11e2dec958aa2adcad07b9eecaf8f50479e0880a) `sha256:759fb1d5353dbbadd443f38631d977ca3aed9787b873be05cc9660532a252739`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:be8895a8c39b5934ca537b0395b4abe3ed5bccceb9e64fc6ce4e238dd1bde148`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:551e92b1063618b3b619aa1fa151c9a98312262eb2903cf86712128ba3d29342`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [afe324bf](https://github.com/openshift/machine-api-provider-nutanix/commit/afe324bf56e0348fb45e5fbb9c832c1587482153) `sha256:09bf79f7546dc5a59760501476f688af0d63aeab7d73ead2dcf78224ffd7c4b7`
* [oauth-server](https://github.com/openshift/oauth-server) git [287caff3](https://github.com/openshift/oauth-server/commit/287caff3aef5b5f8535ac2bf1242671a5c7701b7) `sha256:3fdcbf7be3f90bd080ffb2c75b091d7eef03681e0f90912ff6140ee48c177616`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [8ee74406](https://github.com/openshift/openshift-controller-manager/commit/8ee744063ed12b249f1a2b89e9af4f53b2f1daf7) `sha256:c2dd7a03348212e49876f5359f233d893a541ed9b934df390201a05133a06982`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3cca6fee](https://github.com/openshift/openshift-state-metrics/commit/3cca6feee0d646331bdbc9d49732fbdf49448d41) `sha256:96ae39329a45e017d3444b3794dc95126641ca54fe645bb8729b3d501bd47c64`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:78aa5be28be7d85f30d68230d193084a2ec6db6e8b67d91b99b9964b7832c3b5`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [01fc505a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/01fc505abcf3b83bba284a00258b6761a9b7ce8a) `sha256:4dcc3f2648915ed6887ff9db0c8d45b5487e3acdd7eb832ff6e7d579846ed90b`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [17ae6fba](https://github.com/openshift/cloud-provider-powervs/commit/17ae6fba6eda58aa0d91f162206386105dff9962) `sha256:20fe74ec53cca9cee4ba9d0c065a05b1daacdb2d9a5e68eb0dc871841d88ac27`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [74e3ece7](https://github.com/openshift/machine-api-provider-powervs/commit/74e3ece7ce84bef0f21bd1bab775f7e6dabb676b) `sha256:68ac7f6e7d9d54c90309e5f33119cfa3f468a917bb45d1d1d4aba4ac04208100`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [35c11369](https://github.com/openshift/prom-label-proxy/commit/35c1136915f7a6896dfcb479e1f686fd18542856) `sha256:28d99dd1c426021eefd6bdbd01594126623f3473f517f194d39e2a063535147a`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [92e17ff5](https://github.com/openshift/node_exporter/commit/92e17ff5c45807198adc8b59f5b3f63a9b7f1726) `sha256:0bccc03fd9ffe278e15c8f4be1db030307e4cd5020b78d711fc62f104fd6a980`
* rhel-coreos `sha256:1c1661c18970ac7e919aeacd1ccbc9876a372ba7b26231bed6a5f13a19f9616f`
* rhel-coreos-extensions `sha256:278800effa48796fe57c6d705d300c69483e81252e6a7fbfaa4959614be73d7c`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [ce6ffa24](https://github.com/openshift/route-controller-manager/commit/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3) `sha256:446bedea4916d3c1ee52be94137e484659e9561bd1de95c8189eee279aae984b`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [30efb529](https://github.com/openshift/service-ca-operator/commit/30efb529a5b7db5d6f352f6ac0470d8385268539) `sha256:812819a9d712b9e345ef5f1404b242c281e2518ad724baebc393ec0fd3b3d263`
* [telemeter](https://github.com/openshift/telemeter) git [490612bd](https://github.com/openshift/telemeter/commit/490612bdaa6412762403c8eee902c20f033ca5aa) `sha256:1be9cf7afc785fbde8c9d5403d13569bc7f7fee8a386d2d8842f2b40758ed430`
* [thanos](https://github.com/openshift/thanos) git [f1599f65](https://github.com/openshift/thanos/commit/f1599f65c5fd652150821ae954d563747a649b53) `sha256:bf72297fee61ec9950f6868881ad3e84be8692ca08f084b3d155d93a766c0823`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [2b241410](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/2b241410a972898f0ce80dec3bfdf4f974721937) `sha256:f52b7d31de7697dd95b0addb28b5a270e2e2a8e37543a16696aaadcaf7a14756`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/7307593473d9303ccfe3faa4d49383efb3408d8f)

* [OCPBUGS-74898](https://issues.redhat.com/browse/OCPBUGS-74898): Retry incomplete cluster registration in ABI [#8817](https://github.com/openshift/assisted-service/pull/8817)
* [OCPBUGS-74911](https://issues.redhat.com/browse/OCPBUGS-74911): Remove root=/dev/disk/by-label/dm-mpath-root from kargs [#8820](https://github.com/openshift/assisted-service/pull/8820)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/bb74f0ad324ba24c300d0b4f08519d0cc250c1c5...7307593473d9303ccfe3faa4d49383efb3408d8f)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/81c09fb75bccd35b2e909537b93e5aa431eeed1a)

* [MGMT-21849](https://issues.redhat.com/browse/MGMT-21849): Skip arping for remote IPs not in outgoing NIC's subnet [#1332](https://github.com/openshift/assisted-installer-agent/pull/1332)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb...81c09fb75bccd35b2e909537b93e5aa431eeed1a)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/63b87f06c5586b59ca99d7a4546d4c82b2aa0268)

* [OCPBUGS-68243](https://issues.redhat.com/browse/OCPBUGS-68243): bump github.com/sirupsen/logrus to v1.9.3 [#237](https://github.com/openshift/agent-installer-utils/pull/237)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923...63b87f06c5586b59ca99d7a4546d4c82b2aa0268)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/ed55fc2df3f3bab15f03306df692112f6f109fe4)

* [OCPBUGS-77903](https://issues.redhat.com/browse/OCPBUGS-77903): [release-4.18] update go mod dependency for konflux [#589](https://github.com/openshift/cluster-api-provider-aws/pull/589)
* [OCPBUGS-61841](https://issues.redhat.com/browse/OCPBUGS-61841): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#570](https://github.com/openshift/cluster-api-provider-aws/pull/570)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/d631c2245d9481500627297244464f553d787782...ed55fc2df3f3bab15f03306df692112f6f109fe4)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e33efbe3b60f4a8baddfef06f23df1d339f884dd)

* [OCPBUGS-76582](https://issues.redhat.com/browse/OCPBUGS-76582): Fix Cinder, Manila driver metrics [#501](https://github.com/openshift/csi-operator/pull/501)
* [OCPBUGS-62664](https://issues.redhat.com/browse/OCPBUGS-62664): disable e2e snapshot tests [#463](https://github.com/openshift/csi-operator/pull/463)
* [OCPBUGS-63558](https://issues.redhat.com/browse/OCPBUGS-63558): Add RBAC ClusterRole and Binding for driver node [#454](https://github.com/openshift/csi-operator/pull/454)
* [OCPBUGS-63407](https://issues.redhat.com/browse/OCPBUGS-63407): Use 127.0.0.1 for healtz http-endpoints [#450](https://github.com/openshift/csi-operator/pull/450)
* [OCPBUGS-62973](https://issues.redhat.com/browse/OCPBUGS-62973): Add withCABundleDaemonSetHook() to AWS EFS operator [#447](https://github.com/openshift/csi-operator/pull/447)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/csi-operator/compare/4105ed38847b3f3a6705b4e111566b645b805d0b...e33efbe3b60f4a8baddfef06f23df1d339f884dd)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/7b6bfc7421d1cc700ddbcbf150beccd0ab586183)

* [OCPBUGS-73789](https://issues.redhat.com/browse/OCPBUGS-73789): Fix reconciler consistency checks in Update and Exists [#166](https://github.com/openshift/machine-api-provider-aws/pull/166)
* [OCPBUGS-63138](https://issues.redhat.com/browse/OCPBUGS-63138): client: re-use a single file for building the session instead of randomly named files [#146](https://github.com/openshift/machine-api-provider-aws/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08...7b6bfc7421d1cc700ddbcbf150beccd0ab586183)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/237a64d3ad0858b478e38796ae58f4c3fcaba9fe)

* [OCPBUGS-77905](https://issues.redhat.com/browse/OCPBUGS-77905): [release-4.18] update go mod dependency for konflux [#362](https://github.com/openshift/cluster-api-provider-azure/pull/362)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/b29c582ec409fc7da93a70b624e6f959165cefe1...237a64d3ad0858b478e38796ae58f4c3fcaba9fe)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/2fdaa544160658c3c4535c167960e4f3e2e70727)

* [OCPBUGS-65882](https://issues.redhat.com/browse/OCPBUGS-65882): Set updateDomainCount to one when faultDomainCount is one [#175](https://github.com/openshift/machine-api-provider-azure/pull/175)
* [OCPBUGS-63669](https://issues.redhat.com/browse/OCPBUGS-63669): Support datadisks on Stack Hub [#167](https://github.com/openshift/machine-api-provider-azure/pull/167)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/457dead4a58293dec7fb7854e14640c10cf69278...2fdaa544160658c3c4535c167960e4f3e2e70727)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/8bf023bc8b3e6abb34238576816432c9b8187766)

* [OCPBUGS-45579](https://issues.redhat.com/browse/OCPBUGS-45579): PowerVS: Listen to machineNetwork [#9277](https://github.com/openshift/installer/pull/9277)
* [OCPBUGS-73784](https://issues.redhat.com/browse/OCPBUGS-73784): pkg/asset/manifests/azure: save cidr blocks [#10217](https://github.com/openshift/installer/pull/10217)
* [OCPBUGS-76598](https://issues.redhat.com/browse/OCPBUGS-76598): Increase agent-installer pre-network-manager timeout [#10299](https://github.com/openshift/installer/pull/10299)
* [OCPBUGS-67203](https://issues.redhat.com/browse/OCPBUGS-67203): Update the RHCOS 4.18 bootimage metadata [#10294](https://github.com/openshift/installer/pull/10294)
* [OCPBUGS-74676](https://issues.redhat.com/browse/OCPBUGS-74676): [release-4.18] GCP: skip AI zones [#10275](https://github.com/openshift/installer/pull/10275)
* [OCPBUGS-69880](https://issues.redhat.com/browse/OCPBUGS-69880): Azure UPI ARM template: use storageAccountId [#10179](https://github.com/openshift/installer/pull/10179)
* [OCPBUGS-68244](https://issues.redhat.com/browse/OCPBUGS-68244): [4.18] uplift logrus [#10166](https://github.com/openshift/installer/pull/10166)
* [OCPBUGS-57590](https://issues.redhat.com/browse/OCPBUGS-57590): Mount the user-ca-bundle into ICC [#9794](https://github.com/openshift/installer/pull/9794)
* [OCPBUGS-63494](https://issues.redhat.com/browse/OCPBUGS-63494): Catch gcp destroy cases where the operation is nil [#10030](https://github.com/openshift/installer/pull/10030)
* [OCPBUGS-52659](https://issues.redhat.com/browse/OCPBUGS-52659): [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme [#9545](https://github.com/openshift/installer/pull/9545)
* [OCPBUGS-65588](https://issues.redhat.com/browse/OCPBUGS-65588): Update the RHCOS 4.18 bootimage metadata [#10113](https://github.com/openshift/installer/pull/10113)
* [OCPBUGS-58504](https://issues.redhat.com/browse/OCPBUGS-58504): Refactor removing loadbalancer in OpenStack [#9831](https://github.com/openshift/installer/pull/9831)
* [OCPBUGS-53235](https://issues.redhat.com/browse/OCPBUGS-53235): Validation for API and Ingress VIPs when using user-managed load balancer [#10046](https://github.com/openshift/installer/pull/10046)
* [OCPBUGS-62810](https://issues.redhat.com/browse/OCPBUGS-62810): Update the RHCOS 4.18 bootimage metadata [#10014](https://github.com/openshift/installer/pull/10014)
* [OCPBUGS-59490](https://issues.redhat.com/browse/OCPBUGS-59490): Make swift containers removal not fatal for UPI. [#9839](https://github.com/openshift/installer/pull/9839)
* [OCPBUGS-61529](https://issues.redhat.com/browse/OCPBUGS-61529): Use less permissive access for /var/lib/etcd for SNO [#9937](https://github.com/openshift/installer/pull/9937)
* [Full changelog](https://github.com/openshift/installer/compare/3e0a54b541dcb98b09f4fe5388d873ec4986807e...8bf023bc8b3e6abb34238576816432c9b8187766)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/45acfee77a49fe17a848d1625594b2d8d85b2ca8)

* [OCPBUGS-76988](https://issues.redhat.com/browse/OCPBUGS-76988): Unblock BMH direct deletion when detached annotation is present [#461](https://github.com/openshift/baremetal-operator/pull/461)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/45c6255cafc5633d1ab6b9460ececa5c9197cce8...45acfee77a49fe17a848d1625594b2d8d85b2ca8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/353410688340dadb583668215e13e2d6cc90e272)

* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Re-add ENABLE_NODEIP_DEBUG env var [#364](https://github.com/openshift/baremetal-runtimecfg/pull/364)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/7145e606c7aec1966be90d7f8cd1083886b9afc8...353410688340dadb583668215e13e2d6cc90e272)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/3a48fc2998a051a77a97cc3393b5d189c22635e0)

* [OCPBUGS-65707](https://issues.redhat.com/browse/OCPBUGS-65707): fix(must-gather): do not set node affinity if nodename is set [#2145](https://github.com/openshift/oc/pull/2145)
* [OCPBUGS-64608](https://issues.redhat.com/browse/OCPBUGS-64608): Help with must-gather scheduling through suggesting preferance of nodes [#2127](https://github.com/openshift/oc/pull/2127)
* [Full changelog](https://github.com/openshift/oc/compare/4fcb2d07875f05d881ac90af73723db0ae5b1d6e...3a48fc2998a051a77a97cc3393b5d189c22635e0)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/363e98bd7ca3872072a8aad152525c61388b10a5)

* [OCPBUGS-74548](https://issues.redhat.com/browse/OCPBUGS-74548): Resolve nil pointer exception in hasResourceTags [#968](https://github.com/openshift/cloud-credential-operator/pull/968)
* [OCPBUGS-65800](https://issues.redhat.com/browse/OCPBUGS-65800): ccoctl azure: retry custom role creation on consistency errors [#950](https://github.com/openshift/cloud-credential-operator/pull/950)
* [OCPBUGS-65479](https://issues.redhat.com/browse/OCPBUGS-65479): ccoctl: use pagination when listing resources in aws [#947](https://github.com/openshift/cloud-credential-operator/pull/947)
* [OCPBUGS-63548](https://issues.redhat.com/browse/OCPBUGS-63548): ccoctl: add public-key-file flag to create-all [#938](https://github.com/openshift/cloud-credential-operator/pull/938)
* [OCPBUGS-55127](https://issues.redhat.com/browse/OCPBUGS-55127): snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 [#915](https://github.com/openshift/cloud-credential-operator/pull/915)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a9ea5cf27ee6ad0b2498e2d12f5801645bbc230c...363e98bd7ca3872072a8aad152525c61388b10a5)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/f892b9152672d963b667d6d644e65576946133a3)

* [OCPBUGS-73750](https://issues.redhat.com/browse/OCPBUGS-73750): [release-4.18] Fix pointers without ptr.Deref [#199](https://github.com/openshift/cloud-network-config-controller/pull/199)
* [OCPBUGS-65651](https://issues.redhat.com/browse/OCPBUGS-65651): [release-4.18] Fix capacity calculation [#193](https://github.com/openshift/cloud-network-config-controller/pull/193)
* [OCPBUGS-64779](https://issues.redhat.com/browse/OCPBUGS-64779): [release-4.18] Change the capacity struct from int to ptrOfInt [#189](https://github.com/openshift/cloud-network-config-controller/pull/189)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/beacfbc2f2afa651616ad1c3c6712c511318a8d4...f892b9152672d963b667d6d644e65576946133a3)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/97fd8336e9dab6c103540d5c6c4594d4cdb4f935)

* [OCPBUGS-75925](https://issues.redhat.com/browse/OCPBUGS-75925): Fixes histograms becoming empty after loaded from checkpoints [#402](https://github.com/openshift/kubernetes-autoscaler/pull/402)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4f1bde97bfb5da70a107996bf952b445462429c3...97fd8336e9dab6c103540d5c6c4594d4cdb4f935)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/f67692fc1d80256d146ed4fc8e6948e292e9cf9a)

* [OCPBUGS-57590](https://issues.redhat.com/browse/OCPBUGS-57590): Mount the user-ca-bundle into ICC [#486](https://github.com/openshift/cluster-baremetal-operator/pull/486)
* [OCPBUGS-63439](https://issues.redhat.com/browse/OCPBUGS-63439): Always have a service for ironic-api port [#514](https://github.com/openshift/cluster-baremetal-operator/pull/514)
* [OCPBUGS-63469](https://issues.redhat.com/browse/OCPBUGS-63469): Allow provisioningIP when network disabled [#515](https://github.com/openshift/cluster-baremetal-operator/pull/515)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6bff75babbad0d352e2b0ee6db0416d3cf19c0e...f67692fc1d80256d146ed4fc8e6948e292e9cf9a)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8abb067318de3cc68967a0f24627c26912242524)

* [OCPBUGS-63166](https://issues.redhat.com/browse/OCPBUGS-63166): ccm: disable unused secure-serving port and webhook [#421](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/421)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1f8672a663e5c0ad873eb9c3760ed430c7369fa5...8abb067318de3cc68967a0f24627c26912242524)


### [cluster-config-api](https://github.com/openshift/api/tree/319dc2e492034aab82d4820dd8d8e9a84e31b459)

* [OCPBUGS-70315](https://issues.redhat.com/browse/OCPBUGS-70315): Add HTTPKeepAliveTimeout to IngressController API [#2638](https://github.com/openshift/api/pull/2638)
* NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers [#2625](https://github.com/openshift/api/pull/2625)
* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Introduce ClosedClientConnectionPolicy to IngressController API [#2618](https://github.com/openshift/api/pull/2618)
* [CNTRLPLANE-1980](https://issues.redhat.com/browse/CNTRLPLANE-1980): Promote streaming list encoding to Default [#2598](https://github.com/openshift/api/pull/2598)
* NO-JIRA: Promote streaming list encoding to Default on Hypershift. [#2562](https://github.com/openshift/api/pull/2562)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Add feature gates for StreamingCollectionEncoding [#2528](https://github.com/openshift/api/pull/2528)
* [Full changelog](https://github.com/openshift/api/compare/e16f6cc860949caf863e79bd838491cdcb6e9641...319dc2e492034aab82d4820dd8d8e9a84e31b459)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/fe5e928628200b49a07aa50e4dfa634fb9452607)

* [OCPBUGS-68249](https://issues.redhat.com/browse/OCPBUGS-68249): Update logrus to 1.9.3 to address CVE-2025-65637 [#464](https://github.com/openshift/cluster-config-operator/pull/464)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/85cb40728227fac13a2983fb6e3170d67cf62075...fe5e928628200b49a07aa50e4dfa634fb9452607)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b7e21f52fab30ac18bb890c61f724332f332b934)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#1545](https://github.com/openshift/cluster-etcd-operator/pull/1545)
* [OCPBUGS-63451](https://issues.redhat.com/browse/OCPBUGS-63451): Ensure revision.json persists on ungraceful shutdown [#1503](https://github.com/openshift/cluster-etcd-operator/pull/1503)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#1518](https://github.com/openshift/cluster-etcd-operator/pull/1518)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/0f87d4a7da8222d0a1fd21c3c8ced0f0ca3927fe...b7e21f52fab30ac18bb890c61f724332f332b934)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/7ec6093b5e31b50a57eab3653dca09b1bd174fee)

* [OCPBUGS-70315](https://issues.redhat.com/browse/OCPBUGS-70315): Implement HTTPKeepAliveTimeout tuning option [#1333](https://github.com/openshift/cluster-ingress-operator/pull/1333)
* NO-JIRA: Add new NID team members to OWNERS [#1319](https://github.com/openshift/cluster-ingress-operator/pull/1319)
* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Implement ClosedClientConnectionPolicy field [#1322](https://github.com/openshift/cluster-ingress-operator/pull/1322)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d967a73c5f7da76783ee1af093f21817e7681e1d...7ec6093b5e31b50a57eab3653dca09b1bd174fee)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e9bc90906c726823f154c78d3e568c98ff77b6a5)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#2031](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2031)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#1976](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1976)
* [OCPBUGS-63119](https://issues.redhat.com/browse/OCPBUGS-63119): SCC: add hostmount-anyuid-v2 [#1937](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1937)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b6ad4b065b9f9677f0b33d625f9ae9dc36ccc3fc...e9bc90906c726823f154c78d3e568c98ff77b6a5)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/6347fc8179b2a04d51c99432ae612bf4df595dc0)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#906](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/906)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#897](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/897)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/a2cbb5725fe5e560ba40d884cfd079b3f8391f03...6347fc8179b2a04d51c99432ae612bf4df595dc0)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4e99db62cea1d2ca48765230c6f5663d1f2c2702)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#622](https://github.com/openshift/cluster-kube-scheduler-operator/pull/622)
* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#612](https://github.com/openshift/cluster-kube-scheduler-operator/pull/612)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#590](https://github.com/openshift/cluster-kube-scheduler-operator/pull/590)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/6182930dde5ec8dd22bd50481e8b369ce673484c...4e99db62cea1d2ca48765230c6f5663d1f2c2702)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/8108394db9feefb2dedfe4574768dc080ad34476)

* [OCPBUGS-77274](https://issues.redhat.com/browse/OCPBUGS-77274): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2833](https://github.com/openshift/cluster-monitoring-operator/pull/2833)
* [OCPBUGS-67168](https://issues.redhat.com/browse/OCPBUGS-67168): Add the collection of MTV migration metrics [#2774](https://github.com/openshift/cluster-monitoring-operator/pull/2774)
* [OCPBUGS-61965](https://issues.redhat.com/browse/OCPBUGS-61965): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2723](https://github.com/openshift/cluster-monitoring-operator/pull/2723)
* [OCPBUGS-64579](https://issues.redhat.com/browse/OCPBUGS-64579): Fix KSM deny-list typo [#2731](https://github.com/openshift/cluster-monitoring-operator/pull/2731)
* [OCPBUGS-63488](https://issues.redhat.com/browse/OCPBUGS-63488): Remove AlertManager endpoints when disabled [#2737](https://github.com/openshift/cluster-monitoring-operator/pull/2737)
* [OCPBUGS-62852](https://issues.redhat.com/browse/OCPBUGS-62852): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 [#2702](https://github.com/openshift/cluster-monitoring-operator/pull/2702)
* [OCPBUGS-63410](https://issues.redhat.com/browse/OCPBUGS-63410): [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy [#2724](https://github.com/openshift/cluster-monitoring-operator/pull/2724)
* [OCPBUGS-63017](https://issues.redhat.com/browse/OCPBUGS-63017): test: remove image registry e2e tests [#2711](https://github.com/openshift/cluster-monitoring-operator/pull/2711)
* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2669](https://github.com/openshift/cluster-monitoring-operator/pull/2669)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/7337d93da1df9b60751d146f0b7df1bc2436b595...8108394db9feefb2dedfe4574768dc080ad34476)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8df9d04f3019ff6e0a4c51504601e8a73b4322e3)

* [OCPBUGS-74154](https://issues.redhat.com/browse/OCPBUGS-74154): whereabouts-config is a reserved name for user interaction. [#2884](https://github.com/openshift/cluster-network-operator/pull/2884)
* [OCPBUGS-73767](https://issues.redhat.com/browse/OCPBUGS-73767): Tweak iptables-alerter to try to avoid crictl bug [#2877](https://github.com/openshift/cluster-network-operator/pull/2877)
* [OCPBUGS-65704](https://issues.redhat.com/browse/OCPBUGS-65704), [OCPBUGS-65705](https://issues.redhat.com/browse/OCPBUGS-65705): Annotate whereabouts-controller [#2842](https://github.com/openshift/cluster-network-operator/pull/2842)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Add drop flows for GARP [#2810](https://github.com/openshift/cluster-network-operator/pull/2810)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b3b281c37120b57834417e1399ea27969e33b2ea...8df9d04f3019ff6e0a4c51504601e8a73b4322e3)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/700994b4688decd0808aec1761a2c87e9d4ef685)

* [OCPBUGS-75954](https://issues.redhat.com/browse/OCPBUGS-75954): PPC: filter out namespaces dir [#1465](https://github.com/openshift/cluster-node-tuning-operator/pull/1465)
* [OCPBUGS-69947](https://issues.redhat.com/browse/OCPBUGS-69947): [release-4.18] E2E: skip stalld test checking sched_fifo [#1451](https://github.com/openshift/cluster-node-tuning-operator/pull/1451)
* [OCPBUGS-63450](https://issues.redhat.com/browse/OCPBUGS-63450): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1417](https://github.com/openshift/cluster-node-tuning-operator/pull/1417)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a56352c7bda47c69fe34c3d9189071430b71fc94...700994b4688decd0808aec1761a2c87e9d4ef685)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bc725fd43d29758ad8f704044ccc8abb6926ad84)

* [OCPBUGS-63511](https://issues.redhat.com/browse/OCPBUGS-63511): references to github.com/sclorg/django-ex.git now also refer to the branch [#657](https://github.com/openshift/cluster-samples-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa...bc725fd43d29758ad8f704044ccc8abb6926ad84)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/43fe40ddc11a8453f83273bbea82ae6295b496f9)

* [OCPBUGS-62666](https://issues.redhat.com/browse/OCPBUGS-62666): Move metrics to vsphere driver [#632](https://github.com/openshift/cluster-storage-operator/pull/632)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/65d06444110f8044a84ccf4f977ee9520f2bdf89...43fe40ddc11a8453f83273bbea82ae6295b496f9)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f72d7e2c7dc8f5e0bb8687f9b9fd0c918952cbda)

* [OCPBUGS-70182](https://issues.redhat.com/browse/OCPBUGS-70182): Unify capitalization when comparing architectures for available updates [#1327](https://github.com/openshift/cluster-version-operator/pull/1327)
* NO-ISSUE: hongkai becomes an approver release-4.18 [#1286](https://github.com/openshift/cluster-version-operator/pull/1286)
* [OCPBUGS-62869](https://issues.redhat.com/browse/OCPBUGS-62869): disable metrics auth for hypershift clusters [#1242](https://github.com/openshift/cluster-version-operator/pull/1242)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b3d78f348154609ae86078caa4d416c592f3662e...f72d7e2c7dc8f5e0bb8687f9b9fd0c918952cbda)


### [console](https://github.com/openshift/console/tree/dda58086cc1d64392b560b461b8736fc0eb00485)

* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16073](https://github.com/openshift/console/pull/16073)
* NO-JIRA: Bump builder image to v29 [#15995](https://github.com/openshift/console/pull/15995)
* [OCPBUGS-65808](https://issues.redhat.com/browse/OCPBUGS-65808): Fix PatternFly dark theme colors for charts and form inputs [#15951](https://github.com/openshift/console/pull/15951)
* [OCPBUGS-74458](https://issues.redhat.com/browse/OCPBUGS-74458): Bump lodash to latest [#15965](https://github.com/openshift/console/pull/15965)
* [OCPBUGS-73753](https://issues.redhat.com/browse/OCPBUGS-73753): Fix Helm chart installation with CA/TLS certificates [#15914](https://github.com/openshift/console/pull/15914)
* [OCPBUGS-73662](https://issues.redhat.com/browse/OCPBUGS-73662): Namespace is not persisting when switching to developer view from the topology page of admin page [#15910](https://github.com/openshift/console/pull/15910)
* [OCPBUGS-69915](https://issues.redhat.com/browse/OCPBUGS-69915): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15868](https://github.com/openshift/console/pull/15868)
* [OCPBUGS-69448](https://issues.redhat.com/browse/OCPBUGS-69448): Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in "All Projects" mode [#15855](https://github.com/openshift/console/pull/15855)
* [OCPBUGS-68361](https://issues.redhat.com/browse/OCPBUGS-68361): Disallowed Pipelines-plugin Pipelines navigation section [#15842](https://github.com/openshift/console/pull/15842)
* [OCPBUGS-65592](https://issues.redhat.com/browse/OCPBUGS-65592): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15725](https://github.com/openshift/console/pull/15725)
* [OCPBUGS-65932](https://issues.redhat.com/browse/OCPBUGS-65932): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15761](https://github.com/openshift/console/pull/15761)
* [OCPBUGS-65533](https://issues.redhat.com/browse/OCPBUGS-65533): Preserve path on perspective switch [#15716](https://github.com/openshift/console/pull/15716)
* [OCPBUGS-64735](https://issues.redhat.com/browse/OCPBUGS-64735): Expose prometheus tenancy label path as a proxy [#15685](https://github.com/openshift/console/pull/15685)
* [OCPBUGS-64682](https://issues.redhat.com/browse/OCPBUGS-64682): limit node log length to 1000 lines [#15680](https://github.com/openshift/console/pull/15680)
* [OCPBUGS-63657](https://issues.redhat.com/browse/OCPBUGS-63657): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15654](https://github.com/openshift/console/pull/15654)
* [OCPBUGS-63247](https://issues.redhat.com/browse/OCPBUGS-63247): fix bug where Roles list was displaying invalid data f… [#15619](https://github.com/openshift/console/pull/15619)
* [OCPBUGS-63041](https://issues.redhat.com/browse/OCPBUGS-63041): switch to dev perspective for `/dev-monitoring` [#15601](https://github.com/openshift/console/pull/15601)
* [OCPBUGS-44156](https://issues.redhat.com/browse/OCPBUGS-44156): bump dompurify to latest [#15589](https://github.com/openshift/console/pull/15589)
* [OCPBUGS-62326](https://issues.redhat.com/browse/OCPBUGS-62326): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15544](https://github.com/openshift/console/pull/15544)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Update CHANGELOG for 4.18 plugin SDK package publish [#15516](https://github.com/openshift/console/pull/15516)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Fix bug with Console provided PatternFly shared modules [#15479](https://github.com/openshift/console/pull/15479)
* [OCPBUGS-61697](https://issues.redhat.com/browse/OCPBUGS-61697): Remove ancient `X-XSS-Protection` header [#15493](https://github.com/openshift/console/pull/15493)
* [Full changelog](https://github.com/openshift/console/compare/ddb9280eda1be57dc775ecf140ab19a4b7e48cfb...dda58086cc1d64392b560b461b8736fc0eb00485)


### [console-operator](https://github.com/openshift/console-operator/tree/3f78ddd562b8a901ad30cb7b18b4c27e703561bd)

* [OCPBUGS-77861](https://issues.redhat.com/browse/OCPBUGS-77861): update go mod dependency for konflux [#1113](https://github.com/openshift/console-operator/pull/1113)
* [Full changelog](https://github.com/openshift/console-operator/compare/60dd3f557240d2408b7c12409d727732f8b355a3...3f78ddd562b8a901ad30cb7b18b4c27e703561bd)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c)

* [OCPBUGS-60871](https://issues.redhat.com/browse/OCPBUGS-60871): [release-4.18] host-device: Return interface name in result [#208](https://github.com/openshift/containernetworking-plugins/pull/208)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/b4e1047104eb2d81dd46ebbb24fb88cdaf175b90...e8ca1d70c43f33cd0e75c776e2a24afbec61b46c)


### [coredns](https://github.com/openshift/coredns/tree/8ca7f02b8becb40f7a9919243000e2620d7036d4)

* [OCPBUGS-60462](https://issues.redhat.com/browse/OCPBUGS-60462): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#152](https://github.com/openshift/coredns/pull/152)
* [Full changelog](https://github.com/openshift/coredns/compare/eb75d9b4f41a5ce0258d6f245c6206715ecb283b...8ca7f02b8becb40f7a9919243000e2620d7036d4)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/8857214a0160e383269525675ecbe6be40ca6f80)

* [OCPBUGS-57800](https://issues.redhat.com/browse/OCPBUGS-57800): Rebase release-4.18 onto release-1.31 [#322](https://github.com/openshift/cloud-provider-openstack/pull/322)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f03b55e67d688991eb053b78e7dd2ed5a29304ba...8857214a0160e383269525675ecbe6be40ca6f80)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/a14236907d2e7f3f0342d399f01ad38ee66b3346)

* [OCPBUGS-62467](https://issues.redhat.com/browse/OCPBUGS-62467): Requeue PVC over PV creation [#176](https://github.com/openshift/csi-external-resizer/pull/176)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/cca3837a84fcade22bd7b935c68d02904faa12aa...a14236907d2e7f3f0342d399f01ad38ee66b3346)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/8ddbcd381bf5317c1d1a93db3b5760681a33cb27)

* [OCPBUGS-63574](https://issues.redhat.com/browse/OCPBUGS-63574): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#190](https://github.com/openshift/csi-external-snapshotter/pull/190)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/838d2484157f076bbb81f1b584898aec6f051c2f...8ddbcd381bf5317c1d1a93db3b5760681a33cb27)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)

* [OCPBUGS-63324](https://issues.redhat.com/browse/OCPBUGS-63324): update log level verbosity to not clutter logs [#89](https://github.com/openshift/csi-node-driver-registrar/pull/89)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c21f5d02b498e9e49d94818f4ad3eaaae77ca161...ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)


### [docker-builder](https://github.com/openshift/builder/tree/529c96880ce41820700cf38ed8b6619697b71de9)

* [OCPBUGS-66990](https://issues.redhat.com/browse/OCPBUGS-66990): bump buildah to 1.37.7 to fix CVE-2025-52881 [#498](https://github.com/openshift/builder/pull/498)
* [OCPBUGS-65655](https://issues.redhat.com/browse/OCPBUGS-65655): BuildConfig inline Dockerfile fails with heredoc syntax [#486](https://github.com/openshift/builder/pull/486)
* [Full changelog](https://github.com/openshift/builder/compare/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f...529c96880ce41820700cf38ed8b6619697b71de9)


### [docker-registry](https://github.com/openshift/image-registry/tree/5c3675514f52b485e7e369757aa9d4f7358bbd4f)

* [OCPBUGS-68253](https://issues.redhat.com/browse/OCPBUGS-68253): update logrus to v1.9.1 [#464](https://github.com/openshift/image-registry/pull/464)
* [Full changelog](https://github.com/openshift/image-registry/compare/cfa51ab4b60fc0e836547626a5fd02b97ee82708...5c3675514f52b485e7e369757aa9d4f7358bbd4f)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/dca06c58f8294c26e24945c5b1bfa3a7bb7c16af)

* [OCPBUGS-78278](https://issues.redhat.com/browse/OCPBUGS-78278): [release-4.18] update go mod dependency for konflux [#265](https://github.com/openshift/cluster-api-provider-gcp/pull/265)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/1fff69026f5478680ee535531ab8dc2fb76f2f5c...dca06c58f8294c26e24945c5b1bfa3a7bb7c16af)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/f8ede8037d7775cb4025624f9f4f0904ca53553b)

* [OCPBUGS-68258](https://issues.redhat.com/browse/OCPBUGS-68258): UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 [#89](https://github.com/openshift/gcp-pd-csi-driver/pull/89)
* [OCPBUGS-44772](https://issues.redhat.com/browse/OCPBUGS-44772): Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment [#83](https://github.com/openshift/gcp-pd-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/1b8c94ac55d8602ba6669325ade654ae47ea74cf...f8ede8037d7775cb4025624f9f4f0904ca53553b)


### [haproxy-router](https://github.com/openshift/router/tree/ccd9551702a89cac27e38ebb63801ddb6823d101)

* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Add option abortonclose to HAProxy configuration template [#703](https://github.com/openshift/router/pull/703)
* [Full changelog](https://github.com/openshift/router/compare/d8058949aaf91dcdea050c58e6a34ef5f6670c67...ccd9551702a89cac27e38ebb63801ddb6823d101)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/91c24081f468e7636c824f4f5a2eb68660b81012)

* [OCPBUGS-54724](https://issues.redhat.com/browse/OCPBUGS-54724): Fix implementation of ContainsCIDR to allow non-equal addresses [#2267](https://github.com/openshift/kubernetes/pull/2267)
* [OCPBUGS-65553](https://issues.redhat.com/browse/OCPBUGS-65553): Update to Kubernetes v1.31.14 [#2521](https://github.com/openshift/kubernetes/pull/2521)
* [OCPBUGS-65494](https://issues.redhat.com/browse/OCPBUGS-65494): Fix Concurrentmap Iteration [#2512](https://github.com/openshift/kubernetes/pull/2512)
* [OCPBUGS-61773](https://issues.redhat.com/browse/OCPBUGS-61773): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write #2456 [#2475](https://github.com/openshift/kubernetes/pull/2475)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Backport StreamingCollectionEncoding for JSON and protobuf [#2483](https://github.com/openshift/kubernetes/pull/2483)
* [OCPBUGS-61557](https://issues.redhat.com/browse/OCPBUGS-61557): Rebase v1.31.13 [#2465](https://github.com/openshift/kubernetes/pull/2465)
* Revert "UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated."" [#2448](https://github.com/openshift/kubernetes/pull/2448)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a4cad449903ebc0483194289514d09f1deac1b66...91c24081f468e7636c824f4f5a2eb68660b81012)


### [hypershift](https://github.com/openshift/hypershift/tree/0d2075c649ed99657f6c5f90a0d273b8f99e9bc2)

* [OCPBUGS-76532](https://issues.redhat.com/browse/OCPBUGS-76532): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7699](https://github.com/openshift/hypershift/pull/7699)
* [OCPBUGS-77368](https://issues.redhat.com/browse/OCPBUGS-77368): Fix ignition-server pod restarts [#7878](https://github.com/openshift/hypershift/pull/7878)
* [CNTRLPLANE-1708](https://issues.redhat.com/browse/CNTRLPLANE-1708): Backport Customer Global Pull Secret to OpenShift 4.18.z [#7354](https://github.com/openshift/hypershift/pull/7354)
* [OCPBUGS-72932](https://issues.redhat.com/browse/OCPBUGS-72932): Fix Konflux EC voilation, update deprecated base … [#7456](https://github.com/openshift/hypershift/pull/7456)
* [OCPBUGS-69847](https://issues.redhat.com/browse/OCPBUGS-69847): test: remove unit tests that depend on network communication [release-4.18] [#7406](https://github.com/openshift/hypershift/pull/7406)
* [OCPBUGS-65843](https://issues.redhat.com/browse/OCPBUGS-65843): specify SCC annotation for pods in data plane [#7267](https://github.com/openshift/hypershift/pull/7267)
* [CNTRLPLANE-1902](https://issues.redhat.com/browse/CNTRLPLANE-1902): Migrate 4.18 pipelines to common pipeline template [#7211](https://github.com/openshift/hypershift/pull/7211)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): use csi-resizer image from release provider [#7103](https://github.com/openshift/hypershift/pull/7103)
* [OCPBUGS-63638](https://issues.redhat.com/browse/OCPBUGS-63638): [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7111](https://github.com/openshift/hypershift/pull/7111)
* [OCPBUGS-63034](https://issues.redhat.com/browse/OCPBUGS-63034): [release-4.18] Update DNS names for ovn-kubernetes cp metrics [#7025](https://github.com/openshift/hypershift/pull/7025)
* [OCPBUGS-63369](https://issues.redhat.com/browse/OCPBUGS-63369): Make the hypershift CLI binary FIPS-compliant [#7093](https://github.com/openshift/hypershift/pull/7093)
* [OCPBUGS-62808](https://issues.redhat.com/browse/OCPBUGS-62808): Fix driver-config ConfigMap content flapping due to random ordering #6944 [#6947](https://github.com/openshift/hypershift/pull/6947)
* [CNTRLPLANE-1424](https://issues.redhat.com/browse/CNTRLPLANE-1424): feat(konflux): tag MCE HO images with latest [#6837](https://github.com/openshift/hypershift/pull/6837)
* [OCPBUGS-62816](https://issues.redhat.com/browse/OCPBUGS-62816): set default goaway-chance to 0.001 [#6950](https://github.com/openshift/hypershift/pull/6950)
* [OCPBUGS-61904](https://issues.redhat.com/browse/OCPBUGS-61904): resolve MIRRORED_RELEASE_IMAGE flapping [#6858](https://github.com/openshift/hypershift/pull/6858)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Sync RBAC for expansion support in kubevirt CSI driver [#6355](https://github.com/openshift/hypershift/pull/6355)
* [OCPBUGS-61568](https://issues.redhat.com/browse/OCPBUGS-61568): [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution [#6793](https://github.com/openshift/hypershift/pull/6793)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): ci: konflux multi-arch images [#6867](https://github.com/openshift/hypershift/pull/6867)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): Use the common konflux pipeline and update CLI dockerfile [#6832](https://github.com/openshift/hypershift/pull/6832)
* NO-JIRA: chore(deps): update konflux references [#6667](https://github.com/openshift/hypershift/pull/6667)
* [Full changelog](https://github.com/openshift/hypershift/compare/f2cd27512fc4d6253537328294e1b5f96779005e...0d2075c649ed99657f6c5f90a0d273b8f99e9bc2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/fac07237771b1592166f0e87ffe42f53d438b9df)

* [OCPBUGS-77207](https://issues.redhat.com/browse/OCPBUGS-77207): [release-4.18] standardize build paths [#122](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/122)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/c7d883c586f548093481d87d7226d875502b30da...fac07237771b1592166f0e87ffe42f53d438b9df)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/4a0c35b0464d5c0ae9d61b656b4d0d51c3085b7c)

* [OCPBUGS-67286](https://issues.redhat.com/browse/OCPBUGS-67286): [release-4.18] Fix incomplete vendor/ [#140](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/140)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/5df161611ece493f54bb8a14963449102b763836...4a0c35b0464d5c0ae9d61b656b4d0d51c3085b7c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/ff6ba73c5c7188d1b3d5942ab8a2264966a4a460)

* [OCPBUGS-76537](https://issues.redhat.com/browse/OCPBUGS-76537): [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1239](https://github.com/openshift/insights-operator/pull/1239)
* [OCPBUGS-68263](https://issues.redhat.com/browse/OCPBUGS-68263): Update github.com/sirupsen/logrus to v1.9.3 [#1205](https://github.com/openshift/insights-operator/pull/1205)
* [OCPBUGS-68263](https://issues.redhat.com/browse/OCPBUGS-68263): [release-4.18] golanci-lint version update & corresponding fixes (#1045) [#1206](https://github.com/openshift/insights-operator/pull/1206)
* [OCPBUGS-66396](https://issues.redhat.com/browse/OCPBUGS-66396): Add filtering to add other possible pod status to QEMU gatherer [#1195](https://github.com/openshift/insights-operator/pull/1195)
* [OCPBUGS-66182](https://issues.redhat.com/browse/OCPBUGS-66182): QEMU logs are not gathered if there are pending status virt-launcher pods [#1189](https://github.com/openshift/insights-operator/pull/1189)
* [OCPBUGS-66181](https://issues.redhat.com/browse/OCPBUGS-66181): [bugfix] The archive's records may include files whose names are out of bounds [#1188](https://github.com/openshift/insights-operator/pull/1188)
* [OCPBUGS-61972](https://issues.redhat.com/browse/OCPBUGS-61972): add missing permissions for replicasets and events [#1146](https://github.com/openshift/insights-operator/pull/1146)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ee955991b2244252ba5ef29e59b5881cf04e39ce...ff6ba73c5c7188d1b3d5942ab8a2264966a4a460)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/3d444833113258a5606cddc55192c9183d520968)

* [OCPBUGS-77789](https://issues.redhat.com/browse/OCPBUGS-77789): remove dnf cache from the container images [#69](https://github.com/openshift/insights-runtime-extractor/pull/69)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/7149f2d5ed4682258bd429cd719ea154e1a27550...3d444833113258a5606cddc55192c9183d520968)


### [ironic](https://github.com/openshift/ironic-image/tree/faea7d5fb63f37595275c95a11a222ddeb779e58)

* [OCPBUGS-74115](https://issues.redhat.com/browse/OCPBUGS-74115): Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix [#795](https://github.com/openshift/ironic-image/pull/795)
* [OCPBUGS-69790](https://issues.redhat.com/browse/OCPBUGS-69790): Bump eventlet version to 0.33.1-7 [#760](https://github.com/openshift/ironic-image/pull/760)
* [OCPBUGS-65573](https://issues.redhat.com/browse/OCPBUGS-65573): Include Handle HTTP 400 and 409 race condition in Redfish power opera… [#727](https://github.com/openshift/ironic-image/pull/727)
* [OCPBUGS-62647](https://issues.redhat.com/browse/OCPBUGS-62647): Bump sushy to include etag fix [#701](https://github.com/openshift/ironic-image/pull/701)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9161a5fdb75042856bd40eec31bdba7b7c07d4a2...faea7d5fb63f37595275c95a11a222ddeb779e58)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/e5b494596e52636ade8f462a37e74e557447b773)

* [OCPBUGS-69780](https://issues.redhat.com/browse/OCPBUGS-69780): Bump eventlet version to 0.33.1-7 [#230](https://github.com/openshift/ironic-agent-image/pull/230)
* [OCPBUGS-68360](https://issues.redhat.com/browse/OCPBUGS-68360): Include Test advertised ip reachability before assigning it [#226](https://github.com/openshift/ironic-agent-image/pull/226)
* [OCPBUGS-62456](https://issues.redhat.com/browse/OCPBUGS-62456): netutils: Use ethtool ioctl to get permanent mac address [#206](https://github.com/openshift/ironic-agent-image/pull/206)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/b79bddef03460124923c7ce8616d83f719a49960...e5b494596e52636ade8f462a37e74e557447b773)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/046193a8872c145150c28160577002bfd453b2f5)

* [OCPBUGS-74873](https://issues.redhat.com/browse/OCPBUGS-74873): Deduplicate CRS stores [#131](https://github.com/openshift/kube-state-metrics/pull/131)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61...046193a8872c145150c28160577002bfd453b2f5)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/815b43b7f7288da76dd314553e113aefe2a5897d)

* [OCPBUGS-78273](https://issues.redhat.com/browse/OCPBUGS-78273): fix /vendor for hermetic 4.18 [#239](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/239)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5...815b43b7f7288da76dd314553e113aefe2a5897d)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/09f4797657654ce788ea3a1077fd7cf7ce96fb5a)

* [OCPBUGS-63670](https://issues.redhat.com/browse/OCPBUGS-63670): Add awels as an approver in 4.18 branch [#73](https://github.com/openshift/kubevirt-csi-driver/pull/73)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Implement volume expansion [#71](https://github.com/openshift/kubevirt-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2111495e6d03f1bfe0702996fdd1355ca21b78cf...09f4797657654ce788ea3a1077fd7cf7ce96fb5a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/58f231a1f7218b7dd70f8d298a9dd5d67533c2de)

* [OCPBUGS-78796](https://issues.redhat.com/browse/OCPBUGS-78796): [release-4.18] Use resource group when generating default Azure image [#1480](https://github.com/openshift/machine-api-operator/pull/1480)
* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Enabled 10 concurrent reconciles on GCP [#1392](https://github.com/openshift/machine-api-operator/pull/1392)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc...58f231a1f7218b7dd70f8d298a9dd5d67533c2de)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ddf9a058799932c22942bdbef849178a6321c883)

* [OCPBUGS-62692](https://issues.redhat.com/browse/OCPBUGS-62692): configure-ovs: work around a Cisco switch issue [#5329](https://github.com/openshift/machine-config-operator/pull/5329)
* [OCPBUGS-78056](https://issues.redhat.com/browse/OCPBUGS-78056): Prevent unnecessary systemd unit disable [#5758](https://github.com/openshift/machine-config-operator/pull/5758)
* [OCPBUGS-74148](https://issues.redhat.com/browse/OCPBUGS-74148): enable nodeip-configuration for platform external [#5578](https://github.com/openshift/machine-config-operator/pull/5578)
* [OCPBUGS-77777](https://issues.redhat.com/browse/OCPBUGS-77777): reduce MCO image size [#5738](https://github.com/openshift/machine-config-operator/pull/5738)
* [OCPBUGS-77576](https://issues.redhat.com/browse/OCPBUGS-77576): mcd_config_drift not working properly [#5726](https://github.com/openshift/machine-config-operator/pull/5726)
* [OCPBUGS-77421](https://issues.redhat.com/browse/OCPBUGS-77421): Remove MCD liveness probe [#5710](https://github.com/openshift/machine-config-operator/pull/5710)
* [OCPBUGS-74644](https://issues.redhat.com/browse/OCPBUGS-74644): After OCL is enabled few phases in MCN are not updating as expected [#5605](https://github.com/openshift/machine-config-operator/pull/5605)
* [OCPBUGS-77092](https://issues.redhat.com/browse/OCPBUGS-77092): Machine-config controller should not log about non-existent pull-secret changes [#5680](https://github.com/openshift/machine-config-operator/pull/5680)
* [OCPBUGS-77041](https://issues.redhat.com/browse/OCPBUGS-77041): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5671](https://github.com/openshift/machine-config-operator/pull/5671)
* [OCPBUGS-76560](https://issues.redhat.com/browse/OCPBUGS-76560): [release-4.18]: cherry pick to few fixes that needed for missing services and configuration [#5653](https://github.com/openshift/machine-config-operator/pull/5653)
* [OCPBUGS-71227](https://issues.redhat.com/browse/OCPBUGS-71227): MCP is not correctly degraded when a pivotError happens [#5534](https://github.com/openshift/machine-config-operator/pull/5534)
* [OCPBUGS-70336](https://issues.redhat.com/browse/OCPBUGS-70336): Remove log exposing kubeconfig [#5528](https://github.com/openshift/machine-config-operator/pull/5528)
* [OCPBUGS-62169](https://issues.redhat.com/browse/OCPBUGS-62169): Fix - NetworkManager restart or crash renders br-ex unusable [#5356](https://github.com/openshift/machine-config-operator/pull/5356)
* [OCPBUGS-65850](https://issues.redhat.com/browse/OCPBUGS-65850): Remove --mount directives [#5433](https://github.com/openshift/machine-config-operator/pull/5433)
* [OCPBUGS-62294](https://issues.redhat.com/browse/OCPBUGS-62294): Make static DNS with DHCP IP work [#5311](https://github.com/openshift/machine-config-operator/pull/5311)
* [OCPBUGS-63346](https://issues.redhat.com/browse/OCPBUGS-63346): Invalid architecture value found in annotation during 4.19 update [#5366](https://github.com/openshift/machine-config-operator/pull/5366)
* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Enable debug logging for nodeip-configuration [#5220](https://github.com/openshift/machine-config-operator/pull/5220)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5325](https://github.com/openshift/machine-config-operator/pull/5325)
* [OCPBUGS-62845](https://issues.redhat.com/browse/OCPBUGS-62845): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5341](https://github.com/openshift/machine-config-operator/pull/5341)
* [OCPBUGS-62499](https://issues.redhat.com/browse/OCPBUGS-62499): Add /etc/docker/certs.d to template [#5320](https://github.com/openshift/machine-config-operator/pull/5320)
* [OCPBUGS-62637](https://issues.redhat.com/browse/OCPBUGS-62637): Machine-config controller should actively manage cordon while draining [#5322](https://github.com/openshift/machine-config-operator/pull/5322)
* [OCPBUGS-62350](https://issues.redhat.com/browse/OCPBUGS-62350): Add mcd_local_unsupported_packages recording rule [#5315](https://github.com/openshift/machine-config-operator/pull/5315)
* [OCPBUGS-62321](https://issues.redhat.com/browse/OCPBUGS-62321): Add control-plane label for master nodes on legacy clusters [#5314](https://github.com/openshift/machine-config-operator/pull/5314)
* [OCPBUGS-61840](https://issues.redhat.com/browse/OCPBUGS-61840): Override NMState service definition [#5288](https://github.com/openshift/machine-config-operator/pull/5288)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6cabdc1467e3bcc9961544e148530a9c88789856...ddf9a058799932c22942bdbef849178a6321c883)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/fecdfc923a4b3158f161dc16436b95e7008bf2f9)

* [OCPBUGS-77888](https://issues.redhat.com/browse/OCPBUGS-77888): Clean up dnf cache to reduce container image size [#168](https://github.com/openshift/image-customization-controller/pull/168)
* [OCPBUGS-68262](https://issues.redhat.com/browse/OCPBUGS-68262): [4.18] Uplift logrus [#151](https://github.com/openshift/image-customization-controller/pull/151)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d9a71247dafd469182d4bd13ef227c9be82a1e32...fecdfc923a4b3158f161dc16436b95e7008bf2f9)


### [metallb-frr](https://github.com/openshift/frr/tree/760c6639a0c4825745d69b389b50689ebc2b8052)

* [OCPBUGS-74485](https://issues.redhat.com/browse/OCPBUGS-74485): Dockerfile: unpin FRR rpm [#121](https://github.com/openshift/frr/pull/121)
* [Full changelog](https://github.com/openshift/frr/compare/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91...760c6639a0c4825745d69b389b50689ebc2b8052)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/13fdbe7bcd336f6ea5a174ce6d13f8b8e64b1367)

* NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] [#818](https://github.com/openshift/monitoring-plugin/pull/818)
* [OCPBUGS-70291](https://issues.redhat.com/browse/OCPBUGS-70291): fix: update qs vulnerable dependency [#739](https://github.com/openshift/monitoring-plugin/pull/739)
* [OCPBUGS-65958](https://issues.redhat.com/browse/OCPBUGS-65958): Fix metrics gaps 4.18 [#656](https://github.com/openshift/monitoring-plugin/pull/656)
* [OCPBUGS-64735](https://issues.redhat.com/browse/OCPBUGS-64735): allow tenancy access to metrics tag [#638](https://github.com/openshift/monitoring-plugin/pull/638)
* [OU-1059](https://issues.redhat.com/browse/OU-1059): add perspective to action injector [#632](https://github.com/openshift/monitoring-plugin/pull/632)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/fafea6bc427827c137eb312d9a8d31ad2893114e...13fdbe7bcd336f6ea5a174ce6d13f8b8e64b1367)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/80580849f0a3578a6644d2960a6d24ec3847673c)

* [OCPBUGS-77853](https://issues.redhat.com/browse/OCPBUGS-77853): hermetic 4.18 [#276](https://github.com/openshift/multus-cni/pull/276)
* [Full changelog](https://github.com/openshift/multus-cni/compare/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d...80580849f0a3578a6644d2960a6d24ec3847673c)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/3362bbc4c47ad7aec4f9551355e32870c30ab7c8)

* [OCPBUGS-54939](https://issues.redhat.com/browse/OCPBUGS-54939): [release-4.18]: Support default ports value [#68](https://github.com/openshift/multus-networkpolicy/pull/68)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32...3362bbc4c47ad7aec4f9551355e32870c30ab7c8)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)

* [OCPBUGS-62793](https://issues.redhat.com/browse/OCPBUGS-62793): Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted [#99](https://github.com/openshift/bond-cni/pull/99)
* [Full changelog](https://github.com/openshift/bond-cni/compare/a5e5e80be5698c12d3223cf377386baa977bc587...e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/8c03ac029f38e80cf78ce9d14e5fc618a9726d89)

* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#319](https://github.com/openshift/networking-console-plugin/pull/319)
* [OCPBUGS-63582](https://issues.redhat.com/browse/OCPBUGS-63582): Fixed - Extra semicolon observed before Service IP in OCP Console [#306](https://github.com/openshift/networking-console-plugin/pull/306)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/15535681de838e97e0a137fb0cc7123746019b08...8c03ac029f38e80cf78ce9d14e5fc618a9726d89)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/1078b191784c375d31008aef9ee2b8484ca5fe7f)

* NO-JIRA: (chore): update OWNERS file [#170](https://github.com/openshift/oauth-apiserver/pull/170)
* [OCPBUGS-65841](https://issues.redhat.com/browse/OCPBUGS-65841): UPSTREAM: &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#155](https://github.com/openshift/oauth-apiserver/pull/155)
* [OCPBUGS-63050](https://issues.redhat.com/browse/OCPBUGS-63050): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#149](https://github.com/openshift/oauth-apiserver/pull/149)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/2575ff417406ea6680aff0de6efb524dbbe2b8d2...1078b191784c375d31008aef9ee2b8484ca5fe7f)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/9225edb9821cab67ffa628b05e0eed67973436f0)

* [OCPBUGS-61444](https://issues.redhat.com/browse/OCPBUGS-61444): Update x/crypto to v0.31.0 [#333](https://github.com/openshift/oauth-proxy/pull/333)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/91582506b4dc8344743ef8ce5e5cfa2773ff1773...9225edb9821cab67ffa628b05e0eed67973436f0)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/22a9fb8772753a2a56aa061b80bdc22ba4b2c992)

* [OCPBUGS-66051](https://issues.redhat.com/browse/OCPBUGS-66051): Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) [#1324](https://github.com/openshift/oc-mirror/pull/1324)
* [OCPBUGS-65510](https://issues.redhat.com/browse/OCPBUGS-65510): removes unintended exec permissions [#1312](https://github.com/openshift/oc-mirror/pull/1312)
* [OCPBUGS-62696](https://issues.redhat.com/browse/OCPBUGS-62696): v2/cli: show binary version in output [#1286](https://github.com/openshift/oc-mirror/pull/1286)
* [OCPBUGS-62711](https://issues.redhat.com/browse/OCPBUGS-62711): generate the archive only after mirroring [#1287](https://github.com/openshift/oc-mirror/pull/1287)
* [OCPBUGS-62432](https://issues.redhat.com/browse/OCPBUGS-62432): changes the warning message of 4.21 [#1278](https://github.com/openshift/oc-mirror/pull/1278)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/f0d9279179b0d676387b7ed783452f2c6ecf3c8b...22a9fb8772753a2a56aa061b80bdc22ba4b2c992)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/180aa92c13fda1aa1ae35205c9b380a4ead41e8b)

* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#139](https://github.com/openshift/operator-framework-catalogd/pull/139)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/9f981b3ee5822098c6e648aa30742da07318f954...180aa92c13fda1aa1ae35205c9b380a4ead41e8b)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/48a1e9247ab72edf8d61fa2376df5e6d9e16e53e)

* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#509](https://github.com/openshift/operator-framework-operator-controller/pull/509)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/000dd09dfaab76307cd9f3b760dd8123d4aac07a...48a1e9247ab72edf8d61fa2376df5e6d9e16e53e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/be33e23705684b7b8b0e194402d76446b45c66c0)

* [OCPBUGS-74234](https://issues.redhat.com/browse/OCPBUGS-74234): Bump library-go for route path validation fix [#603](https://github.com/openshift/openshift-apiserver/pull/603)
* [OCPBUGS-69955](https://issues.redhat.com/browse/OCPBUGS-69955): Add ValidatingAdmissionPolicy and check for omissions next time. [#589](https://github.com/openshift/openshift-apiserver/pull/589)
* [OCPBUGS-66379](https://issues.redhat.com/browse/OCPBUGS-66379): pkg/image: conditionally parse raw image manifest [#585](https://github.com/openshift/openshift-apiserver/pull/585)
* [OCPBUGS-65842](https://issues.redhat.com/browse/OCPBUGS-65842): UPSTREAM &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#581](https://github.com/openshift/openshift-apiserver/pull/581)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/5d7a65bad932a0434928571b74db27588bb9be2d...be33e23705684b7b8b0e194402d76446b45c66c0)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d5e6ff9f4baf4f306374f894d7b5e3e36ef52520)

* [OCPBUGS-64816](https://issues.redhat.com/browse/OCPBUGS-64816): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#371](https://github.com/openshift/cluster-api-provider-openstack/pull/371)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/ce2c2d17d9c489d776f0383869d453dff89b0462...d5e6ff9f4baf4f306374f894d7b5e3e36ef52520)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/c43dba2c4d9edb0ffc62b71cb26815da31c8b9c8)

* [OCPBUGS-69648](https://issues.redhat.com/browse/OCPBUGS-69648): Don't record event for every reconcile [#143](https://github.com/openshift/machine-api-provider-openstack/pull/143)
* [OCPBUGS-76792](https://issues.redhat.com/browse/OCPBUGS-76792): Fix make test [#159](https://github.com/openshift/machine-api-provider-openstack/pull/159)
* [OCPBUGS-74986](https://issues.redhat.com/browse/OCPBUGS-74986): Revendor CAPO [#152](https://github.com/openshift/machine-api-provider-openstack/pull/152)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/d914e77ee67211024153b1535e8709c3cf190512...c43dba2c4d9edb0ffc62b71cb26815da31c8b9c8)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5cd473d377523ab5746804171dac03e4ae37993f)

* [OCPBUGS-77714](https://issues.redhat.com/browse/OCPBUGS-77714): Remove the collect-profiles info from the microshift kustomization file [#1245](https://github.com/openshift/operator-framework-olm/pull/1245)
* [OCPBUGS-76924](https://issues.redhat.com/browse/OCPBUGS-76924): Remove the collect-profiles job [#1231](https://github.com/openshift/operator-framework-olm/pull/1231)
* [OCPBUGS-65700](https://issues.redhat.com/browse/OCPBUGS-65700): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1156](https://github.com/openshift/operator-framework-olm/pull/1156)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f295d320d98493b70a105fa22ca79fab546a2e52...5cd473d377523ab5746804171dac03e4ae37993f)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/34521c26450e93eea0379e52f86b02c69fbacb49)

* [OCPBUGS-73883](https://issues.redhat.com/browse/OCPBUGS-73883): Increase default catalog polling interval to 4h (240m) [#707](https://github.com/operator-framework/operator-marketplace/pull/707)
* [OCPBUGS-68272](https://issues.redhat.com/browse/OCPBUGS-68272), [OCPBUGS-68273](https://issues.redhat.com/browse/OCPBUGS-68273): CVE-2025-65637 fixed in logrus v1.9.3+ [#703](https://github.com/operator-framework/operator-marketplace/pull/703)
* [OCPBUGS-62218](https://issues.redhat.com/browse/OCPBUGS-62218): Remove Expect func so that the test case can use the retry logic [#669](https://github.com/operator-framework/operator-marketplace/pull/669)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c06a810b321ad79ef572ce36ed935332a58ea319...34521c26450e93eea0379e52f86b02c69fbacb49)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/e367b542d01af429a5f9d3ac8b85970a328a76e3)

* [OCPBUGS-68284](https://issues.redhat.com/browse/OCPBUGS-68284): Bump github.com/sirupsen/logrus to v1.8.3 [#150](https://github.com/openshift/ovirt-csi-driver-operator/pull/150)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/0feae256abcc9b86c0276eaf2fc233cf899fb0ae...e367b542d01af429a5f9d3ac8b85970a328a76e3)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/4634c88f75f42d4fd2c795d0b8153cbe5babe656)

* [OCPBUGS-78015](https://issues.redhat.com/browse/OCPBUGS-78015): Add pperiyasamy to OWNERS for release-4.18 [#3045](https://github.com/openshift/ovn-kubernetes/pull/3045)
* [OCPBUGS-77516](https://issues.redhat.com/browse/OCPBUGS-77516): Clear stale conntrack UDP entries for nodePorts [#3016](https://github.com/openshift/ovn-kubernetes/pull/3016)
* [OCPBUGS-77083](https://issues.redhat.com/browse/OCPBUGS-77083), [OCPBUGS-77106](https://issues.redhat.com/browse/OCPBUGS-77106): [release-4.18] combined backport PR for 2 escalations [#2987](https://github.com/openshift/ovn-kubernetes/pull/2987)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): Branch Sync release-4.19 to release-4.18 [02-04-2026] [#2970](https://github.com/openshift/ovn-kubernetes/pull/2970)
* [OCPBUGS-74270](https://issues.redhat.com/browse/OCPBUGS-74270): release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync [#2943](https://github.com/openshift/ovn-kubernetes/pull/2943)
* [OCPBUGS-70346](https://issues.redhat.com/browse/OCPBUGS-70346): Branch Sync release-4.19 to release-4.18 [01-07-2026] [#2922](https://github.com/openshift/ovn-kubernetes/pull/2922)
* [OCPBUGS-66140](https://issues.redhat.com/browse/OCPBUGS-66140): Branch Sync release-4.19 to release-4.18 [12-31-2025] [#2916](https://github.com/openshift/ovn-kubernetes/pull/2916)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [OCPBUGS-66360](https://issues.redhat.com/browse/OCPBUGS-66360), [OCPBUGS-66381](https://issues.redhat.com/browse/OCPBUGS-66381), [OCPBUGS-66428](https://issues.redhat.com/browse/OCPBUGS-66428): Branch Sync release-4.19 to release-4.18 [12-03-2025] [#2895](https://github.com/openshift/ovn-kubernetes/pull/2895)
* [OCPBUGS-68347](https://issues.redhat.com/browse/OCPBUGS-68347): Add ricky-rav to OWNERS for release-4.18 [#2897](https://github.com/openshift/ovn-kubernetes/pull/2897)
* [OCPBUGS-64855](https://issues.redhat.com/browse/OCPBUGS-64855): Fix stale EIP assignments during failover and controller restart [#2849](https://github.com/openshift/ovn-kubernetes/pull/2849)
* [OCPBUGS-64780](https://issues.redhat.com/browse/OCPBUGS-64780): kubevirt: fix bad release of IPs of live migratable pods [#2847](https://github.com/openshift/ovn-kubernetes/pull/2847)
* [OCPBUGS-63459](https://issues.redhat.com/browse/OCPBUGS-63459): Branch Sync release-4.19 to release-4.18 [10-22-2025] [#2825](https://github.com/openshift/ovn-kubernetes/pull/2825)
* [OCPBUGS-63716](https://issues.redhat.com/browse/OCPBUGS-63716): Skip Pending pods in EgressIP status updates [#2836](https://github.com/openshift/ovn-kubernetes/pull/2836)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] [#2811](https://github.com/openshift/ovn-kubernetes/pull/2811)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Fix EgressIP stale GARP post reboot + pod restart [#2775](https://github.com/openshift/ovn-kubernetes/pull/2775)
* [OCPBUGS-59744](https://issues.redhat.com/browse/OCPBUGS-59744), [OCPBUGS-61455](https://issues.redhat.com/browse/OCPBUGS-61455): [4.18] allow default network -&gt; localnet on the same node for any localnet subnet [#2785](https://github.com/openshift/ovn-kubernetes/pull/2785)
* [OCPBUGS-61748](https://issues.redhat.com/browse/OCPBUGS-61748): [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] [#2777](https://github.com/openshift/ovn-kubernetes/pull/2777)
* [OCPBUGS-59680](https://issues.redhat.com/browse/OCPBUGS-59680): [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] [#2768](https://github.com/openshift/ovn-kubernetes/pull/2768)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2cbd05df74c6ab851fc644a8614417f104d5a494...4634c88f75f42d4fd2c795d0b8153cbe5babe656)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/6806cd397b230bb9d5e41abbb4b22d7efda11059)

* [OCPBUGS-51896](https://issues.redhat.com/browse/OCPBUGS-51896): Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 [#102](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/102)
* [OCPBUGS-70002](https://issues.redhat.com/browse/OCPBUGS-70002): Update builder image's golang version to 1.23 [#103](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/103)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/d36aea34452210f988f74e93e0640318f3db1938...6806cd397b230bb9d5e41abbb4b22d7efda11059)


### [prometheus](https://github.com/openshift/prometheus/tree/a85013a6c5176d8a569d1908532c9c31aa399306)

* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore: compute highestTimestamp at queryManager level [#267](https://github.com/openshift/prometheus/pull/267)
* [Full changelog](https://github.com/openshift/prometheus/compare/df5ef25778ad5949c637beae1b9c303b4c044302...a85013a6c5176d8a569d1908532c9c31aa399306)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/2e844270ca5c4fc6d444a77b01d2b79a93405538)

* [OCPBUGS-74976](https://issues.redhat.com/browse/OCPBUGS-74976): Include go-verify-deps expected files in gitignore [#114](https://github.com/openshift/prometheus-alertmanager/pull/114)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/a432067579aaa60326a104f4ce2eba18e1ab444c...2e844270ca5c4fc6d444a77b01d2b79a93405538)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/9bbce0b88e6b5aa4f9069aa202ea1eab1315df82)

* [OCPBUGS-77298](https://issues.redhat.com/browse/OCPBUGS-77298): backport upstream fix to reconcile resources with inconsistent status [#370](https://github.com/openshift/prometheus-operator/pull/370)
* [OCPBUGS-77398](https://issues.redhat.com/browse/OCPBUGS-77398): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#366](https://github.com/openshift/prometheus-operator/pull/366)
* [OCPBUGS-61965](https://issues.redhat.com/browse/OCPBUGS-61965): reconcile workload configurations when a referenced secret/configmap key is updated [#347](https://github.com/openshift/prometheus-operator/pull/347)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/18c2332d37d2c98d1b9bacd92eb574ecab130b6d...9bbce0b88e6b5aa4f9069aa202ea1eab1315df82)


### [tests](https://github.com/openshift/origin/tree/43c5124437fdc7a91708070434fb6beb7d86b92c)

* [OCPBUGS-77876](https://issues.redhat.com/browse/OCPBUGS-77876): Backport: Remove duplicated graceful termination test from release-4.18 [#30702](https://github.com/openshift/origin/pull/30702)
* [OCPBUGS-74207](https://issues.redhat.com/browse/OCPBUGS-74207): Unrevert TLS tests with fixes [#30708](https://github.com/openshift/origin/pull/30708)
* [OCPBUGS-69900](https://issues.redhat.com/browse/OCPBUGS-69900): Updated the upgrade duration limit to 100 minutes for ppc64le [#30628](https://github.com/openshift/origin/pull/30628)
* [OCPBUGS-63668](https://issues.redhat.com/browse/OCPBUGS-63668): Add imagestream update dryrun test [#30436](https://github.com/openshift/origin/pull/30436)
* [OCPBUGS-63712](https://issues.redhat.com/browse/OCPBUGS-63712): Migrate OCP-32383 to upstream [#30443](https://github.com/openshift/origin/pull/30443)
* [OCPBUGS-61698](https://issues.redhat.com/browse/OCPBUGS-61698): chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster [#30253](https://github.com/openshift/origin/pull/30253)
* [OCPBUGS-60511](https://issues.redhat.com/browse/OCPBUGS-60511): Bump to latest openshift/kubernetes (v1.31.12) [#30230](https://github.com/openshift/origin/pull/30230)
* [Full changelog](https://github.com/openshift/origin/compare/051eac54e555cbb0949d38132e5a70c039addad0...43c5124437fdc7a91708070434fb6beb7d86b92c)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/b4dbf34a16f6f1f269b7e3ab9409c7e888b822ab)

* [OCPBUGS-77668](https://issues.redhat.com/browse/OCPBUGS-77668): hermetic migration 4.18 [#105](https://github.com/openshift/cloud-provider-vsphere/pull/105)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/c414d1f5b0d910300cafda742aca146d41fce98a...b4dbf34a16f6f1f269b7e3ab9409c7e888b822ab)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/8de80b80f101c45a1c5b4d08c9fc9a2cb1a40119)

* [OCPBUGS-78018](https://issues.redhat.com/browse/OCPBUGS-78018): hermetic migration 4.18 [#84](https://github.com/openshift/cluster-api-provider-vsphere/pull/84)
* [OCPBUGS-61651](https://issues.redhat.com/browse/OCPBUGS-61651): Fix unit tests [#70](https://github.com/openshift/cluster-api-provider-vsphere/pull/70)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/014a2e54ee08659d93dc30414131efd6dac96dff...8de80b80f101c45a1c5b4d08c9fc9a2cb1a40119)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/ae6801c498ab59c6bccb1702285fe394343fef0c)

* [OCPBUGS-68278](https://issues.redhat.com/browse/OCPBUGS-68278): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#156](https://github.com/openshift/vmware-vsphere-csi-driver/pull/156)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cfcad01dbca611e0bf7d54af099bba8563acfd4f...ae6801c498ab59c6bccb1702285fe394343fef0c)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/df6cebf05b446517f6bec948da0a2178074429da)

* [OCPBUGS-70359](https://issues.redhat.com/browse/OCPBUGS-70359): Fixed logic for vSphere compute cluster permission [#200](https://github.com/openshift/vsphere-problem-detector/pull/200)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/1a2036121a48da7493bdb50913c2b71c2372be60...df6cebf05b446517f6bec948da0a2178074429da)