# 4.18.49

Created: 2026-07-16 14:00:14 +0000 UTC

Image Digest: `sha256:33b613b2301d908441b6888d4080665504b3d19d386e88175a2c3a2553fec698`


## Changes from 4.18.36

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.14
* Kubernetes Tests 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202603181125-0 to 418.94.202607152305-0


### Removed images

* ovirt-csi-driver
* ovirt-csi-driver-operator


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [81d6bc27](https://github.com/openshift/assisted-installer/commit/81d6bc2771d3d34de3c364e349ca7f2983e454a2) `sha256:e4da9778d3f4ee6cce14b0f1be8abb2242c86c9b5a3efa2187cb335f09ada2d3`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [81c09fb7](https://github.com/openshift/assisted-installer-agent/commit/81c09fb75bccd35b2e909537b93e5aa431eeed1a) `sha256:b2ec5f2874f005a4994f650eb11e62c54bad921956f06216154d8838af256c60`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [81d6bc27](https://github.com/openshift/assisted-installer/commit/81d6bc2771d3d34de3c364e349ca7f2983e454a2) `sha256:f235690846a9f086e4c2ddd821c823ae6bf4cad5b4e875dd9694beee6ca75a53`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [63b87f06](https://github.com/openshift/agent-installer-utils/commit/63b87f06c5586b59ca99d7a4546d4c82b2aa0268) `sha256:ad1c225020c557e972545548632e1c4fc5c3b3a2b786ff611c4730db4d2388f2`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [2f62712d](https://github.com/openshift/apiserver-network-proxy/commit/2f62712d5db70df25490361749e93a552ffb5a24) `sha256:f552211e2d22a6bcc21e91bd5fcf4506f8ecff95cd3548531c12ce960ca9e46a`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:ba3b9be6e0a119b834b753a83bbfe220200c0127d0b9672f39f3b7340bc1cca3`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [ed55fc2d](https://github.com/openshift/cluster-api-provider-aws/commit/ed55fc2df3f3bab15f03306df692112f6f109fe4) `sha256:a7c67da9e2751809454b0a8d6bcebe85a1cc8c698c1a1e372b7c7fba1d75ac1e`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [7b6bfc74](https://github.com/openshift/machine-api-provider-aws/commit/7b6bfc7421d1cc700ddbcbf150beccd0ab586183) `sha256:1fbf196293ece229a3a774a36820691fe832754d3eaab8002ce84a7ef09efffc`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [f54f9a19](https://github.com/openshift/aws-pod-identity-webhook/commit/f54f9a19adb43b395a880ca046aed0841466c28d) `sha256:97e3851fb53ffacac06cd07bd83f5d1f2e474144844c92c94c4c47d18189f542`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [c937080f](https://github.com/openshift/azure-kubernetes-kms/commit/c937080f51cec58650daa15805be548d09310c64) `sha256:73147e8d44cac76cc1640c3598541889c03156a0300427514b407784c29a83a7`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [2fdaa544](https://github.com/openshift/machine-api-provider-azure/commit/2fdaa544160658c3c4535c167960e4f3e2e70727) `sha256:6a7e77fac1f9b53c53392dcaa4c7222211d1a6910ba9e2932e3095791867fbe9`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [f60e4029](https://github.com/openshift/azure-workload-identity/commit/f60e4029d64de202e81d2cd114f8a90dc0a1878e) `sha256:f3bc8b4bffa7e3a199f86f1f84f44a4e139229bf29597dd7a64282391d366514`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [80c3a063](https://github.com/openshift/cluster-api-provider-metal3/commit/80c3a0638eacd65c0d6f54fbd3f4c593085528e8) `sha256:31cbcce01ea6d39b8e29eec11650d36b1c41a84543c7bff5dbf95a6a215275af`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:ca3ba7000225860ebe8b29c535e8a7a1d31a5e167186c89e0a08791727eaa5a4`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [35341068](https://github.com/openshift/baremetal-runtimecfg/commit/353410688340dadb583668215e13e2d6cc90e272) `sha256:94b42080167f58fbf71fabe3fe5cbe084a0761ff4534fa35d39d81cd2a595076`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [363e98bd](https://github.com/openshift/cloud-credential-operator/commit/363e98bd7ca3872072a8aad152525c61388b10a5) `sha256:f8252294deed4874a94d68830b26208a439184355590640f671da2e6d2e2ed01`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [f892b915](https://github.com/openshift/cloud-network-config-controller/commit/f892b9152672d963b667d6d644e65576946133a3) `sha256:2b76cbe1a816ef1d4ea4b1a38e513f6a8756ceb18d03cd61636cd6bd43ded0e4`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:82f15f4fef75a793e49245280280a4cee14fbb5b5ffbf09a91492541bc2a5065`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:68357dac33aa45b3666e96d131e7220bba5c30ae46c7c5c0e0ae05d7abc9403d`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [8abb0673](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/8abb067318de3cc68967a0f24627c26912242524) `sha256:824388c68a994b65f975bd845daa1b6cf9f3905c783227c3f45542993d0586dd`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [fe5e9286](https://github.com/openshift/cluster-config-operator/commit/fe5e928628200b49a07aa50e4dfa634fb9452607) `sha256:b84f4ddd5ea869253f8e8db88b5aff323b383b3b64fea4149d7e53fb460bcf4d`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:2924582f2045ca0081307996da1133e5fa46746a6c6fedbe08f845fa7c4463c8`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:c39b5bd366e7ce7ce41f8338799c9bbf189876a6c727662428e6e715e37562d3`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [7cafd0c7](https://github.com/openshift/cluster-dns-operator/commit/7cafd0c7dca2edb154b8444602b600b5901afeba) `sha256:7c85e0c33ac6a85c9c5938d4efd99b507a35d8e87612676c177624b6ab7efa7b`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1e3caa4b](https://github.com/openshift/cluster-image-registry-operator/commit/1e3caa4b5abe4e3dad914a337f87408d060b1fb2) `sha256:576e47249b2f66a1d769cac01bcebcbc99df7654a54b548a0783e86e69225ed8`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [e9bc9090](https://github.com/openshift/cluster-kube-apiserver-operator/commit/e9bc90906c726823f154c78d3e568c98ff77b6a5) `sha256:c8ebb75cf4dd749806a166fe3c693fba6522e5c4a49786be75fe1c93618eb543`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [6347fc81](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/6347fc8179b2a04d51c99432ae612bf4df595dc0) `sha256:55097bd1f7bf500ea6303d4391ced2a78ccfe290074d01797c2d0da0c9416fb6`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [4e99db62](https://github.com/openshift/cluster-kube-scheduler-operator/commit/4e99db62cea1d2ca48765230c6f5663d1f2c2702) `sha256:dd6dab937ec1ceb37b80172e6d2dc6817635d477c71cb6dec9246edbff6e89a2`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:941f0dcaad4340e5a5a581c104ad45cd584e6a8e613f6c4f1531baffa05a40d9`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:4c20dc58fd2a2f23d2232eb11c9471dd983f9d7279e7ce65c676aac07d6d5852`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:5945e58b8ef71f1b6423663841060a4f376fe6b90ae7fca3893627cd43fe9792`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:c000d34571523e5f3da6e4b92ae8023e0c1e04d293d6bb2d31f9de8d60dd4462`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [bc725fd4](https://github.com/openshift/cluster-samples-operator/commit/bc725fd43d29758ad8f704044ccc8abb6926ad84) `sha256:b56e03ee5b4a9ee101deab7f501c96bbf07315b418266a6653a70bd833b80a06`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [8caab452](https://github.com/openshift/cluster-update-keys/commit/8caab452b91df0d77ab052b1833a4d54a1374634) `sha256:ed4b19167d7ce7af7a6b76e23cf72a7d224801e292c3594249769366468e735f`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [f72d7e2c](https://github.com/openshift/cluster-version-operator/commit/f72d7e2c7dc8f5e0bb8687f9b9fd0c918952cbda) `sha256:4442070e39b8a15b8aec19580337a052b9f66f74a9e489763b25f44dd5b71db3`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e2aaf00a](https://github.com/openshift/configmap-reload/commit/e2aaf00a381b57874178a4272f3bc5257cf8dd98) `sha256:9dc64db5c62009ccc031babff77b197f4beda7eb70868281961a8c29d82ecbc6`
* [console-operator](https://github.com/openshift/console-operator) git [3f78ddd5](https://github.com/openshift/console-operator/commit/3f78ddd562b8a901ad30cb7b18b4c27e703561bd) `sha256:b7ec8160a256852d4bf7062f7e5c310de4ba3ba37af9d1cc02e9cf0eae54b993`
* [coredns](https://github.com/openshift/coredns) git [8ca7f02b](https://github.com/openshift/coredns/commit/8ca7f02b8becb40f7a9919243000e2620d7036d4) `sha256:a8e028ea163cd3cd26f6d00c3534fa8ca541da817d5c1ffadcb2f6da6c445497`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [a1423690](https://github.com/openshift/csi-external-resizer/commit/a14236907d2e7f3f0342d399f01ad38ee66b3346) `sha256:15b419fc928380d8449dc63db989a190abfb531facb5706b0fb6e0e277849e79`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:71c2a41b9a5e01c16c000c76f855fd15af5fd08edadf241454ea2fbf81a107e2`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [ef93f0be](https://github.com/openshift/csi-node-driver-registrar/commit/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c) `sha256:9622eae9e0fb7e4c1c9ef030862d3529c27ad184c4dd3cc61f97ef527241ada0`
* [docker-builder](https://github.com/openshift/builder) git [529c9688](https://github.com/openshift/builder/commit/529c96880ce41820700cf38ed8b6619697b71de9) `sha256:da516d255f9d12fad8bd8188fe75a6e2ab2887396dcc1bbaf3f6a561fe565ff3`
* [docker-registry](https://github.com/openshift/image-registry) git [5c367551](https://github.com/openshift/image-registry/commit/5c3675514f52b485e7e369757aa9d4f7358bbd4f) `sha256:bac8f19da548100094d5f8730efa470908a79e52fb2862df871aa59c3998adcd`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:263f1af55504658b98e840215225b692d616c27e019cb0f5fd4cfbc7aa676ce9`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:278c8b50a15c129361faaf70693f52a6e3ed2bc4777dfbb4eed6b5d609db23c7`
* [etcd](https://github.com/openshift/etcd) git [b5a4f8d0](https://github.com/openshift/etcd/commit/b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3) `sha256:aeaf0b05c7666659370fbfd757f7a228b954cd3e25f018218aeefad7ec0ace91`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:16614518e62f229e44dc8df74d5f906787e0f7d754c053716e3d76ddb310e3f1`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:729edecfe59376da9f994b0174f59ebf76a7a4215e9a877cca2b54d138550ff3`
* [hyperkube](https://github.com/openshift/kubernetes) git [91c24081](https://github.com/openshift/kubernetes/commit/91c24081f468e7636c824f4f5a2eb68660b81012) `sha256:49514b89279ca59b048f626abd96d2de4decfe97a020cc5047e5f0625f5de87b`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:568dfad7c2bddeedce3bc59ff43aecc42185baec399aaad4b10875bc8f26fcbf`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [1c7bc07e](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/1c7bc07e69c1e74a36b39b31f878da6391fdeefe) `sha256:803182b9db76bdc9080881dc7a79326df9f3f6aa4d1e2e27ce7809bc03581d18`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [4a0c35b0](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/4a0c35b0464d5c0ae9d61b656b4d0d51c3085b7c) `sha256:824d552d66a62079973a3a690595df91abfa6a2b726ba305232964ab4b2e6eea`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [3d444833](https://github.com/openshift/insights-runtime-extractor/commit/3d444833113258a5606cddc55192c9183d520968) `sha256:c64db25d0ad6d06129477a7192b4f0dee31b5128c73a56e5de6a1016c6f6a768`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [3d444833](https://github.com/openshift/insights-runtime-extractor/commit/3d444833113258a5606cddc55192c9183d520968) `sha256:218bfc6e47281f5db752f50d50ff8d625a5bdbf0172bde7967acfadf9b8b69e0`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:222eedbb2eac1a0cee4154e2e6b0ebf906d78204a850cd10fe4d67dce55b9134`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:396080b342312fa7c1d1aad2d9f05de86ef6e9194043f9f39be824d437c84f5f`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:ff42c7d17cdf46bdfa32ed5c849556defef5618ca4f6b8f41810275a71bfb97a`
* [kube-proxy](https://github.com/openshift/kubernetes) git [91c24081](https://github.com/openshift/kubernetes/commit/91c24081f468e7636c824f4f5a2eb68660b81012) `sha256:ef2a6b366fa7c999e8037fc3e738ef68d6cddb890808fffe12d4eb5e3613296d`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [5a14ea9d](https://github.com/openshift/kube-rbac-proxy/commit/5a14ea9d338b2582c7c2a8f89f351a0c30f56371) `sha256:a360179f7718b28aaa99735e7faaac80e79bdcb9a8e269626b644d03c3398601`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [046193a8](https://github.com/openshift/kube-state-metrics/commit/046193a8872c145150c28160577002bfd453b2f5) `sha256:2a0f99e1c4f9ffef107241d70bcfbde047df6cdf8ef74de82dc5cb737e63138b`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [815b43b7](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/815b43b7f7288da76dd314553e113aefe2a5897d) `sha256:fc31e19e5b4b3d19f00c67c598de2efe36f6c9705beff7e9ea541f066d1e5e37`
* [metallb-frr](https://github.com/openshift/frr) git [760c6639](https://github.com/openshift/frr/commit/760c6639a0c4825745d69b389b50689ebc2b8052) `sha256:0a2a7c3d09ec7291080152984145d46a5d8c71b7512d11a7808d308e041ec9aa`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [0d7ea6c7](https://github.com/openshift/multus-admission-controller/commit/0d7ea6c766349243ade17707af7bd2b43c3b4b8e) `sha256:d4b7c98dfc647d66ec5c4774f7ced325a6c84c58835419d67cfe81d7327a8304`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [3362bbc4](https://github.com/openshift/multus-networkpolicy/commit/3362bbc4c47ad7aec4f9551355e32870c30ab7c8) `sha256:f3c7ac9a51cea3fad549ddc131de7f1c8ff292c3c6c400394fcfe7bc17a94ec9`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:1bb7a277c482b310a456bae3a6968a8883d126dbb813ed979d07f736804e4516`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [86191ded](https://github.com/openshift/whereabouts-cni/commit/86191ded510a5ec05f05b77ae847b86f50673258) `sha256:efcc3379674280e5a8d81e6c98a118a29253fdbc696671386382df99a7e10974`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [e2de9255](https://github.com/openshift/bond-cni/commit/e2de925552f2444fb3b4fac37d36ff7b5fbf58eb) `sha256:07f0a1f61a9083441c7c8dd838074c1449a55740e1a5207c43bac7f53558086f`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [11e2dec9](https://github.com/openshift/network-metrics-daemon/commit/11e2dec958aa2adcad07b9eecaf8f50479e0880a) `sha256:d1639031bddf21ba676285b6a3570157fddeef18196ef3dd8f5d081f2be8b6d8`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:a19c42a9f61ca6fd804f36f1a62b93017dca090c8bc94873cd6a9b5ce0a890c6`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:d1d21e09d765cdc645b1cdfd7fd2ec409d27c844757794d9dd641855ebd1b168`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [afe324bf](https://github.com/openshift/machine-api-provider-nutanix/commit/afe324bf56e0348fb45e5fbb9c832c1587482153) `sha256:e88b4b8873f5952ae79951e847ed13eefed0a2d1a1166003604164ce0a4690c8`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [1078b191](https://github.com/openshift/oauth-apiserver/commit/1078b191784c375d31008aef9ee2b8484ca5fe7f) `sha256:27cfbcfd02063213f4cd6a52845628ba435f8b166bc83f52f867573b6ac73256`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [9225edb9](https://github.com/openshift/oauth-proxy/commit/9225edb9821cab67ffa628b05e0eed67973436f0) `sha256:1649a101d23018a706c98a96511264d4fc7c07eb39f306f67a0a7db841e49a6e`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [22a9fb87](https://github.com/openshift/oc-mirror/commit/22a9fb8772753a2a56aa061b80bdc22ba4b2c992) `sha256:c060b7b275e03ed14ebb195f22071796858232cd86dbaaadfe366a410d6e8f63`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [180aa92c](https://github.com/openshift/operator-framework-catalogd/commit/180aa92c13fda1aa1ae35205c9b380a4ead41e8b) `sha256:71178ab4d40b0536dbd9194617212ad57a1eeeb22965b69ed9824cdbb8afb1ad`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [8ee74406](https://github.com/openshift/openshift-controller-manager/commit/8ee744063ed12b249f1a2b89e9af4f53b2f1daf7) `sha256:531df91469b0a6b74febe8dff2dce4c1d0004fc849668986d970baecc92a3757`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3cca6fee](https://github.com/openshift/openshift-state-metrics/commit/3cca6feee0d646331bdbc9d49732fbdf49448d41) `sha256:d08c5a1886b76bdd48e7745827553fddb353888909214e46b2a110dad352331d`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [d5e6ff9f](https://github.com/openshift/cluster-api-provider-openstack/commit/d5e6ff9f4baf4f306374f894d7b5e3e36ef52520) `sha256:d91044b0de4cdaae05db5d2e33b67fc0efcf7aaff7af86bc7e6ab1d51e7eaa3c`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [34521c26](https://github.com/operator-framework/operator-marketplace/commit/34521c26450e93eea0379e52f86b02c69fbacb49) `sha256:a949fd118a0be123ec771e9356cf8508e314a635fc905132af4a69686626f816`
* [pod](https://github.com/openshift/kubernetes) git [91c24081](https://github.com/openshift/kubernetes/commit/91c24081f468e7636c824f4f5a2eb68660b81012) `sha256:ded393d601229d409ed30822e7e7d1f7d3b30d59f6ce9f9a2c61b2e42f5cf516`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [74e3ece7](https://github.com/openshift/machine-api-provider-powervs/commit/74e3ece7ce84bef0f21bd1bab775f7e6dabb676b) `sha256:07a1be47d9e57eb235a39455701b2d72280ce02f1f7ec064a5cd7fb6da737fdd`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [35c11369](https://github.com/openshift/prom-label-proxy/commit/35c1136915f7a6896dfcb479e1f686fd18542856) `sha256:5da62628ff6a7ac6ce9df85bc561e4d7b9dfe02a3db2c2fb515206224ee8ecb0`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [2e844270](https://github.com/openshift/prometheus-alertmanager/commit/2e844270ca5c4fc6d444a77b01d2b79a93405538) `sha256:23710ae4f5cbbd3517fecf4678a210d1545776b9137c7c216ea39dfb4c422c70`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [9bbce0b8](https://github.com/openshift/prometheus-operator/commit/9bbce0b88e6b5aa4f9069aa202ea1eab1315df82) `sha256:f2ad0544709242b670069170467d820767605f425784ffa1566f8c9a3dc77b73`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [92e17ff5](https://github.com/openshift/node_exporter/commit/92e17ff5c45807198adc8b59f5b3f63a9b7f1726) `sha256:c7e5c234bff0ce12ab0b172a443fd6ae75c500f73ff70ec24651bb19baa7ad43`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [9bbce0b8](https://github.com/openshift/prometheus-operator/commit/9bbce0b88e6b5aa4f9069aa202ea1eab1315df82) `sha256:78b6d21bdd5c39443a066a0d877be719a0876ab20e7c9656a6b2a0afe8091a53`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [9bbce0b8](https://github.com/openshift/prometheus-operator/commit/9bbce0b88e6b5aa4f9069aa202ea1eab1315df82) `sha256:6be24ce36e476fb99834162c99bd3fc7a316042f473473d2003d87118c410a65`
* rhel-coreos `sha256:76f411bd3542f25b7ce8b015cf2c92dbdc08f6b84d0e621a8b194bf7fd37b7c4`
* rhel-coreos-extensions `sha256:9904a03c26e161dee34cbbb1f906edc5d736843a1bce20ead96b27441c82eb13`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [30efb529](https://github.com/openshift/service-ca-operator/commit/30efb529a5b7db5d6f352f6ac0470d8385268539) `sha256:44f774172575ff86967da8b4bb7e4c505321ddaba2acb4446a98a18e854ae641`
* [tests](https://github.com/openshift/origin) git [43c51244](https://github.com/openshift/origin/commit/43c5124437fdc7a91708070434fb6beb7d86b92c) `sha256:9f0ced7dc0e3f63ac54f9325032dd5b25fefc9ff2a26e6ca2a3d4b8c5711b3ff`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b4dbf34a](https://github.com/openshift/cloud-provider-vsphere/commit/b4dbf34a16f6f1f269b7e3ab9409c7e888b822ab) `sha256:2863e4e0bdcbf24155bfef1cdf0673936f9f1f884556d8326edbf3cb69f2ad1a`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/73206081d00ddfc1a2d9b385b1560564642b79ee)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.21 compatibility [#10019](https://github.com/openshift/assisted-service/pull/10019)
* [Full changelog](https://github.com/openshift/assisted-service/compare/7307593473d9303ccfe3faa4d49383efb3408d8f...73206081d00ddfc1a2d9b385b1560564642b79ee)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/96ae9d03d19036e55e33b5935b6caf1ed4de2c73)

* [OCPBUGS-82745](https://issues.redhat.com/browse/OCPBUGS-82745): Address CVE-2026-35469 [#327](https://github.com/openshift/aws-ebs-csi-driver/pull/327)
* [OCPBUGS-86167](https://issues.redhat.com/browse/OCPBUGS-86167): UPSTREAM: 2367: cleanup: `make verify` should ignore copyright year [#321](https://github.com/openshift/aws-ebs-csi-driver/pull/321)
* [OCPBUGS-80206](https://issues.redhat.com/browse/OCPBUGS-80206): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 [#313](https://github.com/openshift/aws-ebs-csi-driver/pull/313)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/b51cd6b8e54d5682cf5491a9eb5af1570261a409...96ae9d03d19036e55e33b5935b6caf1ed4de2c73)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/894ba4a33023caa182bce1aeb773b971c3c55209)

* [OCPBUGS-80308](https://issues.redhat.com/browse/OCPBUGS-80308): Bump google.golang.org/grpc [#542](https://github.com/openshift/csi-operator/pull/542)
* [OCPBUGS-79429](https://issues.redhat.com/browse/OCPBUGS-79429): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 [#531](https://github.com/openshift/csi-operator/pull/531)
* [OCPBUGS-78299](https://issues.redhat.com/browse/OCPBUGS-78299): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 [#524](https://github.com/openshift/csi-operator/pull/524)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e33efbe3b60f4a8baddfef06f23df1d339f884dd...894ba4a33023caa182bce1aeb773b971c3c55209)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/075d56fd8589620b045de0a5a6bb726dd34e380c)

* [OCPBUGS-80184](https://issues.redhat.com/browse/OCPBUGS-80184): Bump google.golang.org/grpc to v1.79.3 [#43](https://github.com/openshift/aws-encryption-provider/pull/43)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...075d56fd8589620b045de0a5a6bb726dd34e380c)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/9795abdcb8f4e643bd1c1cc5b379af8b8962abed)

* [OCPBUGS-80210](https://issues.redhat.com/browse/OCPBUGS-80210), [OCPBUGS-80211](https://issues.redhat.com/browse/OCPBUGS-80211), [OCPBUGS-80350](https://issues.redhat.com/browse/OCPBUGS-80350): Bump google.golang.org/grpc to v1.79.3 [#190](https://github.com/openshift/cloud-provider-azure/pull/190)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/9c24d768d8789fd677b09c9e7b3dd9118b41a558...9795abdcb8f4e643bd1c1cc5b379af8b8962abed)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/5206d4fe5b564ca3be17d3f4b41707f796c2ddb9)

* [OCPBUGS-80212](https://issues.redhat.com/browse/OCPBUGS-80212): Bump google.golang.org/grpc to v1.79.3 [#390](https://github.com/openshift/cluster-api-provider-azure/pull/390)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/237a64d3ad0858b478e38796ae58f4c3fcaba9fe...5206d4fe5b564ca3be17d3f4b41707f796c2ddb9)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/a16bfa27ab21ad4e663e9802cd9a36d8e1b858fe)

* [OCPBUGS-80213](https://issues.redhat.com/browse/OCPBUGS-80213): Address CVE-2026-33186 [#142](https://github.com/openshift/azure-disk-csi-driver/pull/142)
* [OCPBUGS-78037](https://issues.redhat.com/browse/OCPBUGS-78037): add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks [#130](https://github.com/openshift/azure-disk-csi-driver/pull/130)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/6cced6667a8e896c191bd678f740d2b7e0629538...a16bfa27ab21ad4e663e9802cd9a36d8e1b858fe)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/e45f39e505975f837db08b0644b0ca90ef74f059)

* [OCPBUGS-80216](https://issues.redhat.com/browse/OCPBUGS-80216): Address CVE-2026-33186 [#133](https://github.com/openshift/azure-file-csi-driver/pull/133)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd...e45f39e505975f837db08b0644b0ca90ef74f059)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/01812b66eb92aefc97907166e741d41961116eea)

* [OCPBUGS-95616](https://issues.redhat.com/browse/OCPBUGS-95616): azure: Add field in installconfig to disallow shared access key [#10670](https://github.com/openshift/installer/pull/10670)
* [OCPBUGS-78550](https://issues.redhat.com/browse/OCPBUGS-78550): fix wavelength zone name regex [#10409](https://github.com/openshift/installer/pull/10409)
* [Full changelog](https://github.com/openshift/installer/compare/8bf023bc8b3e6abb34238576816432c9b8187766...01812b66eb92aefc97907166e741d41961116eea)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/c138c6f1bd35dc189039a8246eeaf0a83ee5e4b7)

* [OCPBUGS-98321](https://issues.redhat.com/browse/OCPBUGS-98321): Add BMH finalizer on PreprovisioningImage [#509](https://github.com/openshift/baremetal-operator/pull/509)
* [OCPBUGS-59259](https://issues.redhat.com/browse/OCPBUGS-59259): Fix HFC error handling in actionPreparing [#502](https://github.com/openshift/baremetal-operator/pull/502)
* [OCPBUGS-87967](https://issues.redhat.com/browse/OCPBUGS-87967): Fix preprovisioning network Secret lifecycle during BMH deletion [#495](https://github.com/openshift/baremetal-operator/pull/495)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/45acfee77a49fe17a848d1625594b2d8d85b2ca8...c138c6f1bd35dc189039a8246eeaf0a83ee5e4b7)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/6febe61977471b066f08d513424b226b82ee518f)

* [OCPBUGS-83872](https://issues.redhat.com/browse/OCPBUGS-83872): pkg/cli/admin/upgrade: Tighten force warnings [#2165](https://github.com/openshift/oc/pull/2165)
* [Full changelog](https://github.com/openshift/oc/compare/3a48fc2998a051a77a97cc3393b5d189c22635e0...6febe61977471b066f08d513424b226b82ee518f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/c3be8cbcf52ff107f74fd363bd667d8681e1a0f6)

* [OCPBUGS-75897](https://issues.redhat.com/browse/OCPBUGS-75897): set appropriate rolling update settings [#835](https://github.com/openshift/cluster-authentication-operator/pull/835)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/882f8799b8a550605e4812479272691de3f5c0d2...c3be8cbcf52ff107f74fd363bd667d8681e1a0f6)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/34730793bf4057072ed97b421e6b3af57166cc14)

* [OCPBUGS-78699](https://issues.redhat.com/browse/OCPBUGS-78699): allow clusterapi provider to skip paused resources [#413](https://github.com/openshift/kubernetes-autoscaler/pull/413)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/97fd8336e9dab6c103540d5c6c4594d4cdb4f935...34730793bf4057072ed97b421e6b3af57166cc14)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/3e6d1ab1617c0ec1b5872f258a0c7ec1eb55e079)

* [OCPBUGS-81549](https://issues.redhat.com/browse/OCPBUGS-81549): Explicitly set the ReadOnlyRootFilesystem flag to false [#584](https://github.com/openshift/cluster-baremetal-operator/pull/584)
* [OCPBUGS-78708](https://issues.redhat.com/browse/OCPBUGS-78708): Update kubebuilder tools to more latest version [#579](https://github.com/openshift/cluster-baremetal-operator/pull/579)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/f67692fc1d80256d146ed4fc8e6948e292e9cf9a...3e6d1ab1617c0ec1b5872f258a0c7ec1eb55e079)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c4c8799ba15d9a4b7ef8d2fb98fdee351fbae027)

* [OCPBUGS-80220](https://issues.redhat.com/browse/OCPBUGS-80220): Bump google.golang.org/grpc to v1.79.3 [#297](https://github.com/openshift/cluster-api/pull/297)
* [Full changelog](https://github.com/openshift/cluster-api/compare/63df38bcdb4aa8ca25c26b1f70321d5d198e27d1...c4c8799ba15d9a4b7ef8d2fb98fdee351fbae027)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/b5b89440b706f8760fb0e26938cdbafff265c6bc)

* [OCPBUGS-80224](https://issues.redhat.com/browse/OCPBUGS-80224): Bump google.golang.org/grpc to v1.79.3 [#566](https://github.com/openshift/cluster-capi-operator/pull/566)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#558](https://github.com/openshift/cluster-capi-operator/pull/558)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/2f2737e1ed649009eef31c19ffff7468b67de32d...b5b89440b706f8760fb0e26938cdbafff265c6bc)


### [cluster-config-api](https://github.com/openshift/api/tree/f9b2d1ae30ebf759bc287c38474b41f246852cae)

* [OCPBUGS-98486](https://issues.redhat.com/browse/OCPBUGS-98486): add new serviceAccountToken fs type [#2927](https://github.com/openshift/api/pull/2927)
* [Full changelog](https://github.com/openshift/api/compare/319dc2e492034aab82d4820dd8d8e9a84e31b459...f9b2d1ae30ebf759bc287c38474b41f246852cae)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3af8b9d6ceb707462af67ebbda92ec4c2b341d81)

* [OCPBUGS-78776](https://issues.redhat.com/browse/OCPBUGS-78776): [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index [#1573](https://github.com/openshift/cluster-etcd-operator/pull/1573)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b7e21f52fab30ac18bb890c61f724332f332b934...3af8b9d6ceb707462af67ebbda92ec4c2b341d81)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/fa958db6ac41da40aa032efa02cd4bb7365e59b9)

* [OCPBUGS-86715](https://issues.redhat.com/browse/OCPBUGS-86715): Add configuration override for X-SSL strip (#1477) [#1477](https://github.com/openshift/cluster-ingress-operator/pull/1477)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7ec6093b5e31b50a57eab3653dca09b1bd174fee...fa958db6ac41da40aa032efa02cd4bb7365e59b9)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/efe651a9d382e5e41e480823c12f06e51b5b50d0)

* [OCPBUGS-80231](https://issues.redhat.com/browse/OCPBUGS-80231): Bump google.golang.org/grpc to v1.79.3 [#77](https://github.com/openshift/cluster-api-operator/pull/77)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd...efe651a9d382e5e41e480823c12f06e51b5b50d0)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a5d9f9365333774a287b9a9704e5eed2cd403624)

* [OCPBUGS-86995](https://issues.redhat.com/browse/OCPBUGS-86995): increase lookup interval [#2944](https://github.com/openshift/cluster-monitoring-operator/pull/2944)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/8108394db9feefb2dedfe4574768dc080ad34476...a5d9f9365333774a287b9a9704e5eed2cd403624)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bd2181ac81fe75f9ad611d99ec0a932624a63eaa)

* [OCPBUGS-85443](https://issues.redhat.com/browse/OCPBUGS-85443): Remove duplicated openssl parameter [#3006](https://github.com/openshift/cluster-network-operator/pull/3006)
* [OCPBUGS-84869](https://issues.redhat.com/browse/OCPBUGS-84869): wait for patch port to apply drop garp flows [#2988](https://github.com/openshift/cluster-network-operator/pull/2988)
* [OCPBUGS-84180](https://issues.redhat.com/browse/OCPBUGS-84180): fix(hypershift): use net.JoinHostPort for URL construction [#2977](https://github.com/openshift/cluster-network-operator/pull/2977)
* [OCPBUGS-77151](https://issues.redhat.com/browse/OCPBUGS-77151): Add config override for openflow-probe [#2965](https://github.com/openshift/cluster-network-operator/pull/2965)
* [OCPBUGS-78833](https://issues.redhat.com/browse/OCPBUGS-78833): Fix whereabouts-token-watcher DaemonSet improvements [#2940](https://github.com/openshift/cluster-network-operator/pull/2940)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8df9d04f3019ff6e0a4c51504601e8a73b4322e3...bd2181ac81fe75f9ad611d99ec0a932624a63eaa)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/cb375d177811aa52b53124335de2f87f417136d8)

* [OCPBUGS-90575](https://issues.redhat.com/browse/OCPBUGS-90575): Requeue PerformanceStatus update when status write fails [#1552](https://github.com/openshift/cluster-node-tuning-operator/pull/1552)
* [OCPBUGS-82752](https://issues.redhat.com/browse/OCPBUGS-82752): Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 [#1544](https://github.com/openshift/cluster-node-tuning-operator/pull/1544)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/700994b4688decd0808aec1761a2c87e9d4ef685...cb375d177811aa52b53124335de2f87f417136d8)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/fa9d9ab4f994caca680f0edf3563b03c2e74020c)

* [OCPBUGS-80239](https://issues.redhat.com/browse/OCPBUGS-80239): Bump google.golang.org/grpc to v1.79.3 [#200](https://github.com/openshift/cluster-olm-operator/pull/200)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/88088e4bfe9f55ea7ab2c4331cebee727c8c0c34...fa9d9ab4f994caca680f0edf3563b03c2e74020c)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/3b44245d8fe9d9b1083998d8d956c7bc4d96a066)

* [OCPBUGS-98486](https://issues.redhat.com/browse/OCPBUGS-98486): Backport fs type service account token 4.18 [#196](https://github.com/openshift/cluster-policy-controller/pull/196)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/5fd852525909ce6eab52972ba9ce8fcf56528eb9...3b44245d8fe9d9b1083998d8d956c7bc4d96a066)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/fe353404924ac4646b18b8312fd213dad2efce4f)

* [OCPBUGS-87556](https://issues.redhat.com/browse/OCPBUGS-87556): remove oVirt code from CSO 4.18 [#707](https://github.com/openshift/cluster-storage-operator/pull/707)
* [OCPBUGS-77627](https://issues.redhat.com/browse/OCPBUGS-77627): add vsphere permissions for checking if users is authorized to see metrics [#670](https://github.com/openshift/cluster-storage-operator/pull/670)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/43fe40ddc11a8453f83273bbea82ae6295b496f9...fe353404924ac4646b18b8312fd213dad2efce4f)


### [console](https://github.com/openshift/console/tree/be41863583f78b652b706ea665e8990213ac7299)

* [OCPBUGS-77125](https://issues.redhat.com/browse/OCPBUGS-77125): [release-4.18] CVE-2026-26996 Bump minimatch library [#16344](https://github.com/openshift/console/pull/16344)
* [OCPBUGS-79447](https://issues.redhat.com/browse/OCPBUGS-79447): Bump immutable [#16325](https://github.com/openshift/console/pull/16325)
* NO-JIRA: enable multi-architecture yarn builds [#16421](https://github.com/openshift/console/pull/16421)
* [Full changelog](https://github.com/openshift/console/compare/dda58086cc1d64392b560b461b8736fc0eb00485...be41863583f78b652b706ea665e8990213ac7299)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/090b88ce1854b21afacd8302ab03c7d8aa667070)

* [OCPBUGS-85672](https://issues.redhat.com/browse/OCPBUGS-85672): CI Build root image tag sync with ART [#236](https://github.com/openshift/containernetworking-plugins/pull/236)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c...090b88ce1854b21afacd8302ab03c7d8aa667070)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/a34070f9a9880fcbc3ac3d0d81c04f932a7afabf)

* [OCPBUGS-80309](https://issues.redhat.com/browse/OCPBUGS-80309): Bump google.golang.org/grpc [#387](https://github.com/openshift/cloud-provider-openstack/pull/387)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/8857214a0160e383269525675ecbe6be40ca6f80...a34070f9a9880fcbc3ac3d0d81c04f932a7afabf)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/810e0dc1c2a876dfdc04a67117031823a5f428c4)

* [OCPBUGS-80254](https://issues.redhat.com/browse/OCPBUGS-80254): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 [#180](https://github.com/openshift/csi-driver-nfs/pull/180)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/32e775900642ab9c3560a06219104d7c38f8461c...810e0dc1c2a876dfdc04a67117031823a5f428c4)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/e3557783bfedc72893bffe0a9dcb8550e47b77b6)

* [OCPBUGS-80255](https://issues.redhat.com/browse/OCPBUGS-80255): Bump google.golang.org/grpc to v1.79.3 [#105](https://github.com/openshift/csi-external-attacher/pull/105)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/39b37c06a27481c708f071464bd1049ea7db97c7...e3557783bfedc72893bffe0a9dcb8550e47b77b6)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/c5e3a50d14d92b5e3bc155fe91837640c0b9dec2)

* [OCPBUGS-82755](https://issues.redhat.com/browse/OCPBUGS-82755): Address CVE-2026-35469 [#135](https://github.com/openshift/csi-external-provisioner/pull/135)
* [OCPBUGS-80256](https://issues.redhat.com/browse/OCPBUGS-80256): Bump google.golang.org/grpc [#130](https://github.com/openshift/csi-external-provisioner/pull/130)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/376f0ea04c64a41cb5166ff415fff849ff2da380...c5e3a50d14d92b5e3bc155fe91837640c0b9dec2)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/70500bf5ddedfc38ce3010e8007e07ac98569c56)

* [OCPBUGS-80258](https://issues.redhat.com/browse/OCPBUGS-80258), [OCPBUGS-80261](https://issues.redhat.com/browse/OCPBUGS-80261), [OCPBUGS-80262](https://issues.redhat.com/browse/OCPBUGS-80262): Bump google.golang.org/grpc to v1.79.3 [#211](https://github.com/openshift/csi-external-snapshotter/pull/211)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/8ddbcd381bf5317c1d1a93db3b5760681a33cb27...70500bf5ddedfc38ce3010e8007e07ac98569c56)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/6d4539447313cc3ede325e58433b3f8c450e208a)

* [OCPBUGS-80270](https://issues.redhat.com/browse/OCPBUGS-80270): Bump google.golang.org/grpc to v1.79.3 [#290](https://github.com/openshift/cluster-api-provider-gcp/pull/290)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/dca06c58f8294c26e24945c5b1bfa3a7bb7c16af...6d4539447313cc3ede325e58433b3f8c450e208a)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/626437394792d7e7cb1aa65fe5906b3459b55f25)

* [OCPBUGS-80293](https://issues.redhat.com/browse/OCPBUGS-80293): Bump google.golang.org/grpc to v1.79.3 [#165](https://github.com/openshift/machine-api-provider-gcp/pull/165)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b2f858ba546520410f391b5f6afdbe0b1562903d...626437394792d7e7cb1aa65fe5906b3459b55f25)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/96f27ae38782a2c62cfd6ec08406eeb3e7dfbbc6)

* [OCPBUGS-80274](https://issues.redhat.com/browse/OCPBUGS-80274): Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 [#112](https://github.com/openshift/gcp-pd-csi-driver/pull/112)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/f8ede8037d7775cb4025624f9f4f0904ca53553b...96f27ae38782a2c62cfd6ec08406eeb3e7dfbbc6)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/4432976ac44305e5f34e97e759728cedd44e8b85)

* [OCPBUGS-80273](https://issues.redhat.com/browse/OCPBUGS-80273): Replace google.golang.org/grpc with fork [#187](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/187)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb...4432976ac44305e5f34e97e759728cedd44e8b85)


### [haproxy-router](https://github.com/openshift/router/tree/e5c059ea7a57d1ee5436b253cf214f144c9a7f27)

* [OCPBUGS-86715](https://issues.redhat.com/browse/OCPBUGS-86715): Strip X-SSL-* headers for plain HTTP [#800](https://github.com/openshift/router/pull/800)
* [OCPBUGS-80275](https://issues.redhat.com/browse/OCPBUGS-80275): Bump google.golang.org/grpc to v1.79.3 [#768](https://github.com/openshift/router/pull/768)
* [Full changelog](https://github.com/openshift/router/compare/ccd9551702a89cac27e38ebb63801ddb6823d101...e5c059ea7a57d1ee5436b253cf214f144c9a7f27)


### [hypershift](https://github.com/openshift/hypershift/tree/aa97a7f2cb6f2cb4f783cc9719523c1809fc4d13)

* [OCPBUGS-62756](https://issues.redhat.com/browse/OCPBUGS-62756): Restart HCP on stale serving certs [#8245](https://github.com/openshift/hypershift/pull/8245)
* [OCPBUGS-89356](https://issues.redhat.com/browse/OCPBUGS-89356): build(operator): drop hypershift-no-cgo from operator container images [#8760](https://github.com/openshift/hypershift/pull/8760)
* NO-JIRA: remove path filter from control-plane-operator pipelines [#8665](https://github.com/openshift/hypershift/pull/8665)
* [OCPBUGS-80278](https://issues.redhat.com/browse/OCPBUGS-80278): fix CVE-2026-33186 by replacing grpc-go [#8515](https://github.com/openshift/hypershift/pull/8515)
* [OCPBUGS-84180](https://issues.redhat.com/browse/OCPBUGS-84180): fix(cno): use brackets only for IPv6 in server URL [#8346](https://github.com/openshift/hypershift/pull/8346)
* [Full changelog](https://github.com/openshift/hypershift/compare/0d2075c649ed99657f6c5f90a0d273b8f99e9bc2...aa97a7f2cb6f2cb4f783cc9719523c1809fc4d13)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/4f6a6d3b806def06b0d1a5a2632bc3ea014687c3)

* [OCPBUGS-80280](https://issues.redhat.com/browse/OCPBUGS-80280): Bump google.golang.org/grpc to v1.79.3 [#143](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/143)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/fac07237771b1592166f0e87ffe42f53d438b9df...4f6a6d3b806def06b0d1a5a2632bc3ea014687c3)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/6cc2b5e0cf0c8c36e0db6580797a8b09a5793020)

* [OCPBUGS-81647](https://issues.redhat.com/browse/OCPBUGS-81647): bump vpc go sdk [#91](https://github.com/openshift/machine-api-provider-ibmcloud/pull/91)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#87](https://github.com/openshift/machine-api-provider-ibmcloud/pull/87)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/e6eddf85c26eb056108b67fdad43bbbd2d9b4718...6cc2b5e0cf0c8c36e0db6580797a8b09a5793020)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f91e85afe7b21ca5f37ea1934b46f385b3fcb19c)

* [OCPBUGS-80283](https://issues.redhat.com/browse/OCPBUGS-80283): Bump google.golang.org/grpc to v1.79.3 [#1283](https://github.com/openshift/insights-operator/pull/1283)
* [OCPBUGS-76963](https://issues.redhat.com/browse/OCPBUGS-76963): Extends the time for the extractor liveness probe [#1234](https://github.com/openshift/insights-operator/pull/1234)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ff6ba73c5c7188d1b3d5942ab8a2264966a4a460...f91e85afe7b21ca5f37ea1934b46f385b3fcb19c)


### [ironic](https://github.com/openshift/ironic-image/tree/75856ee3e738e9941b57881e31a307c1d79a4ee8)

* [OCPBUGS-76459](https://issues.redhat.com/browse/OCPBUGS-76459): Bump pyasn1 to 0.5.1-4 [#826](https://github.com/openshift/ironic-image/pull/826)
* [OCPBUGS-74407](https://issues.redhat.com/browse/OCPBUGS-74407): Update sushy to include DGX B200 credentials fix [#832](https://github.com/openshift/ironic-image/pull/832)
* [Full changelog](https://github.com/openshift/ironic-image/compare/faea7d5fb63f37595275c95a11a222ddeb779e58...75856ee3e738e9941b57881e31a307c1d79a4ee8)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d55339babb392bc6b8e2a3998a3c77b3d47429f1)

* [OCPBUGS-95066](https://issues.redhat.com/browse/OCPBUGS-95066): Replace individual package removal with a single rpm -e loop [#286](https://github.com/openshift/ironic-agent-image/pull/286)
* [OCPBUGS-95066](https://issues.redhat.com/browse/OCPBUGS-95066): Replace dnf remove with rpm -e to prevent dependency removal [#274](https://github.com/openshift/ironic-agent-image/pull/274)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/e5b494596e52636ade8f462a37e74e557447b773...d55339babb392bc6b8e2a3998a3c77b3d47429f1)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/db0d060061c610ec87a6583aff0c8e4ba9e4fa07)

* [OCPBUGS-80190](https://issues.redhat.com/browse/OCPBUGS-80190): Bump google.golang.org/grpc to v1.79.3 [#64](https://github.com/openshift/kubernetes-metrics-server/pull/64)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf...db0d060061c610ec87a6583aff0c8e4ba9e4fa07)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/cf24ee44a188fd3c77c3d61b1d77de0cc9734133)

* [OCPBUGS-95084](https://issues.redhat.com/browse/OCPBUGS-95084): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#77](https://github.com/openshift/cloud-provider-kubevirt/pull/77)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b...cf24ee44a188fd3c77c3d61b1d77de0cc9734133)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/c323ecc7e44eec1ac2f5da97e1579df29f78cd1f)

* [OCPBUGS-79362](https://issues.redhat.com/browse/OCPBUGS-79362): Add annotation-based fallback for infra VM node ID resolution [#86](https://github.com/openshift/kubevirt-csi-driver/pull/86)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/09f4797657654ce788ea3a1077fd7cf7ce96fb5a...c323ecc7e44eec1ac2f5da97e1579df29f78cd1f)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/875b03bd28f1104af74413c3bc72e4546a428bf4)

* [OCPBUGS-77194](https://issues.redhat.com/browse/OCPBUGS-77194): Fix incomplete vendor/ [#300](https://github.com/openshift/cluster-api-provider-libvirt/pull/300)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...875b03bd28f1104af74413c3bc72e4546a428bf4)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b3a96a466d238ecc73238f57b7fc14a6d9929d9a)

* [OCPBUGS-78795](https://issues.redhat.com/browse/OCPBUGS-78795): [release-4.18] : correct aws kms permissions [#1478](https://github.com/openshift/machine-api-operator/pull/1478)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/58f231a1f7218b7dd70f8d298a9dd5d67533c2de...b3a96a466d238ecc73238f57b7fc14a6d9929d9a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/cf863831da46119a4c80382e5228397095898f1d)

* [OCPBUGS-98445](https://issues.redhat.com/browse/OCPBUGS-98445): Remove sensitive ControllerConfig logging [#6294](https://github.com/openshift/machine-config-operator/pull/6294)
* [OCPBUGS-97588](https://issues.redhat.com/browse/OCPBUGS-97588): Bootstrap MCS logging entire ignition [#6268](https://github.com/openshift/machine-config-operator/pull/6268)
* [OCPBUGS-86845](https://issues.redhat.com/browse/OCPBUGS-86845): Apply password only if changes exist [#6113](https://github.com/openshift/machine-config-operator/pull/6113)
* [OCPBUGS-86695](https://issues.redhat.com/browse/OCPBUGS-86695): use --delete-if-present for karg removal [#6102](https://github.com/openshift/machine-config-operator/pull/6102)
* [OCPBUGS-86844](https://issues.redhat.com/browse/OCPBUGS-86844): Fix ssh and password rollbacks [#6096](https://github.com/openshift/machine-config-operator/pull/6096)
* [OCPBUGS-86692](https://issues.redhat.com/browse/OCPBUGS-86692): Fix re-cordon detection [#6101](https://github.com/openshift/machine-config-operator/pull/6101)
* [OCPBUGS-86300](https://issues.redhat.com/browse/OCPBUGS-86300): Add terminationMessagePolicy to build pod containers [#6074](https://github.com/openshift/machine-config-operator/pull/6074)
* [OCPBUGS-86021](https://issues.redhat.com/browse/OCPBUGS-86021): Fix units rollback if update failure [#6052](https://github.com/openshift/machine-config-operator/pull/6052)
* [OCPBUGS-79483](https://issues.redhat.com/browse/OCPBUGS-79483): set default-timeout-stop to 200s globally [#5805](https://github.com/openshift/machine-config-operator/pull/5805)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/ddf9a058799932c22942bdbef849178a6321c883...cf863831da46119a4c80382e5228397095898f1d)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/c8569da6694004a87851b5d7cd0878e964f954a6)

* [OCPBUGS-82149](https://issues.redhat.com/browse/OCPBUGS-82149): Return error when network data Secret lacks nmstate key [#174](https://github.com/openshift/image-customization-controller/pull/174)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/fecdfc923a4b3158f161dc16436b95e7008bf2f9...c8569da6694004a87851b5d7cd0878e964f954a6)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/b2321b2c9fac3424087f71a1e2cf7b5ce4ccd772)

* [OCPBUGS-87876](https://issues.redhat.com/browse/OCPBUGS-87876): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#100](https://github.com/openshift/machine-os-images/pull/100)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/ab43283689560737ad32566dd59e0d3d77fee4e1...b2321b2c9fac3424087f71a1e2cf7b5ce4ccd772)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/01882e9e933c81141b22d0095827ec5f0ec44ccf)

* [OCPBUGS-79448](https://issues.redhat.com/browse/OCPBUGS-79448): immutable bump: fix for CVE-2026-29063 [#922](https://github.com/openshift/monitoring-plugin/pull/922)
* [OU-1241](https://issues.redhat.com/browse/OU-1241): unset frontend timeout to use the backend configuration [#905](https://github.com/openshift/monitoring-plugin/pull/905)
* [OCPBUGS-83374](https://issues.redhat.com/browse/OCPBUGS-83374): fix: re encode params when redirecting from graph to query-browser [#878](https://github.com/openshift/monitoring-plugin/pull/878)
* NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds [#870](https://github.com/openshift/monitoring-plugin/pull/870)
* [OU-993](https://issues.redhat.com/browse/OU-993): adding cypress Dockerfiles [#861](https://github.com/openshift/monitoring-plugin/pull/861)
* [OU-876](https://issues.redhat.com/browse/OU-876): monitoring automated testing backported and adjusted to pf-5 and diff UI [#777](https://github.com/openshift/monitoring-plugin/pull/777)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/13fdbe7bcd336f6ea5a174ce6d13f8b8e64b1367...01882e9e933c81141b22d0095827ec5f0ec44ccf)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/c5fd5666c4b85bd4b7bcf0a34feedebc05b14827)

* [OCPBUGS-85249](https://issues.redhat.com/browse/OCPBUGS-85249): Fix server url in kubeconfig [#298](https://github.com/openshift/multus-cni/pull/298)
* NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image [#291](https://github.com/openshift/multus-cni/pull/291)
* [Full changelog](https://github.com/openshift/multus-cni/compare/80580849f0a3578a6644d2960a6d24ec3847673c...c5fd5666c4b85bd4b7bcf0a34feedebc05b14827)


### [must-gather](https://github.com/openshift/must-gather/tree/bfba924cb4cbb19f4c72d27b7ea5990df60cbc30)

* [OCPBUGS-86019](https://issues.redhat.com/browse/OCPBUGS-86019): Collect object size with the object count [#547](https://github.com/openshift/must-gather/pull/547)
* [Full changelog](https://github.com/openshift/must-gather/compare/02e536cc7b3a6632da0643ab78f8dd6570e7f122...bfba924cb4cbb19f4c72d27b7ea5990df60cbc30)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/930a191c8565090d54502956e412f105281b1ecb)

* [OCPBUGS-41880](https://issues.redhat.com/browse/OCPBUGS-41880): Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled [#433](https://github.com/openshift/networking-console-plugin/pull/433)
* [OCPBUGS-41880](https://issues.redhat.com/browse/OCPBUGS-41880): Retain namespace selection between network policies tabs [#424](https://github.com/openshift/networking-console-plugin/pull/424)
* [OCPBUGS-87000](https://issues.redhat.com/browse/OCPBUGS-87000): Update Dockerfile.art to 4.22 build image [#426](https://github.com/openshift/networking-console-plugin/pull/426)
* [OCPBUGS-83382](https://issues.redhat.com/browse/OCPBUGS-83382): Fix CVE 2026 34043 serialize javascript 4.18 [#413](https://github.com/openshift/networking-console-plugin/pull/413)
* [release-4:18] OCPBUGS-85067: Migration from yarn to npm [#412](https://github.com/openshift/networking-console-plugin/pull/412)
* [OCPBUGS-81606](https://issues.redhat.com/browse/OCPBUGS-81606): Fix CVE-2026-CVE-2026-4800 in lodash [#401](https://github.com/openshift/networking-console-plugin/pull/401)
* [OCPBUGS-79449](https://issues.redhat.com/browse/OCPBUGS-79449): Bump immutable [#390](https://github.com/openshift/networking-console-plugin/pull/390)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/8c03ac029f38e80cf78ce9d14e5fc618a9726d89...930a191c8565090d54502956e412f105281b1ecb)


### [oauth-server](https://github.com/openshift/oauth-server/tree/5bb2bc9fd45da4b4291d16e3d615c2beca46f943)

* [OCPBUGS-81803](https://issues.redhat.com/browse/OCPBUGS-81803): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#238](https://github.com/openshift/oauth-server/pull/238)
* [Full changelog](https://github.com/openshift/oauth-server/compare/287caff3aef5b5f8535ac2bf1242671a5c7701b7...5bb2bc9fd45da4b4291d16e3d615c2beca46f943)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/4ad0b45a9a19025bd724283859b5c1c2df497109)

* [OCPBUGS-87830](https://issues.redhat.com/browse/OCPBUGS-87830): [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache [#751](https://github.com/openshift/operator-framework-operator-controller/pull/751)
* [OCPBUGS-80304](https://issues.redhat.com/browse/OCPBUGS-80304): Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 [#735](https://github.com/openshift/operator-framework-operator-controller/pull/735)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/48a1e9247ab72edf8d61fa2376df5e6d9e16e53e...4ad0b45a9a19025bd724283859b5c1c2df497109)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/0185e4bf19acafdc9b56984458a1ec5867b11470)

* [OCPBUGS-82769](https://issues.redhat.com/browse/OCPBUGS-82769): Address CVE-2026-35469 [#657](https://github.com/openshift/openshift-apiserver/pull/657)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/be33e23705684b7b8b0e194402d76446b45c66c0...0185e4bf19acafdc9b56984458a1ec5867b11470)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/b8e611fcdd9db2e20e99ac860633078ad0f9313b)

* [OCPBUGS-93867](https://issues.redhat.com/browse/OCPBUGS-93867): Revendor CAPO [#174](https://github.com/openshift/machine-api-provider-openstack/pull/174)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/c43dba2c4d9edb0ffc62b71cb26815da31c8b9c8...b8e611fcdd9db2e20e99ac860633078ad0f9313b)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f3a32b076b409a9be12ca8082ef758f4ddffd41e)

* [OCPBUGS-80311](https://issues.redhat.com/browse/OCPBUGS-80311), [OCPBUGS-80312](https://issues.redhat.com/browse/OCPBUGS-80312), [OCPBUGS-80313](https://issues.redhat.com/browse/OCPBUGS-80313): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] [#1314](https://github.com/openshift/operator-framework-olm/pull/1314)
* [OCPBUGS-81473](https://issues.redhat.com/browse/OCPBUGS-81473): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1273](https://github.com/openshift/operator-framework-olm/pull/1273)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/5cd473d377523ab5746804171dac03e4ae37993f...f3a32b076b409a9be12ca8082ef758f4ddffd41e)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/7e6b238838bc25c546022ba4ef3316fa98926d79)

* [OCPBUGS-86230](https://issues.redhat.com/browse/OCPBUGS-86230): Branch Sync release-4.19 to release-4.18 [05-19-2026] [#3197](https://github.com/openshift/ovn-kubernetes/pull/3197)
* [OCPBUGS-74399](https://issues.redhat.com/browse/OCPBUGS-74399), [OCPBUGS-85434](https://issues.redhat.com/browse/OCPBUGS-85434): Branch Sync release-4.19 to release-4.18 [05-12-2026] [#3184](https://github.com/openshift/ovn-kubernetes/pull/3184)
* [OCPBUGS-77151](https://issues.redhat.com/browse/OCPBUGS-77151), [OCPBUGS-83567](https://issues.redhat.com/browse/OCPBUGS-83567): Branch Sync release-4.19 to release-4.18 [04-16-2026] [#3143](https://github.com/openshift/ovn-kubernetes/pull/3143)
* [OCPBUGS-82148](https://issues.redhat.com/browse/OCPBUGS-82148): Branch Sync release-4.19 to release-4.18 [04-05-2026] [#3117](https://github.com/openshift/ovn-kubernetes/pull/3117)
* [OCPBUGS-81479](https://issues.redhat.com/browse/OCPBUGS-81479): node: fix serviceUpdateNotNeeded nil pointer comparison [#3101](https://github.com/openshift/ovn-kubernetes/pull/3101)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4634c88f75f42d4fd2c795d0b8153cbe5babe656...7e6b238838bc25c546022ba4ef3316fa98926d79)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/e8700dfa4d7b191acd1c12a0ed1d54f1c9ac5b3a)

* [OCPBUGS-80317](https://issues.redhat.com/browse/OCPBUGS-80317): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#130](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/130)
* [OCPBUGS-82774](https://issues.redhat.com/browse/OCPBUGS-82774): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#124](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/124)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/6806cd397b230bb9d5e41abbb4b22d7efda11059...e8700dfa4d7b191acd1c12a0ed1d54f1c9ac5b3a)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/9c9131b7deb794eb8b220c70d4ca6ac245623761)

* [OCPBUGS-80318](https://issues.redhat.com/browse/OCPBUGS-80318): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#111](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/111)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/01fc505abcf3b83bba284a00258b6761a9b7ce8a...9c9131b7deb794eb8b220c70d4ca6ac245623761)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/601c30ffc7d3f7303a654aa4bbd4242c8b5ac8ad)

* [OCPBUGS-80319](https://issues.redhat.com/browse/OCPBUGS-80319): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 [#99](https://github.com/openshift/cloud-provider-powervs/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/17ae6fba6eda58aa0d91f162206386105dff9962...601c30ffc7d3f7303a654aa4bbd4242c8b5ac8ad)


### [prometheus](https://github.com/openshift/prometheus/tree/988ce8bbdcaea76028aa84c6bbd2f6a1f08fd1a4)

* [OCPBUGS-80320](https://issues.redhat.com/browse/OCPBUGS-80320): Bump google.golang.org/grpc to v1.79.3 [#308](https://github.com/openshift/prometheus/pull/308)
* [Full changelog](https://github.com/openshift/prometheus/compare/a85013a6c5176d8a569d1908532c9c31aa399306...988ce8bbdcaea76028aa84c6bbd2f6a1f08fd1a4)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/2484b3e8e7fbb8bf14f930a71f56781289276dfa)

* [OCPBUGS-80199](https://issues.redhat.com/browse/OCPBUGS-80199): Bump google.golang.org/grpc to v1.79.3 [#85](https://github.com/openshift/route-controller-manager/pull/85)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3...2484b3e8e7fbb8bf14f930a71f56781289276dfa)


### [telemeter](https://github.com/openshift/telemeter/tree/999cdb5f7cde3beb8dcf45fe13ba34d0fb5837c4)

* [OCPBUGS-80333](https://issues.redhat.com/browse/OCPBUGS-80333): Bump google.golang.org/grpc to v1.79.3 [#599](https://github.com/openshift/telemeter/pull/599)
* [OCPBUGS-81804](https://issues.redhat.com/browse/OCPBUGS-81804): [release-4.18] Fix CVE-2026-34986 [#596](https://github.com/openshift/telemeter/pull/596)
* [Full changelog](https://github.com/openshift/telemeter/compare/490612bdaa6412762403c8eee902c20f033ca5aa...999cdb5f7cde3beb8dcf45fe13ba34d0fb5837c4)


### [thanos](https://github.com/openshift/thanos/tree/265d24eb9566214073f08694c2ed8131d35cb53a)

* [OCPBUGS-80335](https://issues.redhat.com/browse/OCPBUGS-80335): Bump google.golang.org/grpc to v1.79.3 [#184](https://github.com/openshift/thanos/pull/184)
* [Full changelog](https://github.com/openshift/thanos/compare/f1599f65c5fd652150821ae954d563747a649b53...265d24eb9566214073f08694c2ed8131d35cb53a)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/afae9545a3b5c205968da051a2ea28126ecba913)

* [OCPBUGS-80340](https://issues.redhat.com/browse/OCPBUGS-80340): Bump google.golang.org/grpc to v1.79.3 [#104](https://github.com/openshift/cluster-api-provider-vsphere/pull/104)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/8de80b80f101c45a1c5b4d08c9fc9a2cb1a40119...afae9545a3b5c205968da051a2ea28126ecba913)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/350463aa3b27dcdddbddde8bb3def350e211078f)

* [OCPBUGS-80343](https://issues.redhat.com/browse/OCPBUGS-80343): Bump google.golang.org/grpc to v1.79.3 [#176](https://github.com/openshift/vmware-vsphere-csi-driver/pull/176)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/ae6801c498ab59c6bccb1702285fe394343fef0c...350463aa3b27dcdddbddde8bb3def350e211078f)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e64f4d7f42a14b1e710313b91c16c2c263b1204e)

* [OCPBUGS-81673](https://issues.redhat.com/browse/OCPBUGS-81673): Fix password escaping [#342](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/342)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/2b241410a972898f0ce80dec3bfdf4f974721937...e64f4d7f42a14b1e710313b91c16c2c263b1204e)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/60e2b91fa2ce44076d30bc9f41b1a9d0e9113f29)

* [OCPBUGS-81556](https://issues.redhat.com/browse/OCPBUGS-81556): fix concurrent map writes [#215](https://github.com/openshift/vsphere-problem-detector/pull/215)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/df6cebf05b446517f6bec948da0a2178074429da...60e2b91fa2ce44076d30bc9f41b1a9d0e9113f29)