# 4.18.19

Created: 2025-06-26 08:39:22 +0000 UTC

Image Digest: `sha256:e6d80b9ab85b17b47e90cb8de1b9ad0e3fe457780148629d329d532ef902d222`


## Changes from 4.18.4

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.6 to 1.31.9
* Kubernetes Tests upgraded from 1.31.6 to 1.31.9
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202503061016-0 to 418.94.202506251005-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:5d4da52e03507b24cc30a28c5f86975eb135466a98635a71650d9f68ac4cbfbb`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b51cd6b8](https://github.com/openshift/aws-ebs-csi-driver/commit/b51cd6b8e54d5682cf5491a9eb5af1570261a409) `sha256:d078f0a39584b621500ac29ec7b2a5ec9beaf4e3a48248b59c67779141a8a48c`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:077cfc5a0537ae3c0c186580b16321b10d3cfc1d9dd0f67e93a72f173b8a9b5f`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [53274f11](https://github.com/openshift/machine-api-provider-aws/commit/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08) `sha256:6d64e13c3dbe8511a67a7fc36a8be18b2e8488e74b3605cc8f6c0ae5eb86edc9`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:07bb73133f2d8ad148a13a79b7e151893ac9560a595d456323dfcffc11c66e76`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:ba6411975e6298f06bf2296f558d063afdde187ccc0a8e29b6f60f3df0165f8b`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [987615c8](https://github.com/openshift/cluster-api-provider-azure/commit/987615c80bfa65a5c70fbed3ff06e405ef6d88ed) `sha256:644f8d8cff0c512e4cace218fe37ccfa5aec9b70a6fc0e3a028a55010d091d49`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:a2489587a3dbff9d53ba2fd16e05cd8c4e5956c6c66db3b0fd68ffd966efc6c5`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:28eda3b15d83a7ec38b6cdc02a06c5af617d232a8b6896a368a01b9b229aeeee`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [7ec03e94](https://github.com/openshift/cluster-api-provider-metal3/commit/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec) `sha256:a98326716d7739bf195384e1b028eadf8688e52436b3c91924a593d856fd2248`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:fccf7c0f8a0898dd9bd807f3894caefac502b47bf58c6dbce435b0058898deae`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [9e2015c3](https://github.com/openshift/baremetal-runtimecfg/commit/9e2015c30f48013e895eb8dfc43695780e0d9162) `sha256:f6baf785bad0cd501debe46b473dca1c71a6c963a2b199eb83b1494fb6d1d2e4`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:b92264c1b002590c41fa6944e8b0a329426449ea4de2d6a91c9b9a6cbd2bace6`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:2bd46c8b44804eccaf3edf72d9ddc225eb135185ee817c0ea30b40c0a59d27fa`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [d05a6def](https://github.com/openshift/cluster-api/commit/d05a6defdc3602918de8db0f93744ca8f6b2b820) `sha256:e686d8ab184e278df967776e25a66d1f66e394767a3f6f2f40c6ea4ec89e97b8`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [33856906](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/33856906970a98ac05a042a8058902458d623e0f) `sha256:181d7487e56f8a7a8e72e70b321f8851fcf6b339f7544c43fe8aa9d0f8aa077e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [85cb4072](https://github.com/openshift/cluster-config-operator/commit/85cb40728227fac13a2983fb6e3170d67cf62075) `sha256:2c2f0e17125eda30527a9ebada74da06a2311d8872c176c3386901f38e02f5d2`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:8afdbe433bb9aeaed278f5d825734b48f60bf7807942d8f377845d7a53e55771`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:4e380cc435a4b9dc51505f3f1554e37879c97af7152818a8d807e90c24ecd4c9`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [33a1141e](https://github.com/openshift/cluster-api-operator/commit/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd) `sha256:4e6179f7d0eb2729118c1c1c8ede81e5194d5f07dc537533aaf5640334fd1034`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0fac9aa9](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1) `sha256:00de0b3973e2a6aca28c1971bdabe8bd812217788f83a027483a93722d185186`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [6182930d](https://github.com/openshift/cluster-kube-scheduler-operator/commit/6182930dde5ec8dd22bd50481e8b369ce673484c) `sha256:f023a2d45e8beaf34aca4ef87a555d41d3c6e42410f2f4f3d58d585358f5ce3c`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:03bf19320da50f061db3215191b3bfe5cd6fbff5c9102c64ecc7ca0f08eb209e`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:9c6d484c2c3ffbb722cf1d3d5d43d5fa63511ff0364966d18144c65666eddcd8`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:d720be77245372eb846e3d2c5dbe443ca8d8d69f2d183180b5dee674f191e1ae`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:c2d7a9b9e15866eaa690fbfd7f07b6af7f5a5c42a18e62da6d542f044406db9b`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:3a52fb72518a0e8772a1318348707af46617ef8e300167b2ed689c640d03d30e`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [65d06444](https://github.com/openshift/cluster-storage-operator/commit/65d06444110f8044a84ccf4f977ee9520f2bdf89) `sha256:8907e1950aecf775efea49e9488cd0fb21c605f5903dd4cc51582a84ad900488`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [b52ca7e8](https://github.com/openshift/cloud-provider-openstack/commit/b52ca7e89560678f3420aac02cfdb11febcfae67) `sha256:26b5e3bf88f6d9b4b97c96c48759c8c82749ff22402c80e777a42d4f912b5ad9`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:cb839d24e07b2af7ed433485d1f18d46361f998f2caa81b6befc0a67195c9296`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [39b37c06](https://github.com/openshift/csi-external-attacher/commit/39b37c06a27481c708f071464bd1049ea7db97c7) `sha256:bdbef807aef73d86e2408461ff2abb8e1e09b57e8eaf5dc7c477f00975eba15a`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [376f0ea0](https://github.com/openshift/csi-external-provisioner/commit/376f0ea04c64a41cb5166ff415fff849ff2da380) `sha256:ba6dc99fb6ff7b6cbb44118ab4f1f22ee8e6374c01b1cbb2b2f791b60fe426ce`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [cca3837a](https://github.com/openshift/csi-external-resizer/commit/cca3837a84fcade22bd7b935c68d02904faa12aa) `sha256:f75f5d33a2fdea38a4d6110bc0e8b8b371ec0a1be9ff42487ddaddcfb27779fa`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:609158e9a782022f6d99f617ac2465b3e98f6736d2953df5d5ffba325a91a3e7`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:ada4e0c53000b0356a34d0b882788ab3c4c3bf72f45fdb4400dcc9ab5053c5e6`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c21f5d02](https://github.com/openshift/csi-node-driver-registrar/commit/c21f5d02b498e9e49d94818f4ad3eaaae77ca161) `sha256:2794b22e23af83ea4f9713c9578f37a2209e1ff93ad5d11e6bfb74f5f41272d3`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:73d19576a9a9c74fe13771dcc502894736975209a97ccbfb04b6fb13a25fbd98`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:92f8fd6f74451a0c4e95a8c9e174240e517d00fcf1ca0fcefd41b383ecf441df`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:cd20c17401d4a13672a0ae64122a0e5dcaf8fd87c785cb5919d953d608998a81`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:c8b18db7e6ab14c3b0992d80653e7467e5e90c667afd94557f41147155f9b2e9`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:5d47b5d3deb697c8b81e9bdf8fe8bf7d0a9fdd69ab436321d7d02e088613fba2`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [af54f528](https://github.com/openshift/cluster-api-provider-gcp/commit/af54f5287c7d363c6bc7abe4ad9e72f4131d534c) `sha256:a1ade64451bc55f8b5bd83176eab3faa045fa369baca108d9018788ad0b397f7`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cb8b38c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb) `sha256:535fca55a0cc1c72b834950b6ed7575c8f620c6cc4a400e72e088ed737987401`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:8d17ff1fd9809126c299f986a86c162f221792d239c310dd1579071635cb0fc8`
* [haproxy-router](https://github.com/openshift/router) git [d8058949](https://github.com/openshift/router/commit/d8058949aaf91dcdea050c58e6a34ef5f6670c67) `sha256:d966247ec30d2068c6b4336cfd638f0cebff75bcae5e6c6da0517d824df72327`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:50295ef6927b6a67c59ba1be8ce063891c56bc3eb006f63fc4d0b200e6769189`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [feae2605](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/feae260577a5ed5428432de9b7ca1439c98064de) `sha256:85c1923e26f55a303f4593b3c1872d24570fe6d6651ba49b5e1212886ba2bb28`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [2ba764f9](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/2ba764f9a38c27f82a9198472c584fa633c8f2cd) `sha256:be7a42213e04138db6b166dcd8152cbbefac1dd0380b6938ce91c0a369d42310`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:db5bf677e8cd9adc99dc00e384e785fbdde3bbfb0567d0c02fd12983fc93694e`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:2e8a0cc69ecbedf5f019e03cb58910e07c3667a998f4788d86dff8cbeed9bf6a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:ce1c4b3b4c9e3eb3ab26a96ccdb5d9e5dc69f993fa100bcbcaf82744be880359`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:c8b8c464eab9f4f45e90fbd3d6db01459103a95dfe146ef3aa0c44d32205345c`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [962ccca2](https://github.com/openshift/kubernetes-metrics-server/commit/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf) `sha256:7edadbdb9e08c79c57f601e767c02228aa1304ce136e1b474579abc9cb3fe0c4`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [526498ab](https://github.com/openshift/kube-rbac-proxy/commit/526498ab32996a0f67a96530ad7173f955e3fbe2) `sha256:a4606efa39f5046fe06fc0ccff329291620f439226f7e7b1530ef7978cc2d9ca`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [cb5a9296](https://github.com/openshift/kube-state-metrics/commit/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61) `sha256:e5ef9c83b41bebfd27d36cdc3341edd3668bca123ad75ade2a2bd22608dacf91`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:79d238e2281ff7c29284968d73621ae703fb3c0405ff193e36a3dc62c6d0563b`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:c80631261f95fd18f9af456a146f066c03f4509380282c4f6d4bf47024674ca4`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:d6a0cd1a605c1b3b1d38d4662ec15bbf855f6b9967c6fbad727c5ffdf64eee43`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [e4c214c3](https://github.com/openshift/network-metrics-daemon/commit/e4c214c3736fcb69b3160421f06e9b1a837b300b) `sha256:d4eeeb0a794f83bd0ba6309bcb5444d3bd4f3eacf810dc1757911683fb551e1a`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:b6005073aabe79b07247c938645cb6c1f4015acae4eb2544fbe475b1f77833b4`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [2575ff41](https://github.com/openshift/oauth-apiserver/commit/2575ff417406ea6680aff0de6efb524dbbe2b8d2) `sha256:daaac2fa8c7540d39cb3d068b86a57f6518edb84cc556b8ed5a6a1416b99ff07`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [cbd44ad9](https://github.com/openshift/oauth-proxy/commit/cbd44ad9f0e433d32ff16a2691c6278298afe89a) `sha256:1d1fba14c8e4a629d48beb182ca0067f9b7d627234a5cc5f7e70b7ef7c86f196`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [b52ca7e8](https://github.com/openshift/cloud-provider-openstack/commit/b52ca7e89560678f3420aac02cfdb11febcfae67) `sha256:b890574e445010212047aecc274ec0d11f04de637bbf970bc60723cba23d90d1`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [b52ca7e8](https://github.com/openshift/cloud-provider-openstack/commit/b52ca7e89560678f3420aac02cfdb11febcfae67) `sha256:58ce6d6adb269ecb5c354a6561258a32e9d2a610dea969963d6a40fb52c19e0d`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [d914e77e](https://github.com/openshift/machine-api-provider-openstack/commit/d914e77ee67211024153b1535e8709c3cf190512) `sha256:9c6d46f929bcdf8f27a743eff49da4abe0e197b47630068509dc14bf47320b89`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:9f0bb062fbab6428275fe1909a29b8b84fc014c156e195990246a3116ad04a38`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:2e72c26cc697906ed780d7f99506e5ad3a163d7c8f0cc7b63620a9a519de33eb`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [d36aea34](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/d36aea34452210f988f74e93e0640318f3db1938) `sha256:71c5caf214bf6fbc10c31550dc30dc7baadf4d2fda8a0d12e4dc5e95962e84d9`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [01fc505a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/01fc505abcf3b83bba284a00258b6761a9b7ce8a) `sha256:ca5bcd2289c8ecc8de0a694e85716d60de54bc842f2794adc238291730625dc7`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [17ae6fba](https://github.com/openshift/cloud-provider-powervs/commit/17ae6fba6eda58aa0d91f162206386105dff9962) `sha256:b6b9dfe4be4cff7accce52c1f7374d372ab72216500bbc31671ece9cfecb9998`
* rhel-coreos `sha256:f1aeba19ab3d98d850d1688fe059684d668fa705d51d882bc9446c140343c212`
* rhel-coreos-extensions `sha256:e9680cdd70cc35925e0cfc50b7b37de75504df77c7bd764a36a1668fe020a272`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [c414d1f5](https://github.com/openshift/cloud-provider-vsphere/commit/c414d1f5b0d910300cafda742aca146d41fce98a) `sha256:58481faf9a81ee12e8aa70d4fe1ea594f6e4a3aad236d169d9ab1db5459da825`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [d664fe2b](https://github.com/openshift/cluster-api-provider-vsphere/commit/d664fe2b56964a5320057ac8c7b7fd4b50045851) `sha256:46960551a648369c22e2965cd99830ef10eda57093a27890692219bab7a64b6b`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:78612f834c964495e647009f9eca0b9f120e3048ce5f503a4ef939b39533442f`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:6d870d46f9d74452d3dc8f3fb0c737187ba35c9e858e6066a1a498e07b8bcf18`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [7cf7fe24](https://github.com/openshift/vsphere-problem-detector/commit/7cf7fe24116aa9515a6fbcef3fb85567e19d21b4) `sha256:35a3ac61b1c816f5e8e1eacdf5cc413c1a6aa804d8ba0e4bdb9534028563d740`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/69c47dfbd234c7b6efa1fda90a6aa760b9f62fb7)

* [OCPBUGS-56596](https://issues.redhat.com/browse/OCPBUGS-56596): Include AdditionalTrustBundlePolicy in installConfig (#7751) [#7751](https://github.com/openshift/assisted-service/pull/7751)
* [OCPBUGS-47627](https://issues.redhat.com/browse/OCPBUGS-47627): dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) [#7257](https://github.com/openshift/assisted-service/pull/7257)
* [OCPBUGS-54378](https://issues.redhat.com/browse/OCPBUGS-54378): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) [#7483](https://github.com/openshift/assisted-service/pull/7483)
* [MGMT-20183](https://issues.redhat.com/browse/MGMT-20183): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) [#7456](https://github.com/openshift/assisted-service/pull/7456)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e5a400590fed00f895a08245ef70df00ae97f28f...69c47dfbd234c7b6efa1fda90a6aa760b9f62fb7)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/92575979cc7d65303169444f2afce22d36f918ce)

* [OCPBUGS-53721](https://issues.redhat.com/browse/OCPBUGS-53721): Bump jwt to 4.5.2 in release-4.18 (#1085) [#1085](https://github.com/openshift/assisted-installer/pull/1085)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/8bb42ac9fd9624f86c97c4422bd5f982251e5d91...92575979cc7d65303169444f2afce22d36f918ce)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/615411a4df7a54c536871533d7af22f666b4e2ab)

* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#958) [#958](https://github.com/openshift/assisted-installer-agent/pull/958)
* [MGMT-20227](https://issues.redhat.com/browse/MGMT-20227): Skip Motherboard serial if set to "-" (#955) (#957) [#955](https://github.com/openshift/assisted-installer-agent/pull/955)
* [OCPBUGS-54544](https://issues.redhat.com/browse/OCPBUGS-54544): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) [#965](https://github.com/openshift/assisted-installer-agent/pull/965)
* [OCPBUGS-53713](https://issues.redhat.com/browse/OCPBUGS-53713): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) [#963](https://github.com/openshift/assisted-installer-agent/pull/963)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/593c9c284e43fd00095cfdf3f55b9017f4104663...615411a4df7a54c536871533d7af22f666b4e2ab)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)

* append .0 to go.mod version [#109](https://github.com/openshift/agent-installer-utils/pull/109)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d...0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/2f62712d5db70df25490361749e93a552ffb5a24)

* append .0 to go.mod version. [#81](https://github.com/openshift/apiserver-network-proxy/pull/81)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/0e116160848d1eb189c5b5f77330f36e20c7e450...2f62712d5db70df25490361749e93a552ffb5a24)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9)

* [OCPBUGS-53729](https://issues.redhat.com/browse/OCPBUGS-53729): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 [#543](https://github.com/openshift/cluster-api-provider-aws/pull/543)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b3446080be1c2898ee039030c346020fa6c1ed13...59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cdc9d6499cd5020d96811fd02bde14d4d06786cc)

* [OCPBUGS-54383](https://issues.redhat.com/browse/OCPBUGS-54383): Disable remove-not-ready-taint for azure disk csi driver [#374](https://github.com/openshift/csi-operator/pull/374)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a95f8b365dda90ca1cb9d85a13c84670f6200cff...cdc9d6499cd5020d96811fd02bde14d4d06786cc)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/f54f9a19adb43b395a880ca046aed0841466c28d)

* [OCPBUGS-51231](https://issues.redhat.com/browse/OCPBUGS-51231): github.com/go-jose/go-jose/v4 v4.0.5 [#201](https://github.com/openshift/aws-pod-identity-webhook/pull/201)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/5c43fe8e6c86c24f467070a8e5965a83c24f4360...f54f9a19adb43b395a880ca046aed0841466c28d)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/c937080f51cec58650daa15805be548d09310c64)

* [OCPBUGS-53497](https://issues.redhat.com/browse/OCPBUGS-53497): bump golang-jwt v4 [#11](https://github.com/openshift/azure-kubernetes-kms/pull/11)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...c937080f51cec58650daa15805be548d09310c64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/390bef034052947c0456518d76a7a7dbbcedd690)

* [OCPBUGS-56654](https://issues.redhat.com/browse/OCPBUGS-56654): Fix failure when attempting to modify immutable availabilitySet [#153](https://github.com/openshift/machine-api-provider-azure/pull/153)
* [OCPBUGS-55373](https://issues.redhat.com/browse/OCPBUGS-55373): Update eviction policy for Spot VMs from Deallocate to Delete [#139](https://github.com/openshift/machine-api-provider-azure/pull/139)
* [OCPBUGS-54355](https://issues.redhat.com/browse/OCPBUGS-54355): Re-reconcile machine on NIC provisioning failure [#135](https://github.com/openshift/machine-api-provider-azure/pull/135)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/62f62f7a0bb3d836e238588527627684018e229b...390bef034052947c0456518d76a7a7dbbcedd690)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/f60e4029d64de202e81d2cd114f8a90dc0a1878e)

* [OCPBUGS-53801](https://issues.redhat.com/browse/OCPBUGS-53801): github.com/golang-jwt/jwt/v4 v4.5.2 [#31](https://github.com/openshift/azure-workload-identity/pull/31)
* [OCPBUGS-51233](https://issues.redhat.com/browse/OCPBUGS-51233): github.com/go-jose/go-jose/v4 v4.0.5 [#27](https://github.com/openshift/azure-workload-identity/pull/27)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/344c5dc56d6b7b1297db1b19eaa121bdbe0cec5b...f60e4029d64de202e81d2cd114f8a90dc0a1878e)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6516e31ada5b8ee76adf666076cc5c00dffb3c9b)

* [OCPBUGS-56797](https://issues.redhat.com/browse/OCPBUGS-56797): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9747](https://github.com/openshift/installer/pull/9747)
* [OCPBUGS-57139](https://issues.redhat.com/browse/OCPBUGS-57139): ensure ctrplane nodes can access bootstrap MCS [#9772](https://github.com/openshift/installer/pull/9772)
* [OCPBUGS-57220](https://issues.redhat.com/browse/OCPBUGS-57220): sort zone slices extracted from map of byo subnets [#9774](https://github.com/openshift/installer/pull/9774)
* [OCPBUGS-56864](https://issues.redhat.com/browse/OCPBUGS-56864): Update Control Plane replica validation for Single Node OpenShift [#9758](https://github.com/openshift/installer/pull/9758)
* [OCPBUGS-50690](https://issues.redhat.com/browse/OCPBUGS-50690): vsphere - check if host is powered down or on standby before uploading template [#9468](https://github.com/openshift/installer/pull/9468)
* [OCPBUGS-53142](https://issues.redhat.com/browse/OCPBUGS-53142): PowerVS: COS eu-es hack [#9626](https://github.com/openshift/installer/pull/9626)
* [OCPBUGS-50840](https://issues.redhat.com/browse/OCPBUGS-50840): Fix panic when there are no available IPs [#9479](https://github.com/openshift/installer/pull/9479)
* [OCPBUGS-55794](https://issues.redhat.com/browse/OCPBUGS-55794): IBI nmstate unit test fix [#9692](https://github.com/openshift/installer/pull/9692)
* [OCPBUGS-54947](https://issues.redhat.com/browse/OCPBUGS-54947): Fix Load balancer IP setup [#9659](https://github.com/openshift/installer/pull/9659)
* [OCPBUGS-45564](https://issues.redhat.com/browse/OCPBUGS-45564): Align vSphere UPI haproxy config with IPI [#9276](https://github.com/openshift/installer/pull/9276)
* [OCPBUGS-53453](https://issues.redhat.com/browse/OCPBUGS-53453): IBMCloud: Move to IBM TF openshift fork [#9592](https://github.com/openshift/installer/pull/9592)
* [OCPBUGS-53422](https://issues.redhat.com/browse/OCPBUGS-53422): Avoid adding duplicate entries to NO_PROXY [#9588](https://github.com/openshift/installer/pull/9588)
* [OCPBUGS-52515](https://issues.redhat.com/browse/OCPBUGS-52515): Remove error logging when determining image arch [#9539](https://github.com/openshift/installer/pull/9539)
* [OCPBUGS-52429](https://issues.redhat.com/browse/OCPBUGS-52429): Remove tmp directory used for agent pxe files [#9536](https://github.com/openshift/installer/pull/9536)
* [Full changelog](https://github.com/openshift/installer/compare/409dcb7b6f6ac28195223f58c143d3b63b23a5e8...6516e31ada5b8ee76adf666076cc5c00dffb3c9b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/6405b3f41826655af74cf6d76e352718e6786fc5)

* [OCPBUGS-56431](https://issues.redhat.com/browse/OCPBUGS-56431): Redfish: correctly handle missing system ID [#417](https://github.com/openshift/baremetal-operator/pull/417)
* [OCPBUGS-53324](https://issues.redhat.com/browse/OCPBUGS-53324): BMO can expose any secret via BMCEventSubscription CRD [#405](https://github.com/openshift/baremetal-operator/pull/405)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/20646c92b5f1c2a7b49fe12effee0b3c74df8058...6405b3f41826655af74cf6d76e352718e6786fc5)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/04e91ac526244524a03fbd516d36682462af7566)

* [OCPBUGS-57507](https://issues.redhat.com/browse/OCPBUGS-57507): avoid transfering permissions when copying artifacts from node-joiner pod [#2039](https://github.com/openshift/oc/pull/2039)
* [OCPBUGS-56240](https://issues.redhat.com/browse/OCPBUGS-56240): Adding sos.conf file for default sos config into the tools image [#2021](https://github.com/openshift/oc/pull/2021)
* [OCPBUGS-55449](https://issues.redhat.com/browse/OCPBUGS-55449): Get installer image from configMap for node-image command [#2013](https://github.com/openshift/oc/pull/2013)
* [OCPBUGS-55647](https://issues.redhat.com/browse/OCPBUGS-55647): Use fedora image in unit tests instead of centos [#2014](https://github.com/openshift/oc/pull/2014)
* [Full changelog](https://github.com/openshift/oc/compare/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64...04e91ac526244524a03fbd516d36682462af7566)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/b4113028d20a300e364354403391806265332640)

* [OCPBUGS-56979](https://issues.redhat.com/browse/OCPBUGS-56979): Azure: resolve nil pointer exception when role assignment exists [#869](https://github.com/openshift/cloud-credential-operator/pull/869)
* [OCPBUGS-54827](https://issues.redhat.com/browse/OCPBUGS-54827): Render: configure proxy on bootstrap static pod [#862](https://github.com/openshift/cloud-credential-operator/pull/862)
* [OCPBUGS-53825](https://issues.redhat.com/browse/OCPBUGS-53825): update github.com/golang-jwt/jwt [#837](https://github.com/openshift/cloud-credential-operator/pull/837)
* [OCPBUGS-53345](https://issues.redhat.com/browse/OCPBUGS-53345): github.com/golang/glog v1.2.4 [#835](https://github.com/openshift/cloud-credential-operator/pull/835)
* [OCPBUGS-51550](https://issues.redhat.com/browse/OCPBUGS-51550): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#822](https://github.com/openshift/cloud-credential-operator/pull/822)
* [OCPBUGS-51237](https://issues.redhat.com/browse/OCPBUGS-51237): github.com/go-jose/go-jose/v4 v4.0.5 [#824](https://github.com/openshift/cloud-credential-operator/pull/824)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/020f8b841abf6284642cd182d95611b79c2f3a19...b4113028d20a300e364354403391806265332640)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/beacfbc2f2afa651616ad1c3c6712c511318a8d4)

* [OCPBUGS-56156](https://issues.redhat.com/browse/OCPBUGS-56156): Increase API call timeout to 30 second [#170](https://github.com/openshift/cloud-network-config-controller/pull/170)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f648c78dba768619f0c6e2120132ee1aeefb8571...beacfbc2f2afa651616ad1c3c6712c511318a8d4)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)

* [OCPBUGS-54569](https://issues.redhat.com/browse/OCPBUGS-54569): Avoid duplicate OAuth client creation [#764](https://github.com/openshift/cluster-authentication-operator/pull/764)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e8c7c47e485a54cd8e2fc0ece74bd110c190e3c9...4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)

* [OCPBUGS-53241](https://issues.redhat.com/browse/OCPBUGS-53241): improve replica counting and decrease target size behavior [#346](https://github.com/openshift/kubernetes-autoscaler/pull/346)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e30ce1d8ca759e861e5094e8b3665d1da6d3474f)

* [OCPBUGS-53080](https://issues.redhat.com/browse/OCPBUGS-53080): Add missing relatedObjects [#467](https://github.com/openshift/cluster-baremetal-operator/pull/467)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/dfc6c062e17a22923547188cf893509524931a7f...e30ce1d8ca759e861e5094e8b3665d1da6d3474f)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/2f2737e1ed649009eef31c19ffff7468b67de32d)

* [OCPBUGS-56919](https://issues.redhat.com/browse/OCPBUGS-56919): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#308](https://github.com/openshift/cluster-capi-operator/pull/308)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Should not use v1beta1 of the AdmissionRegistration API group [#298](https://github.com/openshift/cluster-capi-operator/pull/298)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4e26a69d2740029b37469c5677a5ed0f129eed8f...2f2737e1ed649009eef31c19ffff7468b67de32d)


### [cluster-config-api](https://github.com/openshift/api/tree/9fce26d4cc74cfa6bfa2b9af8891a66a90a3e31f)

* Merge [#2316](https://github.com/openshift/api/pull/2316)
* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Add IPsec API for NAT-T UDP encapsulation support [#2331](https://github.com/openshift/api/pull/2331)
* [OCPBUGS-55792](https://issues.redhat.com/browse/OCPBUGS-55792): [release-4.18] config: add uid and extra claim mappings for external OIDC configuration [#2311](https://github.com/openshift/api/pull/2311)
* [OCPBUGS-53221](https://issues.redhat.com/browse/OCPBUGS-53221): Allow spaces in AWS resource tags [#2239](https://github.com/openshift/api/pull/2239)
* [OCPBUGS-54784](https://issues.redhat.com/browse/OCPBUGS-54784): [release-4.18] Bump openshift/controller-tools to latest commit [#2267](https://github.com/openshift/api/pull/2267)
* [Full changelog](https://github.com/openshift/api/compare/e7f23be12279d3c245c013c234f967e5ccb426e2...9fce26d4cc74cfa6bfa2b9af8891a66a90a3e31f)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/7cafd0c7dca2edb154b8444602b600b5901afeba)

* [OCPBUGS-52514](https://issues.redhat.com/browse/OCPBUGS-52514): [release-4.18] Add runbook_url for CoreDNSErrorsHigh [#429](https://github.com/openshift/cluster-dns-operator/pull/429)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/208d50c1a5e0aaeb991366daa749abdffa803224...7cafd0c7dca2edb154b8444602b600b5901afeba)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2c2910d7c3095706aaf66ddbcf3c1a31285b3567)

* [OCPBUGS-56110](https://issues.redhat.com/browse/OCPBUGS-56110): adjust alerts according to platform [#1424](https://github.com/openshift/cluster-etcd-operator/pull/1424)
* [OCPBUGS-53513](https://issues.redhat.com/browse/OCPBUGS-53513): fix CVE-2025-30204 [#1413](https://github.com/openshift/cluster-etcd-operator/pull/1413)
* [OCPBUGS-55066](https://issues.redhat.com/browse/OCPBUGS-55066): increase etcdGRPCRequestsSlow duration [#1408](https://github.com/openshift/cluster-etcd-operator/pull/1408)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/26f6cb2494275fb713edbb535c3fe1d02fde94de...2c2910d7c3095706aaf66ddbcf3c1a31285b3567)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/1e3caa4b5abe4e3dad914a337f87408d060b1fb2)

* [OCPBUGS-53873](https://issues.redhat.com/browse/OCPBUGS-53873): bump github.com/golang-jwt/jwt [#1217](https://github.com/openshift/cluster-image-registry-operator/pull/1217)
* [OCPBUGS-51606](https://issues.redhat.com/browse/OCPBUGS-51606): bump golang.org/x/oauth2 [#1208](https://github.com/openshift/cluster-image-registry-operator/pull/1208)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/33197688ad59aed5cd6d51c34cb114944125b6a7...1e3caa4b5abe4e3dad914a337f87408d060b1fb2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d967a73c5f7da76783ee1af093f21817e7681e1d)

* [NE-1951](https://issues.redhat.com/browse/NE-1951): Pre-upgrade Admin Gate for Gateway API CRD Management Succession [#1196](https://github.com/openshift/cluster-ingress-operator/pull/1196)
* [NE-1952](https://issues.redhat.com/browse/NE-1952): Pre-upgrade check for Gateway API CRD Management Succession [#1193](https://github.com/openshift/cluster-ingress-operator/pull/1193)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/a730e8a7af570d3921cd44c1468f38a250a6e647...d967a73c5f7da76783ee1af093f21817e7681e1d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/383f10176f2509babc9dd49d135fa8bb0c2c277e)

* [OCPBUGS-56030](https://issues.redhat.com/browse/OCPBUGS-56030): bump library-go to bring in updated audit policies [#1843](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1843)
* [OCPBUGS-49898](https://issues.redhat.com/browse/OCPBUGS-49898): bindata/alerts/slo: improve burnrate calculation [#1808](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1808)
* [OCPBUGS-53066](https://issues.redhat.com/browse/OCPBUGS-53066): Bump library-go [#1828](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1828)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f...383f10176f2509babc9dd49d135fa8bb0c2c277e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/7309caa18c792b55b85c0200a2129066432e626a)

* [OCPBUGS-56251](https://issues.redhat.com/browse/OCPBUGS-56251): set upgradable false when alertmanager v1 is specified [#2591](https://github.com/openshift/cluster-monitoring-operator/pull/2591)
* [OCPBUGS-55005](https://issues.redhat.com/browse/OCPBUGS-55005): chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and  set CMO to Upgradeable=false if errors are found [#2592](https://github.com/openshift/cluster-monitoring-operator/pull/2592)
* [OCPBUGS-53024](https://issues.redhat.com/browse/OCPBUGS-53024): Fix opentelemetry metrics to use regexp on label match [#2578](https://github.com/openshift/cluster-monitoring-operator/pull/2578)
* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump prometheus-operator to 0.78.2 [#2576](https://github.com/openshift/cluster-monitoring-operator/pull/2576)
* [OCPBUGS-50706](https://issues.redhat.com/browse/OCPBUGS-50706): Add incidents metric to telemetry [#2570](https://github.com/openshift/cluster-monitoring-operator/pull/2570)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9852f98d559a7153213164e3518ffd6576b47b87...7309caa18c792b55b85c0200a2129066432e626a)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/90a296e513cdad4d1708fee1d1975de0baf3d777)

* [OCPBUGS-58047](https://issues.redhat.com/browse/OCPBUGS-58047): Add cert-rotation script into cno [#2702](https://github.com/openshift/cluster-network-operator/pull/2702)
* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Implement IPsec NAT-Traversal encapsulation option [#2711](https://github.com/openshift/cluster-network-operator/pull/2711)
* [OCPBUGS-54717](https://issues.redhat.com/browse/OCPBUGS-54717): Add IPv6 NGINX configuration [#2683](https://github.com/openshift/cluster-network-operator/pull/2683)
* [OCPBUGS-50582](https://issues.redhat.com/browse/OCPBUGS-50582), [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2644](https://github.com/openshift/cluster-network-operator/pull/2644)
* [OCPBUGS-52837](https://issues.redhat.com/browse/OCPBUGS-52837): frr-k8s: rename validatingwebhook name [#2661](https://github.com/openshift/cluster-network-operator/pull/2661)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): frr-k8s: align manifests with operator [#2657](https://github.com/openshift/cluster-network-operator/pull/2657)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/475a4839fa80f73d0cc154fb49197574511d073a...90a296e513cdad4d1708fee1d1975de0baf3d777)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/95723604f1f71b3d2b9000d8cbcf2acc2a09e309)

* : OCPBUGS-57947: kernelPageSize + hugepages combinations validation [3/3] (#1343) [#1343](https://github.com/openshift/cluster-node-tuning-operator/pull/1343)
* : OCPBUGS-57947: Support hugepage size selection for ARM-based clusters [2/3] (#1342) [#1342](https://github.com/openshift/cluster-node-tuning-operator/pull/1342)
* [OCPBUGS-57947](https://issues.redhat.com/browse/OCPBUGS-57947): CNF-18142: Add kernel page size field [1/3] (#1341) [#1341](https://github.com/openshift/cluster-node-tuning-operator/pull/1341)
* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) (#1306) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* machineconfig: add support for various hugepage sizes. (#1299) [#1299](https://github.com/openshift/cluster-node-tuning-operator/pull/1299)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2f872e4323528d8ec14c1361d27fb72707c308f1...95723604f1f71b3d2b9000d8cbcf2acc2a09e309)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/0ffe0aed115535e9489b6f309ac4d2c6c976adf3)

* [OCPBUGS-48478](https://issues.redhat.com/browse/OCPBUGS-48478): [release-4.18] Add openshift node selector annotation [#116](https://github.com/openshift/cluster-olm-operator/pull/116)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/6da706d712dda30cec7ff92c5bfb76074df3d5fe...0ffe0aed115535e9489b6f309ac4d2c6c976adf3)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)

* [OCPBUGS-55783](https://issues.redhat.com/browse/OCPBUGS-55783): Samples Operator should sort failing image imports [#638](https://github.com/openshift/cluster-samples-operator/pull/638)
* [OCPBUGS-55782](https://issues.redhat.com/browse/OCPBUGS-55782): only update LastTransitionTime if operator status change [#637](https://github.com/openshift/cluster-samples-operator/pull/637)
* [OCPBUGS-55781](https://issues.redhat.com/browse/OCPBUGS-55781): Adding filter to clusterOperatorInformerEventHandler [#636](https://github.com/openshift/cluster-samples-operator/pull/636)
* [OCPBUGS-54258](https://issues.redhat.com/browse/OCPBUGS-54258): Adding mutex to func createSamples on handler.go [#615](https://github.com/openshift/cluster-samples-operator/pull/615)
* [OCPBUGS-54351](https://issues.redhat.com/browse/OCPBUGS-54351): add rhdmalone to owners [#617](https://github.com/openshift/cluster-samples-operator/pull/617)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/de85e478a2f3dcc712ce5f02b56279cb116357f5...5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/8caab452b91df0d77ab052b1833a4d54a1374634)

* NO-JIRA: Updating openshift-ci-release-key for 2 years [#72](https://github.com/openshift/cluster-update-keys/pull/72)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...8caab452b91df0d77ab052b1833a4d54a1374634)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/94c0e705d520b0eeb765f72de2dae2cd6f1159bb)

* [OCPBUGS-55359](https://issues.redhat.com/browse/OCPBUGS-55359): install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 [#1181](https://github.com/openshift/cluster-version-operator/pull/1181)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4...94c0e705d520b0eeb765f72de2dae2cd6f1159bb)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/e2aaf00a381b57874178a4272f3bc5257cf8dd98)

* append .0 to go.mod version [#69](https://github.com/openshift/configmap-reload/pull/69)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/cde5e473c23ca38917fe7e8ebdf7d15c467d977d...e2aaf00a381b57874178a4272f3bc5257cf8dd98)


### [console](https://github.com/openshift/console/tree/595e96b1499a3b1605eac96979abedabf055393b)

* [OCPBUGS-57580](https://issues.redhat.com/browse/OCPBUGS-57580): Update vSphere configuration form to support CM YAML f… [#15191](https://github.com/openshift/console/pull/15191)
* [OCPBUGS-57743](https://issues.redhat.com/browse/OCPBUGS-57743): Fix TypeError Cannot read properties of null (reading 'metadata') [#15188](https://github.com/openshift/console/pull/15188)
* [OCPBUGS-57209](https://issues.redhat.com/browse/OCPBUGS-57209): Add flags in console static plugin for all the components of this epic [#15160](https://github.com/openshift/console/pull/15160)
* [OCPBUGS-36173](https://issues.redhat.com/browse/OCPBUGS-36173): Secret key with binary file changes when edited via Console. [#15178](https://github.com/openshift/console/pull/15178)
* [OCPBUGS-57181](https://issues.redhat.com/browse/OCPBUGS-57181): Fix '/metrics' endpoint token review to handle interna… [#15153](https://github.com/openshift/console/pull/15153)
* [OCPBUGS-57353](https://issues.redhat.com/browse/OCPBUGS-57353): fix VirtualizedTable runtime error if sortColumn is no… [#15173](https://github.com/openshift/console/pull/15173)
* [OCPBUGS-57093](https://issues.redhat.com/browse/OCPBUGS-57093): Add all files to `vendor` regardless of gitignore [#15131](https://github.com/openshift/console/pull/15131)
* [OCPBUGS-56774](https://issues.redhat.com/browse/OCPBUGS-56774): [knative] Self-provisioner user can not access or create event sources via ODC [#15095](https://github.com/openshift/console/pull/15095)
* [OCPBUGS-56862](https://issues.redhat.com/browse/OCPBUGS-56862): Sample segment sessions [#15103](https://github.com/openshift/console/pull/15103)
* [OCPBUGS-56757](https://issues.redhat.com/browse/OCPBUGS-56757): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15093](https://github.com/openshift/console/pull/15093)
* [OCPBUGS-54337](https://issues.redhat.com/browse/OCPBUGS-54337): Debug pod logs are not accessible when debugging a node via OpenShift Console [#14942](https://github.com/openshift/console/pull/14942)
* [OCPBUGS-56255](https://issues.redhat.com/browse/OCPBUGS-56255): remove 60 day alert from cluster update modal [#15055](https://github.com/openshift/console/pull/15055)
* [OCPBUGS-55991](https://issues.redhat.com/browse/OCPBUGS-55991): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15043](https://github.com/openshift/console/pull/15043)
* [OCPBUGS-53172](https://issues.redhat.com/browse/OCPBUGS-53172): Include init containers in readiness count if ready and started is true [#14884](https://github.com/openshift/console/pull/14884)
* [OCPBUGS-54899](https://issues.redhat.com/browse/OCPBUGS-54899): Fetching taskRuns in PLR details page using PLR UID also [#14961](https://github.com/openshift/console/pull/14961)
* [OCPBUGS-54888](https://issues.redhat.com/browse/OCPBUGS-54888): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14959](https://github.com/openshift/console/pull/14959)
* [OCPBUGS-45369](https://issues.redhat.com/browse/OCPBUGS-45369): Authenticate user token in openshift Authenticate func [#14664](https://github.com/openshift/console/pull/14664)
* [OCPBUGS-55195](https://issues.redhat.com/browse/OCPBUGS-55195): fix bug where operator appears twice [#14984](https://github.com/openshift/console/pull/14984)
* [OCPBUGS-54269](https://issues.redhat.com/browse/OCPBUGS-54269): fix bug where /k8s/all-namespaces/volumesnapshots 404s [#14905](https://github.com/openshift/console/pull/14905)
* [OCPBUGS-52372](https://issues.redhat.com/browse/OCPBUGS-52372): VolumeSnapshots are not displayed in OpenShift Web Console [#14833](https://github.com/openshift/console/pull/14833)
* [OCPBUGS-52406](https://issues.redhat.com/browse/OCPBUGS-52406): Retain original path when detecting perspective [#14834](https://github.com/openshift/console/pull/14834)
* [OCPBUGS-52371](https://issues.redhat.com/browse/OCPBUGS-52371): Update the monitoring topic used by the console team [#14832](https://github.com/openshift/console/pull/14832)
* [OCPBUGS-52490](https://issues.redhat.com/browse/OCPBUGS-52490): enable clicking outside NodeLogs Selects to close them [#14843](https://github.com/openshift/console/pull/14843)
* [OCPBUGS-50501](https://issues.redhat.com/browse/OCPBUGS-50501): Updating cypress config to have video enabled for the CI results [#14831](https://github.com/openshift/console/pull/14831)
* [OCPBUGS-52511](https://issues.redhat.com/browse/OCPBUGS-52511): Remove logoutOpenShift method call [#14845](https://github.com/openshift/console/pull/14845)
* [Full changelog](https://github.com/openshift/console/compare/87e68aaf14c42b7e82cae68a57d2aa7e8e5830f9...595e96b1499a3b1605eac96979abedabf055393b)


### [console-operator](https://github.com/openshift/console-operator/tree/3806ce1037d1516e3f2c2ca74015e292ca197c49)

* [OCPBUGS-45869](https://issues.redhat.com/browse/OCPBUGS-45869): don't set current clients when no OIDC providers are configured [#948](https://github.com/openshift/console-operator/pull/948)
* [OCPBUGS-52294](https://issues.redhat.com/browse/OCPBUGS-52294): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#966](https://github.com/openshift/console-operator/pull/966)
* [Full changelog](https://github.com/openshift/console-operator/compare/49cd98bc72f18eefd6baf36b69fedaf305720ed5...3806ce1037d1516e3f2c2ca74015e292ca197c49)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/59ee57ce5be64e6b0227140b84bcc48eb90f40d2)

* append .0 to go.mod version [#196](https://github.com/openshift/containernetworking-plugins/pull/196)
* : OCPBUGS-56928: Add a new firewall ingress-policy "isolated" [#191](https://github.com/openshift/containernetworking-plugins/pull/191)
* [OCPBUGS-55354](https://issues.redhat.com/browse/OCPBUGS-55354): Fix dhcp [#186](https://github.com/openshift/containernetworking-plugins/pull/186)
* [OCPBUGS-55346](https://issues.redhat.com/browse/OCPBUGS-55346): Check error returned by ipv6 SettleAddresses [#185](https://github.com/openshift/containernetworking-plugins/pull/185)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...59ee57ce5be64e6b0227140b84bcc48eb90f40d2)


### [coredns](https://github.com/openshift/coredns/tree/eb75d9b4f41a5ce0258d6f245c6206715ecb283b)

* append .0 to go.mod version [#134](https://github.com/openshift/coredns/pull/134)
* [Full changelog](https://github.com/openshift/coredns/compare/cb1abfaeb7b0c5df4f0c56b0a009b439db1d0949...eb75d9b4f41a5ce0258d6f245c6206715ecb283b)


### [docker-builder](https://github.com/openshift/builder/tree/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)

* [OCPBUGS-57758](https://issues.redhat.com/browse/OCPBUGS-57758): S2I build cpu limits observed by assemble are limited to 1 cpu [#473](https://github.com/openshift/builder/pull/473)
* [OCPBUGS-48071](https://issues.redhat.com/browse/OCPBUGS-48071): Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility [#464](https://github.com/openshift/builder/pull/464)
* [Full changelog](https://github.com/openshift/builder/compare/6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8...a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)


### [docker-registry](https://github.com/openshift/image-registry/tree/0a39d2c759b311e98a1f4de4c7ba1cdeddba47bf)

* [OCPBUGS-53657](https://issues.redhat.com/browse/OCPBUGS-53657): bump jwt and oauth dependencies [#430](https://github.com/openshift/image-registry/pull/430)
* [Full changelog](https://github.com/openshift/image-registry/compare/e36d3655ba8c33cff1afaa9f816ae2399f4cd42f...0a39d2c759b311e98a1f4de4c7ba1cdeddba47bf)


### [etcd](https://github.com/openshift/etcd/tree/416376871d09278b18ae16520363ea6c8b3c71a8)

* Revert "ETCD-727: Rebase etcd 3.5.21 openshift 4.18" [#332](https://github.com/openshift/etcd/pull/332)
* [ETCD-727](https://issues.redhat.com/browse/ETCD-727): Rebase etcd 3.5.21 openshift 4.18 [#325](https://github.com/openshift/etcd/pull/325)
* [OCPBUGS-55724](https://issues.redhat.com/browse/OCPBUGS-55724): Add configurable option for hardware-related timeout delay [#328](https://github.com/openshift/etcd/pull/328)
* DOWNSTREAM: &lt;carry&gt;: OCPBUGS-51971: fix a compaction induce latency issue [#312](https://github.com/openshift/etcd/pull/312)
* [Full changelog](https://github.com/openshift/etcd/compare/afac40f734a0440eb0983d7308e86aea9a04bbe9...416376871d09278b18ae16520363ea6c8b3c71a8)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/01f6b419357a539389704fcec9872997f808e540)

* [OCPBUGS-52495](https://issues.redhat.com/browse/OCPBUGS-52495): OCPBUGS-52494:  Disable shielded VMs for non-UEFI disks [#112](https://github.com/openshift/machine-api-provider-gcp/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a3716418ec55c5767f4dab86991ffad6161031e9...01f6b419357a539389704fcec9872997f808e540)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1b8c94ac55d8602ba6669325ade654ae47ea74cf)

* [OCPBUGS-44769](https://issues.redhat.com/browse/OCPBUGS-44769): Fix RWX mode for hyperdisks [#74](https://github.com/openshift/gcp-pd-csi-driver/pull/74)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/14fa4d9a2c2c66ee796035e01b39aa0f6f4cf7a5...1b8c94ac55d8602ba6669325ade654ae47ea74cf)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/84b31a33f3dd1a585589e8031ab29b0ed9276518)

* [OCPBUGS-57070](https://issues.redhat.com/browse/OCPBUGS-57070): UPSTREAM: &lt;carry&gt;: Bump cadvisor version to fix container_fs metrics [#2332](https://github.com/openshift/kubernetes/pull/2332)
* [OCPBUGS-57219](https://issues.redhat.com/browse/OCPBUGS-57219): kubelet: fix a stall on startup from waiting too long for a stat call [#2324](https://github.com/openshift/kubernetes/pull/2324)
* [OCPBUGS-56835](https://issues.redhat.com/browse/OCPBUGS-56835): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2316](https://github.com/openshift/kubernetes/pull/2316)
* [OCPBUGS-56384](https://issues.redhat.com/browse/OCPBUGS-56384): Propagate error when creating CustomResourceStorage instead of panicking [#2303](https://github.com/openshift/kubernetes/pull/2303)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#2307](https://github.com/openshift/kubernetes/pull/2307)
* [OCPBUGS-56192](https://issues.redhat.com/browse/OCPBUGS-56192): UPSTREAM: 131236: RWX tests should create RWX volumes [#2300](https://github.com/openshift/kubernetes/pull/2300)
* UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… [#2283](https://github.com/openshift/kubernetes/pull/2283)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#2278](https://github.com/openshift/kubernetes/pull/2278)
* : OCPBUGS-54807: skip tests on platform type External [#2268](https://github.com/openshift/kubernetes/pull/2268)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): Update to Kubernetes v1.31.7 [#2248](https://github.com/openshift/kubernetes/pull/2248)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6020cf5333bdeb77f95fa33f8272e5251ea28edc...84b31a33f3dd1a585589e8031ab29b0ed9276518)


### [hypershift](https://github.com/openshift/hypershift/tree/6279e093a11b0893abeb77bebef6649d214dae0b)

* [OCPBUGS-57273](https://issues.redhat.com/browse/OCPBUGS-57273): Add proxy variables for the MCD Pod [#6247](https://github.com/openshift/hypershift/pull/6247)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Fix CatalogSource images check when unauthorized [#6237](https://github.com/openshift/hypershift/pull/6237)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Add support for registry root entry only in the IDMS/ICSP [#6163](https://github.com/openshift/hypershift/pull/6163)
* [OCPBUGS-56627](https://issues.redhat.com/browse/OCPBUGS-56627): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6186](https://github.com/openshift/hypershift/pull/6186)
* [CNTRLPLANE-917](https://issues.redhat.com/browse/CNTRLPLANE-917): Konflux build pipeline service account migration [#6084](https://github.com/openshift/hypershift/pull/6084)
* [OCPBUGS-56524](https://issues.redhat.com/browse/OCPBUGS-56524): switch admissionregistration API to v1 [#6172](https://github.com/openshift/hypershift/pull/6172)
* [OCPBUGS-55177](https://issues.redhat.com/browse/OCPBUGS-55177): Don't check if olm images exist if guest cluster [#6065](https://github.com/openshift/hypershift/pull/6065)
* [OCPBUGS-55230](https://issues.redhat.com/browse/OCPBUGS-55230): Add annotation to configure KAS goaway-chance [#6066](https://github.com/openshift/hypershift/pull/6066)
* [OCPBUGS-54865](https://issues.redhat.com/browse/OCPBUGS-54865): KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled [#6020](https://github.com/openshift/hypershift/pull/6020)
* [OCPBUGS-54737](https://issues.redhat.com/browse/OCPBUGS-54737): Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests [#6052](https://github.com/openshift/hypershift/pull/6052)
* [OCPBUGS-55148](https://issues.redhat.com/browse/OCPBUGS-55148): Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz [#6059](https://github.com/openshift/hypershift/pull/6059)
* [OCPBUGS-54946](https://issues.redhat.com/browse/OCPBUGS-54946), [RHOCPPRIO-433](https://issues.redhat.com/browse/RHOCPPRIO-433): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6091](https://github.com/openshift/hypershift/pull/6091)
* [OCPBUGS-55146](https://issues.redhat.com/browse/OCPBUGS-55146): Use 135 for terminationGracePeriodSeconds for v2 KAS [#6057](https://github.com/openshift/hypershift/pull/6057)
* [OCPBUGS-54698](https://issues.redhat.com/browse/OCPBUGS-54698): Add missing servicemonitors and prometheusrules permissions for non-OVN [#6000](https://github.com/openshift/hypershift/pull/6000)
* [OCPBUGS-53404](https://issues.redhat.com/browse/OCPBUGS-53404): Set shutdown watch termination grace period on kube-apiserver [#5874](https://github.com/openshift/hypershift/pull/5874)
* [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Fix golang crypto dependency go.mod replacement [#5992](https://github.com/openshift/hypershift/pull/5992)
* [OCPBUGS-54814](https://issues.redhat.com/browse/OCPBUGS-54814): [release-4.18] add feature set aware feature gates to HO and CPO [#6014](https://github.com/openshift/hypershift/pull/6014)
* [OCPBUGS-54624](https://issues.redhat.com/browse/OCPBUGS-54624): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5980](https://github.com/openshift/hypershift/pull/5980)
* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Sync RBAC for attaching volumes on VM level [#5988](https://github.com/openshift/hypershift/pull/5988)
* [OCPBUGS-54627](https://issues.redhat.com/browse/OCPBUGS-54627): Use system trust bundle in CPO IDP https client [#5981](https://github.com/openshift/hypershift/pull/5981)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695), [OCPBUGS-54625](https://issues.redhat.com/browse/OCPBUGS-54625): backport capabilities api [#5964](https://github.com/openshift/hypershift/pull/5964)
* [OCPBUGS-54411](https://issues.redhat.com/browse/OCPBUGS-54411): Backport PR 5876 to release-4.18 [#5936](https://github.com/openshift/hypershift/pull/5936)
* [OCPBUGS-54498](https://issues.redhat.com/browse/OCPBUGS-54498): Support hypershift-operator scoping for secretJanitor [#5961](https://github.com/openshift/hypershift/pull/5961)
* [OCPBUGS-54609](https://issues.redhat.com/browse/OCPBUGS-54609): [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable [#5950](https://github.com/openshift/hypershift/pull/5950)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 [#5963](https://github.com/openshift/hypershift/pull/5963)
* [OCPBUGS-53905](https://issues.redhat.com/browse/OCPBUGS-53905): bump golang-jwt v4 and v5 [#5905](https://github.com/openshift/hypershift/pull/5905)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5919](https://github.com/openshift/hypershift/pull/5919)
* [OCPBUGS-51739](https://issues.redhat.com/browse/OCPBUGS-51739), [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Bump dependencies to OCP fork in backports [#5898](https://github.com/openshift/hypershift/pull/5898)
* [OCPBUGS-53321](https://issues.redhat.com/browse/OCPBUGS-53321): Handle multiple mirror entries for source [#5890](https://github.com/openshift/hypershift/pull/5890)
* [OCPBUGS-51239](https://issues.redhat.com/browse/OCPBUGS-51239): fix(deps): bump go-jose [#5858](https://github.com/openshift/hypershift/pull/5858)
* [OCPBUGS-52982](https://issues.redhat.com/browse/OCPBUGS-52982): Fix audit-logs container to properly handle SIGTERM [#5774](https://github.com/openshift/hypershift/pull/5774)
* [OCPBUGS-52863](https://issues.redhat.com/browse/OCPBUGS-52863): stop using dev mode for loggers [#5811](https://github.com/openshift/hypershift/pull/5811)
* [OCPBUGS-52878](https://issues.redhat.com/browse/OCPBUGS-52878): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5780](https://github.com/openshift/hypershift/pull/5780)
* [OCPBUGS-52516](https://issues.redhat.com/browse/OCPBUGS-52516): Make managed-trust-bundle optional [#5783](https://github.com/openshift/hypershift/pull/5783)
* [Full changelog](https://github.com/openshift/hypershift/compare/c6b343e24368c0846827c33024b9b3f08fccf9cf...6279e093a11b0893abeb77bebef6649d214dae0b)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/1b9ad923f69b5e041777355bee96e918269d67e7)

* append .0 to go.mod version [#96](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/96)
* [OCPBUGS-55283](https://issues.redhat.com/browse/OCPBUGS-55283): tech debt: rework vendor patches [#89](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/89)
* [OCPBUGS-53913](https://issues.redhat.com/browse/OCPBUGS-53913): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#82](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/59a8340c20192b70c5d597555554856d3712aee9...1b9ad923f69b5e041777355bee96e918269d67e7)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)

* [OCPBUGS-52872](https://issues.redhat.com/browse/OCPBUGS-52872): IBMCloud: MAPI replacing unhealthy CP nodes [#62](https://github.com/openshift/machine-api-provider-ibmcloud/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0fdb727264afaa7f02c8bd602f3769427e520300...3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7f9ed155f7361fb0a16f666fd53111cfb16d4cca)

* [OCPBUGS-51163](https://issues.redhat.com/browse/OCPBUGS-51163): Fix bad IPv6 address (#1074) [#1074](https://github.com/openshift/insights-operator/pull/1074)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8a9746e4b1bbe139d162ecc894041495059dac4a...7f9ed155f7361fb0a16f666fd53111cfb16d4cca)


### [ironic](https://github.com/openshift/ironic-image/tree/9161a5fdb75042856bd40eec31bdba7b7c07d4a2)

* [OCPBUGS-55938](https://issues.redhat.com/browse/OCPBUGS-55938): Extract files one-by-one in logwatch [#657](https://github.com/openshift/ironic-image/pull/657)
* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#646](https://github.com/openshift/ironic-image/pull/646)
* [Full changelog](https://github.com/openshift/ironic-image/compare/b288ebe9daaed7501d80fe85501dcebe4848362f...9161a5fdb75042856bd40eec31bdba7b7c07d4a2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/b79bddef03460124923c7ce8616d83f719a49960)

* [OCPBUGS-56097](https://issues.redhat.com/browse/OCPBUGS-56097): collect the entire journal from the host [#189](https://github.com/openshift/ironic-agent-image/pull/189)
* [OCPBUGS-55364](https://issues.redhat.com/browse/OCPBUGS-55364): Delay determining the hostname to put into ignition [#183](https://github.com/openshift/ironic-agent-image/pull/183)
* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#178](https://github.com/openshift/ironic-agent-image/pull/178)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a26fffeb4d36b22951095e20988f1757044e8d2a...b79bddef03460124923c7ce8616d83f719a49960)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/50ca44fd48943433d502e8bcff3804f5cac7cb5a)

* append .0 to go.mod version [#103](https://github.com/openshift/ironic-rhcos-downloader/pull/103)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/04c22eee43786b4a8bc53441b7e8173372251bd8...50ca44fd48943433d502e8bcff3804f5cac7cb5a)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/8dec42d36f9e26487112aeac870767a5fedb8021)

* append .0 to go.mod version [#216](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/216)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/50d17147f15d8b216e7c41f91d1bd7d307ca8c73...8dec42d36f9e26487112aeac870767a5fedb8021)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2111495e6d03f1bfe0702996fdd1355ca21b78cf)

* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Ensure volume stays attached through reboots [#55](https://github.com/openshift/kubevirt-csi-driver/pull/55)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...2111495e6d03f1bfe0702996fdd1355ca21b78cf)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)

* [OCPBUGS-57057](https://issues.redhat.com/browse/OCPBUGS-57057): Updates GCP CredentialsRequest [#1376](https://github.com/openshift/machine-api-operator/pull/1376)
* [OCPBUGS-52494](https://issues.redhat.com/browse/OCPBUGS-52494), [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): Updates GCP credentials request [#1341](https://github.com/openshift/machine-api-operator/pull/1341)
* [OCPBUGS-52567](https://issues.redhat.com/browse/OCPBUGS-52567): add image/read permissions [#1342](https://github.com/openshift/machine-api-operator/pull/1342)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/1df65ace03159ae05671e4f565eefcf844192192...6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/74df36f0fd48147136a4fe5ed77685f588f05930)

* [OCPBUGS-54463](https://issues.redhat.com/browse/OCPBUGS-54463): Update desired config in MCN on OCL update [#5026](https://github.com/openshift/machine-config-operator/pull/5026)
* [OCPBUGS-57900](https://issues.redhat.com/browse/OCPBUGS-57900): MCC complains about v1 MachineOSConfig in default featureset [#5131](https://github.com/openshift/machine-config-operator/pull/5131)
* [OCPBUGS-56900](https://issues.redhat.com/browse/OCPBUGS-56900): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5095](https://github.com/openshift/machine-config-operator/pull/5095)
* [OCPBUGS-56517](https://issues.redhat.com/browse/OCPBUGS-56517): pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition [#5065](https://github.com/openshift/machine-config-operator/pull/5065)
* [OCPBUGS-56585](https://issues.redhat.com/browse/OCPBUGS-56585): scope MCD node listers to current node [#5068](https://github.com/openshift/machine-config-operator/pull/5068)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates [#5089](https://github.com/openshift/machine-config-operator/pull/5089)
* [OCPBUGS-56823](https://issues.redhat.com/browse/OCPBUGS-56823): Boot Image Controller should not degrade when golden configmap is slow to update [#5085](https://github.com/openshift/machine-config-operator/pull/5085)
* [OCPBUGS-56703](https://issues.redhat.com/browse/OCPBUGS-56703): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5078](https://github.com/openshift/machine-config-operator/pull/5078)
* Merge [#5025](https://github.com/openshift/machine-config-operator/pull/5025)
* [OCPBUGS-56401](https://issues.redhat.com/browse/OCPBUGS-56401): Add hot loop detection in the boot image controller [#5062](https://github.com/openshift/machine-config-operator/pull/5062)
* [OCPBUGS-55638](https://issues.redhat.com/browse/OCPBUGS-55638): OCPBUGS-55637: Add admin_acks handling in the MCO [#5027](https://github.com/openshift/machine-config-operator/pull/5027)
* [OCPBUGS-56217](https://issues.redhat.com/browse/OCPBUGS-56217): Compare the osImageURLs for OS validation check [#5052](https://github.com/openshift/machine-config-operator/pull/5052)
* [OCPBUGS-56170](https://issues.redhat.com/browse/OCPBUGS-56170): error from generateAndValidateRenderedMachineConfig function can be misleading [#5049](https://github.com/openshift/machine-config-operator/pull/5049)
* [OCPBUGS-55383](https://issues.redhat.com/browse/OCPBUGS-55383): Leverage shared node.env for both AWS providerID and hostname units [#5008](https://github.com/openshift/machine-config-operator/pull/5008)
* [OCPBUGS-53427](https://issues.redhat.com/browse/OCPBUGS-53427): pkg/operator/status: Drop kubelet skew guard, add RHEL guard [#4956](https://github.com/openshift/machine-config-operator/pull/4956)
* [release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension [#5018](https://github.com/openshift/machine-config-operator/pull/5018)
* [OCPBUGS-54765](https://issues.redhat.com/browse/OCPBUGS-54765): [release-4.18] kubelet-service: narrow down restorecon path [#4978](https://github.com/openshift/machine-config-operator/pull/4978)
* [OCPBUGS-55428](https://issues.redhat.com/browse/OCPBUGS-55428): MSBIC should not update windows machinesets [#5012](https://github.com/openshift/machine-config-operator/pull/5012)
* [OCPBUGS-55290](https://issues.redhat.com/browse/OCPBUGS-55290): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#5000](https://github.com/openshift/machine-config-operator/pull/5000)
* [OCPBUGS-55293](https://issues.redhat.com/browse/OCPBUGS-55293): Fix PollUntilContextTimeout in syncRenderConfig [#5001](https://github.com/openshift/machine-config-operator/pull/5001)
* Update cluster operator's status condition message [#4993](https://github.com/openshift/machine-config-operator/pull/4993)
* [OCPBUGS-53278](https://issues.redhat.com/browse/OCPBUGS-53278): In OCL. Cannot install extensions [#4945](https://github.com/openshift/machine-config-operator/pull/4945)
* [OCPBUGS-54817](https://issues.redhat.com/browse/OCPBUGS-54817): Make mtu-migration run after wait-for-primary-ip [#4979](https://github.com/openshift/machine-config-operator/pull/4979)
* [OKD-239](https://issues.redhat.com/browse/OKD-239): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4955](https://github.com/openshift/machine-config-operator/pull/4955)
* [OCPBUGS-54462](https://issues.redhat.com/browse/OCPBUGS-54462): OSUpdateStarted event should only be emitted on actual OS updates [#4967](https://github.com/openshift/machine-config-operator/pull/4967)
* [OCPBUGS-51132](https://issues.redhat.com/browse/OCPBUGS-51132): [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc [#4869](https://github.com/openshift/machine-config-operator/pull/4869)
* [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Add ipsec connect wait service [#4926](https://github.com/openshift/machine-config-operator/pull/4926)
* [OCPBUGS-53306](https://issues.redhat.com/browse/OCPBUGS-53306): Fixing typos for MachineConfigNode [#4927](https://github.com/openshift/machine-config-operator/pull/4927)
* [OCPNODE-2276](https://issues.redhat.com/browse/OCPNODE-2276): Set `Upgradeable=False` when cluster is on cgroup `v1` [#4921](https://github.com/openshift/machine-config-operator/pull/4921)
* [OCPBUGS-53111](https://issues.redhat.com/browse/OCPBUGS-53111): daemon: ensure ostree-finalize-staged is started before rebooting [#4918](https://github.com/openshift/machine-config-operator/pull/4918)
* [OCPBUGS-53110](https://issues.redhat.com/browse/OCPBUGS-53110): Update ObservedGeneration in KubeletConfig [#4917](https://github.com/openshift/machine-config-operator/pull/4917)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/9f18ef9ca8a4aff64948a11967d50d4c60606f82...74df36f0fd48147136a4fe5ed77685f588f05930)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d9a71247dafd469182d4bd13ef227c9be82a1e32)

* append .0 to go.mod version [#134](https://github.com/openshift/image-customization-controller/pull/134)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/e905646a4aa24e6ad54f27776d3dfd64a7d6f609...d9a71247dafd469182d4bd13ef227c9be82a1e32)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ab43283689560737ad32566dd59e0d3d77fee4e1)

* [OCPBUGS-53141](https://issues.redhat.com/browse/OCPBUGS-53141): Change rhcos release browser url [#55](https://github.com/openshift/machine-os-images/pull/55)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723...ab43283689560737ad32566dd59e0d3d77fee4e1)


### [metallb-frr](https://github.com/openshift/frr/tree/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)

* [OCPBUGS-55343](https://issues.redhat.com/browse/OCPBUGS-55343): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#88](https://github.com/openshift/frr/pull/88)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): Use metrics for readiness/liveness probes [#76](https://github.com/openshift/frr/pull/76)
* [Full changelog](https://github.com/openshift/frr/compare/1ad8f2e711d33fd0416b8e2b8d26a413d26b38e2...98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/eb6123bd41269ccc6f5abddadfbc8e3af4481e09)

* [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#376](https://github.com/openshift/monitoring-plugin/pull/376)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a5a82997a17cdcee03e9a4a58ac42c694d4174aa...eb6123bd41269ccc6f5abddadfbc8e3af4481e09)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/e46a6d7d6f2ea7baeff193c0a28901bc34ea0d43)

* append .0 to go.mod version [#96](https://github.com/openshift/multus-admission-controller/pull/96)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/1b2791b74bdc5913697ab01515f0bdf0f3dfe7a0...e46a6d7d6f2ea7baeff193c0a28901bc34ea0d43)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)

* [OCPBUGS-47470](https://issues.redhat.com/browse/OCPBUGS-47470): adds getpodcontext (backport 4.18) [#259](https://github.com/openshift/multus-cni/pull/259)
* [Full changelog](https://github.com/openshift/multus-cni/compare/69733b264233684deb30defbc357a1ecf03c0d02...21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)

* append .0 to go.mod version [#70](https://github.com/openshift/multus-networkpolicy/pull/70)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/82c77316ea4dcf0c14f8717984a1faa6f731b553...5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/ac43b0f8b214a013572af900aef3333f10447fea)

* append .0 to go.mod version [#370](https://github.com/openshift/whereabouts-cni/pull/370)
* [OCPBUGS-55270](https://issues.redhat.com/browse/OCPBUGS-55270): Fix whereabouts-reconciler no namespace error [#362](https://github.com/openshift/whereabouts-cni/pull/362)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/74f285c3d6c642d96039067a5e99e8db85b146f9...ac43b0f8b214a013572af900aef3333f10447fea)


### [must-gather](https://github.com/openshift/must-gather/tree/b851bd3589eb0f80471d4de2114a7635b0d12663)

* append .0 to go.mod version [#491](https://github.com/openshift/must-gather/pull/491)
* [Full changelog](https://github.com/openshift/must-gather/compare/c864494e2b10793ec1de833ade2fda7afe6a7c88...b851bd3589eb0f80471d4de2114a7635b0d12663)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/630c73623a3d6c8cd0f387237d39d3435347bd1b)

* [OCPBUGS-57794](https://issues.redhat.com/browse/OCPBUGS-57794): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 [#74](https://github.com/openshift/bond-cni/pull/74)
* NO-JIRA: Add ci-operator yaml file [#78](https://github.com/openshift/bond-cni/pull/78)
* [Full changelog](https://github.com/openshift/bond-cni/compare/9506a1ff3e0b3b1cdddbd0fbb0ed687e289166b0...630c73623a3d6c8cd0f387237d39d3435347bd1b)


### [network-tools](https://github.com/openshift/network-tools/tree/47b13549115a59d82dbf4c61f9160432608cb9d8)

* Fix build error [#147](https://github.com/openshift/network-tools/pull/147)
* [Full changelog](https://github.com/openshift/network-tools/compare/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f...47b13549115a59d82dbf4c61f9160432608cb9d8)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/9404c2330085c3dd42504f34c608974ffb957d6e)

* [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#240](https://github.com/openshift/networking-console-plugin/pull/240)
* [OCPBUGS-49395](https://issues.redhat.com/browse/OCPBUGS-49395): Add translations [#238](https://github.com/openshift/networking-console-plugin/pull/238)
* Add translations scripts [#234](https://github.com/openshift/networking-console-plugin/pull/234)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d9f7f31c78c4f4eeee734936cd814ab0542e4ad0...9404c2330085c3dd42504f34c608974ffb957d6e)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/afe324bf56e0348fb45e5fbb9c832c1587482153)

* [OCPBUGS-51861](https://issues.redhat.com/browse/OCPBUGS-51861): fixing CVE-2025-22868 [#96](https://github.com/openshift/machine-api-provider-nutanix/pull/96)
* [OCPBUGS-54616](https://issues.redhat.com/browse/OCPBUGS-54616): Fix link-local addresses being added to machine [#101](https://github.com/openshift/machine-api-provider-nutanix/pull/101)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/7d0cb735f3e86c0828821cf54f8a40c74d9232aa...afe324bf56e0348fb45e5fbb9c832c1587482153)


### [oauth-server](https://github.com/openshift/oauth-server/tree/3bedb4f45cbdaa50384cf7c7284617fb8a414cf2)

* append .0 to go.mod version [#179](https://github.com/openshift/oauth-server/pull/179)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3527783a5ceb1f33f790b7ab5edbea17f5cc6a8...3bedb4f45cbdaa50384cf7c7284617fb8a414cf2)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/670d2a14d0f9397700a6cb35be4c50ccd2094b61)

* [OCPBUGS-57197](https://issues.redhat.com/browse/OCPBUGS-57197): [release-4.18] v2/cli: always remove past archives before m2d (#1176) [#1176](https://github.com/openshift/oc-mirror/pull/1176)
* [OCPBUGS-56486](https://issues.redhat.com/browse/OCPBUGS-56486): v2/config: allow `delete` and `mirror` words (#1175) [#1175](https://github.com/openshift/oc-mirror/pull/1175)
* [OCPBUGS-55701](https://issues.redhat.com/browse/OCPBUGS-55701): v2/imgbuilder: use --authfile when set (#1173) [#1173](https://github.com/openshift/oc-mirror/pull/1173)
* [OCPBUGS-56659](https://issues.redhat.com/browse/OCPBUGS-56659): v2/archive: print unarchive progress (#1160) [#1160](https://github.com/openshift/oc-mirror/pull/1160)
* [OCPBUGS-54653](https://issues.redhat.com/browse/OCPBUGS-54653): delete: continue on errors (#1146) [#1146](https://github.com/openshift/oc-mirror/pull/1146)
* [OCPBUGS-56043](https://issues.redhat.com/browse/OCPBUGS-56043): Fix mirroring images with tag&digest in charts (#1142) [#1142](https://github.com/openshift/oc-mirror/pull/1142)
* [OCPBUGS-54626](https://issues.redhat.com/browse/OCPBUGS-54626): [release-4.18] cli: return distinct error codes depending on failure (#1125) [#1125](https://github.com/openshift/oc-mirror/pull/1125)
* [OCPBUGS-55361](https://issues.redhat.com/browse/OCPBUGS-55361): v2/operator: refactor operator FilteredCollector (#1134) [#1134](https://github.com/openshift/oc-mirror/pull/1134)
* [OCPBUGS-51217](https://issues.redhat.com/browse/OCPBUGS-51217): Fix CVE-2025-27144 (#1108) [#1108](https://github.com/openshift/oc-mirror/pull/1108)
* [OCPBUGS-54727](https://issues.redhat.com/browse/OCPBUGS-54727): Use tag 0.0.3+2 of catalog-filter (#1128) [#1128](https://github.com/openshift/oc-mirror/pull/1128)
* [OCPBUGS-52978](https://issues.redhat.com/browse/OCPBUGS-52978): delete: fix typo in --help output (#1121) [#1121](https://github.com/openshift/oc-mirror/pull/1121)
* [OCPBUGS-52960](https://issues.redhat.com/browse/OCPBUGS-52960): v2: fix setting version during build (#1118) [#1118](https://github.com/openshift/oc-mirror/pull/1118)
* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1114) [#1114](https://github.com/openshift/oc-mirror/pull/1114)
* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1106) [#1106](https://github.com/openshift/oc-mirror/pull/1106)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/22b273d3f5bfa4870aeb84acca14dfda7faaa981...670d2a14d0f9397700a6cb35be4c50ccd2094b61)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/ea60189f95af09f3c5c50c8de41d8f601bc5e881)

* UPSTREAM: &lt;carry&gt;: fix crdupgradesafety diff when items schema differ (#1863) [#1863](https://github.com/openshift/operator-framework-operator-controller/pull/1863)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/481e275e3316037c9d6eec441ec7a5e9d85f4f90...ea60189f95af09f3c5c50c8de41d8f601bc5e881)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/1872fbf5967acd6485589c339ac8cb6bd156ad72)

* [OCPBUGS-52312](https://issues.redhat.com/browse/OCPBUGS-52312): Skip blocked registry check for registries with mirrors [#498](https://github.com/openshift/openshift-apiserver/pull/498)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/73d65dbb875ed0302360eabdeaf11658752d1499...1872fbf5967acd6485589c339ac8cb6bd156ad72)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1f76c23407c6cc95902a4b4d8f679181df538d9d)

* [OCPBUGS-57344](https://issues.redhat.com/browse/OCPBUGS-57344): Set node-pullsecrets volume to read-only to protect image pull credentials [#392](https://github.com/openshift/openshift-controller-manager/pull/392)
* [OCPBUGS-55699](https://issues.redhat.com/browse/OCPBUGS-55699): Empty proxy variables are causing issues during the build [#377](https://github.com/openshift/openshift-controller-manager/pull/377)
* [OCPBUGS-54304](https://issues.redhat.com/browse/OCPBUGS-54304): Intermittent authentication issues when accessing OpenShift registry [#369](https://github.com/openshift/openshift-controller-manager/pull/369)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/5bfc8081a65ea3e0d23306c0398143a9987d659e...1f76c23407c6cc95902a4b4d8f679181df538d9d)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/3cca6feee0d646331bdbc9d49732fbdf49448d41)

* append .0 to go.mod version [#123](https://github.com/openshift/openshift-state-metrics/pull/123)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/f5b14702aefd0ea480d9b5e7ba8717af36ba67e9...3cca6feee0d646331bdbc9d49732fbdf49448d41)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/ce2c2d17d9c489d776f0383869d453dff89b0462)

* [OCPBUGS-44458](https://issues.redhat.com/browse/OCPBUGS-44458): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#365](https://github.com/openshift/cluster-api-provider-openstack/pull/365)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/b0f0dc4e1a9123815cdc2124579b6f4367500a73...ce2c2d17d9c489d776f0383869d453dff89b0462)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/969a7e031a97a7e12424b5d292f345a168b73e38)

* [OCPBUGS-57314](https://issues.redhat.com/browse/OCPBUGS-57314): operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1017](https://github.com/openshift/operator-framework-olm/pull/1017)
* [OCPBUGS-56098](https://issues.redhat.com/browse/OCPBUGS-56098): fix(olm): improve error logging for missing olm.managed label (#3558) [#1001](https://github.com/openshift/operator-framework-olm/pull/1001)
* [OCPBUGS-51225](https://issues.redhat.com/browse/OCPBUGS-51225), [OCPBUGS-51227](https://issues.redhat.com/browse/OCPBUGS-51227), [OCPBUGS-51245](https://issues.redhat.com/browse/OCPBUGS-51245): pin go-jose/v4@v4.0.5 (#3550) [#992](https://github.com/openshift/operator-framework-olm/pull/992)
* [OCPBUGS-53108](https://issues.redhat.com/browse/OCPBUGS-53108): Ensure that PSA label is latest instead of pinning versions [#983](https://github.com/openshift/operator-framework-olm/pull/983)
* [OCPBUGS-53040](https://issues.redhat.com/browse/OCPBUGS-53040): add missing pod disruption reasons to isPodDead [#981](https://github.com/openshift/operator-framework-olm/pull/981)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/877b6fd3d425043a1bd45b5d24ecebb69f5544c4...969a7e031a97a7e12424b5d292f345a168b73e38)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/c06a810b321ad79ef572ce36ed935332a58ea319)

* [ART-13123](https://issues.redhat.com/browse/ART-13123): append .0 to go.mod version [#637](https://github.com/operator-framework/operator-marketplace/pull/637)
* [OCPBUGS-53149](https://issues.redhat.com/browse/OCPBUGS-53149): Ensure that PSA label is latest instead of pinning versions [#601](https://github.com/operator-framework/operator-marketplace/pull/601)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a1e906724ed6d88161f8faaa90e4fe447689725...c06a810b321ad79ef572ce36ed935332a58ea319)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/aeea3396792eb20e7caa8e7f67d19a1be7889512)

* [OCPBUGS-57108](https://issues.redhat.com/browse/OCPBUGS-57108): Fix hybrid overlay node subnets collision with cluster subnets [#2619](https://github.com/openshift/ovn-kubernetes/pull/2619)
* [OCPBUGS-57106](https://issues.redhat.com/browse/OCPBUGS-57106): Increase InformerSyncTimeout to 60s [#2622](https://github.com/openshift/ovn-kubernetes/pull/2622)
* [OCPBUGS-55016](https://issues.redhat.com/browse/OCPBUGS-55016): DownStream Merge Sync from 4.19 [05-08-2025] [#2555](https://github.com/openshift/ovn-kubernetes/pull/2555)
* [OCPBUGS-54671](https://issues.redhat.com/browse/OCPBUGS-54671): EIP no reroute: allow multiple entries for pod to pod and pod to join [#2510](https://github.com/openshift/ovn-kubernetes/pull/2510)
* [OCPBUGS-54187](https://issues.redhat.com/browse/OCPBUGS-54187): Update OVN to FDP25.A.1 24.09.2-41. [#2495](https://github.com/openshift/ovn-kubernetes/pull/2495)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/799f96146c2056a50ae8252a87c03de1cc698f13...aeea3396792eb20e7caa8e7f67d19a1be7889512)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/10ac06f57bface0b3481e111c4e1d5b7f52db7f4)

* [OCPBUGS-54243](https://issues.redhat.com/browse/OCPBUGS-54243): Fix for  CVE-2024-51744 in github.com/golang-jwt/jwt/v4 [#111](https://github.com/openshift/machine-api-provider-powervs/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/e253fa30d99bb7ed00c1f27ca3d810fa682a1901...10ac06f57bface0b3481e111c4e1d5b7f52db7f4)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/35c1136915f7a6896dfcb479e1f686fd18542856)

* append .0 to go.mod version [#380](https://github.com/openshift/prom-label-proxy/pull/380)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/d9fe2d8ebc1b311be71172676d61710fd5c7400b...35c1136915f7a6896dfcb479e1f686fd18542856)


### [prometheus](https://github.com/openshift/prometheus/tree/df5ef25778ad5949c637beae1b9c303b4c044302)

* [OCPBUGS-56732](https://issues.redhat.com/browse/OCPBUGS-56732): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#253](https://github.com/openshift/prometheus/pull/253)
* [OCPBUGS-54940](https://issues.redhat.com/browse/OCPBUGS-54940): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#247](https://github.com/openshift/prometheus/pull/247)
* [Full changelog](https://github.com/openshift/prometheus/compare/8de8eb11dfe734331762bc8d4839ec3b47084743...df5ef25778ad5949c637beae1b9c303b4c044302)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/a432067579aaa60326a104f4ce2eba18e1ab444c)

* append .0 to go.mod version [#101](https://github.com/openshift/prometheus-alertmanager/pull/101)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e513c918214acfa6f60ba5ab3e107f57fd3df156...a432067579aaa60326a104f4ce2eba18e1ab444c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/74987748a60f14816975fa1070ce485393a38f64)

* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump openshift/prometheus-operator to v0.78.2 [#327](https://github.com/openshift/prometheus-operator/pull/327)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ede3c1406e70f359c76c1403a2b14bc60ad386bf...74987748a60f14816975fa1070ce485393a38f64)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/92e17ff5c45807198adc8b59f5b3f63a9b7f1726)

* append .0 to go.mod version [#166](https://github.com/openshift/node_exporter/pull/166)
* [Full changelog](https://github.com/openshift/node_exporter/compare/b7efb8c0f7d45f4ccb9120d4bcfb60ebe721ed69...92e17ff5c45807198adc8b59f5b3f63a9b7f1726)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)

* [OCPBUGS-55338](https://issues.redhat.com/browse/OCPBUGS-55338): Added error event for failed ingress to route conversion [#59](https://github.com/openshift/route-controller-manager/pull/59)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/07daee4d2f0b5c7aaca56ee45ff6dfdf97680db0...ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/30efb529a5b7db5d6f352f6ac0470d8385268539)

* [OCPBUGS-44952](https://issues.redhat.com/browse/OCPBUGS-44952): [release-4.18] Bump go to 1.22.0 [#253](https://github.com/openshift/service-ca-operator/pull/253)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1f7d6472fea332fc307d9c8911f8c3cf57347755...30efb529a5b7db5d6f352f6ac0470d8385268539)


### [telemeter](https://github.com/openshift/telemeter/tree/490612bdaa6412762403c8eee902c20f033ca5aa)

* append .0 to go.mod version [#561](https://github.com/openshift/telemeter/pull/561)
* [Full changelog](https://github.com/openshift/telemeter/compare/700802fe29aba4ed602309f0c68222c4bedb08f5...490612bdaa6412762403c8eee902c20f033ca5aa)


### [tests](https://github.com/openshift/origin/tree/ccbb9ec05f1c86328c0d6e0db1eafd38bc62ba4c)

* [OCPBUGS-57329](https://issues.redhat.com/browse/OCPBUGS-57329): Fix failed tests of e2e-aws-ovn-tls-13 [#29911](https://github.com/openshift/origin/pull/29911)
* [OCPBUGS-56995](https://issues.redhat.com/browse/OCPBUGS-56995): Fix bearer token exposure in exit condition as well [#29882](https://github.com/openshift/origin/pull/29882)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#29871](https://github.com/openshift/origin/pull/29871)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates tests [#29894](https://github.com/openshift/origin/pull/29894)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport watch count tracking fixes to 4.18 [#29725](https://github.com/openshift/origin/pull/29725)
* [OCPBUGS-55667](https://issues.redhat.com/browse/OCPBUGS-55667): aws/edge: prevent test using unschedulable nodes [#29750](https://github.com/openshift/origin/pull/29750)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#29765](https://github.com/openshift/origin/pull/29765)
* [OCPBUGS-50628](https://issues.redhat.com/browse/OCPBUGS-50628): [test: networking] Skip isolation test when cgroupv1 nodes are present [#29541](https://github.com/openshift/origin/pull/29541)
* [OCPBUGS-55470](https://issues.redhat.com/browse/OCPBUGS-55470): [build] Ensure Git Clone Does Not Run Privileged [#29736](https://github.com/openshift/origin/pull/29736)
* Revert "OCPBUGS-55277: backport 4.18" [#29720](https://github.com/openshift/origin/pull/29720)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport 4.18 [#29645](https://github.com/openshift/origin/pull/29645)
* [OCPBUGS-55110](https://issues.redhat.com/browse/OCPBUGS-55110): Backport `MetricsCollectionProfiles` patches to 4.18 [#29561](https://github.com/openshift/origin/pull/29561)
* [OCPBUGS-54807](https://issues.redhat.com/browse/OCPBUGS-54807): support provider type external [#29666](https://github.com/openshift/origin/pull/29666)
* [OCPBUGS-54725](https://issues.redhat.com/browse/OCPBUGS-54725): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29657](https://github.com/openshift/origin/pull/29657)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): bump(k8s): update k8s.io/* dependencies to v1.31.7 [#29634](https://github.com/openshift/origin/pull/29634)
* [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): use non-fake boot image for patch [#29584](https://github.com/openshift/origin/pull/29584)
* [OCPBUGS-52579](https://issues.redhat.com/browse/OCPBUGS-52579): Use payload pullspec for image info test [#29587](https://github.com/openshift/origin/pull/29587)
* [Full changelog](https://github.com/openshift/origin/compare/c89253a2124ee5f90bfbf92b05085ae596e85a23...ccbb9ec05f1c86328c0d6e0db1eafd38bc62ba4c)


### [thanos](https://github.com/openshift/thanos/tree/f1599f65c5fd652150821ae954d563747a649b53)

* [OCPBUGS-52945](https://issues.redhat.com/browse/OCPBUGS-52945): Update Go version in go.mod to 1.22.0 [#159](https://github.com/openshift/thanos/pull/159)
* [Full changelog](https://github.com/openshift/thanos/compare/314589cf9b4e86507634ab3406deb08402fa7af9...f1599f65c5fd652150821ae954d563747a649b53)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2b241410a972898f0ce80dec3bfdf4f974721937)

* [OCPBUGS-54701](https://issues.redhat.com/browse/OCPBUGS-54701): add manifest-topology.yaml for topology related feature and test [#303](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/303)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/b8ed572d70acddd695a769fac3d1ba93f168fd05...2b241410a972898f0ce80dec3bfdf4f974721937)