# 4.18.22

Created: 2025-08-07 10:48:06 +0000 UTC

Image Digest: `sha256:16078b671c7f5490a2136f2cd9a694d48bb38af1280ef9e2ae9ce28af075cca5`


## Changes from 4.18.8

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.7 to 1.31.11
* Kubernetes Tests upgraded from 1.31.6 to 1.31.10
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202504021150-0 to 418.94.202508060022-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| OnClusterBuild <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:fd95a5306250c1afe166eb784b1f63a8bd987b53b47e5cd0277093ea46ea09a4`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b51cd6b8](https://github.com/openshift/aws-ebs-csi-driver/commit/b51cd6b8e54d5682cf5491a9eb5af1570261a409) `sha256:cceb20fec1368c3396607f2d9c6fa1a8c01b0761f310a81c4cda4967ea58be77`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:dc30f3768f97ac1c0a50fff0c0f53548c8b4f772b2dc300d8254781b20c60348`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [53274f11](https://github.com/openshift/machine-api-provider-aws/commit/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08) `sha256:8f4260f9df4efdddf66fc8f525c563b6e1f630667f3ef381110b910d8833031f`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [f54f9a19](https://github.com/openshift/aws-pod-identity-webhook/commit/f54f9a19adb43b395a880ca046aed0841466c28d) `sha256:8301a218a6ca83ddc65b28adb6cc65829e52e5fa4add482af7882ccd5018c88d`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:7915c08e53643a1266646c8fc7560d8ee61764113aa1cdaf81a3d159e58d3220`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:626d9b08760778e0059f58fddaa76bb6593ce2cf3882bc878267c2e48873ac31`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [987615c8](https://github.com/openshift/cluster-api-provider-azure/commit/987615c80bfa65a5c70fbed3ff06e405ef6d88ed) `sha256:ebad4d5b8610de54f8eb27623103c6ecf3b9d8ea12869bfe758e40bd8169a006`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:c6e47395c00d8f8a675bb9d6aaddeeb360acc4756cb0a2228844098dfedc2579`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:0ea599104ec6e5c25e90d22dcac633a4bccc8d14ee414cdfb96be12453fab78b`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [f60e4029](https://github.com/openshift/azure-workload-identity/commit/f60e4029d64de202e81d2cd114f8a90dc0a1878e) `sha256:7429a1c395912eef00406e3ede18a51ea982376b1e61b4ebb335bffa949d9f1b`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [7ec03e94](https://github.com/openshift/cluster-api-provider-metal3/commit/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec) `sha256:4d5f3769caa8b237cd0406e3aefac78213af5ace0b21017747bd4adbbf5b3e0f`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:2214bebc9e442bbf8eb01ef58d485801d866927bd6644edc4082a23366d52a01`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:b1e5640a179f6dba28384bff096ae82ecd1ba0123dd7f81531b5b49e3f5c32e6`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [e30ce1d8](https://github.com/openshift/cluster-baremetal-operator/commit/e30ce1d8ca759e861e5094e8b3665d1da6d3474f) `sha256:a99b5ce46f903e15f3f53402c2a351e68a6a249421bd63ce69bae0f7c384aab8`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:68108451088cd3efcc5ab748615367681643e091aa6cb747d7959c536ec14c03`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [33856906](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/33856906970a98ac05a042a8058902458d623e0f) `sha256:d2cad13c9c4d587181aa5a31c25682ab695d88ec3a1899533e2655b2a6c3fadc`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [85cb4072](https://github.com/openshift/cluster-config-operator/commit/85cb40728227fac13a2983fb6e3170d67cf62075) `sha256:0f8ef599978cc9e66efaa6e74e5178888980d045f207c1198fc8975c46d508ad`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:b01792155779adf97efcbb05d4d14a5ef813a02299dc1ecdd7dc24df4e1a436c`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:a3daa76e838960fb36bc98e1358f87822a325c9444c0d37841215096c904d0dc`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [7cafd0c7](https://github.com/openshift/cluster-dns-operator/commit/7cafd0c7dca2edb154b8444602b600b5901afeba) `sha256:b683c68fee4cef08250557d1cfdbb11ee3f91324f7305e56351ee1ef526c3b08`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [d967a73c](https://github.com/openshift/cluster-ingress-operator/commit/d967a73c5f7da76783ee1af093f21817e7681e1d) `sha256:eae420e7e1fc2cdc729e294dc3695c724a8ccb8c27c7dbcc857434eb57025d68`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [33a1141e](https://github.com/openshift/cluster-api-operator/commit/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd) `sha256:6555ef7e0936ccd0b64fa2c3180cd54ecabfe8069b695803a2b5abebf3f61404`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0fac9aa9](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1) `sha256:21e3fb7b9537ea1b3d9b342a58a49e07411ad4f27327ee0aaeb5b62b85a581b6`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [6182930d](https://github.com/openshift/cluster-kube-scheduler-operator/commit/6182930dde5ec8dd22bd50481e8b369ce673484c) `sha256:8a73a50bc380ca50eeb086a04c0384462f97fc15bdf73481881b0aa46482f1a7`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:a2ac6b14cf6d25992db3f74983686c540971c5eec56c6f805e1baddfdd0a76cb`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:5996af3997b8a9451eafb2922cf26d6466747fe860f2ac73c7aa31af44e96e62`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:1ad9868a97694f8ad0c926415921e28026010b4ad2f88800becb012f555bb73b`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:c6e260d7766f48e3997a89ba2473f50c9208917aadd554734b58bd068a21aa5e`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:f0ca7da7faa875dfccd94d60dabde474cedcb9858bea0f3c11c9fa54e2fe5b45`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [65d06444](https://github.com/openshift/cluster-storage-operator/commit/65d06444110f8044a84ccf4f977ee9520f2bdf89) `sha256:ec89d27849fb2377c123e84e32f32e06f98cb7cc318fb6f65a3a6fd3eebf7477`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:8ed5b1993a4fe3a44836257e322c7ccb0173e70dfa2ec09c4f28d864a460b295`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [39b37c06](https://github.com/openshift/csi-external-attacher/commit/39b37c06a27481c708f071464bd1049ea7db97c7) `sha256:79d5ba3d785ec600ccc10dbb3f40948ecf7c110389bf5160a9288a7883799b4c`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [376f0ea0](https://github.com/openshift/csi-external-provisioner/commit/376f0ea04c64a41cb5166ff415fff849ff2da380) `sha256:94bc0b1adc2c105f3553dcb5f77984505cbb8eace24e194a61d7e8591d4bb46d`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [cca3837a](https://github.com/openshift/csi-external-resizer/commit/cca3837a84fcade22bd7b935c68d02904faa12aa) `sha256:2e41bdbf1bcf6f9eae7257dfa24751b870aa243f3c0c68f7ae8d5e2f7e674862`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:5ace12616490bb4efb2ce56d2855f18d0b28f425f932deeddc691fa44567114a`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:de848f50d0e52d45c2fe7ac01e82db0f5b2dad7508744bd3f5a7882c069978ff`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c21f5d02](https://github.com/openshift/csi-node-driver-registrar/commit/c21f5d02b498e9e49d94818f4ad3eaaae77ca161) `sha256:ae3353543e467f3b86a23d0a9a766eeb06d0836832f898f73bf8c283557ceee6`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:ffe18aa1a9a1647a0a0205d5c9b51e6ff9f1ca4f6a08f125604309fff8e0b9bf`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:5540a8b13f271a2ae060024e053f76b91e59a683803e631f8f4e5a279988c999`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:cb1a510f7f57e4fba974988b9a83aaf3134d661d59444d96760ae4038cab815a`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:6cb5563d474212747328d75017ae6e9ee69c124901a0177956cec167f495ee5c`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:98e453cbfce1788a7802e697db2bc09b8d90d45209da90059e203593a8c627dd`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [af54f528](https://github.com/openshift/cluster-api-provider-gcp/commit/af54f5287c7d363c6bc7abe4ad9e72f4131d534c) `sha256:06f0d76919f543e69304e3e0b4a1f301db4aa844668df27eb38dbe5ef47c031a`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01f6b419](https://github.com/openshift/machine-api-provider-gcp/commit/01f6b419357a539389704fcec9872997f808e540) `sha256:0b71dd315cb91a5d460cf7624d65f8f5fa0171ea81f8a925b469a21353091f79`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1b8c94ac](https://github.com/openshift/gcp-pd-csi-driver/commit/1b8c94ac55d8602ba6669325ade654ae47ea74cf) `sha256:635700da8a0d7fa59cbc68e81c9f8b954a164c30202f64c52ed02e78c4a31997`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cb8b38c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb) `sha256:b8a61a95cb32248efd744a1c21f4f5a498b6c908e6630124c59d8315dfbb9d47`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:74333982ed170be6e9cd85ec96c288922b5cdd9b3f9d16a64ff554a1872a4016`
* [haproxy-router](https://github.com/openshift/router) git [d8058949](https://github.com/openshift/router/commit/d8058949aaf91dcdea050c58e6a34ef5f6670c67) `sha256:d30891f814376499ccf499aef3057b068fb1a6393ec33064de4496aadf52db2c`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:df776698ad2d9f9bfcdd16f84dd0e8c69bbcc60f8833da6e13953bf963bcb351`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [2ba764f9](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/2ba764f9a38c27f82a9198472c584fa633c8f2cd) `sha256:a2fd35d3add28eda58fae47d21c2fa6ef924752ba4ee4b5805e39d322eeea229`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:63656537c241aa165766d0c2390e44ed04ad1b146644cb777d806eec49ae1d2d`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:154ab405b2211689a905cf92544a619ca1d898ee265623ff4492a61e192d6a39`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:9e817b121698d27ce693b371e783355c8e5b0359eafcafbe280ee30bef269081`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:2a3c6df69b429e118fa16442771ac24fcbda8799889cd7b63df9f8bc322c11ac`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [962ccca2](https://github.com/openshift/kubernetes-metrics-server/commit/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf) `sha256:107f2befca5600d9a58d9a6f5b601a55d2131c131dbff35b55180692d1e4415d`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [526498ab](https://github.com/openshift/kube-rbac-proxy/commit/526498ab32996a0f67a96530ad7173f955e3fbe2) `sha256:5f30df379051fbcaf125db6b14b44215b0d70bb2e869f48fa246c190f422d1a9`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [cb5a9296](https://github.com/openshift/kube-state-metrics/commit/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61) `sha256:95775cea855a1b6cd1e93d7e0155f195c6b5fb2162f97b5210905198f3af90b1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:7ea740609018d6e9ef08e547ad9bdfb33380acd08744375ff7c1cc7e20d70a40`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:c63d6543572d69953e7363fd89df416b18c3186db3332a85c1d2ed60cf27770f`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:4e98aeba10d04cbf2b6c8055f8f0b71acc1b4d952812f3f7d6c9de419d66e30e`
* [multus-cni](https://github.com/openshift/multus-cni) git [21fb8e05](https://github.com/openshift/multus-cni/commit/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d) `sha256:8c207d06b98ecbc6718402e39027c1d42acd691c47a075f097426165d4725422`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [21fb8e05](https://github.com/openshift/multus-cni/commit/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d) `sha256:72f341839a83ef0926e279e74a203de689e16088e8327fa43fcff1055a04b74f`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:41d314230a0a51f272cb88215ae65a8aec0f4dc3c32834fb433d948b28361ac4`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:cff1e642a05b5589a0afa9eeda7e51395c380fa38626b7ba66cc00fb6ca0584c`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [2575ff41](https://github.com/openshift/oauth-apiserver/commit/2575ff417406ea6680aff0de6efb524dbbe2b8d2) `sha256:af95fce1813f871761013534ec7f5107b40a01f08e57270079b8debcc8ebe7aa`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [d914e77e](https://github.com/openshift/machine-api-provider-openstack/commit/d914e77ee67211024153b1535e8709c3cf190512) `sha256:6b0d03c5b86e0ca291665f381b601c1c3647b1cfc76de944e1acb0de43632944`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:9b6d7d519f9170e7975a700ed9fa62798d9bcabbd45d4383d67a227080399c3f`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:e56b6de23d5c5ccd4b355484ebfa09566450b05cdf728bf7bd921c0ef261c59e`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [d36aea34](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/d36aea34452210f988f74e93e0640318f3db1938) `sha256:18826aab1d94285b48dd33aff59af05b640af4ec9e6dd81967aa31efd213e933`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [01fc505a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/01fc505abcf3b83bba284a00258b6761a9b7ce8a) `sha256:b7daac41ec42e1425a9a88f2e42663388b078c2c0ef6471097984dca8c64034f`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [17ae6fba](https://github.com/openshift/cloud-provider-powervs/commit/17ae6fba6eda58aa0d91f162206386105dff9962) `sha256:67ec61d3ebb0292ae99b5bb0d1d991fa754b56953223674d44ca900866359fce`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [74987748](https://github.com/openshift/prometheus-operator/commit/74987748a60f14816975fa1070ce485393a38f64) `sha256:cfe1f52111cf50bef03a79a9d84e0638710b2b30d2ead6cff9ccb93493c000dc`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [74987748](https://github.com/openshift/prometheus-operator/commit/74987748a60f14816975fa1070ce485393a38f64) `sha256:77e2b24bce1c4e8777ce42cd3c9237c9dcbf21bfd7dcd9ba1692992c24805f9b`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [74987748](https://github.com/openshift/prometheus-operator/commit/74987748a60f14816975fa1070ce485393a38f64) `sha256:3e4d4dac7804d050e4c74926dd3d1a5429dbb31e5e9ce870d7aabd5fd0b29683`
* rhel-coreos `sha256:cbe2965ad3a408286fe06e4a7a58e006621f33847c17f8e8ff84504dbeebe666`
* rhel-coreos-extensions `sha256:1eb66a0c23f881185553df20703775307758014b747dcd82922e23eeb9a5beda`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [30efb529](https://github.com/openshift/service-ca-operator/commit/30efb529a5b7db5d6f352f6ac0470d8385268539) `sha256:18f52bc576b187ce36d889f3b4a61cfb5b59a53f70daa5a3da71e7d0cf1b2712`
* [thanos](https://github.com/openshift/thanos) git [f1599f65](https://github.com/openshift/thanos/commit/f1599f65c5fd652150821ae954d563747a649b53) `sha256:ff52dee2993903d202453fc269e706abc58627b1df6be6b7474c0fe2ddd12543`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [c414d1f5](https://github.com/openshift/cloud-provider-vsphere/commit/c414d1f5b0d910300cafda742aca146d41fce98a) `sha256:9b1c59711cc82b9ec33d38a7e346ef838ac8dfdef6518098e7ab5cf667d420e1`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [d664fe2b](https://github.com/openshift/cluster-api-provider-vsphere/commit/d664fe2b56964a5320057ac8c7b7fd4b50045851) `sha256:26aedb0559559a0d534e78710a1bf0e827c628ccef74f0ec435a47967e1ff603`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:4375ef9b620ef2f92ea27ce37dbbb93297f91a64640d33f9c4c8bcfabb29440b`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:8e81f48d540abddb2bf6a895fc39cf43810dbdc2a1410cf7901a96013a488ed8`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [7cf7fe24](https://github.com/openshift/vsphere-problem-detector/commit/7cf7fe24116aa9515a6fbcef3fb85567e19d21b4) `sha256:01d66ed1ec6000f843247e3268776a3ef2c6e841967065faa5204fee82f81da9`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bb74f0ad324ba24c300d0b4f08519d0cc250c1c5)

* [OCPBUGS-58635](https://issues.redhat.com/browse/OCPBUGS-58635), [OCPBUGS-58640](https://issues.redhat.com/browse/OCPBUGS-58640): Bump glog to v1.2.5 in release-4.18 (#7877) [#7877](https://github.com/openshift/assisted-service/pull/7877)
* [OCPBUGS-56596](https://issues.redhat.com/browse/OCPBUGS-56596): Include AdditionalTrustBundlePolicy in installConfig (#7751) [#7751](https://github.com/openshift/assisted-service/pull/7751)
* [OCPBUGS-47627](https://issues.redhat.com/browse/OCPBUGS-47627): dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) [#7257](https://github.com/openshift/assisted-service/pull/7257)
* [Full changelog](https://github.com/openshift/assisted-service/compare/9346359925bec817c0a193f5ff59b9c5a6616594...bb74f0ad324ba24c300d0b4f08519d0cc250c1c5)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/81d6bc2771d3d34de3c364e349ca7f2983e454a2)

* [OCPBUGS-58650](https://issues.redhat.com/browse/OCPBUGS-58650): Bump glog pkg to 1.2.4 (#1181) [#1181](https://github.com/openshift/assisted-installer/pull/1181)
* [OCPBUGS-53721](https://issues.redhat.com/browse/OCPBUGS-53721): Bump jwt to 4.5.2 in release-4.18 (#1085) [#1085](https://github.com/openshift/assisted-installer/pull/1085)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/8bb42ac9fd9624f86c97c4422bd5f982251e5d91...81d6bc2771d3d34de3c364e349ca7f2983e454a2)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb)

* [OCPBUGS-58655](https://issues.redhat.com/browse/OCPBUGS-58655), [OCPBUGS-58660](https://issues.redhat.com/browse/OCPBUGS-58660): Bump glog to v1.2.5 in release-4.18 (#1069) [#1069](https://github.com/openshift/assisted-installer-agent/pull/1069)
* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#958) [#958](https://github.com/openshift/assisted-installer-agent/pull/958)
* [MGMT-20227](https://issues.redhat.com/browse/MGMT-20227): Skip Motherboard serial if set to "-" (#955) (#957) [#955](https://github.com/openshift/assisted-installer-agent/pull/955)
* [OCPBUGS-54544](https://issues.redhat.com/browse/OCPBUGS-54544): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) [#965](https://github.com/openshift/assisted-installer-agent/pull/965)
* [OCPBUGS-53713](https://issues.redhat.com/browse/OCPBUGS-53713): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) [#963](https://github.com/openshift/assisted-installer-agent/pull/963)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/593c9c284e43fd00095cfdf3f55b9017f4104663...32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)

* append .0 to go.mod version [#109](https://github.com/openshift/agent-installer-utils/pull/109)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d...0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/2f62712d5db70df25490361749e93a552ffb5a24)

* append .0 to go.mod version. [#81](https://github.com/openshift/apiserver-network-proxy/pull/81)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/0e116160848d1eb189c5b5f77330f36e20c7e450...2f62712d5db70df25490361749e93a552ffb5a24)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/d631c2245d9481500627297244464f553d787782)

* [OCPBUGS-58670](https://issues.redhat.com/browse/OCPBUGS-58670), [OCPBUGS-58675](https://issues.redhat.com/browse/OCPBUGS-58675): bump github.com/golang/glog to v1.2.5 [#556](https://github.com/openshift/cluster-api-provider-aws/pull/556)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to use v1 admissionregistration group [#554](https://github.com/openshift/cluster-api-provider-aws/pull/554)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9...d631c2245d9481500627297244464f553d787782)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cdc9d6499cd5020d96811fd02bde14d4d06786cc)

* [OCPBUGS-54383](https://issues.redhat.com/browse/OCPBUGS-54383): Disable remove-not-ready-taint for azure disk csi driver [#374](https://github.com/openshift/csi-operator/pull/374)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a95f8b365dda90ca1cb9d85a13c84670f6200cff...cdc9d6499cd5020d96811fd02bde14d4d06786cc)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/c937080f51cec58650daa15805be548d09310c64)

* [OCPBUGS-53497](https://issues.redhat.com/browse/OCPBUGS-53497): bump golang-jwt v4 [#11](https://github.com/openshift/azure-kubernetes-kms/pull/11)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...c937080f51cec58650daa15805be548d09310c64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/457dead4a58293dec7fb7854e14640c10cf69278)

* [OCPBUGS-56167](https://issues.redhat.com/browse/OCPBUGS-56167): [release-4.18] Update virtualmachines service to armcompute/v5 SDK [#145](https://github.com/openshift/machine-api-provider-azure/pull/145)
* [OCPBUGS-56654](https://issues.redhat.com/browse/OCPBUGS-56654): Fix failure when attempting to modify immutable availabilitySet [#153](https://github.com/openshift/machine-api-provider-azure/pull/153)
* [OCPBUGS-55373](https://issues.redhat.com/browse/OCPBUGS-55373): Update eviction policy for Spot VMs from Deallocate to Delete [#139](https://github.com/openshift/machine-api-provider-azure/pull/139)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b8bc2053066bace662f5fece646be7ea76bc3c72...457dead4a58293dec7fb7854e14640c10cf69278)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/9094202399a3ac62bbdc22f755c6995545f3089e)

* [OCPBUGS-56177](https://issues.redhat.com/browse/OCPBUGS-56177), [OCPBUGS-59155](https://issues.redhat.com/browse/OCPBUGS-59155), [OCPBUGS-59158](https://issues.redhat.com/browse/OCPBUGS-59158): Migrate AWS SDK to V2 to support MX-Central Region [#9709](https://github.com/openshift/installer/pull/9709)
* [OCPBUGS-58321](https://issues.redhat.com/browse/OCPBUGS-58321): allow to deploy single nodes with UPI [#9824](https://github.com/openshift/installer/pull/9824)
* [OCPBUGS-54744](https://issues.redhat.com/browse/OCPBUGS-54744): Filter out excess CA certs when adding node [#9647](https://github.com/openshift/installer/pull/9647)
* [OCPBUGS-58264](https://issues.redhat.com/browse/OCPBUGS-58264): vSphere - remove unit tests using nip.io [#9813](https://github.com/openshift/installer/pull/9813)
* [OCPBUGS-56797](https://issues.redhat.com/browse/OCPBUGS-56797): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9747](https://github.com/openshift/installer/pull/9747)
* [OCPBUGS-57139](https://issues.redhat.com/browse/OCPBUGS-57139): ensure ctrplane nodes can access bootstrap MCS [#9772](https://github.com/openshift/installer/pull/9772)
* [OCPBUGS-57220](https://issues.redhat.com/browse/OCPBUGS-57220): sort zone slices extracted from map of byo subnets [#9774](https://github.com/openshift/installer/pull/9774)
* [OCPBUGS-56864](https://issues.redhat.com/browse/OCPBUGS-56864): Update Control Plane replica validation for Single Node OpenShift [#9758](https://github.com/openshift/installer/pull/9758)
* [OCPBUGS-50690](https://issues.redhat.com/browse/OCPBUGS-50690): vsphere - check if host is powered down or on standby before uploading template [#9468](https://github.com/openshift/installer/pull/9468)
* [OCPBUGS-53142](https://issues.redhat.com/browse/OCPBUGS-53142): PowerVS: COS eu-es hack [#9626](https://github.com/openshift/installer/pull/9626)
* [OCPBUGS-50840](https://issues.redhat.com/browse/OCPBUGS-50840): Fix panic when there are no available IPs [#9479](https://github.com/openshift/installer/pull/9479)
* [OCPBUGS-55794](https://issues.redhat.com/browse/OCPBUGS-55794): IBI nmstate unit test fix [#9692](https://github.com/openshift/installer/pull/9692)
* [OCPBUGS-54947](https://issues.redhat.com/browse/OCPBUGS-54947): Fix Load balancer IP setup [#9659](https://github.com/openshift/installer/pull/9659)
* [OCPBUGS-45564](https://issues.redhat.com/browse/OCPBUGS-45564): Align vSphere UPI haproxy config with IPI [#9276](https://github.com/openshift/installer/pull/9276)
* [Full changelog](https://github.com/openshift/installer/compare/d765baafafd7093c4a68e4cf96c9affb3839a109...9094202399a3ac62bbdc22f755c6995545f3089e)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/45c6255cafc5633d1ab6b9460ececa5c9197cce8)

* [OCPBUGS-56766](https://issues.redhat.com/browse/OCPBUGS-56766): Make firmware update handle only a subset of `Spec.Updates` [#421](https://github.com/openshift/baremetal-operator/pull/421)
* [OCPBUGS-56431](https://issues.redhat.com/browse/OCPBUGS-56431): Redfish: correctly handle missing system ID [#417](https://github.com/openshift/baremetal-operator/pull/417)
* [OCPBUGS-53324](https://issues.redhat.com/browse/OCPBUGS-53324): BMO can expose any secret via BMCEventSubscription CRD [#405](https://github.com/openshift/baremetal-operator/pull/405)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/20646c92b5f1c2a7b49fe12effee0b3c74df8058...45c6255cafc5633d1ab6b9460ececa5c9197cce8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/7145e606c7aec1966be90d7f8cd1083886b9afc8)

* [OCPBUGS-59280](https://issues.redhat.com/browse/OCPBUGS-59280): Bump logrus version [#354](https://github.com/openshift/baremetal-runtimecfg/pull/354)
* [OCPBUGS-57782](https://issues.redhat.com/browse/OCPBUGS-57782): iptables: Switch PREROUTING REDIRECT rule to DNAT instead [#351](https://github.com/openshift/baremetal-runtimecfg/pull/351)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9e2015c30f48013e895eb8dfc43695780e0d9162...7145e606c7aec1966be90d7f8cd1083886b9afc8)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/4fcb2d07875f05d881ac90af73723db0ae5b1d6e)

* [OCPBUGS-58233](https://issues.redhat.com/browse/OCPBUGS-58233): Return error in case of error [#2054](https://github.com/openshift/oc/pull/2054)
* [OCPBUGS-57507](https://issues.redhat.com/browse/OCPBUGS-57507): avoid transfering permissions when copying artifacts from node-joiner pod [#2039](https://github.com/openshift/oc/pull/2039)
* [OCPBUGS-56240](https://issues.redhat.com/browse/OCPBUGS-56240): Adding sos.conf file for default sos config into the tools image [#2021](https://github.com/openshift/oc/pull/2021)
* [OCPBUGS-55449](https://issues.redhat.com/browse/OCPBUGS-55449): Get installer image from configMap for node-image command [#2013](https://github.com/openshift/oc/pull/2013)
* [OCPBUGS-55647](https://issues.redhat.com/browse/OCPBUGS-55647): Use fedora image in unit tests instead of centos [#2014](https://github.com/openshift/oc/pull/2014)
* [Full changelog](https://github.com/openshift/oc/compare/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64...4fcb2d07875f05d881ac90af73723db0ae5b1d6e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/e8b05b4b7c1cc48bb7af86860494f5369bba0455)

* [OCPBUGS-58680](https://issues.redhat.com/browse/OCPBUGS-58680): github.com/golang/glog v1.2.5 [#891](https://github.com/openshift/cloud-credential-operator/pull/891)
* [OCPBUGS-58247](https://issues.redhat.com/browse/OCPBUGS-58247): ccoctl: only add owned tag to azure resources on create [#882](https://github.com/openshift/cloud-credential-operator/pull/882)
* [OCPBUGS-56979](https://issues.redhat.com/browse/OCPBUGS-56979): Azure: resolve nil pointer exception when role assignment exists [#869](https://github.com/openshift/cloud-credential-operator/pull/869)
* [OCPBUGS-54827](https://issues.redhat.com/browse/OCPBUGS-54827): Render: configure proxy on bootstrap static pod [#862](https://github.com/openshift/cloud-credential-operator/pull/862)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/ce6f538dfe49e534886321899dbbe2b4b65fc2c7...e8b05b4b7c1cc48bb7af86860494f5369bba0455)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/beacfbc2f2afa651616ad1c3c6712c511318a8d4)

* [OCPBUGS-56156](https://issues.redhat.com/browse/OCPBUGS-56156): Increase API call timeout to 30 second [#170](https://github.com/openshift/cloud-network-config-controller/pull/170)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f648c78dba768619f0c6e2120132ee1aeefb8571...beacfbc2f2afa651616ad1c3c6712c511318a8d4)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/882f8799b8a550605e4812479272691de3f5c0d2)

* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups [#754](https://github.com/openshift/cluster-authentication-operator/pull/754)
* [OCPBUGS-54569](https://issues.redhat.com/browse/OCPBUGS-54569): Avoid duplicate OAuth client creation [#764](https://github.com/openshift/cluster-authentication-operator/pull/764)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e8c7c47e485a54cd8e2fc0ece74bd110c190e3c9...882f8799b8a550605e4812479272691de3f5c0d2)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/a17340a4e2987a66a028964fb429244ee0e844c1)

* [OCPBUGS-59260](https://issues.redhat.com/browse/OCPBUGS-59260): Fix cool down status condition to trigger scale down [#361](https://github.com/openshift/kubernetes-autoscaler/pull/361)
* [OCPBUGS-53241](https://issues.redhat.com/browse/OCPBUGS-53241): improve replica counting and decrease target size behavior [#346](https://github.com/openshift/kubernetes-autoscaler/pull/346)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...a17340a4e2987a66a028964fb429244ee0e844c1)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)

* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to leverage v1 admissionregistration group [#241](https://github.com/openshift/cluster-api/pull/241)
* [Full changelog](https://github.com/openshift/cluster-api/compare/d05a6defdc3602918de8db0f93744ca8f6b2b820...63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/2f2737e1ed649009eef31c19ffff7468b67de32d)

* [OCPBUGS-56919](https://issues.redhat.com/browse/OCPBUGS-56919): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#308](https://github.com/openshift/cluster-capi-operator/pull/308)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Should not use v1beta1 of the AdmissionRegistration API group [#298](https://github.com/openshift/cluster-capi-operator/pull/298)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4e26a69d2740029b37469c5677a5ed0f129eed8f...2f2737e1ed649009eef31c19ffff7468b67de32d)


### [cluster-config-api](https://github.com/openshift/api/tree/c86d80652a9ed6a3a6b35d9d81c06aaeb723f8e1)

* : add OnClusterBuilds to default config [#2365](https://github.com/openshift/api/pull/2365)
* Merge [#2316](https://github.com/openshift/api/pull/2316)
* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Add IPsec API for NAT-T UDP encapsulation support [#2331](https://github.com/openshift/api/pull/2331)
* [OCPBUGS-55792](https://issues.redhat.com/browse/OCPBUGS-55792): [release-4.18] config: add uid and extra claim mappings for external OIDC configuration [#2311](https://github.com/openshift/api/pull/2311)
* [OCPBUGS-53221](https://issues.redhat.com/browse/OCPBUGS-53221): Allow spaces in AWS resource tags [#2239](https://github.com/openshift/api/pull/2239)
* [OCPBUGS-54784](https://issues.redhat.com/browse/OCPBUGS-54784): [release-4.18] Bump openshift/controller-tools to latest commit [#2267](https://github.com/openshift/api/pull/2267)
* [Full changelog](https://github.com/openshift/api/compare/e7f23be12279d3c245c013c234f967e5ccb426e2...c86d80652a9ed6a3a6b35d9d81c06aaeb723f8e1)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/8460bede0e45549f1cf03c85c69380b18de44a08)

* [OCPBUGS-59803](https://issues.redhat.com/browse/OCPBUGS-59803): add missing ports to svc and pod spec [#1455](https://github.com/openshift/cluster-etcd-operator/pull/1455)
* [OCPBUGS-56834](https://issues.redhat.com/browse/OCPBUGS-56834): etcd pod containers do not start when tls min version is 1.3 [#1428](https://github.com/openshift/cluster-etcd-operator/pull/1428)
* [OCPBUGS-56110](https://issues.redhat.com/browse/OCPBUGS-56110): adjust alerts according to platform [#1424](https://github.com/openshift/cluster-etcd-operator/pull/1424)
* [OCPBUGS-53513](https://issues.redhat.com/browse/OCPBUGS-53513): fix CVE-2025-30204 [#1413](https://github.com/openshift/cluster-etcd-operator/pull/1413)
* [OCPBUGS-55066](https://issues.redhat.com/browse/OCPBUGS-55066): increase etcdGRPCRequestsSlow duration [#1408](https://github.com/openshift/cluster-etcd-operator/pull/1408)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/26f6cb2494275fb713edbb535c3fe1d02fde94de...8460bede0e45549f1cf03c85c69380b18de44a08)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/1e3caa4b5abe4e3dad914a337f87408d060b1fb2)

* [OCPBUGS-53873](https://issues.redhat.com/browse/OCPBUGS-53873): bump github.com/golang-jwt/jwt [#1217](https://github.com/openshift/cluster-image-registry-operator/pull/1217)
* [OCPBUGS-51606](https://issues.redhat.com/browse/OCPBUGS-51606): bump golang.org/x/oauth2 [#1208](https://github.com/openshift/cluster-image-registry-operator/pull/1208)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/33197688ad59aed5cd6d51c34cb114944125b6a7...1e3caa4b5abe4e3dad914a337f87408d060b1fb2)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/383f10176f2509babc9dd49d135fa8bb0c2c277e)

* [OCPBUGS-56030](https://issues.redhat.com/browse/OCPBUGS-56030): bump library-go to bring in updated audit policies [#1843](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1843)
* [OCPBUGS-49898](https://issues.redhat.com/browse/OCPBUGS-49898): bindata/alerts/slo: improve burnrate calculation [#1808](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1808)
* [OCPBUGS-53066](https://issues.redhat.com/browse/OCPBUGS-53066): Bump library-go [#1828](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1828)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f...383f10176f2509babc9dd49d135fa8bb0c2c277e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/7337d93da1df9b60751d146f0b7df1bc2436b595)

* [OCPBUGS-59962](https://issues.redhat.com/browse/OCPBUGS-59962): operator: increase wait time till degraded to max 4 times 5m [#2633](https://github.com/openshift/cluster-monitoring-operator/pull/2633)
* [OCPBUGS-56251](https://issues.redhat.com/browse/OCPBUGS-56251): set upgradable false when alertmanager v1 is specified [#2591](https://github.com/openshift/cluster-monitoring-operator/pull/2591)
* [OCPBUGS-55005](https://issues.redhat.com/browse/OCPBUGS-55005): chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and  set CMO to Upgradeable=false if errors are found [#2592](https://github.com/openshift/cluster-monitoring-operator/pull/2592)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/2800e3ef7f19e8238046a9a80562d010a53b138f...7337d93da1df9b60751d146f0b7df1bc2436b595)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c1a702897dc2ca3dc4cdc04f4984a718960ea46a)

* [OCPBUGS-47651](https://issues.redhat.com/browse/OCPBUGS-47651): Re-disable metrics server [#2622](https://github.com/openshift/cluster-network-operator/pull/2622)
* [OCPBUGS-58047](https://issues.redhat.com/browse/OCPBUGS-58047): Add cert-rotation script into cno [#2702](https://github.com/openshift/cluster-network-operator/pull/2702)
* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Implement IPsec NAT-Traversal encapsulation option [#2711](https://github.com/openshift/cluster-network-operator/pull/2711)
* [OCPBUGS-54717](https://issues.redhat.com/browse/OCPBUGS-54717): Add IPv6 NGINX configuration [#2683](https://github.com/openshift/cluster-network-operator/pull/2683)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/670c2e35eb315547eceae8a3a1b6e19638ff4f44...c1a702897dc2ca3dc4cdc04f4984a718960ea46a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/59320245b2d880a4f8cf532cd8e9958df1c12700)

* e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) [#1355](https://github.com/openshift/cluster-node-tuning-operator/pull/1355)
* : OCPBUGS-57947: kernelPageSize + hugepages combinations validation [3/3] (#1343) [#1343](https://github.com/openshift/cluster-node-tuning-operator/pull/1343)
* : OCPBUGS-57947: Support hugepage size selection for ARM-based clusters [2/3] (#1342) [#1342](https://github.com/openshift/cluster-node-tuning-operator/pull/1342)
* [OCPBUGS-57947](https://issues.redhat.com/browse/OCPBUGS-57947): CNF-18142: Add kernel page size field [1/3] (#1341) [#1341](https://github.com/openshift/cluster-node-tuning-operator/pull/1341)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/c004ea7ea486e983d296311ca2b40cc9a431c394...59320245b2d880a4f8cf532cd8e9958df1c12700)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)

* [OCPBUGS-57767](https://issues.redhat.com/browse/OCPBUGS-57767): fix olm.maxOpenShiftVersion float parsing [#125](https://github.com/openshift/cluster-olm-operator/pull/125)
* [OCPBUGS-48478](https://issues.redhat.com/browse/OCPBUGS-48478): [release-4.18] Add openshift node selector annotation [#116](https://github.com/openshift/cluster-olm-operator/pull/116)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/6da706d712dda30cec7ff92c5bfb76074df3d5fe...88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)

* [OCPBUGS-55783](https://issues.redhat.com/browse/OCPBUGS-55783): Samples Operator should sort failing image imports [#638](https://github.com/openshift/cluster-samples-operator/pull/638)
* [OCPBUGS-55782](https://issues.redhat.com/browse/OCPBUGS-55782): only update LastTransitionTime if operator status change [#637](https://github.com/openshift/cluster-samples-operator/pull/637)
* [OCPBUGS-55781](https://issues.redhat.com/browse/OCPBUGS-55781): Adding filter to clusterOperatorInformerEventHandler [#636](https://github.com/openshift/cluster-samples-operator/pull/636)
* [OCPBUGS-54258](https://issues.redhat.com/browse/OCPBUGS-54258): Adding mutex to func createSamples on handler.go [#615](https://github.com/openshift/cluster-samples-operator/pull/615)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/118d1f1a7929c09d22ad1d3ab2a9fd984236bbfd...5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/8caab452b91df0d77ab052b1833a4d54a1374634)

* NO-JIRA: Updating openshift-ci-release-key for 2 years [#72](https://github.com/openshift/cluster-update-keys/pull/72)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...8caab452b91df0d77ab052b1833a4d54a1374634)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/94c0e705d520b0eeb765f72de2dae2cd6f1159bb)

* [OCPBUGS-55359](https://issues.redhat.com/browse/OCPBUGS-55359): install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 [#1181](https://github.com/openshift/cluster-version-operator/pull/1181)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4...94c0e705d520b0eeb765f72de2dae2cd6f1159bb)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/e2aaf00a381b57874178a4272f3bc5257cf8dd98)

* append .0 to go.mod version [#69](https://github.com/openshift/configmap-reload/pull/69)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/cde5e473c23ca38917fe7e8ebdf7d15c467d977d...e2aaf00a381b57874178a4272f3bc5257cf8dd98)


### [console](https://github.com/openshift/console/tree/49e0cd6bcb4d1f90ffc963eb49d3e71b2bcef351)

* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose topology components and utils via plugin SDK internal package [#14777](https://github.com/openshift/console/pull/14777)
* [OCPBUGS-58364](https://issues.redhat.com/browse/OCPBUGS-58364): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15272](https://github.com/openshift/console/pull/15272)
* [OCPBUGS-59778](https://issues.redhat.com/browse/OCPBUGS-59778): add data-test attrs to console plugins table [#15327](https://github.com/openshift/console/pull/15327)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#15330](https://github.com/openshift/console/pull/15330)
* [OCPBUGS-59501](https://issues.redhat.com/browse/OCPBUGS-59501): Add the Origin header to the HeaderBlacklist in the co… [#15295](https://github.com/openshift/console/pull/15295)
* [OCPBUGS-59443](https://issues.redhat.com/browse/OCPBUGS-59443): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15290](https://github.com/openshift/console/pull/15290)
* [OCPBUGS-59446](https://issues.redhat.com/browse/OCPBUGS-59446): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15292](https://github.com/openshift/console/pull/15292)
* [OCPBUGS-58457](https://issues.redhat.com/browse/OCPBUGS-58457): fix bug where / in console.tab/horizontalNav href brea… [#15250](https://github.com/openshift/console/pull/15250)
* [OCPBUGS-58203](https://issues.redhat.com/browse/OCPBUGS-58203): OpenShift console PVC clone cannot use B as the unit [#15215](https://github.com/openshift/console/pull/15215)
* [OCPBUGS-58317](https://issues.redhat.com/browse/OCPBUGS-58317): Implement sessions in openshift authenticator [#15237](https://github.com/openshift/console/pull/15237)
* [OCPBUGS-58088](https://issues.redhat.com/browse/OCPBUGS-58088): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15202](https://github.com/openshift/console/pull/15202)
* [OCPBUGS-58089](https://issues.redhat.com/browse/OCPBUGS-58089): Getting "Oh no something went wrong" error message in web console. [#15203](https://github.com/openshift/console/pull/15203)
* [OCPBUGS-57931](https://issues.redhat.com/browse/OCPBUGS-57931): Add the ability to launch multiple modals with useModal hook [#15196](https://github.com/openshift/console/pull/15196)
* [OCPBUGS-57580](https://issues.redhat.com/browse/OCPBUGS-57580): Update vSphere configuration form to support CM YAML f… [#15191](https://github.com/openshift/console/pull/15191)
* [OCPBUGS-57743](https://issues.redhat.com/browse/OCPBUGS-57743): Fix TypeError Cannot read properties of null (reading 'metadata') [#15188](https://github.com/openshift/console/pull/15188)
* [OCPBUGS-57209](https://issues.redhat.com/browse/OCPBUGS-57209): Add flags in console static plugin for all the components of this epic [#15160](https://github.com/openshift/console/pull/15160)
* [OCPBUGS-36173](https://issues.redhat.com/browse/OCPBUGS-36173): Secret key with binary file changes when edited via Console. [#15178](https://github.com/openshift/console/pull/15178)
* [OCPBUGS-57181](https://issues.redhat.com/browse/OCPBUGS-57181): Fix '/metrics' endpoint token review to handle interna… [#15153](https://github.com/openshift/console/pull/15153)
* [OCPBUGS-57353](https://issues.redhat.com/browse/OCPBUGS-57353): fix VirtualizedTable runtime error if sortColumn is no… [#15173](https://github.com/openshift/console/pull/15173)
* [OCPBUGS-57093](https://issues.redhat.com/browse/OCPBUGS-57093): Add all files to `vendor` regardless of gitignore [#15131](https://github.com/openshift/console/pull/15131)
* [OCPBUGS-56774](https://issues.redhat.com/browse/OCPBUGS-56774): [knative] Self-provisioner user can not access or create event sources via ODC [#15095](https://github.com/openshift/console/pull/15095)
* [OCPBUGS-56862](https://issues.redhat.com/browse/OCPBUGS-56862): Sample segment sessions [#15103](https://github.com/openshift/console/pull/15103)
* [OCPBUGS-56757](https://issues.redhat.com/browse/OCPBUGS-56757): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15093](https://github.com/openshift/console/pull/15093)
* [OCPBUGS-54337](https://issues.redhat.com/browse/OCPBUGS-54337): Debug pod logs are not accessible when debugging a node via OpenShift Console [#14942](https://github.com/openshift/console/pull/14942)
* [OCPBUGS-56255](https://issues.redhat.com/browse/OCPBUGS-56255): remove 60 day alert from cluster update modal [#15055](https://github.com/openshift/console/pull/15055)
* [OCPBUGS-55991](https://issues.redhat.com/browse/OCPBUGS-55991): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15043](https://github.com/openshift/console/pull/15043)
* [OCPBUGS-53172](https://issues.redhat.com/browse/OCPBUGS-53172): Include init containers in readiness count if ready and started is true [#14884](https://github.com/openshift/console/pull/14884)
* [OCPBUGS-54899](https://issues.redhat.com/browse/OCPBUGS-54899): Fetching taskRuns in PLR details page using PLR UID also [#14961](https://github.com/openshift/console/pull/14961)
* [OCPBUGS-54888](https://issues.redhat.com/browse/OCPBUGS-54888): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14959](https://github.com/openshift/console/pull/14959)
* [OCPBUGS-45369](https://issues.redhat.com/browse/OCPBUGS-45369): Authenticate user token in openshift Authenticate func [#14664](https://github.com/openshift/console/pull/14664)
* [OCPBUGS-55195](https://issues.redhat.com/browse/OCPBUGS-55195): fix bug where operator appears twice [#14984](https://github.com/openshift/console/pull/14984)
* [Full changelog](https://github.com/openshift/console/compare/b033fc18dfcd75f68912d986a3832db5d5ffd376...49e0cd6bcb4d1f90ffc963eb49d3e71b2bcef351)


### [console-operator](https://github.com/openshift/console-operator/tree/9371d7f422157c3f5283f03028aed24dd0cf242d)

* [OCPBUGS-60081](https://issues.redhat.com/browse/OCPBUGS-60081): Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console [#1031](https://github.com/openshift/console-operator/pull/1031)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#1027](https://github.com/openshift/console-operator/pull/1027)
* [OCPBUGS-45869](https://issues.redhat.com/browse/OCPBUGS-45869): don't set current clients when no OIDC providers are configured [#948](https://github.com/openshift/console-operator/pull/948)
* [Full changelog](https://github.com/openshift/console-operator/compare/10a0cc293e61b8125ebec8c9c98ede22a0824d06...9371d7f422157c3f5283f03028aed24dd0cf242d)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/b4e1047104eb2d81dd46ebbb24fb88cdaf175b90)

* [OCPBUGS-56928](https://issues.redhat.com/browse/OCPBUGS-56928): bridge: Add option to enable port isolation [#203](https://github.com/openshift/containernetworking-plugins/pull/203)
* append .0 to go.mod version [#196](https://github.com/openshift/containernetworking-plugins/pull/196)
* : OCPBUGS-56928: Add a new firewall ingress-policy "isolated" [#191](https://github.com/openshift/containernetworking-plugins/pull/191)
* [OCPBUGS-55354](https://issues.redhat.com/browse/OCPBUGS-55354): Fix dhcp [#186](https://github.com/openshift/containernetworking-plugins/pull/186)
* [OCPBUGS-55346](https://issues.redhat.com/browse/OCPBUGS-55346): Check error returned by ipv6 SettleAddresses [#185](https://github.com/openshift/containernetworking-plugins/pull/185)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...b4e1047104eb2d81dd46ebbb24fb88cdaf175b90)


### [coredns](https://github.com/openshift/coredns/tree/eb75d9b4f41a5ce0258d6f245c6206715ecb283b)

* append .0 to go.mod version [#134](https://github.com/openshift/coredns/pull/134)
* [Full changelog](https://github.com/openshift/coredns/compare/cb1abfaeb7b0c5df4f0c56b0a009b439db1d0949...eb75d9b4f41a5ce0258d6f245c6206715ecb283b)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f03b55e67d688991eb053b78e7dd2ed5a29304ba)

* [OCPBUGS-58835](https://issues.redhat.com/browse/OCPBUGS-58835): CARRY: don't ignore json files [#339](https://github.com/openshift/cloud-provider-openstack/pull/339)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/b52ca7e89560678f3420aac02cfdb11febcfae67...f03b55e67d688991eb053b78e7dd2ed5a29304ba)


### [docker-builder](https://github.com/openshift/builder/tree/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)

* [OCPBUGS-57758](https://issues.redhat.com/browse/OCPBUGS-57758): S2I build cpu limits observed by assemble are limited to 1 cpu [#473](https://github.com/openshift/builder/pull/473)
* [Full changelog](https://github.com/openshift/builder/compare/62f644bcf0b0010f51765b48a7dab28426ae2933...a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)


### [docker-registry](https://github.com/openshift/image-registry/tree/cfa51ab4b60fc0e836547626a5fd02b97ee82708)

* [IR-526](https://issues.redhat.com/browse/IR-526): remove AWS region check [#437](https://github.com/openshift/image-registry/pull/437)
* [OCPBUGS-53657](https://issues.redhat.com/browse/OCPBUGS-53657): bump jwt and oauth dependencies [#430](https://github.com/openshift/image-registry/pull/430)
* [Full changelog](https://github.com/openshift/image-registry/compare/e36d3655ba8c33cff1afaa9f816ae2399f4cd42f...cfa51ab4b60fc0e836547626a5fd02b97ee82708)


### [etcd](https://github.com/openshift/etcd/tree/b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)

* [OCPBUGS-57112](https://issues.redhat.com/browse/OCPBUGS-57112): Updating ose-etcd-container image to be consistent with ART for 4.18 [#333](https://github.com/openshift/etcd/pull/333)
* Revert "ETCD-727: Rebase etcd 3.5.21 openshift 4.18" [#332](https://github.com/openshift/etcd/pull/332)
* [ETCD-727](https://issues.redhat.com/browse/ETCD-727): Rebase etcd 3.5.21 openshift 4.18 [#325](https://github.com/openshift/etcd/pull/325)
* [OCPBUGS-55724](https://issues.redhat.com/browse/OCPBUGS-55724): Add configurable option for hardware-related timeout delay [#328](https://github.com/openshift/etcd/pull/328)
* [Full changelog](https://github.com/openshift/etcd/compare/98b19154718fd94d4e8ad30824c00ba1de87cb78...b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/0c9395f92e970f64d40ad338e9ed8918d6ab10ea)

* [OCPBUGS-59535](https://issues.redhat.com/browse/OCPBUGS-59535): Rebase v1.31.11 to 4.18 [#2377](https://github.com/openshift/kubernetes/pull/2377)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#2348](https://github.com/openshift/kubernetes/pull/2348)
* [OCPBUGS-57070](https://issues.redhat.com/browse/OCPBUGS-57070): UPSTREAM: &lt;carry&gt;: Bump cadvisor version to fix container_fs metrics [#2332](https://github.com/openshift/kubernetes/pull/2332)
* [OCPBUGS-57219](https://issues.redhat.com/browse/OCPBUGS-57219): kubelet: fix a stall on startup from waiting too long for a stat call [#2324](https://github.com/openshift/kubernetes/pull/2324)
* [OCPBUGS-56835](https://issues.redhat.com/browse/OCPBUGS-56835): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2316](https://github.com/openshift/kubernetes/pull/2316)
* [OCPBUGS-56384](https://issues.redhat.com/browse/OCPBUGS-56384): Propagate error when creating CustomResourceStorage instead of panicking [#2303](https://github.com/openshift/kubernetes/pull/2303)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#2307](https://github.com/openshift/kubernetes/pull/2307)
* [OCPBUGS-56192](https://issues.redhat.com/browse/OCPBUGS-56192): UPSTREAM: 131236: RWX tests should create RWX volumes [#2300](https://github.com/openshift/kubernetes/pull/2300)
* UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… [#2283](https://github.com/openshift/kubernetes/pull/2283)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#2278](https://github.com/openshift/kubernetes/pull/2278)
* : OCPBUGS-54807: skip tests on platform type External [#2268](https://github.com/openshift/kubernetes/pull/2268)
* [Full changelog](https://github.com/openshift/kubernetes/compare/97471c6ac55733da63e4db6680889897a5915ca7...0c9395f92e970f64d40ad338e9ed8918d6ab10ea)


### [hypershift](https://github.com/openshift/hypershift/tree/bf8ba946b0d1cf7d0a9fd071dd9c3ff80c78aaa6)

* [OCPBUGS-59503](https://issues.redhat.com/browse/OCPBUGS-59503): [release-4.18] Support proxy authentication when user/pass is included in URL [#6460](https://github.com/openshift/hypershift/pull/6460)
* [CNTRLPLANE-1229](https://issues.redhat.com/browse/CNTRLPLANE-1229): Move CPO pipeline to hermetic builds [#6597](https://github.com/openshift/hypershift/pull/6597)
* [OCPBUGS-57818](https://issues.redhat.com/browse/OCPBUGS-57818): Reuse hosted cluster release and metadata providers [#6301](https://github.com/openshift/hypershift/pull/6301)
* [OCPBUGS-58126](https://issues.redhat.com/browse/OCPBUGS-58126): Don't use /version for haproxy health checks [#6323](https://github.com/openshift/hypershift/pull/6323)
* [OCPBUGS-57273](https://issues.redhat.com/browse/OCPBUGS-57273): Add proxy variables for the MCD Pod [#6247](https://github.com/openshift/hypershift/pull/6247)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Fix CatalogSource images check when unauthorized [#6237](https://github.com/openshift/hypershift/pull/6237)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Add support for registry root entry only in the IDMS/ICSP [#6163](https://github.com/openshift/hypershift/pull/6163)
* [OCPBUGS-56627](https://issues.redhat.com/browse/OCPBUGS-56627): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6186](https://github.com/openshift/hypershift/pull/6186)
* [CNTRLPLANE-917](https://issues.redhat.com/browse/CNTRLPLANE-917): Konflux build pipeline service account migration [#6084](https://github.com/openshift/hypershift/pull/6084)
* [OCPBUGS-56524](https://issues.redhat.com/browse/OCPBUGS-56524): switch admissionregistration API to v1 [#6172](https://github.com/openshift/hypershift/pull/6172)
* [OCPBUGS-55177](https://issues.redhat.com/browse/OCPBUGS-55177): Don't check if olm images exist if guest cluster [#6065](https://github.com/openshift/hypershift/pull/6065)
* [OCPBUGS-55230](https://issues.redhat.com/browse/OCPBUGS-55230): Add annotation to configure KAS goaway-chance [#6066](https://github.com/openshift/hypershift/pull/6066)
* [OCPBUGS-54865](https://issues.redhat.com/browse/OCPBUGS-54865): KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled [#6020](https://github.com/openshift/hypershift/pull/6020)
* [OCPBUGS-54737](https://issues.redhat.com/browse/OCPBUGS-54737): Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests [#6052](https://github.com/openshift/hypershift/pull/6052)
* [OCPBUGS-55148](https://issues.redhat.com/browse/OCPBUGS-55148): Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz [#6059](https://github.com/openshift/hypershift/pull/6059)
* [OCPBUGS-54946](https://issues.redhat.com/browse/OCPBUGS-54946), [RHOCPPRIO-433](https://issues.redhat.com/browse/RHOCPPRIO-433): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6091](https://github.com/openshift/hypershift/pull/6091)
* [OCPBUGS-55146](https://issues.redhat.com/browse/OCPBUGS-55146): Use 135 for terminationGracePeriodSeconds for v2 KAS [#6057](https://github.com/openshift/hypershift/pull/6057)
* [OCPBUGS-54698](https://issues.redhat.com/browse/OCPBUGS-54698): Add missing servicemonitors and prometheusrules permissions for non-OVN [#6000](https://github.com/openshift/hypershift/pull/6000)
* [OCPBUGS-53404](https://issues.redhat.com/browse/OCPBUGS-53404): Set shutdown watch termination grace period on kube-apiserver [#5874](https://github.com/openshift/hypershift/pull/5874)
* [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Fix golang crypto dependency go.mod replacement [#5992](https://github.com/openshift/hypershift/pull/5992)
* [OCPBUGS-54814](https://issues.redhat.com/browse/OCPBUGS-54814): [release-4.18] add feature set aware feature gates to HO and CPO [#6014](https://github.com/openshift/hypershift/pull/6014)
* [OCPBUGS-54624](https://issues.redhat.com/browse/OCPBUGS-54624): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5980](https://github.com/openshift/hypershift/pull/5980)
* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Sync RBAC for attaching volumes on VM level [#5988](https://github.com/openshift/hypershift/pull/5988)
* [OCPBUGS-54627](https://issues.redhat.com/browse/OCPBUGS-54627): Use system trust bundle in CPO IDP https client [#5981](https://github.com/openshift/hypershift/pull/5981)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695), [OCPBUGS-54625](https://issues.redhat.com/browse/OCPBUGS-54625): backport capabilities api [#5964](https://github.com/openshift/hypershift/pull/5964)
* [OCPBUGS-54411](https://issues.redhat.com/browse/OCPBUGS-54411): Backport PR 5876 to release-4.18 [#5936](https://github.com/openshift/hypershift/pull/5936)
* [OCPBUGS-54498](https://issues.redhat.com/browse/OCPBUGS-54498): Support hypershift-operator scoping for secretJanitor [#5961](https://github.com/openshift/hypershift/pull/5961)
* [OCPBUGS-54609](https://issues.redhat.com/browse/OCPBUGS-54609): [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable [#5950](https://github.com/openshift/hypershift/pull/5950)
* [Full changelog](https://github.com/openshift/hypershift/compare/9dd5721c0c4da0cc758f029deb6287ffe0f19dd5...bf8ba946b0d1cf7d0a9fd071dd9c3ff80c78aaa6)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/c7d883c586f548093481d87d7226d875502b30da)

* [OCPBUGS-58741](https://issues.redhat.com/browse/OCPBUGS-58741): bump github.com/golang/glog to version v1.2.4 [#104](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/104)
* append .0 to go.mod version [#96](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/96)
* [OCPBUGS-55283](https://issues.redhat.com/browse/OCPBUGS-55283): tech debt: rework vendor patches [#89](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/89)
* [OCPBUGS-53913](https://issues.redhat.com/browse/OCPBUGS-53913): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#82](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/59a8340c20192b70c5d597555554856d3712aee9...c7d883c586f548093481d87d7226d875502b30da)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/1c7bc07e69c1e74a36b39b31f878da6391fdeefe)

* [OCPBUGS-55297](https://issues.redhat.com/browse/OCPBUGS-55297): [IBM VPC] set offlineExpansion to false in e2e test manifest [#144](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/144)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/feae260577a5ed5428432de9b7ca1439c98064de...1c7bc07e69c1e74a36b39b31f878da6391fdeefe)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/e6eddf85c26eb056108b67fdad43bbbd2d9b4718)

* [OCPBUGS-47135](https://issues.redhat.com/browse/OCPBUGS-47135): CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] [#69](https://github.com/openshift/machine-api-provider-ibmcloud/pull/69)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f...e6eddf85c26eb056108b67fdad43bbbd2d9b4718)


### [insights-operator](https://github.com/openshift/insights-operator/tree/5522aaa3211a0979224ac72363e1beb4ab5b221a)

* feat: copy proxy envs from IO pod to gathering pods (#1105) [#1105](https://github.com/openshift/insights-operator/pull/1105)
* [OCPBUGS-51163](https://issues.redhat.com/browse/OCPBUGS-51163): Fix bad IPv6 address (#1074) [#1074](https://github.com/openshift/insights-operator/pull/1074)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8a9746e4b1bbe139d162ecc894041495059dac4a...5522aaa3211a0979224ac72363e1beb4ab5b221a)


### [ironic](https://github.com/openshift/ironic-image/tree/9161a5fdb75042856bd40eec31bdba7b7c07d4a2)

* [OCPBUGS-55938](https://issues.redhat.com/browse/OCPBUGS-55938): Extract files one-by-one in logwatch [#657](https://github.com/openshift/ironic-image/pull/657)
* [Full changelog](https://github.com/openshift/ironic-image/compare/bc0800a6d184c4253ee18d7e8f68aecebe1b3393...9161a5fdb75042856bd40eec31bdba7b7c07d4a2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/b79bddef03460124923c7ce8616d83f719a49960)

* [OCPBUGS-56097](https://issues.redhat.com/browse/OCPBUGS-56097): collect the entire journal from the host [#189](https://github.com/openshift/ironic-agent-image/pull/189)
* [OCPBUGS-55364](https://issues.redhat.com/browse/OCPBUGS-55364): Delay determining the hostname to put into ignition [#183](https://github.com/openshift/ironic-agent-image/pull/183)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/cfff1ce89bc4e3cb24995547c6645f21431a9d14...b79bddef03460124923c7ce8616d83f719a49960)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/50ca44fd48943433d502e8bcff3804f5cac7cb5a)

* append .0 to go.mod version [#103](https://github.com/openshift/ironic-rhcos-downloader/pull/103)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/04c22eee43786b4a8bc53441b7e8173372251bd8...50ca44fd48943433d502e8bcff3804f5cac7cb5a)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). [#225](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/225)
* append .0 to go.mod version [#216](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/216)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/50d17147f15d8b216e7c41f91d1bd7d307ca8c73...c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2111495e6d03f1bfe0702996fdd1355ca21b78cf)

* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Ensure volume stays attached through reboots [#55](https://github.com/openshift/kubevirt-csi-driver/pull/55)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...2111495e6d03f1bfe0702996fdd1355ca21b78cf)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)

* [OCPBUGS-57057](https://issues.redhat.com/browse/OCPBUGS-57057): Updates GCP CredentialsRequest [#1376](https://github.com/openshift/machine-api-operator/pull/1376)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/99889497d1290c20663621a52eee8d5b685935df...6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b80d590e99b9ea3d7c8d4126ce2f801c05856d1e)

* [OCPBUGS-56751](https://issues.redhat.com/browse/OCPBUGS-56751): Support NODEIP_HINT in IPI deployments too [#5081](https://github.com/openshift/machine-config-operator/pull/5081)
* [OCPBUGS-55246](https://issues.redhat.com/browse/OCPBUGS-55246): kubelet: readonly mounts for criometricsproxy [#4998](https://github.com/openshift/machine-config-operator/pull/4998)
* [OCPBUGS-58067](https://issues.redhat.com/browse/OCPBUGS-58067): Ensure the build controller restarts on upgrade [#5140](https://github.com/openshift/machine-config-operator/pull/5140)
* [OCPBUGS-57328](https://issues.redhat.com/browse/OCPBUGS-57328): Do not set cpu system reserve below the default value [#5152](https://github.com/openshift/machine-config-operator/pull/5152)
* [OCPBUGS-56624](https://issues.redhat.com/browse/OCPBUGS-56624): Give keepalived container chroot cap [#5073](https://github.com/openshift/machine-config-operator/pull/5073)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#5138](https://github.com/openshift/machine-config-operator/pull/5138)
* [OCPBUGS-57935](https://issues.redhat.com/browse/OCPBUGS-57935): add MachineConfiguration to CO related objects [#5134](https://github.com/openshift/machine-config-operator/pull/5134)
* [OCPBUGS-54463](https://issues.redhat.com/browse/OCPBUGS-54463): Update desired config in MCN on OCL update [#5026](https://github.com/openshift/machine-config-operator/pull/5026)
* [OCPBUGS-57900](https://issues.redhat.com/browse/OCPBUGS-57900): MCC complains about v1 MachineOSConfig in default featureset [#5131](https://github.com/openshift/machine-config-operator/pull/5131)
* [OCPBUGS-56900](https://issues.redhat.com/browse/OCPBUGS-56900): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5095](https://github.com/openshift/machine-config-operator/pull/5095)
* [OCPBUGS-56517](https://issues.redhat.com/browse/OCPBUGS-56517): pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition [#5065](https://github.com/openshift/machine-config-operator/pull/5065)
* [OCPBUGS-56585](https://issues.redhat.com/browse/OCPBUGS-56585): scope MCD node listers to current node [#5068](https://github.com/openshift/machine-config-operator/pull/5068)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates [#5089](https://github.com/openshift/machine-config-operator/pull/5089)
* [OCPBUGS-56823](https://issues.redhat.com/browse/OCPBUGS-56823): Boot Image Controller should not degrade when golden configmap is slow to update [#5085](https://github.com/openshift/machine-config-operator/pull/5085)
* [OCPBUGS-56703](https://issues.redhat.com/browse/OCPBUGS-56703): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5078](https://github.com/openshift/machine-config-operator/pull/5078)
* Merge [#5025](https://github.com/openshift/machine-config-operator/pull/5025)
* [OCPBUGS-56401](https://issues.redhat.com/browse/OCPBUGS-56401): Add hot loop detection in the boot image controller [#5062](https://github.com/openshift/machine-config-operator/pull/5062)
* [OCPBUGS-55638](https://issues.redhat.com/browse/OCPBUGS-55638): OCPBUGS-55637: Add admin_acks handling in the MCO [#5027](https://github.com/openshift/machine-config-operator/pull/5027)
* [OCPBUGS-56217](https://issues.redhat.com/browse/OCPBUGS-56217): Compare the osImageURLs for OS validation check [#5052](https://github.com/openshift/machine-config-operator/pull/5052)
* [OCPBUGS-56170](https://issues.redhat.com/browse/OCPBUGS-56170): error from generateAndValidateRenderedMachineConfig function can be misleading [#5049](https://github.com/openshift/machine-config-operator/pull/5049)
* [OCPBUGS-55383](https://issues.redhat.com/browse/OCPBUGS-55383): Leverage shared node.env for both AWS providerID and hostname units [#5008](https://github.com/openshift/machine-config-operator/pull/5008)
* [OCPBUGS-53427](https://issues.redhat.com/browse/OCPBUGS-53427): pkg/operator/status: Drop kubelet skew guard, add RHEL guard [#4956](https://github.com/openshift/machine-config-operator/pull/4956)
* [release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension [#5018](https://github.com/openshift/machine-config-operator/pull/5018)
* [OCPBUGS-54765](https://issues.redhat.com/browse/OCPBUGS-54765): [release-4.18] kubelet-service: narrow down restorecon path [#4978](https://github.com/openshift/machine-config-operator/pull/4978)
* [OCPBUGS-55428](https://issues.redhat.com/browse/OCPBUGS-55428): MSBIC should not update windows machinesets [#5012](https://github.com/openshift/machine-config-operator/pull/5012)
* [OCPBUGS-55290](https://issues.redhat.com/browse/OCPBUGS-55290): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#5000](https://github.com/openshift/machine-config-operator/pull/5000)
* [OCPBUGS-55293](https://issues.redhat.com/browse/OCPBUGS-55293): Fix PollUntilContextTimeout in syncRenderConfig [#5001](https://github.com/openshift/machine-config-operator/pull/5001)
* Update cluster operator's status condition message [#4993](https://github.com/openshift/machine-config-operator/pull/4993)
* [OCPBUGS-53278](https://issues.redhat.com/browse/OCPBUGS-53278): In OCL. Cannot install extensions [#4945](https://github.com/openshift/machine-config-operator/pull/4945)
* [OCPBUGS-54817](https://issues.redhat.com/browse/OCPBUGS-54817): Make mtu-migration run after wait-for-primary-ip [#4979](https://github.com/openshift/machine-config-operator/pull/4979)
* [OKD-239](https://issues.redhat.com/browse/OKD-239): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4955](https://github.com/openshift/machine-config-operator/pull/4955)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/85ff8f1f6f6017bace77fed7638d489c957d507a...b80d590e99b9ea3d7c8d4126ce2f801c05856d1e)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d9a71247dafd469182d4bd13ef227c9be82a1e32)

* append .0 to go.mod version [#134](https://github.com/openshift/image-customization-controller/pull/134)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/e905646a4aa24e6ad54f27776d3dfd64a7d6f609...d9a71247dafd469182d4bd13ef227c9be82a1e32)


### [metallb-frr](https://github.com/openshift/frr/tree/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)

* [OCPBUGS-55343](https://issues.redhat.com/browse/OCPBUGS-55343): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#88](https://github.com/openshift/frr/pull/88)
* [Full changelog](https://github.com/openshift/frr/compare/78714ea6d2fd4de722473fa68125bfb09b21e6f8...98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/de71b0cc8a93d8339ec708bb6ec3bc0861aea9aa)

* [OCPBUGS-54314](https://issues.redhat.com/browse/OCPBUGS-54314): Fix "Export as CSV" [#461](https://github.com/openshift/monitoring-plugin/pull/461)
* [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#376](https://github.com/openshift/monitoring-plugin/pull/376)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a5a82997a17cdcee03e9a4a58ac42c694d4174aa...de71b0cc8a93d8339ec708bb6ec3bc0861aea9aa)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0d7ea6c766349243ade17707af7bd2b43c3b4b8e)

* [OCPBUGS-58771](https://issues.redhat.com/browse/OCPBUGS-58771): Update the github.com/golang/glog module to v1.2.4 [#101](https://github.com/openshift/multus-admission-controller/pull/101)
* append .0 to go.mod version [#96](https://github.com/openshift/multus-admission-controller/pull/96)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/1b2791b74bdc5913697ab01515f0bdf0f3dfe7a0...0d7ea6c766349243ade17707af7bd2b43c3b4b8e)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)

* append .0 to go.mod version [#70](https://github.com/openshift/multus-networkpolicy/pull/70)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/82c77316ea4dcf0c14f8717984a1faa6f731b553...5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/9b1662c04e834d5f90f300636b4249027139e663)

* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): The node slice controller should only process valid whereabouts confi… [#381](https://github.com/openshift/whereabouts-cni/pull/381)
* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): Add nodeslicecontroller bin to dockerfile [#373](https://github.com/openshift/whereabouts-cni/pull/373)
* append .0 to go.mod version [#370](https://github.com/openshift/whereabouts-cni/pull/370)
* [OCPBUGS-55270](https://issues.redhat.com/browse/OCPBUGS-55270): Fix whereabouts-reconciler no namespace error [#362](https://github.com/openshift/whereabouts-cni/pull/362)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/74f285c3d6c642d96039067a5e99e8db85b146f9...9b1662c04e834d5f90f300636b4249027139e663)


### [must-gather](https://github.com/openshift/must-gather/tree/b851bd3589eb0f80471d4de2114a7635b0d12663)

* append .0 to go.mod version [#491](https://github.com/openshift/must-gather/pull/491)
* [Full changelog](https://github.com/openshift/must-gather/compare/c864494e2b10793ec1de833ade2fda7afe6a7c88...b851bd3589eb0f80471d4de2114a7635b0d12663)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/a5e5e80be5698c12d3223cf377386baa977bc587)

* [OCPBUGS-58095](https://issues.redhat.com/browse/OCPBUGS-58095): Bump github.com/containernetworking/plugins from to 1.7.1 [#79](https://github.com/openshift/bond-cni/pull/79)
* [OCPBUGS-57794](https://issues.redhat.com/browse/OCPBUGS-57794): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 [#74](https://github.com/openshift/bond-cni/pull/74)
* NO-JIRA: Add ci-operator yaml file [#78](https://github.com/openshift/bond-cni/pull/78)
* [Full changelog](https://github.com/openshift/bond-cni/compare/9506a1ff3e0b3b1cdddbd0fbb0ed687e289166b0...a5e5e80be5698c12d3223cf377386baa977bc587)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/c060ecaf93371d1f2492e222eb4c0bd04c568f51)

* [OCPBUGS-60174](https://issues.redhat.com/browse/OCPBUGS-60174): Replace e2e test image (#120) [#120](https://github.com/openshift/network-metrics-daemon/pull/120)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/e4c214c3736fcb69b3160421f06e9b1a837b300b...c060ecaf93371d1f2492e222eb4c0bd04c568f51)


### [network-tools](https://github.com/openshift/network-tools/tree/47b13549115a59d82dbf4c61f9160432608cb9d8)

* Fix build error [#147](https://github.com/openshift/network-tools/pull/147)
* [Full changelog](https://github.com/openshift/network-tools/compare/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f...47b13549115a59d82dbf4c61f9160432608cb9d8)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/15535681de838e97e0a137fb0cc7123746019b08)

* [OCPBUGS-60178](https://issues.redhat.com/browse/OCPBUGS-60178): Fix ingress details [#264](https://github.com/openshift/networking-console-plugin/pull/264)
* [OCPBUGS-60124](https://issues.redhat.com/browse/OCPBUGS-60124): Fix requiremenets with no value [#259](https://github.com/openshift/networking-console-plugin/pull/259)
* [OCPBUGS-57286](https://issues.redhat.com/browse/OCPBUGS-57286): Fix pod context [#251](https://github.com/openshift/networking-console-plugin/pull/251)
* [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#240](https://github.com/openshift/networking-console-plugin/pull/240)
* [OCPBUGS-49395](https://issues.redhat.com/browse/OCPBUGS-49395): Add translations [#238](https://github.com/openshift/networking-console-plugin/pull/238)
* Add translations scripts [#234](https://github.com/openshift/networking-console-plugin/pull/234)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d9f7f31c78c4f4eeee734936cd814ab0542e4ad0...15535681de838e97e0a137fb0cc7123746019b08)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/afe324bf56e0348fb45e5fbb9c832c1587482153)

* [OCPBUGS-51861](https://issues.redhat.com/browse/OCPBUGS-51861): fixing CVE-2025-22868 [#96](https://github.com/openshift/machine-api-provider-nutanix/pull/96)
* [OCPBUGS-54616](https://issues.redhat.com/browse/OCPBUGS-54616): Fix link-local addresses being added to machine [#101](https://github.com/openshift/machine-api-provider-nutanix/pull/101)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/7d0cb735f3e86c0828821cf54f8a40c74d9232aa...afe324bf56e0348fb45e5fbb9c832c1587482153)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/91582506b4dc8344743ef8ce5e5cfa2773ff1773)

* [OCPBUGS-57172](https://issues.redhat.com/browse/OCPBUGS-57172): 4.18 kube 1.31 [#317](https://github.com/openshift/oauth-proxy/pull/317)
* [OCPBUGS-58312](https://issues.redhat.com/browse/OCPBUGS-58312): fix e2e tests [#325](https://github.com/openshift/oauth-proxy/pull/325)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/cbd44ad9f0e433d32ff16a2691c6278298afe89a...91582506b4dc8344743ef8ce5e5cfa2773ff1773)


### [oauth-server](https://github.com/openshift/oauth-server/tree/287caff3aef5b5f8535ac2bf1242671a5c7701b7)

* [OCPBUGS-57300](https://issues.redhat.com/browse/OCPBUGS-57300): Updating oauth-server-container image to be consistent with ART for 4.18 [#186](https://github.com/openshift/oauth-server/pull/186)
* append .0 to go.mod version [#179](https://github.com/openshift/oauth-server/pull/179)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3527783a5ceb1f33f790b7ab5edbea17f5cc6a8...287caff3aef5b5f8535ac2bf1242671a5c7701b7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/ba546132e84aabc324dba3d3f4060b4ca714d58f)

* [OCPBUGS-59396](https://issues.redhat.com/browse/OCPBUGS-59396): v2/archive: handle 0b mirror archive files (#1227) [#1227](https://github.com/openshift/oc-mirror/pull/1227)
* [OCPBUGS-59798](https://issues.redhat.com/browse/OCPBUGS-59798): Detect images from a Helm Chart with an aliased chart dependency (#1224) [#1224](https://github.com/openshift/oc-mirror/pull/1224)
* [OCPBUGS-59235](https://issues.redhat.com/browse/OCPBUGS-59235): [release-4.18] v2/archive: error d2m when no tar files found (#1212) [#1212](https://github.com/openshift/oc-mirror/pull/1212)
* [OCPBUGS-58280](https://issues.redhat.com/browse/OCPBUGS-58280): v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1206) [#1206](https://github.com/openshift/oc-mirror/pull/1206)
* [OCPBUGS-58272](https://issues.redhat.com/browse/OCPBUGS-58272): Fixes the tag when rebuilt catalog by digest only (#1204) [#1204](https://github.com/openshift/oc-mirror/pull/1204)
* [OCPBUGS-57387](https://issues.redhat.com/browse/OCPBUGS-57387): v2/archive: fix sanitization of `.` (#1196) [#1196](https://github.com/openshift/oc-mirror/pull/1196)
* [OCPBUGS-57461](https://issues.redhat.com/browse/OCPBUGS-57461): v2/operator: add rebuilt catalog to tar file (#1195) [#1195](https://github.com/openshift/oc-mirror/pull/1195)
* [OCPBUGS-57197](https://issues.redhat.com/browse/OCPBUGS-57197): [release-4.18] v2/cli: always remove past archives before m2d (#1176) [#1176](https://github.com/openshift/oc-mirror/pull/1176)
* [OCPBUGS-56486](https://issues.redhat.com/browse/OCPBUGS-56486): v2/config: allow `delete` and `mirror` words (#1175) [#1175](https://github.com/openshift/oc-mirror/pull/1175)
* [OCPBUGS-55701](https://issues.redhat.com/browse/OCPBUGS-55701): v2/imgbuilder: use --authfile when set (#1173) [#1173](https://github.com/openshift/oc-mirror/pull/1173)
* [OCPBUGS-56659](https://issues.redhat.com/browse/OCPBUGS-56659): v2/archive: print unarchive progress (#1160) [#1160](https://github.com/openshift/oc-mirror/pull/1160)
* [OCPBUGS-54653](https://issues.redhat.com/browse/OCPBUGS-54653): delete: continue on errors (#1146) [#1146](https://github.com/openshift/oc-mirror/pull/1146)
* [OCPBUGS-56043](https://issues.redhat.com/browse/OCPBUGS-56043): Fix mirroring images with tag&digest in charts (#1142) [#1142](https://github.com/openshift/oc-mirror/pull/1142)
* [OCPBUGS-54626](https://issues.redhat.com/browse/OCPBUGS-54626): [release-4.18] cli: return distinct error codes depending on failure (#1125) [#1125](https://github.com/openshift/oc-mirror/pull/1125)
* [OCPBUGS-55361](https://issues.redhat.com/browse/OCPBUGS-55361): v2/operator: refactor operator FilteredCollector (#1134) [#1134](https://github.com/openshift/oc-mirror/pull/1134)
* [OCPBUGS-51217](https://issues.redhat.com/browse/OCPBUGS-51217): Fix CVE-2025-27144 (#1108) [#1108](https://github.com/openshift/oc-mirror/pull/1108)
* [OCPBUGS-54727](https://issues.redhat.com/browse/OCPBUGS-54727): Use tag 0.0.3+2 of catalog-filter (#1128) [#1128](https://github.com/openshift/oc-mirror/pull/1128)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/214b61095a1b1992d55cef98d9cb7045dd6ba18a...ba546132e84aabc324dba3d3f4060b4ca714d58f)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/ea60189f95af09f3c5c50c8de41d8f601bc5e881)

* UPSTREAM: &lt;carry&gt;: fix crdupgradesafety diff when items schema differ (#1863) [#1863](https://github.com/openshift/operator-framework-operator-controller/pull/1863)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/481e275e3316037c9d6eec441ec7a5e9d85f4f90...ea60189f95af09f3c5c50c8de41d8f601bc5e881)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/5d7a65bad932a0434928571b74db27588bb9be2d)

* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Wire dry run option to Image API server operations [#531](https://github.com/openshift/openshift-apiserver/pull/531)
* [OCPBUGS-56609](https://issues.redhat.com/browse/OCPBUGS-56609): Fix image reference in TestImageStreamImportQuayIO [#514](https://github.com/openshift/openshift-apiserver/pull/514)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/1872fbf5967acd6485589c339ac8cb6bd156ad72...5d7a65bad932a0434928571b74db27588bb9be2d)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c87671821e6b05173e5bdc0aab1f80f29438e192)

* [OCPBUGS-57949](https://issues.redhat.com/browse/OCPBUGS-57949): ignore error failing to find pull/push secrets [#399](https://github.com/openshift/openshift-controller-manager/pull/399)
* [OCPBUGS-57344](https://issues.redhat.com/browse/OCPBUGS-57344): Set node-pullsecrets volume to read-only to protect image pull credentials [#392](https://github.com/openshift/openshift-controller-manager/pull/392)
* [OCPBUGS-55699](https://issues.redhat.com/browse/OCPBUGS-55699): Empty proxy variables are causing issues during the build [#377](https://github.com/openshift/openshift-controller-manager/pull/377)
* [OCPBUGS-54304](https://issues.redhat.com/browse/OCPBUGS-54304): Intermittent authentication issues when accessing OpenShift registry [#369](https://github.com/openshift/openshift-controller-manager/pull/369)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/5bfc8081a65ea3e0d23306c0398143a9987d659e...c87671821e6b05173e5bdc0aab1f80f29438e192)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/3cca6feee0d646331bdbc9d49732fbdf49448d41)

* append .0 to go.mod version [#123](https://github.com/openshift/openshift-state-metrics/pull/123)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/f5b14702aefd0ea480d9b5e7ba8717af36ba67e9...3cca6feee0d646331bdbc9d49732fbdf49448d41)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/ce2c2d17d9c489d776f0383869d453dff89b0462)

* [OCPBUGS-44458](https://issues.redhat.com/browse/OCPBUGS-44458): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#365](https://github.com/openshift/cluster-api-provider-openstack/pull/365)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/b0f0dc4e1a9123815cdc2124579b6f4367500a73...ce2c2d17d9c489d776f0383869d453dff89b0462)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/583538413e0032f33ce2236e9ea503b85226554e)

* [OCPBUGS-59421](https://issues.redhat.com/browse/OCPBUGS-59421): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1040](https://github.com/openshift/operator-framework-olm/pull/1040)
* [OCPBUGS-58882](https://issues.redhat.com/browse/OCPBUGS-58882): Reduce Frequency of Update Requests for Copied CSVs (#3597) [#1034](https://github.com/openshift/operator-framework-olm/pull/1034)
* [OCPBUGS-57427](https://issues.redhat.com/browse/OCPBUGS-57427): reduce cache expiry frequency [release-4.19] [#1020](https://github.com/openshift/operator-framework-olm/pull/1020)
* [OCPBUGS-57314](https://issues.redhat.com/browse/OCPBUGS-57314): operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1017](https://github.com/openshift/operator-framework-olm/pull/1017)
* [OCPBUGS-56098](https://issues.redhat.com/browse/OCPBUGS-56098): fix(olm): improve error logging for missing olm.managed label (#3558) [#1001](https://github.com/openshift/operator-framework-olm/pull/1001)
* [OCPBUGS-51225](https://issues.redhat.com/browse/OCPBUGS-51225), [OCPBUGS-51227](https://issues.redhat.com/browse/OCPBUGS-51227), [OCPBUGS-51245](https://issues.redhat.com/browse/OCPBUGS-51245): pin go-jose/v4@v4.0.5 (#3550) [#992](https://github.com/openshift/operator-framework-olm/pull/992)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/cc44b486ea91015a30946029b3a0be3af49ea789...583538413e0032f33ce2236e9ea503b85226554e)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/c06a810b321ad79ef572ce36ed935332a58ea319)

* [ART-13123](https://issues.redhat.com/browse/ART-13123): append .0 to go.mod version [#637](https://github.com/operator-framework/operator-marketplace/pull/637)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/9ee02a6318a9578ece5e6a89dffea4f7e18cc15a...c06a810b321ad79ef572ce36ed935332a58ea319)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/5236895f6c35e2f4b16c0fad78a05126aa2ddbd2)

* [OCPBUGS-59531](https://issues.redhat.com/browse/OCPBUGS-59531): EgressIP: fix startup syncer [#2690](https://github.com/openshift/ovn-kubernetes/pull/2690)
* [OCPBUGS-59623](https://issues.redhat.com/browse/OCPBUGS-59623): Revert "unpin libreswan version" [#2678](https://github.com/openshift/ovn-kubernetes/pull/2678)
* [OCPBUGS-57318](https://issues.redhat.com/browse/OCPBUGS-57318), [OCPBUGS-58159](https://issues.redhat.com/browse/OCPBUGS-58159): DownStream Merge Sync from 4.19 [06-26-2025] [#2646](https://github.com/openshift/ovn-kubernetes/pull/2646)
* [OCPBUGS-46401](https://issues.redhat.com/browse/OCPBUGS-46401), [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [OCPBUGS-55263](https://issues.redhat.com/browse/OCPBUGS-55263): DownStream Merge Sync from 4.19 [05-28-2025] [#2593](https://github.com/openshift/ovn-kubernetes/pull/2593)
* [OCPBUGS-57108](https://issues.redhat.com/browse/OCPBUGS-57108): Fix hybrid overlay node subnets collision with cluster subnets [#2619](https://github.com/openshift/ovn-kubernetes/pull/2619)
* [OCPBUGS-57106](https://issues.redhat.com/browse/OCPBUGS-57106): Increase InformerSyncTimeout to 60s [#2622](https://github.com/openshift/ovn-kubernetes/pull/2622)
* [OCPBUGS-55016](https://issues.redhat.com/browse/OCPBUGS-55016): DownStream Merge Sync from 4.19 [05-08-2025] [#2555](https://github.com/openshift/ovn-kubernetes/pull/2555)
* [OCPBUGS-54671](https://issues.redhat.com/browse/OCPBUGS-54671): EIP no reroute: allow multiple entries for pod to pod and pod to join [#2510](https://github.com/openshift/ovn-kubernetes/pull/2510)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4af08abc39c013bf3f0a493afd3c50d8f7f07805...5236895f6c35e2f4b16c0fad78a05126aa2ddbd2)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/10ac06f57bface0b3481e111c4e1d5b7f52db7f4)

* [OCPBUGS-54243](https://issues.redhat.com/browse/OCPBUGS-54243): Fix for  CVE-2024-51744 in github.com/golang-jwt/jwt/v4 [#111](https://github.com/openshift/machine-api-provider-powervs/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/e253fa30d99bb7ed00c1f27ca3d810fa682a1901...10ac06f57bface0b3481e111c4e1d5b7f52db7f4)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/35c1136915f7a6896dfcb479e1f686fd18542856)

* append .0 to go.mod version [#380](https://github.com/openshift/prom-label-proxy/pull/380)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/d9fe2d8ebc1b311be71172676d61710fd5c7400b...35c1136915f7a6896dfcb479e1f686fd18542856)


### [prometheus](https://github.com/openshift/prometheus/tree/df5ef25778ad5949c637beae1b9c303b4c044302)

* [OCPBUGS-56732](https://issues.redhat.com/browse/OCPBUGS-56732): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#253](https://github.com/openshift/prometheus/pull/253)
* [OCPBUGS-54940](https://issues.redhat.com/browse/OCPBUGS-54940): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#247](https://github.com/openshift/prometheus/pull/247)
* [Full changelog](https://github.com/openshift/prometheus/compare/8de8eb11dfe734331762bc8d4839ec3b47084743...df5ef25778ad5949c637beae1b9c303b4c044302)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/a432067579aaa60326a104f4ce2eba18e1ab444c)

* append .0 to go.mod version [#101](https://github.com/openshift/prometheus-alertmanager/pull/101)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e513c918214acfa6f60ba5ab3e107f57fd3df156...a432067579aaa60326a104f4ce2eba18e1ab444c)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/92e17ff5c45807198adc8b59f5b3f63a9b7f1726)

* append .0 to go.mod version [#166](https://github.com/openshift/node_exporter/pull/166)
* [Full changelog](https://github.com/openshift/node_exporter/compare/b7efb8c0f7d45f4ccb9120d4bcfb60ebe721ed69...92e17ff5c45807198adc8b59f5b3f63a9b7f1726)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)

* [OCPBUGS-55338](https://issues.redhat.com/browse/OCPBUGS-55338): Added error event for failed ingress to route conversion [#59](https://github.com/openshift/route-controller-manager/pull/59)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/07daee4d2f0b5c7aaca56ee45ff6dfdf97680db0...ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)


### [telemeter](https://github.com/openshift/telemeter/tree/490612bdaa6412762403c8eee902c20f033ca5aa)

* append .0 to go.mod version [#561](https://github.com/openshift/telemeter/pull/561)
* [Full changelog](https://github.com/openshift/telemeter/compare/700802fe29aba4ed602309f0c68222c4bedb08f5...490612bdaa6412762403c8eee902c20f033ca5aa)


### [tests](https://github.com/openshift/origin/tree/327bae04dec0835aa4d6a09add48c97a637d8898)

* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Don't check for isNoUpgrade [#30053](https://github.com/openshift/origin/pull/30053)
* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Tolerate various expected Upgradeable=False conditions [#30048](https://github.com/openshift/origin/pull/30048)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#29941](https://github.com/openshift/origin/pull/29941)
* [OCPBUGS-58366](https://issues.redhat.com/browse/OCPBUGS-58366): Make EgressIP helper functions more reliable [#29950](https://github.com/openshift/origin/pull/29950)
* [OCPBUGS-57081](https://issues.redhat.com/browse/OCPBUGS-57081): Do not set the MTU when using NetworkAttachementDefinition [#29891](https://github.com/openshift/origin/pull/29891)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#29937](https://github.com/openshift/origin/pull/29937)
* [OCPBUGS-57329](https://issues.redhat.com/browse/OCPBUGS-57329): Fix failed tests of e2e-aws-ovn-tls-13 [#29911](https://github.com/openshift/origin/pull/29911)
* [OCPBUGS-56995](https://issues.redhat.com/browse/OCPBUGS-56995): Fix bearer token exposure in exit condition as well [#29882](https://github.com/openshift/origin/pull/29882)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#29871](https://github.com/openshift/origin/pull/29871)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates tests [#29894](https://github.com/openshift/origin/pull/29894)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport watch count tracking fixes to 4.18 [#29725](https://github.com/openshift/origin/pull/29725)
* [OCPBUGS-55667](https://issues.redhat.com/browse/OCPBUGS-55667): aws/edge: prevent test using unschedulable nodes [#29750](https://github.com/openshift/origin/pull/29750)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#29765](https://github.com/openshift/origin/pull/29765)
* [OCPBUGS-50628](https://issues.redhat.com/browse/OCPBUGS-50628): [test: networking] Skip isolation test when cgroupv1 nodes are present [#29541](https://github.com/openshift/origin/pull/29541)
* [OCPBUGS-55470](https://issues.redhat.com/browse/OCPBUGS-55470): [build] Ensure Git Clone Does Not Run Privileged [#29736](https://github.com/openshift/origin/pull/29736)
* Revert "OCPBUGS-55277: backport 4.18" [#29720](https://github.com/openshift/origin/pull/29720)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport 4.18 [#29645](https://github.com/openshift/origin/pull/29645)
* [OCPBUGS-55110](https://issues.redhat.com/browse/OCPBUGS-55110): Backport `MetricsCollectionProfiles` patches to 4.18 [#29561](https://github.com/openshift/origin/pull/29561)
* [OCPBUGS-54807](https://issues.redhat.com/browse/OCPBUGS-54807): support provider type external [#29666](https://github.com/openshift/origin/pull/29666)
* [OCPBUGS-54725](https://issues.redhat.com/browse/OCPBUGS-54725): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29657](https://github.com/openshift/origin/pull/29657)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): bump(k8s): update k8s.io/* dependencies to v1.31.7 [#29634](https://github.com/openshift/origin/pull/29634)
* [Full changelog](https://github.com/openshift/origin/compare/6df37be7fc9ce72c1959847aa0e1f29bc43e5d52...327bae04dec0835aa4d6a09add48c97a637d8898)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2b241410a972898f0ce80dec3bfdf4f974721937)

* [OCPBUGS-54701](https://issues.redhat.com/browse/OCPBUGS-54701): add manifest-topology.yaml for topology related feature and test [#303](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/303)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/b8ed572d70acddd695a769fac3d1ba93f168fd05...2b241410a972898f0ce80dec3bfdf4f974721937)