# 4.19.32

Created: 2026-05-21 19:29:19 +0000 UTC

Image Digest: `sha256:1bd5ad0745f446a798a4038e4d04cf651213f71bc4e76dd9349f5c6968135f9b`


## Changes from 4.19.16

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.9 to 1.32.13
* Kubernetes Tests 1.32.8
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20251008-0 to 9.6.20260520-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| StreamingCollectionEncodingToJSON <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:225773f79b061ad675d7a92ee4163d9cc7e8ec31874dd2d570d98a8833bddfcc`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [1753a85e](https://github.com/openshift/assisted-installer-agent/commit/1753a85e3d8cf18e10bdf35c3a4ac87a74cab44e) `sha256:e4b194bdda176606cd539035848f29fda279834f9586be00f8fea30d9c63b909`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:a4890641bc6bf7d6f5108577dffc51d01b64dc8d0d27c806d4ca64432a16471f`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [77213cc5](https://github.com/openshift/apiserver-network-proxy/commit/77213cc5eed50f6c0ec0600133e01274020657ef) `sha256:6200c018201323acfd67ab7ffc932ff4145e4b7ebc460e078119d1b7215ab070`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [425c1c5b](https://github.com/openshift/cloud-provider-aws/commit/425c1c5be39628421bdfb63caf25beb169307473) `sha256:6144c9a4b3732c23c63e261b549564839ad6ac52ee4921a60b6caea03e605b8d`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [0a740b04](https://github.com/openshift/cluster-api-provider-aws/commit/0a740b04471ca2bc5bb7a3034e78a62cfc2c24a2) `sha256:d3b49678b98807d8fd3f8ea3078f359014f9366895d450c0550cf550352a4dd0`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [68ae0c26](https://github.com/openshift/aws-karpenter-provider-aws/commit/68ae0c265271b4447f42decf88c6a44b343eeec9) `sha256:9cf5dca791571a5639f164c2800f40d7e65c57f920e0fabb320153fd6ec74baa`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [b0a16d53](https://github.com/openshift/aws-pod-identity-webhook/commit/b0a16d53fbf28a55110bbb36a69f23bc772b3297) `sha256:5a9423873012ae4594f2f4ad95fc8bf34caeaf9c98bbbb4c23d03a58964c6214`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [7109d6b4](https://github.com/openshift/cloud-provider-azure/commit/7109d6b4eaefda87b235c88b92c2e17fd3dd0117) `sha256:836b9ba46339ae09e379ac613211af43f941d7409ecd9748b6a7fecd9fd31f85`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [7109d6b4](https://github.com/openshift/cloud-provider-azure/commit/7109d6b4eaefda87b235c88b92c2e17fd3dd0117) `sha256:500caef23d5b07164b2cf99f4074235cd785532b26eefed1a7c78c8a46796fd2`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [20a9ba53](https://github.com/openshift/azure-kubernetes-kms/commit/20a9ba53d5900578d497c84bb09cd46bc5859a29) `sha256:90ed55fbc35f89c0acc8fa778fda1f8a4cd78ef1eb2c0969a402f4f9bb7d9e39`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [e5c6c44c](https://github.com/openshift/azure-workload-identity/commit/e5c6c44c87ebbe57a33650dd6270275e7cca771e) `sha256:9b7f78e445affb1a8e14803178b6721f8f50502c23ad9ef49aa50092c9bcb22b`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [06a66db1](https://github.com/openshift/cluster-api-provider-metal3/commit/06a66db1ac3c28f6d9a1adf16146ebec219c8534) `sha256:9f5fd92498395a8d629be308d2d909679ae63008f21d743091e1cd055bdcd229`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f7a78954](https://github.com/openshift/cluster-api-provider-baremetal/commit/f7a789548f76d3117f3400ac597c0db615778d57) `sha256:4c97755f33a1cbee8a7eb12c111bd4f9c49680379af1ebb71f8657ee8d79ad4a`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [f4e49d5f](https://github.com/openshift/baremetal-operator/commit/f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506) `sha256:5ed468d93ab69bc2b40dddc908b4ac81f8eefb82e574a46f4f65f3606b283150`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [2f969c7a](https://github.com/openshift/baremetal-runtimecfg/commit/2f969c7a1df33a398298df731505a508ad120db9) `sha256:91ffa2dfe07085ddf427e79a271f4452fc82834b4cebaaf3f045debefe6e0d8b`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [8fde9c52](https://github.com/openshift/cluster-bootstrap/commit/8fde9c52fbb6b6044785ebae0751000b049fd0ed) `sha256:1dfc1dc69d7e5ad3e77e92f54fc9ba50851963dfafc755ba30f375ecdb417694`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [96607b59](https://github.com/openshift/cluster-config-operator/commit/96607b590ba35a8f008073e105e01e72a5bfba2e) `sha256:a49fc221f2a6a0ff13b31ed6df73cd676186539cc41251e73f5c53b56fa33104`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [1dbf0c7a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2) `sha256:7984ef17ff53a8150b929abde608931621f9f018e505effd7b3dd70f304da991`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [cf99de97](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/cf99de974354133f853928cff9e19ad19c5347d9) `sha256:c0014f630a8270c635949209c685574e9999d03f179701576e07b0c82f4b6ae1`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [65981306](https://github.com/openshift/cluster-dns-operator/commit/659813065170f4e52f80b7a29bbab64bfa9aa172) `sha256:dc1dc535a474c1652625e939301a41bc5f8774c96197d98b8f7beeba5ef6d50b`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [3335b120](https://github.com/openshift/cluster-image-registry-operator/commit/3335b120ecbae4a792373a814474aeebde58d6c2) `sha256:4b93830a45e20dcce648972bb5688753db25649878c9202bc958edd51965ed87`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:9da8438c2f8ad43ae71d8164bfc46763d35b95f1ea6a537ec2b15e16e8c2fc7c`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [5f66a3e1](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/5f66a3e13fd98eaaa0941e8e0724b1f56a797d6d) `sha256:c72fdb919ebf6932114c14e1b5837b6180cafbcb73cf41e449636ecbd0478add`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [0ab30996](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/0ab30996207ada63ef2e2fd4f47aac03b0872c9a) `sha256:e0f4c1bdca12a3c0f331c3adfd550ecca318022d6200ad290e6293a37a780abb`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [74852478](https://github.com/openshift/cluster-policy-controller/commit/748524784686a5f397490563882cbfb88f9acd01) `sha256:d4b1cf9e38779adc95aa6da206f6920c9ba705c3664226038a85402f132cd010`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [0ea36f0a](https://github.com/openshift/cluster-update-keys/commit/0ea36f0a4c0ad6a6abc81a91b2ac87d68d294020) `sha256:e0a3365fe37a260729c537522ad732ca307e00a495bfebd4a9997000b5cf721a`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [a2a48a3a](https://github.com/openshift/configmap-reload/commit/a2a48a3a767fdb70644c65ab863bd4fc125987d2) `sha256:d3b47237d60e1bf4c94f47858a7c5ef04a8d7d80fdf9ab1306f65868c5b66d29`
* [console-operator](https://github.com/openshift/console-operator) git [034e4865](https://github.com/openshift/console-operator/commit/034e4865824a6c10c48b912e8584bf7afb095852) `sha256:fed15eabb83085970b5a1a22bdc673b63dd6828b55ca440c31b94b0ab666127b`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:873183ef110093e5f053b779fff48d1f744833f9d321bd35afe07edf671042f4`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:c87a26dad6744f87d20e097aa7e2bd972ec37a6af0709b82dcc4b9207200a6c4`
* [coredns](https://github.com/openshift/coredns) git [4f649314](https://github.com/openshift/coredns/commit/4f64931403bf747b78bccb40ad877b08da534e23) `sha256:39d5242e22c0693ce1440e0466503eb8ba3c108cd4a45e6333bbfa4b5c7db58a`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [ac275c3a](https://github.com/openshift/csi-external-resizer/commit/ac275c3a81edcc4edf23aecf8974c9c23f2aaea9) `sha256:6e11ce7a1566b7cf08608335f22f74ab8137f16bf9b3a774d8b22cfc298f5413`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [ca514478](https://github.com/openshift/csi-livenessprobe/commit/ca5144785b2c8caa6fe0ffcf7837e8e17b4864fb) `sha256:66abc20bf6b8e5c8cffc5513156cda324e5242208ee403f75a0e0976c97c9851`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:05df8d4484b4f2306b541938ec4650c8c9e6d6b0393e7e656a03d5e8c38e7a6e`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [85353bb9](https://github.com/openshift/egress-router-cni/commit/85353bb936a289b8b817f7b437afacdf7458c667) `sha256:a5d47e17ff1b49b71305d12b9adf8414d1af706129e0694117e72deff33e5763`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [d8d3aeba](https://github.com/openshift/cloud-provider-gcp/commit/d8d3aeba536f4c9f6593a08045466f06dc7406ff) `sha256:be29e09783295b3577c29ec60220d54328939c7627be5078ee303b5bd7cc7ae6`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [4fd69cf5](https://github.com/openshift/machine-api-provider-gcp/commit/4fd69cf5c0b71fb477271c69d6ddd4b276b18092) `sha256:023ad743417736e2461130bc2ddac0f78a4da5fe80571b48ba4512347c187a99`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [44c74f24](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/44c74f24fba97b4afdbac55c9e77eb50eb21a4d1) `sha256:558e655d59740ca07e667b8647ca8656562e4860d24e61657946d64dc01e55e3`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [fbf4c1b2](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/fbf4c1b2b233806f8233b89abca2795a4cadef14) `sha256:72ae93483fd242031fbbc61e69ac77b0be05ca81473e3a78d0b3d6e6a4aa8458`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [7422aab2](https://github.com/openshift/cloud-provider-ibm/commit/7422aab27110768d8604539b9bb01ca329ff70b7) `sha256:c22f65b915fa5bafbe305c054ab78587ed6b52b8f1a1f7bf354c80cd1b77faa3`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3dfcfa12](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3dfcfa12e31bccd7c43018e1324a391b0bc03244) `sha256:7a9aa4b03e2ceafc8d0a4d5b5d9ea3f737ad2316c3cb3c83a3eddf86dc786954`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [940ac1c2](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/940ac1c27e5548f738219b8c2ea4d1b6924e60e5) `sha256:2de5f3f8525099c53d3c77644593f693ae466a6a3f83bf599b1b07b2a1063d00`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dacba7d7](https://github.com/openshift/ironic-rhcos-downloader/commit/dacba7d7809a048392d18050096dcc20f2878b6f) `sha256:c18d10419987e9a1651386932ba956b9734d41c7c5e9c623aa0e4c3205464b92`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fcd9564e](https://github.com/openshift/ironic-static-ip-manager/commit/fcd9564e3bfa12e45576af376d168b5036dd8206) `sha256:e1ec05824020b692af3b8d85f183e702b3e094be70f28ba5753b1d577b22a6ca`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b42e7cf2](https://github.com/openshift/images/commit/b42e7cf218c4eef071cc29e0894fe8cfaed80b7f) `sha256:03bc8809a3ba58c793fda6035120bf1447b7d20da86c411df68f8a08097d8a6f`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [59127756](https://github.com/openshift/kube-rbac-proxy/commit/591277560f328601273f88f2881e09ccccd90a97) `sha256:74f303c5d99baf1e31638f9b38f7f9be8093315937685ca2cbe5270ce95fba6b`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [c3da3b5f](https://github.com/openshift/kube-state-metrics/commit/c3da3b5fdc5bd2d23966e33b676701a4950b1a53) `sha256:a2beafcc23a89533fa6bf6dc400ca6b8f1ff5827e43ffb42eb64aeedcc894f0e`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [fdef30c8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/fdef30c84b3d45ede364500984221c3f492b1415) `sha256:8ee268e84580a3fec8fc748fe3ab18a8fc4071e461e1a732b012db75ba693e5d`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:c0b7d90541594b1ac1666d69b7a5c2c3c01cc9cd622ab733502e541fe7938474`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [32b5f16c](https://github.com/openshift/machine-os-images/commit/32b5f16c7f59698b40cc2a23116804d9067824d2) `sha256:6cd89d9bb76148208ba2e02ef728fee8ca1a6095382409a41399117d037e1f15`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [381c36ba](https://github.com/openshift/multus-admission-controller/commit/381c36baaad8e45ba10cca43aeeaf00dfc907462) `sha256:0a2bb0a55ab8019c1615dfd3bc533874f2f3ced572604fbafa67814f258a8e1c`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:88446cc9a02a7576b913e4d10f194d681b207ca40db0e84793d2d447b4955ad6`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [0e1112ce](https://github.com/openshift/whereabouts-cni/commit/0e1112cea12c707a93bd01d408c598dd070c8676) `sha256:52ef57e0ba162267f2a641e79d3c264a0ed1554b80381b2f64dbfaa57f967b05`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [fd8f506d](https://github.com/openshift/bond-cni/commit/fd8f506d59353ac89db5c8015969e81dafdab774) `sha256:6d44b9e85a82b0a6af30487322e92fc9f291b039a7e402c17cf5cf4756ca4e44`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [89e48826](https://github.com/openshift/network-metrics-daemon/commit/89e4882698653fdd80fcee2e9d92e668cb02d2d1) `sha256:048d16cea628f36e65a02c38f86ddcb189d2c2457e6e9f56eda0cb308ad74dde`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [db1f264a](https://github.com/openshift/cloud-provider-nutanix/commit/db1f264a7b04784e5f671e61cda0609695e555bb) `sha256:9c057c99afbf7a8e7d9f014cbc6dbff88b5f20700ac5c5a234ca30967c1c0880`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a26db5a0](https://github.com/openshift/machine-api-provider-nutanix/commit/a26db5a04ecffd98c6a9ee8204af621bf2416ec9) `sha256:dd3200b00102375bb6ecf15132def0a122f9cb4f245be3bcbdf9df961bc9c2b9`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [f74e8e00](https://github.com/openshift/oauth-proxy/commit/f74e8e006cd47ae9b7cab525796f53af8fb1da9c) `sha256:98fd93a407c6af7c974bb63592302d5c7968db18fe6946d180cbc8093bc7a3f4`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [5b3063ff](https://github.com/openshift/openshift-controller-manager/commit/5b3063ff149f290bebca0783fc508dfbf07689a5) `sha256:17777eb6449c1a5feaab36b98e656874f7a6ce3acc55233ca09e1536070644cd`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c604f81c](https://github.com/openshift/openshift-state-metrics/commit/c604f81c4953f0feacfcf927cb5de883af027060) `sha256:7cbacce49f3b8ed16a3033e5d70cee206ef994b41dd19faf5818ecce09d23e10`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [d00bab2b](https://github.com/openshift/openstack-resource-controller/commit/d00bab2b3029ead7cd0e2ae61c7d396239434b48) `sha256:77b3dceb70c3fdc236831ec0259fca6e85e84d4a6e6eebdfd671efd611f7bbea`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:a25ab01921e92cb55d42feca5a2e78b5acc5a3eea36eade83c24c84ccd8bd226`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [ef83f3f5](https://github.com/openshift/cloud-provider-powervs/commit/ef83f3f5b8bf00f829bb71d1857a5f59e63f9f17) `sha256:aa5a091b1bfe343c4d48f20f263514acc72cce5ce100b26352e84236593dea79`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [ff6e9a8e](https://github.com/openshift/machine-api-provider-powervs/commit/ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a) `sha256:e640037003d7d76f08e96b6fed2ec235baad42e0239790e1735809877acb721a`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [13666465](https://github.com/openshift/prom-label-proxy/commit/13666465233bfe72a19d6d3f48576a508fdea145) `sha256:ac195831a0df7ac30da9ba77c01f9679d29852298195702b2ed8c7b1d665f180`
* [prometheus](https://github.com/openshift/prometheus) git [396601b6](https://github.com/openshift/prometheus/commit/396601b64177f9c6f9d52ff8ac53017c9d150ff7) `sha256:bf51bb7ec6695c4ad2ee3c115cd9a05b3e07e5f7c771a1ad888d23f1b2fae654`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [c90542d8](https://github.com/openshift/node_exporter/commit/c90542d8cef6d25545ae00481ffff5622cdce928) `sha256:73d33f33950288c723b681bb1b6d3827ddc9ec99ffff5fcbd24853099974c29c`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [4dfa6916](https://github.com/openshift/service-ca-operator/commit/4dfa6916f984d0fd7188380edc88b250738f07f7) `sha256:e11e31398fc5f5de8d2a378f5513c39bf7cd8096b9594984c301608e77833bbe`
* [thanos](https://github.com/openshift/thanos) git [95f7bb21](https://github.com/openshift/thanos/commit/95f7bb216c27bea9c8001a7b49fbd66d23286f80) `sha256:9b475df3b7c8dc1f5cabf3fe86900d0ad6f6bb5885e90ac099746870b5d9b706`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bf9d9f92728aa6d3185de42fe477fd0d0d1594c2)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.21 compatibility [#10020](https://github.com/openshift/assisted-service/pull/10020)
* [OCPBUGS-74630](https://issues.redhat.com/browse/OCPBUGS-74630): Retry incomplete cluster registration in ABI [#8809](https://github.com/openshift/assisted-service/pull/8809)
* [Full changelog](https://github.com/openshift/assisted-service/compare/f56d2b039a7a924ae51be9475ebe11d6709878c4...bf9d9f92728aa6d3185de42fe477fd0d0d1594c2)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/34af4548d9d162c4e07e7426d4c672d8fbc3500c)

* [OCPBUGS-68295](https://issues.redhat.com/browse/OCPBUGS-68295): bump github.com/sirupsen/logrus to v1.9.3 [#236](https://github.com/openshift/agent-installer-utils/pull/236)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/edfddbc100302df013eb3303c41da28f074e8dd4...34af4548d9d162c4e07e7426d4c672d8fbc3500c)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/e24f6952cec68a95641f89be2ff9a9201790f096)

* [OCPBUGS-80386](https://issues.redhat.com/browse/OCPBUGS-80386): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 [#312](https://github.com/openshift/aws-ebs-csi-driver/pull/312)
* [OCPBUGS-72365](https://issues.redhat.com/browse/OCPBUGS-72365): Fix incomplete vendor/ after vendoring [#295](https://github.com/openshift/aws-ebs-csi-driver/pull/295)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/d686e7d16a00cedcc1c42165e1996a4a9255d1a0...e24f6952cec68a95641f89be2ff9a9201790f096)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/735dc3c611fa79701ebe42ef01ec8f4fab84d2b5)

* [OCPBUGS-80489](https://issues.redhat.com/browse/OCPBUGS-80489): Bump google.golang.org/grpc [#541](https://github.com/openshift/csi-operator/pull/541)
* [OCPBUGS-84242](https://issues.redhat.com/browse/OCPBUGS-84242): [release-4.19] adds the csi-external-resizer to the image-references [#546](https://github.com/openshift/csi-operator/pull/546)
* [OCPBUGS-56898](https://issues.redhat.com/browse/OCPBUGS-56898): Fix Cinder, Manila driver metrics [#386](https://github.com/openshift/csi-operator/pull/386)
* [OCPBUGS-63559](https://issues.redhat.com/browse/OCPBUGS-63559): Add RBAC ClusterRole and Binding for driver node [#455](https://github.com/openshift/csi-operator/pull/455)
* [OCPBUGS-62926](https://issues.redhat.com/browse/OCPBUGS-62926): Add withCABundleDaemonSetHook() to AWS EFS operator [#444](https://github.com/openshift/csi-operator/pull/444)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e6ffce5ffcad6385976f241c9ef57a7fe4be6282...735dc3c611fa79701ebe42ef01ec8f4fab84d2b5)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/6dd8d81c504b39d0b80ca5b8df9a1c534fc1d6f8)

* [OCPBUGS-45666](https://issues.redhat.com/browse/OCPBUGS-45666): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.19 [#27](https://github.com/openshift/aws-encryption-provider/pull/27)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...6dd8d81c504b39d0b80ca5b8df9a1c534fc1d6f8)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/14f4b995a810d26516d5f1c88f7bee1d524686b0)

* [OCPBUGS-73729](https://issues.redhat.com/browse/OCPBUGS-73729): Fix reconciler consistency checks in Update and Exists [#165](https://github.com/openshift/machine-api-provider-aws/pull/165)
* [OCPBUGS-63137](https://issues.redhat.com/browse/OCPBUGS-63137): client: re-use a single file for building the session instead of randomly named files [#152](https://github.com/openshift/machine-api-provider-aws/pull/152)
* [OCPBUGS-63137](https://issues.redhat.com/browse/OCPBUGS-63137): revert: client: re-use a single file for building the session instead of randomly named files [#149](https://github.com/openshift/machine-api-provider-aws/pull/149)
* [OCPBUGS-63137](https://issues.redhat.com/browse/OCPBUGS-63137): client: re-use a single file for building the session instead of randomly named files [#147](https://github.com/openshift/machine-api-provider-aws/pull/147)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/84fbc02a1b018ffc93ba05622282889a28343db0...14f4b995a810d26516d5f1c88f7bee1d524686b0)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/dc228673549ec5dd87f0ecf35a57bfc3ab380dc1)

* [OCPBUGS-80392](https://issues.redhat.com/browse/OCPBUGS-80392): Bump google.golang.org/grpc to v1.79.3 [#385](https://github.com/openshift/cluster-api-provider-azure/pull/385)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/2e2909cf1317cb84285de3c73f6acadb9e8a31f2...dc228673549ec5dd87f0ecf35a57bfc3ab380dc1)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/78c221f4fada02624c8f856e238a359b24ae9a8f)

* [OCPBUGS-78035](https://issues.redhat.com/browse/OCPBUGS-78035): add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks [#129](https://github.com/openshift/azure-disk-csi-driver/pull/129)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/466334d41a33d801cef0e81bc7186b8fd42b3f30...78c221f4fada02624c8f856e238a359b24ae9a8f)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/8970409a952051e3fdc08728eddadb24bba94b70)

* [OCPBUGS-61975](https://issues.redhat.com/browse/OCPBUGS-61975): Rebase to upstream v1.32.3 for OCP 4.19 [#103](https://github.com/openshift/azure-file-csi-driver/pull/103)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/762a2b94b237cf16b56bb5085bcaa1471537cb52...8970409a952051e3fdc08728eddadb24bba94b70)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/163515df04124d4e2daaab47dc6fd30a1e5b246e)

* [OCPBUGS-65782](https://issues.redhat.com/browse/OCPBUGS-65782): Set updateDomainCount to one when faultDomainCount is one [#174](https://github.com/openshift/machine-api-provider-azure/pull/174)
* [OCPBUGS-63578](https://issues.redhat.com/browse/OCPBUGS-63578): Support DataDisks on Azure Stack Hub [#166](https://github.com/openshift/machine-api-provider-azure/pull/166)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/04987a4f8fbf36196044db0e1863cb0febf4a88e...163515df04124d4e2daaab47dc6fd30a1e5b246e)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/3bb352c18a940bf419a3ed8b1e7e5f23c3ba286e)

* [OCPBUGS-80362](https://issues.redhat.com/browse/OCPBUGS-80362): Bump google.golang.org/grpc to v1.79.3 [#30](https://github.com/openshift/azure-service-operator/pull/30)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/0ae129b4768d2e10e0ca215d272e207bfae963a3...3bb352c18a940bf419a3ed8b1e7e5f23c3ba286e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9cdc31344d455cbc638d490cdc32c978e0b822c1)

* [OCPBUGS-79503](https://issues.redhat.com/browse/OCPBUGS-79503): Increase size of /var/ostreecontainer mount [#10433](https://github.com/openshift/installer/pull/10433)
* [OCPBUGS-57323](https://issues.redhat.com/browse/OCPBUGS-57323): Power VS: Provide detailed error when entered VPCName cannot be found [#9779](https://github.com/openshift/installer/pull/9779)
* [OCPBUGS-78496](https://issues.redhat.com/browse/OCPBUGS-78496): fix wavelength zone name regex [#10391](https://github.com/openshift/installer/pull/10391)
* [OCPBUGS-73781](https://issues.redhat.com/browse/OCPBUGS-73781): pkg/asset/manifests/azure: save cidr blocks [#10216](https://github.com/openshift/installer/pull/10216)
* [OCPBUGS-74940](https://issues.redhat.com/browse/OCPBUGS-74940): Increase agent-installer pre-network-manager timeout [#10284](https://github.com/openshift/installer/pull/10284)
* [OCPBUGS-74675](https://issues.redhat.com/browse/OCPBUGS-74675): [release-4.19] GCP: skip AI zones [#10274](https://github.com/openshift/installer/pull/10274)
* [OCPBUGS-74629](https://issues.redhat.com/browse/OCPBUGS-74629): add support for NVIDIA H100 and H200 enabled machine series [#10270](https://github.com/openshift/installer/pull/10270)
* [OCPBUGS-66358](https://issues.redhat.com/browse/OCPBUGS-66358): Update the RHCOS 4.19 bootimage metadata to 9.6.20260112-0 [#10248](https://github.com/openshift/installer/pull/10248)
* [OCPBUGS-68296](https://issues.redhat.com/browse/OCPBUGS-68296): [4.19] uplift logrus [#10165](https://github.com/openshift/installer/pull/10165)
* [OCPBUGS-65610](https://issues.redhat.com/browse/OCPBUGS-65610): Azure UPI ARM template: use storageAccountId [#10151](https://github.com/openshift/installer/pull/10151)
* [OCPBUGS-63437](https://issues.redhat.com/browse/OCPBUGS-63437): vSphere 7 deprecation [#10026](https://github.com/openshift/installer/pull/10026)
* [OCPBUGS-66999](https://issues.redhat.com/browse/OCPBUGS-66999): Use separate tmpfs for ostree checkout on live ISO [#10153](https://github.com/openshift/installer/pull/10153)
* [OCPBUGS-65512](https://issues.redhat.com/browse/OCPBUGS-65512): Remove pending items on gcp no-op [#10074](https://github.com/openshift/installer/pull/10074)
* Revert "OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0" [#10094](https://github.com/openshift/installer/pull/10094)
* [OCPBUGS-65587](https://issues.redhat.com/browse/OCPBUGS-65587): Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0 [#10085](https://github.com/openshift/installer/pull/10085)
* [OCPBUGS-63634](https://issues.redhat.com/browse/OCPBUGS-63634): Update the RHCOS 4.19 bootimage metadata to 9.6.20251023-0 [#10038](https://github.com/openshift/installer/pull/10038)
* [OCPBUGS-63702](https://issues.redhat.com/browse/OCPBUGS-63702): Prevent duplicate noProxy when adding nodes [#10045](https://github.com/openshift/installer/pull/10045)
* [OCPBUGS-62981](https://issues.redhat.com/browse/OCPBUGS-62981): Catch gcp destroy cases where the operation is nil [#10013](https://github.com/openshift/installer/pull/10013)
* [OCPBUGS-62159](https://issues.redhat.com/browse/OCPBUGS-62159): Update the RHCOS 4.19 bootimage metadata [#9996](https://github.com/openshift/installer/pull/9996)
* [OCPBUGS-62911](https://issues.redhat.com/browse/OCPBUGS-62911): None: Allow IPv6 Primary DualStack installs on platforms None and External [#10008](https://github.com/openshift/installer/pull/10008)
* [Full changelog](https://github.com/openshift/installer/compare/7e30b7d6b421087ee6b6aaa639e40392c22ce52b...9cdc31344d455cbc638d490cdc32c978e0b822c1)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/b2a93a639c07ebf4d547d10877b6c13f65583248)

* [OCPBUGS-77802](https://issues.redhat.com/browse/OCPBUGS-77802): Makefile: Strip debugging symbols by default [#2217](https://github.com/openshift/oc/pull/2217)
* [OCPBUGS-65757](https://issues.redhat.com/browse/OCPBUGS-65757): pkg/cli/admin/upgrade: Tighten force warnings [#2146](https://github.com/openshift/oc/pull/2146)
* [OCPBUGS-65594](https://issues.redhat.com/browse/OCPBUGS-65594): fix(must-gather): do not set node affinity if nodename is set [#2143](https://github.com/openshift/oc/pull/2143)
* [OCPBUGS-64585](https://issues.redhat.com/browse/OCPBUGS-64585): Help with must-gather scheduling through suggesting preferance of nodes [#2124](https://github.com/openshift/oc/pull/2124)
* [OCPBUGS-59487](https://issues.redhat.com/browse/OCPBUGS-59487): adm, inspect, ns: Collect UserDefinedNetwork CRs [#2061](https://github.com/openshift/oc/pull/2061)
* [Full changelog](https://github.com/openshift/oc/compare/298429ba9831d1d72b89edd9beb82a6ee665c3b7...b2a93a639c07ebf4d547d10877b6c13f65583248)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2faf05d3fe49f9aefd1e96249d58e686a3f1ce8e)

* [OCPBUGS-74547](https://issues.redhat.com/browse/OCPBUGS-74547): Resolve nil pointer exception in hasResourceTags [#971](https://github.com/openshift/cloud-credential-operator/pull/971)
* [OCPBUGS-65799](https://issues.redhat.com/browse/OCPBUGS-65799): ccoctl azure: retry custom role creation on consistency errors [#949](https://github.com/openshift/cloud-credential-operator/pull/949)
* [OCPBUGS-65478](https://issues.redhat.com/browse/OCPBUGS-65478): ccoctl: use pagination when listing resources in aws [#946](https://github.com/openshift/cloud-credential-operator/pull/946)
* [OCPBUGS-63547](https://issues.redhat.com/browse/OCPBUGS-63547): ccoctl: add public-key-file flag to create-all [#937](https://github.com/openshift/cloud-credential-operator/pull/937)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0a5409aaef9203a4551bce93eac5637a32c87f7b...2faf05d3fe49f9aefd1e96249d58e686a3f1ce8e)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/49b7a9e2f1cc77fee3a8ee776d3eac8bae1be86e)

* [OCPBUGS-65513](https://issues.redhat.com/browse/OCPBUGS-65513): Fix capacity calculation [#190](https://github.com/openshift/cloud-network-config-controller/pull/190)
* [OCPBUGS-63753](https://issues.redhat.com/browse/OCPBUGS-63753): Change the capacity struct from int to ptrOfInt [#186](https://github.com/openshift/cloud-network-config-controller/pull/186)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/98ae311b854223a99e258d3c3369455d983de239...49b7a9e2f1cc77fee3a8ee776d3eac8bae1be86e)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/1d930619673e99029a1e5cec0194b5a3580ec35a)

* [OCPBUGS-65602](https://issues.redhat.com/browse/OCPBUGS-65602): set appropriate rolling update settings [#809](https://github.com/openshift/cluster-authentication-operator/pull/809)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/ceeb021d7562cf3d669ed7293f46b2a50e848c73...1d930619673e99029a1e5cec0194b5a3580ec35a)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/33b1498504745b15dff672a68f4005e35855cc4e)

* [OCPBUGS-78697](https://issues.redhat.com/browse/OCPBUGS-78697): allow clusterapi provider to skip paused resources [#412](https://github.com/openshift/kubernetes-autoscaler/pull/412)
* [OCPBUGS-63676](https://issues.redhat.com/browse/OCPBUGS-63676): update node info processors to include unschedulable nodes [#392](https://github.com/openshift/kubernetes-autoscaler/pull/392)
* [OCPBUGS-63603](https://issues.redhat.com/browse/OCPBUGS-63603): refactor cloud provider options [#388](https://github.com/openshift/kubernetes-autoscaler/pull/388)
* [OCPBUGS-63455](https://issues.redhat.com/browse/OCPBUGS-63455): Fixes histograms becoming empty after loaded from checkpoints [#395](https://github.com/openshift/kubernetes-autoscaler/pull/395)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c53c7153b62ff36cc725707297a4bbb7ea4f62e5...33b1498504745b15dff672a68f4005e35855cc4e)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/dd778375334821fb94db695ec1963e2f7f001893)

* [OCPBUGS-73954](https://issues.redhat.com/browse/OCPBUGS-73954): Add rbac for volumeattachments [#359](https://github.com/openshift/cluster-autoscaler-operator/pull/359)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/227f7537c3b459d4940522809df60b2dfca738ed...dd778375334821fb94db695ec1963e2f7f001893)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/d25f65138ada818ff264f66e239e856a5e51abed)

* [OCPBUGS-78457](https://issues.redhat.com/browse/OCPBUGS-78457): Explicitly set the ReadOnlyRootFilesystem flag to false [#574](https://github.com/openshift/cluster-baremetal-operator/pull/574)
* [OCPBUGS-78704](https://issues.redhat.com/browse/OCPBUGS-78704): Update kubebuilder tools to more latest version [#578](https://github.com/openshift/cluster-baremetal-operator/pull/578)
* [OCPBUGS-63134](https://issues.redhat.com/browse/OCPBUGS-63134): Always have a service for ironic-api port [#512](https://github.com/openshift/cluster-baremetal-operator/pull/512)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/38dbc972321dd339464ffd4a92d2bb6f9b01d761...d25f65138ada818ff264f66e239e856a5e51abed)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/42b8aeca8d812175660e6b372fc2145792b48f2d)

* [OCPBUGS-80401](https://issues.redhat.com/browse/OCPBUGS-80401): Bump google.golang.org/grpc to v1.79.3 [#295](https://github.com/openshift/cluster-api/pull/295)
* [Full changelog](https://github.com/openshift/cluster-api/compare/479f0c4edcfc5bc5706600070e8b8c142e59a5d4...42b8aeca8d812175660e6b372fc2145792b48f2d)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/f55cfc95bce78364283f4295071dedf538f6d3d2)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#557](https://github.com/openshift/cluster-capi-operator/pull/557)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9...f55cfc95bce78364283f4295071dedf538f6d3d2)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/5b39a4dfc245942db4a21cec493bfb2a15bb4b21)

* [OCPBUGS-63165](https://issues.redhat.com/browse/OCPBUGS-63165): ccm: disable unused secure-serving port and webhook [#420](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/420)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/bd2845df55a487e49aa73706cca6211877a912d5...5b39a4dfc245942db4a21cec493bfb2a15bb4b21)


### [cluster-config-api](https://github.com/openshift/api/tree/482f1b56dcc4d97ab9d3f7c22f102ecb54af83bb)

* [OCPBUGS-68378](https://issues.redhat.com/browse/OCPBUGS-68378): Add HTTPKeepAliveTimeout to IngressController API [#2627](https://github.com/openshift/api/pull/2627)
* OWNERS: update approvers/reviewers [#2624](https://github.com/openshift/api/pull/2624)
* [OCPBUGS-66984](https://issues.redhat.com/browse/OCPBUGS-66984): Introduce ClosedClientConnectionPolicy to IngressController API [#2616](https://github.com/openshift/api/pull/2616)
* [CNTRLPLANE-1979](https://issues.redhat.com/browse/CNTRLPLANE-1979): Promote streaming list encoding to Default [#2597](https://github.com/openshift/api/pull/2597)
* NO-JIRA: Promote streaming list encoding to Default on Hypershift. [#2559](https://github.com/openshift/api/pull/2559)
* [CNTRLPLANE-1609](https://issues.redhat.com/browse/CNTRLPLANE-1609): Add feature gates for StreamingCollectionEncoding [#2517](https://github.com/openshift/api/pull/2517)
* [Full changelog](https://github.com/openshift/api/compare/079ac08331d3021f9b7495857677ba59fdc4b25a...482f1b56dcc4d97ab9d3f7c22f102ecb54af83bb)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/024f8af5195a6bdbe0eb7e253ba83b5d3190247f)

* [OCPBUGS-85275](https://issues.redhat.com/browse/OCPBUGS-85275): Wait for revision stability before removing etcd members [#1613](https://github.com/openshift/cluster-etcd-operator/pull/1613)
* [OCPBUGS-78353](https://issues.redhat.com/browse/OCPBUGS-78353): Prefer to remove members where they have another healthy machine in the same failure domain index [#1565](https://github.com/openshift/cluster-etcd-operator/pull/1565)
* [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#1539](https://github.com/openshift/cluster-etcd-operator/pull/1539)
* [OCPBUGS-63338](https://issues.redhat.com/browse/OCPBUGS-63338): Ensure revision.json persists on ungraceful shutdown [#1502](https://github.com/openshift/cluster-etcd-operator/pull/1502)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b24b91c5aa186948daf1b18c88619beffcfa28c6...024f8af5195a6bdbe0eb7e253ba83b5d3190247f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/7ce99b2c11f456e0e6e3cfa80ebf7682466eb0ea)

* [OCPBUGS-65723](https://issues.redhat.com/browse/OCPBUGS-65723): IngressOperator not exposing some metrics for degraded… [#1308](https://github.com/openshift/cluster-ingress-operator/pull/1308)
* [OCPBUGS-68378](https://issues.redhat.com/browse/OCPBUGS-68378): Implement HTTPKeepAliveTimeout tuning option [#1323](https://github.com/openshift/cluster-ingress-operator/pull/1323)
* NO-JIRA: Add new NID team members to OWNERS [release-4.19] [#1318](https://github.com/openshift/cluster-ingress-operator/pull/1318)
* [OCPBUGS-66984](https://issues.redhat.com/browse/OCPBUGS-66984): Implement ClosedClientConnectionPolicy field [#1320](https://github.com/openshift/cluster-ingress-operator/pull/1320)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/ddd78734833eb45f2cd5fba677fe50e4ae9f063b...7ce99b2c11f456e0e6e3cfa80ebf7682466eb0ea)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1b48403438c3e0eb2ccb5cae331f12fe9abe169c)

* [OCPBUGS-83857](https://issues.redhat.com/browse/OCPBUGS-83857): Allow setting the oauthMetadata when auth type is None [#2118](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2118)
* [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#1959](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1959)
* [OCPBUGS-65525](https://issues.redhat.com/browse/OCPBUGS-65525): OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert [#1964](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1964)
* Revert "[release-4.19] OCPBUGS-65560: Optimistically update Kube Server and Client CA bundles" [#1963](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1963)
* [OCPBUGS-63342](https://issues.redhat.com/browse/OCPBUGS-63342): [release-4.19] Revert "Revert "OCPBUGS-58116: certregenerationcontroller: start configInformers [#1945](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1945)
* [OCPBUGS-60682](https://issues.redhat.com/browse/OCPBUGS-60682): Optimistically update Kube Server and Client CA bundles [#1920](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1920)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/80c1fc3d81e3392ef7b056c8833185c8bdf6f599...1b48403438c3e0eb2ccb5cae331f12fe9abe169c)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/21f858318e12e7fc2304ea6d3639680b6863a597)

* [OCPBUGS-80412](https://issues.redhat.com/browse/OCPBUGS-80412): Bump google.golang.org/grpc to v1.79.3 [#76](https://github.com/openshift/cluster-api-operator/pull/76)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/3ec30377ffff951dc9c0fc2257d290e4b4958465...21f858318e12e7fc2304ea6d3639680b6863a597)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7c4e44698b6004e52c59e03dd0c89611fbbfa999)

* [OCPBUGS-64687](https://issues.redhat.com/browse/OCPBUGS-64687): Add priority field to prevent early shutdown [#893](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/893)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/dcdeb36169153b44f58c9829b9699517338e065b...7c4e44698b6004e52c59e03dd0c89611fbbfa999)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/bf8cd78f223b3d27ea4fb170d22edea14df26df3)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#621](https://github.com/openshift/cluster-kube-scheduler-operator/pull/621)
* [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#609](https://github.com/openshift/cluster-kube-scheduler-operator/pull/609)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/8740a60de76690a17d5081db078eb93dfdb7a066...bf8cd78f223b3d27ea4fb170d22edea14df26df3)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/49517f79bdfeb0fa06f2bc80d793a0c9db194aab)

* [OCPBUGS-63586](https://issues.redhat.com/browse/OCPBUGS-63586): port 9193 need to be internal and port 9194 need to have a service [#281](https://github.com/openshift/cluster-machine-approver/pull/281)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/a52da47f2c5f0dab8db7bdfd9bc1f31a3ba5e404...49517f79bdfeb0fa06f2bc80d793a0c9db194aab)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/428ef596b766bb5b01a50a2ad5371b9734b6b989)

* [OCPBUGS-77273](https://issues.redhat.com/browse/OCPBUGS-77273): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2834](https://github.com/openshift/cluster-monitoring-operator/pull/2834)
* [OCPBUGS-67167](https://issues.redhat.com/browse/OCPBUGS-67167): Add the collection of MTV migration metrics [#2773](https://github.com/openshift/cluster-monitoring-operator/pull/2773)
* [OCPBUGS-67003](https://issues.redhat.com/browse/OCPBUGS-67003): make CMO Upgradeable=false if invalid Prometheus externalLabels are used [#2775](https://github.com/openshift/cluster-monitoring-operator/pull/2775)
* [OCPBUGS-62830](https://issues.redhat.com/browse/OCPBUGS-62830): Remove cluster from non-multicluster dashboards [#2760](https://github.com/openshift/cluster-monitoring-operator/pull/2760)
* [OCPBUGS-63236](https://issues.redhat.com/browse/OCPBUGS-63236): Remove AlertManager endpoints when disabled [#2716](https://github.com/openshift/cluster-monitoring-operator/pull/2716)
* [OCPBUGS-64578](https://issues.redhat.com/browse/OCPBUGS-64578): Fix KSM deny-list typo [#2730](https://github.com/openshift/cluster-monitoring-operator/pull/2730)
* [OCPBUGS-63409](https://issues.redhat.com/browse/OCPBUGS-63409): chore(prometheus/remotewrite): [release-4.19] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment [#2722](https://github.com/openshift/cluster-monitoring-operator/pull/2722)
* [OCPBUGS-63197](https://issues.redhat.com/browse/OCPBUGS-63197): add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator [#2678](https://github.com/openshift/cluster-monitoring-operator/pull/2678)
* [OCPBUGS-62965](https://issues.redhat.com/browse/OCPBUGS-62965), [OCPBUGS-62966](https://issues.redhat.com/browse/OCPBUGS-62966), [OCPBUGS-62967](https://issues.redhat.com/browse/OCPBUGS-62967), [OCPBUGS-62968](https://issues.redhat.com/browse/OCPBUGS-62968), [OCPBUGS-62969](https://issues.redhat.com/browse/OCPBUGS-62969): [Backport] non-HA alert cases [#2709](https://github.com/openshift/cluster-monitoring-operator/pull/2709)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/af73215390d0900066815081867f824bac6003fe...428ef596b766bb5b01a50a2ad5371b9734b6b989)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/945b31bdb28f5654dfadba0169185c95588f46b0)

* [OCPBUGS-84177](https://issues.redhat.com/browse/OCPBUGS-84177): Handle zero-worker HyperShift clusters in daemonset rollout [4.19 backport] [#2974](https://github.com/openshift/cluster-network-operator/pull/2974)
* [OCPBUGS-85404](https://issues.redhat.com/browse/OCPBUGS-85404): Remove duplicated openssl parameter [#3003](https://github.com/openshift/cluster-network-operator/pull/3003)
* [OCPBUGS-84201](https://issues.redhat.com/browse/OCPBUGS-84201): wait for patch port to apply drop garp flows [#2971](https://github.com/openshift/cluster-network-operator/pull/2971)
* [OCPBUGS-84143](https://issues.redhat.com/browse/OCPBUGS-84143): fix(hypershift): use net.JoinHostPort for URL construction [#2969](https://github.com/openshift/cluster-network-operator/pull/2969)
* [OCPBUGS-77150](https://issues.redhat.com/browse/OCPBUGS-77150): Add config override for openflow-probe [#2964](https://github.com/openshift/cluster-network-operator/pull/2964)
* [CORENET-6311](https://issues.redhat.com/browse/CORENET-6311), [OCPBUGS-74205](https://issues.redhat.com/browse/OCPBUGS-74205): Skip running _stackmanager for libreswan 5.3+ [#2885](https://github.com/openshift/cluster-network-operator/pull/2885)
* [OCPBUGS-67208](https://issues.redhat.com/browse/OCPBUGS-67208): Fix whereabouts-token-watcher DaemonSet improvements [#2857](https://github.com/openshift/cluster-network-operator/pull/2857)
* [OCPBUGS-70328](https://issues.redhat.com/browse/OCPBUGS-70328): Tweak iptables-alerter to try to avoid crictl bug [#2867](https://github.com/openshift/cluster-network-operator/pull/2867)
* [OCPBUGS-57134](https://issues.redhat.com/browse/OCPBUGS-57134): whereabouts-config is a reserved name for user interaction. [#2719](https://github.com/openshift/cluster-network-operator/pull/2719)
* [OCPBUGS-63447](https://issues.redhat.com/browse/OCPBUGS-63447), [OCPBUGS-63448](https://issues.redhat.com/browse/OCPBUGS-63448): Annotate whereabouts-controller [#2822](https://github.com/openshift/cluster-network-operator/pull/2822)
* [OCPBUGS-62670](https://issues.redhat.com/browse/OCPBUGS-62670): Add drop flows for GARP [#2809](https://github.com/openshift/cluster-network-operator/pull/2809)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/9d49a4beb3693a53833a7af29e54567a97c2de2f...945b31bdb28f5654dfadba0169185c95588f46b0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/1cc33c9af98eb06db1a591df2e7bdf0fd4448336)

* [OCPBUGS-85438](https://issues.redhat.com/browse/OCPBUGS-85438): e2e: Add irqbalance StartLimitBurst &gt;= 100 [#1514](https://github.com/openshift/cluster-node-tuning-operator/pull/1514)
* [OCPBUGS-73797](https://issues.redhat.com/browse/OCPBUGS-73797): PPC: ghw: filter out namespaces dir [#1455](https://github.com/openshift/cluster-node-tuning-operator/pull/1455)
* [OCPBUGS-63418](https://issues.redhat.com/browse/OCPBUGS-63418): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1416](https://github.com/openshift/cluster-node-tuning-operator/pull/1416)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/f1ff5dac295d07083e6c5decb80e157a9e87bcc9...1cc33c9af98eb06db1a591df2e7bdf0fd4448336)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/88faec2c2449f9f4ed3cfc4b8893cc29e6bfbbf3)

* [OCPBUGS-80420](https://issues.redhat.com/browse/OCPBUGS-80420): Bump google.golang.org/grpc to v1.79.3 [#199](https://github.com/openshift/cluster-olm-operator/pull/199)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/efb91390ee10673d8f3f16e604390bd68d361d50...88faec2c2449f9f4ed3cfc4b8893cc29e6bfbbf3)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/aa7f05d27fb2a60314278f0c248fd961442a4144)

* [OCPBUGS-63510](https://issues.redhat.com/browse/OCPBUGS-63510): references to github.com/sclorg/django-ex.git now also refer to the branch [#656](https://github.com/openshift/cluster-samples-operator/pull/656)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/4cb291973ad887b3506af1d0f86ba5c3e326d372...aa7f05d27fb2a60314278f0c248fd961442a4144)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/9dd4dc3fa79410674687c8282689ecb0edfec5f2)

* [OCPBUGS-77007](https://issues.redhat.com/browse/OCPBUGS-77007): add vsphere permissions for checking if users is authorized to see metrics [#667](https://github.com/openshift/cluster-storage-operator/pull/667)
* [OCPBUGS-62667](https://issues.redhat.com/browse/OCPBUGS-62667): Move metrics to vsphere driver [#631](https://github.com/openshift/cluster-storage-operator/pull/631)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/975ad328d5965a4e297b5b5eb0a7098976d50b09...9dd4dc3fa79410674687c8282689ecb0edfec5f2)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/842a2ac2261e03bc5b6717620c076bf58652c1f6)

* [OCPBUGS-70181](https://issues.redhat.com/browse/OCPBUGS-70181): OCPBUGS-70181: Unify capitalization when comparing architectures for available updates [#1291](https://github.com/openshift/cluster-version-operator/pull/1291)
* NO-ISSUE: hongkai becomes an approver release-4.19 [#1285](https://github.com/openshift/cluster-version-operator/pull/1285)
* [OCPBUGS-70296](https://issues.redhat.com/browse/OCPBUGS-70296): add the ports Field into the CVO's container spec [#1283](https://github.com/openshift/cluster-version-operator/pull/1283)
* [OCPBUGS-62868](https://issues.redhat.com/browse/OCPBUGS-62868): temporarily disable metrics auth for hypershift clusters [#1245](https://github.com/openshift/cluster-version-operator/pull/1245)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/810c159bb98f66d0c227702003b8b6ca503dc3e9...842a2ac2261e03bc5b6717620c076bf58652c1f6)


### [console](https://github.com/openshift/console/tree/f786edfa0b583bcb239b1adb30c444171f2dc7e5)

* [OCPBUGS-85308](https://issues.redhat.com/browse/OCPBUGS-85308): [release-4.19] Backport OCPBUGS-78439: vsphere settings [#16413](https://github.com/openshift/console/pull/16413)
* [OCPBUGS-84772](https://issues.redhat.com/browse/OCPBUGS-84772): Add robots.txt policy to console [#16378](https://github.com/openshift/console/pull/16378)
* NO-JIRA: enable multi-architecture yarn builds [#16416](https://github.com/openshift/console/pull/16416)
* [OCPBUGS-84271](https://issues.redhat.com/browse/OCPBUGS-84271): Fix VolumeSnapshot and VolumeSnapshotContent table sorting [#16335](https://github.com/openshift/console/pull/16335)
* [OCPBUGS-81738](https://issues.redhat.com/browse/OCPBUGS-81738): Fix editing secrets with mixed text and binary data [#16257](https://github.com/openshift/console/pull/16257)
* [OCPBUGS-81736](https://issues.redhat.com/browse/OCPBUGS-81736): Migrate InstallPlan components table to PatternFly Table [#16256](https://github.com/openshift/console/pull/16256)
* [OCPBUGS-81574](https://issues.redhat.com/browse/OCPBUGS-81574): Clean up old session cookies to prevent accumulation [#16242](https://github.com/openshift/console/pull/16242)
* [OCPBUGS-81515](https://issues.redhat.com/browse/OCPBUGS-81515): Visiting Group Detail Page &gt; RoleBindings will show error [#16234](https://github.com/openshift/console/pull/16234)
* [OCPBUGS-78292](https://issues.redhat.com/browse/OCPBUGS-78292): Fix infinite recursion in project access form [#16130](https://github.com/openshift/console/pull/16130)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16071](https://github.com/openshift/console/pull/16071)
* [OCPBUGS-76950](https://issues.redhat.com/browse/OCPBUGS-76950): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16028](https://github.com/openshift/console/pull/16028)
* [OCPBUGS-74464](https://issues.redhat.com/browse/OCPBUGS-74464): Bump lodash to latest [#15964](https://github.com/openshift/console/pull/15964)
* [OCPBUGS-74341](https://issues.redhat.com/browse/OCPBUGS-74341): Do not resolve disabled catalog type extensions [#15945](https://github.com/openshift/console/pull/15945)
* [OCPBUGS-70335](https://issues.redhat.com/browse/OCPBUGS-70335): OpenShift Console can only show user name instead of full name as the display name [#15888](https://github.com/openshift/console/pull/15888)
* [OCPBUGS-72399](https://issues.redhat.com/browse/OCPBUGS-72399): Fix Helm chart installation with CA/TLS certificates [#15898](https://github.com/openshift/console/pull/15898)
* [OCPBUGS-70135](https://issues.redhat.com/browse/OCPBUGS-70135): Update client initialization in checkPackageManifestHandler [#15877](https://github.com/openshift/console/pull/15877)
* [OCPBUGS-69677](https://issues.redhat.com/browse/OCPBUGS-69677): Spread operand details across 2 col [#15859](https://github.com/openshift/console/pull/15859)
* [OCPBUGS-69860](https://issues.redhat.com/browse/OCPBUGS-69860): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15866](https://github.com/openshift/console/pull/15866)
* [OCPBUGS-62725](https://issues.redhat.com/browse/OCPBUGS-62725): Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in "All Projects" mode [#15816](https://github.com/openshift/console/pull/15816)
* [OCPBUGS-67361](https://issues.redhat.com/browse/OCPBUGS-67361): Disallowed Pipelines-plugin Pipelines navigation section [#15839](https://github.com/openshift/console/pull/15839)
* [OCPBUGS-66245](https://issues.redhat.com/browse/OCPBUGS-66245): The number of Quick Starts item is wrong [#15793](https://github.com/openshift/console/pull/15793)
* [OCPBUGS-66179](https://issues.redhat.com/browse/OCPBUGS-66179): Fix unnecessary rerenders with pod-connect [#15784](https://github.com/openshift/console/pull/15784)
* [OCPBUGS-62438](https://issues.redhat.com/browse/OCPBUGS-62438): Updation of label from edit label doesn't work [#15547](https://github.com/openshift/console/pull/15547)
* [OCPBUGS-65930](https://issues.redhat.com/browse/OCPBUGS-65930): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15760](https://github.com/openshift/console/pull/15760)
* [OCPBUGS-63703](https://issues.redhat.com/browse/OCPBUGS-63703): Fix dynamic form spacing and layout issues [#15706](https://github.com/openshift/console/pull/15706)
* [OCPBUGS-64834](https://issues.redhat.com/browse/OCPBUGS-64834): Preserve path on perspective switch [#15697](https://github.com/openshift/console/pull/15697)
* [OCPBUGS-64849](https://issues.redhat.com/browse/OCPBUGS-64849): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15698](https://github.com/openshift/console/pull/15698)
* [OCPBUGS-64746](https://issues.redhat.com/browse/OCPBUGS-64746): Fix Bare Metal Hosts nav item [#15687](https://github.com/openshift/console/pull/15687)
* [OCPBUGS-63588](https://issues.redhat.com/browse/OCPBUGS-63588): Expose prometheus tenancy label path as a proxy [#15645](https://github.com/openshift/console/pull/15645)
* [OCPBUGS-63607](https://issues.redhat.com/browse/OCPBUGS-63607): limit node log length to 1000 lines [#15647](https://github.com/openshift/console/pull/15647)
* [OCPBUGS-63530](https://issues.redhat.com/browse/OCPBUGS-63530): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15642](https://github.com/openshift/console/pull/15642)
* [OCPBUGS-63156](https://issues.redhat.com/browse/OCPBUGS-63156): Initialize log package [#15610](https://github.com/openshift/console/pull/15610)
* [OCPBUGS-62999](https://issues.redhat.com/browse/OCPBUGS-62999): switch to dev perspective for `/dev-monitoring` [#15598](https://github.com/openshift/console/pull/15598)
* [OCPBUGS-59953](https://issues.redhat.com/browse/OCPBUGS-59953): fix: Fix negative CPU util graphs [#15345](https://github.com/openshift/console/pull/15345)
* [OCPBUGS-62643](https://issues.redhat.com/browse/OCPBUGS-62643): bump dompurify to latest [#15588](https://github.com/openshift/console/pull/15588)
* [Full changelog](https://github.com/openshift/console/compare/c20067291e2c1ec3f9c66572b2645838aec23337...f786edfa0b583bcb239b1adb30c444171f2dc7e5)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/5f3ccea6b322ae392c328f9aefa390747a7fa035)

* [OCPBUGS-64812](https://issues.redhat.com/browse/OCPBUGS-64812): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.19 [#335](https://github.com/openshift/cloud-provider-openstack/pull/335)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/d9b2461604dba3821d3c044843e428645f925734...5f3ccea6b322ae392c328f9aefa390747a7fa035)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/e85a428308f5e21a1b74b59eb29e52dbba931841)

* [OCPBUGS-80434](https://issues.redhat.com/browse/OCPBUGS-80434): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#178](https://github.com/openshift/csi-driver-nfs/pull/178)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/2eb5c109dd19f5a1b84410c0952db5cfaecb2f56...e85a428308f5e21a1b74b59eb29e52dbba931841)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/4c8a8a5dbf081c2e1ae992cbfa7f419ca5850f0b)

* [OCPBUGS-80435](https://issues.redhat.com/browse/OCPBUGS-80435): Bump google.golang.org/grpc to v1.79.3 [#104](https://github.com/openshift/csi-external-attacher/pull/104)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/a8175e3908635cc8357ac845a271f9e5b278c6aa...4c8a8a5dbf081c2e1ae992cbfa7f419ca5850f0b)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/b686f53b2c31b767bf6aa87b281caabc23c5de00)

* [OCPBUGS-80436](https://issues.redhat.com/browse/OCPBUGS-80436): Bump google.golang.org/grpc [#129](https://github.com/openshift/csi-external-provisioner/pull/129)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/9db1cdb1e0dfbe29529561bbdb55b45bd2b1e321...b686f53b2c31b767bf6aa87b281caabc23c5de00)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/580c6960cd665dfdc3d77538bb7744b8754aca26)

* [OCPBUGS-58463](https://issues.redhat.com/browse/OCPBUGS-58463): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#182](https://github.com/openshift/csi-external-snapshotter/pull/182)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/ac82cafc95b301f67f46ee0db93720d55177a19b...580c6960cd665dfdc3d77538bb7744b8754aca26)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/fa578445467753d2a000cb1ba1cb5dc91cfb9542)

* [OCPBUGS-63193](https://issues.redhat.com/browse/OCPBUGS-63193): update log level verbosity to not clutter logs [#88](https://github.com/openshift/csi-node-driver-registrar/pull/88)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/d18edb3aa61e673b33ec3a114e9f7dd4136f799e...fa578445467753d2a000cb1ba1cb5dc91cfb9542)


### [docker-builder](https://github.com/openshift/builder/tree/493200aed335b88aaec66f4d35622fef43eae47a)

* [OCPBUGS-66993](https://issues.redhat.com/browse/OCPBUGS-66993): bump buildah to 1.39.7 to fix CVE-2025-52881 [#497](https://github.com/openshift/builder/pull/497)
* [OCPBUGS-65624](https://issues.redhat.com/browse/OCPBUGS-65624): BuildConfig inline Dockerfile fails with heredoc syntax [#485](https://github.com/openshift/builder/pull/485)
* [Full changelog](https://github.com/openshift/builder/compare/28622dd3fdd350a440576f6c9a867fd8296bde0f...493200aed335b88aaec66f4d35622fef43eae47a)


### [docker-registry](https://github.com/openshift/image-registry/tree/53c4fd9d7448c1bad07cb45abfb47b25046deedc)

* [OCPBUGS-68302](https://issues.redhat.com/browse/OCPBUGS-68302): update logrus to v1.9.1 [#463](https://github.com/openshift/image-registry/pull/463)
* [Full changelog](https://github.com/openshift/image-registry/compare/b1d09765386d98825e92d8759767a53849d82e9a...53c4fd9d7448c1bad07cb45abfb47b25046deedc)


### [etcd](https://github.com/openshift/etcd/tree/3ebce536634cb76794f1b9668072a094c132c16a)

* [OCPBUGS-74602](https://issues.redhat.com/browse/OCPBUGS-74602): 4.19 rebase 3.5.26 [#360](https://github.com/openshift/etcd/pull/360)
* [OCPBUGS-63476](https://issues.redhat.com/browse/OCPBUGS-63476): 4.19 rebase 3.5.24 [#348](https://github.com/openshift/etcd/pull/348)
* [Full changelog](https://github.com/openshift/etcd/compare/eb0acd5c92a830da18d7d0d789f7a8ecac860620...3ebce536634cb76794f1b9668072a094c132c16a)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/cc42384fe0834f4d1711bc4e2794fab2886f292f)

* [OCPBUGS-80451](https://issues.redhat.com/browse/OCPBUGS-80451): Bump google.golang.org/grpc to v1.79.3 [#289](https://github.com/openshift/cluster-api-provider-gcp/pull/289)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/c8b865a1c4045a3b62dbf5ffea514f2c62d893f8...cc42384fe0834f4d1711bc4e2794fab2886f292f)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/cdaddac53f3a5624216a0b8a08953a3d5d572a9d)

* [OCPBUGS-68307](https://issues.redhat.com/browse/OCPBUGS-68307): Update logrus to 1.9.3 [#88](https://github.com/openshift/gcp-pd-csi-driver/pull/88)
* [OCPBUGS-62116](https://issues.redhat.com/browse/OCPBUGS-62116): UPSTREAM: 2054: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment [#82](https://github.com/openshift/gcp-pd-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/063b256caae5fbe3b6f2a5b1c35339220c7b4188...cdaddac53f3a5624216a0b8a08953a3d5d572a9d)


### [haproxy-router](https://github.com/openshift/router/tree/5fe8cc069b2f44b3393545ac92c3201e8a87d82b)

* [OCPBUGS-66984](https://issues.redhat.com/browse/OCPBUGS-66984): Add option abortonclose to HAProxy configuration template [#701](https://github.com/openshift/router/pull/701)
* [Full changelog](https://github.com/openshift/router/compare/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6...5fe8cc069b2f44b3393545ac92c3201e8a87d82b)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/a674efabac8b5044e6256ce4e2385914be215376)

* [OCPBUGS-77478](https://issues.redhat.com/browse/OCPBUGS-77478): Rebase v1.32.13 to release-4.19 [#2602](https://github.com/openshift/kubernetes/pull/2602)
* [OCPBUGS-76518](https://issues.redhat.com/browse/OCPBUGS-76518): Rebase v1.32.12 [#2592](https://github.com/openshift/kubernetes/pull/2592)
* [OCPBUGS-65552](https://issues.redhat.com/browse/OCPBUGS-65552): Rebase v1.32.10 [#2515](https://github.com/openshift/kubernetes/pull/2515)
* [OCPBUGS-59651](https://issues.redhat.com/browse/OCPBUGS-59651): Fix Concurrentmap Iteration [#2509](https://github.com/openshift/kubernetes/pull/2509)
* [CNTRLPLANE-1609](https://issues.redhat.com/browse/CNTRLPLANE-1609): Backport StreamingCollectionEncoding for JSON and protobuf [#2478](https://github.com/openshift/kubernetes/pull/2478)
* [Full changelog](https://github.com/openshift/kubernetes/compare/9fa6215ec67894ee1303a01eaf2fe833877d6e5a...a674efabac8b5044e6256ce4e2385914be215376)


### [hypershift](https://github.com/openshift/hypershift/tree/b22d1d795cbabc0d3b53955cf3ff2788e0115467)

* [OCPBUGS-84143](https://issues.redhat.com/browse/OCPBUGS-84143): fix(cno): use brackets only for IPv6 in server URL [#8345](https://github.com/openshift/hypershift/pull/8345)
* [OCPBUGS-81161](https://issues.redhat.com/browse/OCPBUGS-81161): [release-4.19] fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8093](https://github.com/openshift/hypershift/pull/8093)
* [OCPBUGS-78742](https://issues.redhat.com/browse/OCPBUGS-78742): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7992](https://github.com/openshift/hypershift/pull/7992)
* [OCPBUGS-74106](https://issues.redhat.com/browse/OCPBUGS-74106): Fix CVE-2025-58183 [#7547](https://github.com/openshift/hypershift/pull/7547)
* [OCPBUGS-76531](https://issues.redhat.com/browse/OCPBUGS-76531): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7698](https://github.com/openshift/hypershift/pull/7698)
* [OCPBUGS-77367](https://issues.redhat.com/browse/OCPBUGS-77367), [OCPBUGS-77844](https://issues.redhat.com/browse/OCPBUGS-77844): Fix ignition-server pod restarts [#7858](https://github.com/openshift/hypershift/pull/7858)
* [OCPBUGS-75932](https://issues.redhat.com/browse/OCPBUGS-75932): [release-4.19] fix(cpo): Correct route labeling logic for HCP router infrastructure [#7643](https://github.com/openshift/hypershift/pull/7643)
* [OCPBUGS-72393](https://issues.redhat.com/browse/OCPBUGS-72393): Fix Konflux EC voilation, nginx image deprecated [#7440](https://github.com/openshift/hypershift/pull/7440)
* [CNV-70889](https://issues.redhat.com/browse/CNV-70889): use csi-resizer image from release provider [#7102](https://github.com/openshift/hypershift/pull/7102)
* [OCPBUGS-65829](https://issues.redhat.com/browse/OCPBUGS-65829): The Containerfile in the repo has hypershift-no-cgo, but the published image quay.io/hypershift/hypershift-operator:latest doesn't [#7256](https://github.com/openshift/hypershift/pull/7256)
* [CNTRLPLANE-1709](https://issues.redhat.com/browse/CNTRLPLANE-1709): feat: Backport Customer Global Pull Secret to OpenShift 4.19.z [#7316](https://github.com/openshift/hypershift/pull/7316)
* [OCPBUGS-69415](https://issues.redhat.com/browse/OCPBUGS-69415): test: remove unit tests that depend on network communication [release-4.19] [#7395](https://github.com/openshift/hypershift/pull/7395)
* [OCPBUGS-65693](https://issues.redhat.com/browse/OCPBUGS-65693): specify SCC annotation for pods in data plane [#7255](https://github.com/openshift/hypershift/pull/7255)
* [OCPBUGS-62959](https://issues.redhat.com/browse/OCPBUGS-62959): fix(cvo): support image overrides annotation for CVO deployment [#7065](https://github.com/openshift/hypershift/pull/7065)
* [OCPBUGS-64817](https://issues.redhat.com/browse/OCPBUGS-64817): Add CPO hotfix arm64 builds [#7195](https://github.com/openshift/hypershift/pull/7195)
* [OCPBUGS-63129](https://issues.redhat.com/browse/OCPBUGS-63129): resolve initContainer permission issue after node reboot [#7145](https://github.com/openshift/hypershift/pull/7145)
* [OCPBUGS-63636](https://issues.redhat.com/browse/OCPBUGS-63636): [release-4.19] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7110](https://github.com/openshift/hypershift/pull/7110)
* [OCPBUGS-63368](https://issues.redhat.com/browse/OCPBUGS-63368): Make the hypershift CLI binary FIPS-compliant [#7092](https://github.com/openshift/hypershift/pull/7092)
* [OCPBUGS-61407](https://issues.redhat.com/browse/OCPBUGS-61407): fix: Do not admit OAuth route by private router unless… [#6780](https://github.com/openshift/hypershift/pull/6780)
* [OCPBUGS-62807](https://issues.redhat.com/browse/OCPBUGS-62807): Fix driver-config ConfigMap content flapping due to random ordering [#6944](https://github.com/openshift/hypershift/pull/6944)
* [CNTRLPLANE-1423](https://issues.redhat.com/browse/CNTRLPLANE-1423): feat(konflux): tag MCE HO images with latest [#6833](https://github.com/openshift/hypershift/pull/6833)
* [OCPBUGS-62183](https://issues.redhat.com/browse/OCPBUGS-62183): fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races [#6886](https://github.com/openshift/hypershift/pull/6886)
* [Full changelog](https://github.com/openshift/hypershift/compare/0aabce7b57fb605d8385166f1eeb61c65e7580e5...b22d1d795cbabc0d3b53955cf3ff2788e0115467)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/93126b6c4d8b1488a8b5e08f63af38625b90ca7a)

* [OCPBUGS-77206](https://issues.redhat.com/browse/OCPBUGS-77206): [release-4.19] standardize build paths [#119](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/119)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/176b6ef1136c45b8e3cb24a48458a251deca99bc...93126b6c4d8b1488a8b5e08f63af38625b90ca7a)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bdbc75c1786a8a58e7d1a9c24db95e6a5a334266)

* [OCPBUGS-81483](https://issues.redhat.com/browse/OCPBUGS-81483): bump vpc go sdk [#90](https://github.com/openshift/machine-api-provider-ibmcloud/pull/90)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#86](https://github.com/openshift/machine-api-provider-ibmcloud/pull/86)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/989bd87446d6fcbb2d7db20c90224621fac6ddb4...bdbc75c1786a8a58e7d1a9c24db95e6a5a334266)


### [insights-operator](https://github.com/openshift/insights-operator/tree/75529ad4b88b5c2aa47628ed01962658cc853916)

* [OCPBUGS-80464](https://issues.redhat.com/browse/OCPBUGS-80464): Bump google.golang.org/grpc to v1.79.3 [#1282](https://github.com/openshift/insights-operator/pull/1282)
* [OCPBUGS-83563](https://issues.redhat.com/browse/OCPBUGS-83563): kubeletconfig gatherer [#1272](https://github.com/openshift/insights-operator/pull/1272)
* [OCPBUGS-76962](https://issues.redhat.com/browse/OCPBUGS-76962): Extends the time for the extractor liveness probe [#1230](https://github.com/openshift/insights-operator/pull/1230)
* [OCPBUGS-75902](https://issues.redhat.com/browse/OCPBUGS-75902): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1224](https://github.com/openshift/insights-operator/pull/1224)
* [OCPBUGS-66202](https://issues.redhat.com/browse/OCPBUGS-66202): Add filtering to add other possible pod status to QEMU gatherer [#1190](https://github.com/openshift/insights-operator/pull/1190)
* [OCPBUGS-66058](https://issues.redhat.com/browse/OCPBUGS-66058): [bugfix] The archive's records may include files whose names are out of bounds [#1183](https://github.com/openshift/insights-operator/pull/1183)
* [OCPBUGS-66061](https://issues.redhat.com/browse/OCPBUGS-66061): QEMU logs are not gathered if there are pending status virt-launcher pods [#1184](https://github.com/openshift/insights-operator/pull/1184)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5e4c640c4c6d3e7f63a28222939e2b0d7e227cda...75529ad4b88b5c2aa47628ed01962658cc853916)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/f897761561e72281c27a9aac851ef936b874a2b9)

* [OCPBUGS-77779](https://issues.redhat.com/browse/OCPBUGS-77779): remove dnf cache from the container images [#68](https://github.com/openshift/insights-runtime-extractor/pull/68)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/0bee2d9be935de315081be77c910a8e40204e0b8...f897761561e72281c27a9aac851ef936b874a2b9)


### [ironic](https://github.com/openshift/ironic-image/tree/28707d95dfeb0dbd81089a9feb9dc16d8df7a824)

* [OCPBUGS-84855](https://issues.redhat.com/browse/OCPBUGS-84855): Bump pyasn1 to 0.5.1-4 [#825](https://github.com/openshift/ironic-image/pull/825)
* [OCPBUGS-74406](https://issues.redhat.com/browse/OCPBUGS-74406): Update sushy to include DGX B200 credentials fix [#819](https://github.com/openshift/ironic-image/pull/819)
* [OCPBUGS-74116](https://issues.redhat.com/browse/OCPBUGS-74116): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#794](https://github.com/openshift/ironic-image/pull/794)
* [OCPBUGS-77028](https://issues.redhat.com/browse/OCPBUGS-77028): Update ironic hash for 4.19 with heartbeat inspection fix [#797](https://github.com/openshift/ironic-image/pull/797)
* [OCPBUGS-69785](https://issues.redhat.com/browse/OCPBUGS-69785): Bump eventlet version to 0.33.1-7 [#759](https://github.com/openshift/ironic-image/pull/759)
* [OCPBUGS-65572](https://issues.redhat.com/browse/OCPBUGS-65572): Include Handle HTTP 400 and 409 race condition in Redfish power opera… [#724](https://github.com/openshift/ironic-image/pull/724)
* [OCPBUGS-62961](https://issues.redhat.com/browse/OCPBUGS-62961): Bump sushy to include fix [#700](https://github.com/openshift/ironic-image/pull/700)
* [Full changelog](https://github.com/openshift/ironic-image/compare/fe31e71dbbbd24c77adaecdc3d4d895375a611a5...28707d95dfeb0dbd81089a9feb9dc16d8df7a824)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d7f33593262aadda98c83a369cad2e3ee92054ad)

* [OCPBUGS-69783](https://issues.redhat.com/browse/OCPBUGS-69783): Bump eventlet version to 0.33.1-7 [#229](https://github.com/openshift/ironic-agent-image/pull/229)
* [OCPBUGS-67304](https://issues.redhat.com/browse/OCPBUGS-67304): Include Test advertised ip reachability before assigning it [#224](https://github.com/openshift/ironic-agent-image/pull/224)
* [OCPBUGS-62441](https://issues.redhat.com/browse/OCPBUGS-62441): netutils: Use ethtool ioctl to get permanent mac address [#198](https://github.com/openshift/ironic-agent-image/pull/198)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/5b5afbd42650dacfc34d03f599ebd980d55e10e6...d7f33593262aadda98c83a369cad2e3ee92054ad)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/d482dffae6a16460fc34ddd896d1d8cef3af50bd)

* [OCPBUGS-80365](https://issues.redhat.com/browse/OCPBUGS-80365): Bump google.golang.org/grpc to v1.79.3 [#63](https://github.com/openshift/kubernetes-metrics-server/pull/63)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/037a0e7e4ef401cd81d3e8330eeed26c8c753592...d482dffae6a16460fc34ddd896d1d8cef3af50bd)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/765abeccb884627e903e2b9b9d27055fd7e06b69)

* [OCPBUGS-79322](https://issues.redhat.com/browse/OCPBUGS-79322): Add annotation-based fallback for infra VM node ID resolution [#85](https://github.com/openshift/kubevirt-csi-driver/pull/85)
* [OCPBUGS-78389](https://issues.redhat.com/browse/OCPBUGS-78389): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.19 [#79](https://github.com/openshift/kubevirt-csi-driver/pull/79)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/f535e9a1a27ebfeca0fa1ac33f19383f46629141...765abeccb884627e903e2b9b9d27055fd7e06b69)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/be869073822c90e5d2e026f6af76a20d7e570ccc)

* [OCPBUGS-77193](https://issues.redhat.com/browse/OCPBUGS-77193): Fix incomplete vendor/ [#299](https://github.com/openshift/cluster-api-provider-libvirt/pull/299)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...be869073822c90e5d2e026f6af76a20d7e570ccc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d89af39e4ddb9b0a89d400664cb496e505e71991)

* [OCPBUGS-78715](https://issues.redhat.com/browse/OCPBUGS-78715): : [release-4.19] Use resource group when generating default Azure image [#1479](https://github.com/openshift/machine-api-operator/pull/1479)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/dd0126864cf2196ac84b4c1fe862178b70aebc7a...d89af39e4ddb9b0a89d400664cb496e505e71991)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/5cbbb2493d9877837d92cbb529bd2887050a7e46)

* [OCPBUGS-85581](https://issues.redhat.com/browse/OCPBUGS-85581): Fix units rollback if update failure [#6039](https://github.com/openshift/machine-config-operator/pull/6039)
* [OCPBUGS-85018](https://issues.redhat.com/browse/OCPBUGS-85018): Update AMI Whitelist [#5997](https://github.com/openshift/machine-config-operator/pull/5997)
* [OCPBUGS-84042](https://issues.redhat.com/browse/OCPBUGS-84042): Update AMI Whitelist [#5871](https://github.com/openshift/machine-config-operator/pull/5871)
* [release 4.19] OCPBUGS-81289: Calculate machine counts in MCP status from node properties [#5823](https://github.com/openshift/machine-config-operator/pull/5823)
* [OCPBUGS-76920](https://issues.redhat.com/browse/OCPBUGS-76920): Degrade MCPs status based on MCN `NodeDegraded` condition [#5662](https://github.com/openshift/machine-config-operator/pull/5662)
* [OCPBUGS-81282](https://issues.redhat.com/browse/OCPBUGS-81282): Re-order logger setting to eliminate race condition [#5822](https://github.com/openshift/machine-config-operator/pull/5822)
* [OCPBUGS-81144](https://issues.redhat.com/browse/OCPBUGS-81144): Update AMI Whitelist [#5817](https://github.com/openshift/machine-config-operator/pull/5817)
* [OCPBUGS-79473](https://issues.redhat.com/browse/OCPBUGS-79473): set default-timeout-stop to 200s globally [#5802](https://github.com/openshift/machine-config-operator/pull/5802)
* [OCPBUGS-77955](https://issues.redhat.com/browse/OCPBUGS-77955): Update AMI Whitelist [#5749](https://github.com/openshift/machine-config-operator/pull/5749)
* [OCPBUGS-77221](https://issues.redhat.com/browse/OCPBUGS-77221): Prevent unnecessary systemd unit disable [#5688](https://github.com/openshift/machine-config-operator/pull/5688)
* [OCPBUGS-77828](https://issues.redhat.com/browse/OCPBUGS-77828): Update AMI Whitelist [#5742](https://github.com/openshift/machine-config-operator/pull/5742)
* [OCPBUGS-77725](https://issues.redhat.com/browse/OCPBUGS-77725): reduce MCO image size [#5737](https://github.com/openshift/machine-config-operator/pull/5737)
* [OCPBUGS-74147](https://issues.redhat.com/browse/OCPBUGS-74147): enable nodeip-configuration for platform external [#5579](https://github.com/openshift/machine-config-operator/pull/5579)
* [OCPBUGS-77229](https://issues.redhat.com/browse/OCPBUGS-77229): Backport: Add delays to reduce TestOSBuildController failures [#5690](https://github.com/openshift/machine-config-operator/pull/5690)
* [OCPBUGS-77420](https://issues.redhat.com/browse/OCPBUGS-77420): Remove MCD liveness probe [#5711](https://github.com/openshift/machine-config-operator/pull/5711)
* [OCPBUGS-77306](https://issues.redhat.com/browse/OCPBUGS-77306): mcd_config_drift not working properly [#5700](https://github.com/openshift/machine-config-operator/pull/5700)
* [OCPBUGS-77240](https://issues.redhat.com/browse/OCPBUGS-77240): Fix MCN conditions not updating during OCL sync [#5693](https://github.com/openshift/machine-config-operator/pull/5693)
* [OCPBUGS-77071](https://issues.redhat.com/browse/OCPBUGS-77071): Machine-config controller should not log about non-existent pull-secret changes [#5674](https://github.com/openshift/machine-config-operator/pull/5674)
* [OCPBUGS-76831](https://issues.redhat.com/browse/OCPBUGS-76831): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5658](https://github.com/openshift/machine-config-operator/pull/5658)
* [OCPBUGS-76362](https://issues.redhat.com/browse/OCPBUGS-76362): Update AMI script and list [#5640](https://github.com/openshift/machine-config-operator/pull/5640)
* [OCPBUGS-43435](https://issues.redhat.com/browse/OCPBUGS-43435): After OCL is enabled few phases in MCN are not updating as expected [#5606](https://github.com/openshift/machine-config-operator/pull/5606)
* [OCPBUGS-71210](https://issues.redhat.com/browse/OCPBUGS-71210): MCP is not correctly degraded when a pivotError happens [#5532](https://github.com/openshift/machine-config-operator/pull/5532)
* [OCPBUGS-70325](https://issues.redhat.com/browse/OCPBUGS-70325): Remove log exposing kubeconfig [#5526](https://github.com/openshift/machine-config-operator/pull/5526)
* [OCPBUGS-67264](https://issues.redhat.com/browse/OCPBUGS-67264): cherry pick to few fixes that needed for missing services and configuration [#5490](https://github.com/openshift/machine-config-operator/pull/5490)
* [OCPBUGS-67198](https://issues.redhat.com/browse/OCPBUGS-67198): Fix cleanup in TestInstallRPMAndCheckMCDMetrics to decrease risk of test failures due to interference [#5496](https://github.com/openshift/machine-config-operator/pull/5496)
* [OCPBUGS-64922](https://issues.redhat.com/browse/OCPBUGS-64922): Update timing of MCN desired config spec update to align with node annotation setting [#5439](https://github.com/openshift/machine-config-operator/pull/5439)
* [OCPBUGS-65839](https://issues.redhat.com/browse/OCPBUGS-65839): Remove --mount directives [#5430](https://github.com/openshift/machine-config-operator/pull/5430)
* [OCPBUGS-62168](https://issues.redhat.com/browse/OCPBUGS-62168): Fix - NetworkManager restart or crash renders br-ex unusable [#5352](https://github.com/openshift/machine-config-operator/pull/5352)
* [OCPBUGS-64844](https://issues.redhat.com/browse/OCPBUGS-64844): Create temporal allow policy [#5398](https://github.com/openshift/machine-config-operator/pull/5398)
* [OCPBUGS-63126](https://issues.redhat.com/browse/OCPBUGS-63126): Ensure the node passed to RunCordonOrUncordon comes from the latest updated state [#5348](https://github.com/openshift/machine-config-operator/pull/5348)
* [OCPBUGS-62670](https://issues.redhat.com/browse/OCPBUGS-62670): [release-4.19] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5324](https://github.com/openshift/machine-config-operator/pull/5324)
* [OCPBUGS-62746](https://issues.redhat.com/browse/OCPBUGS-62746): Fix MCP updated machine count for image mode disabling case [#5336](https://github.com/openshift/machine-config-operator/pull/5336)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/673c0bd6bbedd1cffdc59547c7d42e95ad7f4dd4...5cbbb2493d9877837d92cbb529bd2887050a7e46)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/6d34fbab6ca22e74eb1761278f05d28c42518d8a)

* [OCPBUGS-81713](https://issues.redhat.com/browse/OCPBUGS-81713): Return error when network data Secret lacks nmstate key [#173](https://github.com/openshift/image-customization-controller/pull/173)
* [OCPBUGS-77567](https://issues.redhat.com/browse/OCPBUGS-77567): Clean up dnf cache to reduce container image size [#166](https://github.com/openshift/image-customization-controller/pull/166)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/7d0667469c6a7980f0f6cbaeb2b17686378696f1...6d34fbab6ca22e74eb1761278f05d28c42518d8a)


### [metallb-frr](https://github.com/openshift/frr/tree/9c93b083918f4266b7139ae39207c12cd4824345)

* [OCPBUGS-66055](https://issues.redhat.com/browse/OCPBUGS-66055): Dockerfile: unpin FRR rpm [#113](https://github.com/openshift/frr/pull/113)
* [Full changelog](https://github.com/openshift/frr/compare/5076dbc4f8483a844f1fce06b57216d743600237...9c93b083918f4266b7139ae39207c12cd4824345)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/b5f1aaa63d74e8ee06ec617bfcf5da3441348cd1)

* [OU-1372](https://issues.redhat.com/browse/OU-1372): reset queries when namespace changes in dev perspective [#950](https://github.com/openshift/monitoring-plugin/pull/950)
* [OU-1370](https://issues.redhat.com/browse/OU-1370): prevent namespace and project desync [#944](https://github.com/openshift/monitoring-plugin/pull/944)
* [OCPBUGS-83496](https://issues.redhat.com/browse/OCPBUGS-83496): [release-4.19] feat: re enable dev console views [#858](https://github.com/openshift/monitoring-plugin/pull/858)
* [OCPBUGS-83300](https://issues.redhat.com/browse/OCPBUGS-83300): [release-4.19] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#889](https://github.com/openshift/monitoring-plugin/pull/889)
* [OCPBUGS-82520](https://issues.redhat.com/browse/OCPBUGS-82520): fix: re encode params when redirecting from graph to query-browser [#874](https://github.com/openshift/monitoring-plugin/pull/874)
* [OCPBUGS-77407](https://issues.redhat.com/browse/OCPBUGS-77407): koa bump [#867](https://github.com/openshift/monitoring-plugin/pull/867)
* [OCPBUGS-76579](https://issues.redhat.com/browse/OCPBUGS-76579): [release-4.19]CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via __proto__ Key in mergeConfig [#789](https://github.com/openshift/monitoring-plugin/pull/789)
* [OCPBUGS-78360](https://issues.redhat.com/browse/OCPBUGS-78360): fix for CVE-2025-69873 [#847](https://github.com/openshift/monitoring-plugin/pull/847)
* [OCPBUGS-78397](https://issues.redhat.com/browse/OCPBUGS-78397): Updating monitoring-plugin-container image to be consistent with ART for 4.19 [#842](https://github.com/openshift/monitoring-plugin/pull/842)
* NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.19] [#806](https://github.com/openshift/monitoring-plugin/pull/806)
* [OCPBUGS-76937](https://issues.redhat.com/browse/OCPBUGS-76937): fix: update vulnerable dependencies [#773](https://github.com/openshift/monitoring-plugin/pull/773)
* [OU-1233](https://issues.redhat.com/browse/OU-1233): monitoring testing on release-4.19 branch - fix [#785](https://github.com/openshift/monitoring-plugin/pull/785)
* [OU-1233](https://issues.redhat.com/browse/OU-1233): automation task - main into 419 and alerting conditional filtering [#772](https://github.com/openshift/monitoring-plugin/pull/772)
* [OCPBUGS-74166](https://issues.redhat.com/browse/OCPBUGS-74166): fix: update qs vulnerable dependency [#737](https://github.com/openshift/monitoring-plugin/pull/737)
* [OU-1157](https://issues.redhat.com/browse/OU-1157): remove random multiplication [#706](https://github.com/openshift/monitoring-plugin/pull/706)
* [OU-1131](https://issues.redhat.com/browse/OU-1131): Merge main into release-4.19 [#693](https://github.com/openshift/monitoring-plugin/pull/693)
* [OCPBUGS-66388](https://issues.redhat.com/browse/OCPBUGS-66388): Time range and Refresh interval dropdown button lack of unique identifier [#671](https://github.com/openshift/monitoring-plugin/pull/671)
* [OU-863](https://issues.redhat.com/browse/OU-863): [release-4.19]: Fix step calculation for metric explorer 4.19 [#655](https://github.com/openshift/monitoring-plugin/pull/655)
* [OCPBUGS-63531](https://issues.redhat.com/browse/OCPBUGS-63531): [release-4.19] Improve alignment with console SDK [#647](https://github.com/openshift/monitoring-plugin/pull/647)
* [OCPBUGS-63588](https://issues.redhat.com/browse/OCPBUGS-63588): [release-4.19] allow tenancy access to metrics tags [#618](https://github.com/openshift/monitoring-plugin/pull/618)
* [OU-1060](https://issues.redhat.com/browse/OU-1060): remove troubleshooting panel links from non-admin [#629](https://github.com/openshift/monitoring-plugin/pull/629)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/345d64d597581eb0cb3cd2c1cf06124446da79a5...b5f1aaa63d74e8ee06ec617bfcf5da3441348cd1)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/096dd40376213f75c34fee9b1b56ed3693c288d5)

* [OCPBUGS-85248](https://issues.redhat.com/browse/OCPBUGS-85248): Fix server url in kubeconfig [#288](https://github.com/openshift/multus-cni/pull/288)
* NO-ISSUE: [release-4.19] fix CI build root image [#289](https://github.com/openshift/multus-cni/pull/289)
* [Full changelog](https://github.com/openshift/multus-cni/compare/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe...096dd40376213f75c34fee9b1b56ed3693c288d5)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/0451c87778f69356a705e79a9575b1e61c80f09c)

* [OCPBUGS-77778](https://issues.redhat.com/browse/OCPBUGS-77778): Clean up dnf cache [#103](https://github.com/openshift/multus-networkpolicy/pull/103)
* [OCPBUGS-77158](https://issues.redhat.com/browse/OCPBUGS-77158): Fix modified vendor/ and go.sum after vendoring [#82](https://github.com/openshift/multus-networkpolicy/pull/82)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/6fffe5d78f52e01e51110d178b433788ef98c8ae...0451c87778f69356a705e79a9575b1e61c80f09c)


### [must-gather](https://github.com/openshift/must-gather/tree/cbe044bce8937a811d97719e13b1459d9e8b1fb0)

* [OCPBUGS-85578](https://issues.redhat.com/browse/OCPBUGS-85578): Collect object size with the object count [#546](https://github.com/openshift/must-gather/pull/546)
* [OCPBUGS-59487](https://issues.redhat.com/browse/OCPBUGS-59487): network: Gather OVN-Kubernetes CUDN CRs [#499](https://github.com/openshift/must-gather/pull/499)
* [Full changelog](https://github.com/openshift/must-gather/compare/463c03ca559bb00f324b11273763aa64543f9006...cbe044bce8937a811d97719e13b1459d9e8b1fb0)


### [network-tools](https://github.com/openshift/network-tools/tree/633767b26eb0d7c69e370599d40458e72e7d1a69)

* NO-JIRA: fix prefetch-dependencies step failure [#166](https://github.com/openshift/network-tools/pull/166)
* [Full changelog](https://github.com/openshift/network-tools/compare/81f7aebeb1553998800c32644a8d982121277b4e...633767b26eb0d7c69e370599d40458e72e7d1a69)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/ccbe710f301924a14e92b9705d8230a45fdac930)

* [OCPBUGS-83384](https://issues.redhat.com/browse/OCPBUGS-83384): Fix CVE-2026-34043 in serialize-javascript [#395](https://github.com/openshift/networking-console-plugin/pull/395)
* [release-4:19] OCPBUGS-84634: Migration from yarn to npm [#398](https://github.com/openshift/networking-console-plugin/pull/398)
* [OCPBUGS-66279](https://issues.redhat.com/browse/OCPBUGS-66279), [OCPBUGS-67251](https://issues.redhat.com/browse/OCPBUGS-67251): fix node-forge by upgrading webpack-dev-server: ^4.7.4 → ^5.2.3" [#410](https://github.com/openshift/networking-console-plugin/pull/410)
* [OCPBUGS-73654](https://issues.redhat.com/browse/OCPBUGS-73654): CVE-2026-22029 fix to @remix-run/router to 1.23.2 [#405](https://github.com/openshift/networking-console-plugin/pull/405)
* [OCPBUGS-81610](https://issues.redhat.com/browse/OCPBUGS-81610): Fix CVE-2026-CVE-2026-4800 in lodash [#400](https://github.com/openshift/networking-console-plugin/pull/400)
* [OCPBUGS-79453](https://issues.redhat.com/browse/OCPBUGS-79453): Bump immutable [#391](https://github.com/openshift/networking-console-plugin/pull/391)
* [OCPBUGS-41199](https://issues.redhat.com/browse/OCPBUGS-41199): Fix NAD creation using default namespace instead of selected one [#351](https://github.com/openshift/networking-console-plugin/pull/351)
* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#318](https://github.com/openshift/networking-console-plugin/pull/318)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f37c618af0ac1c9122486c068cc99df4ffd1e70f...ccbe710f301924a14e92b9705d8230a45fdac930)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/5539eb2b1174fe0d8a65287c449c99ec3a362122)

* NO-JIRA: (chore): update OWNERS file [#169](https://github.com/openshift/oauth-apiserver/pull/169)
* [OCPBUGS-61760](https://issues.redhat.com/browse/OCPBUGS-61760): bump kubernetes-apiserver to pick up loopback certificate expiration update [#152](https://github.com/openshift/oauth-apiserver/pull/152)
* [OCPBUGS-63051](https://issues.redhat.com/browse/OCPBUGS-63051): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#150](https://github.com/openshift/oauth-apiserver/pull/150)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/75914068d66a8b5502906526942c2423bec86f7a...5539eb2b1174fe0d8a65287c449c99ec3a362122)


### [oauth-server](https://github.com/openshift/oauth-server/tree/eafa143a67a0ba86439f96ceb6a1ca9d2b3815e3)

* [OCPBUGS-58892](https://issues.redhat.com/browse/OCPBUGS-58892): Fix mixup with Spanish and French locale variable names [#192](https://github.com/openshift/oauth-server/pull/192)
* [Full changelog](https://github.com/openshift/oauth-server/compare/14780f7c67d5929c3db84504d10625710fcf5fe0...eafa143a67a0ba86439f96ceb6a1ca9d2b3815e3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9700b486d6b4b4625060caef2c2804c429d676fb)

* [OCPBUGS-78147](https://issues.redhat.com/browse/OCPBUGS-78147): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1367](https://github.com/openshift/oc-mirror/pull/1367)
* [OCPBUGS-77663](https://issues.redhat.com/browse/OCPBUGS-77663): Fix reg config detection for explicit false values [#1363](https://github.com/openshift/oc-mirror/pull/1363)
* [OCPBUGS-66410](https://issues.redhat.com/browse/OCPBUGS-66410): fix: return only requested version [#1323](https://github.com/openshift/oc-mirror/pull/1323)
* [OCPBUGS-65968](https://issues.redhat.com/browse/OCPBUGS-65968): Remove empty status field from generated IDMS/ITMS files [#1318](https://github.com/openshift/oc-mirror/pull/1318)
* [OCPBUGS-64683](https://issues.redhat.com/browse/OCPBUGS-64683): removes unintended exec permissions [#1307](https://github.com/openshift/oc-mirror/pull/1307)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/137bd5b2e478496ac6177cff57c1277f5345a5ab...9700b486d6b4b4625060caef2c2804c429d676fb)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/4b3ad172bc6e39f82cf1a1925df2cd1ef294d0d8)

* [OCPBUGS-63405](https://issues.redhat.com/browse/OCPBUGS-63405), [OPRUN-4216](https://issues.redhat.com/browse/OPRUN-4216): Port CRD upgrade safety carry from 4.20 without bumping deps [#543](https://github.com/openshift/operator-framework-operator-controller/pull/543)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/abf950347eaa8124a6f6f819dadfb787bc6c5ff5...4b3ad172bc6e39f82cf1a1925df2cd1ef294d0d8)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a5eb0298114e532b8b1e3cca74e3c263136892ac)

* [OCPBUGS-66920](https://issues.redhat.com/browse/OCPBUGS-66920): Add ValidatingAdmissionPolicy and check for omissions next time. [#588](https://github.com/openshift/openshift-apiserver/pull/588)
* [OCPBUGS-61662](https://issues.redhat.com/browse/OCPBUGS-61662): Adding validation directly and calling existing library-go validation [#576](https://github.com/openshift/openshift-apiserver/pull/576)
* [OCPBUGS-65962](https://issues.redhat.com/browse/OCPBUGS-65962): pkg/image: conditionally parse raw image manifest [#582](https://github.com/openshift/openshift-apiserver/pull/582)
* NO-JIRA: add .0 to go version [#583](https://github.com/openshift/openshift-apiserver/pull/583)
* [OCPBUGS-65863](https://issues.redhat.com/browse/OCPBUGS-65863): update pkg/image/OWNERS [#578](https://github.com/openshift/openshift-apiserver/pull/578)
* [OCPBUGS-61759](https://issues.redhat.com/browse/OCPBUGS-61759): bump kubernetes-apiserver to pick up loopback certificate expiration update [#569](https://github.com/openshift/openshift-apiserver/pull/569)
* [OCPBUGS-57043](https://issues.redhat.com/browse/OCPBUGS-57043): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 [#564](https://github.com/openshift/openshift-apiserver/pull/564)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7fe57362c4f64c0d4caf52a0bb26a59b2799b227...a5eb0298114e532b8b1e3cca74e3c263136892ac)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/bd1fc7041d18f108120a86a4429c4f45b624b04b)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 [#393](https://github.com/openshift/cluster-api-provider-openstack/pull/393)
* [OCPBUGS-64815](https://issues.redhat.com/browse/OCPBUGS-64815): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 [#370](https://github.com/openshift/cluster-api-provider-openstack/pull/370)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/53190949835e1d94e07bbcfc13804fc959b9028a...bd1fc7041d18f108120a86a4429c4f45b624b04b)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/e8b2a9a559f553618136f17b8db3c639bb0a9f1e)

* [OCPBUGS-69646](https://issues.redhat.com/browse/OCPBUGS-69646): Don't record event for every reconcile [#144](https://github.com/openshift/machine-api-provider-openstack/pull/144)
* [OCPBUGS-76791](https://issues.redhat.com/browse/OCPBUGS-76791): Fix make test [#158](https://github.com/openshift/machine-api-provider-openstack/pull/158)
* [OCPBUGS-74586](https://issues.redhat.com/browse/OCPBUGS-74586): Revendor CAPO [#151](https://github.com/openshift/machine-api-provider-openstack/pull/151)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/848bf658a280e6ab6f660c290a24e16fa29252e3...e8b2a9a559f553618136f17b8db3c639bb0a9f1e)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/93649380ab6fdccf8ec1716f89162b506c7de172)

* [OCPBUGS-79700](https://issues.redhat.com/browse/OCPBUGS-79700): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1270](https://github.com/openshift/operator-framework-olm/pull/1270)
* [OCPBUGS-77437](https://issues.redhat.com/browse/OCPBUGS-77437): Remove the collect-profiles info from the microshift kustomization file [#1240](https://github.com/openshift/operator-framework-olm/pull/1240)
* [OCPBUGS-76587](https://issues.redhat.com/browse/OCPBUGS-76587): Remove the collect-profiles job [#1229](https://github.com/openshift/operator-framework-olm/pull/1229)
* [OCPBUGS-64925](https://issues.redhat.com/browse/OCPBUGS-64925): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1145](https://github.com/openshift/operator-framework-olm/pull/1145)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e42f5c26092b9dea5856807d314f57e1886d31d7...93649380ab6fdccf8ec1716f89162b506c7de172)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/ca41bfdd1a96f70632ea3d218a9a007ecbcf76f5)

* [OCPBUGS-73882](https://issues.redhat.com/browse/OCPBUGS-73882): Increase default catalog polling interval to 4h (240m) [#706](https://github.com/operator-framework/operator-marketplace/pull/706)
* [OCPBUGS-62217](https://issues.redhat.com/browse/OCPBUGS-62217): Remove Expect func so that the test case can use the retry logic [#668](https://github.com/operator-framework/operator-marketplace/pull/668)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/02d245516289b2f3a27b81ce59b9cef66750501c...ca41bfdd1a96f70632ea3d218a9a007ecbcf76f5)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/b4ebba787de2dd0730be4cd3b6f469389585d316)

* [OCPBUGS-68321](https://issues.redhat.com/browse/OCPBUGS-68321): Bump github.com/sirupsen/logrus to v1.9.3 [#149](https://github.com/openshift/ovirt-csi-driver-operator/pull/149)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/76db379d075fdae94ca604f3fa83b0612b36ef8d...b4ebba787de2dd0730be4cd3b6f469389585d316)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/cb4cebc4fe27b0e07d0eb3c4411470a520373e5c)

* [OCPBUGS-85512](https://issues.redhat.com/browse/OCPBUGS-85512): Branch Sync release-4.20 to release-4.19 [05-12-2026] [#3186](https://github.com/openshift/ovn-kubernetes/pull/3186)
* [OCPBUGS-74397](https://issues.redhat.com/browse/OCPBUGS-74397), [OCPBUGS-85355](https://issues.redhat.com/browse/OCPBUGS-85355): Branch Sync release-4.20 to release-4.19 [05-10-2026] [#3181](https://github.com/openshift/ovn-kubernetes/pull/3181)
* [OCPBUGS-81478](https://issues.redhat.com/browse/OCPBUGS-81478): node: fix serviceUpdateNotNeeded nil pointer comparison [#3100](https://github.com/openshift/ovn-kubernetes/pull/3100)
* [OCPBUGS-82032](https://issues.redhat.com/browse/OCPBUGS-82032): Branch Sync release-4.20 to release-4.19 [04-04-2026] [#3116](https://github.com/openshift/ovn-kubernetes/pull/3116)
* [OCPBUGS-81526](https://issues.redhat.com/browse/OCPBUGS-81526): Branch Sync release-4.20 to release-4.19 [03-03-2026] [#3034](https://github.com/openshift/ovn-kubernetes/pull/3034)
* [OCPBUGS-77442](https://issues.redhat.com/browse/OCPBUGS-77442): Clear stale conntrack UDP entries for nodePorts [#3015](https://github.com/openshift/ovn-kubernetes/pull/3015)
* [OCPBUGS-77082](https://issues.redhat.com/browse/OCPBUGS-77082), [OCPBUGS-77096](https://issues.redhat.com/browse/OCPBUGS-77096): [release-4.19]  combined backport PR for 2 escalations [#2986](https://github.com/openshift/ovn-kubernetes/pull/2986)
* [OCPBUGS-74269](https://issues.redhat.com/browse/OCPBUGS-74269): release-4.19 fix(localnet, ipamless): Prevent LSP deletion on sync [#2942](https://github.com/openshift/ovn-kubernetes/pull/2942)
* [OCPBUGS-70345](https://issues.redhat.com/browse/OCPBUGS-70345): Branch Sync release-4.20 to release-4.19 [12-31-2025] [#2915](https://github.com/openshift/ovn-kubernetes/pull/2915)
* [OCPBUGS-66139](https://issues.redhat.com/browse/OCPBUGS-66139): Branch Sync release-4.20 to release-4.19 [12-03-2025] [#2890](https://github.com/openshift/ovn-kubernetes/pull/2890)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-65658](https://issues.redhat.com/browse/OCPBUGS-65658), [OCPBUGS-65909](https://issues.redhat.com/browse/OCPBUGS-65909), [OCPBUGS-65956](https://issues.redhat.com/browse/OCPBUGS-65956): Branch Sync release-4.20 to release-4.19 [11-26-2025] [#2872](https://github.com/openshift/ovn-kubernetes/pull/2872)
* [OCPBUGS-64854](https://issues.redhat.com/browse/OCPBUGS-64854): Fix stale EIP assignments during failover and controller restart [#2848](https://github.com/openshift/ovn-kubernetes/pull/2848)
* [OCPBUGS-64645](https://issues.redhat.com/browse/OCPBUGS-64645): kubevirt: fix bad release of IPs of live migratable pods [#2842](https://github.com/openshift/ovn-kubernetes/pull/2842)
* [OCPBUGS-63660](https://issues.redhat.com/browse/OCPBUGS-63660): Skip Pending pods in EgressIP status updates [#2834](https://github.com/openshift/ovn-kubernetes/pull/2834)
* [OCPBUGS-63234](https://issues.redhat.com/browse/OCPBUGS-63234): [release-4.19] DownStream Merge Sync from 4.20 [10-16-2025] [#2810](https://github.com/openshift/ovn-kubernetes/pull/2810)
* [OCPBUGS-62670](https://issues.redhat.com/browse/OCPBUGS-62670): Fix EgressIP stale GARP post reboot + pod restart [#2774](https://github.com/openshift/ovn-kubernetes/pull/2774)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/48ed8433a1408ca744dc81dd95d70b9fd1424d2f...cb4cebc4fe27b0e07d0eb3c4411470a520373e5c)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/2138f509d6e3adf3ef331946e9542dc6d48bf4d1)

* [OCPBUGS-80497](https://issues.redhat.com/browse/OCPBUGS-80497): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#129](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/129)
* [OCPBUGS-82826](https://issues.redhat.com/browse/OCPBUGS-82826): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#123](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/123)
* [OCPBUGS-75601](https://issues.redhat.com/browse/OCPBUGS-75601): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#119](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/119)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/f681413d902e6634afd9d4ae80fd3b6e915f6585...2138f509d6e3adf3ef331946e9542dc6d48bf4d1)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/ad49862f7580502d75985117bb52bafb78d8ee78)

* [OCPBUGS-80498](https://issues.redhat.com/browse/OCPBUGS-80498): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#109](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/109)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/059d95c2941b5f8127d92b83e099a7e14021f2c2...ad49862f7580502d75985117bb52bafb78d8ee78)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/6ff6a8848263ceb5fbac784f4976d9c04e92e61e)

* [OCPBUGS-73759](https://issues.redhat.com/browse/OCPBUGS-73759): Include go-verify-deps expected files in gitignore [#111](https://github.com/openshift/prometheus-alertmanager/pull/111)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/a2346ca5bd71f535399435cd70a8e9519e521c4b...6ff6a8848263ceb5fbac784f4976d9c04e92e61e)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/40703af366f376665b8b0c303233463845de285c)

* [OCPBUGS-77297](https://issues.redhat.com/browse/OCPBUGS-77297): backport upstream fix to reconcile resources with inconsistent status [#368](https://github.com/openshift/prometheus-operator/pull/368)
* [OCPBUGS-77269](https://issues.redhat.com/browse/OCPBUGS-77269): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#363](https://github.com/openshift/prometheus-operator/pull/363)
* [OCPBUGS-63197](https://issues.redhat.com/browse/OCPBUGS-63197): reconcile workload configurations when a referenced secret/configmap key is updated [#339](https://github.com/openshift/prometheus-operator/pull/339)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/b8debb4c0493078dd64bf8a74cee9f0649705f51...40703af366f376665b8b0c303233463845de285c)


### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/48a00b3b021336fe75a4f104af5383cc7589c5a0)

* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1921](https://github.com/openshift/os/pull/1921)
* [OCPBUGS-82525](https://issues.redhat.com/browse/OCPBUGS-82525): post-process: Remove workaround for openvswitch additional group [#1927](https://github.com/openshift/os/pull/1927)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/e97898c8af9cad8e5375e4860a7d79c39a1c79fa...48a00b3b021336fe75a4f104af5383cc7589c5a0)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/25d79fdf101f3d41f4583a970e5f324b79fb42d8)

* [OCPBUGS-77172](https://issues.redhat.com/browse/OCPBUGS-77172): filter ingress namespace on UnmanagedRoutes metric [#75](https://github.com/openshift/route-controller-manager/pull/75)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/bc97534a12a7a6bac096e4ed488b29535c8d4f33...25d79fdf101f3d41f4583a970e5f324b79fb42d8)


### [telemeter](https://github.com/openshift/telemeter/tree/4da8f469ce9059cfacc55fd3f83e2b32a56de444)

* [OCPBUGS-80513](https://issues.redhat.com/browse/OCPBUGS-80513): Bump google.golang.org/grpc to v1.79.3 [#591](https://github.com/openshift/telemeter/pull/591)
* [OCPBUGS-81809](https://issues.redhat.com/browse/OCPBUGS-81809): [release-1.19] Fix CVE-2026-34986 [#595](https://github.com/openshift/telemeter/pull/595)
* [Full changelog](https://github.com/openshift/telemeter/compare/d72f157000039dddd96962d08d51c17ef716a7d4...4da8f469ce9059cfacc55fd3f83e2b32a56de444)


### [tests](https://github.com/openshift/origin/tree/af2f35cfa7d76a57ed7f6fc1c4b1bffdb6fcf53c)

* [OCPBUGS-85275](https://issues.redhat.com/browse/OCPBUGS-85275): Add test for CPMS OnDelete strategy with full master replacement [#31054](https://github.com/openshift/origin/pull/31054)
* [OCPBUGS-83656](https://issues.redhat.com/browse/OCPBUGS-83656): Fix PinnedImages test to respect node taints [#30971](https://github.com/openshift/origin/pull/30971)
* [OCPBUGS-78545](https://issues.redhat.com/browse/OCPBUGS-78545): Skip oauth test for external control plane topology [#30887](https://github.com/openshift/origin/pull/30887)
* : run resource request/limit check early [#30898](https://github.com/openshift/origin/pull/30898)
* [OCPBUGS-77825](https://issues.redhat.com/browse/OCPBUGS-77825): add the missing namespace from managed openshift [#30836](https://github.com/openshift/origin/pull/30836)
* [OCPBUGS-77790](https://issues.redhat.com/browse/OCPBUGS-77790): Update MCN tests to better handle condition transitions through the "Unknown" state [#30833](https://github.com/openshift/origin/pull/30833)
* [OCPBUGS-74201](https://issues.redhat.com/browse/OCPBUGS-74201): Unrevert TLS tests with fixes [#30707](https://github.com/openshift/origin/pull/30707)
* [OCPBUGS-67146](https://issues.redhat.com/browse/OCPBUGS-67146): Fix MachineConfigNode test in two-node fencing clusters [#30590](https://github.com/openshift/origin/pull/30590)
* [OCPBUGS-67365](https://issues.redhat.com/browse/OCPBUGS-67365): Updated the upgrade duration limit to 100 minutes for ppc64le [#30606](https://github.com/openshift/origin/pull/30606)
* [OCPBUGS-63727](https://issues.redhat.com/browse/OCPBUGS-63727): CNTRLPLANE-1767:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift [#30440](https://github.com/openshift/origin/pull/30440)
* [OCPBUGS-63609](https://issues.redhat.com/browse/OCPBUGS-63609): Migrate OCP-32383 to upstream [#30429](https://github.com/openshift/origin/pull/30429)
* [OCPBUGS-63637](https://issues.redhat.com/browse/OCPBUGS-63637): Add imagestream update dryrun test [#30432](https://github.com/openshift/origin/pull/30432)
* [Full changelog](https://github.com/openshift/origin/compare/281bcd1223d49386a1cc2ad6446bcae00633824f...af2f35cfa7d76a57ed7f6fc1c4b1bffdb6fcf53c)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/ce0f10cbccf0a7427bfa66df86187a5b2e184974)

* [OCPBUGS-77513](https://issues.redhat.com/browse/OCPBUGS-77513): hermetic migration 4.19 [#104](https://github.com/openshift/cloud-provider-vsphere/pull/104)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/2c21c8ce8dd8f7b86483d74336fc4baba9fa009d...ce0f10cbccf0a7427bfa66df86187a5b2e184974)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/87699d7edbe20ceb08760581c0eebae59265d821)

* [OCPBUGS-80520](https://issues.redhat.com/browse/OCPBUGS-80520): Bump google.golang.org/grpc to v1.79.3 [#103](https://github.com/openshift/cluster-api-provider-vsphere/pull/103)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/f33d67f8f38e33af45efcb25003a001a17165cdc...87699d7edbe20ceb08760581c0eebae59265d821)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4af5e765c661136c58490b27627a597469fea375)

* [OCPBUGS-80523](https://issues.redhat.com/browse/OCPBUGS-80523): Bump google.golang.org/grpc to v1.79.3 [#175](https://github.com/openshift/vmware-vsphere-csi-driver/pull/175)
* [OCPBUGS-68315](https://issues.redhat.com/browse/OCPBUGS-68315): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#155](https://github.com/openshift/vmware-vsphere-csi-driver/pull/155)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/15134035e9bd1e6dde10547cdba8d390d90f1072...4af5e765c661136c58490b27627a597469fea375)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c8a4359510f52ebdb30210049b1d2058e62eb7fd)

* [OCPBUGS-84895](https://issues.redhat.com/browse/OCPBUGS-84895): Fix password escaping [#341](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/341)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/c2b41c36105daa94272ff4c5a32ec9d5637626a4...c8a4359510f52ebdb30210049b1d2058e62eb7fd)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/7b8e065fef1a8a4a43f023abc777c3b6b6bcb3a7)

* [OCPBUGS-76081](https://issues.redhat.com/browse/OCPBUGS-76081): fix concurrent map writes [#210](https://github.com/openshift/vsphere-problem-detector/pull/210)
* [OCPBUGS-66198](https://issues.redhat.com/browse/OCPBUGS-66198): Fixed logic for vSphere compute cluster permission [#198](https://github.com/openshift/vsphere-problem-detector/pull/198)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/4f3a1da10d7f060f4b6530e70bd03892d9c43277...7b8e065fef1a8a4a43f023abc777c3b6b6bcb3a7)