# 4.19.15

Created: 2025-10-02 14:20:16 +0000 UTC

Image Digest: `sha256:d96bf58288bfe00d347707ba0b9fa5455ee0d506ae4dfe417518473197ee16ab`


## Changes from 4.19.2

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.5 to 1.32.9
* Kubernetes Tests upgraded from 1.32.5 to 1.32.8
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250625-0 to 9.6.20250930-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| MachineConfigNodes <br/> (13 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PinnedImages <br/> (5 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteAdvertisements <br/> (11 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:19fdee5b003454522323134d2c11a3f0ea000532895f0854d8949e59d2b53406`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:c38c2b97f723e446802427c61d426f10ad91d51c65ff3dbca3a7b92706835f15`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [77213cc5](https://github.com/openshift/apiserver-network-proxy/commit/77213cc5eed50f6c0ec0600133e01274020657ef) `sha256:0883c22001d5c2e049b9b849abee9dac31f0621f80ea6fde717ddb5e2b6bbc95`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [425c1c5b](https://github.com/openshift/cloud-provider-aws/commit/425c1c5be39628421bdfb63caf25beb169307473) `sha256:e92f6833910e1abe65ff4e72aca58aa9361fa1ecced8bca80aac7602ebb9ada4`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [d686e7d1](https://github.com/openshift/aws-ebs-csi-driver/commit/d686e7d16a00cedcc1c42165e1996a4a9255d1a0) `sha256:3991ef10e19347ae82b59f0b5ddc22153f386e18061c4ac256e8fb041c150773`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [68ae0c26](https://github.com/openshift/aws-karpenter-provider-aws/commit/68ae0c265271b4447f42decf88c6a44b343eeec9) `sha256:339fd5eb99d5caece67cf8be6f653f37be1b46869d10542718e1d9f6ade2b961`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:4bbc38081acd6e98a59f4fd5a5daeafe05d9d7a980079fe1dd4c4b5f8720f6d0`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [84fbc02a](https://github.com/openshift/machine-api-provider-aws/commit/84fbc02a1b018ffc93ba05622282889a28343db0) `sha256:33e498ae51d605aac98694580f6a67ea5e4244e5ab4e378c940b7ef891723ca9`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [b0a16d53](https://github.com/openshift/aws-pod-identity-webhook/commit/b0a16d53fbf28a55110bbb36a69f23bc772b3297) `sha256:449b9d188d4420b412e0d88379a4b753bd8b161bba8b90a4f84a11f7544ceae1`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [7109d6b4](https://github.com/openshift/cloud-provider-azure/commit/7109d6b4eaefda87b235c88b92c2e17fd3dd0117) `sha256:2869928229bf209cd6068d1dadd4e40a8eae1decd672ffcbc77b7344882570ae`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [7109d6b4](https://github.com/openshift/cloud-provider-azure/commit/7109d6b4eaefda87b235c88b92c2e17fd3dd0117) `sha256:9d180f4c16e3646d5a5e9506406f9bef4d21c2aeabb53342eff802360b76f3b1`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [466334d4](https://github.com/openshift/azure-disk-csi-driver/commit/466334d41a33d801cef0e81bc7186b8fd42b3f30) `sha256:2b441e4c618ea1c3480b7c5c35375e4dd8ad06bfda405736e4176f027ff22671`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [762a2b94](https://github.com/openshift/azure-file-csi-driver/commit/762a2b94b237cf16b56bb5085bcaa1471537cb52) `sha256:13b1668ba5eabf67f8f0078ef2242ac4c922ced5e2f88a81628e1c71e8ea1027`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [20a9ba53](https://github.com/openshift/azure-kubernetes-kms/commit/20a9ba53d5900578d497c84bb09cd46bc5859a29) `sha256:3a74220548218353fc056910b7ffbf874c5c535c4ddf5de776bac9df0b1fa9d2`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0ae129b4](https://github.com/openshift/azure-service-operator/commit/0ae129b4768d2e10e0ca215d272e207bfae963a3) `sha256:eda13476531334dafbb205b22c29bbda68524b7ed7a31188eb8fa1c9bea9a380`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [e5c6c44c](https://github.com/openshift/azure-workload-identity/commit/e5c6c44c87ebbe57a33650dd6270275e7cca771e) `sha256:7064b9a3c64a285ca03db6aab5d4a57e54bed7bdfccccae197af68f7d2a4a85a`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [06a66db1](https://github.com/openshift/cluster-api-provider-metal3/commit/06a66db1ac3c28f6d9a1adf16146ebec219c8534) `sha256:92b4e9cc5ae7bdf611e2d2ac00b2b9d43f0190f28e5087c9f93b9232d15b3d32`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f7a78954](https://github.com/openshift/cluster-api-provider-baremetal/commit/f7a789548f76d3117f3400ac597c0db615778d57) `sha256:f24574dcd911fa3dc702028253d586e899d9f3336b445ffee4c0c1d1cf02eb70`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [98ae311b](https://github.com/openshift/cloud-network-config-controller/commit/98ae311b854223a99e258d3c3369455d983de239) `sha256:da49888f6bcb9811791efe76c68bf7d66669223670fb74dace1e8cec2c9b33c6`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [ceeb021d](https://github.com/openshift/cluster-authentication-operator/commit/ceeb021d7562cf3d669ed7293f46b2a50e848c73) `sha256:daa2006985b7630329db57d8dc57e9cf5ae840b7e052cdd80a901f4d796598ae`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [227f7537](https://github.com/openshift/cluster-autoscaler-operator/commit/227f7537c3b459d4940522809df60b2dfca738ed) `sha256:c9b6de2a9982989168167159e974bc944cc6060a95e33cadd2ec55564d47ecbd`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [8fde9c52](https://github.com/openshift/cluster-bootstrap/commit/8fde9c52fbb6b6044785ebae0751000b049fd0ed) `sha256:6c990307f160973a5682524d3323e92cca9d161e69710d3020cd2236f2ed6095`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [479f0c4e](https://github.com/openshift/cluster-api/commit/479f0c4edcfc5bc5706600070e8b8c142e59a5d4) `sha256:3f0a4d9fd40d806b622e47c52fddb48a54ac6f2d67c4f707144366aaaa5c852e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [96607b59](https://github.com/openshift/cluster-config-operator/commit/96607b590ba35a8f008073e105e01e72a5bfba2e) `sha256:68cef5f55523626f8a6f1d65e1f03f004bd8ae7823ea68f9ff6df9f38846d9cb`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [1dbf0c7a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2) `sha256:22027ba8b3b4885c7ea1fa0dbdccd010a82e40e03c9256fff58197e8bbeda8fd`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [cf99de97](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/cf99de974354133f853928cff9e19ad19c5347d9) `sha256:75974781edf7a7f60c3c1e6259ecbeb891dc7a2a95b5e73f5bd4802c9875af0f`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [65981306](https://github.com/openshift/cluster-dns-operator/commit/659813065170f4e52f80b7a29bbab64bfa9aa172) `sha256:3da53f5988331427cf9f3150a011be4afce9f7771968055e724a8249fb79885e`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:9c7a1982e2bbdf37d29e0802b4586c6a45fe3fb31d196ab9f0e4353af1aedd2e`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [8740a60d](https://github.com/openshift/cluster-kube-scheduler-operator/commit/8740a60de76690a17d5081db078eb93dfdb7a066) `sha256:b2a57d8b48c21d332d38b6101a48b90c6f48f8b9e870a1f54f2199c51667005c`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:6277c9921ffea49944256678b17d25b923167265f3bc12a7ec82dc4cb088c4d7`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [a52da47f](https://github.com/openshift/cluster-machine-approver/commit/a52da47f2c5f0dab8db7bdfd9bc1f31a3ba5e404) `sha256:e4ca46792c0f94a27269bca711271b39a0546a08b9c925ad33061d3e98bc52a4`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [efb91390](https://github.com/openshift/cluster-olm-operator/commit/efb91390ee10673d8f3f16e604390bd68d361d50) `sha256:541dc0831a0e17f4f9bc830680187d15628c5651e67c4df06871deae1d0851d7`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [5f66a3e1](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/5f66a3e13fd98eaaa0941e8e0724b1f56a797d6d) `sha256:fd08ec9ada68b30995ee876113ff90cab20ca812fb8a9ad0b04ff5ee8f82c10f`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [0ab30996](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/0ab30996207ada63ef2e2fd4f47aac03b0872c9a) `sha256:68a7fe6b02a1cd5e9ff388392db3d2ec9012a65b59cde5064e26171f0ce53034`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [74852478](https://github.com/openshift/cluster-policy-controller/commit/748524784686a5f397490563882cbfb88f9acd01) `sha256:f0107cf0a620c02cee69cfe4342a603b1e95bc40048d6931ebad7faf6e9e78f7`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [4cb29197](https://github.com/openshift/cluster-samples-operator/commit/4cb291973ad887b3506af1d0f86ba5c3e326d372) `sha256:f362d84789f63cb66aada252feb34e39f0b6d8210028189336d86d3b8990b96a`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c1c56b4c](https://github.com/openshift/cluster-update-keys/commit/c1c56b4cfb93588290de3734031b1a2d556788fc) `sha256:6884b9e5fb525be58e78399eb23ab59ed40cdddb8ca2c33b25079481a0f85e0b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [a2a48a3a](https://github.com/openshift/configmap-reload/commit/a2a48a3a767fdb70644c65ab863bd4fc125987d2) `sha256:e5fec80360cbc7b5fb07670e509ed0b9ab3aad897e7c3cfa024585718a0a203b`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:3b4a3aece7c961a0f3834d1052952b411e6b3f2ce2d716fd818734dde0ca2caa`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:70ac8f40b5eca0ca6ece62c2d9578db51604a23c4247f0a8f85198864ede4c1d`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [2eb5c109](https://github.com/openshift/csi-driver-nfs/commit/2eb5c109dd19f5a1b84410c0952db5cfaecb2f56) `sha256:432b7b5889c86b76c7c63342766937edf62a29ba91c7f178fc1275af02bd2872`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [a8175e39](https://github.com/openshift/csi-external-attacher/commit/a8175e3908635cc8357ac845a271f9e5b278c6aa) `sha256:5b8855cc2433d1bce3167f254a7ec847ed9abd8792ee8e076270f99318798674`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9db1cdb1](https://github.com/openshift/csi-external-provisioner/commit/9db1cdb1e0dfbe29529561bbdb55b45bd2b1e321) `sha256:0574ddb0e7edb36bfa31cb34ef61e0830b33a9a545d4e5a4a92df75eefb29c1c`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [cca04e39](https://github.com/openshift/csi-external-resizer/commit/cca04e3957d4732fd1775e0dc2f757b78ae113a8) `sha256:d4a29b96365934f40fde2a7609ebf27252c9ab347e41282046d24807e5c92e15`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [ac82cafc](https://github.com/openshift/csi-external-snapshotter/commit/ac82cafc95b301f67f46ee0db93720d55177a19b) `sha256:4fe86daae1b15143dddd1e9ea7f2a06dd9db8286f33249edbccbaea6feaf4fb5`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [ca514478](https://github.com/openshift/csi-livenessprobe/commit/ca5144785b2c8caa6fe0ffcf7837e8e17b4864fb) `sha256:0a80490267313a4bba14e2e3a4bc6957f2fc4ef99c8414ba8d39e4acf537205e`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d18edb3a](https://github.com/openshift/csi-node-driver-registrar/commit/d18edb3aa61e673b33ec3a114e9f7dd4136f799e) `sha256:ca45a3e9c65ed401386b8fc863f7f229cca9d5cad6ee40e6bed47fbc71b26564`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [ac82cafc](https://github.com/openshift/csi-external-snapshotter/commit/ac82cafc95b301f67f46ee0db93720d55177a19b) `sha256:692a7a391d1e0f2c30d28b675ff82f0521e5683a65309f233484e0830d64d475`
* [docker-builder](https://github.com/openshift/builder) git [28622dd3](https://github.com/openshift/builder/commit/28622dd3fdd350a440576f6c9a867fd8296bde0f) `sha256:d589a3d4d8ca1db698a6553cdac7905406400276fa35316391495cc946461825`
* [docker-registry](https://github.com/openshift/image-registry) git [b1d09765](https://github.com/openshift/image-registry/commit/b1d09765386d98825e92d8759767a53849d82e9a) `sha256:d2cbca75b72dbfe7e4e9ae64f7b0e93514028a7aae2c4f4a390c5cc2755d9438`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:9eb2f2d36b3135eadd10f9bca67fd54b3e00c885c3607d3bcb6930d22c8719b7`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [85353bb9](https://github.com/openshift/egress-router-cni/commit/85353bb936a289b8b817f7b437afacdf7458c667) `sha256:f253afbec89c811a7f0b4e8b6272e658e3f7b2d74baf88a879cab9f626fa68c1`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [d8d3aeba](https://github.com/openshift/cloud-provider-gcp/commit/d8d3aeba536f4c9f6593a08045466f06dc7406ff) `sha256:4081389eedff45d6aabbcd1ef076fa69b87b2a8ac52e91fa63526f41f17a85a5`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [c8b865a1](https://github.com/openshift/cluster-api-provider-gcp/commit/c8b865a1c4045a3b62dbf5ffea514f2c62d893f8) `sha256:fb60faec593afeceb4ff96400aad0edd9fd5e7e5cd863e78aa1770db391b1134`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [44c74f24](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/44c74f24fba97b4afdbac55c9e77eb50eb21a4d1) `sha256:9a4d283b69b3e68bf2b369e92a42225a6de4989a8f08379a6a38554a9722f3d6`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [fbf4c1b2](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/fbf4c1b2b233806f8233b89abca2795a4cadef14) `sha256:0f5b5b3171bd6416f15eefaad25360d766211c9438a3a2af9f6750d4fe7fa939`
* [haproxy-router](https://github.com/openshift/router) git [b41f9d05](https://github.com/openshift/router/commit/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6) `sha256:eb87b9910f22b15f07d533420e85b570cda48576ddd0a14655ea3e55b148072e`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [7422aab2](https://github.com/openshift/cloud-provider-ibm/commit/7422aab27110768d8604539b9bb01ca329ff70b7) `sha256:f1d33c42d6a8d833a07d9a516055293e21c04f7036da3056e45317fae8430053`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [176b6ef1](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/176b6ef1136c45b8e3cb24a48458a251deca99bc) `sha256:cd8715455e3a645f4e73edd00ab8681da3801493d7391db35889e53a0c604ec4`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3dfcfa12](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3dfcfa12e31bccd7c43018e1324a391b0bc03244) `sha256:3172f3593eb108ab5182be3c87a7142a4202a8349a4091d11ecddfc07e20ca75`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [989bd874](https://github.com/openshift/machine-api-provider-ibmcloud/commit/989bd87446d6fcbb2d7db20c90224621fac6ddb4) `sha256:3d2ea1ecb67124519250cbdb979d4473d4e141e1c2cb5156b8fa68248b4edae5`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [0bee2d9b](https://github.com/openshift/insights-runtime-extractor/commit/0bee2d9be935de315081be77c910a8e40204e0b8) `sha256:4478fe926f0926fca063b2465325daee70b82b7612dd42901c4875a6144a2e0c`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [0bee2d9b](https://github.com/openshift/insights-runtime-extractor/commit/0bee2d9be935de315081be77c910a8e40204e0b8) `sha256:6d52a64bbcf585cef046cfd0ceed4086320dc0976122e2e301a8b1c2e8fb72b6`
* [ironic](https://github.com/openshift/ironic-image) git [fe31e71d](https://github.com/openshift/ironic-image/commit/fe31e71dbbbd24c77adaecdc3d4d895375a611a5) `sha256:d2a9070f6c79ea3c838694a6cbf0b3fd5f04fdbf505502aa6a03e65b3f9bb558`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [5b5afbd4](https://github.com/openshift/ironic-agent-image/commit/5b5afbd42650dacfc34d03f599ebd980d55e10e6) `sha256:e68eb911b4ed622ac3aab0897f87a1eb4f9f7125f211e29ca8143faa4292a86c`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dacba7d7](https://github.com/openshift/ironic-rhcos-downloader/commit/dacba7d7809a048392d18050096dcc20f2878b6f) `sha256:cae3bd28c13ad5e97c96f43690c56707ab2be06399034dcfdf0ddc15404671bc`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fcd9564e](https://github.com/openshift/ironic-static-ip-manager/commit/fcd9564e3bfa12e45576af376d168b5036dd8206) `sha256:13996f6627a2b8a4bb73a5a578c64c13195310c8a1012da1dc449817759a8e4e`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b42e7cf2](https://github.com/openshift/images/commit/b42e7cf218c4eef071cc29e0894fe8cfaed80b7f) `sha256:cb88a5da12b8df015de7d9e9fb7a7ce765e6c6788021691797540b6f4a5c1cbe`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [037a0e7e](https://github.com/openshift/kubernetes-metrics-server/commit/037a0e7e4ef401cd81d3e8330eeed26c8c753592) `sha256:258b2a7d8d33b86dbe576006486fedbef41db394aa1d2ef984632d42451b8328`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [59127756](https://github.com/openshift/kube-rbac-proxy/commit/591277560f328601273f88f2881e09ccccd90a97) `sha256:e5b383a0b070b30db5107a9b06f5a09a7d18dede33d355b7909e48b5c9a16079`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [c3da3b5f](https://github.com/openshift/kube-state-metrics/commit/c3da3b5fdc5bd2d23966e33b676701a4950b1a53) `sha256:ba12508d03d8ecf0d09cd252916d0ff4c7c3a1af394a73df7d52fa3d8fc88b69`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:e70895e34d6afdaef7f3c0ee00d35957670681d18d53eca125f96f9e7592ee15`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:76f23ea8d797a17532fa43eb08331e1970eb7617afeff1c190c9965fd928668b`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [7d066746](https://github.com/openshift/image-customization-controller/commit/7d0667469c6a7980f0f6cbaeb2b17686378696f1) `sha256:bbb2f9f06fd1b9f7ff5f7c07295eb51fd98a23f9ac76cf954090dd829e3e5398`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [32b5f16c](https://github.com/openshift/machine-os-images/commit/32b5f16c7f59698b40cc2a23116804d9067824d2) `sha256:1edae6797739345fdcfa0dcd075f8ed3727313f17537f05f9a6c7fc2ba45843b`
* [metallb-frr](https://github.com/openshift/frr) git [5076dbc4](https://github.com/openshift/frr/commit/5076dbc4f8483a844f1fce06b57216d743600237) `sha256:e5a10dff569092c863432dc79958e28800393b0fc73b64cdf2d7543749d332a5`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:f3827b037e1f7ae781621b7add24601c8909405e874922b4b01704bb0cffe88e`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:0bab7d2f68a8c2d63d91f7766c636479294016293c9133f459ab183af15307f9`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [6fffe5d7](https://github.com/openshift/multus-networkpolicy/commit/6fffe5d78f52e01e51110d178b433788ef98c8ae) `sha256:7a1deb61b19b8974e7bf1325503293305b6451d81870eee86b37917aaa9ed68b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:62c2b751102e7e75120bbfe0832add888eec2b741b1cfbcdcbb575e574bdc337`
* [must-gather](https://github.com/openshift/must-gather) git [463c03ca](https://github.com/openshift/must-gather/commit/463c03ca559bb00f324b11273763aa64543f9006) `sha256:36c74854e48d5dae12740f385b9e73e9752197da9b2647131dac9835b54e0a45`
* [network-tools](https://github.com/openshift/network-tools) git [81f7aebe](https://github.com/openshift/network-tools/commit/81f7aebeb1553998800c32644a8d982121277b4e) `sha256:6407239285c1cb8a0957948680a314e88edc49c0bc750d15e61cfe930aafdc02`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [db1f264a](https://github.com/openshift/cloud-provider-nutanix/commit/db1f264a7b04784e5f671e61cda0609695e555bb) `sha256:e702e05ca65787bb49ecfd2c9174f9c1b2d6b96a924902a270ecdc5bc537c37c`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a26db5a0](https://github.com/openshift/machine-api-provider-nutanix/commit/a26db5a04ecffd98c6a9ee8204af621bf2416ec9) `sha256:d1afd31c3cefed96168144a35cf66e139c5a78bf9a5f18fbcb83428a2e3abd9c`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [75914068](https://github.com/openshift/oauth-apiserver/commit/75914068d66a8b5502906526942c2423bec86f7a) `sha256:2f726ee11de3c9244879768585752302ff79124b89bb2f6f3ccb15acbb2bf22b`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c604f81c](https://github.com/openshift/openshift-state-metrics/commit/c604f81c4953f0feacfcf927cb5de883af027060) `sha256:0498e788d0d2bd5092387202e85cc137aa9ae0d7d2b4219ae0daa162402156f6`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [53190949](https://github.com/openshift/cluster-api-provider-openstack/commit/53190949835e1d94e07bbcfc13804fc959b9028a) `sha256:4b83f3c7db44dc256d20a6e0e5c06fc85e0eae9cfcbd43732345cbbc7aa92296`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [848bf658](https://github.com/openshift/machine-api-provider-openstack/commit/848bf658a280e6ab6f660c290a24e16fa29252e3) `sha256:588968892788e2757821bd7785d2876646df7770cd593612e9fdc7aa6209b014`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [d00bab2b](https://github.com/openshift/openstack-resource-controller/commit/d00bab2b3029ead7cd0e2ae61c7d396239434b48) `sha256:681f5b8bab3813fbd4da52969828399da508643a730b758c40b5eeb3574cc2a0`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [02d24551](https://github.com/operator-framework/operator-marketplace/commit/02d245516289b2f3a27b81ce59b9cef66750501c) `sha256:6e2737a24f63f487bafef8b2e25d86ef47ad8d629ba219e266acd0eefe2d6743`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:d0a84ba936999b137e5092b42993f138d6036d748dec68423aff15a7011a7a76`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [76db379d](https://github.com/openshift/ovirt-csi-driver-operator/commit/76db379d075fdae94ca604f3fa83b0612b36ef8d) `sha256:b86b41a79748079a1262c0ee256e0c33d9eb9f237b8fa38f56ae79c580ccafb6`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [f681413d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/f681413d902e6634afd9d4ae80fd3b6e915f6585) `sha256:21eec4c90e0c16e6c88254ec71e2739a3021edfd61470f995cbb2c464b5472da`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [059d95c2](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/059d95c2941b5f8127d92b83e099a7e14021f2c2) `sha256:c32102545460244147ec38d22be56f3fcf0b9c6156f3f3179a26c67c30233ab5`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [ef83f3f5](https://github.com/openshift/cloud-provider-powervs/commit/ef83f3f5b8bf00f829bb71d1857a5f59e63f9f17) `sha256:6c344e937264593350cbbd9d7f406b1434a456e13480f9011dfa48831fff0567`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [13666465](https://github.com/openshift/prom-label-proxy/commit/13666465233bfe72a19d6d3f48576a508fdea145) `sha256:96b11c121f9d2cd17ce19cf0ec1aeace7702ab3191906788a5e2fbdb344b3448`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [a2346ca5](https://github.com/openshift/prometheus-alertmanager/commit/a2346ca5bd71f535399435cd70a8e9519e521c4b) `sha256:897334bdc03e5618f68f2a8b0810e42ec84d78c177df12dd3b8c7cf26afd011d`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [b8debb4c](https://github.com/openshift/prometheus-operator/commit/b8debb4c0493078dd64bf8a74cee9f0649705f51) `sha256:f87e7ebabaf82604a15577f7502ea7651e9d29521cc7e5ba77c54fbccbf02b9e`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [c90542d8](https://github.com/openshift/node_exporter/commit/c90542d8cef6d25545ae00481ffff5622cdce928) `sha256:904c37d9dc3a38338d6533aa1e0003e4970f7341aff8d64e67c931e6f6fbb775`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [b8debb4c](https://github.com/openshift/prometheus-operator/commit/b8debb4c0493078dd64bf8a74cee9f0649705f51) `sha256:b2a76009bf16bb92d42254cbaf6c559751df06b6a44511cffd89758fcf5dc8f2`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [b8debb4c](https://github.com/openshift/prometheus-operator/commit/b8debb4c0493078dd64bf8a74cee9f0649705f51) `sha256:f07e4a9cb50e09497a814a2c68f312264bb0b009312d78f0248e73c50687a679`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bc97534a](https://github.com/openshift/route-controller-manager/commit/bc97534a12a7a6bac096e4ed488b29535c8d4f33) `sha256:36684e0d4ddb3329e8c9c1278d3197597950e3c9be92a3de62a3dedc95844e8c`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [4dfa6916](https://github.com/openshift/service-ca-operator/commit/4dfa6916f984d0fd7188380edc88b250738f07f7) `sha256:aefa06d3410b839b1a0fdf4a30934a97cf4de78bfe9341375e0b96a9633954bc`
* [telemeter](https://github.com/openshift/telemeter) git [d72f1570](https://github.com/openshift/telemeter/commit/d72f157000039dddd96962d08d51c17ef716a7d4) `sha256:32b038bd757349ca2be16a6d9937bd7adc25a89820a2f59fca96ba3523462928`
* [thanos](https://github.com/openshift/thanos) git [95f7bb21](https://github.com/openshift/thanos/commit/95f7bb216c27bea9c8001a7b49fbd66d23286f80) `sha256:37363d745c68ae48e4507e15ca776c37a9cb4a28fd48546a94d47cd5976da012`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [2c21c8ce](https://github.com/openshift/cloud-provider-vsphere/commit/2c21c8ce8dd8f7b86483d74336fc4baba9fa009d) `sha256:7aec452c4c8db14359d1fb494048708e413f750191f0d199f6cffa82fb34cf5b`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [15134035](https://github.com/openshift/vmware-vsphere-csi-driver/commit/15134035e9bd1e6dde10547cdba8d390d90f1072) `sha256:b48e5eaa2610497216947d0a25ee5c8fd72b9819376e9716c4d82dcb0277611b`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [c2b41c36](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/c2b41c36105daa94272ff4c5a32ec9d5637626a4) `sha256:ceb08eadb090de0219eb57ebcf56ec86baa048ea5d85adeb67e0a85c36864e9c`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [15134035](https://github.com/openshift/vmware-vsphere-csi-driver/commit/15134035e9bd1e6dde10547cdba8d390d90f1072) `sha256:dfef03b73082c8be960364144b550fbc382f63fd772bb5b2f00ca1b66772cb65`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f56d2b039a7a924ae51be9475ebe11d6709878c4)

* NO-ISSUE: pin gotestsum to v1.12.3 (#8019) [#8019](https://github.com/openshift/assisted-service/pull/8019)
* [MGMT-21287](https://issues.redhat.com/browse/MGMT-21287): Remove NHO dependency in SNR (#7894) [#7894](https://github.com/openshift/assisted-service/pull/7894)
* NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7870) [#7870](https://github.com/openshift/assisted-service/pull/7870)
* [MGMT-20893](https://issues.redhat.com/browse/MGMT-20893): Remove Remediation operators from virtualization bundle (#7814) [#7814](https://github.com/openshift/assisted-service/pull/7814)
* [OCPBUGS-57361](https://issues.redhat.com/browse/OCPBUGS-57361): Use hostname to match hosts to BMH ignition (#7794) [#7794](https://github.com/openshift/assisted-service/pull/7794)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d4d43dd72253e7c8c3ce4a3a1779aef3f59b251a...f56d2b039a7a924ae51be9475ebe11d6709878c4)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/edfddbc100302df013eb3303c41da28f074e8dd4)

* [OCPBUGS-60938](https://issues.redhat.com/browse/OCPBUGS-60938): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#142](https://github.com/openshift/agent-installer-utils/pull/142)
* [OCPBUGS-60107](https://issues.redhat.com/browse/OCPBUGS-60107): Add ISOBuilder Release notes [#137](https://github.com/openshift/agent-installer-utils/pull/137)
* [OCPBUGS-59731](https://issues.redhat.com/browse/OCPBUGS-59731): add back NHR and FAR operators [#131](https://github.com/openshift/agent-installer-utils/pull/131)
* [OCPBUGS-58285](https://issues.redhat.com/browse/OCPBUGS-58285): OVE ISOBuilder works only if and when the script is ex… [#121](https://github.com/openshift/agent-installer-utils/pull/121)
* [OCPBUGS-59254](https://issues.redhat.com/browse/OCPBUGS-59254): invalid default channel configuration for package "mtv… [#126](https://github.com/openshift/agent-installer-utils/pull/126)
* [OCPBUGS-59666](https://issues.redhat.com/browse/OCPBUGS-59666): Enable 'q' and 'c' hotkeys for quit and configure network [#129](https://github.com/openshift/agent-installer-utils/pull/129)
* [OCPBUGS-57922](https://issues.redhat.com/browse/OCPBUGS-57922): Update operators list in ISOBuilder [#118](https://github.com/openshift/agent-installer-utils/pull/118)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/8cc39210ed284ff6c597815dee379ef4bfeb9d77...edfddbc100302df013eb3303c41da28f074e8dd4)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/0a740b04471ca2bc5bb7a3034e78a62cfc2c24a2)

* [OCPBUGS-61794](https://issues.redhat.com/browse/OCPBUGS-61794): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#568](https://github.com/openshift/cluster-api-provider-aws/pull/568)
* [OCPBUGS-59241](https://issues.redhat.com/browse/OCPBUGS-59241), [OCPBUGS-59242](https://issues.redhat.com/browse/OCPBUGS-59242): bump github.com/golang/glog to v1.2.5 [#558](https://github.com/openshift/cluster-api-provider-aws/pull/558)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/802452086a937fc7ac01e26542a05c697b363933...0a740b04471ca2bc5bb7a3034e78a62cfc2c24a2)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e6ffce5ffcad6385976f241c9ef57a7fe4be6282)

* [OCPBUGS-60595](https://issues.redhat.com/browse/OCPBUGS-60595): Bump library-go [#420](https://github.com/openshift/csi-operator/pull/420)
* [OCPBUGS-59893](https://issues.redhat.com/browse/OCPBUGS-59893): Remove stale conditions [#411](https://github.com/openshift/csi-operator/pull/411)
* [Full changelog](https://github.com/openshift/csi-operator/compare/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c...e6ffce5ffcad6385976f241c9ef57a7fe4be6282)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/2e2909cf1317cb84285de3c73f6acadb9e8a31f2)

* [OCPBUGS-59888](https://issues.redhat.com/browse/OCPBUGS-59888): Add support to disable CAPZ components through a manager flag [#347](https://github.com/openshift/cluster-api-provider-azure/pull/347)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/7dc22457e9e0bae7329d0bb4a4705781f04446af...2e2909cf1317cb84285de3c73f6acadb9e8a31f2)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/04987a4f8fbf36196044db0e1863cb0febf4a88e)

* [OCPBUGS-56163](https://issues.redhat.com/browse/OCPBUGS-56163): [release-4.19] Update virtualmachines service to armcompute/v5 SDK [#144](https://github.com/openshift/machine-api-provider-azure/pull/144)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/249e31eba655572a52f44c6065bc251341544883...04987a4f8fbf36196044db0e1863cb0febf4a88e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7e30b7d6b421087ee6b6aaa639e40392c22ce52b)

* [OCPBUGS-61313](https://issues.redhat.com/browse/OCPBUGS-61313): Use less permissive access for /var/lib/etcd for SNO [#9927](https://github.com/openshift/installer/pull/9927)
* [OCPBUGS-59573](https://issues.redhat.com/browse/OCPBUGS-59573): Checking for selected PE retrieved data and returning errors for missing values [#9842](https://github.com/openshift/installer/pull/9842)
* [OCPBUGS-60832](https://issues.redhat.com/browse/OCPBUGS-60832): node-joner ignore error if SSH key was not found [#9910](https://github.com/openshift/installer/pull/9910)
* [OCPBUGS-61109](https://issues.redhat.com/browse/OCPBUGS-61109): Misleading error when confidentialCompute: Enabled [#9920](https://github.com/openshift/installer/pull/9920)
* [OCPBUGS-60925](https://issues.redhat.com/browse/OCPBUGS-60925): Update the RHCOS 4.19 bootimage metadata [#9915](https://github.com/openshift/installer/pull/9915)
* [OCPBUGS-60652](https://issues.redhat.com/browse/OCPBUGS-60652): PowerVS: config variables not honored [#9901](https://github.com/openshift/installer/pull/9901)
* [OCPBUGS-60666](https://issues.redhat.com/browse/OCPBUGS-60666): Azure: change LB and pubic IP skus to Standard [#9903](https://github.com/openshift/installer/pull/9903)
* [OCPBUGS-59607](https://issues.redhat.com/browse/OCPBUGS-59607): Refine check for supported SNO platforms [#9843](https://github.com/openshift/installer/pull/9843)
* Revert "Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0" [#9906](https://github.com/openshift/installer/pull/9906)
* [OCPBUGS-60402](https://issues.redhat.com/browse/OCPBUGS-60402): baremetal: always set external v6 URL on dualstack [#9879](https://github.com/openshift/installer/pull/9879)
* [OCPBUGS-58905](https://issues.redhat.com/browse/OCPBUGS-58905): Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 [#9888](https://github.com/openshift/installer/pull/9888)
* [OCPBUGS-56963](https://issues.redhat.com/browse/OCPBUGS-56963): Make swift containers removal not fatal for UPI. [#9765](https://github.com/openshift/installer/pull/9765)
* [OCPBUGS-58403](https://issues.redhat.com/browse/OCPBUGS-58403): When AWS_PROFILE is invalid ask for credentials [#9829](https://github.com/openshift/installer/pull/9829)
* [OCPBUGS-58073](https://issues.redhat.com/browse/OCPBUGS-58073): Refactor removing loadbalancer in OpenStack. [#9808](https://github.com/openshift/installer/pull/9808)
* [OCPBUGS-58263](https://issues.redhat.com/browse/OCPBUGS-58263): allow to deploy single nodes with UPI [#9812](https://github.com/openshift/installer/pull/9812)
* [OCPBUGS-57901](https://issues.redhat.com/browse/OCPBUGS-57901): vSphere - remove unit tests using nip.io [#9802](https://github.com/openshift/installer/pull/9802)
* [Full changelog](https://github.com/openshift/installer/compare/77852305940c209834a26e9ff303a118378f9f55...7e30b7d6b421087ee6b6aaa639e40392c22ce52b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)

* [OCPBUGS-59133](https://issues.redhat.com/browse/OCPBUGS-59133): Unblock BMH direct deletion when detached annotation is present [#423](https://github.com/openshift/baremetal-operator/pull/423)
* [OCPBUGS-56765](https://issues.redhat.com/browse/OCPBUGS-56765): Make firmware update handle only a subset of `Spec.Updates` [#420](https://github.com/openshift/baremetal-operator/pull/420)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/aa46a5a6144b865dbcdb8af35d13a790377542d4...f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/2f969c7a1df33a398298df731505a508ad120db9)

* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Re-add ENABLE_NODEIP_DEBUG env var [#365](https://github.com/openshift/baremetal-runtimecfg/pull/365)
* [OCPBUGS-57781](https://issues.redhat.com/browse/OCPBUGS-57781): iptables: Switch PREROUTING REDIRECT rule to DNAT instead [#352](https://github.com/openshift/baremetal-runtimecfg/pull/352)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/b94d92874ab36d9d3ee26dda59f172611fca18fb...2f969c7a1df33a398298df731505a508ad120db9)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/298429ba9831d1d72b89edd9beb82a6ee665c3b7)

* [OCPBUGS-58077](https://issues.redhat.com/browse/OCPBUGS-58077): Return error in case of error [#2052](https://github.com/openshift/oc/pull/2052)
* [Full changelog](https://github.com/openshift/oc/compare/fa1fd955cefab1204764bc98d754ed855ba6dca4...298429ba9831d1d72b89edd9beb82a6ee665c3b7)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0a5409aaef9203a4551bce93eac5637a32c87f7b)

* [OCPBUGS-60970](https://issues.redhat.com/browse/OCPBUGS-60970): ccoctl: aws to use proper issuer url on subsequent runs [#906](https://github.com/openshift/cloud-credential-operator/pull/906)
* [OCPBUGS-60617](https://issues.redhat.com/browse/OCPBUGS-60617): ccoctl azure dnszone-resource-group-name now optional [#900](https://github.com/openshift/cloud-credential-operator/pull/900)
* [OCPBUGS-59401](https://issues.redhat.com/browse/OCPBUGS-59401): github.com/golang/glog v1.2.5 [#890](https://github.com/openshift/cloud-credential-operator/pull/890)
* [OCPBUGS-58246](https://issues.redhat.com/browse/OCPBUGS-58246): ccoctl: only add owned tag to azure resources on create [#881](https://github.com/openshift/cloud-credential-operator/pull/881)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/675dad516b5d96d4ecaa2df6461e2145204850f4...0a5409aaef9203a4551bce93eac5637a32c87f7b)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c53c7153b62ff36cc725707297a4bbb7ea4f62e5)

* [OCPBUGS-60900](https://issues.redhat.com/browse/OCPBUGS-60900): revert openshift replica fix [#374](https://github.com/openshift/kubernetes-autoscaler/pull/374)
* [OCPBUGS-59638](https://issues.redhat.com/browse/OCPBUGS-59638): fix checkpoint gc of unknown recommenders [#366](https://github.com/openshift/kubernetes-autoscaler/pull/366)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f746d442e69be1cf82cef1c473ddc0ab8a15d22f...c53c7153b62ff36cc725707297a4bbb7ea4f62e5)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/38dbc972321dd339464ffd4a92d2bb6f9b01d761)

* [OCPBUGS-60286](https://issues.redhat.com/browse/OCPBUGS-60286): Remove webhookport (9447) as HostPort [#498](https://github.com/openshift/cluster-baremetal-operator/pull/498)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/0c3beae1a216187270d60af49117a82e74de4020...38dbc972321dd339464ffd4a92d2bb6f9b01d761)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)

* [OCPBUGS-59228](https://issues.redhat.com/browse/OCPBUGS-59228), [OCPBUGS-59229](https://issues.redhat.com/browse/OCPBUGS-59229): fix: clusteroperator: do not update status.relatedobjects if only order changed [#332](https://github.com/openshift/cluster-capi-operator/pull/332)
* [OCPBUGS-57449](https://issues.redhat.com/browse/OCPBUGS-57449): mapi2capi: Create new machine template when changing MAPI providerSpec [#317](https://github.com/openshift/cluster-capi-operator/pull/317)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/ee69183571b592073a7163c5aef34d1a970a8c19...cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/bd2845df55a487e49aa73706cca6211877a912d5)

* [OCPBUGS-56788](https://issues.redhat.com/browse/OCPBUGS-56788): Fix config-sync-controller logging [#390](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/390)
* [OCPBUGS-60950](https://issues.redhat.com/browse/OCPBUGS-60950): Default cloud.conf if no configmap is found [#412](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/412)
* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Adds service for cloud-controller-manager [#402](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/402)
* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Update service selector to match deployment label [#401](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/401)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/7ddcbe3dd3a7b836ec0c882032944dcded78f866...bd2845df55a487e49aa73706cca6211877a912d5)


### [cluster-config-api](https://github.com/openshift/api/tree/079ac08331d3021f9b7495857677ba59fdc4b25a)

* [OCPBUGS-62155](https://issues.redhat.com/browse/OCPBUGS-62155): Add 'AGE' print column to MachineConfigNode object [#2500](https://github.com/openshift/api/pull/2500)
* [OCPBUGS-61096](https://issues.redhat.com/browse/OCPBUGS-61096): Add default value for MachineHealthCheck's maxUnhealthy to the description [#2464](https://github.com/openshift/api/pull/2464)
* [MCO-1766](https://issues.redhat.com/browse/MCO-1766): Promote PinnedImageSets feature gate to default [#2377](https://github.com/openshift/api/pull/2377)
* [MCO-1720](https://issues.redhat.com/browse/MCO-1720): Promote MachineConfigNode feature gate to default [#2376](https://github.com/openshift/api/pull/2376)
* [CORENET-6148](https://issues.redhat.com/browse/CORENET-6148): Promote RouteAdvertisements feature gate to default feature set [#2425](https://github.com/openshift/api/pull/2425)
* [OCPBUGS-60414](https://issues.redhat.com/browse/OCPBUGS-60414): MachineOSConfig name should match MachineConfigPool [#2449](https://github.com/openshift/api/pull/2449)
* Update crd-schema.json to release 1.33 branch [#2447](https://github.com/openshift/api/pull/2447)
* [Full changelog](https://github.com/openshift/api/compare/97812373b6b447ff6b55d3e2625b4f62aff1a16f...079ac08331d3021f9b7495857677ba59fdc4b25a)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4d6a1658537e8bb4e2e0cc2370557ab6077850ee)

* [OCPBUGS-60443](https://issues.redhat.com/browse/OCPBUGS-60443): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1472](https://github.com/openshift/cluster-etcd-operator/pull/1472)
* [OCPBUGS-59802](https://issues.redhat.com/browse/OCPBUGS-59802): add missing informer syncs [#1454](https://github.com/openshift/cluster-etcd-operator/pull/1454)
* [OCPBUGS-59285](https://issues.redhat.com/browse/OCPBUGS-59285): fix ordering on bootstrap IP selection [#1446](https://github.com/openshift/cluster-etcd-operator/pull/1446)
* [OCPBUGS-45731](https://issues.redhat.com/browse/OCPBUGS-45731): Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 [#1376](https://github.com/openshift/cluster-etcd-operator/pull/1376)
* [OCPBUGS-59313](https://issues.redhat.com/browse/OCPBUGS-59313): add missing ports to svc and pod spec [#1447](https://github.com/openshift/cluster-etcd-operator/pull/1447)
* [OCPBUGS-57956](https://issues.redhat.com/browse/OCPBUGS-57956): feat: update logic to list arbiter nodes [#1437](https://github.com/openshift/cluster-etcd-operator/pull/1437)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/afc5cf84c188843a21b3880d26b334164d0c0477...4d6a1658537e8bb4e2e0cc2370557ab6077850ee)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3335b120ecbae4a792373a814474aeebde58d6c2)

* [OCPBUGS-60517](https://issues.redhat.com/browse/OCPBUGS-60517): fix(azure): resolve credential caching issues around UAMI support [#1243](https://github.com/openshift/cluster-image-registry-operator/pull/1243)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/328419e7a2aba288a3405e76449f84d42b1952b3...3335b120ecbae4a792373a814474aeebde58d6c2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ddd78734833eb45f2cd5fba677fe50e4ae9f063b)

* [NE-2102](https://issues.redhat.com/browse/NE-2102): Bump to OSSM 3.1.0 and Istio 1.26.2 [#1264](https://github.com/openshift/cluster-ingress-operator/pull/1264)
* NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md [#1255](https://github.com/openshift/cluster-ingress-operator/pull/1255)
* [OCPBUGS-60204](https://issues.redhat.com/browse/OCPBUGS-60204): Update GatewayAPI test to check if deployment has 1 or more pod [#1260](https://github.com/openshift/cluster-ingress-operator/pull/1260)
* [NE-2109](https://issues.redhat.com/browse/NE-2109): Add OSSM channel and version override annotations [#1252](https://github.com/openshift/cluster-ingress-operator/pull/1252)
* [NE-2105](https://issues.redhat.com/browse/NE-2105): desiredIstio: Enable GIE if InferencePool found [#1251](https://github.com/openshift/cluster-ingress-operator/pull/1251)
* [NE-2103](https://issues.redhat.com/browse/NE-2103): Bump to OSSM 3.0.1 and Istio 1.24.4 [#1244](https://github.com/openshift/cluster-ingress-operator/pull/1244)
* [OCPBUGS-58394](https://issues.redhat.com/browse/OCPBUGS-58394): desiredIstio: Do not enable a default PDB [#1241](https://github.com/openshift/cluster-ingress-operator/pull/1241)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6d54169d4c6643ae9b6ff81b3a21b929934062fa...ddd78734833eb45f2cd5fba677fe50e4ae9f063b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/80c1fc3d81e3392ef7b056c8833185c8bdf6f599)

* [OCPBUGS-60121](https://issues.redhat.com/browse/OCPBUGS-60121): [release-4.19] Set goaway chance to 0.001 [#1887](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1887)
* [OCPBUGS-60677](https://issues.redhat.com/browse/OCPBUGS-60677): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1901](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1901)
* [OCPBUGS-60495](https://issues.redhat.com/browse/OCPBUGS-60495): certrotationcontroller: extend node-system-admin-signer lifetime [#1897](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1897)
* [OCPBUGS-59957](https://issues.redhat.com/browse/OCPBUGS-59957): Add missing service ports to apiserver service [#1880](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1880)
* Revert "[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again" [#1867](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1867)
* [OCPBUGS-58116](https://issues.redhat.com/browse/OCPBUGS-58116): certregenerationcontroller: start configInformers again [#1861](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1861)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/34bd8a7860802d310b4b0c124dc7975b6fa52773...80c1fc3d81e3392ef7b056c8833185c8bdf6f599)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/dcdeb36169153b44f58c9829b9699517338e065b)

* [OCPBUGS-60682](https://issues.redhat.com/browse/OCPBUGS-60682): Throttle resourcesynccontroller on pairs with dual writers. [#884](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/884)
* [OCPBUGS-60682](https://issues.redhat.com/browse/OCPBUGS-60682): certrotationcontroller: set RefreshOnlyWhenExpired for CA bundle [#861](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/861)
* [OCPBUGS-60132](https://issues.redhat.com/browse/OCPBUGS-60132): Missing endpoint slices for open ports the operator uses [#853](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/853)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/cec410b7f877a6eef57968889a644b848bdb540a...dcdeb36169153b44f58c9829b9699517338e065b)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/27a84281b03874c4596927dc9b9528460042fbfb)

* [OCPBUGS-61486](https://issues.redhat.com/browse/OCPBUGS-61486): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2666](https://github.com/openshift/cluster-monitoring-operator/pull/2666)
* [OCPBUGS-59932](https://issues.redhat.com/browse/OCPBUGS-59932): operator: increase wait time till degraded to max 4 times 5m [#2629](https://github.com/openshift/cluster-monitoring-operator/pull/2629)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e4ecf3131005f74d21d9b2dd2003ceab8678a17f...27a84281b03874c4596927dc9b9528460042fbfb)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/9d49a4beb3693a53833a7af29e54567a97c2de2f)

* [OCPBUGS-61460](https://issues.redhat.com/browse/OCPBUGS-61460): Set maxUnavailable 10% on MultiNetworkPolicy DS [#2794](https://github.com/openshift/cluster-network-operator/pull/2794)
* [OCPBUGS-61185](https://issues.redhat.com/browse/OCPBUGS-61185): Consume latest OCP API in 4.19 [#2790](https://github.com/openshift/cluster-network-operator/pull/2790)
* [OCPBUGS-60983](https://issues.redhat.com/browse/OCPBUGS-60983): Update CNO reviewers/approvers [#2765](https://github.com/openshift/cluster-network-operator/pull/2765)
* [OCPBUGS-60761](https://issues.redhat.com/browse/OCPBUGS-60761): Allow overriding OVN-Kubernetes configuration [#2781](https://github.com/openshift/cluster-network-operator/pull/2781)
* [OCPBUGS-60534](https://issues.redhat.com/browse/OCPBUGS-60534): Fix multus webhook match condition for spec changes [#2777](https://github.com/openshift/cluster-network-operator/pull/2777)
* [OCPBUGS-60095](https://issues.redhat.com/browse/OCPBUGS-60095): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2762](https://github.com/openshift/cluster-network-operator/pull/2762)
* [OCPBUGS-59645](https://issues.redhat.com/browse/OCPBUGS-59645): [release-4.19] BGP related backports [#2748](https://github.com/openshift/cluster-network-operator/pull/2748)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2a1d6159a44bf8aa26bba9981f144006a1d99990...9d49a4beb3693a53833a7af29e54567a97c2de2f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f1ff5dac295d07083e6c5decb80e157a9e87bcc9)

* [OCPBUGS-60796](https://issues.redhat.com/browse/OCPBUGS-60796): E2E: llc test fix:  Get updated Performance profile before modifying (#1381) [#1381](https://github.com/openshift/cluster-node-tuning-operator/pull/1381)
* [OCPBUGS-59633](https://issues.redhat.com/browse/OCPBUGS-59633): E2E add test to verify guaranteed pod is running after kubelet restart (#1365) [#1365](https://github.com/openshift/cluster-node-tuning-operator/pull/1365)
* [OCPBUGS-60855](https://issues.redhat.com/browse/OCPBUGS-60855): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1383) [#1383](https://github.com/openshift/cluster-node-tuning-operator/pull/1383)
* E2E: skip stalld test case checking sched_fifo (#1385) [#1385](https://github.com/openshift/cluster-node-tuning-operator/pull/1385)
* [OCPBUGS-52853](https://issues.redhat.com/browse/OCPBUGS-52853): Do not add iommu.passthrough to ARM by default (#1358) [#1358](https://github.com/openshift/cluster-node-tuning-operator/pull/1358)
* [OCPBUGS-58144](https://issues.redhat.com/browse/OCPBUGS-58144): E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1348) [#1348](https://github.com/openshift/cluster-node-tuning-operator/pull/1348)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/174ae084670fb9775fe901053bfc3284facf9afa...f1ff5dac295d07083e6c5decb80e157a9e87bcc9)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/975ad328d5965a4e297b5b5eb0a7098976d50b09)

* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): hypershift: add app label to csdriveroperators running in HCP [#604](https://github.com/openshift/cluster-storage-operator/pull/604)
* [OCPBUGS-56253](https://issues.redhat.com/browse/OCPBUGS-56253): sync Azure File permissions with upstream docs #2 [#580](https://github.com/openshift/cluster-storage-operator/pull/580)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/94ed00846022ffffba2fcb0444c46beb0b9a2108...975ad328d5965a4e297b5b5eb0a7098976d50b09)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/810c159bb98f66d0c227702003b8b6ca503dc3e9)

* [OCPBUGS-55937](https://issues.redhat.com/browse/OCPBUGS-55937): Gate 4.19 -&gt; 4.20 upgrade due to admissionregistration.k8s.io/v1beta1 API removal [#1193](https://github.com/openshift/cluster-version-operator/pull/1193)
* [OCPBUGS-60168](https://issues.redhat.com/browse/OCPBUGS-60168): CVO protects /metrics with authorization [#1222](https://github.com/openshift/cluster-version-operator/pull/1222)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e...810c159bb98f66d0c227702003b8b6ca503dc3e9)


### [console](https://github.com/openshift/console/tree/c20067291e2c1ec3f9c66572b2645838aec23337)

* [OCPBUGS-62083](https://issues.redhat.com/browse/OCPBUGS-62083): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15523](https://github.com/openshift/console/pull/15523)
* [OCPBUGS-62087](https://issues.redhat.com/browse/OCPBUGS-62087): Help dropdown should be closed automatically after tour model opened [#15527](https://github.com/openshift/console/pull/15527)
* [OCPBUGS-61821](https://issues.redhat.com/browse/OCPBUGS-61821): Refactor PodConnect and Terminal to TypeScript [#15503](https://github.com/openshift/console/pull/15503)
* [OCPBUGS-61781](https://issues.redhat.com/browse/OCPBUGS-61781): Fix improper DescriptionList refactor [#15497](https://github.com/openshift/console/pull/15497)
* NO-JIRA: Update CHANGELOG in relation to 4.18 plugin SDK package publish [#15457](https://github.com/openshift/console/pull/15457)
* [OCPBUGS-60420](https://issues.redhat.com/browse/OCPBUGS-60420): QuickStarts Link buttons to other quickstarts are duplicate [#15391](https://github.com/openshift/console/pull/15391)
* [OCPBUGS-50571](https://issues.redhat.com/browse/OCPBUGS-50571): Make sure CSP violations are only reported to telemetry once per day per browser [#15366](https://github.com/openshift/console/pull/15366)
* [OCPBUGS-60279](https://issues.redhat.com/browse/OCPBUGS-60279): Remove ancient `X-XSS-Protection` header [#15381](https://github.com/openshift/console/pull/15381)
* [OCPBUGS-60038](https://issues.redhat.com/browse/OCPBUGS-60038): Resolving API Version Conflicts in Tekton Pipeline Runs [#15354](https://github.com/openshift/console/pull/15354)
* [OCPBUGS-60294](https://issues.redhat.com/browse/OCPBUGS-60294): OpenShift Console's "Start Job" action overrides configured "backoffLimit" to "6" [#15382](https://github.com/openshift/console/pull/15382)
* NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish [#15406](https://github.com/openshift/console/pull/15406)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream (again) [#15388](https://github.com/openshift/console/pull/15388)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream [#15355](https://github.com/openshift/console/pull/15355)
* [OCPBUGS-56651](https://issues.redhat.com/browse/OCPBUGS-56651): Recognize Detached BMH status [#15083](https://github.com/openshift/console/pull/15083)
* [OCPBUGS-58214](https://issues.redhat.com/browse/OCPBUGS-58214): Incorrect i18n translations in 4.19 batch [#15218](https://github.com/openshift/console/pull/15218)
* [OCPBUGS-59790](https://issues.redhat.com/browse/OCPBUGS-59790): Move alertmanager settings route [#15331](https://github.com/openshift/console/pull/15331)
* [OCPBUGS-59639](https://issues.redhat.com/browse/OCPBUGS-59639): Fixing no resources found message can not be shown completely [#15320](https://github.com/openshift/console/pull/15320)
* [OCPBUGS-59810](https://issues.redhat.com/browse/OCPBUGS-59810): Default name is comprised of '-' on 'Add to favorites' page when language is Korean/Japanese/Chinese. [#15333](https://github.com/openshift/console/pull/15333)
* [OCPBUGS-56280](https://issues.redhat.com/browse/OCPBUGS-56280): Follow-on fix. Add new "plugins-order" flag to bridge cli args [#15168](https://github.com/openshift/console/pull/15168)
* [OCPBUGS-59199](https://issues.redhat.com/browse/OCPBUGS-59199): Deleted objects remain in favorites and cause 404 errors [#15267](https://github.com/openshift/console/pull/15267)
* [OCPBUGS-59557](https://issues.redhat.com/browse/OCPBUGS-59557): add data-test attrs to console plugins table [#15305](https://github.com/openshift/console/pull/15305)
* [OCPBUGS-59513](https://issues.redhat.com/browse/OCPBUGS-59513): Update model flags when plugins load [#15298](https://github.com/openshift/console/pull/15298)
* [OCPBUGS-58331](https://issues.redhat.com/browse/OCPBUGS-58331): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15273](https://github.com/openshift/console/pull/15273)
* [OCPBUGS-58433](https://issues.redhat.com/browse/OCPBUGS-58433): Add the Origin header to the HeaderBlacklist in the co… [#15246](https://github.com/openshift/console/pull/15246)
* [OCPBUGS-59315](https://issues.redhat.com/browse/OCPBUGS-59315): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15280](https://github.com/openshift/console/pull/15280)
* [OCPBUGS-58217](https://issues.redhat.com/browse/OCPBUGS-58217): fix missing form styles in Create PVC page + Clone PVC… [#15260](https://github.com/openshift/console/pull/15260)
* [OCPBUGS-58183](https://issues.redhat.com/browse/OCPBUGS-58183): ContainerResource metric data for HPAs isn't visible i… [#15213](https://github.com/openshift/console/pull/15213)
* [OCPBUGS-58316](https://issues.redhat.com/browse/OCPBUGS-58316): Implement sessions in openshift authenticator [#15234](https://github.com/openshift/console/pull/15234)
* [OCPBUGS-58375](https://issues.redhat.com/browse/OCPBUGS-58375): fix bug where / in console.tab/horizontalNav href breaks navigation [#15239](https://github.com/openshift/console/pull/15239)
* [OCPBUGS-58377](https://issues.redhat.com/browse/OCPBUGS-58377): fix runtime error when editing HPA using the form [#15240](https://github.com/openshift/console/pull/15240)
* [OCPBUGS-58090](https://issues.redhat.com/browse/OCPBUGS-58090): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15204](https://github.com/openshift/console/pull/15204)
* NO-JIRA: Update Console plugin SDK changelogs [#15212](https://github.com/openshift/console/pull/15212)
* [Full changelog](https://github.com/openshift/console/compare/477eb1aa13f3eb4adb82d2fdc82cd23f5295a101...c20067291e2c1ec3f9c66572b2645838aec23337)


### [console-operator](https://github.com/openshift/console-operator/tree/034e4865824a6c10c48b912e8584bf7afb095852)

* [OCPBUGS-61879](https://issues.redhat.com/browse/OCPBUGS-61879): pluginOrder field should only contain available plugins [#1047](https://github.com/openshift/console-operator/pull/1047)
* [OCPBUGS-61119](https://issues.redhat.com/browse/OCPBUGS-61119): Consolidate telemetry values oscilation [#1037](https://github.com/openshift/console-operator/pull/1037)
* [OCPBUGS-59488](https://issues.redhat.com/browse/OCPBUGS-59488): Update downloads deployment configuration to use master node selector [#1016](https://github.com/openshift/console-operator/pull/1016)
* [OCPBUGS-59618](https://issues.redhat.com/browse/OCPBUGS-59618): Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console [#1028](https://github.com/openshift/console-operator/pull/1028)
* [OCPBUGS-56280](https://issues.redhat.com/browse/OCPBUGS-56280): Add plugins order to console config [#988](https://github.com/openshift/console-operator/pull/988)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/0cb29273c8b1efec6ca591d5259a69d34e5ce51f...034e4865824a6c10c48b912e8584bf7afb095852)


### [coredns](https://github.com/openshift/coredns/tree/4f64931403bf747b78bccb40ad877b08da534e23)

* [OCPBUGS-60246](https://issues.redhat.com/browse/OCPBUGS-60246): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#148](https://github.com/openshift/coredns/pull/148)
* [Full changelog](https://github.com/openshift/coredns/compare/74776b850522c912db5fbadf7353f1eab669bd2a...4f64931403bf747b78bccb40ad877b08da534e23)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/d9b2461604dba3821d3c044843e428645f925734)

* [OCPBUGS-58834](https://issues.redhat.com/browse/OCPBUGS-58834): CARRY: don't ignore json files [#338](https://github.com/openshift/cloud-provider-openstack/pull/338)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c8d8596a5f01b38af0c4585a90bf737bfdfba6c7...d9b2461604dba3821d3c044843e428645f925734)


### [etcd](https://github.com/openshift/etcd/tree/eb0acd5c92a830da18d7d0d789f7a8ecac860620)

* [OCPBUGS-61041](https://issues.redhat.com/browse/OCPBUGS-61041): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#340](https://github.com/openshift/etcd/pull/340)
* [Full changelog](https://github.com/openshift/etcd/compare/a5421dfe551a2e9c911a75062a4cdeb7473f5c26...eb0acd5c92a830da18d7d0d789f7a8ecac860620)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/4fd69cf5c0b71fb477271c69d6ddd4b276b18092)

* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Add max-concurrent-reconciles flag to machine actuator [#125](https://github.com/openshift/machine-api-provider-gcp/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/9c99902f29b77e842400ad37925fcb67820d3675...4fd69cf5c0b71fb477271c69d6ddd4b276b18092)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/063b256caae5fbe3b6f2a5b1c35339220c7b4188)

* [OCPBUGS-59749](https://issues.redhat.com/browse/OCPBUGS-59749): 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer [#80](https://github.com/openshift/gcp-pd-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/3aeac35b36ea59188761c2980451217b2099e5da...063b256caae5fbe3b6f2a5b1c35339220c7b4188)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9fa6215ec67894ee1303a01eaf2fe833877d6e5a)

* [OCPBUGS-61556](https://issues.redhat.com/browse/OCPBUGS-61556): Rebase v1.32.9 [#2464](https://github.com/openshift/kubernetes/pull/2464)
* [OCPBUGS-61488](https://issues.redhat.com/browse/OCPBUGS-61488): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write [#2456](https://github.com/openshift/kubernetes/pull/2456)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Unrevert bump to v1.32.8 [#2439](https://github.com/openshift/kubernetes/pull/2439)
* [OCPBUGS-61021](https://issues.redhat.com/browse/OCPBUGS-61021): UPSTREAM: &lt;carry&gt;: Revert "Rebase v1.32.8 to 4.19" [#2433](https://github.com/openshift/kubernetes/pull/2433)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Rebase v1.32.8 to 4.19 [#2412](https://github.com/openshift/kubernetes/pull/2412)
* [OCPBUGS-60074](https://issues.redhat.com/browse/OCPBUGS-60074): UPSTREAM: 132028: podresources: list: use active pods [#2391](https://github.com/openshift/kubernetes/pull/2391)
* [OCPBUGS-59534](https://issues.redhat.com/browse/OCPBUGS-59534): Rebase v1.32.7 to 4.19 [#2367](https://github.com/openshift/kubernetes/pull/2367)
* [OCPBUGS-57886](https://issues.redhat.com/browse/OCPBUGS-57886): Bump 4.19 1.32.6 [#2340](https://github.com/openshift/kubernetes/pull/2340)
* NO-JIRA: UPSTREAM: &lt;carry&gt;: Update rebase.sh to handle go versions major.minor.patch [#2341](https://github.com/openshift/kubernetes/pull/2341)
* [OCPBUGS-58175](https://issues.redhat.com/browse/OCPBUGS-58175): Fix flake caused by invalid detection of active policies in VAP integration tests [#2347](https://github.com/openshift/kubernetes/pull/2347)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a36c41df567e20318d8141b629b31418572f8968...9fa6215ec67894ee1303a01eaf2fe833877d6e5a)


### [hypershift](https://github.com/openshift/hypershift/tree/63010e4e8b0b4fb178b31d6241ea92396906ce68)

* [OCPBUGS-61567](https://issues.redhat.com/browse/OCPBUGS-61567): [release-4.19] fix(proxy): ensure URLs have scheme before proxy resolution [#6792](https://github.com/openshift/hypershift/pull/6792)
* [OCPBUGS-61677](https://issues.redhat.com/browse/OCPBUGS-61677): resolve MIRRORED_RELEASE_IMAGE flapping [#6825](https://github.com/openshift/hypershift/pull/6825)
* [OCPBUGS-61206](https://issues.redhat.com/browse/OCPBUGS-61206): use common MCE konflux pipeline [#6748](https://github.com/openshift/hypershift/pull/6748)
* [OCPBUGS-61031](https://issues.redhat.com/browse/OCPBUGS-61031): [release-4.19]: set default goaway-chance to 0.001 [#6712](https://github.com/openshift/hypershift/pull/6712)
* [OCPBUGS-60483](https://issues.redhat.com/browse/OCPBUGS-60483): feat(validations): add wildcard support to DNS SAN conflict detection [#6648](https://github.com/openshift/hypershift/pull/6648)
* [OCPBUGS-60147](https://issues.redhat.com/browse/OCPBUGS-60147): Always compress and encode payload in token secret for inplace upgrades [#6606](https://github.com/openshift/hypershift/pull/6606)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): add missing app label to some components [#6636](https://github.com/openshift/hypershift/pull/6636)
* [OCPBUGS-60125](https://issues.redhat.com/browse/OCPBUGS-60125): fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion [#6689](https://github.com/openshift/hypershift/pull/6689)
* [OCPBUGS-60648](https://issues.redhat.com/browse/OCPBUGS-60648): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6677](https://github.com/openshift/hypershift/pull/6677)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): fix: add dynamic security context uid to 4.19 missing components [#6675](https://github.com/openshift/hypershift/pull/6675)
* [OCPBUGS-57141](https://issues.redhat.com/browse/OCPBUGS-57141): HCP payload doesn't respect multiple mirrors [#6517](https://github.com/openshift/hypershift/pull/6517)
* [CNTRLPLANE-1270](https://issues.redhat.com/browse/CNTRLPLANE-1270): Red Hat Konflux update control-plane-operator-4-19 [#6660](https://github.com/openshift/hypershift/pull/6660)
* Red Hat Konflux purge control-plane-operator-4-19 [#6659](https://github.com/openshift/hypershift/pull/6659)
* [CNTRLPLANE-1267](https://issues.redhat.com/browse/CNTRLPLANE-1267): conditional builds for mce-2.9 [#6657](https://github.com/openshift/hypershift/pull/6657)
* [OCPBUGS-57588](https://issues.redhat.com/browse/OCPBUGS-57588): Update PSA from v1beta1 to v1 [#6302](https://github.com/openshift/hypershift/pull/6302)
* [OCPBUGS-59805](https://issues.redhat.com/browse/OCPBUGS-59805): Router publish strategy related changes for IBM Cloud platform [#6490](https://github.com/openshift/hypershift/pull/6490)
* [OCPBUGS-59933](https://issues.redhat.com/browse/OCPBUGS-59933): Use the image reference for the cache in the image metadata provider [#6535](https://github.com/openshift/hypershift/pull/6535)
* [CNTRLPLANE-1016](https://issues.redhat.com/browse/CNTRLPLANE-1016): Support day2 tags changes for AWS default SecurityGroup [#6455](https://github.com/openshift/hypershift/pull/6455)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks [#6617](https://github.com/openshift/hypershift/pull/6617)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): feat: let ARO honour cp namespace annotation for default SC uids in 4.19 [#6592](https://github.com/openshift/hypershift/pull/6592)
* [CNTRLPLANE-1226](https://issues.redhat.com/browse/CNTRLPLANE-1226): feat(konflux): Make CPO builds hermetic [#6596](https://github.com/openshift/hypershift/pull/6596)
* [CNTRLPLANE-1213](https://issues.redhat.com/browse/CNTRLPLANE-1213): New API to support specifying cluster-autoscaler flags [#6558](https://github.com/openshift/hypershift/pull/6558)
* [OCPBUGS-57331](https://issues.redhat.com/browse/OCPBUGS-57331): Set default security context on everything [#6257](https://github.com/openshift/hypershift/pull/6257)
* [OCPSTRAT-2173](https://issues.redhat.com/browse/OCPSTRAT-2173): feat(hcco): add support for hosted OIDC client secrets [#6525](https://github.com/openshift/hypershift/pull/6525)
* [OCPBUGS-58300](https://issues.redhat.com/browse/OCPBUGS-58300): remove annotation is not working [#6465](https://github.com/openshift/hypershift/pull/6465)
* [CNTRLPLANE-1189](https://issues.redhat.com/browse/CNTRLPLANE-1189): Global PullSecret daemonSet implementation [#6507](https://github.com/openshift/hypershift/pull/6507)
* NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles [#6493](https://github.com/openshift/hypershift/pull/6493)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): sharedingress: Add support for kube-apiserver whitelist CIDRs [#6502](https://github.com/openshift/hypershift/pull/6502)
* [OCPBUGS-58683](https://issues.redhat.com/browse/OCPBUGS-58683): fix(hcco): Don't use a default OIDC client secret name when no secret name is provided [#6398](https://github.com/openshift/hypershift/pull/6398)
* [OCPBUGS-59674](https://issues.redhat.com/browse/OCPBUGS-59674): Initial Changes to Support Self-managed Azure [#6481](https://github.com/openshift/hypershift/pull/6481)
* [OCPBUGS-59547](https://issues.redhat.com/browse/OCPBUGS-59547): Remove code associated with Managed Identity v2 for ARO HCP for 4.19 [#6459](https://github.com/openshift/hypershift/pull/6459)
* [OCPBUGS-59493](https://issues.redhat.com/browse/OCPBUGS-59493): Remove unused jq and rsync rpms [#6457](https://github.com/openshift/hypershift/pull/6457)
* [OCPBUGS-59101](https://issues.redhat.com/browse/OCPBUGS-59101): Configure ClusterServiceLoadBalancerHea… [#6409](https://github.com/openshift/hypershift/pull/6409)
* NO-JIRA: chore(deps): update konflux references [#6383](https://github.com/openshift/hypershift/pull/6383)
* NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check [#6392](https://github.com/openshift/hypershift/pull/6392)
* [OCPBUGS-57660](https://issues.redhat.com/browse/OCPBUGS-57660): [release-4.19] CORENET-6094: CNO: add FRR-k8s image [#6374](https://github.com/openshift/hypershift/pull/6374)
* [OCPBUGS-58335](https://issues.redhat.com/browse/OCPBUGS-58335): Support proxy authentication when user/pass is included in URL [#6370](https://github.com/openshift/hypershift/pull/6370)
* [CNTRLPLANE-1044](https://issues.redhat.com/browse/CNTRLPLANE-1044): chore(deps): update konflux references [#6342](https://github.com/openshift/hypershift/pull/6342)
* [ACM-21713](https://issues.redhat.com/browse/ACM-21713): adding .git in .dockerignore to fix version info [#6318](https://github.com/openshift/hypershift/pull/6318)
* [Full changelog](https://github.com/openshift/hypershift/compare/5e61d6fae4734f8545f64990c5e44af26c9da58b...63010e4e8b0b4fb178b31d6241ea92396906ce68)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/940ac1c27e5548f738219b8c2ea4d1b6924e60e5)

* [OCPBUGS-52542](https://issues.redhat.com/browse/OCPBUGS-52542): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#118](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/118)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/877ef8cd546facbc2416c194128557a25b95d141...940ac1c27e5548f738219b8c2ea4d1b6924e60e5)


### [insights-operator](https://github.com/openshift/insights-operator/tree/e4df617aa9b4b586e21afcd4b92270ab52392461)

* [OCPBUGS-61485](https://issues.redhat.com/browse/OCPBUGS-61485): virt launcher logs gatherer (#1132) [#1132](https://github.com/openshift/insights-operator/pull/1132)
* feat: add permissions to gather clusterrole (#1112) [#1112](https://github.com/openshift/insights-operator/pull/1112)
* fix: incorrect anonymization of domains (#1114) [#1114](https://github.com/openshift/insights-operator/pull/1114)
* feat: copy proxy envs from IO pod to gathering pods (#1103) [#1103](https://github.com/openshift/insights-operator/pull/1103)
* [OCPBUGS-56781](https://issues.redhat.com/browse/OCPBUGS-56781): Enhance insights-runtime-extractor errors (#1089) [#1089](https://github.com/openshift/insights-operator/pull/1089)
* [Full changelog](https://github.com/openshift/insights-operator/compare/02f44737de3a93330de16f138b0f688fe1daefce...e4df617aa9b4b586e21afcd4b92270ab52392461)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/fdef30c84b3d45ede364500984221c3f492b1415)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). [#223](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/223)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/4ab93e07bb7c525990ef21a11caae2122ace63f6...fdef30c84b3d45ede364500984221c3f492b1415)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/f535e9a1a27ebfeca0fa1ac33f19383f46629141)

* "[release-4.19] OCPBUGS-58239: Implement volume expansion" [#64](https://github.com/openshift/kubevirt-csi-driver/pull/64)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/e3027025743b10d8a1df75afcf9c28d4ac8dbf3f...f535e9a1a27ebfeca0fa1ac33f19383f46629141)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/dd0126864cf2196ac84b4c1fe862178b70aebc7a)

* [OCPBUGS-61096](https://issues.redhat.com/browse/OCPBUGS-61096): bump openshift/api [#1411](https://github.com/openshift/machine-api-operator/pull/1411)
* fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS [#1403](https://github.com/openshift/machine-api-operator/pull/1403)
* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Enabled 10 concurrent reconciles on GCP [#1391](https://github.com/openshift/machine-api-operator/pull/1391)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/5eb6a3610eed1f873926eaf4db17669cdb308a1c...dd0126864cf2196ac84b4c1fe862178b70aebc7a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ca1d6fab189c9ed0bd6549e3a95558eda3c92d5a)

* [OCPBUGS-62164](https://issues.redhat.com/browse/OCPBUGS-62164): Add mcd_local_unsupported_packages recording rule [#5306](https://github.com/openshift/machine-config-operator/pull/5306)
* [OCPBUGS-62114](https://issues.redhat.com/browse/OCPBUGS-62114): Improve MCN CRD clean-up script [#5299](https://github.com/openshift/machine-config-operator/pull/5299)
* [OCPBUGS-61835](https://issues.redhat.com/browse/OCPBUGS-61835): Override NMState service definition [#5287](https://github.com/openshift/machine-config-operator/pull/5287)
* [OCPBUGS-61284](https://issues.redhat.com/browse/OCPBUGS-61284): Make MCN e2e tests blocking [#5275](https://github.com/openshift/machine-config-operator/pull/5275)
* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Enable debug logging for nodeip-configuration [#5221](https://github.com/openshift/machine-config-operator/pull/5221)
* [OCPBUGS-59871](https://issues.redhat.com/browse/OCPBUGS-59871): Understand and eliminate noisy logs for MCN [#5199](https://github.com/openshift/machine-config-operator/pull/5199)
* [OCPBUGS-60767](https://issues.redhat.com/browse/OCPBUGS-60767): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5258](https://github.com/openshift/machine-config-operator/pull/5258)
* [OCPBUGS-60265](https://issues.redhat.com/browse/OCPBUGS-60265): Reintroduce cronjob that deletes MCN v1alpha1 CRD [#5243](https://github.com/openshift/machine-config-operator/pull/5243)
* [OCPBUGS-60224](https://issues.redhat.com/browse/OCPBUGS-60224): Invalid architecture value found in annotation during 4.19 update [#5227](https://github.com/openshift/machine-config-operator/pull/5227)
* [OCPBUGS-60080](https://issues.redhat.com/browse/OCPBUGS-60080): use channel to signal controller shutdown [#5217](https://github.com/openshift/machine-config-operator/pull/5217)
* [OCPBUGS-59928](https://issues.redhat.com/browse/OCPBUGS-59928), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5208](https://github.com/openshift/machine-config-operator/pull/5208)
* [OCPBUGS-59899](https://issues.redhat.com/browse/OCPBUGS-59899): Add workaround fix for static pod race [#5204](https://github.com/openshift/machine-config-operator/pull/5204)
* [OCPBUGS-59978](https://issues.redhat.com/browse/OCPBUGS-59978): ARO cert rotate fix [#5210](https://github.com/openshift/machine-config-operator/pull/5210)
* [OCPBUGS-59720](https://issues.redhat.com/browse/OCPBUGS-59720): TestMCNPoolNameCustom should clean up resources properly [#5186](https://github.com/openshift/machine-config-operator/pull/5186)
* [OCPBUGS-56750](https://issues.redhat.com/browse/OCPBUGS-56750): Support NODEIP_HINT in IPI deployments too [#5082](https://github.com/openshift/machine-config-operator/pull/5082)
* [OCPBUGS-58894](https://issues.redhat.com/browse/OCPBUGS-58894): Remove podman-etcd machine config source [#5169](https://github.com/openshift/machine-config-operator/pull/5169)
* [OCPBUGS-59208](https://issues.redhat.com/browse/OCPBUGS-59208): Backport QE ported test for OCL component readiness [#5125](https://github.com/openshift/machine-config-operator/pull/5125)
* [OCPBUGS-58820](https://issues.redhat.com/browse/OCPBUGS-58820): Add control-plane label for master nodes on legacy clusters [#5168](https://github.com/openshift/machine-config-operator/pull/5168)
* [OCPBUGS-57327](https://issues.redhat.com/browse/OCPBUGS-57327): Do not set cpu system reserve below the default value [#5117](https://github.com/openshift/machine-config-operator/pull/5117)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/70a5c8efdbb569b47d4752352f8a75c0c4658225...ca1d6fab189c9ed0bd6549e3a95558eda3c92d5a)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/345d64d597581eb0cb3cd2c1cf06124446da79a5)

* NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap [#498](https://github.com/openshift/monitoring-plugin/pull/498)
* NO-JIRA: improve consistency in tab string [#496](https://github.com/openshift/monitoring-plugin/pull/496)
* : NO-JIRA: update the i18n [#495](https://github.com/openshift/monitoring-plugin/pull/495)
* [OCPBUGS-60129](https://issues.redhat.com/browse/OCPBUGS-60129): feat: add alerting rules tab to dev console [#488](https://github.com/openshift/monitoring-plugin/pull/488)
* [OU-943](https://issues.redhat.com/browse/OU-943): remove broken useEffect [#484](https://github.com/openshift/monitoring-plugin/pull/484)
* [OU-943](https://issues.redhat.com/browse/OU-943): Manual Cherry Pick [#474](https://github.com/openshift/monitoring-plugin/pull/474)
* [OU-594](https://issues.redhat.com/browse/OU-594): Manual cherry pick incidents tab 4 19 [#479](https://github.com/openshift/monitoring-plugin/pull/479)
* [OU-863](https://issues.redhat.com/browse/OU-863): [release-4.19] Manual cherry pick add disconnect option [#482](https://github.com/openshift/monitoring-plugin/pull/482)
* [OU-939](https://issues.redhat.com/browse/OU-939): Fix virt persepective new silence link [#478](https://github.com/openshift/monitoring-plugin/pull/478)
* [OU-928](https://issues.redhat.com/browse/OU-928): reset showgraph state when unmounting button [#462](https://github.com/openshift/monitoring-plugin/pull/462)
* [OU-744](https://issues.redhat.com/browse/OU-744): [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend [#457](https://github.com/openshift/monitoring-plugin/pull/457)
* [OU-880](https://issues.redhat.com/browse/OU-880): [release-4.19] Manual cherry pick ou 880 [#458](https://github.com/openshift/monitoring-plugin/pull/458)
* [OU-842](https://issues.redhat.com/browse/OU-842): [release-4.19] fix: override notistack dependency to avoid conflict [#455](https://github.com/openshift/monitoring-plugin/pull/455)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/73a8e79b19fd6f89ff13b760e00d010ffae4c065...345d64d597581eb0cb3cd2c1cf06124446da79a5)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/381c36baaad8e45ba10cca43aeeaf00dfc907462)

* [OCPBUGS-58849](https://issues.redhat.com/browse/OCPBUGS-58849): Update the github.com/golang/glog module to v1.2.4 [#100](https://github.com/openshift/multus-admission-controller/pull/100)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/9369858a409280dc6891cb817931978b77168de7...381c36baaad8e45ba10cca43aeeaf00dfc907462)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/0e1112cea12c707a93bd01d408c598dd070c8676)

* [OCPBUGS-59640](https://issues.redhat.com/browse/OCPBUGS-59640): Prevent accidental IP deallocation in statefulsets [#375](https://github.com/openshift/whereabouts-cni/pull/375)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/45624b6383012d7b69409635daa8e4d455da6e16...0e1112cea12c707a93bd01d408c598dd070c8676)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/fd8f506d59353ac89db5c8015969e81dafdab774)

* [OCPBUGS-62107](https://issues.redhat.com/browse/OCPBUGS-62107): Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted [#96](https://github.com/openshift/bond-cni/pull/96)
* [Full changelog](https://github.com/openshift/bond-cni/compare/9788e753f0f98d9bdef41898701c3aa9ad6b031e...fd8f506d59353ac89db5c8015969e81dafdab774)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/89e4882698653fdd80fcee2e9d92e668cb02d2d1)

* [OCPBUGS-58851](https://issues.redhat.com/browse/OCPBUGS-58851): Bump github.com/golang/glog to v1.2.4 (#110) [#110](https://github.com/openshift/network-metrics-daemon/pull/110)
* [OCPBUGS-60172](https://issues.redhat.com/browse/OCPBUGS-60172): Replace e2e test image (#119) [#119](https://github.com/openshift/network-metrics-daemon/pull/119)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5ec8c6bde236feab19525c2d84f7d55f430f9e2b...89e4882698653fdd80fcee2e9d92e668cb02d2d1)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f37c618af0ac1c9122486c068cc99df4ffd1e70f)

* [OCPBUGS-60137](https://issues.redhat.com/browse/OCPBUGS-60137): Fix ingress details [#261](https://github.com/openshift/networking-console-plugin/pull/261)
* [OCPBUGS-59841](https://issues.redhat.com/browse/OCPBUGS-59841): Fix requiremenets with no value [#255](https://github.com/openshift/networking-console-plugin/pull/255)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/a5c90cb0192f98ec61b71b9a15d53fce8fb6f12e...f37c618af0ac1c9122486c068cc99df4ffd1e70f)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/f74e8e006cd47ae9b7cab525796f53af8fb1da9c)

* [OCPBUGS-58836](https://issues.redhat.com/browse/OCPBUGS-58836): 4.19 kube 1.32 [#318](https://github.com/openshift/oauth-proxy/pull/318)
* [OCPBUGS-58343](https://issues.redhat.com/browse/OCPBUGS-58343): release 4.19 CVE fixes [#326](https://github.com/openshift/oauth-proxy/pull/326)
* [OCPBUGS-58276](https://issues.redhat.com/browse/OCPBUGS-58276): fix e2e tests [#323](https://github.com/openshift/oauth-proxy/pull/323)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/3d12ccbee45c5d4bcea8c232867df58a60c4382b...f74e8e006cd47ae9b7cab525796f53af8fb1da9c)


### [oauth-server](https://github.com/openshift/oauth-server/tree/14780f7c67d5929c3db84504d10625710fcf5fe0)

* [OCPBUGS-57282](https://issues.redhat.com/browse/OCPBUGS-57282): Updating oauth-server-container image to be consistent with ART for 4.19 [#183](https://github.com/openshift/oauth-server/pull/183)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6acb955fc87e1d487093217ca949f08eb8dc88c3...14780f7c67d5929c3db84504d10625710fcf5fe0)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/bbac650c42bdd06035188b975ac8c440c737b9d4)

* [OCPBUGS-62062](https://issues.redhat.com/browse/OCPBUGS-62062): [release-4.19] changes the warning message of 4.21 [#1271](https://github.com/openshift/oc-mirror/pull/1271)
* And 12 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e8a1ce3d1973ef2fb5870ea6abe7ee6d7c0d8ae5...bbac650c42bdd06035188b975ac8c440c737b9d4)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/abf950347eaa8124a6f6f819dadfb787bc6c5ff5)

* UPSTREAM: &lt;carry&gt;: Safely handle changes to description fields (#2023) [#2023](https://github.com/openshift/operator-framework-operator-controller/pull/2023)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/416a2d35da535db1d50211dbc13b22a909cda781...abf950347eaa8124a6f6f819dadfb787bc6c5ff5)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7fe57362c4f64c0d4caf52a0bb26a59b2799b227)

* [OCPBUGS-57206](https://issues.redhat.com/browse/OCPBUGS-57206): Wire dry run option to Image API server operations [#524](https://github.com/openshift/openshift-apiserver/pull/524)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/18061bfe9586919421ed2bb342d9b326b1002bd7...7fe57362c4f64c0d4caf52a0bb26a59b2799b227)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5b3063ff149f290bebca0783fc508dfbf07689a5)

* [OCPBUGS-56614](https://issues.redhat.com/browse/OCPBUGS-56614): legacy image pull secret rollback controller [#384](https://github.com/openshift/openshift-controller-manager/pull/384)
* [OCPBUGS-57951](https://issues.redhat.com/browse/OCPBUGS-57951): ignore error failing to find pull/push secrets [#401](https://github.com/openshift/openshift-controller-manager/pull/401)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/af43fe68a7d862959a797b66307a1277fffbc9df...5b3063ff149f290bebca0783fc508dfbf07689a5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e42f5c26092b9dea5856807d314f57e1886d31d7)

* [OCPBUGS-61363](https://issues.redhat.com/browse/OCPBUGS-61363): [4.19] e2e stability fixes [#1079](https://github.com/openshift/operator-framework-olm/pull/1079)
* [OCPBUGS-60525](https://issues.redhat.com/browse/OCPBUGS-60525): Add NetworkPolicy as a supported kind [#1047](https://github.com/openshift/operator-framework-olm/pull/1047)
* [OCPBUGS-59258](https://issues.redhat.com/browse/OCPBUGS-59258): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1037](https://github.com/openshift/operator-framework-olm/pull/1037)
* [OCPBUGS-58259](https://issues.redhat.com/browse/OCPBUGS-58259): Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] [#1030](https://github.com/openshift/operator-framework-olm/pull/1030)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4a6530a4cf4e8e81d8f04923f36dd36023f45902...e42f5c26092b9dea5856807d314f57e1886d31d7)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797), [OCPBUGS-60979](https://issues.redhat.com/browse/OCPBUGS-60979): DownStream Merge Sync from 4.20 [08-22-2025] [#2733](https://github.com/openshift/ovn-kubernetes/pull/2733)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [08-06-2025] [#2704](https://github.com/openshift/ovn-kubernetes/pull/2704)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-28-2025] [#2688](https://github.com/openshift/ovn-kubernetes/pull/2688)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-59530](https://issues.redhat.com/browse/OCPBUGS-59530): DownStream Merge Sync from 4.20 [07-17-2025] [#2675](https://github.com/openshift/ovn-kubernetes/pull/2675)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-09-2025] [#2660](https://github.com/openshift/ovn-kubernetes/pull/2660)
* [OCPBUGS-59106](https://issues.redhat.com/browse/OCPBUGS-59106): DownStream Merge Sync from 4.20 [06-18-2025] [#2642](https://github.com/openshift/ovn-kubernetes/pull/2642)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0c8cdc93873c06b07973d147fc704d2224ac2faf...6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)

* [OCPBUGS-61134](https://issues.redhat.com/browse/OCPBUGS-61134): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#124](https://github.com/openshift/machine-api-provider-powervs/pull/124)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/87f8e306940e6b0231e6b8fb655ca1e6f21ba95a...ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)


### [prometheus](https://github.com/openshift/prometheus/tree/80e845144d59a76d5113f329bc1022a435b7ce9c)

* [OCPBUGS-61486](https://issues.redhat.com/browse/OCPBUGS-61486): chore: compute highestTimestamp at queryManager level [#265](https://github.com/openshift/prometheus/pull/265)
* [Full changelog](https://github.com/openshift/prometheus/compare/7935baede79e0e2fbf117781fa3843bea10dfbf8...80e845144d59a76d5113f329bc1022a435b7ce9c)


### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/e97898c8af9cad8e5375e4860a7d79c39a1c79fa)

* Merge [#1853](https://github.com/openshift/os/pull/1853)
* Merge [#1851](https://github.com/openshift/os/pull/1851)
* [OCPBUGS-58122](https://issues.redhat.com/browse/OCPBUGS-58122): [TNF] OCP Two Node with Fencing symlink begone! [#1827](https://github.com/openshift/os/pull/1827)
* [Full changelog](https://github.com/openshift/os/compare/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20...e97898c8af9cad8e5375e4860a7d79c39a1c79fa)


### [tests](https://github.com/openshift/origin/tree/3137f6b4b6d3afea6205b4a8707c10281a30d53b)

* [OCPBUGS-56213](https://issues.redhat.com/browse/OCPBUGS-56213): Skip GatewayAPIController tests on clusters without OLM capabilities [#29815](https://github.com/openshift/origin/pull/29815)
* [OCPBUGS-61666](https://issues.redhat.com/browse/OCPBUGS-61666): chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster [#30249](https://github.com/openshift/origin/pull/30249)
* [OCPBUGS-59512](https://issues.redhat.com/browse/OCPBUGS-59512): disruptioninclusterapiserver: bump timeout to 10 mins [#29999](https://github.com/openshift/origin/pull/29999)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Bump to latest openshift/kubernetes (v1.32.8) [#30229](https://github.com/openshift/origin/pull/30229)
* [OCPBUGS-60244](https://issues.redhat.com/browse/OCPBUGS-60244): Wait 30s after the upgrade is complete to validate workloads [#30144](https://github.com/openshift/origin/pull/30144)
* [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797): Don't check for remote node subnet BGP routes [#30156](https://github.com/openshift/origin/pull/30156)
* NO-JIRA: Update extended/networking OWNERS [#30088](https://github.com/openshift/origin/pull/30088)
* [OCPBUGS-60569](https://issues.redhat.com/browse/OCPBUGS-60569): images/tests: Remove rteval [#30124](https://github.com/openshift/origin/pull/30124)
* [OCPBUGS-60429](https://issues.redhat.com/browse/OCPBUGS-60429): Load our MCO's OTE binary [#30043](https://github.com/openshift/origin/pull/30043)
* [OCPBUGS-59757](https://issues.redhat.com/browse/OCPBUGS-59757): OCPBUGS-59758: Improve MCN test stability [#30018](https://github.com/openshift/origin/pull/30018)
* [OCPBUGS-60117](https://issues.redhat.com/browse/OCPBUGS-60117): Enable test for LGW L2 [#30052](https://github.com/openshift/origin/pull/30052)
* [OCPBUGS-60234](https://issues.redhat.com/browse/OCPBUGS-60234): Move the legacy container failures [#30073](https://github.com/openshift/origin/pull/30073)
* [OCPBUGS-60092](https://issues.redhat.com/browse/OCPBUGS-60092): feat(azure): skip metrics collection for ARO HCP hypershift [#30051](https://github.com/openshift/origin/pull/30051)
* [OCPBUGS-59398](https://issues.redhat.com/browse/OCPBUGS-59398): Skip MCN's node degrade test on 4.19 [#29990](https://github.com/openshift/origin/pull/29990)
* [OCPBUGS-59391](https://issues.redhat.com/browse/OCPBUGS-59391): [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests [#29989](https://github.com/openshift/origin/pull/29989)
* [OCPBUGS-59226](https://issues.redhat.com/browse/OCPBUGS-59226): bump watch count limits [#29982](https://github.com/openshift/origin/pull/29982)
* [OCPBUGS-57886](https://issues.redhat.com/browse/OCPBUGS-57886): Bump 4.19 1.32.6 [#29933](https://github.com/openshift/origin/pull/29933)
* [OCPBUGS-58470](https://issues.redhat.com/browse/OCPBUGS-58470): Update IPsec e2e test to validate NAT-T encapsulation option [#29957](https://github.com/openshift/origin/pull/29957)
* [OCPBUGS-57206](https://issues.redhat.com/browse/OCPBUGS-57206): Backport pr 29834 to release-4.19 [#29903](https://github.com/openshift/origin/pull/29903)
* [OCPBUGS-58204](https://issues.redhat.com/browse/OCPBUGS-58204): Fix MCN test on agent compact FIPS jobs [#29943](https://github.com/openshift/origin/pull/29943)
* [OCPBUGS-58053](https://issues.redhat.com/browse/OCPBUGS-58053): [release-4.19] MCO-1768: Enable PIS testing on Metal [#29936](https://github.com/openshift/origin/pull/29936)
* [OCPBUGS-57436](https://issues.redhat.com/browse/OCPBUGS-57436): Add MCO test suite to 4.19 [#29918](https://github.com/openshift/origin/pull/29918)
* [Full changelog](https://github.com/openshift/origin/compare/cedf1a163d2a36b1129e5cd2d1b8794acc75fd54...3137f6b4b6d3afea6205b4a8707c10281a30d53b)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/f33d67f8f38e33af45efcb25003a001a17165cdc)

* [OCPBUGS-61650](https://issues.redhat.com/browse/OCPBUGS-61650): Fix unit tests [#69](https://github.com/openshift/cluster-api-provider-vsphere/pull/69)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): Update manifests gen to remove reliance on admission registration v1beta1 [#61](https://github.com/openshift/cluster-api-provider-vsphere/pull/61)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/8c61ba3dce7d8e838e41827576c18f4a092f36e4...f33d67f8f38e33af45efcb25003a001a17165cdc)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/4f3a1da10d7f060f4b6530e70bd03892d9c43277)

* [OCPBUGS-60535](https://issues.redhat.com/browse/OCPBUGS-60535): Check for number of FailureDomain-s in GetVCenter() [#188](https://github.com/openshift/vsphere-problem-detector/pull/188)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/32b15d87f5fd387dd5d04b96b7250a353240bf92...4f3a1da10d7f060f4b6530e70bd03892d9c43277)