# 4.20.20

Created: 2026-04-30 09:04:13 +0000 UTC

Image Digest: `sha256:f3d952e9a20de0c5db249c6c7771d6b71d4eaa9d269d5da8868e6652f6dbec0d`


## Changes from 4.20.17

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.9 to 1.33.10
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260314-0 to 9.6.20260424-0


### Removed images

* libvirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [637327ec](https://github.com/openshift/assisted-installer-agent/commit/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0) `sha256:a702481cb1c023f6144fca62de754ce6e84cc3164b32a0745ccd29752f7d9ee7`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [e3e997d9](https://github.com/openshift/agent-installer-utils/commit/e3e997d9f7b84b134a07186de9bddde21598ae32) `sha256:c116054a7800425e17591d0c92629c1198b65cadca3ac796716ec8fcd3d7c759`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:0131359350b329c4d55d100027fe38dcbfb65d60c1f46f17856afcba51ca4222`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:206a5e3bcfa14158fd77c0d61893b4b8b1a7434e584eaee9a92154141912e436`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [300439ea](https://github.com/openshift/cluster-api-provider-aws/commit/300439ea0736444a160c061578b3bd8956d4f7e6) `sha256:f19c19c061c6999d856c2b45b88a566628969c95fe29a89ed4f97cd8fd694c59`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [a8ef205c](https://github.com/openshift/aws-ebs-csi-driver/commit/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9) `sha256:8b101ce460baa6f40ee5d2702a85d37ca070e292766b67254f3877969abf341c`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:ce68134191d904e7162a4d65deb2b27318c0519b71645e2d2f69f76ce14e85ed`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [999f4f76](https://github.com/openshift/machine-api-provider-aws/commit/999f4f76124e66c7b42af678cb19aff4b29f72d4) `sha256:6f89b1351cd20503c9ffc396c491309d36d786fc5cac0c2dfd3a6627fae8435a`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [8e83772a](https://github.com/openshift/aws-pod-identity-webhook/commit/8e83772ab8d31b32225744d4f0b0023680692daf) `sha256:deae47551d15ce50802fba7835bf03e241ae791dcd28dcfb3810e0e98a2bf9e6`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:6600051a3537016bf2b78d34994e8b59e958388b605c0e81dabbcc193c59457a`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:ae9f7621e4ad6660f73529cfdbbbe1a609d503d9ac2bc5dfb43692bbee31664d`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [cb8b5b6a](https://github.com/openshift/cluster-api-provider-azure/commit/cb8b5b6a485971a95c5a74508d76ab19b23cbf29) `sha256:8c7f6f56b3e5702d7f6752a3069d7538d1a2c4e2954fdc04b8d939c946ef7e20`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [0b8e4d22](https://github.com/openshift/azure-disk-csi-driver/commit/0b8e4d2202b0d17942fd745a5e1948f46bdd0350) `sha256:6645dda1f389cb2271324304519fd0e6ce33b9e1af83ddb5fbcd72f850f04ae5`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45d505bc](https://github.com/openshift/azure-file-csi-driver/commit/45d505bc11fedadece5ae27147c9595877e39f2a) `sha256:4245facda4eb4806ebef96f83895729d9c34bc7fe0c29c9f5add723ec791bf06`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [68db9150](https://github.com/openshift/machine-api-provider-azure/commit/68db91507ea47f767ee0dc838c08cc371d2ff69f) `sha256:9acb25a6eb1f58a0f08d2e53c302577a79eedd1ddfbc39df9d13f05d045adcd2`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [6e2f3626](https://github.com/openshift/azure-service-operator/commit/6e2f362623720f7b6d634fbc424fbc61e4b481ae) `sha256:e4f3e9fd575dddb2a2b35fb9b3d0579de84ac5fa12bf19bf0b4938757a4455b0`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:f34060dd53e0641cb6e09b8c27ebd68aa25166cc18f1069fcf9fc8e23369ebf2`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:3d70dc8cb31d13e0fcb17b2ac922e91c22c82052f518c0316209ae0939bdc7dd`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:b6aa092042af6a0fd1af5d6d0d33637c63c3bc7326409cadb2cfb237d07fd9e0`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [50c63b0d](https://github.com/openshift/baremetal-runtimecfg/commit/50c63b0d5744a830cb828a669ed09982dd46365b) `sha256:170a554f026634f798bc2bbeaf2164c62028083f6ff1c0b6bb1d16e372eaa1f9`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [d22915bc](https://github.com/openshift/cloud-network-config-controller/commit/d22915bc82993ce11cb3fb97e6ae00602f30549b) `sha256:41183115abc3ef5fd4a79e75c24bf3d4c98c7f80ed761160c0ec5368ba729313`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [fb1a9ab2](https://github.com/openshift/cluster-authentication-operator/commit/fb1a9ab21d72903f79a45f916c6443c0709b9b0c) `sha256:d2eee00cc3f00709f8441d53cbf61ffb5b697ae7cc9445ba03e75ee23e03eafa`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [147e5a7f](https://github.com/openshift/cluster-autoscaler-operator/commit/147e5a7ff20b46ade7dd932b47e06ca82729f5e8) `sha256:4344b5680e7929c1e75a577eb52cdb3ee4680c84f5056bfb0efeb0c92464f75b`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:a01decebaf9b25f1f1e6bacba3e5408a2212c756ed8803d9300aec5a4248399b`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [de1db297](https://github.com/openshift/cluster-api/commit/de1db2970e7fede7101e5a8188e74942ab6665e3) `sha256:1b3355a5d3eef77c92274bc1670b2961c6f6210983254b060c23c53124929456`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [acf33144](https://github.com/openshift/cluster-capi-operator/commit/acf331446369b5307b6b435af14daabdca9fafbc) `sha256:e5bc58d98c6683e772a1de8cb189cb4d87dc85d202f620aeb74ae77133139002`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [276696cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/276696ccf679830b25df341edb7aae9bb3f4e763) `sha256:bad724c2ed36646041ad9969de4b60ddac2b958e5b18b3c6f4274af385137296`
* [cluster-config-api](https://github.com/openshift/api) git [50517c6f](https://github.com/openshift/api/commit/50517c6f4bfdbf9fc2cb291fd97cce150a3237ca) `sha256:1f3e4509afef982aa517a3ea5736ea6a6c08b7d73359036827b3478ca815e9c6`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:1aca8220659339d84eeab4c2023ec3a6f09f45bf6efb8358d4265e581a725497`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:1d212a46dd1ba91344282fda009399e663f32ee9cb2038d431f2f092f2d5efeb`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:de79962244a4fbf50724af3ec89cd9c3720eee6dd8325d94e74fa7f4b08df93a`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [d4171c72](https://github.com/openshift/cluster-etcd-operator/commit/d4171c720f49821e9e578a1bf4c6ce92d569ef13) `sha256:812f7abf876e9f065894a003ad9bf89ecc63b640a73db8b8290c862b55e6c932`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:2f4ecfe55da3a701cbd7cfc2c0d1b149f050eff9072725b265eb3aefa3e92d38`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [234e2182](https://github.com/openshift/cluster-api-operator/commit/234e218207ec963df04ec1fedad85a421eb7a1ff) `sha256:1e31570e5cfbd54b3ff2de91b317eaffecb58a4b3b2b6bae789eb3fe807ab148`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [438c9dba](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/438c9dba80ddadeabe9efe4a654297a7b550b2b8) `sha256:931b9f28e829d04c936c2f7a937263b30314dbb9700094f3653e88baa8b7c0a9`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:73d7a6cd1f3f7c96331e04d0ff7b6c5787d52927148b26dc22e4b93181a815d5`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [b3c82b2e](https://github.com/openshift/cluster-machine-approver/commit/b3c82b2eec66ae3ae510df0603af1212c34be618) `sha256:5d497397b71c226f15099ff8c093a50d48ca9a100145d8f87a8c92987ba673f8`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [d58e99ad](https://github.com/openshift/cluster-monitoring-operator/commit/d58e99ade6e2de3436dd0a97e729704731c943bf) `sha256:6659bb374b336fe692ed838f199d16b11ff9c68e837873cd1f08beeced46aecf`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [b1f1c24b](https://github.com/openshift/cluster-node-tuning-operator/commit/b1f1c24b2a97a1691346b3f31e52026c07abc845) `sha256:8c3b8b4b408562dba8f2d9d87627777b3fad25dca06a5f4c615ddbc538a8f81f`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e4917368](https://github.com/openshift/cluster-olm-operator/commit/e4917368b6a547f97a0fb411fea90de246d1417e) `sha256:f7813308c97db8e14c91b0664d400bb5225da0da7a8494672cf2b09a38f92e9e`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:9b1c878d142c1377c3428e119bcd7ee078127ab8cb257046669264e84a125d73`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:54afe0c1273ee6757f94accad47c15611fb0d592abe0ee5312ec041d81c9b612`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [47c78310](https://github.com/openshift/cluster-policy-controller/commit/47c783103216aa5e1242632127a5d8f98b8b7455) `sha256:42be4b285fd28ac442c23331385a20f7653bfba9dacecd13370dacdb75fff335`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [b343f70f](https://github.com/openshift/cluster-samples-operator/commit/b343f70f19ffd559e1a81d3a3e65bd106e634c13) `sha256:19dc9bfd3fc3cbc158152ac33c7a5a0dbd491421eb3fe5e9453cdee1f5cc41e9`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:9252be3e6714421ba45d35d06de493ffcad5aa9fadb5ced7e07458165f9ca82d`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:3ddef83742ce1e21a08e2b99c18258d487251863e914d5626811fbedbed84dab`
* [console-operator](https://github.com/openshift/console-operator) git [1bb7f6f4](https://github.com/openshift/console-operator/commit/1bb7f6f4e7851997fd24c5f5aa5be41ea8dd5bd2) `sha256:c99d75b98d62b57b52c2e63b2e54f55d925426972fd40112b8a22d74ce26d620`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:0b4905a398a779c8155876a48fa417ca90ac9941a531fb392b9471e9ea849ef1`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:d085d5bac139e0ec720776a22bf51ff836c54ce6f9b947ee51218ea17ea9f5f8`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:b711efb591eddc8d55bd32eadec299b63287b8041093b227d2d31cccc6d8a5a2`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:2e2a38cf311eeb5bad07dbdf4af09e80f0f6a5a1e60b2f5535c17470ebe7ef38`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [1abaf844](https://github.com/openshift/csi-driver-nfs/commit/1abaf84447384a486a9f9da7cd7b9e53784c8a55) `sha256:a4d4d99fb53562f3d56661a1802b8491d2b50156346ebd0149351bc5152e88c1`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45239149](https://github.com/openshift/csi-external-attacher/commit/45239149cb387bcc51d944b802db0e804dc02688) `sha256:077da8b01b8d7e4d0f753e99fcf41d4a2091d6865c205f64c8fecec1575241d4`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [81fca036](https://github.com/openshift/csi-external-provisioner/commit/81fca03694bca1bae8606d8970472330e1e4fcad) `sha256:a64dccdc647ac1c0f0ca29b74e15b328a3f62f0a46d2a563c6e2841f9ecb01d1`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c674bea9](https://github.com/openshift/csi-external-resizer/commit/c674bea9bb6a81e463c7fefa974e2109d829daef) `sha256:24ad86c3b010d127686550e0cfa1cfe4ae9f4d64778cef6c244fa48d0617623d`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:7676868c1fa5cd2bd7fef8afdd928a3b80ffd89cf19fd8086b64269f9677595f`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:1b9ebae30a269e6511597904ff480515caad89dbe11477f3a251dec58f784c92`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:ccf6bdeaf2a070edacb7c24a4e46af27a65dc25faf0fb4edc37cdfa922109b67`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:715fed4adf4280d9a8e92a09cdcc35ed9bb95e623b1d5fc2f1b753981ecf41f4`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:9d0d44230fd7348facab7daf601dae69cff078ee340d760c9b62ba1718540fec`
* [docker-builder](https://github.com/openshift/builder) git [35afa308](https://github.com/openshift/builder/commit/35afa308e2473046721057112d804334fc4b8217) `sha256:bb61d35949f062ae868c8ce6958d6f9702da6c9f06ccda7be7c5161b9c03a63f`
* [docker-registry](https://github.com/openshift/image-registry) git [0e96a084](https://github.com/openshift/image-registry/commit/0e96a08424d601be55341bc3f4412fde977602c8) `sha256:f3bccadace253478d606f6730405b9de1ef4cd1215b3bfb662b87cf59d308f96`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:3d1cfa2c2499c2f44f7c17950e8764e335ba29057851109f60e6af8619b3e56c`
* [etcd](https://github.com/openshift/etcd) git [05bca977](https://github.com/openshift/etcd/commit/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709) `sha256:7ad4c3434597fca52d7f43724c6b3dd6c883bbceb9ba0191d253580c936e550f`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [65539c71](https://github.com/openshift/cluster-api-provider-gcp/commit/65539c71b4c292fc0f4eeb572dfe490af63063d9) `sha256:e9706327efdc5f6d52573d0f43f8282f63e4a2b116050a695a8780e8cda0d086`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01515888](https://github.com/openshift/machine-api-provider-gcp/commit/01515888c83526ec235b7bc3a27df6eba3034b00) `sha256:57ab66dc83ffe558abb572a96d639792304b9f4d7262ec063afbbb2d4339ce70`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [500ab5d3](https://github.com/openshift/gcp-pd-csi-driver/commit/500ab5d31ad382805070c8ae329a9a34163ebc99) `sha256:b5186060334612140807c31123629d848877fad0ef9e7847ce76b9327df5eb79`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [e0ad050a](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/e0ad050a84bab669e0f11e080fc4c388ef417bba) `sha256:2d0673c94ac08c3106649c072f84254f5c422778ccb585f22ee522b3276851b3`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:44b75d6bc6eac20520b8d42022b3fd6195b257175a0239d30bde73c6461f26bd`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:2ec9a83242746b33b1ba0d8b6dbe7c21da0cfda32ab750ef1d1ea94ab06b2d10`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [390a1fa8](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/390a1fa872a3a43075ad27d79a260ed3ec1e924f) `sha256:acac9044b0199c41bfad9d82a1b19dd8807ba1a346a564250d209f0717646dfc`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:00b3ced6934f1172cfffdf831f09714a5d4d35c3739c2be57696a46900d6b945`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:1a9eb819fb01ae60b10db2f6ac544a0c120ff9686b4e027c66d84085b344e2de`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:288031e2ddd857b2b79989047e0e9b4c8887f55fa08f5bb6c417096916f5d806`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:34563584bcd354cbfbba08c46692d3d52b3e8f0fcdd866c96e1b342d155cabb3`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [652b8b4d](https://github.com/openshift/ironic-agent-image/commit/652b8b4dcffda86f61e181b43cda184292372a14) `sha256:c3c3d5b6832b7e2e555af2929e5de44202bf072ac55acef6c847b837a1a5c92b`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:4182e8733b7a815d0ee33d06721bc6df79d89bc4686ecfdcef79456fba7eef04`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:07f87b3165cdb6945838697849a7740f76b4505a38b9b7c9a85d62ec87cdb298`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [cfa5ee9f](https://github.com/openshift/kubernetes-metrics-server/commit/cfa5ee9f1c94d7faec36de970033b9e329326f38) `sha256:7bbed019da98ccaff672edf50c21e2282c09d55552129ea7da1f7ba75b6fe397`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:54d33b9efe0867328de774ed049be40275c0bf8fea65d4ac5b319e99e2374b0f`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [086a7f21](https://github.com/openshift/kube-state-metrics/commit/086a7f21313d6fbc5ea330d46671ce8934b26c56) `sha256:57a944248103c7592e8cbfc03943135529ce086e6af4089a43a1f3f9a5358b40`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:4729d46ae474a695b68fd9c0294d6d8c1aaf37ac7c0eab00792dfce6f2611e4a`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a2d607b2](https://github.com/openshift/cloud-provider-kubevirt/commit/a2d607b2f1196ac371074d5fd14df80462de5b8f) `sha256:ced36831327b8ac80bd2a17faaa8899e7d341d7c7ece93dee7a70a71505a6ed3`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [551bb5d7](https://github.com/openshift/machine-os-images/commit/551bb5d75e782e47b83292d883e41bc57df730a4) `sha256:30a4c9bdef8804b1b0b89b25f287e381d6811fd86d23708c66d781f47a03e8a6`
* [metallb-frr](https://github.com/openshift/frr) git [3ca45c51](https://github.com/openshift/frr/commit/3ca45c517eafe07aac0866e5cbd32a5c08081f22) `sha256:9c36c6e14580fc31d7b8b81df4d439f81a9b8445a7d1380050698a6ba75285e0`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:e6b9b935c5c7b7f4cddb6ee17615502c0150c4d004173ad234ac57c88e49c58c`
* [multus-cni](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:117af321339008f94c7906dc0241cdb965d0cf7b7c73f0f78d96c2bd4dc0e701`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:86ff61069252216629a896befefc597a4782796ee60206d03f493128f4256fac`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [afbdf825](https://github.com/openshift/multus-networkpolicy/commit/afbdf82505c0d8f212d63e1eee6debced74ef653) `sha256:a12b8e36b45a90baf1d5b224e2ad793ce405aeeb4eebf8831060cd8e5360a3f7`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:950db3363c7680c108338e5a4af8acdfde0cc086d937d0207788575cdb75a6c4`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:f462af1e1a7cae30dfe322a8e74b49578b71e068ca6cf4eab49d3f89630bf855`
* [must-gather](https://github.com/openshift/must-gather) git [f0c64742](https://github.com/openshift/must-gather/commit/f0c64742c79afce5e367ca2c7b830ad448abe1df) `sha256:7ab8bf3959a6f1fd523e0cd7223c617db77456073edbb49b008e1174c73563e1`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:039b2bffe2ead05ac5a1642c2fa5180fbd71e5f3af60fabf6123e61c5b71128f`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:12cce9fc6f33b07b12219bce5fab65582a559eff11a3baf2593eaf8e9097a56d`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:f0b084f74f714ddddbbfe42bc08e21a11687a59ddc0867f96ebf7c288441750d`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:0345736b280cea830d7fdc0b0b90715dcf1422c052481e94c80c791d47c16c9c`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:827315717377224c85aacf605fd9f2098054dc15d22a3278cc354b4cbc4b15ae`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [99f27d25](https://github.com/openshift/oauth-apiserver/commit/99f27d25cc2853fe44ce6c7f7611637ef1492e42) `sha256:3f50a323e161082a0dcf9d47e97dbaebdf2e3f965c6ef6c9d6825842a0fc9008`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [baba7b55](https://github.com/openshift/oauth-proxy/commit/baba7b55859172b58bd89eea8124eff3c0d64f3a) `sha256:555d864c9006f6d7b3bef4f54c3c083414604ab059be18fa0be91be2ef47cf8c`
* [oauth-server](https://github.com/openshift/oauth-server) git [21329625](https://github.com/openshift/oauth-server/commit/21329625a0f5807af9c61e6cd65904c93d65e48c) `sha256:6c54c80c3313a4f78066e383b2398705275d2eeb5bcfa03a38faba77866c33ce`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [df9fe9c7](https://github.com/openshift/oc-mirror/commit/df9fe9c75eaf35c201e9ef89fb1e76163acbc9d5) `sha256:38cec0c1cfcaf0416dc8cc85b6624650379943b3a4dfbd6b90bef47c4be26866`
* [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [3e2401f2](https://github.com/openshift/operator-framework-operator-controller/commit/3e2401f23ef666e8f33789a397d81a7d352b0a33) `sha256:c4641fae1b6ea2bc37b21db5341484fda19a7d0884938f166f7b7dd8d15603ab`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [3e2401f2](https://github.com/openshift/operator-framework-operator-controller/commit/3e2401f23ef666e8f33789a397d81a7d352b0a33) `sha256:ae8803a82f3a53439ebade6192732e843ed0a6b1ae3b51fed692d6d93b7c3ee2`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [34cb4762](https://github.com/openshift/openshift-apiserver/commit/34cb4762e1716c1a31a344118b8a3ad00c28d831) `sha256:6429f889a9eadbef7f5e408f3e0f3f89bc6da7f0c1ef562df82881420f898eb9`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:27a8784fdf2da2069f3846f0568a7f822f86b3075a241b0cdacddeacead14788`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:63a74c1df016bef5616b5c0a85656fe64aaf1bcb3634ca53d2c15aca92ce7029`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:9b122cad864c11dfb1cd7b2c9a76728ca446ec4e4bb2658172413dbc13170290`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:47b3e40013674be74ff2bd2c2515d9e89c48970f8587a8839ca30ded48ddbfa1`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [d1c8e7ed](https://github.com/openshift/cluster-api-provider-openstack/commit/d1c8e7edf11e78db401bc1672e0f17d551fe09db) `sha256:02fe7ff619412fcc62899e933b4a43f7a472e5819136067e5fef15246b5af9e9`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [7f8ae500](https://github.com/openshift/machine-api-provider-openstack/commit/7f8ae5007e4299769e25172a821342dc2874567c) `sha256:5f97b7e4d00e3f905e9c7905c1dafbe5e935e8cdb374a2d7da5c9b7270b068d6`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:c56f32d7add7ed23a1e9f2b9e394f1e6cc8a9822393caf152fda57843b7204bb`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [4ccd56c9](https://github.com/operator-framework/operator-marketplace/commit/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf) `sha256:6bda657716795794a324d8cc0f4878ced8bbd04b8b545e6779ac72a02a7815a6`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:04e06173962d7e40a40ff2a482c4170d20139b67650b17f87a83d7790daa1798`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [7e1f4a30](https://github.com/openshift/ovirt-csi-driver-operator/commit/7e1f4a300fc4b212f4e79cd9bcc9deb6d137b9b7) `sha256:c9d2376252a22873581848ffd8cac1612b246f1162fc1b1514d92b82b02337c4`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [2424e8dd](https://github.com/openshift/cloud-provider-powervs/commit/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4) `sha256:45b67b52b8a520b84d398ef8843edf069fcd579993c25e6e6ee02671fc56cfc0`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:f96beb5f031ffdcc3065ae8ad505fc5a33d0990bccbf1d50930dddac964cf49e`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:9f2ec4fb7cd93c50331ffefd6ac03299f428f678970f6dda6ee6be7b78977099`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:7653ab1e01b4609459b95ef7d995ac5974f5927d99ed29d9bb329fdb678fde6b`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [fa749d65](https://github.com/openshift/node_exporter/commit/fa749d65d8eca1cc937554baab91385a78ec8ce1) `sha256:a9ed75ca0271cf2f1af7d41842bbc835bb46181e8e8915b8be01d3df2760e996`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:443834539cd3eda76b67b9ab6e30c00d3f0ad0d76d55186ccb3b67878500e2a3`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:aff10b29247a2e9ace97cb1562331c822dcd3ac916a8ea975da8d2ea3b20c7d0`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [ec18e9be](https://github.com/openshift/route-controller-manager/commit/ec18e9be0ebcbd7cb262d31f50148f81d0edd48f) `sha256:be1f90cfefcd9c858b97d138a432a54e6065839ab560fc773857809ff03f5777`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:1c40cec7ea0593d6caf267f2ab5549dc6070110fd8663a897b55ca87d5dfadd8`
* [telemeter](https://github.com/openshift/telemeter) git [4c6036ee](https://github.com/openshift/telemeter/commit/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0) `sha256:ccb324245de2001d562e47f3e4eadf9273ac32a2d35109180946a788b21b1a0f`
* [thanos](https://github.com/openshift/thanos) git [c0951032](https://github.com/openshift/thanos/commit/c0951032b34b832d0f5467e616999490a284101b) `sha256:9db7a592c495186dbf2a8405716f60cf44dee865c77c0e3625cb5e198051e5f1`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:007ddc84ca61a0a7e5d37c301349cf693fa425ba40c69025ae6210ee0f9b00ad`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:1dae07341e3c98a4523ff7288a406be04a71fbf0fe8800cce69de09b9648738b`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [6d0cfe39](https://github.com/openshift/cluster-api-provider-vsphere/commit/6d0cfe391f8f76211f14f34a23612722603fe56b) `sha256:48d991a8a8a846931e8244f7ec8dd9cdd09436a2752daccc76640e40b04380d0`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:4d63e068161c9a82abb8f1ca578870f9187b2aba715d931225681b1f183b754b`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5cd04d61](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5cd04d61c20872edaaa2c3958779ff29ea6e6d82) `sha256:7be88d9a20111ad382d899e9af22b04c586c77ae34783fdb25b4e335d0b06c76`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:e2a1bfcc07ffeb496da125a1cebe483e5c1bfb9d74473edf54f1b8424f499ec3`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [65d066ab](https://github.com/openshift/vsphere-problem-detector/commit/65d066ab0940dc69aa3f7ec6b02e698a6e4f5795) `sha256:be92cc024042409621eae727747f84fc7a8416462a752fa8f585ed9e6aa5a8a0`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/760626123a57a93bd13a84f31776be8c86e25d81)

* [OCPBUGS-81880](https://issues.redhat.com/browse/OCPBUGS-81880): Prefer multipath disk in ABI disk selection [#10111](https://github.com/openshift/assisted-service/pull/10111)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e07e2c76e1431afe13e2c34b3e08e0bb0903201f...760626123a57a93bd13a84f31776be8c86e25d81)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/a26df06f52f1426defcf42c6cebcec5b7a956df3)

* [OCPBUGS-81641](https://issues.redhat.com/browse/OCPBUGS-81641): fix: allow workers to join TNA cluster when 1 master + arbiter are ready [#2070](https://github.com/openshift/assisted-installer/pull/2070)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/3accbb7bd0dd865744e0ef0808b65be5914b157e...a26df06f52f1426defcf42c6cebcec5b7a956df3)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/2d9cabc5a1a1ea7a2aaa8830000d16c5d3287c6e)

* Update OWNERS file (#3657) [#3657](https://github.com/openshift-assisted/assisted-installer-ui/pull/3657)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3526) [#3526](https://github.com/openshift-assisted/assisted-installer-ui/pull/3526)
* [OCPBUGS-77793](https://issues.redhat.com/browse/OCPBUGS-77793): bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3582) [#3582](https://github.com/openshift-assisted/assisted-installer-ui/pull/3582)
* [OCPBUGS-77794](https://issues.redhat.com/browse/OCPBUGS-77794): upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3546) [#3546](https://github.com/openshift-assisted/assisted-installer-ui/pull/3546)
* [OCPBUGS-83301](https://issues.redhat.com/browse/OCPBUGS-83301): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3584) [#3584](https://github.com/openshift-assisted/assisted-installer-ui/pull/3584)
* Updating assisted-installer-ui-container image to be consistent with ART for 4.20 (#3458) [#3458](https://github.com/openshift-assisted/assisted-installer-ui/pull/3458)
* Add support for release branches in PR workflow (#3529) [#3529](https://github.com/openshift-assisted/assisted-installer-ui/pull/3529)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/c0370c199bd9d314d14cdf668f4dddff6d475514...2d9cabc5a1a1ea7a2aaa8830000d16c5d3287c6e)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/fce710a6255c77fc31a3c95b2c955b89347b1627)

* [OCPBUGS-74918](https://issues.redhat.com/browse/OCPBUGS-74918): adds the csi-external-resizer to the image-references [#529](https://github.com/openshift/csi-operator/pull/529)
* [Full changelog](https://github.com/openshift/csi-operator/compare/158b88f6d146e74cca1fc9b79379463fde546552...fce710a6255c77fc31a3c95b2c955b89347b1627)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/a8968d22240748f40c41bdd6c47debbfa16dcd74)

* [OCPBUGS-78426](https://issues.redhat.com/browse/OCPBUGS-78426): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.20 [#34](https://github.com/openshift/aws-encryption-provider/pull/34)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...a8968d22240748f40c41bdd6c47debbfa16dcd74)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/b381b8484ed76f9fba0ac993bc03d216e11c254c)

* [OCPBUGS-78423](https://issues.redhat.com/browse/OCPBUGS-78423): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.20 [#28](https://github.com/openshift/azure-kubernetes-kms/pull/28)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/ea0b9944dddcc7043065a1fab5fca72dd17450da...b381b8484ed76f9fba0ac993bc03d216e11c254c)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/13a5f6b91e1636b63bb0956c6fa49fab236e71c1)

* [OCPBUGS-79001](https://issues.redhat.com/browse/OCPBUGS-79001): [release 4.20] - Allow all instance types in the install config for GCP [#10503](https://github.com/openshift/installer/pull/10503)
* [OCPBUGS-78694](https://issues.redhat.com/browse/OCPBUGS-78694): [release-4.20]: openstack: Disable LoadBalancer in cloud config when Octavia is unavailable [#10401](https://github.com/openshift/installer/pull/10401)
* [OCPBUGS-79665](https://issues.redhat.com/browse/OCPBUGS-79665): Use correct Project ID with GCP Shared VPC [#10436](https://github.com/openshift/installer/pull/10436)
* [OCPBUGS-80884](https://issues.redhat.com/browse/OCPBUGS-80884): [release-4.20] Add c8g* to tested_instance_types_aarch64 [#10437](https://github.com/openshift/installer/pull/10437)
* [OCPBUGS-77896](https://issues.redhat.com/browse/OCPBUGS-77896): Increase size of /var/ostreecontainer mount [#10365](https://github.com/openshift/installer/pull/10365)
* [Full changelog](https://github.com/openshift/installer/compare/07408eb1c797940cc20d659a82b15a2e1ef7595c...13a5f6b91e1636b63bb0956c6fa49fab236e71c1)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/4e38a27e94679f43d6534c67c98a9353dac137c6)

* [OCPBUGS-78745](https://issues.redhat.com/browse/OCPBUGS-78745): OCPBUGS-78836: PR2774 and PR2793 backports [release-4.20] [#470](https://github.com/openshift/baremetal-operator/pull/470)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/62e7a3f52debe490a8616f2ab05ff56e4f435a85...4e38a27e94679f43d6534c67c98a9353dac137c6)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/92a3a166a7f710a344a11bda0ad221e54583fccd)

* [OCPBUGS-77170](https://issues.redhat.com/browse/OCPBUGS-77170): Install subscription-manager in required images [#2209](https://github.com/openshift/oc/pull/2209)
* [Full changelog](https://github.com/openshift/oc/compare/64e778a55fbcdf295b671a7d4e701e7c8cc3a499...92a3a166a7f710a344a11bda0ad221e54583fccd)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/92d1035606683d4cc715205606a535e7211f4960)

* [OCPBUGS-79368](https://issues.redhat.com/browse/OCPBUGS-79368): google.golang.org/grpc v1.79.3 [#994](https://github.com/openshift/cloud-credential-operator/pull/994)
* [OCPBUGS-78200](https://issues.redhat.com/browse/OCPBUGS-78200): Fix infrastructure resource name filtering in watch predicate [#989](https://github.com/openshift/cloud-credential-operator/pull/989)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/073fed50e70777402dfe0b411aa000dbeb00108c...92d1035606683d4cc715205606a535e7211f4960)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/6b1d2ef88e19d32143d389de6999c765c7e30cad)

* [OCPBUGS-78690](https://issues.redhat.com/browse/OCPBUGS-78690): allow clusterapi provider to skip paused resources [#411](https://github.com/openshift/kubernetes-autoscaler/pull/411)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b4c6c2ffa86f029c0d19abf68344411db0855102...6b1d2ef88e19d32143d389de6999c765c7e30cad)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/161c9a51178c4b89c74d47f6c9db43c0b6cfd2d3)

* [OCPBUGS-81643](https://issues.redhat.com/browse/OCPBUGS-81643): Allow ProvisioningCIDR for unmanaged network [#585](https://github.com/openshift/cluster-baremetal-operator/pull/585)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/5cc04a88456ead0f8961c6a12e7002ef3e23b0fc...161c9a51178c4b89c74d47f6c9db43c0b6cfd2d3)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f)

* [OCPBUGS-83507](https://issues.redhat.com/browse/OCPBUGS-83507): Fix PDB unhealthyPodEvictionPolicy field name [#273](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/273)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/019abe0c7671962829eb91269e1d76916966320e...a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0aca1e80822b4d5690add409f354f991fe9c042e)

* [OCPBUGS-84132](https://issues.redhat.com/browse/OCPBUGS-84132): set trustBundleName in Istio global values [#1420](https://github.com/openshift/cluster-ingress-operator/pull/1420)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/24ef5ae121b8f658b649bb555be827f114ead438...0aca1e80822b4d5690add409f354f991fe9c042e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/b85497d2202b30ead006502767b96419c3a1c87e)

* [OCPBUGS-79419](https://issues.redhat.com/browse/OCPBUGS-79419): : Always set service-account-jwks-uri to LB URL even with custom issuer [#2078](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2078)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/d0cf9e755d887edf142bcb656c5b6d707a259d9d...b85497d2202b30ead006502767b96419c3a1c87e)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/84eb8c5a73a730d6d08794e51da9c20013ca4304)

* [OCPBUGS-83738](https://issues.redhat.com/browse/OCPBUGS-83738): add /var/run/kubernetes as emptyDir [#642](https://github.com/openshift/cluster-kube-scheduler-operator/pull/642)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/7cac34952f982895b5fdae60b29376fba838be89...84eb8c5a73a730d6d08794e51da9c20013ca4304)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/18558dbf31624b136a7d35b30ef99e551d2738ae)

* [OCPBUGS-83821](https://issues.redhat.com/browse/OCPBUGS-83821): wait for patch port to apply drop garp flows [#2966](https://github.com/openshift/cluster-network-operator/pull/2966)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d1ec37ecb90d74eccc8d8c3e0bc42a8c0fb5ac6a...18558dbf31624b136a7d35b30ef99e551d2738ae)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/cf9401ae971f7ce7a7e8bcbafaff82968c6579c2)

* [OCPBUGS-79532](https://issues.redhat.com/browse/OCPBUGS-79532): volume-data-source-validator should run on master nodes [#688](https://github.com/openshift/cluster-storage-operator/pull/688)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/be41e5b433d5feb464595c66746d1d40cf48912d...cf9401ae971f7ce7a7e8bcbafaff82968c6579c2)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/593f4a6f4cdca86c42425713879d967e87b9a8e0)

* [OCPBUGS-74177](https://issues.redhat.com/browse/OCPBUGS-74177): lib/resourcemerge/core: Reconcile ConfigMap binaryData too [#1303](https://github.com/openshift/cluster-version-operator/pull/1303)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3ef3dcb24185cbb9c48aa53c8379397a0e7b61e0...593f4a6f4cdca86c42425713879d967e87b9a8e0)


### [console](https://github.com/openshift/console/tree/8f77a41d3bd7e44bc07a4215861556ca2832bdc5)

* [OCPBUGS-83495](https://issues.redhat.com/browse/OCPBUGS-83495): remove dev to admin links as dev monitoring views are enabled [#16173](https://github.com/openshift/console/pull/16173)
* [OCPBUGS-82012](https://issues.redhat.com/browse/OCPBUGS-82012): Fix VolumeSnapshot and VolumeSnapshotContent tables sorting [#16261](https://github.com/openshift/console/pull/16261)
* [OCPBUGS-77037](https://issues.redhat.com/browse/OCPBUGS-77037): Fix QueryBrowser import to use SDK path to avoid circular dependency [#16222](https://github.com/openshift/console/pull/16222)
* [OCPBUGS-83573](https://issues.redhat.com/browse/OCPBUGS-83573): Performance improvements + AsyncComponent refactor [#16300](https://github.com/openshift/console/pull/16300)
* [OCPBUGS-83420](https://issues.redhat.com/browse/OCPBUGS-83420): Fix resource log dropdown TypeError [#16282](https://github.com/openshift/console/pull/16282)
* [OCPBUGS-81678](https://issues.redhat.com/browse/OCPBUGS-81678): Fix useOperatorCatalogCategories hook. [#16251](https://github.com/openshift/console/pull/16251)
* [OCPBUGS-81322](https://issues.redhat.com/browse/OCPBUGS-81322): Migrate InstallPlan components table to PatternFly Table [#16217](https://github.com/openshift/console/pull/16217)
* [OCPBUGS-81439](https://issues.redhat.com/browse/OCPBUGS-81439): Fix TypeError in OLS code import to console [#16221](https://github.com/openshift/console/pull/16221)
* [OCPBUGS-81495](https://issues.redhat.com/browse/OCPBUGS-81495), [OCPBUGS-81496](https://issues.redhat.com/browse/OCPBUGS-81496): OLM prompts for GCP Workload Identity parameters during Kiali Operato… [#16231](https://github.com/openshift/console/pull/16231)
* [OCPBUGS-78295](https://issues.redhat.com/browse/OCPBUGS-78295): Fix editing secrets with mixed text and binary data [#16132](https://github.com/openshift/console/pull/16132)
* [OCPBUGS-78366](https://issues.redhat.com/browse/OCPBUGS-78366): Clean up old session cookies to prevent accumulation [#16136](https://github.com/openshift/console/pull/16136)
* [OCPBUGS-78839](https://issues.redhat.com/browse/OCPBUGS-78839), [OCPBUGS-79465](https://issues.redhat.com/browse/OCPBUGS-79465), [OCPBUGS-79466](https://issues.redhat.com/browse/OCPBUGS-79466): apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… [#16192](https://github.com/openshift/console/pull/16192)
* [OCPBUGS-76951](https://issues.redhat.com/browse/OCPBUGS-76951): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16029](https://github.com/openshift/console/pull/16029)
* [Full changelog](https://github.com/openshift/console/compare/c5c94d538be79e7569d464aa271fabb9dff781f1...8f77a41d3bd7e44bc07a4215861556ca2832bdc5)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/62e1f6040cd297149f5f14e0d20814759ec61354)

* [OCPBUGS-78783](https://issues.redhat.com/browse/OCPBUGS-78783): Support ubi minimal base image [#187](https://github.com/openshift/driver-toolkit/pull/187)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/9d55fd1aaba05830f857132bd149ee3cf18cc20f...62e1f6040cd297149f5f14e0d20814759ec61354)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/d5a5541436d9269006928079fcdc507d0b6d4033)

* [OCPBUGS-83720](https://issues.redhat.com/browse/OCPBUGS-83720): Fix OSD ILB bug [#109](https://github.com/openshift/cloud-provider-gcp/pull/109)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/e3014e749042475304daf566119b6330875eeff9...d5a5541436d9269006928079fcdc507d0b6d4033)


### [haproxy-router](https://github.com/openshift/router/tree/3c365cad8c7037e4aa64a694994ea393abc4d9a2)

* [OCPBUGS-78435](https://issues.redhat.com/browse/OCPBUGS-78435): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 [#750](https://github.com/openshift/router/pull/750)
* [OCPBUGS-78432](https://issues.redhat.com/browse/OCPBUGS-78432): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 [#749](https://github.com/openshift/router/pull/749)
* [OCPBUGS-79529](https://issues.redhat.com/browse/OCPBUGS-79529): Lower verbosity for parseIPList empty list logging [#753](https://github.com/openshift/router/pull/753)
* [Full changelog](https://github.com/openshift/router/compare/db8d384266051ef06b67883aaa83674bc6c9f1ae...3c365cad8c7037e4aa64a694994ea393abc4d9a2)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/2d92ab7b3cb444e41ec6d5edf64dfe3b22d93142)

* [OCPBUGS-78993](https://issues.redhat.com/browse/OCPBUGS-78993): Bump v1.33.10 to release-4.20 [#2643](https://github.com/openshift/kubernetes/pull/2643)
* NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS [#2638](https://github.com/openshift/kubernetes/pull/2638)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4ef1baeb6786a70898f3842a06e988d9566aa444...2d92ab7b3cb444e41ec6d5edf64dfe3b22d93142)


### [hypershift](https://github.com/openshift/hypershift/tree/cfad92dfa7b9833c48e247e2e3350a2b76a4ada5)

* [OCPBUGS-83663](https://issues.redhat.com/browse/OCPBUGS-83663): fix(cpo): reconcile ClusterIP private router service for ARO HCP [#8140](https://github.com/openshift/hypershift/pull/8140)
* [OCPBUGS-82069](https://issues.redhat.com/browse/OCPBUGS-82069): OCPBUGS-81670: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field [#8177](https://github.com/openshift/hypershift/pull/8177)
* [OCPBUGS-78474](https://issues.redhat.com/browse/OCPBUGS-78474): Fix deadlock when changing release image during initial provisioning [#7953](https://github.com/openshift/hypershift/pull/7953)
* [OCPBUGS-81746](https://issues.redhat.com/browse/OCPBUGS-81746): Honor AWS AMI override in NodePool token generation [#8183](https://github.com/openshift/hypershift/pull/8183)
* [OCPBUGS-80950](https://issues.redhat.com/browse/OCPBUGS-80950): fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8083](https://github.com/openshift/hypershift/pull/8083)
* [OCPBUGS-78979](https://issues.redhat.com/browse/OCPBUGS-78979): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#8023](https://github.com/openshift/hypershift/pull/8023)
* [CNTRLPLANE-3008](https://issues.redhat.com/browse/CNTRLPLANE-3008): Azure web identity webhook 4.20 [#7998](https://github.com/openshift/hypershift/pull/7998)
* [OCPBUGS-78741](https://issues.redhat.com/browse/OCPBUGS-78741): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7976](https://github.com/openshift/hypershift/pull/7976)
* [Full changelog](https://github.com/openshift/hypershift/compare/2308b45ca94e2cc59c91d672ac75b89addf210c1...cfad92dfa7b9833c48e247e2e3350a2b76a4ada5)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/e63e7a191ccc1d391b574d713899e307a88b466c)

* [OCPBUGS-81317](https://issues.redhat.com/browse/OCPBUGS-81317): bump vpc go sdk [#89](https://github.com/openshift/machine-api-provider-ibmcloud/pull/89)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#85](https://github.com/openshift/machine-api-provider-ibmcloud/pull/85)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/035805df5277c9f9c0cd9d4a44f59a08ab3ce031...e63e7a191ccc1d391b574d713899e307a88b466c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/e5f36a454807808f44456c3588ff869d5ddc2243)

* [OCPBUGS-82970](https://issues.redhat.com/browse/OCPBUGS-82970): kubeletconfig gathere [#1270](https://github.com/openshift/insights-operator/pull/1270)
* [OCPBUGS-80641](https://issues.redhat.com/browse/OCPBUGS-80641): Bump google.golang.org/grpc to v1.79.3 (Revamp #1261) [#1267](https://github.com/openshift/insights-operator/pull/1267)
* [OCPBUGS-76961](https://issues.redhat.com/browse/OCPBUGS-76961): Extends the time for the extractor liveness probe [#1231](https://github.com/openshift/insights-operator/pull/1231)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c0c259186c2ba4633b1c7163195c96b8187b08aa...e5f36a454807808f44456c3588ff869d5ddc2243)


### [ironic](https://github.com/openshift/ironic-image/tree/c9c9546a6b7b4157ffe5b2189a96393230e528df)

* [OCPBUGS-74405](https://issues.redhat.com/browse/OCPBUGS-74405): Update sushy to include DGX B200 credentials fix [#820](https://github.com/openshift/ironic-image/pull/820)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9d5e435bfe1796d6cbabef889cdb0c5cd681f15a...c9c9546a6b7b4157ffe5b2189a96393230e528df)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/6c1bae0007a21796f1d1235df745c1f5152aa893)

* [OCPBUGS-78076](https://issues.redhat.com/browse/OCPBUGS-78076): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#227](https://github.com/openshift/images/pull/227)
* [Full changelog](https://github.com/openshift/images/compare/bb4535b7069cab2de0174be29bccccde6d623b4f...6c1bae0007a21796f1d1235df745c1f5152aa893)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/8fb56226aede45e49fb2f362191c6dbcf50897c6)

* [OCPBUGS-79064](https://issues.redhat.com/browse/OCPBUGS-79064): Add annotation-based fallback for infra VM node ID resolution [#84](https://github.com/openshift/kubevirt-csi-driver/pull/84)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/84ce55daf997e1eb20568bef12cd6a6130afebeb...8fb56226aede45e49fb2f362191c6dbcf50897c6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d4c552a3c5b26748fb04a58de523b23266322665)

* [OCPBUGS-83394](https://issues.redhat.com/browse/OCPBUGS-83394): Remove cluster-api-provider-libvirt references [#1487](https://github.com/openshift/machine-api-operator/pull/1487)
* [OCPBUGS-78424](https://issues.redhat.com/browse/OCPBUGS-78424): [release-4.20] Use resource group when generating default Azure image [#1475](https://github.com/openshift/machine-api-operator/pull/1475)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/4a9b90e306a04ddfacfa408609c98b48a1cdea17...d4c552a3c5b26748fb04a58de523b23266322665)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c19e5dc0e5e2835f89befc42e4f8b89d869fc90c)

* [OCPBUGS-84151](https://issues.redhat.com/browse/OCPBUGS-84151): Allow enablement of systemd units with existing files [#5873](https://github.com/openshift/machine-config-operator/pull/5873)
* [OCPBUGS-83867](https://issues.redhat.com/browse/OCPBUGS-83867): Update AMI Whitelist [#5866](https://github.com/openshift/machine-config-operator/pull/5866)
* [OCPBUGS-83393](https://issues.redhat.com/browse/OCPBUGS-83393): Use HA leader election defaults for MCO on SNO [#5848](https://github.com/openshift/machine-config-operator/pull/5848)
* [OCPBUGS-80947](https://issues.redhat.com/browse/OCPBUGS-80947): Skip boot image updates until cluster is stable [#5812](https://github.com/openshift/machine-config-operator/pull/5812)
* [OCPBUGS-79370](https://issues.redhat.com/browse/OCPBUGS-79370): Re-order logger setting to eliminate race condition [#5791](https://github.com/openshift/machine-config-operator/pull/5791)
* [release 4.20] OCPBUGS-77252: Calculate machine counts in MCP status from node properties [#5692](https://github.com/openshift/machine-config-operator/pull/5692)
* [OCPBUGS-79577](https://issues.redhat.com/browse/OCPBUGS-79577): Update AMI Whitelist [#5806](https://github.com/openshift/machine-config-operator/pull/5806)
* [OCPBUGS-79371](https://issues.redhat.com/browse/OCPBUGS-79371): set default-timeout-stop to 200s globally [#5792](https://github.com/openshift/machine-config-operator/pull/5792)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/662f6899c4461bbd296e149a8badd818e45c1252...c19e5dc0e5e2835f89befc42e4f8b89d869fc90c)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/fe4360da1fe44c0d8a69c0133f846e0cbc36740c)

* [OCPBUGS-81296](https://issues.redhat.com/browse/OCPBUGS-81296): Return error when network data Secret lacks nmstate key [#172](https://github.com/openshift/image-customization-controller/pull/172)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/96662472598010aa2b063143fa52297556c8723b...fe4360da1fe44c0d8a69c0133f846e0cbc36740c)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/61c918dff3f590a19387b8bba18ed3d75e455176)

* [OCPBUGS-83495](https://issues.redhat.com/browse/OCPBUGS-83495): [release-4.20] feat: re enable dev console views [#855](https://github.com/openshift/monitoring-plugin/pull/855)
* [OCPBUGS-83302](https://issues.redhat.com/browse/OCPBUGS-83302): [release-4.20] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#888](https://github.com/openshift/monitoring-plugin/pull/888)
* [OCPBUGS-82440](https://issues.redhat.com/browse/OCPBUGS-82440): fix: re encode params when redirecting from graph to query-browser [#872](https://github.com/openshift/monitoring-plugin/pull/872)
* [OCPBUGS-77406](https://issues.redhat.com/browse/OCPBUGS-77406): bump koa [#866](https://github.com/openshift/monitoring-plugin/pull/866)
* [OCPBUGS-78359](https://issues.redhat.com/browse/OCPBUGS-78359): fix for CVE-2025-69873 [#846](https://github.com/openshift/monitoring-plugin/pull/846)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/8887d0cbccb953e16538e70ec2fa46c10dd415cc...61c918dff3f590a19387b8bba18ed3d75e455176)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/e4819bd07f65bb3055040994b94780651c8a5a69)

* [OCPBUGS-84124](https://issues.redhat.com/browse/OCPBUGS-84124): Migrate to npm [#387](https://github.com/openshift/networking-console-plugin/pull/387)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/266a459be33f24fd5267d8c7fce691ae2ddff6dc...e4819bd07f65bb3055040994b94780651c8a5a69)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/72a01f66530d38330e9442d2238ab30aa90dcb39)

* [OCPBUGS-79681](https://issues.redhat.com/browse/OCPBUGS-79681): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1267](https://github.com/openshift/operator-framework-olm/pull/1267)
* [OCPBUGS-81292](https://issues.redhat.com/browse/OCPBUGS-81292): add jiazha to approvers [#1269](https://github.com/openshift/operator-framework-olm/pull/1269)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/12a261a3702726aaaa339c5d2fceb8b6078ceec8...72a01f66530d38330e9442d2238ab30aa90dcb39)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8e88264292d35914db642556959e3193bb3ff05f)

* [OCPBUGS-84054](https://issues.redhat.com/browse/OCPBUGS-84054): [release 4.20] virt: fix SyncVirtualMachines deleting UDN DHCP options during startup [#3152](https://github.com/openshift/ovn-kubernetes/pull/3152)
* [OCPBUGS-78777](https://issues.redhat.com/browse/OCPBUGS-78777): Fix NAD Controller syncAll for networkID upgrade from node->NAD [#3093](https://github.com/openshift/ovn-kubernetes/pull/3093)
* [OCPBUGS-81477](https://issues.redhat.com/browse/OCPBUGS-81477): node: fix serviceUpdateNotNeeded nil pointer comparison [#3099](https://github.com/openshift/ovn-kubernetes/pull/3099)
* [OCPBUGS-79537](https://issues.redhat.com/browse/OCPBUGS-79537): EgressFirewall: Use exponential backoff to refresh IP addresses for DNS names [#3088](https://github.com/openshift/ovn-kubernetes/pull/3088)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/304bd93419279813366b6a04d7d6f3d1ff464cb1...8e88264292d35914db642556959e3193bb3ff05f)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/8faa079fe4ba90ca37e7112e4be8a77ccf221e77)

* [OCPBUGS-80675](https://issues.redhat.com/browse/OCPBUGS-80675): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#128](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/128)
* [OCPBUGS-82873](https://issues.redhat.com/browse/OCPBUGS-82873): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#122](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/122)
* [OCPBUGS-75818](https://issues.redhat.com/browse/OCPBUGS-75818): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#113](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/113)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/0693fe5dcfab224466fba7a19e614de71f727999...8faa079fe4ba90ca37e7112e4be8a77ccf221e77)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/4036cd3b5e45cf4d8c3c34def599657435601661)

* [OCPBUGS-80676](https://issues.redhat.com/browse/OCPBUGS-80676): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#108](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/108)
* [OCPBUGS-75820](https://issues.redhat.com/browse/OCPBUGS-75820): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#105](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/105)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/319efc99be8cc2603fad1677acee7c4a4a096913...4036cd3b5e45cf4d8c3c34def599657435601661)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/3bc94eed432cacc37930aa4b0d8ff375e370cbbe)

* [OCPBUGS-84068](https://issues.redhat.com/browse/OCPBUGS-84068): update to v0.12.1 [#393](https://github.com/openshift/prom-label-proxy/pull/393)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...3bc94eed432cacc37930aa4b0d8ff375e370cbbe)


### [prometheus](https://github.com/openshift/prometheus/tree/72dbf103acd3a59ba6bb6979e255a0c82864956c)

* [OCPBUGS-78582](https://issues.redhat.com/browse/OCPBUGS-78582): [release-4.20] chore(kubernetes): deduplicate warning logs from the API [#299](https://github.com/openshift/prometheus/pull/299)
* [Full changelog](https://github.com/openshift/prometheus/compare/af9b206808f8eaeb4acec7fe74ba6b145bbdc921...72dbf103acd3a59ba6bb6979e255a0c82864956c)


### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/49a3e234f2d0381d3a309f10fc29043fcd63592e)

* [OCPBUGS-82524](https://issues.redhat.com/browse/OCPBUGS-82524): post-process: Remove workaround for openvswitch additional group [#1928](https://github.com/openshift/os/pull/1928)
* [Full changelog](https://github.com/openshift/os/compare/2762e75143b49efbebb3c2ac4a22c1835f01d78c...49a3e234f2d0381d3a309f10fc29043fcd63592e)


### [tests](https://github.com/openshift/origin/tree/a99b27653d2fded28c33e6234878824e9a46ad78)

* : OCPBUGS-77313: Add test for CPMS OnDelete strategy with full master replacement [#30882](https://github.com/openshift/origin/pull/30882)
* [OCPBUGS-78193](https://issues.redhat.com/browse/OCPBUGS-78193): Exclude disruption during NoExecuteTaintManager serial tests [#30858](https://github.com/openshift/origin/pull/30858)
* [OCPBUGS-83447](https://issues.redhat.com/browse/OCPBUGS-83447): Fix PinnedImages test to respect node taints [#30970](https://github.com/openshift/origin/pull/30970)
* : run resource request/limit check early [#30888](https://github.com/openshift/origin/pull/30888)
* [Full changelog](https://github.com/openshift/origin/compare/4ab35741692eeb470ef2af694942300bd4148a57...a99b27653d2fded28c33e6234878824e9a46ad78)