# 4.20.24

Created: 2026-05-29 09:58:47 +0000 UTC

Image Digest: `sha256:27c93d3b308e9c3694dd7e448d71f61e4e3c033ad8905031736bd1912c1f41fc`


## Changes from 4.20.19

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.9 to 1.33.12
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260414-0 to 9.6.20260521-1


### Removed images

* libvirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [a26df06f](https://github.com/openshift/assisted-installer/commit/a26df06f52f1426defcf42c6cebcec5b7a956df3) `sha256:af347ef41dfd744646501160f910f7c8e3e39f5473251045d47c74d87620954a`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [637327ec](https://github.com/openshift/assisted-installer-agent/commit/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0) `sha256:e16660571ffebaa93ee6649d0968b37eb515d070c4b48f0a180646275677f91c`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [a26df06f](https://github.com/openshift/assisted-installer/commit/a26df06f52f1426defcf42c6cebcec5b7a956df3) `sha256:7038a30b8a04b6fc8edecaf85aaee5aa24061d0984848ce93d93e2161806c671`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [e3e997d9](https://github.com/openshift/agent-installer-utils/commit/e3e997d9f7b84b134a07186de9bddde21598ae32) `sha256:4f8fc158a14a00ec2ed490a2a23e137d2a8dbe307e8cc9c0ac9f9142ee1f6919`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:6b141d140c7748ba4977375e02e05df770181f67046eacfddbed06b8504fb130`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:bc51331633e7dac36208a4d920e73e46860346e9eb2e751d7bb7e8e1c98a2515`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [300439ea](https://github.com/openshift/cluster-api-provider-aws/commit/300439ea0736444a160c061578b3bd8956d4f7e6) `sha256:572b2ab8a0a74cc773c0ff48342932031eab6c2981f8c6f93c614b56048bd6c1`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:0a3df673b88932dca4e45598f4c2045119e68d3c1f2e7a223c05dec94cf06bd9`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [999f4f76](https://github.com/openshift/machine-api-provider-aws/commit/999f4f76124e66c7b42af678cb19aff4b29f72d4) `sha256:ed9c9e8629599d4ff052703b28c857c2fb29085fc1960bee5eda184ae754a75b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [8e83772a](https://github.com/openshift/aws-pod-identity-webhook/commit/8e83772ab8d31b32225744d4f0b0023680692daf) `sha256:c29d9f8c9d0f23a3b6b7f077e16f95c92e714affb0ee954e9dd438eedb756a7d`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:9f7bf302d74e013a273585be3a8e4651554f4b81449fae8bb05e17d450fe9e0c`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:380068d41e38109f7e3eab997ace654c182aa53b8ed492b689bb9a275d1ad7f5`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [b381b848](https://github.com/openshift/azure-kubernetes-kms/commit/b381b8484ed76f9fba0ac993bc03d216e11c254c) `sha256:926f9a82c9f96778e103e0218476cdb9b1bef8b53484ca4d38ea34c091be794f`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [68db9150](https://github.com/openshift/machine-api-provider-azure/commit/68db91507ea47f767ee0dc838c08cc371d2ff69f) `sha256:984c38921e3e7158e7ecfe4a45b36180132646c3921027271ac5cc6d0abf6d9d`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:7a83ca67e2ebaacc395ebc92cc2b5923a7cd85b5d891c8a05191b4ee2c69c9d2`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:55d5dff57ac7c9f02682f4f8ed90447dd1d4d4ec96d7fc16bcd7c44a497dfe16`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:bd6588f89826373fcfa72bfd8103134ca57800fd1ce3eabda0744bdc0e841f94`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [4e38a27e](https://github.com/openshift/baremetal-operator/commit/4e38a27e94679f43d6534c67c98a9353dac137c6) `sha256:ade79900063a7ef46461355f8b93656cd363312f2cb8c7b0e5b2918ed64ce077`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [92d10356](https://github.com/openshift/cloud-credential-operator/commit/92d1035606683d4cc715205606a535e7211f4960) `sha256:cb24bf1150951cc637195c138ecd65ca6488efaad059c5cfd5f4fd3656ffebdb`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [d22915bc](https://github.com/openshift/cloud-network-config-controller/commit/d22915bc82993ce11cb3fb97e6ae00602f30549b) `sha256:ec4a02ec06764e1a5b7dbf05dca5d72b035d44ff901305a36ce10dc11375da0a`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [6b1d2ef8](https://github.com/openshift/kubernetes-autoscaler/commit/6b1d2ef88e19d32143d389de6999c765c7e30cad) `sha256:830d20ed78ee787acb7682927c1c166b85fb89abc2a6980f3f22ca2fd75c2252`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [147e5a7f](https://github.com/openshift/cluster-autoscaler-operator/commit/147e5a7ff20b46ade7dd932b47e06ca82729f5e8) `sha256:1b04c0c43ef82e9a0f3795f0d6ac369a4b7c2dc5eeb804763cf0b8f34dd37b18`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:b5dfa24d9c50730f1001482ba094bbdc27a2f8743b1a26ad84ed2d2de6f1d8ef`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [276696cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/276696ccf679830b25df341edb7aae9bb3f4e763) `sha256:c4ff88fee719e69bce39d72eef15c1f857fecd2a2af993acf154eb39c1162d21`
* [cluster-config-api](https://github.com/openshift/api) git [50517c6f](https://github.com/openshift/api/commit/50517c6f4bfdbf9fc2cb291fd97cce150a3237ca) `sha256:bddc3d2faa735bbe59bd46886ac38d02f70d2c7f63543d88659a69efb54f2226`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:d3f7420b6f4efaa81514ea797d0b1aa400a9dbc9e298d95c24c0c31a4b615f34`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:63b1ea764604a7c936fb277b8eea1b4b9a11e5a165574ac68911a1cd132ff9ff`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:7e541267fb8e594723dea9a964aab69851fd6e28af4be47d3e93395a8bd3a10b`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:3581a20473f823993f70b33b1dff825ffe5ef5a66039be0c51683d22b6176806`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [438c9dba](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/438c9dba80ddadeabe9efe4a654297a7b550b2b8) `sha256:91aade1f843f2f30d1d639f1583c01d271d32aee454377e4236c7bec1c959bc5`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:8a693438634dab8b295f35cef5598a8a1509e23e7db39662ab2f3b5379915603`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [b3c82b2e](https://github.com/openshift/cluster-machine-approver/commit/b3c82b2eec66ae3ae510df0603af1212c34be618) `sha256:ff85822764e1394fde1a5dbb3f8e03be1b80ab52ca0d8510ca726b8aa3b93940`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:2aea701e06319cc9203b88035b6cd7169e727387d4c7d465ef52926a43e69e46`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:31406f054e496ecf6865fa320ba226da36c5afb71e634f813e2871cc38e81e83`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [47c78310](https://github.com/openshift/cluster-policy-controller/commit/47c783103216aa5e1242632127a5d8f98b8b7455) `sha256:c61ed2024a2dbed04d2eceb9be1b190012079c23f03820dd7e17f0f5bea34e43`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [b343f70f](https://github.com/openshift/cluster-samples-operator/commit/b343f70f19ffd559e1a81d3a3e65bd106e634c13) `sha256:f445b4b9f5fd84cf93c03889c22aff37853752f2d74c2dcd0bb1c77f3178174f`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:6b155fa3b2953a933222e72d5ccb210632995e661f994eec367ea7b221fa3f8e`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:e497012454f69312801422fb23a9fa5292012567b7f555c663ec695a1c74334f`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:f6e941367a9b9aab665c763f0c6125289c9fb342726a375d4c5dcf2c024f13d5`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:5c4367e4bc30d65605f90e96de0c936b1a8605b8fa28ecc9af52ded82cb48bfe`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:a7d22aac42a08b55da47dcfb53a27fa770850dd1466445ef3f4822c843b61c1f`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:54ba42942f5a1f73e9519c315322b91680ce3533ed6b8eb303394e400ab76a86`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c674bea9](https://github.com/openshift/csi-external-resizer/commit/c674bea9bb6a81e463c7fefa974e2109d829daef) `sha256:52a2b9b68b89dd33d8e2b3d4cab96fe369e19fc39247d1d82f540fcc4578c0c0`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:92b5b11bef8f1ab72457af9d62a1effa43a23e01e6a26294aed75944a718f1fd`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:717201def51a39f4b2f4dfe77fedbd4a7bcb0a2dfc2f177fc985b76065a65d4c`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:39a336136b6ad51d0524f1a53ebfb2f6564ca9a9f90184c77eeaedaa07383d26`
* [docker-builder](https://github.com/openshift/builder) git [35afa308](https://github.com/openshift/builder/commit/35afa308e2473046721057112d804334fc4b8217) `sha256:2402d8ef32c40d0d30e7742856c328a9681913ff038bed017a3d64f42dafde78`
* [docker-registry](https://github.com/openshift/image-registry) git [0e96a084](https://github.com/openshift/image-registry/commit/0e96a08424d601be55341bc3f4412fde977602c8) `sha256:12479cefdb6ec63f51386b73b926255fa37131d17907034025d9e3d12e5a7709`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [62e1f604](https://github.com/openshift/driver-toolkit/commit/62e1f6040cd297149f5f14e0d20814759ec61354) `sha256:d1e941ec9027bc9787e8bad216ac0368378e6f42b4db425af6746fbbd7fa6e1a`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:f2d9b02cc24fd2d3fa3760d4bd2b2583178e0c6553726a7eb83f377abc70ff55`
* [etcd](https://github.com/openshift/etcd) git [05bca977](https://github.com/openshift/etcd/commit/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709) `sha256:4eb897f6859a7bd447339c4a0d591d09fc201910d991917da878c9a4e8cbd683`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01515888](https://github.com/openshift/machine-api-provider-gcp/commit/01515888c83526ec235b7bc3a27df6eba3034b00) `sha256:75202f0a73711f4e8f1d1618495f42ebbcf3e4e977a6ff9d02d2c67d146261b8`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [e0ad050a](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/e0ad050a84bab669e0f11e080fc4c388ef417bba) `sha256:0fca7a8971b03faa9503589578dfaf6b8d035c5b2de54f8c47fc8fe1fe09e4fb`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:f7f2b3512cc8f43677bd02d9f9ed3848c16a0d06dadc9686dc73f21c7d9de582`
* [haproxy-router](https://github.com/openshift/router) git [3c365cad](https://github.com/openshift/router/commit/3c365cad8c7037e4aa64a694994ea393abc4d9a2) `sha256:b8105450da1ac34c016b0a3a53a1fe19385a267639247bfaa59b8aa111832fb7`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:392624359f6aad40f526c2dd138160887c7c66edcdd2be155ef57deadaef16a3`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:9ab3729e632cc4543f764989ee4ea84d5e8115f15c7a3fe120dca3671f09fc56`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:a2ddeb75f767bcd0b8a75497be1eb9ecbc277cdfd3bf0ab1db518533eeed5d46`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [e63e7a19](https://github.com/openshift/machine-api-provider-ibmcloud/commit/e63e7a191ccc1d391b574d713899e307a88b466c) `sha256:5aea21f1781929b3da029c625d7cf2b78dbe45d000c21c650d87ac586eabd845`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:475997d94c04822a39d44d88fc31f5aac7ebc60cd8f6279683b402ace4d568b4`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:f31c237e0644a0b8a48c597632204f4687e277da786d66b3b47cfd5ad347214d`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [652b8b4d](https://github.com/openshift/ironic-agent-image/commit/652b8b4dcffda86f61e181b43cda184292372a14) `sha256:f52b3257349a3f73cc7525f8edc1979a58396e714ecc8b8280cda19c0f6960b7`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:e93b1727c4eed8c54df72361e7b5c92e55752eab9b2b1d16b91f3fa55ca69ae0`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:23f31e0b463f23df5f4a52f489bcd5de8a159c9094b271289c2e0969199fd807`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:281a4f96defc7aa220db5af8ea7f3a4ab914e4b932e6edea4c2b02d95fbc5672`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:56656b25dded7c8a79c1a0f17083881b998c2494138b888f6883e75bb6fdc77e`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a2d607b2](https://github.com/openshift/cloud-provider-kubevirt/commit/a2d607b2f1196ac371074d5fd14df80462de5b8f) `sha256:100f33f57e38e3ffbfaaaa796077feda27fa5f789c3ccbf06aad69af8d4bed11`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8fb56226](https://github.com/openshift/kubevirt-csi-driver/commit/8fb56226aede45e49fb2f362191c6dbcf50897c6) `sha256:5dcb2a50c0822df3bf466a52efc8d36e70a3bc55e061c71666b88db3f7d79970`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [fe4360da](https://github.com/openshift/image-customization-controller/commit/fe4360da1fe44c0d8a69c0133f846e0cbc36740c) `sha256:561e35fa034983a18107c265d3e18368ad4729e3bf3e7e35cc0d31073919c60c`
* [metallb-frr](https://github.com/openshift/frr) git [3ca45c51](https://github.com/openshift/frr/commit/3ca45c517eafe07aac0866e5cbd32a5c08081f22) `sha256:af72d160eb2f81ee2a61bb5588439a6be54eabac381cbc63c57a0ddb690df3e4`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:faf3f6e46249d2b292e9d5ad8aeba19e5fed3611ff66b2c36850889a8c789534`
* [multus-cni](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:cf1d76a711b5ce8c0edd0c397f05e6edc2ef12913c4841e7e3d7f30479214058`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:a0cbc5173da40d6d870c41746489fc42e96cbdf45ed244a60ff900711b275b4c`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [afbdf825](https://github.com/openshift/multus-networkpolicy/commit/afbdf82505c0d8f212d63e1eee6debced74ef653) `sha256:ccce3b52af9b1d9ce1c062e2402edc5bcb7835157faf3c31cde7b557f91f3bf6`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:359d8ac75c7f991e7f99ebebb9d5ddafb8a0103e7e60e48f442fb5b7c2b2204d`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:7fd647c6ea03eaaa474d9b8d327b9d22ee3522dea65e3926c4893f9eaf90438e`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:f9417ac3d4c9ad52deee403dfcc39a351824b64ba6ff0653e3ae3276327012c4`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:28a1f4bdf8dc8f869277ac45b446bd77fb1f2831a422e266a45141ff80fefe81`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:3e1545cfef59de2c98aabc7803bd25708395c88330007735714b100f1ed6c82a`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:7a3442164fc6cdd199c60fd3f951d4ac4b9b79440177e84ca40d3540f70db5ba`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:bec7a880f5639c59498b08193ce32b0061f1b073b0257ca7de3ba27fec52fdfa`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [99f27d25](https://github.com/openshift/oauth-apiserver/commit/99f27d25cc2853fe44ce6c7f7611637ef1492e42) `sha256:9556c87a2ab954721c7507adf83edde7fe951adf534e9ae4bf9aca980d6b3add`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [baba7b55](https://github.com/openshift/oauth-proxy/commit/baba7b55859172b58bd89eea8124eff3c0d64f3a) `sha256:2789935eb78cb8983314ea417a41e41b73e1f57adc8a7c6585d28dcc0868fad7`
* [oauth-server](https://github.com/openshift/oauth-server) git [21329625](https://github.com/openshift/oauth-server/commit/21329625a0f5807af9c61e6cd65904c93d65e48c) `sha256:17982818857c72d82a25ea9a2bd25baa6c4aed04491ef724a40de8c5bad3c43b`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [34cb4762](https://github.com/openshift/openshift-apiserver/commit/34cb4762e1716c1a31a344118b8a3ad00c28d831) `sha256:2ac7d854f1917b41dc1525bd2988e816467e86ce8e6e3e010e7a054203b9afbb`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:bc70fe192afb7a3518f0bb676f91af7b55d66f4c39e076f66c8d499b805ba6e5`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:736fc91748649d23d2617ae1503588426c6e654072a78800b405916174f13559`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:605b39d5765aa4bd6d57cd07eadb4e8fa09b1f7eebad9d3759adfa8358327128`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:f10e65b74d25c7f5a91d1ac1e6b3a3159d79d8db5fde31cbf7455541ceb259b2`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [7f8ae500](https://github.com/openshift/machine-api-provider-openstack/commit/7f8ae5007e4299769e25172a821342dc2874567c) `sha256:2347e3d25f16154f229be66044053d738aa25df96aa21aa855f820510dea9a0d`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:7964e293e0cb1d60de15bfe3892330a0205462d39d3bb6cad0ad3e27306544fb`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [4ccd56c9](https://github.com/operator-framework/operator-marketplace/commit/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf) `sha256:ce650cbab6405f0dbbe8807fe7c1ac580bfcc945c2509a59a9284e080e25044f`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:ce2263955fa69985b744c27595c061d9196046acdd1351e757e5fcd32dc9ed6f`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [7e1f4a30](https://github.com/openshift/ovirt-csi-driver-operator/commit/7e1f4a300fc4b212f4e79cd9bcc9deb6d137b9b7) `sha256:361755eee7ac75a4ce9d81fe522f583245e9045a5d02ecb080e20b78bd387796`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [4036cd3b](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/4036cd3b5e45cf4d8c3c34def599657435601661) `sha256:6d5ef07788dbcba55f18b40ae48934f351e9a8b6d34494c803f53ad8b2a29943`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [2424e8dd](https://github.com/openshift/cloud-provider-powervs/commit/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4) `sha256:2914dc25bacf57f386642a5e8fc5bec6fc522992fa274416157f01309a12bf3a`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:776e0515884a2ce668432ec139d2aaf1bdef188c8d6ac09d96977246f1505a81`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:6b35aff2712fc4439757ded0696adc65c8536dcf12f658cb9e9d81a7d52bc841`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:04c18ab8d1b249a9122485acda477c2f46f4542e1105cc614347079c7312e040`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [fa749d65](https://github.com/openshift/node_exporter/commit/fa749d65d8eca1cc937554baab91385a78ec8ce1) `sha256:31f29e1e603682bf764291974eec6998453d131995af840954622c2a154193fd`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:9b040cf836a91490681eebb4b520338ae7b5f8c7b74e032e618fd2dfe21fe5af`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:8ab7f5c83118c00afda95b9f1398a34e57baf2b31d9a58855512ad7c923ef87d`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:e53adf5aca87bb4840b588939a8c73ba3a35b28374c6c882b8f10ef5c069e3f4`
* [thanos](https://github.com/openshift/thanos) git [c0951032](https://github.com/openshift/thanos/commit/c0951032b34b832d0f5467e616999490a284101b) `sha256:bc192cb3203d66e1dbbb5e4ecdb6f0c747de26ebfc428aeadbbaa03e31616da6`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:6a41dfcee939bd9e4f938e726f6288c24859d1d7341959130186cb11cb1d9a05`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:fbf47ab6eeda6bf2b8be429e6e82d8133c9d88a5b6b272faf3499c59e7ea45e5`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [65d066ab](https://github.com/openshift/vsphere-problem-detector/commit/65d066ab0940dc69aa3f7ec6b02e698a6e4f5795) `sha256:80c204c04b9bf09af889841543b0da2c89ec42381c46441396a027bde1d9416b`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b271286656c2186ea8940ea6463da523f00094f0)

* [OCPBUGS-81880](https://issues.redhat.com/browse/OCPBUGS-81880): Mark raw FC/iSCSI multipath members as ineligible [#10149](https://github.com/openshift/assisted-service/pull/10149)
* [Full changelog](https://github.com/openshift/assisted-service/compare/760626123a57a93bd13a84f31776be8c86e25d81...b271286656c2186ea8940ea6463da523f00094f0)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/1f0fec5ed74412d0f96e6a7239e9689b24563ebe)

* [OCPBUGS-85542](https://issues.redhat.com/browse/OCPBUGS-85542): Bump msw pkg version to 2.13.5 (#3730) [#3730](https://github.com/openshift-assisted/assisted-installer-ui/pull/3730)
* [OCPBUGS-84606](https://issues.redhat.com/browse/OCPBUGS-84606), [OCPBUGS-84829](https://issues.redhat.com/browse/OCPBUGS-84829), [OCPBUGS-84992](https://issues.redhat.com/browse/OCPBUGS-84992), [OCPBUGS-85008](https://issues.redhat.com/browse/OCPBUGS-85008), [OCPBUGS-85010](https://issues.redhat.com/browse/OCPBUGS-85010), [OCPBUGS-85038](https://issues.redhat.com/browse/OCPBUGS-85038): Bump axios to ^1.15.1 (#3691) [#3691](https://github.com/openshift-assisted/assisted-installer-ui/pull/3691)
* Update OWNERS file (#3657) [#3657](https://github.com/openshift-assisted/assisted-installer-ui/pull/3657)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3526) [#3526](https://github.com/openshift-assisted/assisted-installer-ui/pull/3526)
* [OCPBUGS-77793](https://issues.redhat.com/browse/OCPBUGS-77793): bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3582) [#3582](https://github.com/openshift-assisted/assisted-installer-ui/pull/3582)
* [OCPBUGS-77794](https://issues.redhat.com/browse/OCPBUGS-77794): upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3546) [#3546](https://github.com/openshift-assisted/assisted-installer-ui/pull/3546)
* [OCPBUGS-83301](https://issues.redhat.com/browse/OCPBUGS-83301): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3584) [#3584](https://github.com/openshift-assisted/assisted-installer-ui/pull/3584)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/cac56a7e2594ee27d885a9fb9cab5889501f574f...1f0fec5ed74412d0f96e6a7239e9689b24563ebe)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/6c99b973a6a5ca0202d56b87119714b9ec4a5365)

* [OCPBUGS-80562](https://issues.redhat.com/browse/OCPBUGS-80562): Bump google.golang.org/grpc to v1.79.3 [#311](https://github.com/openshift/aws-ebs-csi-driver/pull/311)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9...6c99b973a6a5ca0202d56b87119714b9ec4a5365)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/0170e1e3c05714d016ff4f072a2ba1e17c9c26af)

* [OCPBUGS-80667](https://issues.redhat.com/browse/OCPBUGS-80667): Bump google.golang.org/grpc to v1.79.3 [#540](https://github.com/openshift/csi-operator/pull/540)
* [OCPBUGS-74918](https://issues.redhat.com/browse/OCPBUGS-74918): adds the csi-external-resizer to the image-references [#529](https://github.com/openshift/csi-operator/pull/529)
* [Full changelog](https://github.com/openshift/csi-operator/compare/158b88f6d146e74cca1fc9b79379463fde546552...0170e1e3c05714d016ff4f072a2ba1e17c9c26af)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/0000b76a838f6b56efcfecfa110bc6795d0f7746)

* [OCPBUGS-80537](https://issues.redhat.com/browse/OCPBUGS-80537): Bump google.golang.org/grpc to v1.79.3 [#41](https://github.com/openshift/aws-encryption-provider/pull/41)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/a8968d22240748f40c41bdd6c47debbfa16dcd74...0000b76a838f6b56efcfecfa110bc6795d0f7746)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/c29c68dd2a576f19771dfd0c349b34f890063cdc)

* [OCPBUGS-80568](https://issues.redhat.com/browse/OCPBUGS-80568): Bump google.golang.org/grpc to v1.79.3 [#384](https://github.com/openshift/cluster-api-provider-azure/pull/384)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/cb8b5b6a485971a95c5a74508d76ab19b23cbf29...c29c68dd2a576f19771dfd0c349b34f890063cdc)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/e1ea4e929c51a3fe6823ffb5fd17fb07971ca86d)

* [OCPBUGS-80569](https://issues.redhat.com/browse/OCPBUGS-80569): Bump google.golang.org/grpc to v1.79.3 [#140](https://github.com/openshift/azure-disk-csi-driver/pull/140)
* [OCPBUGS-85054](https://issues.redhat.com/browse/OCPBUGS-85054): Fix dangling detaches 420 [#145](https://github.com/openshift/azure-disk-csi-driver/pull/145)
* [OCPBUGS-78034](https://issues.redhat.com/browse/OCPBUGS-78034): add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks [#128](https://github.com/openshift/azure-disk-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/0b8e4d2202b0d17942fd745a5e1948f46bdd0350...e1ea4e929c51a3fe6823ffb5fd17fb07971ca86d)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/c7bce6e96df8f14b61ead343b901087a44736513)

* [OCPBUGS-80572](https://issues.redhat.com/browse/OCPBUGS-80572): Bump google.golang.org/grpc to v1.79.3 [#128](https://github.com/openshift/azure-file-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/45d505bc11fedadece5ae27147c9595877e39f2a...c7bce6e96df8f14b61ead343b901087a44736513)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/d957de42c2e6255b79fcfe7aedac78eb746d92cc)

* [OCPBUGS-80539](https://issues.redhat.com/browse/OCPBUGS-80539): Bump google.golang.org/grpc to v1.79.3 [#29](https://github.com/openshift/azure-service-operator/pull/29)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/6e2f362623720f7b6d634fbc424fbc61e4b481ae...d957de42c2e6255b79fcfe7aedac78eb746d92cc)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/13a5f6b91e1636b63bb0956c6fa49fab236e71c1)

* [OCPBUGS-79001](https://issues.redhat.com/browse/OCPBUGS-79001): [release 4.20] - Allow all instance types in the install config for GCP [#10503](https://github.com/openshift/installer/pull/10503)
* [Full changelog](https://github.com/openshift/installer/compare/1d295ac40df6fb30946f725dcc956ebc5a626fc2...13a5f6b91e1636b63bb0956c6fa49fab236e71c1)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/5e602ba702420d0f30cee175f51fff83e00c1b5b)

* [OCPBUGS-72567](https://issues.redhat.com/browse/OCPBUGS-72567): Fix TNA and TNF dummy ip for ipv6 [#379](https://github.com/openshift/baremetal-runtimecfg/pull/379)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/50c63b0d5744a830cb828a669ed09982dd46365b...5e602ba702420d0f30cee175f51fff83e00c1b5b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/02b0b2d9994a35535b710dd51ac604ed47b29bc9)

* [OCPBUGS-81946](https://issues.redhat.com/browse/OCPBUGS-81946): Bump go-jose/go-jose/v4 to v4.1.4 [#2274](https://github.com/openshift/oc/pull/2274)
* [OCPBUGS-77170](https://issues.redhat.com/browse/OCPBUGS-77170): Install subscription-manager in required images [#2209](https://github.com/openshift/oc/pull/2209)
* [Full changelog](https://github.com/openshift/oc/compare/64e778a55fbcdf295b671a7d4e701e7c8cc3a499...02b0b2d9994a35535b710dd51ac604ed47b29bc9)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/569ae680cbdf0f78cc0d77278c5178160679fe83)

* [OCPBUGS-81502](https://issues.redhat.com/browse/OCPBUGS-81502): Do not return error when an IdP returns 500 during a grant check [#866](https://github.com/openshift/cluster-authentication-operator/pull/866)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/fb1a9ab21d72903f79a45f916c6443c0709b9b0c...569ae680cbdf0f78cc0d77278c5178160679fe83)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/accfc407194c6ace691f2b38a719a01705519dc9)

* [OCPBUGS-84376](https://issues.redhat.com/browse/OCPBUGS-84376): Fix ironic-proxy service routing for port 6385 [#593](https://github.com/openshift/cluster-baremetal-operator/pull/593)
* [OCPBUGS-81643](https://issues.redhat.com/browse/OCPBUGS-81643): Allow ProvisioningCIDR for unmanaged network [#585](https://github.com/openshift/cluster-baremetal-operator/pull/585)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/5cc04a88456ead0f8961c6a12e7002ef3e23b0fc...accfc407194c6ace691f2b38a719a01705519dc9)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/dfeecf9616e049ac552f91a71b2a50cb0e96042c)

* [OCPBUGS-80577](https://issues.redhat.com/browse/OCPBUGS-80577): Bump google.golang.org/grpc to v1.79.3 [#289](https://github.com/openshift/cluster-api/pull/289)
* [OCPBUGS-78375](https://issues.redhat.com/browse/OCPBUGS-78375): Updating ose-cluster-api-container image to be consistent with ART for 4.20 [#268](https://github.com/openshift/cluster-api/pull/268)
* [Full changelog](https://github.com/openshift/cluster-api/compare/de1db2970e7fede7101e5a8188e74942ab6665e3...dfeecf9616e049ac552f91a71b2a50cb0e96042c)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/4bd6d82d21a2d201d9857ca1e26b21c70a648bf5)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#556](https://github.com/openshift/cluster-capi-operator/pull/556)
* [OCPBUGS-80581](https://issues.redhat.com/browse/OCPBUGS-80581): Bump google.golang.org/grpc to v1.79.3 [#545](https://github.com/openshift/cluster-capi-operator/pull/545)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/acf331446369b5307b6b435af14daabdca9fafbc...4bd6d82d21a2d201d9857ca1e26b21c70a648bf5)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f)

* [OCPBUGS-83507](https://issues.redhat.com/browse/OCPBUGS-83507): Fix PDB unhealthyPodEvictionPolicy field name [#273](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/273)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/019abe0c7671962829eb91269e1d76916966320e...a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9acf049b2985339275796f69a2a8acad47726a29)

* [OCPBUGS-85412](https://issues.redhat.com/browse/OCPBUGS-85412): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1616](https://github.com/openshift/cluster-etcd-operator/pull/1616)
* [OCPBUGS-77313](https://issues.redhat.com/browse/OCPBUGS-77313): Wait for revision stability before removing etcd members [#1571](https://github.com/openshift/cluster-etcd-operator/pull/1571)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/d4171c720f49821e9e578a1bf4c6ce92d569ef13...9acf049b2985339275796f69a2a8acad47726a29)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d14c13be1685e74b898b93a3fa7e03e9b75aa174)

* [OCPBUGS-85130](https://issues.redhat.com/browse/OCPBUGS-85130): Add PrometheusRule for Gateway API gathering [#1436](https://github.com/openshift/cluster-ingress-operator/pull/1436)
* [OCPBUGS-84132](https://issues.redhat.com/browse/OCPBUGS-84132): set trustBundleName in Istio global values [#1420](https://github.com/openshift/cluster-ingress-operator/pull/1420)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/24ef5ae121b8f658b649bb555be827f114ead438...d14c13be1685e74b898b93a3fa7e03e9b75aa174)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/645cb9f8bb9171c390cad9eb3fdeb9a1be30ca8a)

* [OCPBUGS-85564](https://issues.redhat.com/browse/OCPBUGS-85564): [4.20] operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization [#2152](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2152)
* [OCPBUGS-83856](https://issues.redhat.com/browse/OCPBUGS-83856): Allow setting the oauthMetadata when auth type is None [#2117](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2117)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b85497d2202b30ead006502767b96419c3a1c87e...645cb9f8bb9171c390cad9eb3fdeb9a1be30ca8a)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/adaae0d4e6d7a0e466e7e86af399de0b828c8b81)

* [OCPBUGS-80588](https://issues.redhat.com/browse/OCPBUGS-80588): Bump google.golang.org/grpc to v1.79.3 [#75](https://github.com/openshift/cluster-api-operator/pull/75)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/234e218207ec963df04ec1fedad85a421eb7a1ff...adaae0d4e6d7a0e466e7e86af399de0b828c8b81)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/84eb8c5a73a730d6d08794e51da9c20013ca4304)

* [OCPBUGS-83738](https://issues.redhat.com/browse/OCPBUGS-83738): add /var/run/kubernetes as emptyDir [#642](https://github.com/openshift/cluster-kube-scheduler-operator/pull/642)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/7cac34952f982895b5fdae60b29376fba838be89...84eb8c5a73a730d6d08794e51da9c20013ca4304)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e4800998100765391609d5473a2d8471dc11d920)

* [OCPBUGS-85130](https://issues.redhat.com/browse/OCPBUGS-85130): Enable Gateway API telemetry metrics [#2920](https://github.com/openshift/cluster-monitoring-operator/pull/2920)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d58e99ade6e2de3436dd0a97e729704731c943bf...e4800998100765391609d5473a2d8471dc11d920)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/56c830ea4487e978a2697d065217b8851ed6cbd9)

* [OCPBUGS-84176](https://issues.redhat.com/browse/OCPBUGS-84176): Handle zero-worker HyperShift clusters in daemonset rollout [4.20 backport] [#2973](https://github.com/openshift/cluster-network-operator/pull/2973)
* [OCPBUGS-83821](https://issues.redhat.com/browse/OCPBUGS-83821): wait for patch port to apply drop garp flows [#2966](https://github.com/openshift/cluster-network-operator/pull/2966)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d1ec37ecb90d74eccc8d8c3e0bc42a8c0fb5ac6a...56c830ea4487e978a2697d065217b8851ed6cbd9)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b1a1c39e5bfe62ae62806720874e7da09a30ed7f)

* [OCPBUGS-66364](https://issues.redhat.com/browse/OCPBUGS-66364): Add support for lscpu_check TuneD built-in [#1443](https://github.com/openshift/cluster-node-tuning-operator/pull/1443)
* [OCPBUGS-85372](https://issues.redhat.com/browse/OCPBUGS-85372): e2e: Add irqbalance StartLimitBurst >= 100 [#1513](https://github.com/openshift/cluster-node-tuning-operator/pull/1513)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b1f1c24b2a97a1691346b3f31e52026c07abc845...b1a1c39e5bfe62ae62806720874e7da09a30ed7f)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/d01cc083748864e3c8dcc72fb75516492dec3555)

* [OCPBUGS-80596](https://issues.redhat.com/browse/OCPBUGS-80596): Bump google.golang.org/grpc to v1.79.3 [#198](https://github.com/openshift/cluster-olm-operator/pull/198)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e4917368b6a547f97a0fb411fea90de246d1417e...d01cc083748864e3c8dcc72fb75516492dec3555)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/eb01bf6702a54054c1dcaed59f1acdf91b1af635)

* [OCPBUGS-86121](https://issues.redhat.com/browse/OCPBUGS-86121): add Azure Disk CSI driver SA name to CredentialsRequest [#702](https://github.com/openshift/cluster-storage-operator/pull/702)
* [OCPBUGS-79532](https://issues.redhat.com/browse/OCPBUGS-79532): volume-data-source-validator should run on master nodes [#688](https://github.com/openshift/cluster-storage-operator/pull/688)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/be41e5b433d5feb464595c66746d1d40cf48912d...eb01bf6702a54054c1dcaed59f1acdf91b1af635)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/ea3fa7695054fc9260936902b33b738bb4c405bc)

* [OCPBUGS-79463](https://issues.redhat.com/browse/OCPBUGS-79463): Implement mTLS authentication and authorization for CVO metrics endpoint [#1374](https://github.com/openshift/cluster-version-operator/pull/1374)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/593f4a6f4cdca86c42425713879d967e87b9a8e0...ea3fa7695054fc9260936902b33b738bb4c405bc)


### [console](https://github.com/openshift/console/tree/2e5d603e7d0b8e7731bcae13b7b907923e0f540a)

* [OCPBUGS-77127](https://issues.redhat.com/browse/OCPBUGS-77127): [release-4.20] CVE-2026-26996 Bump minimatch library [#16272](https://github.com/openshift/console/pull/16272)
* NO-JIRA: enable multi-architecture yarn builds [#16418](https://github.com/openshift/console/pull/16418)
* [OCPBUGS-83819](https://issues.redhat.com/browse/OCPBUGS-83819): Fix false positive scheduler degradation caused by user workloads [#16308](https://github.com/openshift/console/pull/16308)
* [OCPBUGS-85042](https://issues.redhat.com/browse/OCPBUGS-85042): Remove PII from events [#16402](https://github.com/openshift/console/pull/16402)
* [OCPBUGS-81575](https://issues.redhat.com/browse/OCPBUGS-81575): Add robots.txt policy to console [#16243](https://github.com/openshift/console/pull/16243)
* [OCPBUGS-78439](https://issues.redhat.com/browse/OCPBUGS-78439): Backport OCPBUGS-61536: vsphere settings [#16141](https://github.com/openshift/console/pull/16141)
* [OCPBUGS-83495](https://issues.redhat.com/browse/OCPBUGS-83495): remove dev to admin links as dev monitoring views are enabled [#16173](https://github.com/openshift/console/pull/16173)
* [OCPBUGS-82012](https://issues.redhat.com/browse/OCPBUGS-82012): Fix VolumeSnapshot and VolumeSnapshotContent tables sorting [#16261](https://github.com/openshift/console/pull/16261)
* [OCPBUGS-77037](https://issues.redhat.com/browse/OCPBUGS-77037): Fix QueryBrowser import to use SDK path to avoid circular dependency [#16222](https://github.com/openshift/console/pull/16222)
* [OCPBUGS-83573](https://issues.redhat.com/browse/OCPBUGS-83573): Performance improvements + AsyncComponent refactor [#16300](https://github.com/openshift/console/pull/16300)
* [Full changelog](https://github.com/openshift/console/compare/1a7159f930abf0cadc337f1265cc0e9f1076b314...2e5d603e7d0b8e7731bcae13b7b907923e0f540a)


### [console-operator](https://github.com/openshift/console-operator/tree/2b72d7e8cc652ae7063fb95eae8d36b847742c58)

* [OCPBUGS-84254](https://issues.redhat.com/browse/OCPBUGS-84254): Redeploy console pods upon cert rotation [#1142](https://github.com/openshift/console-operator/pull/1142)
* [Full changelog](https://github.com/openshift/console-operator/compare/1bb7f6f4e7851997fd24c5f5aa5be41ea8dd5bd2...2b72d7e8cc652ae7063fb95eae8d36b847742c58)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/20609066e1bd1dbbd107bfca27af67e0a788760e)

* [OCPBUGS-80610](https://issues.redhat.com/browse/OCPBUGS-80610): CVE-2026-33186: bump google.golang.org/grpc v1.79.3 [#177](https://github.com/openshift/csi-driver-nfs/pull/177)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/1abaf84447384a486a9f9da7cd7b9e53784c8a55...20609066e1bd1dbbd107bfca27af67e0a788760e)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/935f1e1f7f9f07c03116e37e760a66e2a58c63c0)

* [OCPBUGS-80611](https://issues.redhat.com/browse/OCPBUGS-80611): Bump google.golang.org/grpc to v1.79.3 [#103](https://github.com/openshift/csi-external-attacher/pull/103)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/45239149cb387bcc51d944b802db0e804dc02688...935f1e1f7f9f07c03116e37e760a66e2a58c63c0)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/72fefbe70de332cea29428be202244676a9927fc)

* [OCPBUGS-80612](https://issues.redhat.com/browse/OCPBUGS-80612): Bump google.golang.org/grpc to v1.79.3 [#128](https://github.com/openshift/csi-external-provisioner/pull/128)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/81fca03694bca1bae8606d8970472330e1e4fcad...72fefbe70de332cea29428be202244676a9927fc)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/433cf89b4e4d1b437a8a446ece28b217ccf9bd06)

* [OCPBUGS-80615](https://issues.redhat.com/browse/OCPBUGS-80615), [OCPBUGS-80618](https://issues.redhat.com/browse/OCPBUGS-80618): Bump google.golang.org/grpc to v1.79.3 [#209](https://github.com/openshift/csi-external-snapshotter/pull/209)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/42604822c25eb2aa0ecb017c24e328221b238eb9...433cf89b4e4d1b437a8a446ece28b217ccf9bd06)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/d5a5541436d9269006928079fcdc507d0b6d4033)

* [OCPBUGS-83720](https://issues.redhat.com/browse/OCPBUGS-83720): Fix OSD ILB bug [#109](https://github.com/openshift/cloud-provider-gcp/pull/109)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/e3014e749042475304daf566119b6330875eeff9...d5a5541436d9269006928079fcdc507d0b6d4033)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/74e2389011d640a371c0acb6ff71b1582cab23a1)

* [OCPBUGS-80628](https://issues.redhat.com/browse/OCPBUGS-80628): Bump google.golang.org/grpc to v1.79.3 [#288](https://github.com/openshift/cluster-api-provider-gcp/pull/288)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/65539c71b4c292fc0f4eeb572dfe490af63063d9...74e2389011d640a371c0acb6ff71b1582cab23a1)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/49e54581328a46f6aee3f7842d401681d34b2104)

* [OCPBUGS-80632](https://issues.redhat.com/browse/OCPBUGS-80632): Bump google.golang.org/grpc to v1.79.3 in release 4.20 [#103](https://github.com/openshift/gcp-pd-csi-driver/pull/103)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/500ab5d31ad382805070c8ae329a9a34163ebc99...49e54581328a46f6aee3f7842d401681d34b2104)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/2a0461f5d0e21c5b74371626fad32f9632920caa)

* [OCPBUGS-85501](https://issues.redhat.com/browse/OCPBUGS-85501): Bump Kubernetes v1.33.12 to release-4.20 [#2666](https://github.com/openshift/kubernetes/pull/2666)
* "OCPBUGS-83609: Bump to k8s v1.33.11" [#2648](https://github.com/openshift/kubernetes/pull/2648)
* [OCPBUGS-78993](https://issues.redhat.com/browse/OCPBUGS-78993): Bump v1.33.10 to release-4.20 [#2643](https://github.com/openshift/kubernetes/pull/2643)
* [Full changelog](https://github.com/openshift/kubernetes/compare/51bc740cd4e090500ccdff94eda526ceddf3d2a9...2a0461f5d0e21c5b74371626fad32f9632920caa)


### [hypershift](https://github.com/openshift/hypershift/tree/d360c916293d6efc0cb4a0377d027a3150c0c227)

* [OCPBUGS-83711](https://issues.redhat.com/browse/OCPBUGS-83711): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8271](https://github.com/openshift/hypershift/pull/8271)
* [OCPBUGS-85622](https://issues.redhat.com/browse/OCPBUGS-85622): fix CVE-2026-33186 by updating grpc-go [#8517](https://github.com/openshift/hypershift/pull/8517)
* [OCPBUGS-77109](https://issues.redhat.com/browse/OCPBUGS-77109): Add UserAgent telemetry to CPO Azure SDK clients [#8374](https://github.com/openshift/hypershift/pull/8374)
* [OCPBUGS-83663](https://issues.redhat.com/browse/OCPBUGS-83663): fix(cpo): reconcile ClusterIP private router service for ARO HCP [#8140](https://github.com/openshift/hypershift/pull/8140)
* [Full changelog](https://github.com/openshift/hypershift/compare/087c01d753e14d7e1916c6a7b603295ac30ba260...d360c916293d6efc0cb4a0377d027a3150c0c227)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/0d2143b7aaaf2047e9578fb3ae41f89267d4b1bc)

* [OCPBUGS-80638](https://issues.redhat.com/browse/OCPBUGS-80638): Bump google.golang.org/grpc to v1.79.3 [#141](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/141)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/390a1fa872a3a43075ad27d79a260ed3ec1e924f...0d2143b7aaaf2047e9578fb3ae41f89267d4b1bc)


### [insights-operator](https://github.com/openshift/insights-operator/tree/bd2c14b74ac359fe978d580d9e06f04a9cdb8d62)

* [OCPBUGS-86235](https://issues.redhat.com/browse/OCPBUGS-86235): [release-4.20] Add OpenTelemetry CR Gatherer [#1293](https://github.com/openshift/insights-operator/pull/1293)
* [OCPBUGS-82970](https://issues.redhat.com/browse/OCPBUGS-82970): kubeletconfig gathere [#1270](https://github.com/openshift/insights-operator/pull/1270)
* [Full changelog](https://github.com/openshift/insights-operator/compare/be4cf8284cdcdceeb5e1adc4a8791ea6a798304f...bd2c14b74ac359fe978d580d9e06f04a9cdb8d62)


### [ironic](https://github.com/openshift/ironic-image/tree/4b0fc45cf7fc14d8095cea3ac96d724f199996d8)

* [OCPBUGS-84854](https://issues.redhat.com/browse/OCPBUGS-84854): Bump pyasn to 0.5.1-5 [#824](https://github.com/openshift/ironic-image/pull/824)
* [OCPBUGS-82299](https://issues.redhat.com/browse/OCPBUGS-82299): Bump sushy hash to include Supermicro ARS-111GL-NHR fix [#841](https://github.com/openshift/ironic-image/pull/841)
* [Full changelog](https://github.com/openshift/ironic-image/compare/c9c9546a6b7b4157ffe5b2189a96393230e528df...4b0fc45cf7fc14d8095cea3ac96d724f199996d8)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/6c1bae0007a21796f1d1235df745c1f5152aa893)

* [OCPBUGS-78076](https://issues.redhat.com/browse/OCPBUGS-78076): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#227](https://github.com/openshift/images/pull/227)
* [Full changelog](https://github.com/openshift/images/compare/bb4535b7069cab2de0174be29bccccde6d623b4f...6c1bae0007a21796f1d1235df745c1f5152aa893)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/e7379b302a7377c06cf06d54230decd479f92078)

* [OCPBUGS-80542](https://issues.redhat.com/browse/OCPBUGS-80542): Bump google.golang.org/grpc to v1.79.3 [#62](https://github.com/openshift/kubernetes-metrics-server/pull/62)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/cfa5ee9f1c94d7faec36de970033b9e329326f38...e7379b302a7377c06cf06d54230decd479f92078)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/8ced3aed5a37e2d712c68fe80feb089c7f967815)

* [OCPBUGS-80646](https://issues.redhat.com/browse/OCPBUGS-80646): Bump google.golang.org/grpc to v1.79.3 [#139](https://github.com/openshift/kube-state-metrics/pull/139)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/086a7f21313d6fbc5ea330d46671ce8934b26c56...8ced3aed5a37e2d712c68fe80feb089c7f967815)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d4c552a3c5b26748fb04a58de523b23266322665)

* [OCPBUGS-83394](https://issues.redhat.com/browse/OCPBUGS-83394): Remove cluster-api-provider-libvirt references [#1487](https://github.com/openshift/machine-api-operator/pull/1487)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/fb2a889cacce750be81def7584964bac2fb22cb2...d4c552a3c5b26748fb04a58de523b23266322665)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/fbb572bf57164f6a1b131392b7b66e3a751d8b10)

* [OCPBUGS-86134](https://issues.redhat.com/browse/OCPBUGS-86134): use `--delete-if-present` for karg removal [#6063](https://github.com/openshift/machine-config-operator/pull/6063)
* [OCPBUGS-86313](https://issues.redhat.com/browse/OCPBUGS-86313): Apply password only if changes exist [#6075](https://github.com/openshift/machine-config-operator/pull/6075)
* [OCPBUGS-86032](https://issues.redhat.com/browse/OCPBUGS-86032): Add terminationMessagePolicy to build pod containers [#6057](https://github.com/openshift/machine-config-operator/pull/6057)
* [OCPBUGS-85078](https://issues.redhat.com/browse/OCPBUGS-85078): Fix ssh and password rollbacks [#6002](https://github.com/openshift/machine-config-operator/pull/6002)
* [OCPBUGS-85336](https://issues.redhat.com/browse/OCPBUGS-85336): Fix units rollback if update failure [#6022](https://github.com/openshift/machine-config-operator/pull/6022)
* [OCPBUGS-85069](https://issues.redhat.com/browse/OCPBUGS-85069): Fix encapsulated IGN version [#6001](https://github.com/openshift/machine-config-operator/pull/6001)
* [OCPBUGS-84962](https://issues.redhat.com/browse/OCPBUGS-84962): Update AMI Whitelist [#5991](https://github.com/openshift/machine-config-operator/pull/5991)
* [OCPBUGS-84890](https://issues.redhat.com/browse/OCPBUGS-84890): improve JSON unmarshalling for secret decoding [#5916](https://github.com/openshift/machine-config-operator/pull/5916)
* [OCPBUGS-84151](https://issues.redhat.com/browse/OCPBUGS-84151): Allow enablement of systemd units with existing files [#5873](https://github.com/openshift/machine-config-operator/pull/5873)
* [OCPBUGS-83867](https://issues.redhat.com/browse/OCPBUGS-83867): Update AMI Whitelist [#5866](https://github.com/openshift/machine-config-operator/pull/5866)
* [OCPBUGS-83393](https://issues.redhat.com/browse/OCPBUGS-83393): Use HA leader election defaults for MCO on SNO [#5848](https://github.com/openshift/machine-config-operator/pull/5848)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/30c659cb9c2a39931bde3b48c6fc35f1c6ea1945...fbb572bf57164f6a1b131392b7b66e3a751d8b10)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/2a17f01c8ddfc6888fc2e510f40a4dcdcb5b4979)

* [OCPBUGS-85480](https://issues.redhat.com/browse/OCPBUGS-85480): Force rebuild for OCP 4.20 [#86](https://github.com/openshift/machine-os-images/pull/86)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/551bb5d75e782e47b83292d883e41bc57df730a4...2a17f01c8ddfc6888fc2e510f40a4dcdcb5b4979)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/8e62a3b707c4ebccd974810f977b37286e9ba043)

* [OCPBUGS-79456](https://issues.redhat.com/browse/OCPBUGS-79456): immutable bump: fix for CVE-2026-29063 [4.20] [#951](https://github.com/openshift/monitoring-plugin/pull/951)
* [OU-1371](https://issues.redhat.com/browse/OU-1371): reset queries when namespace changes in dev perspective [#945](https://github.com/openshift/monitoring-plugin/pull/945)
* [OU-1369](https://issues.redhat.com/browse/OU-1369): prevent namespace and project desync [#941](https://github.com/openshift/monitoring-plugin/pull/941)
* [OCPBUGS-83495](https://issues.redhat.com/browse/OCPBUGS-83495): [release-4.20] feat: re enable dev console views [#855](https://github.com/openshift/monitoring-plugin/pull/855)
* [OCPBUGS-83302](https://issues.redhat.com/browse/OCPBUGS-83302): [release-4.20] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#888](https://github.com/openshift/monitoring-plugin/pull/888)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/86676c71e41ca3887b40a4d28d1763d28caddc46...8e62a3b707c4ebccd974810f977b37286e9ba043)


### [must-gather](https://github.com/openshift/must-gather/tree/01b8371fa2f13c993074569d80db6d1ee97b57ee)

* [OCPBUGS-85488](https://issues.redhat.com/browse/OCPBUGS-85488): Collect object size with the object count [#545](https://github.com/openshift/must-gather/pull/545)
* [Full changelog](https://github.com/openshift/must-gather/compare/f0c64742c79afce5e367ca2c7b830ad448abe1df...01b8371fa2f13c993074569d80db6d1ee97b57ee)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/c9c1a9f5ca8287d20a0aafab9507478c6f291614)

* [OCPBUGS-81615](https://issues.redhat.com/browse/OCPBUGS-81615): Fix CVE-2026-CVE-2026-4800 in lodash [#399](https://github.com/openshift/networking-console-plugin/pull/399)
* [OCPBUGS-83386](https://issues.redhat.com/browse/OCPBUGS-83386): Fix CVE-2026-34043 in serialize-javascript [#394](https://github.com/openshift/networking-console-plugin/pull/394)
* [OCPBUGS-84124](https://issues.redhat.com/browse/OCPBUGS-84124): Migrate to npm [#387](https://github.com/openshift/networking-console-plugin/pull/387)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/266a459be33f24fd5267d8c7fce691ae2ddff6dc...c9c1a9f5ca8287d20a0aafab9507478c6f291614)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/aaa36d6ba97b65a0b7a83f246ecf4bff70b938d1)

* [OCPBUGS-84064](https://issues.redhat.com/browse/OCPBUGS-84064): Remove status field from CatalogSource, ClusterCatalog... [#1392](https://github.com/openshift/oc-mirror/pull/1392)
* [OCPBUGS-85204](https://issues.redhat.com/browse/OCPBUGS-85204): update integration test Dockerfile [#1393](https://github.com/openshift/oc-mirror/pull/1393)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/df9fe9c75eaf35c201e9ef89fb1e76163acbc9d5...aaa36d6ba97b65a0b7a83f246ecf4bff70b938d1)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/22a9094679bd3d0a5d10b3233c211b21a5e280cc)

* [OCPBUGS-80662](https://issues.redhat.com/browse/OCPBUGS-80662), [OCPBUGS-80663](https://issues.redhat.com/browse/OCPBUGS-80663): Bump google.golang.org/grpc to v1.79.3 [#727](https://github.com/openshift/operator-framework-operator-controller/pull/727)
* [OCPBUGS-81956](https://issues.redhat.com/browse/OCPBUGS-81956), [OCPBUGS-81957](https://issues.redhat.com/browse/OCPBUGS-81957): Bump github.com/go-jose/go-jose/v4@4.1.1 to 4.1.4 [#719](https://github.com/openshift/operator-framework-operator-controller/pull/719)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/3e2401f23ef666e8f33789a397d81a7d352b0a33...22a9094679bd3d0a5d10b3233c211b21a5e280cc)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/c91265ed4f82c0b36fbfc50040b8180f04fcf4cc)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.20 [#392](https://github.com/openshift/cluster-api-provider-openstack/pull/392)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/d1c8e7edf11e78db401bc1672e0f17d551fe09db...c91265ed4f82c0b36fbfc50040b8180f04fcf4cc)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1628e53777871f6c264d41a870cc4ee7248106f2)

* [OCPBUGS-80670](https://issues.redhat.com/browse/OCPBUGS-80670), [OCPBUGS-80671](https://issues.redhat.com/browse/OCPBUGS-80671), [OCPBUGS-80672](https://issues.redhat.com/browse/OCPBUGS-80672): Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.20] [#1293](https://github.com/openshift/operator-framework-olm/pull/1293)
* [OCPBUGS-81958](https://issues.redhat.com/browse/OCPBUGS-81958), [OCPBUGS-81959](https://issues.redhat.com/browse/OCPBUGS-81959), [OCPBUGS-81960](https://issues.redhat.com/browse/OCPBUGS-81960): Bump github.com/go-jose/go-jose/v4 to v4.1.4 [#1295](https://github.com/openshift/operator-framework-olm/pull/1295)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/72a01f66530d38330e9442d2238ab30aa90dcb39...1628e53777871f6c264d41a870cc4ee7248106f2)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/dbebe515c05e673ed62083e019e55aaf9bcebeab)

* [OCPBUGS-81484](https://issues.redhat.com/browse/OCPBUGS-81484): CUDN: cleanup NADs in terminating namespaces without pods [#3102](https://github.com/openshift/ovn-kubernetes/pull/3102)
* [OCPBUGS-74395](https://issues.redhat.com/browse/OCPBUGS-74395): kubevirt, Use pod network subnet gateway IP for DHCP router option [#3070](https://github.com/openshift/ovn-kubernetes/pull/3070)
* [OCPBUGS-82115](https://issues.redhat.com/browse/OCPBUGS-82115): egressip: Skip bridge configuration for secondary network IPs [#3120](https://github.com/openshift/ovn-kubernetes/pull/3120)
* [OCPBUGS-84054](https://issues.redhat.com/browse/OCPBUGS-84054): [release 4.20] virt: fix SyncVirtualMachines deleting UDN DHCP options during startup [#3152](https://github.com/openshift/ovn-kubernetes/pull/3152)
* [OCPBUGS-78777](https://issues.redhat.com/browse/OCPBUGS-78777): Fix NAD Controller syncAll for networkID upgrade from node->NAD [#3093](https://github.com/openshift/ovn-kubernetes/pull/3093)
* [OCPBUGS-81477](https://issues.redhat.com/browse/OCPBUGS-81477): node: fix serviceUpdateNotNeeded nil pointer comparison [#3099](https://github.com/openshift/ovn-kubernetes/pull/3099)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2aec60c6a5b5238c7c75173a1518322ea595a58e...dbebe515c05e673ed62083e019e55aaf9bcebeab)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/8faa079fe4ba90ca37e7112e4be8a77ccf221e77)

* [OCPBUGS-80675](https://issues.redhat.com/browse/OCPBUGS-80675): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#128](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/128)
* [OCPBUGS-82873](https://issues.redhat.com/browse/OCPBUGS-82873): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#122](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/122)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/c01c305459d241c9623b9af2538fb4404715302b...8faa079fe4ba90ca37e7112e4be8a77ccf221e77)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/3bc94eed432cacc37930aa4b0d8ff375e370cbbe)

* [OCPBUGS-84068](https://issues.redhat.com/browse/OCPBUGS-84068): update to v0.12.1 [#393](https://github.com/openshift/prom-label-proxy/pull/393)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...3bc94eed432cacc37930aa4b0d8ff375e370cbbe)


### [prometheus](https://github.com/openshift/prometheus/tree/5c6b3929abcceab6d0bfaf257940180d624a9f03)

* [OCPBUGS-86251](https://issues.redhat.com/browse/OCPBUGS-86251): fix: TLS client cert rotation when no CA is configured [#315](https://github.com/openshift/prometheus/pull/315)
* [Full changelog](https://github.com/openshift/prometheus/compare/72dbf103acd3a59ba6bb6979e255a0c82864956c...5c6b3929abcceab6d0bfaf257940180d624a9f03)


### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/ee943c37e640fcc5812d4a2a20ac66d57984e79c)

* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1920](https://github.com/openshift/os/pull/1920)
* [OCPBUGS-82524](https://issues.redhat.com/browse/OCPBUGS-82524): post-process: Remove workaround for openvswitch additional group [#1928](https://github.com/openshift/os/pull/1928)
* [Full changelog](https://github.com/openshift/os/compare/2762e75143b49efbebb3c2ac4a22c1835f01d78c...ee943c37e640fcc5812d4a2a20ac66d57984e79c)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/1a0229e40e5c569c6c59f6b10c26584bccd084b5)

* [OCPBUGS-80554](https://issues.redhat.com/browse/OCPBUGS-80554): Bump google.golang.org/grpc to v1.79.3 [#83](https://github.com/openshift/route-controller-manager/pull/83)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/ec18e9be0ebcbd7cb262d31f50148f81d0edd48f...1a0229e40e5c569c6c59f6b10c26584bccd084b5)


### [telemeter](https://github.com/openshift/telemeter/tree/d07a833015fe91fe2df12589a6877dde15e9a227)

* [OCPBUGS-80691](https://issues.redhat.com/browse/OCPBUGS-80691): Bump google.golang.org/grpc to v1.79.3 [#590](https://github.com/openshift/telemeter/pull/590)
* [OCPBUGS-81814](https://issues.redhat.com/browse/OCPBUGS-81814): [release-1.20] Fix CVE-2026-34986 [#594](https://github.com/openshift/telemeter/pull/594)
* [Full changelog](https://github.com/openshift/telemeter/compare/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0...d07a833015fe91fe2df12589a6877dde15e9a227)


### [tests](https://github.com/openshift/origin/tree/a99b27653d2fded28c33e6234878824e9a46ad78)

* : OCPBUGS-77313: Add test for CPMS OnDelete strategy with full master replacement [#30882](https://github.com/openshift/origin/pull/30882)
* [OCPBUGS-78193](https://issues.redhat.com/browse/OCPBUGS-78193): Exclude disruption during NoExecuteTaintManager serial tests [#30858](https://github.com/openshift/origin/pull/30858)
* [OCPBUGS-83447](https://issues.redhat.com/browse/OCPBUGS-83447): Fix PinnedImages test to respect node taints [#30970](https://github.com/openshift/origin/pull/30970)
* [Full changelog](https://github.com/openshift/origin/compare/43070aa59d358721b29a0cf828b2b4475c0ac63e...a99b27653d2fded28c33e6234878824e9a46ad78)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/769d0fb781dfb53df5d533b917c363a553185fd6)

* [OCPBUGS-80698](https://issues.redhat.com/browse/OCPBUGS-80698): Bump google.golang.org/grpc to v1.79.3 [#109](https://github.com/openshift/cluster-api-provider-vsphere/pull/109)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6d0cfe391f8f76211f14f34a23612722603fe56b...769d0fb781dfb53df5d533b917c363a553185fd6)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/0363addf5f2c19322d24a3f61c7b2684da16ead1)

* [OCPBUGS-80701](https://issues.redhat.com/browse/OCPBUGS-80701): Bump google.golang.org/grpc to v1.79.3 [#174](https://github.com/openshift/vmware-vsphere-csi-driver/pull/174)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/61d0d00a78ee60ee57fcc99648a8851f0db52e5a...0363addf5f2c19322d24a3f61c7b2684da16ead1)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/13b68a91a148667d46bd06ad8fcb839be984671e)

* "[release-4.20] OCPBUGS-84891: Fix escaping password" [#340](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/340)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5cd04d61c20872edaaa2c3958779ff29ea6e6d82...13b68a91a148667d46bd06ad8fcb839be984671e)