# 4.20.41

Created: 2026-10-01 14:49:36 +0000 UTC

Image Digest: `sha256:735d04d245382654d1d2441a8c7746bc84be421362af51bbb678e0d2cc7bc05a`


## Changes from 4.20.37

### Components

* Kubectl 1.33.3
* Kubernetes 1.33.13
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260901-0 to 9.6.20260929-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| VSphereMultiVCenterDay2 <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [e3e997d9](https://github.com/openshift/agent-installer-utils/commit/e3e997d9f7b84b134a07186de9bddde21598ae32) `sha256:7081db31f4c6865f06784090c2e3c71cc64627e041dfdf6c7c1218db65a38307`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:83504b165eabc82a72694a5f87adbfc7b7afacf235453ab6466d73fec17cfb39`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:0d48c3307aa26734a8003e227ef0707856bb891dc19c6f5e6ae0809a86f4ffd6`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [6c99b973](https://github.com/openshift/aws-ebs-csi-driver/commit/6c99b973a6a5ca0202d56b87119714b9ec4a5365) `sha256:1c5561fd309745e78bee93218b4b2cbeb2b0016ea3383ed761c2606e0994d67f`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:6d27e1510a9a2348b6dfa5802e56dca1d96c919fd9e8836b3c74554c52846b56`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [0000b76a](https://github.com/openshift/aws-encryption-provider/commit/0000b76a838f6b56efcfecfa110bc6795d0f7746) `sha256:8fba9c839e9e0e5a05f7eb73a835d4bfc5f44f99905c5a24ff2a5ef0544cbfef`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [999f4f76](https://github.com/openshift/machine-api-provider-aws/commit/999f4f76124e66c7b42af678cb19aff4b29f72d4) `sha256:d48edd58578c528197ef1f676d0fc1c78b94b01af4652800db81bc0a6e2deac7`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [8e83772a](https://github.com/openshift/aws-pod-identity-webhook/commit/8e83772ab8d31b32225744d4f0b0023680692daf) `sha256:7253c3a262a266d9a48e868e8d0f60bfd75419e40502ee0a18de962badd14425`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [5a127871](https://github.com/openshift/cluster-api-provider-azure/commit/5a127871523fc21f02f93a26d1e3113075fb3b78) `sha256:8cb3dd62b6157b7f6e84677a1facb3ff9a17008720938130f2f4aa3c53127789`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [d957de42](https://github.com/openshift/azure-service-operator/commit/d957de42c2e6255b79fcfe7aedac78eb746d92cc) `sha256:b47f2679261fb3a1152741ea95686f37d7c470ec4e1bc7b12611a3f680015d51`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [357712a6](https://github.com/openshift/azure-workload-identity/commit/357712a65437ea3329a8d8a62cf64d27a70dda12) `sha256:9945023b720bd0e6c76f91b99132e68516c741aaa548ecb5eac4df144b826785`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:3372076407a9b7b95b0479cc237785b2b162fe7bee90ba47575a84f6ee377efe`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:be52ba841f6d0886fbf2cf0e3627437f717ef7f932feab45889e44f36cda4e25`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [f74f7d4c](https://github.com/openshift/baremetal-operator/commit/f74f7d4c30cb936e84c79bbc60a9f57660058e98) `sha256:f691d45fb32099266b5b4fa8f1871abb4dbfd115f4608ce8334d03eff8d3f58a`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [5e602ba7](https://github.com/openshift/baremetal-runtimecfg/commit/5e602ba702420d0f30cee175f51fff83e00c1b5b) `sha256:5d029176cb4f0f8df86de74c78dc259cac356f02ca3aa17e63520cb30aa23f9e`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [c6a7e1a6](https://github.com/openshift/cloud-credential-operator/commit/c6a7e1a6b84b964531d6c842f362f664dd777746) `sha256:64fd349a758964e2d19ae63f070f87eb8be1cae87bd9a9bf225184446d469c53`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [5789322e](https://github.com/openshift/kubernetes-autoscaler/commit/5789322ed3215955ce39c75c185eef9b16ee987f) `sha256:efe813d2e44d88bf718989a7fcca1dcc0e2b33d5e430736ea528128532a4a132`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [17181f99](https://github.com/openshift/cluster-baremetal-operator/commit/17181f99343a5b1fb08af8a7994ad3e9eecc6c1e) `sha256:667008f0c58cc292e4b32c0c0839122be23329992f5d76bed7ff8137c79f29cd`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:6f23b88aced68782cb37e09e91158de07194c39dd9358a41fb4fdd3445d9b35f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [dfeecf96](https://github.com/openshift/cluster-api/commit/dfeecf9616e049ac552f91a71b2a50cb0e96042c) `sha256:7418450f9d393604e063b6bdc276a26c4852f6b82cc26f505c992dadcaf6c4a6`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [4bd6d82d](https://github.com/openshift/cluster-capi-operator/commit/4bd6d82d21a2d201d9857ca1e26b21c70a648bf5) `sha256:2cbe28fabe9f31d7955669cece9588fae2d3f2e4abf675d966900a1994af736b`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [276696cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/276696ccf679830b25df341edb7aae9bb3f4e763) `sha256:be75dae7d9267feb15a68b40f7608d7bc7a0176bc715f679b27f15d58e16d101`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:73ae78a3880ea2c8191ab316f51d33e23b7c25711cd40bab6c6ce1a95caece6d`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [32546df9](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/32546df9054ebbec1055344f8cad25254049df50) `sha256:7599ba7902526db2ac239fe828f15e7200d386791010dbd33674c4f62da6a2d9`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:419232e1bb4f3939a7c67e0a0bbdf8550620bfca69888df557e3b24eeffd0a12`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [9acf049b](https://github.com/openshift/cluster-etcd-operator/commit/9acf049b2985339275796f69a2a8acad47726a29) `sha256:0c93a5e03e730b8fed96058e2d6ce9b3b0cde8203b429eb6f4cacd33aae7c1a9`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:b71417afb14c32b165e84a51433a037aa6e579b4bbd171b86da98aed8db691f9`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [adaae0d4](https://github.com/openshift/cluster-api-operator/commit/adaae0d4e6d7a0e466e7e86af399de0b828c8b81) `sha256:b1fe2cd009b835a1fee4ef5850e85aafa77e9e725283930d7a61903091a50f18`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [438c9dba](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/438c9dba80ddadeabe9efe4a654297a7b550b2b8) `sha256:2b041f79f95f342137baa300c71c1b534ccbfbf917c6aacbd22ca06fd75f6424`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [84eb8c5a](https://github.com/openshift/cluster-kube-scheduler-operator/commit/84eb8c5a73a730d6d08794e51da9c20013ca4304) `sha256:96d12e47701ad6260a72cf55cf47995566b7a72dfecf88349f4c3a05f2d0e232`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:4217f193f8e4a61da136462d48e80b026cdaab99ddd6ab63407a6c7a0668c760`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [b3c82b2e](https://github.com/openshift/cluster-machine-approver/commit/b3c82b2eec66ae3ae510df0603af1212c34be618) `sha256:b1ed14ee995705ee14ebb0ac35975bc6835e9e95642eed5ed89593ab3e73f59e`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [d01cc083](https://github.com/openshift/cluster-olm-operator/commit/d01cc083748864e3c8dcc72fb75516492dec3555) `sha256:b44a03b069887f505da13176e552aec130e49b7ecc1fd2f955fbfa0e17a0d18a`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:cb0fa38b3f4f9b217d47fe15d605dca3e867ab8ade36b97e43ee85da20e868ba`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:ceb4085263715f7d9e0b84866bd8526f28961ad5f2065a3e3fd55d4da8c634a9`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [67083fab](https://github.com/openshift/cluster-policy-controller/commit/67083fab6cea4dde724efd5be5a22bda1f8437d1) `sha256:efe4bbaece22a3b9fa157172d17fd6d92e08c05c23264ec1415b05a48fc415af`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [b343f70f](https://github.com/openshift/cluster-samples-operator/commit/b343f70f19ffd559e1a81d3a3e65bd106e634c13) `sha256:5b39574965ee17fb566c859cc64a31ebf29635610e61d560e7d3456b920e7b86`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e8e9de43](https://github.com/openshift/cluster-storage-operator/commit/e8e9de4345ce79aafbdcf31eb4d4ce3682cfd6b7) `sha256:7be38c7c6a52e20fe86567002a2e4b2d43bf462b2361c2065e9ac169f53eb69d`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:2a0141e6ba47e707c98d5b56840d2badd66b667b007e1df9a51312e6dfc1fce0`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [ea3fa769](https://github.com/openshift/cluster-version-operator/commit/ea3fa7695054fc9260936902b33b738bb4c405bc) `sha256:6709841dfdf8f34c795f03865ea4f8314a8a193c84352198937488d2c77e84ef`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:1f380e66ec0416191043f09d1d9be17708a2b143ab794880b59fc6fa1f1dc5da`
* [console-operator](https://github.com/openshift/console-operator) git [75a6c064](https://github.com/openshift/console-operator/commit/75a6c0644907549642dd9d05ac451810f034385c) `sha256:13d7c6c1770597ba896479ca329e8b18faef0f4166d56a5d5e7fda100139bdd9`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:0c1c0e750944e1c846d18ff102cc4240559890dbc708241780498fb16dc0a284`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:b2f07d57254fbb5ac97e6b00c0c9f125de880efb67361433a553d9c0913051ad`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:5e940f7eb337869047bba4fcad10f6f0c40d96584b06df66a9caae9b420d5b10`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [c4cdae44](https://github.com/openshift/csi-driver-nfs/commit/c4cdae44ef7c33e4b7ce06a3b599a8bc0707bff7) `sha256:2751ffd5c9841915b5858c3b886a692d8e1d75ef5d024b89b8501c7452ec8374`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [4edfd76d](https://github.com/openshift/csi-external-provisioner/commit/4edfd76da6d8311f9149cb560f3763b6bdc23313) `sha256:978628a167a37fa207d2dace36235310d70bfe1ec83b677d74757745e6e0687c`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:76ce272d190c109159d3c6c366e0ffb135dab2de95f5ba5a417de1f17934041d`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [d123f362](https://github.com/openshift/csi-external-snapshotter/commit/d123f362cc13d9b14459af7b9e91eb2a9361d3cd) `sha256:17cd09990b23c4f2b8e0d4da99816bdd3c8a7d993affad8e62a7d21e5bfdc420`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:848b2a085bfbb595248e20c09fd7bc333ab59c341c724e14977afd1a14b96058`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:42b085486ccd7dc6c03599a7768fc8d24327fe528b49c3f32c53228c3e28892e`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [d123f362](https://github.com/openshift/csi-external-snapshotter/commit/d123f362cc13d9b14459af7b9e91eb2a9361d3cd) `sha256:7884ff1d54a62f1ca079c4cd9152e2ee04e2758ac86a34fb6566d42179232b93`
* [docker-registry](https://github.com/openshift/image-registry) git [0e96a084](https://github.com/openshift/image-registry/commit/0e96a08424d601be55341bc3f4412fde977602c8) `sha256:1fbbc914261a389543cf869ba8e02908e766101d8bf3a0314fbe696ff6ccb57b`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [62e1f604](https://github.com/openshift/driver-toolkit/commit/62e1f6040cd297149f5f14e0d20814759ec61354) `sha256:920c6f6bfa9ab740abb012b7b6d08adfd6e296139a48345c0856fe73a5bdb67d`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [cfcc6c44](https://github.com/openshift/egress-router-cni/commit/cfcc6c44a9aacf48585dbe6618e5561f6c55666a) `sha256:59af1017e3407e9c372db3d55ac04969c917cadc22a728e887417254677b1db4`
* [etcd](https://github.com/openshift/etcd) git [05bca977](https://github.com/openshift/etcd/commit/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709) `sha256:02fff4b833de032c710cc8a294db8d119f46a933912f22770d65d33dcce21f55`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [74e23890](https://github.com/openshift/cluster-api-provider-gcp/commit/74e2389011d640a371c0acb6ff71b1582cab23a1) `sha256:b418bd65aa5623a26382499a0eee5c4751ed81f92371580509a8d9a01936c992`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [49e54581](https://github.com/openshift/gcp-pd-csi-driver/commit/49e54581328a46f6aee3f7842d401681d34b2104) `sha256:2efb11c9a4c08cdc917fd63b7146f3a67833632aab3dda23adbd12e281d0a366`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [9fb0e78b](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/9fb0e78b4db18f763f7144ca5c13ee380da07460) `sha256:41a2babf89dcc55e3040bfbb22a743c046429118384c374720e5a0707c19ccf2`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:2bbc58824720be0e310576c9ab39eac2a164599e3b417ae9aa1ea27e35b8edab`
* [haproxy-router](https://github.com/openshift/router) git [0fec034e](https://github.com/openshift/router/commit/0fec034e28f1f44ed75dcc1ab96f7135fd9beb49) `sha256:ecfb20ae42ad78ddb9cbdcba93f4e42d657b77505bd639e3757c6d1be4958f11`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:b155f2a3fdb78bf387f18ebebd4d3973876b94c502a3ea2ac177bf9c11667dc0`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [0d2143b7](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/0d2143b7aaaf2047e9578fb3ae41f89267d4b1bc) `sha256:b561f334e4c45a888de984f1e073f70858ca8c8e212ad23a0b07a18b71f1f114`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:16a7f0f7e5f848e4fc67fa4209a9a3808319db6f9c8154bed91d2161da75f61d`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [4bccd47c](https://github.com/openshift/machine-api-provider-ibmcloud/commit/4bccd47c2a10f319bae4e1666767d02b40cb604f) `sha256:6418537a3ae27391fbba18e16234282820af2955f35cd975f28cea614801df73`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:82c14e5bb8ba16f0635a7106bdb6100c47ec3859ed425ddb5c0201d258e7b49f`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:1056c25e067b62fc9e8e1f671e67bb093b98921c21f697df18b240bc45e8a45d`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [5cceaa37](https://github.com/openshift/ironic-agent-image/commit/5cceaa3796a6a83b56b83942fede7ba4859cc16f) `sha256:8c7f291dd075beb59f63a83e48fdf84fecf8d1d77918b7fb43bcf8d5cb328cd9`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:dd724d9eaae881a6fc1a494ca4cc296e29656572e5b82f31de867672671ce593`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:6db91eeb51bfe94a542717138366a894653d25be0eb37ea655c51439408560ae`
* [keepalived-ipfailover](https://github.com/openshift/images) git [41114715](https://github.com/openshift/images/commit/4111471533cb072b6aab4a1ac4d523915f8abef1) `sha256:0dafd37dda343a39cba20ca5b0db00dfd62562bdf43c9d620b64f845dfdac8a2`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:be15edd077c0bd05617c8f7c1d62e5e04d9c85909bebeb726c66f24974c145b5`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:f50cc05e5bdd8ace860b60a0ef507eddc3e0e96895fe5289bdf2f583a34589c2`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [d9a04bd9](https://github.com/openshift/cloud-provider-kubevirt/commit/d9a04bd9046ab1418d83c7bfb7891f49d8429d20) `sha256:d1ab526ccea6a59d2430e38f4400bcd0a7cb0fa7cc14f9e0825fdb8b6fdb0748`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [6c353bb1](https://github.com/openshift/kubevirt-csi-driver/commit/6c353bb1eb5a021c9e845eac839ce85e95a9fede) `sha256:47d1889a1bd4840209bf6d979801dcc21cbf68086378efa6a650ac619e744cba`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [fe4360da](https://github.com/openshift/image-customization-controller/commit/fe4360da1fe44c0d8a69c0133f846e0cbc36740c) `sha256:4dc35f38200b27f609d7e2574cb30f1399a0615ec6f24ad516bede0a277832c7`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [5da52107](https://github.com/openshift/machine-os-images/commit/5da52107b36e002d56e5e82f4b2cd496b1c4ec7a) `sha256:813b2d3fcc28a3d8d932a00c5e7410ba9e4a0c5b45e41151ad92d3001e4d7051`
* [metallb-frr](https://github.com/openshift/frr) git [3ca45c51](https://github.com/openshift/frr/commit/3ca45c517eafe07aac0866e5cbd32a5c08081f22) `sha256:a22c7a1011b1d8743c664a04775b85cb8bdfa4ba2fbf2f1afcac52fb20cb3640`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:b1614deab3332c7762eee5c308d4c32c17c77b955baf03d8864779f7da5731ef`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [afbdf825](https://github.com/openshift/multus-networkpolicy/commit/afbdf82505c0d8f212d63e1eee6debced74ef653) `sha256:8a504b9025ec325b1d0073d8af0db94f48d97f5c0be2c4e58e022e6233fd15dc`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:9572417204f0f63dd4396841be73e9c79a1d4996691d9f1390f515fc9c531ae1`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:7af8706cd893c53a7e97bff2b2d91d3267f39746393f414fed578f5a9ee90d89`
* [must-gather](https://github.com/openshift/must-gather) git [6b2eea0d](https://github.com/openshift/must-gather/commit/6b2eea0d83ca1f05f9032d66be1c2ee80cfa1459) `sha256:4dfeea6073e1ddd80000009af8a32b3629b34df504ae7e1ecd6b66ccd759136e`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:096cab81f250d9b733863fdb47e7dedf22dc0fc7cf4be7a358304be253890d67`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:59bc2baa02d20b01bbbf06cc78a7479b20fade53fdb581710ebc48b7737ebae4`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:9a347642fbb8b03c12f3df534a636e8e91a27e11043dcadabe5fa3d1c8e19d28`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:a24c4453a72644ea0b80d1ff04180c06ba8bb9efde4f0839ffcb8293878cea57`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [99f27d25](https://github.com/openshift/oauth-apiserver/commit/99f27d25cc2853fe44ce6c7f7611637ef1492e42) `sha256:de6f166e9f6cfffc5b07e9b1bde5789d7e62dcf96435744873a445f54d09c124`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [eda815e0](https://github.com/openshift/openshift-apiserver/commit/eda815e0515550890354dda41e65f8dd35e15ad5) `sha256:8d5240b27eb171bab7ec7cbd3c6ce8492c5e71d3af0e799cc62483653bb54245`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:75655b4e6c410a7a1ea4991194e61028ac4c5c99b13634c33fcd108c5befe00b`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:d0a6617e50b090fb7c7c49d38bed3782ecef03ed7eca311b3344ec0f5101fa3f`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [c91265ed](https://github.com/openshift/cluster-api-provider-openstack/commit/c91265ed4f82c0b36fbfc50040b8180f04fcf4cc) `sha256:be7721a0e66b3edb22794edce3a2316e9bf1748498b28d9806858a5a988911d7`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [02e56026](https://github.com/openshift/machine-api-provider-openstack/commit/02e56026c3a2628c8a5115f4f5bc2bb3514ef6c3) `sha256:5ca754502a92e82fda3d85e63a11a1a45dd382188b5175cb790ac2da4b04ada9`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:520273897f57e6770ab59afc74b774f0cfdecc178cd5c04ccdfebd67eefa3f55`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [4ccd56c9](https://github.com/operator-framework/operator-marketplace/commit/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf) `sha256:0fdf0512fa6a2177ba45a7e6d6601a4d167c1bbd50404b937818aaf43ee12273`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [4036cd3b](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/4036cd3b5e45cf4d8c3c34def599657435601661) `sha256:2404858a7fb26306bd5faf8a2444b4127d1045603d8e0dbd5b410fbaf9b5c572`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [d634e80b](https://github.com/openshift/cloud-provider-powervs/commit/d634e80b52e7ecb087163eb5927450dc884e24df) `sha256:1ac18a98787412c6fa02b53bb864e5da8da78c8c2ad9fa7539d35c44c5de4f53`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:97d98401e7bba723f7bb4c9a1b93e01a24f4be0bb34d04d0f38180e11e8e6728`
* [rhel-coreos](https://github.com/openshift/os) git [847b7d8c](https://github.com/openshift/os/commit/847b7d8c3b60f60e86f1de0b7efebb746c75d1bc) `sha256:522d3df5846b199c0dd75ae3613c36440a1edcd0a4c2b693b924ae87ec95b2b6`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [847b7d8c](https://github.com/openshift/os/commit/847b7d8c3b60f60e86f1de0b7efebb746c75d1bc) `sha256:f2a1fc063b9043013b7b52266e54d925c907d9c9d4b03abce7b097ae8c33a811`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [1a0229e4](https://github.com/openshift/route-controller-manager/commit/1a0229e40e5c569c6c59f6b10c26584bccd084b5) `sha256:1e888086b3b13399686cc693a3f10d1bdf548523fbcb3419e0c28922345db4fa`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:b18d0e39b1313f385efb5e4f7d87f912dd198f1b05e94432a0a8ec2b2116e96c`
* [telemeter](https://github.com/openshift/telemeter) git [d07a8330](https://github.com/openshift/telemeter/commit/d07a833015fe91fe2df12589a6877dde15e9a227) `sha256:107f5657d70894ba63c84107de64aa3cb42fa178cc8e4ae95fdcb1bee41f344f`
* [thanos](https://github.com/openshift/thanos) git [e09de117](https://github.com/openshift/thanos/commit/e09de117035d272a18dbd94d0bc8c8e29346026e) `sha256:a8439364568b5d50dd8a3b3cefc6219da851026c916546283ef3b58cccffbeb3`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:78c1e523c1a38509fb43a30443e1263a5faaeb5600d20b7548aaba7e91ec2132`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [769d0fb7](https://github.com/openshift/cluster-api-provider-vsphere/commit/769d0fb781dfb53df5d533b917c363a553185fd6) `sha256:690b25c7631c5de175942008d5e2262f6f574a01f2bfaa934077e21f2f302c8a`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b22ad07bac5979e1691ccb19ded93a5bde8ef570)

* [OCPBUGS-89951](https://issues.redhat.com/browse/OCPBUGS-89951): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 [#10798](https://github.com/openshift/assisted-service/pull/10798)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4e399454ffb97a17837bb2362518f5442f7dd086...b22ad07bac5979e1691ccb19ded93a5bde8ef570)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/6b65bbfaa7224f7c314fb946acac0cc236f90fe5)

* [OCPBUGS-103794](https://issues.redhat.com/browse/OCPBUGS-103794): Bump x/net to v0.35.0-sec.4 [#2291](https://github.com/openshift/assisted-installer/pull/2291)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a26df06f52f1426defcf42c6cebcec5b7a956df3...6b65bbfaa7224f7c314fb946acac0cc236f90fe5)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/522bb593b74550ecf61fc26fbcce5e35e72bf0b1)

* [OCPBUGS-103797](https://issues.redhat.com/browse/OCPBUGS-103797): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1620](https://github.com/openshift/assisted-installer-agent/pull/1620)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0...522bb593b74550ecf61fc26fbcce5e35e72bf0b1)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/614fe44d7efeb390de35ecada97a1a9b1739c069)

* [OCPBUGS-113552](https://issues.redhat.com/browse/OCPBUGS-113552): Bump nanoid to &gt;=3.3.17 in 4.20 (#4066) [#4066](https://github.com/openshift-assisted/assisted-installer-ui/pull/4066)
* [OCPBUGS-119962](https://issues.redhat.com/browse/OCPBUGS-119962): Bump qs to &gt;=6.16.0 in release-4.20 (#4045) [#4045](https://github.com/openshift-assisted/assisted-installer-ui/pull/4045)
* [OCPBUGS-104550](https://issues.redhat.com/browse/OCPBUGS-104550): Bump tmp to ^0.2.6 to address CVE-2026-44705 (#4016) [#4016](https://github.com/openshift-assisted/assisted-installer-ui/pull/4016)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/926efbf6cb43cbe0a1887c5eeeabee876a74ca86...614fe44d7efeb390de35ecada97a1a9b1739c069)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/6a040755480eebf24fc80842b870762addb8b01e)

* 🐛 OCPBUGS-123528: UPSTREAM: &lt;carry&gt;: Fix unit tests for OpenShift CI environment [#638](https://github.com/openshift/cluster-api-provider-aws/pull/638)
* 🌱 [release-4.20] OCPBUGS-123527: UPSTREAM: &lt;carry&gt;: Remove upstream .github files unused in OpenShift CI [#637](https://github.com/openshift/cluster-api-provider-aws/pull/637)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/300439ea0736444a160c061578b3bd8956d4f7e6...6a040755480eebf24fc80842b870762addb8b01e)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/9577298b014d014dc42eabb4b8f9b8957146d188)

* [OCPBUGS-103805](https://issues.redhat.com/browse/OCPBUGS-103805), [OCPBUGS-103816](https://issues.redhat.com/browse/OCPBUGS-103816): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#612](https://github.com/openshift/csi-operator/pull/612)
* [Full changelog](https://github.com/openshift/csi-operator/compare/910424793d59d291a9e6addaccbd2facf53e2bff...9577298b014d014dc42eabb4b8f9b8957146d188)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/5e418608ed55a11c32042f2a2049fc6381fbdecc)

* [OCPBUGS-103808](https://issues.redhat.com/browse/OCPBUGS-103808), [OCPBUGS-103983](https://issues.redhat.com/browse/OCPBUGS-103983): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#206](https://github.com/openshift/cloud-provider-azure/pull/206)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/fbf11126955608076cd568c22be0d630c5db0d84...5e418608ed55a11c32042f2a2049fc6381fbdecc)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/b772189f1cf2f881052e7ff8d65d7338f16a72ac)

* UPSTREAM: 3635: OCPBUGS-96365: Bump golang.org/x/net to  v0.50.0-sec.4 [#167](https://github.com/openshift/azure-disk-csi-driver/pull/167)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/aa8291ea101b8dddbfa678e3673b5b0011ed4a03...b772189f1cf2f881052e7ff8d65d7338f16a72ac)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/bdffa74f61bbdaefccdd984541c0fd303810209e)

* [OCPBUGS-103813](https://issues.redhat.com/browse/OCPBUGS-103813): Bump golang.org/x/net to v0.50.0-sec.4 [#156](https://github.com/openshift/azure-file-csi-driver/pull/156)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/852183055481b20e4fb23f10f3af2dbcd7ee7fd0...bdffa74f61bbdaefccdd984541c0fd303810209e)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/93423109b69567eaef489f262d5c2b103dea9219)

* [OCPBUGS-103785](https://issues.redhat.com/browse/OCPBUGS-103785): [release-4.20] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#59](https://github.com/openshift/azure-kubernetes-kms/pull/59)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/1d6fb8798544b0d0ff60582f82f885e5a6a776ba...93423109b69567eaef489f262d5c2b103dea9219)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/a5949a16a99f5ec42c4e24ca13b67ef44de07535)

* [OCPBUGS-103905](https://issues.redhat.com/browse/OCPBUGS-103905): replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 [#211](https://github.com/openshift/machine-api-provider-azure/pull/211)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/68db91507ea47f767ee0dc838c08cc371d2ff69f...a5949a16a99f5ec42c4e24ca13b67ef44de07535)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/0c11c37e83ad8b8a328ffe0d0888ef70ed5bab56)

* [OCPBUGS-89997](https://issues.redhat.com/browse/OCPBUGS-89997), [OCPBUGS-92937](https://issues.redhat.com/browse/OCPBUGS-92937): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.48.0-sec.2 [#10821](https://github.com/openshift/installer/pull/10821)
* [OCPBUGS-100063](https://issues.redhat.com/browse/OCPBUGS-100063): openstack: Reserve addresses for load balancer [#10723](https://github.com/openshift/installer/pull/10723)
* [OCPBUGS-112324](https://issues.redhat.com/browse/OCPBUGS-112324): [release-4.20]: Enrich IBI config image proxy NoProxy with cluster networks [#10779](https://github.com/openshift/installer/pull/10779)
* [Full changelog](https://github.com/openshift/installer/compare/f9e3db0194c9acc504b9d046b3867fb53005c9c0...0c11c37e83ad8b8a328ffe0d0888ef70ed5bab56)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/ef515cfbef680d4040becc4a180afb7a195270a4)

* [OCPBUGS-103964](https://issues.redhat.com/browse/OCPBUGS-103964): [release-4.20] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#2381](https://github.com/openshift/oc/pull/2381)
* [Full changelog](https://github.com/openshift/oc/compare/1367d50cf3740bc3a6a68ba6c74f6ad5e3ef7cb7...ef515cfbef680d4040becc4a180afb7a195270a4)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/67851403b248cc93649d3734606d0ebdbf2ed076)

* [OCPBUGS-88310](https://issues.redhat.com/browse/OCPBUGS-88310): Retrieve subnet from vnet subnets.addressPrefixes field [#226](https://github.com/openshift/cloud-network-config-controller/pull/226)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/d22915bc82993ce11cb3fb97e6ae00602f30549b...67851403b248cc93649d3734606d0ebdbf2ed076)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/104d5d413a4d473b1bf280ffe546bf5c83bb8eda)

* [OCPBUGS-103829](https://issues.redhat.com/browse/OCPBUGS-103829): Bump golang.org/x/net from v0.38.0 to v0.50.0-sec.4 [#981](https://github.com/openshift/cluster-authentication-operator/pull/981)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/569ae680cbdf0f78cc0d77278c5178160679fe83...104d5d413a4d473b1bf280ffe546bf5c83bb8eda)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/d1311e1f6a6c61c86c80e978681822156c6441fb)

* [OCPBUGS-103824](https://issues.redhat.com/browse/OCPBUGS-103824): Bump x/net package in release-4.20 [#384](https://github.com/openshift/cluster-autoscaler-operator/pull/384)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/147e5a7ff20b46ade7dd932b47e06ca82729f5e8...d1311e1f6a6c61c86c80e978681822156c6441fb)


### [cluster-config-api](https://github.com/openshift/api/tree/b32f49f8a70985c6ad9abb2dc579abc18d143051)

* [SPLAT-2867](https://issues.redhat.com/browse/SPLAT-2867): Add vSphere multi vCenter Day 2 [#3038](https://github.com/openshift/api/pull/3038)
* [Full changelog](https://github.com/openshift/api/compare/05da40ea98557f8351483a39db3d0e7d9076bc8f...b32f49f8a70985c6ad9abb2dc579abc18d143051)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/8b96b8d58079376b3e56062e724581d1714e2a50)

* [OCPBUGS-103839](https://issues.redhat.com/browse/OCPBUGS-103839): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#295](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/295)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f...8b96b8d58079376b3e56062e724581d1714e2a50)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/8e4c40f161d8341d640659ca2779a4294960c183)

* [OCPBUGS-103834](https://issues.redhat.com/browse/OCPBUGS-103834): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 [#1569](https://github.com/openshift/cluster-ingress-operator/pull/1569)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/f86aaea4136dfea16e62290bd50ecdd1a8b22b3f...8e4c40f161d8341d640659ca2779a4294960c183)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/37d84f7e47f675f3a785f66c20dd2972d3289dbe)

* [OCPBUGS-128037](https://issues.redhat.com/browse/OCPBUGS-128037): Fix kube-apiserver-to-kubelet-signer refresh interval [#2323](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2323)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e9accf887ef1182f0a96e3086d54441ba8bcae40...37d84f7e47f675f3a785f66c20dd2972d3289dbe)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/500cc1b0401e08ee61eb3c0fe4507e1a76068ed3)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.20] [#3115](https://github.com/openshift/cluster-monitoring-operator/pull/3115)
* [OCPBUGS-112574](https://issues.redhat.com/browse/OCPBUGS-112574): [release-4.20] Makefile: version-stamp golangci-lint binary to prevent stale linter [#3066](https://github.com/openshift/cluster-monitoring-operator/pull/3066)
* [OCPBUGS-103845](https://issues.redhat.com/browse/OCPBUGS-103845): [release-4.20] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#3072](https://github.com/openshift/cluster-monitoring-operator/pull/3072)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/3befd0b19fbc99bc714c040d85847ae18c81453d...500cc1b0401e08ee61eb3c0fe4507e1a76068ed3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8e06ca47f7dceae831760686b68f9d909a6e46d6)

* [OCPBUGS-127390](https://issues.redhat.com/browse/OCPBUGS-127390): Restart pods when rendering egressIP settings [#3173](https://github.com/openshift/cluster-network-operator/pull/3173)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/907dc8b385a37ba34798eb104c489ba1dc7aeef9...8e06ca47f7dceae831760686b68f9d909a6e46d6)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/c491d1ae719221fdb0031fe7f071a787274f7883)

* [OCPBUGS-115719](https://issues.redhat.com/browse/OCPBUGS-115719): Update PPC help description [#1627](https://github.com/openshift/cluster-node-tuning-operator/pull/1627)
* [OCPBUGS-112026](https://issues.redhat.com/browse/OCPBUGS-112026): BUG-FIX Latency Test [#1594](https://github.com/openshift/cluster-node-tuning-operator/pull/1594)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/24682c3ea155576476ddf7d3b16ebd62188e65dc...c491d1ae719221fdb0031fe7f071a787274f7883)


### [console](https://github.com/openshift/console/tree/6f1b8f5cf267bfc1ca41d1c8fa7ab23d0699701f)

* [OCPBUGS-122351](https://issues.redhat.com/browse/OCPBUGS-122351): Wait for demo plugin deployment readiness [#17168](https://github.com/openshift/console/pull/17168)
* [OCPBUGS-60136](https://issues.redhat.com/browse/OCPBUGS-60136): Fix Operator Backed catalog empty on disconnected clusters [#17184](https://github.com/openshift/console/pull/17184)
* [release-4.20 ]OCPBUGS-84041: Fix template placeholder {{name}} not resolved and runtime error on Group details page [#16313](https://github.com/openshift/console/pull/16313)
* [OCPBUGS-121663](https://issues.redhat.com/browse/OCPBUGS-121663): Validate chart URL in /api/helm/verify [#17147](https://github.com/openshift/console/pull/17147)
* [Full changelog](https://github.com/openshift/console/compare/9d22e8a0828ed326c824cf897371c22cc7c9ccb1...6f1b8f5cf267bfc1ca41d1c8fa7ab23d0699701f)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f204d3ac38736d82a1b832624aa760b9a5d70288)

* [OCPBUGS-96434](https://issues.redhat.com/browse/OCPBUGS-96434): Bump golang.org/x/net to v0.50.0-sec.4 [#418](https://github.com/openshift/cloud-provider-openstack/pull/418)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/649398c2a16731984e65719f6b8b323df79f3ff1...f204d3ac38736d82a1b832624aa760b9a5d70288)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/2a474861e4db0c9af08d0c0da2f3ffd2a92a27c2)

* UPSTREAM: 110: OCPBUGS-103856: Bump golang.org/x/net to v0.50.0-sec.4 [#113](https://github.com/openshift/csi-external-attacher/pull/113)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/935f1e1f7f9f07c03116e37e760a66e2a58c63c0...2a474861e4db0c9af08d0c0da2f3ffd2a92a27c2)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/4835292fe73b956b6a350373a45fb0877dd705b7)

* [OCPBUGS-103867](https://issues.redhat.com/browse/OCPBUGS-103867): Bump golang.org/x/net to v0.50.0-sec.4 [#211](https://github.com/openshift/csi-external-resizer/pull/211)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/5a19cdc10656fe090fb003584fd2db260df2c762...4835292fe73b956b6a350373a45fb0877dd705b7)


### [docker-builder](https://github.com/openshift/builder/tree/18885748e09ecf986d8ab0fc3a0fd2440cb7b51f)

* [OCPBUGS-89994](https://issues.redhat.com/browse/OCPBUGS-89994), [OCPBUGS-90424](https://issues.redhat.com/browse/OCPBUGS-90424), [OCPBUGS-92486](https://issues.redhat.com/browse/OCPBUGS-92486), [OCPBUGS-92631](https://issues.redhat.com/browse/OCPBUGS-92631), [OCPBUGS-92790](https://issues.redhat.com/browse/OCPBUGS-92790): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#554](https://github.com/openshift/builder/pull/554)
* [Full changelog](https://github.com/openshift/builder/compare/35afa308e2473046721057112d804334fc4b8217...18885748e09ecf986d8ab0fc3a0fd2440cb7b51f)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/d4bfe3cf78550cf6eabde8714d44b7c69a6a0652)

* [OCPBUGS-99227](https://issues.redhat.com/browse/OCPBUGS-99227): Fix node.kubernetes.io/exclude-from-external-load-balancers on masters [#129](https://github.com/openshift/cloud-provider-gcp/pull/129)
* NO-JIRA: Update OWNERS [#158](https://github.com/openshift/cloud-provider-gcp/pull/158)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/d5a5541436d9269006928079fcdc507d0b6d4033...d4bfe3cf78550cf6eabde8714d44b7c69a6a0652)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/430124471dc855f135f8e9d4256ee3930c0037a0)

* [OCPBUGS-103902](https://issues.redhat.com/browse/OCPBUGS-103902): Bump golang.org/x/net to v0.50.0-sec.3 [#187](https://github.com/openshift/machine-api-provider-gcp/pull/187)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b998cf2532b52ce574c42e93c63965b31b9c6c8b...430124471dc855f135f8e9d4256ee3930c0037a0)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/8008e652cb56e8fb34e76d0736973b3e99816fb0)

* UPSTREAM: &lt;carry&gt;: OCPBUGS-125759: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters [#2780](https://github.com/openshift/kubernetes/pull/2780)
* [OCPBUGS-105592](https://issues.redhat.com/browse/OCPBUGS-105592): backport kubernetes/conformance umbrella suite [#2741](https://github.com/openshift/kubernetes/pull/2741)
* [OCPBUGS-117657](https://issues.redhat.com/browse/OCPBUGS-117657): Fix performance related issues when selinux metrics are emitted [#2768](https://github.com/openshift/kubernetes/pull/2768)
* [Full changelog](https://github.com/openshift/kubernetes/compare/2df3632e823a813f64218dfc6f5c2e70d28ecdf0...8008e652cb56e8fb34e76d0736973b3e99816fb0)


### [hypershift](https://github.com/openshift/hypershift/tree/76ac9ae4e18c0bd53e9bac0808379a36e8f59f53)

* [CNTRLPLANE-4211](https://issues.redhat.com/browse/CNTRLPLANE-4211): Backport ConfigurationStatus API for external authentication [#9410](https://github.com/openshift/hypershift/pull/9410)
* [CNTRLPLANE-4161](https://issues.redhat.com/browse/CNTRLPLANE-4161): Maintain ingress serving cert for HostedCluster ingress [#9780](https://github.com/openshift/hypershift/pull/9780)
* [OCPBUGS-127054](https://issues.redhat.com/browse/OCPBUGS-127054): hardcode ETCD_METRICS=extensive in etcd StatefulSet template [#9720](https://github.com/openshift/hypershift/pull/9720)
* [OCPBUGS-120750](https://issues.redhat.com/browse/OCPBUGS-120750): update Containerfile.cli runtime base image to floating tag [release-4.20] [#9558](https://github.com/openshift/hypershift/pull/9558)
* [Full changelog](https://github.com/openshift/hypershift/compare/ef0d161652b3c50b02c686dc63b148ec9061b679...76ac9ae4e18c0bd53e9bac0808379a36e8f59f53)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/734ed88aef0de0c76f14aed7866f934d4a24e645)

* [OCPBUGS-86916](https://issues.redhat.com/browse/OCPBUGS-86916): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.20 [#154](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/154)
* [OCPBUGS-103886](https://issues.redhat.com/browse/OCPBUGS-103886): Replace golang.org/x/net with openshift-sustaining/net [#174](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/174)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/8b6396a4c78f4791b7f3c5ec404a78b499f8546b...734ed88aef0de0c76f14aed7866f934d4a24e645)


### [insights-operator](https://github.com/openshift/insights-operator/tree/1f8c4d8f0af0f4b4ead6355f8952df0ca8d2bcad)

* [OCPBUGS-126912](https://issues.redhat.com/browse/OCPBUGS-126912): add custom proxy field to insights config [#1370](https://github.com/openshift/insights-operator/pull/1370)
* [OCPBUGS-103898](https://issues.redhat.com/browse/OCPBUGS-103898): Bump golang.org/x/net to v0.50.0-sec.3 [#1353](https://github.com/openshift/insights-operator/pull/1353)
* [Full changelog](https://github.com/openshift/insights-operator/compare/72a6d70e9b692900666038716e0a723d9222b8a7...1f8c4d8f0af0f4b4ead6355f8952df0ca8d2bcad)


### [ironic](https://github.com/openshift/ironic-image/tree/af9e8fdf1c6aee2a3d4ee3c83f7692a0e63b70e9)

* [OCPBUGS-114410](https://issues.redhat.com/browse/OCPBUGS-114410): ZTP deployment failed on an iDRAC10 cluster [#922](https://github.com/openshift/ironic-image/pull/922)
* [Full changelog](https://github.com/openshift/ironic-image/compare/396112690a167a1b51fc8917ac839f3dba85df0d...af9e8fdf1c6aee2a3d4ee3c83f7692a0e63b70e9)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/fe7f9ad72976fc21363f2cf4fa511c8a4ec868af)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.20] [#88](https://github.com/openshift/kubernetes-metrics-server/pull/88)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/e7379b302a7377c06cf06d54230decd479f92078...fe7f9ad72976fc21363f2cf4fa511c8a4ec868af)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/1197b8bd68ac078c28349e4728a2192b7590f2ef)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.20] [#173](https://github.com/openshift/kube-state-metrics/pull/173)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/358d786274fe81017f7d17cc7310117dca127146...1197b8bd68ac078c28349e4728a2192b7590f2ef)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/967d32839eada01a93207a50bc359982fdb16d01)

* [OCPBUGS-103915](https://issues.redhat.com/browse/OCPBUGS-103915): replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 [#1543](https://github.com/openshift/machine-api-operator/pull/1543)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/de0171b9abf99cde11e789dd0d103cb69e7c6684...967d32839eada01a93207a50bc359982fdb16d01)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/00f925b063aaaaafa61046e40dd3d1a662091877)

* [OCPBUGS-128658](https://issues.redhat.com/browse/OCPBUGS-128658): wrong early exit during kubelet MCs regeneration [#6603](https://github.com/openshift/machine-config-operator/pull/6603)
* [OCPBUGS-103920](https://issues.redhat.com/browse/OCPBUGS-103920): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#6505](https://github.com/openshift/machine-config-operator/pull/6505)
* [OCPBUGS-115436](https://issues.redhat.com/browse/OCPBUGS-115436): Fix SHA idempotency test in nmstate-configuration.sh [#6480](https://github.com/openshift/machine-config-operator/pull/6480)
* [OCPBUGS-122109](https://issues.redhat.com/browse/OCPBUGS-122109): Update message for MachineOSBuildFailed condition [#6518](https://github.com/openshift/machine-config-operator/pull/6518)
* [OCPBUGS-116934](https://issues.redhat.com/browse/OCPBUGS-116934): Update AMI Whitelist [#6487](https://github.com/openshift/machine-config-operator/pull/6487)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/0db0e697092e7d4f44f0331d03ce68cd1fbd63d1...00f925b063aaaaafa61046e40dd3d1a662091877)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/8fa8e3a519805a0402c8a3015cb8edb933ac8267)

* [OCPBUGS-103912](https://issues.redhat.com/browse/OCPBUGS-103912): CVE-2026-33814-4-20 openshift4/ose-monitoring-plugin-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.20] [#1215](https://github.com/openshift/monitoring-plugin/pull/1215)
* NO-JIRA: [release-4.20] Sanitize alert runbook URLs [#1293](https://github.com/openshift/monitoring-plugin/pull/1293)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/34c1d0428821f51b9c86982e9d124cd7120dce23...8fa8e3a519805a0402c8a3015cb8edb933ac8267)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/84d409497adb0053a4296134ed974cf8aba487db)

* [OCPBUGS-120774](https://issues.redhat.com/browse/OCPBUGS-120774): [Release 4.20] Cherry-pick fix for the issue of stripping delegate datastore config on CNI DEL, leaking IPAM addresses- #350 [#352](https://github.com/openshift/multus-cni/pull/352)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b2a2f457824490d93da101d983b25af966f2be1b...84d409497adb0053a4296134ed974cf8aba487db)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/356bd40b74ec289b7052267a9848c91c80a32708)

* [OCPBUGS-103914](https://issues.redhat.com/browse/OCPBUGS-103914): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#151](https://github.com/openshift/network-metrics-daemon/pull/151)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/b81340a9fc6963fa3d64d215a12e8528ca797131...356bd40b74ec289b7052267a9848c91c80a32708)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f98046e6f1c715f7015d04f81c5973e98bb94078)

* maintenance: Bump the npm group with 15 updates [#550](https://github.com/openshift/networking-console-plugin/pull/550)
* maintenance: Bump the npm group across 1 directory with 20 updates [#533](https://github.com/openshift/networking-console-plugin/pull/533)
* maintenance: Bump the npm group with 227 updates [#508](https://github.com/openshift/networking-console-plugin/pull/508)
* [OCPNETUI-82](https://issues.redhat.com/browse/OCPNETUI-82): Lower Dockerfile base image versions [#519](https://github.com/openshift/networking-console-plugin/pull/519)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/80efc6dc729c5010ca951f013e9eb4982f4c17ab...f98046e6f1c715f7015d04f81c5973e98bb94078)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/2b10b7895a5f16e216c5eaea6dbe8f830f9b69c0)

* [OCPBUGS-112095](https://issues.redhat.com/browse/OCPBUGS-112095): bugfix: rewrite open redirect strings to '/' [#382](https://github.com/openshift/oauth-proxy/pull/382)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/f6193d8afa72a6ac470f8a4b5a8c6a15de41e32b...2b10b7895a5f16e216c5eaea6dbe8f830f9b69c0)


### [oauth-server](https://github.com/openshift/oauth-server/tree/cf0de2f7f942d0a31778685b404771857fb4ae54)

* [OCPBUGS-87076](https://issues.redhat.com/browse/OCPBUGS-87076): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#270](https://github.com/openshift/oauth-server/pull/270)
* [Full changelog](https://github.com/openshift/oauth-server/compare/715ae668b8765b029cb7851a509b9948b8cc57a0...cf0de2f7f942d0a31778685b404771857fb4ae54)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/a56c3585b01f015e45bb7aa70b8147ac7086399b)

* [OCPBUGS-105780](https://issues.redhat.com/browse/OCPBUGS-105780): fix for CVE-2026-39829 [#1506](https://github.com/openshift/oc-mirror/pull/1506)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/9b186403c88394b54ab491871a158a124df39a02...a56c3585b01f015e45bb7aa70b8147ac7086399b)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/79b3f37766de745c2151a2325322d0730eb6aba8)

* [OCPBUGS-103922](https://issues.redhat.com/browse/OCPBUGS-103922), [OCPBUGS-103927](https://issues.redhat.com/browse/OCPBUGS-103927): Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#802](https://github.com/openshift/operator-framework-operator-controller/pull/802)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/39c3a80d919cafc207f5f208a5f88b23e468cd8d...79b3f37766de745c2151a2325322d0730eb6aba8)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e1d090d165aa3e31de614b18da7cf4dd2f6976f6)

* [OCPBUGS-103940](https://issues.redhat.com/browse/OCPBUGS-103940), [OCPBUGS-103947](https://issues.redhat.com/browse/OCPBUGS-103947), [OCPBUGS-103949](https://issues.redhat.com/browse/OCPBUGS-103949): Replace golang.org/x/net with githubcom/openshift-sustaining/net@v0.50.0-sec.3- #1364 [#1364](https://github.com/openshift/operator-framework-olm/pull/1364)
* [OCPBUGS-95400](https://issues.redhat.com/browse/OCPBUGS-95400), [OCPBUGS-95403](https://issues.redhat.com/browse/OCPBUGS-95403): bumping containerd to v1.7.33 [#1352](https://github.com/openshift/operator-framework-olm/pull/1352)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/1628e53777871f6c264d41a870cc4ee7248106f2...e1d090d165aa3e31de614b18da7cf4dd2f6976f6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/a281044818c2362c39a7688f1081ca584ee34e42)

* [OCPBUGS-99642](https://issues.redhat.com/browse/OCPBUGS-99642): EgressIP: add route policies for east-west traffic between networks [#3324](https://github.com/openshift/ovn-kubernetes/pull/3324)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/c28f7669a9ef8e28a47163b1656c5647ea8a725c...a281044818c2362c39a7688f1081ca584ee34e42)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/22cfe3971df6bbe0bad8f2074b342c199e4de0f3)

* [OCPBUGS-101351](https://issues.redhat.com/browse/OCPBUGS-101351), [OCPBUGS-103945](https://issues.redhat.com/browse/OCPBUGS-103945), [OCPBUGS-89652](https://issues.redhat.com/browse/OCPBUGS-89652), [OCPBUGS-89986](https://issues.redhat.com/browse/OCPBUGS-89986), [OCPBUGS-90451](https://issues.redhat.com/browse/OCPBUGS-90451), [OCPBUGS-91082](https://issues.redhat.com/browse/OCPBUGS-91082), [OCPBUGS-92501](https://issues.redhat.com/browse/OCPBUGS-92501), [OCPBUGS-92964](https://issues.redhat.com/browse/OCPBUGS-92964), [OCPBUGS-93471](https://issues.redhat.com/browse/OCPBUGS-93471), [OCPBUGS-94893](https://issues.redhat.com/browse/OCPBUGS-94893), [OCPBUGS-96442](https://issues.redhat.com/browse/OCPBUGS-96442): Bump golang.org dependencies [#146](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/146)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/8faa079fe4ba90ca37e7112e4be8a77ccf221e77...22cfe3971df6bbe0bad8f2074b342c199e4de0f3)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/88f96c0e76c9724f3bfff13115fcf563e5bb7c61)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.20] [#407](https://github.com/openshift/prom-label-proxy/pull/407)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/3bc94eed432cacc37930aa4b0d8ff375e370cbbe...88f96c0e76c9724f3bfff13115fcf563e5bb7c61)


### [prometheus](https://github.com/openshift/prometheus/tree/4e4e87975898859c82c898ce40474990c86016aa)

* NO-ISSUE: synchronize OWNERS from main branch [#381](https://github.com/openshift/prometheus/pull/381)
* [Full changelog](https://github.com/openshift/prometheus/compare/6739fa4523d0b63948f4534d6643e3406dd5d2aa...4e4e87975898859c82c898ce40474990c86016aa)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/78fa7ff2b668081e391db866f0050d35a28e84da)

* [OCPBUGS-103946](https://issues.redhat.com/browse/OCPBUGS-103946): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#170](https://github.com/openshift/prometheus-alertmanager/pull/170)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/0bafd4edf6a8e758c8d6c2725554fa79fa9f94da...78fa7ff2b668081e391db866f0050d35a28e84da)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/da70230cf87874ce627cb036ec37ce27c79bdd9d)

* [OCPBUGS-103950](https://issues.redhat.com/browse/OCPBUGS-103950), [OCPBUGS-103952](https://issues.redhat.com/browse/OCPBUGS-103952): [release-4.20] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#395](https://github.com/openshift/prometheus-operator/pull/395)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/425294dded74054100db465d296b2aa76e7a691e...da70230cf87874ce627cb036ec37ce27c79bdd9d)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/65f4b5384b6c358217f732903794669dbc76fd6c)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.20] [#205](https://github.com/openshift/node_exporter/pull/205)
* [Full changelog](https://github.com/openshift/node_exporter/compare/fa749d65d8eca1cc937554baab91385a78ec8ce1...65f4b5384b6c358217f732903794669dbc76fd6c)


### [tests](https://github.com/openshift/origin/tree/36e5f07c6805241a2e0c09ba98695b277de87eaa)

* [OCPBUGS-117011](https://issues.redhat.com/browse/OCPBUGS-117011): Raise status polling timeout and write bound [#31596](https://github.com/openshift/origin/pull/31596)
* [Full changelog](https://github.com/openshift/origin/compare/a82af93dc94315ea8c675f39e898639a2fcabbf7...36e5f07c6805241a2e0c09ba98695b277de87eaa)


### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/751e25a535d3dfcac9b82c853d83ba1d9c158139)

* [OCPBUGS-103985](https://issues.redhat.com/browse/OCPBUGS-103985): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.3 [#20](https://github.com/openshift/volume-data-source-validator/pull/20)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/0e61642f8d898ee199e42f37319864851dd3627f...751e25a535d3dfcac9b82c853d83ba1d9c158139)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/6db4d0b24f3e5f2dda79b19db4ba2f5c220b5943)

* [OCPBUGS-96458](https://issues.redhat.com/browse/OCPBUGS-96458): Bump golang.org/x/net to v0.50.0-sec.4 [#197](https://github.com/openshift/vmware-vsphere-csi-driver/pull/197)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/a13af75662e0a1e16488f13424413585ef848692...6db4d0b24f3e5f2dda79b19db4ba2f5c220b5943)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/338db9fd11bd1300c5b6a891b0566cb3a9d92ce8)

* [OCPBUGS-103996](https://issues.redhat.com/browse/OCPBUGS-103996): Bump golang.org/x/net to v0.50.0-sec.3 [#354](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/354)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/13b68a91a148667d46bd06ad8fcb839be984671e...338db9fd11bd1300c5b6a891b0566cb3a9d92ce8)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/2502327678b6af2df0aab5fcd6a96e095d18b21a)

* [OCPBUGS-88024](https://issues.redhat.com/browse/OCPBUGS-88024): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#225](https://github.com/openshift/vsphere-problem-detector/pull/225)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/6e0056d58561f7945ebe903c2c070bbe6bc3a9c5...2502327678b6af2df0aab5fcd6a96e095d18b21a)