# 4.20.46

Created: 2026-11-05 22:52:40 +0000 UTC

Image Digest: `sha256:019e33519b843cdff82928d58bef4b0825b28411b2810a14225ee87cf188ab2b`


## Changes from 4.20.43

### Components

* Kubectl 1.33.3
* Kubernetes 1.33.13
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20261013-0 to 9.6.20261104-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [b22ad07b](https://github.com/openshift/assisted-service/commit/b22ad07bac5979e1691ccb19ded93a5bde8ef570) `sha256:33fb98ae7f6e2104c96bb6dd565274f3eb6f9b389e2295072bf505cb4ee477bd`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [6b65bbfa](https://github.com/openshift/assisted-installer/commit/6b65bbfaa7224f7c314fb946acac0cc236f90fe5) `sha256:9c567bbd4c572b4b6874a46847015135b4c2244900ce1b00e27c432c430a6201`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [522bb593](https://github.com/openshift/assisted-installer-agent/commit/522bb593b74550ecf61fc26fbcce5e35e72bf0b1) `sha256:6fe8646257df10460ffab6443fbd4987bd12f5567852568e7a734d668c106ec4`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [6b65bbfa](https://github.com/openshift/assisted-installer/commit/6b65bbfaa7224f7c314fb946acac0cc236f90fe5) `sha256:cc40761d34f609956d786fd258451c01d7da39e886fcdb3b286364b916882f21`
* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [614fe44d](https://github.com/openshift-assisted/assisted-installer-ui/commit/614fe44d7efeb390de35ecada97a1a9b1739c069) `sha256:2391c2a7fbe2a06d2358ae9196221f79cd87986d9715ccb6846cc3f9014a6f4a`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [e3e997d9](https://github.com/openshift/agent-installer-utils/commit/e3e997d9f7b84b134a07186de9bddde21598ae32) `sha256:751bca8f6d98442a7aa538e32cc2f782f17a135f1c43124c1ad1f764c81c8c77`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:69207d711e9328a43c1dc6f304c66309746b39e2c1277ddb2d9b5415487a095d`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:eca3162475aff4ffba6b291ebd119f59b3e97ec984d7c96f6d65322cbc95c444`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [6c99b973](https://github.com/openshift/aws-ebs-csi-driver/commit/6c99b973a6a5ca0202d56b87119714b9ec4a5365) `sha256:67d10e1d23f8d6d8a7ea55d3caa950177a9b6179a2383a740c3154cc74e37ac1`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:f651a44ab2d0798182c6bbe36f6943a9351b0a046f999b4154c814be4a664d98`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [0000b76a](https://github.com/openshift/aws-encryption-provider/commit/0000b76a838f6b56efcfecfa110bc6795d0f7746) `sha256:fa2fe46352c0c095c37fcfa551c102afe0f7602aee9dff967fbce413ffe2572a`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [5e418608](https://github.com/openshift/cloud-provider-azure/commit/5e418608ed55a11c32042f2a2049fc6381fbdecc) `sha256:c8f3a34022be89e67dc88f6b2ab5d34fbea5d09c9bda2bc29f30ebef8b7a7ed4`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [5e418608](https://github.com/openshift/cloud-provider-azure/commit/5e418608ed55a11c32042f2a2049fc6381fbdecc) `sha256:da21da3a0785b0611d7900c3a62431fb78b40cdc91accd508170c84feabf724f`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [b772189f](https://github.com/openshift/azure-disk-csi-driver/commit/b772189f1cf2f881052e7ff8d65d7338f16a72ac) `sha256:55d1ef12962c5cabbc504c4717abab603c596b78305314f4660de52a7e64346c`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [bdffa74f](https://github.com/openshift/azure-file-csi-driver/commit/bdffa74f61bbdaefccdd984541c0fd303810209e) `sha256:ec64017602d20d9c5535760ce947ef9e28f0c601a9742338946bead1c267822c`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [93423109](https://github.com/openshift/azure-kubernetes-kms/commit/93423109b69567eaef489f262d5c2b103dea9219) `sha256:542d6f339eab99916a862e903dfefe781450b9812bb876bf133c610da3afd150`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [a5949a16](https://github.com/openshift/machine-api-provider-azure/commit/a5949a16a99f5ec42c4e24ca13b67ef44de07535) `sha256:1aaeb16558404fde96fb0d1787c3014065fbb0c5318b898b7f87c9f0fafbb77a`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [d957de42](https://github.com/openshift/azure-service-operator/commit/d957de42c2e6255b79fcfe7aedac78eb746d92cc) `sha256:b8c34c5f63d25e2fb92feea165b3af9c564f32995030c94c669a7ce846c135db`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:9c20ab222cf98dd52bd0a8f9805b2d3648ce939203e24eab3c178929899e156e`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [f74f7d4c](https://github.com/openshift/baremetal-operator/commit/f74f7d4c30cb936e84c79bbc60a9f57660058e98) `sha256:5a5a9e31ae09f9782ecc31a81df5a4a3a0f65af96ffa4cd0c8dde144f506c2e1`
* [cli](https://github.com/openshift/oc) git [ef515cfb](https://github.com/openshift/oc/commit/ef515cfbef680d4040becc4a180afb7a195270a4) `sha256:01b1f0aa64d4673e2dbf79b8b6783e6368cb3651b3b6e80fc11927a202877411`
* [cli-artifacts](https://github.com/openshift/oc) git [ef515cfb](https://github.com/openshift/oc/commit/ef515cfbef680d4040becc4a180afb7a195270a4) `sha256:80c534bbad4969a62d8bc94ac34537ac10c145ee98da90a4e7d4ec6c0806805e`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [104d5d41](https://github.com/openshift/cluster-authentication-operator/commit/104d5d413a4d473b1bf280ffe546bf5c83bb8eda) `sha256:145dada694c6a757d1b7f57ad1bbfa5130275cceb7556acee20c08dfc29a11aa`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [e1745071](https://github.com/openshift/kubernetes-autoscaler/commit/e1745071d014cc54749c1305b6698c744c447b91) `sha256:4190152d369d4af34da0199b15a5bb0d342d3842b411f25924a55c3bfba70e46`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [d1311e1f](https://github.com/openshift/cluster-autoscaler-operator/commit/d1311e1f6a6c61c86c80e978681822156c6441fb) `sha256:2ef21a8956e20cf4e88f7c48b77f2e25a595cb4750806697ddc722760c62646a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:4bb000e914470f31e451bcaeb6059735c21c6ad33a5c50c7912858c8d39af24f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [dfeecf96](https://github.com/openshift/cluster-api/commit/dfeecf9616e049ac552f91a71b2a50cb0e96042c) `sha256:9fc237846237ebc7d0bcd1c97fa3add263e84d37b87cd2d0f8df256da8372322`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [4bd6d82d](https://github.com/openshift/cluster-capi-operator/commit/4bd6d82d21a2d201d9857ca1e26b21c70a648bf5) `sha256:ce344db21448c3282d543c2b4af0e8e618e88ed7e436a5176ef41261ea96651f`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [186f75cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/186f75cc7762080a0f327efe9dbad0d7a93ba442) `sha256:bde3795ec20aa741362faf706ab3aaeebdbf18bc5d0a3ac56e043ecfb25531b1`
* [cluster-config-api](https://github.com/openshift/api) git [b32f49f8](https://github.com/openshift/api/commit/b32f49f8a70985c6ad9abb2dc579abc18d143051) `sha256:27bdab9441097f21857b467180c5c8fccfab374657f38b80b8d77d99ed895a6e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [e98c3375](https://github.com/openshift/cluster-config-operator/commit/e98c33756e5f023f3244cb58c3fb878b87ba2781) `sha256:f278f7daee3113d58d1f2b6d02fe7a6326ae90b41568647e0571613112f37703`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [32546df9](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/32546df9054ebbec1055344f8cad25254049df50) `sha256:54ba02f2e3d02e77bb1e530daa69daf49e554ca753991bb3ef61911348e3228e`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [8b96b8d5](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/8b96b8d58079376b3e56062e724581d1714e2a50) `sha256:8d66e18d18d6124bdcac8dcbec94041c89801422dbb952baa0356b13be8d747e`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:07a8246cd94eebf955415ea38fa52fcc722550758770a134a019d4fe1bb16174`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [8e4c40f1](https://github.com/openshift/cluster-ingress-operator/commit/8e4c40f161d8341d640659ca2779a4294960c183) `sha256:6aba2dc1164aab68d63b45ad89a94077037e2b413acb789366b9c80ac2e3627d`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [adaae0d4](https://github.com/openshift/cluster-api-operator/commit/adaae0d4e6d7a0e466e7e86af399de0b828c8b81) `sha256:4e1e1da8f5649fbf751ac8472f1bc1fef0eee17a360225f76826d72fa0896c35`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [da4be9f7](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/da4be9f7565b625c60ceb7a95b1e14ada78fbd1f) `sha256:ee9211b14b524b1a891bf04e1646b915319ab66a6f22b90d237ff3891515d5ea`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:61ae4ec101b62ac8b6de43c398bd80081efcb3e84b1c0aa6c00433297d98bbb5`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [c491d1ae](https://github.com/openshift/cluster-node-tuning-operator/commit/c491d1ae719221fdb0031fe7f071a787274f7883) `sha256:51426ca11d9bb37f80ca9db5ac63f473913c70346a4f4b221add11ba258da5d3`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:108ad07ba2aa1215761cc1c1a0efac9b7b45ee7ff41dbdbb723f64e63dd20efe`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:9748792a5741d0694173c934444ecceed080212092595174af8175c70d3c043d`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [747d5cbd](https://github.com/openshift/cluster-storage-operator/commit/747d5cbd21adc965a33b1c262195788b05aa0005) `sha256:58cff40b0c8a90bc4a99048fc0cf244f6a8fed2ee32a1e3ddbfa58722fa7d324`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:3ba431aaf5a7afb87b92047c9c0efa8adb27b421d40ecc0df65e51e5bafb2e36`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [2470ccb0](https://github.com/openshift/cluster-version-operator/commit/2470ccb013067b6e40575f858866e60ed650337f) `sha256:880a7ad2b4fe799c35ae588481b41ff036bce0144b415494e140b1cee4faf79b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:188701b390a52b89ff961435437e613533ec7d36964ee3a5802b6d3695cdb022`
* [console](https://github.com/openshift/console) git [6f1b8f5c](https://github.com/openshift/console/commit/6f1b8f5cf267bfc1ca41d1c8fa7ab23d0699701f) `sha256:1972ab57b5f4910c25b2eeb7d6bc8f0b5e9a0089a10fe477200b8014014472b2`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:4c3a888fca2c54d180404bc12f344b1600c129fb540548823018673a8913ace9`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:8fa11a665a70d2fe1e18a1758c9e2cc24bbdeb94df23922135443287a8cd52f4`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [f204d3ac](https://github.com/openshift/cloud-provider-openstack/commit/f204d3ac38736d82a1b832624aa760b9a5d70288) `sha256:6fba08f19a873dbb4b6ef45aa4c1d5fb444b1ccdeed1a51e74beb810b1bf0d96`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [c4cdae44](https://github.com/openshift/csi-driver-nfs/commit/c4cdae44ef7c33e4b7ce06a3b599a8bc0707bff7) `sha256:24b495e53aec513649ddd17344ef40a9a127009ae55acd952526e2806bc94f6a`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [2a474861](https://github.com/openshift/csi-external-attacher/commit/2a474861e4db0c9af08d0c0da2f3ffd2a92a27c2) `sha256:71eee553889090c7a6c7a344e59f5e3e0ae22bc9cfeea74c807ad0aee319eb84`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [e94a54ea](https://github.com/openshift/csi-external-provisioner/commit/e94a54eab40ad4d4ead75953358fb1970429eb4c) `sha256:6c7c943b718a476301752131131d35d4f2fee60edf58f0037cf1c4affe5ed7a0`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4835292f](https://github.com/openshift/csi-external-resizer/commit/4835292fe73b956b6a350373a45fb0877dd705b7) `sha256:6149877c53ac5bb7b4ebd16ce7535cd690cd44f3b956c4b4b8535636fbd0e96a`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [3dd8a0f8](https://github.com/openshift/csi-external-snapshotter/commit/3dd8a0f87f86529682b449a6b9e19e9ee8d2d5d4) `sha256:47e1006ff3a07b4df2ce251126003804ee6836c71f467a84a062590c9f034129`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:355eac4dfd8450957755889b9c949051b5f5c2ffb3097abba91b327c09c0df58`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [3dd8a0f8](https://github.com/openshift/csi-external-snapshotter/commit/3dd8a0f87f86529682b449a6b9e19e9ee8d2d5d4) `sha256:e5584fec04c14a2d41144324e6b4919bb9f851d8794aa9e283908d1f06d1f004`
* [deployer](https://github.com/openshift/oc) git [ef515cfb](https://github.com/openshift/oc/commit/ef515cfbef680d4040becc4a180afb7a195270a4) `sha256:deb87f43975659047260640d653c337f17271d732c81d03facbd93f25045eb54`
* [docker-builder](https://github.com/openshift/builder) git [18885748](https://github.com/openshift/builder/commit/18885748e09ecf986d8ab0fc3a0fd2440cb7b51f) `sha256:815244e6363f87de66a549a9bfb1b20476ac49e42b14457afbec4ad1ff2728d0`
* [docker-registry](https://github.com/openshift/image-registry) git [5098eb6e](https://github.com/openshift/image-registry/commit/5098eb6e0004b9be26770925a42bc51bc47cf485) `sha256:dcf7c8b890885969fbcb3660929f72e3c537b0ed00058232122ff68f91cfb529`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [62e1f604](https://github.com/openshift/driver-toolkit/commit/62e1f6040cd297149f5f14e0d20814759ec61354) `sha256:f19e1a3ca2fd79e919529f37941edbb2b399084dd826f08e4ca8a77070fd9e54`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [cfcc6c44](https://github.com/openshift/egress-router-cni/commit/cfcc6c44a9aacf48585dbe6618e5561f6c55666a) `sha256:23d5e820e1699e4b0bd932d1d59bab99277bcb94964e7a78bd7a5103123a0d46`
* [etcd](https://github.com/openshift/etcd) git [05bca977](https://github.com/openshift/etcd/commit/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709) `sha256:473ca0408e430bc32af64cf30c4006ea7f1da18625843dc6604c5a862583111f`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [43012447](https://github.com/openshift/machine-api-provider-gcp/commit/430124471dc855f135f8e9d4256ee3930c0037a0) `sha256:b29dac6a3fb27b9026554543fb132030b879bd7d89b3c3abc41f97373c8a2fc0`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [e68f2e86](https://github.com/openshift/gcp-pd-csi-driver/commit/e68f2e86578ecca315686574959f9d10087a06da) `sha256:c6d945c95234b1345afed5226fef8a4169f61a048789c5b13433dda97ba93a96`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [fc495ba9](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/fc495ba97cccd2901ac29dc7d0922fa8dd4f4e21) `sha256:462a385319a1a8a33510b1d3c686b0ee5dd89019d0269eec645c14a963720440`
* [haproxy-router](https://github.com/openshift/router) git [0fec034e](https://github.com/openshift/router/commit/0fec034e28f1f44ed75dcc1ab96f7135fd9beb49) `sha256:bbb127cbd09744488aa4ef8c19922074e0d443d29b001b7418276867c572ed8e`
* [hyperkube](https://github.com/openshift/kubernetes) git [8008e652](https://github.com/openshift/kubernetes/commit/8008e652cb56e8fb34e76d0736973b3e99816fb0) `sha256:6aa8470a52fc6676db14f2fdd5abcd91950445699350ecdb2d0a973771a4e82e`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [15617bf4](https://github.com/openshift/cloud-provider-ibm/commit/15617bf4c124e55a75bccd4a4ce329a48011780e) `sha256:fea11c205556dbd94e43d2f31896c08314ab3b02faf04e6ec200f9196e42a290`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [0d2143b7](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/0d2143b7aaaf2047e9578fb3ae41f89267d4b1bc) `sha256:fa126723ceb010f0867603ed7602b0d7303414a4e710cb9a1db1ed972858728a`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [8918d86f](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/8918d86f8ec63f27a8c0ceec94c467a553f498a4) `sha256:b0c9137ba3bb0e568830f77f62be7db91051cbf40372ef7c84c9d2305d2451fd`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [734ed88a](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/734ed88aef0de0c76f14aed7866f934d4a24e645) `sha256:90dc4e9e5b0449443684328233729c9034c6d424f3766bcb1a1f794942fa187e`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [4bccd47c](https://github.com/openshift/machine-api-provider-ibmcloud/commit/4bccd47c2a10f319bae4e1666767d02b40cb604f) `sha256:0e4a2ac282cb9ed2587e6d59266fd45d169d6132980e6ef2abf590efb6566ed9`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [5cceaa37](https://github.com/openshift/ironic-agent-image/commit/5cceaa3796a6a83b56b83942fede7ba4859cc16f) `sha256:4b34c4d6cf9cddcb9c9d231a394a0f4c04c5eee0e89f223c844328f4c2e88feb`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:18aab0741b86130e97c2dd4c0a77134a7601019858a61d576bff2fa515a14a1a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:7ba5d63554bcab051db73068fee4be8068c05cdd4ae19bbec8f260d2ccbe7e0a`
* [keepalived-ipfailover](https://github.com/openshift/images) git [41114715](https://github.com/openshift/images/commit/4111471533cb072b6aab4a1ac4d523915f8abef1) `sha256:e299c1308c572ba1480f20be8e0800c8b523605bb86b4264161a3cadb5fac386`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [fe7f9ad7](https://github.com/openshift/kubernetes-metrics-server/commit/fe7f9ad72976fc21363f2cf4fa511c8a4ec868af) `sha256:37c0aacb0279ae4865d97a3160e9c164cd6792cd9aa1db81ec6e563f5d83486a`
* [kube-proxy](https://github.com/openshift/kubernetes) git [8008e652](https://github.com/openshift/kubernetes/commit/8008e652cb56e8fb34e76d0736973b3e99816fb0) `sha256:294243a168f35dbeb85ad5537fb442edfdb876b6603c17082fbb42b184514c77`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:4101005a94d6b6143ebf796bf0b6848e0bb14a4db02ca2d2689a41b3de9968c4`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [d9a04bd9](https://github.com/openshift/cloud-provider-kubevirt/commit/d9a04bd9046ab1418d83c7bfb7891f49d8429d20) `sha256:4d9dd580a71a838a3ce20e588247c1a30add73c11295251988a4493c8a7453c3`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [6c353bb1](https://github.com/openshift/kubevirt-csi-driver/commit/6c353bb1eb5a021c9e845eac839ce85e95a9fede) `sha256:2ae2563aea4591fa9dce2c91ef845f1a7ee5705efc7954a7245dcf607a1559f0`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [146f6c59](https://github.com/openshift/image-customization-controller/commit/146f6c59031e5e1108bdb82706d317407f78fae4) `sha256:3d9f5e767098fa6ab2373003222d25645af68d566060708626873f0de290753b`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [5da52107](https://github.com/openshift/machine-os-images/commit/5da52107b36e002d56e5e82f4b2cd496b1c4ec7a) `sha256:2213ebc153571596071d6e6c728e97af523213d72cade41d4a0327832d18f292`
* [metallb-frr](https://github.com/openshift/frr) git [3ca45c51](https://github.com/openshift/frr/commit/3ca45c517eafe07aac0866e5cbd32a5c08081f22) `sha256:7f7d69116f4ffea2154b773b0d21c9d010485fb925538656dd5e3ee4a72b529c`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ebfa14aa](https://github.com/openshift/multus-admission-controller/commit/ebfa14aacee2b064040b6e81d26a40ae65a6b376) `sha256:f09ef64a1353ff3c7d779074395cffcaed421271a8b0ebac0b759e02a6a41717`
* [multus-cni](https://github.com/openshift/multus-cni) git [ff2e64e1](https://github.com/openshift/multus-cni/commit/ff2e64e16f3729c0dc370d570295f8ab5cc8c576) `sha256:b33200cdf3a7ab14679f798c91cfea81be6c20781f6349ff383c537fa40438a9`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [ff2e64e1](https://github.com/openshift/multus-cni/commit/ff2e64e16f3729c0dc370d570295f8ab5cc8c576) `sha256:e4d4bbd2c6efd7f5e246ad83b60d2579804afebf3e8587f2bdf0cd304b87bdb8`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:da7fd2290797131cde1fcb0e58ead28d70e637dd1fdb5c4996b883dfbc0a2afe`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [a36aafcb](https://github.com/openshift/whereabouts-cni/commit/a36aafcb6328c54c8af707ad89ae01ee00778d87) `sha256:5dc339f7d6b1208e5bd9644f1196154bb6542ff26cbf7a964236ec760bfb8de3`
* [must-gather](https://github.com/openshift/must-gather) git [6b2eea0d](https://github.com/openshift/must-gather/commit/6b2eea0d83ca1f05f9032d66be1c2ee80cfa1459) `sha256:a0b073b66792957d93bde771469cfa3cb10598300c1fbc3fab5e70ee5f74ccd0`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:306724ac4a2c6bf1ef45bfeadda7207ce4ad115837a64535feebf955d9ebbbb0`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [356bd40b](https://github.com/openshift/network-metrics-daemon/commit/356bd40b74ec289b7052267a9848c91c80a32708) `sha256:2452743855171e5cf097717bda5bd8664eb42ee6940bba428362f519a6e70a5d`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:98565e59845268505bd343776ab9d6e79c27254845ac10d4a9342d14fce765f0`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:a6d1ce8ab5d1d182f417fb6041ed8c4a1a1526bdeb7bef90273b1437add975eb`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [2b10b789](https://github.com/openshift/oauth-proxy/commit/2b10b7895a5f16e216c5eaea6dbe8f830f9b69c0) `sha256:95fc8aff929881076d6a9f974d70f9652ec532671ce1992f516254350a7f711e`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [9786cf2e](https://github.com/openshift/oc-mirror/commit/9786cf2e90c1dbf504b528d83142e946339f9d5d) `sha256:21854ff73f998f42bc458d634f80b78335d96d4612361ba7779f7307a7fd429a`
* [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [30b46d6c](https://github.com/openshift/operator-framework-operator-controller/commit/30b46d6cf509fe0f6879cc2699acd51f940068b6) `sha256:6bc486d9f972eb015674470f2ce6dc602c82a629e5d749e5d429001a484a4c49`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [30b46d6c](https://github.com/openshift/operator-framework-operator-controller/commit/30b46d6cf509fe0f6879cc2699acd51f940068b6) `sha256:019b8d08aabfb433e8a2dcba77a4b4dfaa1cfd397f7bdb63f829c11226aa648e`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [eda815e0](https://github.com/openshift/openshift-apiserver/commit/eda815e0515550890354dda41e65f8dd35e15ad5) `sha256:422b7c827eb8864fa7c241c19bd1a84650d02a5890d865c4a01222e00ffa1994`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [f204d3ac](https://github.com/openshift/cloud-provider-openstack/commit/f204d3ac38736d82a1b832624aa760b9a5d70288) `sha256:1d51b044ec991a28a524b5f3bd19fcd1557e268cf81289f41620e276e53c312f`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [f204d3ac](https://github.com/openshift/cloud-provider-openstack/commit/f204d3ac38736d82a1b832624aa760b9a5d70288) `sha256:4134836315259abd5c37c12a9debcfc99c41fa2d4e5e5789ba66334042b0d983`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [c91265ed](https://github.com/openshift/cluster-api-provider-openstack/commit/c91265ed4f82c0b36fbfc50040b8180f04fcf4cc) `sha256:a6d5d0fa835c4c8788e853e36fb1b2ae9cb4869df8be1fcc1137bf4a23bcf8ad`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [02e56026](https://github.com/openshift/machine-api-provider-openstack/commit/02e56026c3a2628c8a5115f4f5bc2bb3514ef6c3) `sha256:b097a3ab8a1914c8f63665af04f973018956a80550a4ae9b4a494b8be2644336`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [410e1667](https://github.com/openshift/openstack-resource-controller/commit/410e166761baffc21be3df02fff49933a3c9b5e2) `sha256:c6cfe45c41e603a0a0edb89c712c97fbd33ab79e5f7aa3cf5f79af1427414cf7`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [e1d090d1](https://github.com/openshift/operator-framework-olm/commit/e1d090d165aa3e31de614b18da7cf4dd2f6976f6) `sha256:54f2008b0bf3884814594feec9ee61b1b5693817a13665d2858fc443efe18436`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [e1d090d1](https://github.com/openshift/operator-framework-olm/commit/e1d090d165aa3e31de614b18da7cf4dd2f6976f6) `sha256:77d7a92f4916dbfa823d18e547e890692d36b3b65d955712ce8d047502ddbcd8`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [4ccd56c9](https://github.com/operator-framework/operator-marketplace/commit/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf) `sha256:510591ef77d41da619d48047cea3b1816ae03061b632eba037369bb581264f69`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [e1d090d1](https://github.com/openshift/operator-framework-olm/commit/e1d090d165aa3e31de614b18da7cf4dd2f6976f6) `sha256:9535ea90f7a8b1a7b21419907a30496472ca98d69fdde32a7913c79c2e5a6fed`
* [pod](https://github.com/openshift/kubernetes) git [8008e652](https://github.com/openshift/kubernetes/commit/8008e652cb56e8fb34e76d0736973b3e99816fb0) `sha256:27eda8592c0a99b23043e8d90945c7a675d2688214ae752b15de2323f9e45de0`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [22cfe397](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/22cfe3971df6bbe0bad8f2074b342c199e4de0f3) `sha256:3eff2b8f1947cf08cea93e63803c1508b83b898cd92836eaaba07cf0c5352966`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [d634e80b](https://github.com/openshift/cloud-provider-powervs/commit/d634e80b52e7ecb087163eb5927450dc884e24df) `sha256:fb7420af0d9de9477abf382cd65c599e1874d7de3dc4eebe008fb04982504f2c`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:4b7ea05bd102a53037f80cc5d7400edcbcdb0f8a31dd82adb3ab8d559ea6534c`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [88f96c0e](https://github.com/openshift/prom-label-proxy/commit/88f96c0e76c9724f3bfff13115fcf563e5bb7c61) `sha256:9882874540cc9bcb5c8be5d6092b2d708a89c2c6e843c22cd01fdf3ef20880ce`
* [prometheus](https://github.com/openshift/prometheus) git [4e4e8797](https://github.com/openshift/prometheus/commit/4e4e87975898859c82c898ce40474990c86016aa) `sha256:a4adc4af0102be7b0a54c1d087e210d4f42c4032a20cb03fc34ae493acf12372`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [6cca226e](https://github.com/openshift/prometheus-alertmanager/commit/6cca226e4a93d8850b7533cae491820483e2e635) `sha256:23b9713f9eb3a7c64af54d21ebcbfeccc390534fd66e2799b4b310af4a132d26`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [15349697](https://github.com/openshift/node_exporter/commit/15349697650c543d855812152ca0d598b7e2f324) `sha256:4e390d5380b356ef51639d44daba6f66b02f61a3ae7d539e114aa95f87b938d8`
* [rhel-coreos](https://github.com/openshift/os) git [847b7d8c](https://github.com/openshift/os/commit/847b7d8c3b60f60e86f1de0b7efebb746c75d1bc) `sha256:6b2fcf360ceed007712488f5ed2a9e1ae007d2497b265bca79ff66e1d3ab2301`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [847b7d8c](https://github.com/openshift/os/commit/847b7d8c3b60f60e86f1de0b7efebb746c75d1bc) `sha256:d521d98338f921de4419594806880334336f0cb2d0ab5fdbce7cda0557b859fa`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:54814d03101a1e14dab05565834010d6f7b819f066a2543ee85607a10faad94e`
* [telemeter](https://github.com/openshift/telemeter) git [d07a8330](https://github.com/openshift/telemeter/commit/d07a833015fe91fe2df12589a6877dde15e9a227) `sha256:fb36ca0b87c5ed102becb2e36191a0586810bdc29c9a6932496698919e47a500`
* [tests](https://github.com/openshift/origin) git [19943752](https://github.com/openshift/origin/commit/19943752c85ac692bcd067c87562b133d2aa5f8e) `sha256:7fe20d2f810c9eb1254898f78aca44999bc126f02cae9f8748eaae3716d03190`
* [tools](https://github.com/openshift/oc) git [ef515cfb](https://github.com/openshift/oc/commit/ef515cfbef680d4040becc4a180afb7a195270a4) `sha256:c71c1c52fbc5b1c03f7c36fad0126a1e93121f32f8bfb5aa733e115bc1d9c2bd`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [751e25a5](https://github.com/openshift/volume-data-source-validator/commit/751e25a535d3dfcac9b82c853d83ba1d9c158139) `sha256:ff690e89e82f159d0e07f029368c24d1f0ef94bfa1608e7f7e88ba278301fdb4`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [6db4d0b2](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6db4d0b24f3e5f2dda79b19db4ba2f5c220b5943) `sha256:a8df6bfe149213ab310476cf4df810ad323993ca73c43ed553dd42d3abb89bdd`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [338db9fd](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/338db9fd11bd1300c5b6a891b0566cb3a9d92ce8) `sha256:be250fb4258b5ff547b9e8a13c0d045b14460b2a4fb94ca0eae88bc86e63b70e`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [6db4d0b2](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6db4d0b24f3e5f2dda79b19db4ba2f5c220b5943) `sha256:8c648a02595e24093edbb12c2f7481638e24e531f6fd7381f4bba10ce3f2fcb6`


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5e78b74744f05007233cd1ea957d842ad2eca479)

* 🐛 OCPBUGS-134665: UPSTREAM: 6132: Persist ProviderID immediately after instance creation [#666](https://github.com/openshift/cluster-api-provider-aws/pull/666)
* [OCPBUGS-81942](https://issues.redhat.com/browse/OCPBUGS-81942): Bump go-jose/go-jose/v4@v4.1.4 [#611](https://github.com/openshift/cluster-api-provider-aws/pull/611)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/d15085ec82d1b3692b8aa451cc06e2872cc9ec3a...5e78b74744f05007233cd1ea957d842ad2eca479)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/1a773c6c2789fcd3a89f1c057eadc095ffd79495)

* [OCPBUGS-103853](https://issues.redhat.com/browse/OCPBUGS-103853), [OCPBUGS-103932](https://issues.redhat.com/browse/OCPBUGS-103932), [OCPBUGS-103973](https://issues.redhat.com/browse/OCPBUGS-103973): replace golang.org/x/net with openshift-sustaining fork [#634](https://github.com/openshift/csi-operator/pull/634)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9577298b014d014dc42eabb4b8f9b8957146d188...1a773c6c2789fcd3a89f1c057eadc095ffd79495)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/66bcb1d8b04e230560bd36e0474724368b987588)

* [OCPBUGS-103908](https://issues.redhat.com/browse/OCPBUGS-103908): CVE-2026-33814: Bump golang.org/x/net to openshift-sustaining/net v0.50.0-sec.4 (release-4.20) [#200](https://github.com/openshift/machine-api-provider-aws/pull/200)
* [OCPBUGS-103908](https://issues.redhat.com/browse/OCPBUGS-103908): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#207](https://github.com/openshift/machine-api-provider-aws/pull/207)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/999f4f76124e66c7b42af678cb19aff4b29f72d4...66bcb1d8b04e230560bd36e0474724368b987588)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/10def27476a4090f465821a813c199143625fbb2)

* [OCPBUGS-103812](https://issues.redhat.com/browse/OCPBUGS-103812): Bump golang.org/x/net to v0.50.0-sec.3 [#223](https://github.com/openshift/aws-pod-identity-webhook/pull/223)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/8e83772ab8d31b32225744d4f0b0023680692daf...10def27476a4090f465821a813c199143625fbb2)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/2cbae827014d4c8a543673648c22abf30c852d1d)

* [OCPBUGS-133111](https://issues.redhat.com/browse/OCPBUGS-133111): Carry VM Reapply recovery [#423](https://github.com/openshift/cluster-api-provider-azure/pull/423)
* [OCPBUGS-103801](https://issues.redhat.com/browse/OCPBUGS-103801): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#403](https://github.com/openshift/cluster-api-provider-azure/pull/403)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/5a127871523fc21f02f93a26d1e3113075fb3b78...2cbae827014d4c8a543673648c22abf30c852d1d)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/9c6d9c55952705d21f12a2d5e3d1585c1e70a7b3)

* [OCPBUGS-103815](https://issues.redhat.com/browse/OCPBUGS-103815): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#61](https://github.com/openshift/azure-workload-identity/pull/61)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/357712a65437ea3329a8d8a62cf64d27a70dda12...9c6d9c55952705d21f12a2d5e3d1585c1e70a7b3)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/8a7a1f56333d25451bc6154b3efc503fd2aa4313)

* [OCPBUGS-87816](https://issues.redhat.com/browse/OCPBUGS-87816): [release-4.20] Add omitempty to vSphere and Nutanix MachinePool slice fields [#10608](https://github.com/openshift/installer/pull/10608)
* [OCPBUGS-133958](https://issues.redhat.com/browse/OCPBUGS-133958): Update RHCOS-release-4.20 bootimage metadata to 9.6.20261027-0 [#11031](https://github.com/openshift/installer/pull/11031)
* [SPLAT-2867](https://issues.redhat.com/browse/SPLAT-2867): Add vSphere multi vCenter Day 2 support [#10880](https://github.com/openshift/installer/pull/10880)
* [Full changelog](https://github.com/openshift/installer/compare/2e8ea2343906df8076f8879451ab5b5fd5e64537...8a7a1f56333d25451bc6154b3efc503fd2aa4313)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/d7df35a05f9e345f3662105453b50d9c9fac5732)

* [OCPBUGS-103820](https://issues.redhat.com/browse/OCPBUGS-103820): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#266](https://github.com/openshift/cluster-api-provider-baremetal/pull/266)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb678fec5f7e08348b281341481f33a848204e50...d7df35a05f9e345f3662105453b50d9c9fac5732)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/90df78abccd30bbe649c4d59ff7ebd500b6bee33)

* [OCPBUGS-103819](https://issues.redhat.com/browse/OCPBUGS-103819): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#406](https://github.com/openshift/baremetal-runtimecfg/pull/406)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/5e602ba702420d0f30cee175f51fff83e00c1b5b...90df78abccd30bbe649c4d59ff7ebd500b6bee33)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/ae7b348cef0c8869db96875033bd84bfa4f9bab2)

* [OCPBUGS-103822](https://issues.redhat.com/browse/OCPBUGS-103822): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#1098](https://github.com/openshift/cloud-credential-operator/pull/1098)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c6a7e1a6b84b964531d6c842f362f664dd777746...ae7b348cef0c8869db96875033bd84bfa4f9bab2)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/3094ce06fdd0a210eae42a615673cb34ad82825c)

* [OCPBUGS-103779](https://issues.redhat.com/browse/OCPBUGS-103779): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#269](https://github.com/openshift/cloud-network-config-controller/pull/269)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/67851403b248cc93649d3734606d0ebdbf2ed076...3094ce06fdd0a210eae42a615673cb34ad82825c)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/eb48a237cccc158d626decd1ded5a27c78aa440b)

* [OCPBUGS-103828](https://issues.redhat.com/browse/OCPBUGS-103828): Use patched x/net fork v0.50.0-sec.4 [#675](https://github.com/openshift/cluster-baremetal-operator/pull/675)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/17181f99343a5b1fb08af8a7994ad3e9eecc6c1e...eb48a237cccc158d626decd1ded5a27c78aa440b)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ae484139f2e7b093cc97784e4382eba84a247bdc)

* [OCPBUGS-103832](https://issues.redhat.com/browse/OCPBUGS-103832): Use patched x/net fork v0.50.0-sec.4 [#497](https://github.com/openshift/cluster-dns-operator/pull/497)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/82578923164636746e0d74d594ab32d83a660c0b...ae484139f2e7b093cc97784e4382eba84a247bdc)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/19e381df1b5b98ce714247c7feb18954c815fa06)

* [OCPBUGS-103831](https://issues.redhat.com/browse/OCPBUGS-103831): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 [#1693](https://github.com/openshift/cluster-etcd-operator/pull/1693)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9acf049b2985339275796f69a2a8acad47726a29...19e381df1b5b98ce714247c7feb18954c815fa06)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/3915db668832c6d730f0ba4fe87604564204ff46)

* [OCPBUGS-103840](https://issues.redhat.com/browse/OCPBUGS-103840): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#2297](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2297)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/91b9bf68d7dd8c81b19f120bc4ac73956ecd850e...3915db668832c6d730f0ba4fe87604564204ff46)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/6a8f72baf4f6cce052fed660343de13854197cd2)

* [OCPBUGS-103846](https://issues.redhat.com/browse/OCPBUGS-103846): [release-4.20]  Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#667](https://github.com/openshift/cluster-kube-scheduler-operator/pull/667)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/84eb8c5a73a730d6d08794e51da9c20013ca4304...6a8f72baf4f6cce052fed660343de13854197cd2)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/13761f7ad5ea3888f68846654d8080086b2e1e3b)

* [OCPBUGS-135047](https://issues.redhat.com/browse/OCPBUGS-135047): Fix expired test certificate in csr_check_test.go [#347](https://github.com/openshift/cluster-machine-approver/pull/347)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/b3c82b2eec66ae3ae510df0603af1212c34be618...13761f7ad5ea3888f68846654d8080086b2e1e3b)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/258e23985f0293e644ecaba76559745ecdead997)

* [OCPBUGS-129138](https://issues.redhat.com/browse/OCPBUGS-129138): don't delete admin-owned Alertmanager secrets on destroy [#3140](https://github.com/openshift/cluster-monitoring-operator/pull/3140)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/500cc1b0401e08ee61eb3c0fe4507e1a76068ed3...258e23985f0293e644ecaba76559745ecdead997)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8186dacc5fe87d25dd90351375e37aabb13f8b00)

* [OCPBUGS-103851](https://issues.redhat.com/browse/OCPBUGS-103851): [release-4.20]  Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#3157](https://github.com/openshift/cluster-network-operator/pull/3157)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5a60886d1e93a65bc7359ed1de4d7d2d47007d3d...8186dacc5fe87d25dd90351375e37aabb13f8b00)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/5ae23e8feaefc37dec59b76a8ba7c825e780ed7a)

* [OCPBUGS-103850](https://issues.redhat.com/browse/OCPBUGS-103850): bump golang.org/x/net to v0.50.0-sec.3 to fix CVE-2026-33814 [#243](https://github.com/openshift/cluster-olm-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/d01cc083748864e3c8dcc72fb75516492dec3555...5ae23e8feaefc37dec59b76a8ba7c825e780ed7a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/debe523c1edc20e080a44afc9e8699ce3ab15599)

* [OCPBUGS-103864](https://issues.redhat.com/browse/OCPBUGS-103864): Bump golang.org/x/net to v0.50.0-sec.3 [#200](https://github.com/openshift/cluster-policy-controller/pull/200)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/67083fab6cea4dde724efd5be5a22bda1f8437d1...debe523c1edc20e080a44afc9e8699ce3ab15599)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/675e7a9c4d9695107ff64f78425def5ced9d5b76)

* [OCPBUGS-129478](https://issues.redhat.com/browse/OCPBUGS-129478): Restrict samples operator access to the global pull-secret [#729](https://github.com/openshift/cluster-samples-operator/pull/729)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/b343f70f19ffd559e1a81d3a3e65bd106e634c13...675e7a9c4d9695107ff64f78425def5ced9d5b76)


### [console-operator](https://github.com/openshift/console-operator/tree/1bf2540012b038b39560b6d86f4595664a41f7bb)

* [OCPBUGS-103860](https://issues.redhat.com/browse/OCPBUGS-103860): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#1221](https://github.com/openshift/console-operator/pull/1221)
* [Full changelog](https://github.com/openshift/console-operator/compare/75a6c0644907549642dd9d05ac451810f034385c...1bf2540012b038b39560b6d86f4595664a41f7bb)


### [coredns](https://github.com/openshift/coredns/tree/6c72c97daf9c64684998a255ae03bec0981c4ab8)

* [OCPBUGS-103861](https://issues.redhat.com/browse/OCPBUGS-103861): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#203](https://github.com/openshift/coredns/pull/203)
* [Full changelog](https://github.com/openshift/coredns/compare/6f39336e6da9dc77b2db140a96773c413d50a665...6c72c97daf9c64684998a255ae03bec0981c4ab8)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/cb58afc56702353526ec106f7700fa8cc1b173aa)

* [OCPBUGS-80614](https://issues.redhat.com/browse/OCPBUGS-80614): Bump google.golang.org/grpc to v1.79.3 [#21](https://github.com/openshift/csi-external-snapshot-metadata/pull/21)
* [OCPBUGS-103868](https://issues.redhat.com/browse/OCPBUGS-103868): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#34](https://github.com/openshift/csi-external-snapshot-metadata/pull/34)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/693a826455777eaafc677bb2195dc071d184243b...cb58afc56702353526ec106f7700fa8cc1b173aa)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/b750dbd3cff8806e10e6752896e969b37ab1f1c9)

* [OCPBUGS-103865](https://issues.redhat.com/browse/OCPBUGS-103865): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#109](https://github.com/openshift/csi-livenessprobe/pull/109)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/1d6d6b27460e58f24110c72ec9c96afe2c1d891d...b750dbd3cff8806e10e6752896e969b37ab1f1c9)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/9502c2e8ce2676e010e8a0f29a8ec7dace70f821)

* [OCPBUGS-103881](https://issues.redhat.com/browse/OCPBUGS-103881), [OCPBUGS-103993](https://issues.redhat.com/browse/OCPBUGS-103993), [OCPBUGS-88254](https://issues.redhat.com/browse/OCPBUGS-88254): Replace golang.org/x/net with sustaining fork for CVE-2026-33814 [#163](https://github.com/openshift/cloud-provider-gcp/pull/163)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/d4bfe3cf78550cf6eabde8714d44b7c69a6a0652...9502c2e8ce2676e010e8a0f29a8ec7dace70f821)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/0a7a3c4c2e65bd44f97eb0b7e59fe8a493b3e09c)

* [OCPBUGS-103883](https://issues.redhat.com/browse/OCPBUGS-103883): Bump golang.org/x/net to github.com/openshift-sustaining/net v0.50.0-sec.4 CVE-2026-33814 [release-4.20] [#318](https://github.com/openshift/cluster-api-provider-gcp/pull/318)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/74e2389011d640a371c0acb6ff71b1582cab23a1...0a7a3c4c2e65bd44f97eb0b7e59fe8a493b3e09c)


### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/d0793256ac4fb2f249ad78f4873d44d4ea0079fa)

* [OCPBUGS-103888](https://issues.redhat.com/browse/OCPBUGS-103888): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#24](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/24)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8...d0793256ac4fb2f249ad78f4873d44d4ea0079fa)


### [hypershift](https://github.com/openshift/hypershift/tree/1d2444baf19254d21641d9d7a434e67b08aa1bde)

* [OCPBUGS-129444](https://issues.redhat.com/browse/OCPBUGS-129444): Prevent infraID and clusterID removal via parent-level CEL rules [#9927](https://github.com/openshift/hypershift/pull/9927)
* Sync approver aliases with main for release-4.20 [#10187](https://github.com/openshift/hypershift/pull/10187)
* build: [release-4.20] ACM-45149: Migrate Go builder for hypershift-cli, hypershift-release [#10070](https://github.com/openshift/hypershift/pull/10070)
* [CNTRLPLANE-3774](https://issues.redhat.com/browse/CNTRLPLANE-3774): fix: control-plane-operator: improve opaque conditions [#10060](https://github.com/openshift/hypershift/pull/10060)
* [OCPBUGS-130864](https://issues.redhat.com/browse/OCPBUGS-130864): filter AWS-reserved tag keys before calling DeleteTags [#9985](https://github.com/openshift/hypershift/pull/9985)
* [OCPBUGS-92954](https://issues.redhat.com/browse/OCPBUGS-92954): CVE-2026-46597 openshift4/ose-hypershift-rhel9: golan.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.20] [#9273](https://github.com/openshift/hypershift/pull/9273)
* [OCPBUGS-96899](https://issues.redhat.com/browse/OCPBUGS-96899): Bump go-toolset to 1.25.9 to address CVE-2025-61729 [#9101](https://github.com/openshift/hypershift/pull/9101)
* [OCPBUGS-100104](https://issues.redhat.com/browse/OCPBUGS-100104): OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar [#9149](https://github.com/openshift/hypershift/pull/9149)
* [OCPBUGS-122206](https://issues.redhat.com/browse/OCPBUGS-122206): fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints [#9798](https://github.com/openshift/hypershift/pull/9798)
* [Full changelog](https://github.com/openshift/hypershift/compare/b625403a2a6621b2a3d7958a275b2737bc3e8fd7...1d2444baf19254d21641d9d7a434e67b08aa1bde)


### [insights-operator](https://github.com/openshift/insights-operator/tree/0abe4aa4be4687f2c8b144800d834ff0d5f8eaa9)

* [OCPBUGS-129108](https://issues.redhat.com/browse/OCPBUGS-129108): Add multicluster gatherer [#1382](https://github.com/openshift/insights-operator/pull/1382)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2d32023bd1531271d5571c4283236148f56e006b...0abe4aa4be4687f2c8b144800d834ff0d5f8eaa9)


### [ironic](https://github.com/openshift/ironic-image/tree/387298fadaf884ba7da9090436c2a832b6055142)

* [OCPBUGS-134139](https://issues.redhat.com/browse/OCPBUGS-134139): Lenovo hardware gets stuck on rebooting [#942](https://github.com/openshift/ironic-image/pull/942)
* [Full changelog](https://github.com/openshift/ironic-image/compare/af9e8fdf1c6aee2a3d4ee3c83f7692a0e63b70e9...387298fadaf884ba7da9090436c2a832b6055142)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/414ba4c4e22eef44eb99feec10b833f9aa0ea7e1)

* [OCPBUGS-127952](https://issues.redhat.com/browse/OCPBUGS-127952): Replace golang.org/x/net with sustaining_fork version to resolve CVE-2026-39821 (release-4.20) [#167](https://github.com/openshift/kube-rbac-proxy/pull/167)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b9134351be37c43408334047d8eb85d0ac01fe4e...414ba4c4e22eef44eb99feec10b833f9aa0ea7e1)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/941ff20d63e30d97d62b1d3d293840a462c9483a)

* [OCPBUGS-130943](https://issues.redhat.com/browse/OCPBUGS-130943): backport kube-state-metrics 2.18 memory leak fix [#200](https://github.com/openshift/kube-state-metrics/pull/200)
* [OCPBUGS-103899](https://issues.redhat.com/browse/OCPBUGS-103899): Use patched x/net fork v0.50.0-sec.4 [#166](https://github.com/openshift/kube-state-metrics/pull/166)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/1197b8bd68ac078c28349e4728a2192b7590f2ef...941ff20d63e30d97d62b1d3d293840a462c9483a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/6f601071c819627f7538a69a765d36cfe9276c90)

* [OCPBUGS-133319](https://issues.redhat.com/browse/OCPBUGS-133319): fix race in VAP MachineSet e2e test cleanup [#1588](https://github.com/openshift/machine-api-operator/pull/1588)
* [OCPBUGS-130608](https://issues.redhat.com/browse/OCPBUGS-130608): [release-4.20] Reduce vCenter API load in the vSphere machine controller [#1579](https://github.com/openshift/machine-api-operator/pull/1579)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/1e052c48a67fe7b24a037eadf4584f56218d9707...6f601071c819627f7538a69a765d36cfe9276c90)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/5898231e3a667bed143e9937556ff325f449e930)

* [OCPBUGS-132751](https://issues.redhat.com/browse/OCPBUGS-132751): Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole [#6669](https://github.com/openshift/machine-config-operator/pull/6669)
* [OCPBUGS-133362](https://issues.redhat.com/browse/OCPBUGS-133362): Split wait-for-ipsec-connect into two services to avoid ipsec restart [#6679](https://github.com/openshift/machine-config-operator/pull/6679)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/55a94a504b858fd1484d55def8191d327b6a16bf...5898231e3a667bed143e9937556ff325f449e930)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/e37e1a307fbc671f4d71163d437808273b3e93b3)

* [OU-1589](https://issues.redhat.com/browse/OU-1589): [release-4.20] sanitize linkified URLs in alert annotations [#1380](https://github.com/openshift/monitoring-plugin/pull/1380)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/205c2c77c8ab9588e353ef722f0838b82edf2702...e37e1a307fbc671f4d71163d437808273b3e93b3)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/2f395cd7f78805195dc1e97e86f264173a8ede8f)

* [OCPBUGS-103918](https://issues.redhat.com/browse/OCPBUGS-103918): [release-4.20] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#126](https://github.com/openshift/multus-networkpolicy/pull/126)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/afbdf82505c0d8f212d63e1eee6debced74ef653...2f395cd7f78805195dc1e97e86f264173a8ede8f)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/60dca72177bf682a59bf4af3455ea226155e761a)

* maintenance: Bump the npm group with 70 updates [#659](https://github.com/openshift/networking-console-plugin/pull/659)
* [OCPNETUI-168](https://issues.redhat.com/browse/OCPNETUI-168): Update Owners file [#649](https://github.com/openshift/networking-console-plugin/pull/649)
* maintenance: Bump the npm group with 32 updates [#640](https://github.com/openshift/networking-console-plugin/pull/640)
* [OCPNETUI-180](https://issues.redhat.com/browse/OCPNETUI-180): migrate to @kubevirt-ui-ext/kubevirt-api [#630](https://github.com/openshift/networking-console-plugin/pull/630)
* maintenance: Bump the npm group with 24 updates [#623](https://github.com/openshift/networking-console-plugin/pull/623)
* [OCPNETUI-185](https://issues.redhat.com/browse/OCPNETUI-185): Sync Dockerfile with Dockerfile.art [#616](https://github.com/openshift/networking-console-plugin/pull/616)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/902abf5aef99c0aedfb1a3be0e5fda2494ab271e...60dca72177bf682a59bf4af3455ea226155e761a)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/e62b30ec9e7f6328c974dc4e4ea757f1b70d4771)

* [OCPBUGS-103916](https://issues.redhat.com/browse/OCPBUGS-103916): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 [#75](https://github.com/openshift/cloud-provider-nutanix/pull/75)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/b575ef15f13e1434c793ae50824fd0676480be05...e62b30ec9e7f6328c974dc4e4ea757f1b70d4771)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/2f4712b8ae6c6c4f637919ad7535cd6425fb9272)

* [OCPBUGS-103931](https://issues.redhat.com/browse/OCPBUGS-103931): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.50.0-sec.4 [#222](https://github.com/openshift/oauth-apiserver/pull/222)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/99f27d25cc2853fe44ce6c7f7611637ef1492e42...2f4712b8ae6c6c4f637919ad7535cd6425fb9272)


### [oauth-server](https://github.com/openshift/oauth-server/tree/fe6832cd709a43a1470e2cafdd51d3030a4f1214)

* [OCPBUGS-103923](https://issues.redhat.com/browse/OCPBUGS-103923): Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [#283](https://github.com/openshift/oauth-server/pull/283)
* [Full changelog](https://github.com/openshift/oauth-server/compare/cf0de2f7f942d0a31778685b404771857fb4ae54...fe6832cd709a43a1470e2cafdd51d3030a4f1214)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/b1b4e785fbcf66f86c5a99974fb2bad9d96ccb65)

* [OCPBUGS-103921](https://issues.redhat.com/browse/OCPBUGS-103921): Use patched x/net fork v0.50.0-sec.4 [#459](https://github.com/openshift/openshift-controller-manager/pull/459)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/d9e543dd31e981f279c447e4f92f0dac3f665f9e...b1b4e785fbcf66f86c5a99974fb2bad9d96ccb65)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/9b00710613c3dc2bc800acf91e2e022f3fc3aeff)

* NO-ISSUE: synchronize OWNERS from main branch [#151](https://github.com/openshift/openshift-state-metrics/pull/151)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/b04e2ef05498c2a4504bd9396a3290c4f263fc37...9b00710613c3dc2bc800acf91e2e022f3fc3aeff)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6f5e049f27d2ac6293e46758d45cd21a075ad726)

* [OCPBUGS-135938](https://issues.redhat.com/browse/OCPBUGS-135938): Handle missing links gracefully in EgressIP reconciliation [#3592](https://github.com/openshift/ovn-kubernetes/pull/3592)
* [OCPBUGS-135008](https://issues.redhat.com/browse/OCPBUGS-135008): Add arkadeepsen, martinkennelly and pperiyasamy to OWNERS file [#3586](https://github.com/openshift/ovn-kubernetes/pull/3586)
* [OCPBUGS-74711](https://issues.redhat.com/browse/OCPBUGS-74711): [release-4.20] EgressIP annotation corruption causes stale IPs on br-ex after failover [#3257](https://github.com/openshift/ovn-kubernetes/pull/3257)
* [OCPBUGS-121361](https://issues.redhat.com/browse/OCPBUGS-121361): Fix UDN controller startup timeout during pod sync [#3539](https://github.com/openshift/ovn-kubernetes/pull/3539)
* [OCPBUGS-128426](https://issues.redhat.com/browse/OCPBUGS-128426): egressip: set IFA_PROTO on EgressIP addresses to prevent nmstate persistence- #3437 [#3507](https://github.com/openshift/ovn-kubernetes/pull/3507)
* [OCPBUGS-129457](https://issues.redhat.com/browse/OCPBUGS-129457): egressip: fix duplicate IP assignment on control-plane restart [#3485](https://github.com/openshift/ovn-kubernetes/pull/3485)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/c8595e7acc4f5334bd403e2700d905aaf4078d93...6f5e049f27d2ac6293e46758d45cd21a075ad726)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/90f6ce3b6edf02d3e777413441a56114e8a6df0c)

* [OCPBUGS-103934](https://issues.redhat.com/browse/OCPBUGS-103934): CVE-2026-33814 - Bump golang.org/x/net to v0.57.0 and golang to 1.25 [#123](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/123)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/4036cd3b5e45cf4d8c3c34def599657435601661...90f6ce3b6edf02d3e777413441a56114e8a6df0c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/f2c83ec5b797c61f95b9fe5c7b59315f30e84b3c)

* NO-ISSUE: synchronize OWNERS from main branch [#414](https://github.com/openshift/prometheus-operator/pull/414)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/da70230cf87874ce627cb036ec37ce27c79bdd9d...f2c83ec5b797c61f95b9fe5c7b59315f30e84b3c)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/f41c08505753958be4f829526e5a1a1b3eb9bbda)

* [OCPBUGS-103792](https://issues.redhat.com/browse/OCPBUGS-103792): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#108](https://github.com/openshift/route-controller-manager/pull/108)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1a0229e40e5c569c6c59f6b10c26584bccd084b5...f41c08505753958be4f829526e5a1a1b3eb9bbda)


### [thanos](https://github.com/openshift/thanos/tree/66d1af8aa0f39e054b31cb3917e625af72b9050b)

* [OCPBUGS-129055](https://issues.redhat.com/browse/OCPBUGS-129055): Bump github.com/klauspost/compress to fix CVE-2026-63209 [#230](https://github.com/openshift/thanos/pull/230)
* [Full changelog](https://github.com/openshift/thanos/compare/e09de117035d272a18dbd94d0bc8c8e29346026e...66d1af8aa0f39e054b31cb3917e625af72b9050b)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/435940937cd5e9a41b11e0bb5fb29ca963318299)

* [OCPBUGS-103963](https://issues.redhat.com/browse/OCPBUGS-103963): Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.20 [#133](https://github.com/openshift/cloud-provider-vsphere/pull/133)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/b93eb64ff72e7c005687813c8b478d694a0f517a...435940937cd5e9a41b11e0bb5fb29ca963318299)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/c8cec71c7470b6cde4b71eccce895e3da95798f8)

* [OCPBUGS-103968](https://issues.redhat.com/browse/OCPBUGS-103968): Bump golang.org/x/net to github.com/openshift-sustaining/net v0.50.0-sec.4 CVE-2026-33814 [release-4.20] [#126](https://github.com/openshift/cluster-api-provider-vsphere/pull/126)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/769d0fb781dfb53df5d533b917c363a553185fd6...c8cec71c7470b6cde4b71eccce895e3da95798f8)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/308961eba90be48f2699bb2eea7352e7f911f973)

* [OCPBUGS-130578](https://issues.redhat.com/browse/OCPBUGS-130578): Fixed GetVCenter to handle removed FDs better [#246](https://github.com/openshift/vsphere-problem-detector/pull/246)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/2502327678b6af2df0aab5fcd6a96e095d18b21a...308961eba90be48f2699bb2eea7352e7f911f973)