# 4.21.6

Created: 2026-03-13 10:47:13 +0000 UTC

Image Digest: `sha256:683c4a4eed9c4005b7d331fe0e55b5f943b1d57f40f4d4b77f059f52ad127092`


## Changes from 4.21.0

### Components

* Kubectl 1.34.1
* Kubernetes upgraded from 1.34.2 to 1.34.4
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260112-0 to 9.6.20260311-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| IngressControllerDynamicConfigurationManager <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| KMSEncryptionProvider <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled<br/>(Changed)| Disabled<br/>(Changed) |
| KMSEncryption <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* cluster-kube-cluster-api-operator


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [e5713826](https://github.com/openshift/assisted-installer-agent/commit/e57138265957c81b33d3ac13078d35f6ca07069d) `sha256:d0e5c333f10d252325a01582f161b4cac3354795887402069bebede811158db4`
* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [479a68f3](https://github.com/openshift-assisted/assisted-installer-ui/commit/479a68f329b4c4088a999a6f4f1c4a078a9b4e93) `sha256:797c5203a7f9674d307e9d5c74f475bfe1b38ccfc5deefcb6726edd47a42c969`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:273930332d7b481bbca4521cf740507498a2a323a4010cd66e896806b299f85e`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [3365bc9c](https://github.com/openshift/cloud-provider-aws/commit/3365bc9ca5b116c63c1c90130c017f3496a139a1) `sha256:2a2f75231f8f7f054c372ea7e5fc141c4ea0fd0700af7513c0b553a5b1692949`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [10ceef5e](https://github.com/openshift/cluster-api-provider-aws/commit/10ceef5e6f6d0cb79a3345de4fd8851f6300205c) `sha256:5baadb840dd23d8a79f32026fe7ab02794a8319b4e15f07a49abc103bd0d2584`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [57eebffc](https://github.com/openshift/aws-ebs-csi-driver/commit/57eebffcc8abbbbb6edcf3b536b769d97e31819c) `sha256:8f72efd51f564d8d3e4ecee6555d7bd5394d0776054d2112febea6b7c9e71225`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [ff9c8d4e](https://github.com/openshift/aws-karpenter-provider-aws/commit/ff9c8d4e8fdc55d3e60c6add0942c018826ae870) `sha256:18f194edfb66b30ac2d8e25d3d4b78a2e143b5805c6af9cbfdb3cb7fdfdef1d1`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:9fa99fcc7d186b83ea9e38de7f0922301c22e365748759b919c363d6f853d802`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [938565c9](https://github.com/openshift/machine-api-provider-aws/commit/938565c9f796fba385c0978a5ae1cc0a79f0f857) `sha256:b76dc536a233ba0eeeda3ddcf93395712bcb2e551b388632d39e0a6c585a1cb7`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [83b3f9ec](https://github.com/openshift/cloud-provider-azure/commit/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8) `sha256:0e5f07e174735f4f531b3e8cfe7a8986d92db63e0605530018a6e5ab1c0971c3`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [83b3f9ec](https://github.com/openshift/cloud-provider-azure/commit/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8) `sha256:3f7181447dd3d28779323dac4561ca98d33755c19f468fb181d50c5338eca42a`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [3cfa501e](https://github.com/openshift/azure-disk-csi-driver/commit/3cfa501e46765e7fcdcd27c129fcb729e324c48d) `sha256:05ebc4de717d2d36e3d7daca025294e6de1181e3c67ebc38028fc0b0ea5bfafa`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [c77d75f9](https://github.com/openshift/azure-file-csi-driver/commit/c77d75f90b7f84dfc25ba3439bc5eff87c3a2755) `sha256:d0d866dee27d9169a1e4711a35a4dfbc3ffe9655258a72188282f4c32eaa84a1`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [fe1d311b](https://github.com/openshift/azure-kubernetes-kms/commit/fe1d311ba5aadc40b5f48d47d43175157a73c881) `sha256:f428606ee244280f1032530ed5aa3b08293df6fc2b512835d6e4a6f41947962f`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [b8b8cb1c](https://github.com/openshift/machine-api-provider-azure/commit/b8b8cb1c5af7d2a3ef9a4a99a0739a2166a7932c) `sha256:2f833c0dc69159872581ff3df25bcc63b2e36045691be2df2dccccd9a8baa582`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [17e57462](https://github.com/openshift/azure-service-operator/commit/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8) `sha256:db4a14943df63ddadd1f71cc14e70754456a940968e88fa0fa656947ee6956df`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [3f2a6e0d](https://github.com/openshift/azure-workload-identity/commit/3f2a6e0d1ea68af321f9674b0b097939be7d2014) `sha256:d0f19c2865d52157f293b96530f6087d27cdbfc38bdd57d0155207e5848dc1b9`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [659138fe](https://github.com/openshift/cluster-api-provider-metal3/commit/659138fef3abd4c71b0b01fa1279146745699a5a) `sha256:45fdc43c8c31d7a86711de7983a73595f7a35152778a72d67da8521f68a50a75`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4e6a729c](https://github.com/openshift/cluster-api-provider-baremetal/commit/4e6a729c5ac8fde8859db5830def262dfdee28ea) `sha256:db560b55e8fe3bbf449924b43940deb08844e184c91d4558246a30b1941a33ea`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [dec12ba6](https://github.com/openshift/cluster-autoscaler-operator/commit/dec12ba632a4810b4ff43a9172f462a1dd291e44) `sha256:22bbcbdc0bdeacfa0bb2427edc5c55006a0914fec6c96bed29899839660ec3e8`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [dc0d4a5c](https://github.com/openshift/cluster-bootstrap/commit/dc0d4a5cdaf8a7477cab584208dc99352f46efe2) `sha256:7fa4c6c50f2e5797930cb493c0d02f3efd834f5353d9a3ac899f13fa3120728b`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [a957484a](https://github.com/openshift/cluster-api/commit/a957484acb353220da0d3062867168d24494a2b6) `sha256:2f8fd7bc7fd64518b7a7c114242a81f51ec5dab0212990e9088893113066f5fb`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [6148c0cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/6148c0cca626bcf0bfebcc6dd0c77a41944cba87) `sha256:2044d490f2d73d42bb6a114a2011c898034354e0fab1a872a723174b2c8327cc`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [1eb450a3](https://github.com/openshift/cluster-config-operator/commit/1eb450a3a2456f6e3fe3d727208b5f7b0dd35aba) `sha256:a54688fc090b196fee922668a4c4940893c8b97de33448ebb42646eeb301fdca`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [41a53fed](https://github.com/openshift/cluster-dns-operator/commit/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9) `sha256:02656b900d7e95a8a7ad0d655c37cb1380ebb5a72fa579ea61f33e2a28b60de1`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b2dfc3bb](https://github.com/openshift/cluster-image-registry-operator/commit/b2dfc3bba3dfd8dba90918a4a3be74deb3c548dd) `sha256:7e794401a3ecef9c7069b82ef376e065db07d5f6f8dc4bd57bf8b900785d6f81`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [395de967](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/395de96705749de9c6a5f25747b9d5c3d5f65a8f) `sha256:bcc5e389db9273149b6c9dd645edb583d7e8a3f4d4feea32900dff439e2cf279`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [8a42beeb](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/8a42beebd580bd2e241aa6d93860c09e907f2407) `sha256:66640a3f7bd65090345552611701a73e74bc44897b9d29e43b11f73b96598ac0`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [d864813c](https://github.com/openshift/cluster-machine-approver/commit/d864813cd3ab01c0f975b2bf41e9046948f0afa1) `sha256:347eace7e05e9c3a3f3a5e67b0eaf36c2f5b86808eb5c71806c664c183793941`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2617a201](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2617a201bb3607192a9f82faa18384676f611e3c) `sha256:8dec5d214b92cb545318f213429815bc8c17337d266d0841afc17e0a793b72a6`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [8b775487](https://github.com/openshift/cluster-policy-controller/commit/8b775487512fb543bff470ff1042bd3ac31b29be) `sha256:94e8f4a41f0a596706046663e476e0015078a19d978494973252b630f8e85120`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [11ed1942](https://github.com/openshift/cluster-samples-operator/commit/11ed1942dbbf7a8334862b3d598a967e9b92aa77) `sha256:b37b3692dc74deb0b12b592173a09fb371a0a87210861f14239c70f247431294`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b3cae8f2](https://github.com/openshift/cluster-update-keys/commit/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f) `sha256:a0a350f62b580dd63438c1294a3ec9f672f571963eaa0a3bfcf05190042846ad`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [16114b8d](https://github.com/openshift/configmap-reload/commit/16114b8de20278b8f4b7a425ece6d35d53214773) `sha256:f8288be62a0f5bd749b127e28cb27c42a419658621eaaed77e57a5b33cc97e97`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:3da5a449ace61cb7d002d8e7911c14905c74cf58a296527458d1af0f1abf0a72`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:d5f04fa218d3068f32a85746fad08a8917e86f07f473a1c776348a06af09c41e`
* [coredns](https://github.com/openshift/coredns) git [7486e9e4](https://github.com/openshift/coredns/commit/7486e9e4330c1e41d9a91e4673b7f2782efc112c) `sha256:7e0a58aad44d5b09954f8261e3e428c8dfa076eb9c2b6ef46a91d27ac78ac17a`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [bf508c06](https://github.com/openshift/cloud-provider-openstack/commit/bf508c062084dc6dec20480f7d173f047ad4f2d6) `sha256:df0f1dcbef7510f880f0efee81142334926e07de894546016c92933086064910`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [49f2d86f](https://github.com/openshift/csi-driver-nfs/commit/49f2d86fb6172d9d8909ed0f70cb3bc71a4f7c01) `sha256:ff018d118b501fc45687913f090f35bc5e535ad23197b72272a3705fb42f9080`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [344669a2](https://github.com/openshift/csi-external-attacher/commit/344669a2189fecdf5471fdc9a1246dd751cb1afb) `sha256:eedc2fede80ea223c77bd783734d30e2940314b947aaaaed8fe4edc659c20094`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [f18190fb](https://github.com/openshift/csi-external-provisioner/commit/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58) `sha256:90af24f031b9fa6323565a230132af927e86676ace089917f1b3676bc1995d9c`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [d880a1ec](https://github.com/openshift/csi-external-resizer/commit/d880a1ec6da02dbf61600ec7999266185ca9f784) `sha256:e5f7f0689706a08267e667b16662978a68f940e11ae1b737d602e1806da09289`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [af250fdb](https://github.com/openshift/csi-external-snapshot-metadata/commit/af250fdbac8af84d9808a2892bfc911c04162115) `sha256:d1365e875c7f670c9b081bc1efc9e6526d4a1a9427f076577897c931cfeebb6f`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [9098db0e](https://github.com/openshift/csi-external-snapshotter/commit/9098db0e434e0d986eeadd2ebe69119540a550d1) `sha256:5b2930ec40aba92c2c7d577ade01c9f7b093814cc9414cf43f4c987d082cd081`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [78dacb7c](https://github.com/openshift/csi-livenessprobe/commit/78dacb7c661a62c78036c2737401afd3eb6fd04d) `sha256:fcd01cbde0c58ad690f233a8f9ac9d080ca607fd7c24ad0de5afca564f098687`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d29f3f7a](https://github.com/openshift/csi-node-driver-registrar/commit/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c) `sha256:b615eeec97d8429f11b1f8f9d05c7192c01ad293ed26c83b60bf6e31505f2c1f`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [9098db0e](https://github.com/openshift/csi-external-snapshotter/commit/9098db0e434e0d986eeadd2ebe69119540a550d1) `sha256:795cfd663c68dac26f71921aaa6c19b7f038a81cc0ae38fe9c11bf500275eeca`
* [docker-registry](https://github.com/openshift/image-registry) git [602f51c7](https://github.com/openshift/image-registry/commit/602f51c795dcdcd71c75f6abfe79dc0424a0476a) `sha256:3739c0c55f7f7ccc84309ae11eb23d3d9e5ad50a68e849a8a8dfda7f2f2bc137`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [5c53d757](https://github.com/openshift/driver-toolkit/commit/5c53d757ae380994b89701a98d8b61912154aca7) `sha256:837f4789a01c278e4687fc41b68526aac96ede5b2ac01a73dd05317a0660cc49`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:e2efd3418ad3517f5db50de37cda00d27bb568554e7cb618ade7c8eebfbc9185`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:79897ad0d323f64e0c2a12cd1f15827238fdf964385d4b7887932c6156f07644`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8732386c](https://github.com/openshift/cloud-provider-gcp/commit/8732386c3ddcb98dae624f7bb925ed0ef8d077d5) `sha256:667beab316eb4fb0fad953f2e67a7b9533dabf8f318fdf834da37a4c08fbffad`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [91f71c9a](https://github.com/openshift/machine-api-provider-gcp/commit/91f71c9adfd6b715a6ef340bb43ea5e1a8b44245) `sha256:f36f57b67c76c6e760f606123a94bc78abc857feaeb258cff38cf01e32608280`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d481e5cb](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d481e5cb9323b01964bf143b58403b62fa31e5e7) `sha256:c256d48430f90bb7c302fe2685f7e7d764a19cc7cb3ebe2bb2481224f5a7753c`
* [haproxy-router](https://github.com/openshift/router) git [b231c65b](https://github.com/openshift/router/commit/b231c65b5c06c1f74590ca8e77caecc6213beb6a) `sha256:9540d66e9824b1ba081ad80bb6715e5ccf61b42c29c1ad961c1863efd81f48ca`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [c566572b](https://github.com/openshift/cloud-provider-ibm/commit/c566572b2cf0120499e81181f1efb1e729e9c418) `sha256:904b8fad0f85c1d4a70dff3b9527eae4e1fb7ac6c3d1e135b4aa432809feee55`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [00bc7407](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/00bc740728d9f8ec86fe04199884108c2a091b58) `sha256:217b74f158927371529883accbeb12d20b8873f2ddcbbcee48ced4d861e74405`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [f7e3ec30](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/f7e3ec30f746add35458fad54dd6bccb97e307bf) `sha256:86f22061f26a31fa2fe079019cfb1d0a3f87c2e4d9cf9de6fa2bd672dcb91d39`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [e72a8471](https://github.com/openshift/machine-api-provider-ibmcloud/commit/e72a84714e5fb8c3256def77f7d77ffdc4b9b82e) `sha256:7607b7c438b1fb1900bd6d9dac2ffb29a23db40c503fe63c59e9f15e4e90c327`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [b95b05fe](https://github.com/openshift/ironic-static-ip-manager/commit/b95b05fe0ba17255ef61e92d4167ca4c9de789b8) `sha256:77be021539bf1614a0491fd3d0bf59da21f70b6413e96a95e71b7e7d397dc206`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [ed76a5e8](https://github.com/openshift/kubernetes-metrics-server/commit/ed76a5e8051caae6519342ae189088b8ddd09979) `sha256:698e13ede97d3e2fbc3d69858b3f2d5985bbdfb3fb0f646452fe0edabbd5eb7f`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [cd636680](https://github.com/openshift/kube-rbac-proxy/commit/cd636680e06a55395c26570dff0cb37277014388) `sha256:e99cd629414427a7792ccecda36d856dbe549682438f7b0dfb0ee2e7af536dd6`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [cb0aa591](https://github.com/openshift/kube-state-metrics/commit/cb0aa591e89797cc0f45b934b8baeccc3a3b09bf) `sha256:2a07c1b2ef06bbfa3a491b84f7410e24de7cb487f49bbbb3bfd7cb3510c8429a`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [ce5ff17e](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/ce5ff17e9a81ce754567e6dd5053d13409c251e9) `sha256:f02f34239d2898fd346b775194a7e3f1a26b8aaeeaf3670b67cc5e4021742420`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [9e2dbddf](https://github.com/openshift/kubevirt-csi-driver/commit/9e2dbddfe27080b834c83ef93503f886ad4189b6) `sha256:9bdd48e433b4e73db2c9ca090ee5b2c5c535b4fe0bde30a14aab743eeb0fc7f8`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [76effeca](https://github.com/openshift/cluster-api-provider-libvirt/commit/76effeca10bccccbc7a514f708122f660cde1183) `sha256:b82c09d4d5e737b452fcc8e64758145251d42031e72d54803bfa762f4594ab4e`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [83936dde](https://github.com/openshift/machine-api-operator/commit/83936ddec5de0d3c9e6db44e541e0abac2b60b6c) `sha256:91f6fcd9c0d214a8de02698cf789fa5545d21bf10940975b4c50bc8efe0cee88`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9a8e96a6](https://github.com/openshift/machine-os-images/commit/9a8e96a60bb6d8e3c86c2780fd4212e80f5d28e5) `sha256:dc3cbde1bc756522480cc708ba16e2f71215592b791b2efb6e951d4bdc8213e2`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:c424f4620de2cc191b13d27d35524a388b5c7680c12f00eab1659a744669f01d`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d95feb67](https://github.com/openshift/multus-admission-controller/commit/d95feb67adfb97346849c79e36b6a9d404296ae9) `sha256:2dbcce02f7eb245eb9b7aae8b243fdaa7048443af74f9d2e0a4f437094ff5929`
* [multus-cni](https://github.com/openshift/multus-cni) git [93556f99](https://github.com/openshift/multus-cni/commit/93556f99405e29900c5445f7bbf7c70b8935e339) `sha256:51e1b5dc9fccbee5b7df78d0e8bbe379f75529232c102c9ed5b1ae134c4b9b4c`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [93556f99](https://github.com/openshift/multus-cni/commit/93556f99405e29900c5445f7bbf7c70b8935e339) `sha256:7cdbc0c8ed3aa2e67bb2bb64b644a4a818f3df17642659e908176b7ae603a99b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:ad0e262327997e8cdc4074a2373e67274d9b8a943aa274a2cd8ce98ffe1db4a0`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:69e134b501fdb83fc21e3e9e28b43d0f9ddf6643e2a87fc952d2ab48739121a9`
* [must-gather](https://github.com/openshift/must-gather) git [b4b434c4](https://github.com/openshift/must-gather/commit/b4b434c427ddde3dafd8518d1aa754e49b7bfef1) `sha256:27916467fedc58b69c19a2e2a9ea02aecc2215bbf4dbae6a2c1f13e94e1597b0`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:d2afd0719d1a256d032048beeba2700cfe60da2904b2d9fe9c0aae3daf4318d5`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [844fa588](https://github.com/openshift/network-metrics-daemon/commit/844fa588c4200b8ff768d1916d63f1d4c1db2daf) `sha256:f660d525da7c598367787fef3ac27294357524affe4f35c1f552e7f428ca7dab`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:56bef229e53ac857fac94b585d2c47b04494f412642237bfdef6063133b696bf`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33b7bec6](https://github.com/openshift/cloud-provider-nutanix/commit/33b7bec6fe27b8d126982a70b4579112cd67052b) `sha256:9beb3af0fc930c28a29f16de1e9769741894e4cb4c2502c6c5acfabfc8f483b7`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b15a665c](https://github.com/openshift/machine-api-provider-nutanix/commit/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be) `sha256:2700c94c2731f6e1b8a104a6ca48894197b225aae5dc87d35a565d1f3f671e86`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [64dea074](https://github.com/openshift/openshift-apiserver/commit/64dea074d6b457e1fae3598cea0bb72493d2cab8) `sha256:4bbfe21f6a3f48204ef562332f2fbbccfac25802447819ea1e2c73e243a49c2f`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [438d52e7](https://github.com/openshift/openshift-controller-manager/commit/438d52e79d691e016d66eabfe9a53c84229db40c) `sha256:60ffb31b166e916efe61e5c83cdead143089e2eac4d3d1bb56339b19b99e5518`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [ab605a4b](https://github.com/openshift/openshift-state-metrics/commit/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8) `sha256:5f852f6127d27e6fc071afe58d80024370467cb2476f4d9f077f8ebca8600918`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [bf508c06](https://github.com/openshift/cloud-provider-openstack/commit/bf508c062084dc6dec20480f7d173f047ad4f2d6) `sha256:76f7e6c87264c611fedeb769d59f756d31b7ff225a16c26ac84a668d1365ef08`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [bf508c06](https://github.com/openshift/cloud-provider-openstack/commit/bf508c062084dc6dec20480f7d173f047ad4f2d6) `sha256:52e423b58c5d2cea403a31cfb02a9fca6cca12af54eb66fc73be3baac9375de0`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [e1c0f2f9](https://github.com/openshift/cluster-api-provider-openstack/commit/e1c0f2f9e2e70843d5c42dfe3bddf70530a97b0f) `sha256:be3c95c6ef06d318272425f61c283682feb8e1e76052a15392584893244942ed`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [70f5ad34](https://github.com/openshift/openstack-resource-controller/commit/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72) `sha256:215c8f708e8bc6ef8c4d58d702a7bdddace0f38c1b40b29a373ea35c5b44ca3d`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [791e12ab](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a) `sha256:35ca48b6575ca0d0129ab38c6084fe52dd586ab8caa25a0c2cd1ea076e17eaa3`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [e22228ae](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/e22228ae9f53298e7520d9ae2b9230b2d5dd4cff) `sha256:a3ae81bc47668a47daae9bc4052974bfbc227d6c9ccad67d2584369c1d98c599`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [969a04e9](https://github.com/openshift/cloud-provider-powervs/commit/969a04e9dcb4cdde10e3038a9e28d2e27548918d) `sha256:7e252361b85e002350f5b3be08eac07af4c9ed11f5bf347feda5c8abcc6ce018`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [551974ef](https://github.com/openshift/machine-api-provider-powervs/commit/551974ef93dedb1b9677a778e1533391448e0c56) `sha256:07a822f8afb2abdede77b3ada4e98d4d1a542e0ad41f9185086a5781854698a5`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [610c11b5](https://github.com/openshift/prom-label-proxy/commit/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494) `sha256:9be8f12e3745100401dcf9f7d7e571260b11399f1dd98501208af756d08abd97`
* [prometheus](https://github.com/openshift/prometheus) git [ac9443d2](https://github.com/openshift/prometheus/commit/ac9443d270b96912311ede64da160f839278bb65) `sha256:987fe55afa2ee263467ecaf5c058664ad8e55126687f79d28ab5fa030ec17768`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [3dbe0b64](https://github.com/openshift/prometheus-alertmanager/commit/3dbe0b64ae3b9439b888be65a32431c7bf0d6806) `sha256:5b3d41bea99611b73a21042f0f416dd3e8293c93086e18193c98b5fc1994734e`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [39d72873](https://github.com/openshift/node_exporter/commit/39d728735779afef886bc10a8bc7cf72f54d51a0) `sha256:3e8d51b4b12d970bf561f67d0fcd9c0966a6d49866e6466daa341ee43d95d6e2`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e9622ba1](https://github.com/openshift/service-ca-operator/commit/e9622ba18c86bf24aceab0c19fdcb87339c14f44) `sha256:a405e40da35645d318b95c414f68536e3d3e2db22394ca9bf9738e666336e462`
* [telemeter](https://github.com/openshift/telemeter) git [a54acdfe](https://github.com/openshift/telemeter/commit/a54acdfeb2d62c79516d099e37f3319205c903a7) `sha256:917de30c85816179b3f8db32b8c94bfed2a54adc65b1a8be7ea73e245fa88b55`
* [thanos](https://github.com/openshift/thanos) git [6ea20ffa](https://github.com/openshift/thanos/commit/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8) `sha256:c91b7e9bdf73069bea2bc8ece90ce15c2a91a2bf99d9d970732b9afa233f3c6c`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8b929332](https://github.com/openshift/volume-data-source-validator/commit/8b9293323cf8fdce93824e37168573ca3f73de3a) `sha256:4e62a2dcb8214491388d4c17f89fe699eb53cdb8039dcba6ab052edc28da3fbd`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f69584d6](https://github.com/openshift/cloud-provider-vsphere/commit/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e) `sha256:828d6ae2cc5813f58eccd38f1d15963af314c54776d7f014c6f0ddfb95d881c9`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [6626b299](https://github.com/openshift/cluster-api-provider-vsphere/commit/6626b2998e29189d1ff031c0a589f9c3413feac4) `sha256:2efbb43ea1e05c70c8e7512eaae24c8554d36cfdde842b4172069df4b4f0a042`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [5e680186](https://github.com/openshift/vmware-vsphere-csi-driver/commit/5e680186a305e1e0a11950630f7addcb1aa19e0e) `sha256:8791032e98c951a9206998da7c747fb47ad4f86b1cbe8c7e5564c006c6e1d207`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [5e680186](https://github.com/openshift/vmware-vsphere-csi-driver/commit/5e680186a305e1e0a11950630f7addcb1aa19e0e) `sha256:2b89f33606b52a6b6577fd430177ef0affc5de631b987ea4ace12d3fa07121c6`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/1574e1fa7ee0118e3c2a6ca9653f4c38e6c888ac)

* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#8806](https://github.com/openshift/assisted-service/pull/8806)
* [OCPBUGS-72519](https://issues.redhat.com/browse/OCPBUGS-72519): Fix YAML marshaling for Kubernetes types in disconnected ignition [#8736](https://github.com/openshift/assisted-service/pull/8736)
* [Full changelog](https://github.com/openshift/assisted-service/compare/c91daf8210a24602abaeef7395ee6df4b9533aa3...1574e1fa7ee0118e3c2a6ca9653f4c38e6c888ac)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/58cd84e5f90dedf13c846cdbf24608583c260d1c)

* [OCPBUGS-77536](https://issues.redhat.com/browse/OCPBUGS-77536): Fix root partition before copying IRI registry data [#2038](https://github.com/openshift/assisted-installer/pull/2038)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/79093911c4613f9aa916b552a6376f3e38e3cbc1...58cd84e5f90dedf13c846cdbf24608583c260d1c)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/31e71ab1c165a92225e2b2d87b4080ab34fae42d)

* [OCPBUGS-78144](https://issues.redhat.com/browse/OCPBUGS-78144): Update to use the 4.21 Catalog [#271](https://github.com/openshift/agent-installer-utils/pull/271)
* [OCPBUGS-77538](https://issues.redhat.com/browse/OCPBUGS-77538): (Backport) Override prefilled rendezvousIP [#263](https://github.com/openshift/agent-installer-utils/pull/263)
* [OCPBUGS-77302](https://issues.redhat.com/browse/OCPBUGS-77302): Remove multiple redhat-operator-index catalogs [#262](https://github.com/openshift/agent-installer-utils/pull/262)
* [OCPBUGS-77236](https://issues.redhat.com/browse/OCPBUGS-77236): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a [#222](https://github.com/openshift/agent-installer-utils/pull/222)
* [OCPBUGS-77220](https://issues.redhat.com/browse/OCPBUGS-77220): Update Konflux references [#251](https://github.com/openshift/agent-installer-utils/pull/251)
* [OCPBUGS-76590](https://issues.redhat.com/browse/OCPBUGS-76590): Update Konflux files to build 4.21.1 [#254](https://github.com/openshift/agent-installer-utils/pull/254)
* [OCPBUGS-76411](https://issues.redhat.com/browse/OCPBUGS-76411): Include additional operators in OVE config [#253](https://github.com/openshift/agent-installer-utils/pull/253)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#248](https://github.com/openshift/agent-installer-utils/pull/248)
* [OCPBUGS-74935](https://issues.redhat.com/browse/OCPBUGS-74935): Update Konflux references [#220](https://github.com/openshift/agent-installer-utils/pull/220)
* [OCPBUGS-74304](https://issues.redhat.com/browse/OCPBUGS-74304): Increase Konflux build pipeline memory [#243](https://github.com/openshift/agent-installer-utils/pull/243)
* [OCPBUGS-71230](https://issues.redhat.com/browse/OCPBUGS-71230): bump github.com/sirupsen/logrus to v1.9.3 [#234](https://github.com/openshift/agent-installer-utils/pull/234)
* [OCPBUGS-73671](https://issues.redhat.com/browse/OCPBUGS-73671): Increase capabilities passed via buildah [#231](https://github.com/openshift/agent-installer-utils/pull/231)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/79088da08182ed5eb236f9248ee7ff5dd6e6ded1...31e71ab1c165a92225e2b2d87b4080ab34fae42d)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/d3789c528621d54b0d46b40795acd9c635b2982d)

* [OCPBUGS-74215](https://issues.redhat.com/browse/OCPBUGS-74215): [release-4.21] Add VAC manifest for tests in AWS EBS [#485](https://github.com/openshift/csi-operator/pull/485)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d739d8cacd23ca3545de402da9e5f49e547d1456...d3789c528621d54b0d46b40795acd9c635b2982d)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/5cd42ed1e5151f45f0134593e9cfebdb6517b385)

* [OCPBUGS-74170](https://issues.redhat.com/browse/OCPBUGS-74170): Fix GOTOOLCHAIN env var [#213](https://github.com/openshift/aws-pod-identity-webhook/pull/213)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/0da6737b69c6676d9f9bc8b3fcc7f46fbe521096...5cd42ed1e5151f45f0134593e9cfebdb6517b385)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/5d6af81d7ab9b289c3def6c0350313118d63923a)

* [OCPBUGS-74398](https://issues.redhat.com/browse/OCPBUGS-74398), [OCPCLOUD-3101](https://issues.redhat.com/browse/OCPCLOUD-3101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into release-4.21 [#361](https://github.com/openshift/cluster-api-provider-azure/pull/361)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/b80578abd9d7e6b0d0e9fa070f7ee88adc3bbb85...5d6af81d7ab9b289c3def6c0350313118d63923a)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/6ad9e8776abd1dad320d73063ae3b35bd64dfdaa)

* [OCPBUGS-77504](https://issues.redhat.com/browse/OCPBUGS-77504): fix wavelength zone name regex [#10343](https://github.com/openshift/installer/pull/10343)
* [OCPBUGS-77551](https://issues.redhat.com/browse/OCPBUGS-77551): Increase size of /var/ostreecontainer mount [#10346](https://github.com/openshift/installer/pull/10346)
* [OCPBUGS-73878](https://issues.redhat.com/browse/OCPBUGS-73878): handle SSH rule deletion for Azure private [#10225](https://github.com/openshift/installer/pull/10225)
* [OCPBUGS-76358](https://issues.redhat.com/browse/OCPBUGS-76358): [release-4.21] Fix destroy bootstrap command for Azure [#10293](https://github.com/openshift/installer/pull/10293)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#10250](https://github.com/openshift/installer/pull/10250)
* [OCPBUGS-74672](https://issues.redhat.com/browse/OCPBUGS-74672): [release-4.21] GCP: skip AI zones [#10272](https://github.com/openshift/installer/pull/10272)
* [OSDOCS-17769](https://issues.redhat.com/browse/OSDOCS-17769): [release-4.21] Add AWS m7 instance types [#10266](https://github.com/openshift/installer/pull/10266)
* [OCPBUGS-74493](https://issues.redhat.com/browse/OCPBUGS-74493): add support for NVIDIA H100 and H200 enabled machine series [#10259](https://github.com/openshift/installer/pull/10259)
* [OCPBUGS-74414](https://issues.redhat.com/browse/OCPBUGS-74414): Remove region option for the GCP Private Service Connect Endpoint [#10253](https://github.com/openshift/installer/pull/10253)
* [OCPBUGS-73891](https://issues.redhat.com/browse/OCPBUGS-73891): add newly detected instance types for Azure during 4.21 regression test [#10227](https://github.com/openshift/installer/pull/10227)
* [OCPBUGS-73773](https://issues.redhat.com/browse/OCPBUGS-73773): ensure deterministic zone ordering for control plane machines [#10214](https://github.com/openshift/installer/pull/10214)
* [Full changelog](https://github.com/openshift/installer/compare/1c2444827f237115ce81aef693415547fd4c42a7...6ad9e8776abd1dad320d73063ae3b35bd64dfdaa)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/906e2b884ddb89d8361200307f8fb4e6a66d15b5)

* Bug OCPBUGS-76492: BMO fails to start servicing despite updates to HFC spec [#459](https://github.com/openshift/baremetal-operator/pull/459)
* [OCPBUGS-68369](https://issues.redhat.com/browse/OCPBUGS-68369): Abort inspection/cleaning before powering off during deletion [#449](https://github.com/openshift/baremetal-operator/pull/449)
* [OCPBUGS-74365](https://issues.redhat.com/browse/OCPBUGS-74365): Fix invalidDNSNameinvalidipv6 test for Go 1.24+ [#450](https://github.com/openshift/baremetal-operator/pull/450)
* [OCPBUGS-67294](https://issues.redhat.com/browse/OCPBUGS-67294): Require PreprovisioningImage for deprovisioning when cleaning is enabled [#443](https://github.com/openshift/baremetal-operator/pull/443)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/19806234e44b43dbb4255506c86a3d401c91207b...906e2b884ddb89d8361200307f8fb4e6a66d15b5)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)

* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#383](https://github.com/openshift/baremetal-runtimecfg/pull/383)
* [OCPBUGS-72566](https://issues.redhat.com/browse/OCPBUGS-72566): Fix TNA and TNF dummy ip for ipv6 [#378](https://github.com/openshift/baremetal-runtimecfg/pull/378)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/e647483ee9c9ea9d0168c2455424d0b5afadff3f...d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/56a56a3a76474ed4329fff4fc9958e2c60c3ab3f)

* [OCPBUGS-77486](https://issues.redhat.com/browse/OCPBUGS-77486): Makefile: Strip debugging symbols by default [#2211](https://github.com/openshift/oc/pull/2211)
* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install subscription-manager in required images [#2208](https://github.com/openshift/oc/pull/2208)
* [OCPBUGS-73911](https://issues.redhat.com/browse/OCPBUGS-73911): Fix unit test failure by updating ruby version to 3.3 [#2186](https://github.com/openshift/oc/pull/2186)
* [Full changelog](https://github.com/openshift/oc/compare/345800dc3c4164fbca313c1cbfb383f262547903...56a56a3a76474ed4329fff4fc9958e2c60c3ab3f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0c51a1b875a53fc5dda059789c3ec8a5d2212114)

* [OCPBUGS-71222](https://issues.redhat.com/browse/OCPBUGS-71222): test-ext: remove kubernetes module dependency [#958](https://github.com/openshift/cloud-credential-operator/pull/958)
* [OCPBUGS-74545](https://issues.redhat.com/browse/OCPBUGS-74545): Resolve nil pointer exception in hasResourceTags [#969](https://github.com/openshift/cloud-credential-operator/pull/969)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/3fd434e647dba248e1662267971b91e66da082ea...0c51a1b875a53fc5dda059789c3ec8a5d2212114)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/57db2d05e057dc90bae3dc1b0e806b3259d38fc0)

* [OCPBUGS-77154](https://issues.redhat.com/browse/OCPBUGS-77154): Refrain from adding Egress IP to public LB backend pool [#205](https://github.com/openshift/cloud-network-config-controller/pull/205)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/dcdf24f542ab4d65c85a4d63d553cc49085567ea...57db2d05e057dc90bae3dc1b0e806b3259d38fc0)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/d235c0bb7443119e12ec2c8db57035f652f1d871)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#847](https://github.com/openshift/cluster-authentication-operator/pull/847)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): carry test assertion [#848](https://github.com/openshift/cluster-authentication-operator/pull/848)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the oauth-apiserver container [#846](https://github.com/openshift/cluster-authentication-operator/pull/846)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#844](https://github.com/openshift/cluster-authentication-operator/pull/844)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e6c52f89298cb0720ce7fb88aced4c35562907e9...d235c0bb7443119e12ec2c8db57035f652f1d871)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/5ffbc4314a0dce081699b574090c6a9abbee2239)

* [OCPBUGS-76296](https://issues.redhat.com/browse/OCPBUGS-76296): Pick upstream commits to Fix VPA recommender concurrent access panic [#404](https://github.com/openshift/kubernetes-autoscaler/pull/404)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/73b87353dd524cc63932c58bab555a94d67bff1b...5ffbc4314a0dce081699b574090c6a9abbee2239)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e01ffcf3dc86dfea4646ca71a78b17cc9a740d80)

* [OCPBUGS-77418](https://issues.redhat.com/browse/OCPBUGS-77418): Fix ironic-proxy service routing for port 6385 [#560](https://github.com/openshift/cluster-baremetal-operator/pull/560)
* [OCPBUGS-77035](https://issues.redhat.com/browse/OCPBUGS-77035): Update kubebuilder tools to more latest version [#558](https://github.com/openshift/cluster-baremetal-operator/pull/558)
* [OCPBUGS-74204](https://issues.redhat.com/browse/OCPBUGS-74204): Fix libguestfs /tmp access in machine-os-downloader init container [#551](https://github.com/openshift/cluster-baremetal-operator/pull/551)
* [OCPBUGS-70163](https://issues.redhat.com/browse/OCPBUGS-70163): Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed [#541](https://github.com/openshift/cluster-baremetal-operator/pull/541)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/46c1f95085beb893d3fd164e7c4d7a6730820520...e01ffcf3dc86dfea4646ca71a78b17cc9a740d80)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/80728a61725bb6ec7f4515c2ac2b3a249f3c5742)

* [OCPBUGS-74650](https://issues.redhat.com/browse/OCPBUGS-74650): fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed [#450](https://github.com/openshift/cluster-capi-operator/pull/450)
* [OCPBUGS-73908](https://issues.redhat.com/browse/OCPBUGS-73908): Remove references to cluster-api-operator image [#445](https://github.com/openshift/cluster-capi-operator/pull/445)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/5cff310f953e6773679f6461a4a5f1790c0c01ae...80728a61725bb6ec7f4515c2ac2b3a249f3c5742)


### [cluster-config-api](https://github.com/openshift/api/tree/b0658d22beea435e3a576165207416842cb2753b)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Introduce KMSEncryption feature gate [#2670](https://github.com/openshift/api/pull/2670)
* [OCPBUGS-76408](https://issues.redhat.com/browse/OCPBUGS-76408): Move DynamicConfigurationManager back to TPNU [#2703](https://github.com/openshift/api/pull/2703)
* [Full changelog](https://github.com/openshift/api/compare/d1c4dc4fd37b8e8f6e4992cda4e84167a3f2cb8c...b0658d22beea435e3a576165207416842cb2753b)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2dde33fb94aae47b460a5f6a672d06c9ee4225d8)

* [OCPBUGS-74588](https://issues.redhat.com/browse/OCPBUGS-74588): Bump openshift/api to get latest AWSMachineProviderConfig type [#386](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/386)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/737457067d0b1a85cd2d9a9eba930fd7d7bd4e40...2dde33fb94aae47b460a5f6a672d06c9ee4225d8)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/43ad01e88038be54792f16f0d692b96da1244404)

* [OCPBUGS-74301](https://issues.redhat.com/browse/OCPBUGS-74301): Re-add serving cert volume mount to hypershift guest cluster manifest [#267](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/267)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/186ad6f430ae3f8f8e777e912efa6670033857e5...43ad01e88038be54792f16f0d692b96da1244404)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/5c38f917a43058c73479673a05d4e782524a3a41)

* [OCPBUGS-77921](https://issues.redhat.com/browse/OCPBUGS-77921): Prefer to remove members where they have another healthy machine in the same failure domain index [#1563](https://github.com/openshift/cluster-etcd-operator/pull/1563)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Wait for revision stability before removing etcd members [#1555](https://github.com/openshift/cluster-etcd-operator/pull/1555)
* [OCPBUGS-74489](https://issues.redhat.com/browse/OCPBUGS-74489): configure inertia for all controllers, bump to 10m [#1535](https://github.com/openshift/cluster-etcd-operator/pull/1535)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2e46bfdf639578074b824bd63eaf3ab8b1cc14ea...5c38f917a43058c73479673a05d4e782524a3a41)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/c2ed7331f378e499b2092f04ca7aaf8b3a075274)

* [OCPBUGS-77432](https://issues.redhat.com/browse/OCPBUGS-77432), [OCPBUGS-77433](https://issues.redhat.com/browse/OCPBUGS-77433): Ensure canary cert matches the default ingress controller's cert [#1367](https://github.com/openshift/cluster-ingress-operator/pull/1367)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b62dd27c901d495e6e78b11968872c002cc2416f...c2ed7331f378e499b2092f04ca7aaf8b3a075274)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/2c97d65aecb470b1972294ea45d898c0c43a01ce)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#2063](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2063)
* [OCPBUGS-77969](https://issues.redhat.com/browse/OCPBUGS-77969): Add support for event-ttl cases and go test cases in Kube API Server Operator [#2066](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2066)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Carry test assertion [#2064](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2064)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the kube-apiserver container [#2061](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2061)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#2054](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2054)
* [OCPBUGS-74181](https://issues.redhat.com/browse/OCPBUGS-74181): SCC: allow image volume type for all SCCs [#2007](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2007)
* [OCPBUGS-73561](https://issues.redhat.com/browse/OCPBUGS-73561): Update openshift/library-go to get new default TLS configuration [#1999](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1999)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/528174d2e1769670fea521f09bb97f0390ca4abd...2c97d65aecb470b1972294ea45d898c0c43a01ce)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/e60e39de9cdd273dadd341d0f56350f504db9623)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#619](https://github.com/openshift/cluster-kube-scheduler-operator/pull/619)
* [OCPBUGS-74592](https://issues.redhat.com/browse/OCPBUGS-74592): [release-4.21] NO-JIRA: pkg/operator: Fix wrong ClusterOperator name [#605](https://github.com/openshift/cluster-kube-scheduler-operator/pull/605)
* [release 4.21] OCPBUGS-74265: Add OPERATOR_IMAGE_VERSION to recovery container [#603](https://github.com/openshift/cluster-kube-scheduler-operator/pull/603)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/4f59ea50a588e9afa714e30e7502eca8b570751b...e60e39de9cdd273dadd341d0f56350f504db9623)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/830f20030a4600916885be7988a5bd5444b7c6ae)

* [OCPBUGS-74425](https://issues.redhat.com/browse/OCPBUGS-74425): Include `kube_pod_labels` in minimal profile [#2797](https://github.com/openshift/cluster-monitoring-operator/pull/2797)
* [OCPBUGS-77908](https://issues.redhat.com/browse/OCPBUGS-77908): [release-4.21] add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod [#2840](https://github.com/openshift/cluster-monitoring-operator/pull/2840)
* [OCPBUGS-76541](https://issues.redhat.com/browse/OCPBUGS-76541): Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts [#2815](https://github.com/openshift/cluster-monitoring-operator/pull/2815)
* [OCPBUGS-77271](https://issues.redhat.com/browse/OCPBUGS-77271): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2829](https://github.com/openshift/cluster-monitoring-operator/pull/2829)
* [OCPBUGS-74622](https://issues.redhat.com/browse/OCPBUGS-74622): update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 [#2804](https://github.com/openshift/cluster-monitoring-operator/pull/2804)
* [OCPBUGS-74202](https://issues.redhat.com/browse/OCPBUGS-74202): move endpointslice RBAC to Role [#2795](https://github.com/openshift/cluster-monitoring-operator/pull/2795)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ab7a74aaad54aa18bf863d86d5b7c9f9e2337ce9...830f20030a4600916885be7988a5bd5444b7c6ae)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/632552909c274bb0edfc1c62f82a677b3c8a3c84)

* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Add config override for openflow-probe [#2917](https://github.com/openshift/cluster-network-operator/pull/2917)
* [OCPBUGS-76285](https://issues.redhat.com/browse/OCPBUGS-76285): Remove duplicated openssl parameter [#2899](https://github.com/openshift/cluster-network-operator/pull/2899)
* [OCPBUGS-69941](https://issues.redhat.com/browse/OCPBUGS-69941): Add kubevirt platform to dual-stack supported platforms [#2861](https://github.com/openshift/cluster-network-operator/pull/2861)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ab9804d6df18e79145a4524d9abbd50475d4b21d...632552909c274bb0edfc1c62f82a677b3c8a3c84)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/273d20bbc2aa6cff97365f8c58bf888f6a7db245)

* [OCPBUGS-78173](https://issues.redhat.com/browse/OCPBUGS-78173): workloadhints: use IsVM to skip BM-only tests [#1480](https://github.com/openshift/cluster-node-tuning-operator/pull/1480)
* NO-JIRA: Make changes for migrating to OTE in Dockerfile [#1454](https://github.com/openshift/cluster-node-tuning-operator/pull/1454)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2f8cd79b9ebf8020cae0c16cd6be51fe5c09769b...273d20bbc2aa6cff97365f8c58bf888f6a7db245)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a1d96ed2e60a60e466245c7c08f001d2a386f274)

* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): cluster-olm-operator sets Progressing=True during upgrade [#177](https://github.com/openshift/cluster-olm-operator/pull/177)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/81989478e114b090ec0cfbf9ae7c000f9b876749...a1d96ed2e60a60e466245c7c08f001d2a386f274)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/52fd1773757b2c3ff497e7db084c3d71cde5478f)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#666](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/666)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the openshift-apiserver container [#664](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/664)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#656](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/656)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/c2d0127291dfe824d9591d4e37ec319a739d988e...52fd1773757b2c3ff497e7db084c3d71cde5478f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/dd362d767167a8ac1889d2ee2a719cf68fac0522)

* [OCPBUGS-74569](https://issues.redhat.com/browse/OCPBUGS-74569): add vsphere permissions for checking if users is authorized to see metrics [#660](https://github.com/openshift/cluster-storage-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/dc5d5f1f47ce949339f3bced4021f3768ed1c57c...dd362d767167a8ac1889d2ee2a719cf68fac0522)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)

* [OCPBUGS-77256](https://issues.redhat.com/browse/OCPBUGS-77256): Implement mTLS authentication and authorization for CVO metrics endpoint [#1326](https://github.com/openshift/cluster-version-operator/pull/1326)
* [OCPBUGS-74009](https://issues.redhat.com/browse/OCPBUGS-74009): lib/resourcemerge/core: Reconcile ConfigMap binaryData too [#1295](https://github.com/openshift/cluster-version-operator/pull/1295)
* [OCPBUGS-73601](https://issues.redhat.com/browse/OCPBUGS-73601): vendor: Update openshift/library-go to get new default TLS configuration [#1290](https://github.com/openshift/cluster-version-operator/pull/1290)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/d4cb3b0234b6dbc3cbf72aa9cbbd42345ac09ff2...d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)


### [console](https://github.com/openshift/console/tree/b0e7ae4b1057b86fcd9439cbc5cbd947575b4ea6)

* [OCPBUGS-77561](https://issues.redhat.com/browse/OCPBUGS-77561): Fix ConsolePluginStatus icon [#16090](https://github.com/openshift/console/pull/16090)
* [OCPBUGS-75000](https://issues.redhat.com/browse/OCPBUGS-75000): Clean up old session cookies to prevent accumulation [#15985](https://github.com/openshift/console/pull/15985)
* [OCPBUGS-77957](https://issues.redhat.com/browse/OCPBUGS-77957): [CI] Fix the VolumeSnapshot CRUD flaky test failures [#16118](https://github.com/openshift/console/pull/16118)
* [OCPBUGS-77882](https://issues.redhat.com/browse/OCPBUGS-77882): Fix infinite recursion in project access form [#16112](https://github.com/openshift/console/pull/16112)
* [OCPBUGS-65948](https://issues.redhat.com/browse/OCPBUGS-65948): prep for 4.21 GA SDK publish [#16116](https://github.com/openshift/console/pull/16116)
* [OCPBUGS-76385](https://issues.redhat.com/browse/OCPBUGS-76385): Workloads - Edit pod count and Edit parallelism : Content is in English [#16005](https://github.com/openshift/console/pull/16005)
* [OCPBUGS-76387](https://issues.redhat.com/browse/OCPBUGS-76387): DataView Pagination page menus : i18n misses [#16007](https://github.com/openshift/console/pull/16007)
* [OCPBUGS-76386](https://issues.redhat.com/browse/OCPBUGS-76386): i18n upload/download routine task - 4.21 / 281 (Latest) [#16006](https://github.com/openshift/console/pull/16006)
* [OCPBUGS-77430](https://issues.redhat.com/browse/OCPBUGS-77430): run and enforce `yarn dedupe` [#16075](https://github.com/openshift/console/pull/16075)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16059](https://github.com/openshift/console/pull/16059)
* [OCPBUGS-76389](https://issues.redhat.com/browse/OCPBUGS-76389): Use Actions button instead of kebab menu on Subscription details page [#16008](https://github.com/openshift/console/pull/16008)
* [OCPBUGS-74998](https://issues.redhat.com/browse/OCPBUGS-74998): Fix referenceFor parameter in SubscriptionDetailsPage [#15984](https://github.com/openshift/console/pull/15984)
* [OCPBUGS-74887](https://issues.redhat.com/browse/OCPBUGS-74887): Add null checks to CRB subject [#15974](https://github.com/openshift/console/pull/15974)
* [OCPBUGS-74587](https://issues.redhat.com/browse/OCPBUGS-74587): '0 of pods' are shown in Status column on DaemonSets list page. [#15953](https://github.com/openshift/console/pull/15953)
* [OCPBUGS-74695](https://issues.redhat.com/browse/OCPBUGS-74695): Bump lodash to latest [#15962](https://github.com/openshift/console/pull/15962)
* [OCPBUGS-74157](https://issues.redhat.com/browse/OCPBUGS-74157): Do not resolve disabled catalog type extensions [#15930](https://github.com/openshift/console/pull/15930)
* [OCPBUGS-73870](https://issues.redhat.com/browse/OCPBUGS-73870): Update the perspective name in dev-console guided tour [#15922](https://github.com/openshift/console/pull/15922)
* [OCPBUGS-73770](https://issues.redhat.com/browse/OCPBUGS-73770): update operator details when changing channels [#15917](https://github.com/openshift/console/pull/15917)
* [OCPBUGS-73871](https://issues.redhat.com/browse/OCPBUGS-73871): i18n upload/download routine task - 4.21 / 281 [#15923](https://github.com/openshift/console/pull/15923)
* [OCPBUGS-69931](https://issues.redhat.com/browse/OCPBUGS-69931), [OCPBUGS-69932](https://issues.redhat.com/browse/OCPBUGS-69932): apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… [#15871](https://github.com/openshift/console/pull/15871)
* [OCPBUGS-73620](https://issues.redhat.com/browse/OCPBUGS-73620): Improve VAC field on PVC details page [#15907](https://github.com/openshift/console/pull/15907)
* [OCPBUGS-73727](https://issues.redhat.com/browse/OCPBUGS-73727): change OperatorHub strings to Software Catalog [#15913](https://github.com/openshift/console/pull/15913)
* [OCPBUGS-72416](https://issues.redhat.com/browse/OCPBUGS-72416): make cloudCredentials optional so operators load when … [#15900](https://github.com/openshift/console/pull/15900)
* [OCPBUGS-69919](https://issues.redhat.com/browse/OCPBUGS-69919): There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations [#15870](https://github.com/openshift/console/pull/15870)
* [OCPBUGS-73097](https://issues.redhat.com/browse/OCPBUGS-73097): Revert the console-shared.json to console-shared directory [#15906](https://github.com/openshift/console/pull/15906)
* [OCPBUGS-70266](https://issues.redhat.com/browse/OCPBUGS-70266): Fix edit application via Deploy image internal registry doesn't select correct image stream [#15879](https://github.com/openshift/console/pull/15879)
* [OCPBUGS-69388](https://issues.redhat.com/browse/OCPBUGS-69388): Prevent application filter in Topology view from resetting to all applications unexpectedly [#15848](https://github.com/openshift/console/pull/15848)
* [Full changelog](https://github.com/openshift/console/compare/25af56c5b0ad9f81e043c701169dec5753a33d41...b0e7ae4b1057b86fcd9439cbc5cbd947575b4ea6)


### [console-operator](https://github.com/openshift/console-operator/tree/419da385c386938a9257107588da9fe16aff6898)

* [OCPBUGS-72562](https://issues.redhat.com/browse/OCPBUGS-72562): Add missing relatedObjects + small refactoring [#1090](https://github.com/openshift/console-operator/pull/1090)
* [OCPBUGS-74686](https://issues.redhat.com/browse/OCPBUGS-74686): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1104](https://github.com/openshift/console-operator/pull/1104)
* [OCPBUGS-74152](https://issues.redhat.com/browse/OCPBUGS-74152): Fix PDB blocking node drains during cluster upgrades + update donwloads deployment [#1103](https://github.com/openshift/console-operator/pull/1103)
* [OCPBUGS-72550](https://issues.redhat.com/browse/OCPBUGS-72550): Add missing console annotation to the quickstart [#1089](https://github.com/openshift/console-operator/pull/1089)
* [Full changelog](https://github.com/openshift/console-operator/compare/44827286277c968858b12ec60322c3df0586374d...419da385c386938a9257107588da9fe16aff6898)


### [docker-builder](https://github.com/openshift/builder/tree/48fce231bac118a63992f466acc8b29a29e1ddde)

* [OCPBUGS-70149](https://issues.redhat.com/browse/OCPBUGS-70149): bump buildah to 1.39.7 to fix CVE-2025-52881 [#495](https://github.com/openshift/builder/pull/495)
* [Full changelog](https://github.com/openshift/builder/compare/c0ef8399e6c3d8731b47502e7ed9d8563a481cdc...48fce231bac118a63992f466acc8b29a29e1ddde)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/e2d0c20eab31c513764507a6d8774de2aef3db2c)

* [OCPBUGS-74915](https://issues.redhat.com/browse/OCPBUGS-74915): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into release-4.21 [#262](https://github.com/openshift/cluster-api-provider-gcp/pull/262)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/085f35d033a51fbb4784f6553ff9176960b0da97...e2d0c20eab31c513764507a6d8774de2aef3db2c)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/0660d93fa9545ded2f6a49f4462de3ed68000232)

* [OCPBUGS-77716](https://issues.redhat.com/browse/OCPBUGS-77716): Support Downward API node name [#101](https://github.com/openshift/gcp-pd-csi-driver/pull/101)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/a022e754beec5b234f922ee3b7330ea157c852d8...0660d93fa9545ded2f6a49f4462de3ed68000232)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)

* [OCPBUGS-77494](https://issues.redhat.com/browse/OCPBUGS-77494): Pass node name to csi-driver container [#173](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/173)
* [OCPBUGS-77310](https://issues.redhat.com/browse/OCPBUGS-77310): Add RBAC permission for node driver to get Node objects [#171](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/171)
* [OCPBUGS-74222](https://issues.redhat.com/browse/OCPBUGS-74222): [release-4.21] Add VAC manifest to support tests on GCP PD [#167](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/167)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/e1035603f87122e26bc2a15bd8da5fc479309eea...ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/1dcb406c2ca2033c3a01617372afbfe8bf09ac71)

* [OCPBUGS-76516](https://issues.redhat.com/browse/OCPBUGS-76516): Bump v1.34.4 [#2590](https://github.com/openshift/kubernetes/pull/2590)
* [OCPBUGS-74975](https://issues.redhat.com/browse/OCPBUGS-74975): UPSTREAM: 136594: raise kubelet CSI init backoff to cover ~140s DNS delays [#2580](https://github.com/openshift/kubernetes/pull/2580)
* [OCPBUGS-73910](https://issues.redhat.com/browse/OCPBUGS-73910): UPSTREAM: 135340: cbor: bump limits [#2565](https://github.com/openshift/kubernetes/pull/2565)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/kubernetes/compare/52351d68ef76ea7ad374e31ae1afb32e1d132c97...1dcb406c2ca2033c3a01617372afbfe8bf09ac71)


### [hypershift](https://github.com/openshift/hypershift/tree/7564aadc9ce8f1473c753bbaa3781f1c9313dcfe)

* [OCPBUGS-78196](https://issues.redhat.com/browse/OCPBUGS-78196): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7914](https://github.com/openshift/hypershift/pull/7914)
* [CNTRLPLANE-2812](https://issues.redhat.com/browse/CNTRLPLANE-2812): feat(aro): Swift support [#7826](https://github.com/openshift/hypershift/pull/7826)
* [OCPBUGS-77365](https://issues.redhat.com/browse/OCPBUGS-77365): Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping [#7834](https://github.com/openshift/hypershift/pull/7834)
* [OCPBUGS-75930](https://issues.redhat.com/browse/OCPBUGS-75930): [release-4.21] fix(cpo): Correct route labeling logic for HCP router infrastructure [#7641](https://github.com/openshift/hypershift/pull/7641)
* [OCPBUGS-75884](https://issues.redhat.com/browse/OCPBUGS-75884): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7632](https://github.com/openshift/hypershift/pull/7632)
* fix: OCPBUGS-74104: Fix CVE-2025-58183 [#7545](https://github.com/openshift/hypershift/pull/7545)
* [OCPBUGS-71133](https://issues.redhat.com/browse/OCPBUGS-71133): fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed [#7433](https://github.com/openshift/hypershift/pull/7433)
* [OCPBUGS-74893](https://issues.redhat.com/browse/OCPBUGS-74893): fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment [#7618](https://github.com/openshift/hypershift/pull/7618)
* [OCPBUGS-74648](https://issues.redhat.com/browse/OCPBUGS-74648): feat(cpo): check components have rolled out before setting available [#7604](https://github.com/openshift/hypershift/pull/7604)
* [Full changelog](https://github.com/openshift/hypershift/compare/6fb603c54baa899b853e5761ecad55b5579a7c92...7564aadc9ce8f1473c753bbaa3781f1c9313dcfe)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/8fe7dafcf238c9416094672e1baf45105622e575)

* [OCPBUGS-77203](https://issues.redhat.com/browse/OCPBUGS-77203): [release-4.21] standardize build paths [#121](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ab36dcc19e6063bf55158b59588448151a200170...8fe7dafcf238c9416094672e1baf45105622e575)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a6cc2a3f799e5cf4ca85e631f6b903999f2b2ad6)

* [OCPBUGS-76960](https://issues.redhat.com/browse/OCPBUGS-76960): Extends the time for the extractor liveness probe [#1233](https://github.com/openshift/insights-operator/pull/1233)
* [OCPBUGS-74479](https://issues.redhat.com/browse/OCPBUGS-74479): set Progressing condition on cluster update [#1217](https://github.com/openshift/insights-operator/pull/1217)
* [OCPBUGS-74233](https://issues.redhat.com/browse/OCPBUGS-74233): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1214](https://github.com/openshift/insights-operator/pull/1214)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b9b46b6484688aefe6bd7b77e1bed1a0fe2361fc...a6cc2a3f799e5cf4ca85e631f6b903999f2b2ad6)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/8316a953a0335bf1720d877d8dd0533f7fd84093)

* [OCPBUGS-77491](https://issues.redhat.com/browse/OCPBUGS-77491): remove dnf cache from the container images [#64](https://github.com/openshift/insights-runtime-extractor/pull/64)
* Fix EAP 8.1 e2e test [#65](https://github.com/openshift/insights-runtime-extractor/pull/65)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/015f7b616bdf0cc062b370079eb42685e81ba11d...8316a953a0335bf1720d877d8dd0533f7fd84093)


### [ironic](https://github.com/openshift/ironic-image/tree/e97769b7a1c47dd4fb2c94bf387d09856878a583)

* [OCPBUGS-76934](https://issues.redhat.com/browse/OCPBUGS-76934): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#791](https://github.com/openshift/ironic-image/pull/791)
* [OCPBUGS-76474](https://issues.redhat.com/browse/OCPBUGS-76474): Update requirements.cachito for 4.21 with heartbeat inspection fix commit [#785](https://github.com/openshift/ironic-image/pull/785)
* [OCPBUGS-76282](https://issues.redhat.com/browse/OCPBUGS-76282): Update ironic hash [#780](https://github.com/openshift/ironic-image/pull/780)
* [OCPBUGS-74603](https://issues.redhat.com/browse/OCPBUGS-74603): fix for minimal builds [#774](https://github.com/openshift/ironic-image/pull/774)
* [OCPBUGS-74428](https://issues.redhat.com/browse/OCPBUGS-74428): Bump eventlet version to latest bugfix [#771](https://github.com/openshift/ironic-image/pull/771)
* [Full changelog](https://github.com/openshift/ironic-image/compare/c020bfd26fa62a9413efec8ef58c76a813fec1e3...e97769b7a1c47dd4fb2c94bf387d09856878a583)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce)

* [OCPBUGS-74603](https://issues.redhat.com/browse/OCPBUGS-74603): fixes for minimal builds [#241](https://github.com/openshift/ironic-agent-image/pull/241)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/e39f354cbf0ed5f2eea09ed93f7b066d0ef0fd1e...ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/707c226243ac401f2994952fe0e55823511111b0)

* [OCPBUGS-74204](https://issues.redhat.com/browse/OCPBUGS-74204): Export TMPDIR to be available to child processes [#112](https://github.com/openshift/ironic-rhcos-downloader/pull/112)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/08fdfd37a6d41bfc6a1fe7ac90dbe293c8a5b555...707c226243ac401f2994952fe0e55823511111b0)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/e00f5806587e71188805bab43dad9099524b9059)

* [OCPBUGS-78048](https://issues.redhat.com/browse/OCPBUGS-78048): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#226](https://github.com/openshift/images/pull/226)
* [Full changelog](https://github.com/openshift/images/compare/c4506d8a1bbede077d3e8e7e4dcf2736909d8e89...e00f5806587e71188805bab43dad9099524b9059)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)

* [OCPBUGS-76994](https://issues.redhat.com/browse/OCPBUGS-76994): [release-4.21] Sync Upstream 2026-01-27 [#61](https://github.com/openshift/cloud-provider-kubevirt/pull/61)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/daf5fba2d1a1514bcbe67edc0230a06136156094...1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1a10b6028c38a85207688a7ddb4ab8d70f3f1ace)

* [OCPBUGS-77833](https://issues.redhat.com/browse/OCPBUGS-77833): Update AMI Whitelist [#5743](https://github.com/openshift/machine-config-operator/pull/5743)
* [OCPBUGS-77689](https://issues.redhat.com/browse/OCPBUGS-77689): Create admin-ack gates for azure/vsphere clusters upgrading to 4.22 [#5735](https://github.com/openshift/machine-config-operator/pull/5735)
* [OCPBUGS-77577](https://issues.redhat.com/browse/OCPBUGS-77577): Fix failure domain matching during vsphere boot image updates [#5727](https://github.com/openshift/machine-config-operator/pull/5727)
* [OCPBUGS-77534](https://issues.redhat.com/browse/OCPBUGS-77534): Update AMI Whitelist [#5722](https://github.com/openshift/machine-config-operator/pull/5722)
* [OCPBUGS-77354](https://issues.redhat.com/browse/OCPBUGS-77354): Clean up vsphere login error logging [#5705](https://github.com/openshift/machine-config-operator/pull/5705)
* [OCPBUGS-76555](https://issues.redhat.com/browse/OCPBUGS-76555): Remove MCD liveness probe [#5651](https://github.com/openshift/machine-config-operator/pull/5651)
* [OCPBUGS-77072](https://issues.redhat.com/browse/OCPBUGS-77072): mcd_config_drift not working properly [#5675](https://github.com/openshift/machine-config-operator/pull/5675)
* [OCPBUGS-76823](https://issues.redhat.com/browse/OCPBUGS-76823): reduce MCO image size [#5657](https://github.com/openshift/machine-config-operator/pull/5657)
* [OCPBUGS-76833](https://issues.redhat.com/browse/OCPBUGS-76833): Machine-config controller should not log about non-existent pull-secret changes [#5659](https://github.com/openshift/machine-config-operator/pull/5659)
* [OCPBUGS-73805](https://issues.redhat.com/browse/OCPBUGS-73805): Prevent unnecessary systemd unit disable [#5648](https://github.com/openshift/machine-config-operator/pull/5648)
* [MCO-2017](https://issues.redhat.com/browse/MCO-2017): Backport OSImageStreams to 4.21 [#5515](https://github.com/openshift/machine-config-operator/pull/5515)
* [OCPBUGS-76356](https://issues.redhat.com/browse/OCPBUGS-76356): crio: disable short_name_mode until we introduce ctrcfg api for it [#5636](https://github.com/openshift/machine-config-operator/pull/5636)
* [OCPBUGS-76359](https://issues.redhat.com/browse/OCPBUGS-76359): Update AMI script and list [#5639](https://github.com/openshift/machine-config-operator/pull/5639)
* [OCPBUGS-76271](https://issues.redhat.com/browse/OCPBUGS-76271): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5624](https://github.com/openshift/machine-config-operator/pull/5624)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport InternalReleaseImage support [#5610](https://github.com/openshift/machine-config-operator/pull/5610)
* [OCPBUGS-74145](https://issues.redhat.com/browse/OCPBUGS-74145): enable nodeip-configuration for platform external [#5581](https://github.com/openshift/machine-config-operator/pull/5581)
* [OCPBUGS-74542](https://issues.redhat.com/browse/OCPBUGS-74542): Stale operator metrics Service and ServiceMonitor resources need to be deleted [#5600](https://github.com/openshift/machine-config-operator/pull/5600)
* [OCPBUGS-74431](https://issues.redhat.com/browse/OCPBUGS-74431): CVE-2025-58183 ose-machine-config-operator-container: Unbounded allocation when parsing GNU sparse map [openshift-4.21] [#5596](https://github.com/openshift/machine-config-operator/pull/5596)
* [OCPBUGS-73819](https://issues.redhat.com/browse/OCPBUGS-73819): Set `NodeDegraded` MCN condition when node state annotation is set to `Degraded` [#5554](https://github.com/openshift/machine-config-operator/pull/5554)
* [OCPBUGS-74103](https://issues.redhat.com/browse/OCPBUGS-74103): Fix up bootstrap-e2e [#5568](https://github.com/openshift/machine-config-operator/pull/5568)
* [OCPBUGS-73872](https://issues.redhat.com/browse/OCPBUGS-73872): CPMS boot image config should not override standard MachineSet configuration [#5559](https://github.com/openshift/machine-config-operator/pull/5559)
* [OCPBUGS-74102](https://issues.redhat.com/browse/OCPBUGS-74102): Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default [#5567](https://github.com/openshift/machine-config-operator/pull/5567)
* [OCPBUGS-71196](https://issues.redhat.com/browse/OCPBUGS-71196): Enable existing units without content [#5561](https://github.com/openshift/machine-config-operator/pull/5561)
* [OCPBUGS-73344](https://issues.redhat.com/browse/OCPBUGS-73344): Fix timeout during configMap cleanup [#5544](https://github.com/openshift/machine-config-operator/pull/5544)
* [OCPBUGS-72398](https://issues.redhat.com/browse/OCPBUGS-72398): Move operator metrics into the controller [#5536](https://github.com/openshift/machine-config-operator/pull/5536)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/8542312713dac225bc5d4c5a48b4453f64498511...1a10b6028c38a85207688a7ddb4ab8d70f3f1ace)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/897098c27a087325632f0be95c60cd2672f9b1e9)

* [OCPBUGS-77031](https://issues.redhat.com/browse/OCPBUGS-77031): Add IPA messages for console and SSH login [#163](https://github.com/openshift/image-customization-controller/pull/163)
* [OCPBUGS-77490](https://issues.redhat.com/browse/OCPBUGS-77490): Clean up dnf cache to reduce container image size [#164](https://github.com/openshift/image-customization-controller/pull/164)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d958f0bf39ee93368c89919b7dbe23363f38493e...897098c27a087325632f0be95c60cd2672f9b1e9)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/41616e7b731b5feea9095594d60eb6b406543973)

* NO-JIRA: [release-4.21] e2e-monitoring fixing loop on legacy dashboard [#828](https://github.com/openshift/monitoring-plugin/pull/828)
* [OCPBUGS-77227](https://issues.redhat.com/browse/OCPBUGS-77227): [openshift-4.21] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via __proto__ Key in mergeConfig [#795](https://github.com/openshift/monitoring-plugin/pull/795)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): [release-4.21] feat: mark alert menu active for incidents tab [#761](https://github.com/openshift/monitoring-plugin/pull/761)
* NO-JIRA: [release-4.21] simplify frontend build in Dockerfile.art [#808](https://github.com/openshift/monitoring-plugin/pull/808)
* [OCPBUGS-74909](https://issues.redhat.com/browse/OCPBUGS-74909): fix: update vulnerable dependencies [#751](https://github.com/openshift/monitoring-plugin/pull/751)
* NO-JIRA: [release-4.21] fix: remove unnecessary package.lock [#729](https://github.com/openshift/monitoring-plugin/pull/729)
* [OCPBUGS-71223](https://issues.redhat.com/browse/OCPBUGS-71223): fix: update qs vulnerable dependency [#718](https://github.com/openshift/monitoring-plugin/pull/718)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a19d1e0bc6868ccc65d044ed11b9fbd9866722e4...41616e7b731b5feea9095594d60eb6b406543973)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)

* [OCPBUGS-77489](https://issues.redhat.com/browse/OCPBUGS-77489): Clean up dnf cache [#100](https://github.com/openshift/multus-networkpolicy/pull/100)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5ed5d2408a35847dabfc843b032ee3eecb4d6ee1...e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/0e839893223991122cfb7cf8722ba651727aa9f3)

* [OCPBUGS-77225](https://issues.redhat.com/browse/OCPBUGS-77225): Fix NAD creation using default namespace instead of selected one [#349](https://github.com/openshift/networking-console-plugin/pull/349)
* [CNV-77540](https://issues.redhat.com/browse/CNV-77540): fix Enable MultiNetworkPolicies lead to invalid URL [#341](https://github.com/openshift/networking-console-plugin/pull/341)
* [CNV-74687](https://issues.redhat.com/browse/CNV-74687): Fixing the title and redirect when deleting a vm network [#340](https://github.com/openshift/networking-console-plugin/pull/340)
* [CNV-76879](https://issues.redhat.com/browse/CNV-76879): Allow passing the physical network name via URL parameter in the VM network wizard [#332](https://github.com/openshift/networking-console-plugin/pull/332)
* [CNV-75831](https://issues.redhat.com/browse/CNV-75831): list all NetworkPolicies in "All projects" [#324](https://github.com/openshift/networking-console-plugin/pull/324)
* [OCPBUGS-73790](https://issues.redhat.com/browse/OCPBUGS-73790): remove whitelist for allowlist [#323](https://github.com/openshift/networking-console-plugin/pull/323)
* [CNV-76211](https://issues.redhat.com/browse/CNV-76211): Remove deprecated badge from localnet [#322](https://github.com/openshift/networking-console-plugin/pull/322)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/be565be12fe23be08b23dabcf8ee48e1054af8c3...0e839893223991122cfb7cf8722ba651727aa9f3)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/71c41b2d8abb0c6ad90dca286baf5d03c1340646)

* NO-JIRA: (chore): update OWNERS file [#167](https://github.com/openshift/oauth-apiserver/pull/167)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/9db210272bb2e085ff975022f531b404ee7f491e...71c41b2d8abb0c6ad90dca286baf5d03c1340646)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/7f518c02931f8c5c1c3aa5d2192a905f973b2b34)

* [OCPBUGS-74131](https://issues.redhat.com/browse/OCPBUGS-74131): test/e2e - do not use ambiguous container image short names [#344](https://github.com/openshift/oauth-proxy/pull/344)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/39f8426add0e2b669cae3232c3fb793ad1b6bb07...7f518c02931f8c5c1c3aa5d2192a905f973b2b34)


### [oauth-server](https://github.com/openshift/oauth-server/tree/2b8183592190365c269ca0c92b1955bbad9a0236)

* [OCPBUGS-77454](https://issues.redhat.com/browse/OCPBUGS-77454): groupmapper: avoid mutating original group users slice when removing user [#213](https://github.com/openshift/oauth-server/pull/213)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3ab74506e64c804a465eb74b74046174a1121dd8...2b8183592190365c269ca0c92b1955bbad9a0236)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3a3bf576d41113afa646bbd7fad4bea5470ad6ee)

* [OCPBUGS-77222](https://issues.redhat.com/browse/OCPBUGS-77222): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1358](https://github.com/openshift/oc-mirror/pull/1358)
* [OCPBUGS-76126](https://issues.redhat.com/browse/OCPBUGS-76126): Fix reg config detection for explicit false values [#1349](https://github.com/openshift/oc-mirror/pull/1349)
* [OCPBUGS-74981](https://issues.redhat.com/browse/OCPBUGS-74981): fix conversion issue for catalog [#1346](https://github.com/openshift/oc-mirror/pull/1346)
* [OCPBUGS-74577](https://issues.redhat.com/browse/OCPBUGS-74577): fix duplicated channel bug in filtered catalogs [#1345](https://github.com/openshift/oc-mirror/pull/1345)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/90ed49cd103118915a697a329a7acfa84eb9b393...3a3bf576d41113afa646bbd7fad4bea5470ad6ee)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/dfc0e537df7af5f9785b90da40e77a268d345c6a)

* [OCPBUGS-74967](https://issues.redhat.com/browse/OCPBUGS-74967): [release-4.21] enhance qe cases to make it more stable [#626](https://github.com/openshift/operator-framework-operator-controller/pull/626)
* [OCPBUGS-74633](https://issues.redhat.com/browse/OCPBUGS-74633): config watchnamespace api cases [#620](https://github.com/openshift/operator-framework-operator-controller/pull/620)
* [OCPBUGS-74562](https://issues.redhat.com/browse/OCPBUGS-74562): enhance ocp-79770 [#617](https://github.com/openshift/operator-framework-operator-controller/pull/617)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/bc5f350745f86a8fa60caccff6c3ea1ecf2ac977...dfc0e537df7af5f9785b90da40e77a268d345c6a)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)

* [OCPBUGS-76789](https://issues.redhat.com/browse/OCPBUGS-76789): Fix make test [#156](https://github.com/openshift/machine-api-provider-openstack/pull/156)
* [OCPBUGS-69644](https://issues.redhat.com/browse/OCPBUGS-69644): Don't record event for every reconcile [#146](https://github.com/openshift/machine-api-provider-openstack/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/b5a300cae8a79a59417c0a24c371af9a8f0258fe...b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/58e4b429bc3f122b0488916a37a2ef00625c37a4)

* [OCPBUGS-77712](https://issues.redhat.com/browse/OCPBUGS-77712): Update NetworkPolicy egress to support HyperShift custom API ports [#1246](https://github.com/openshift/operator-framework-olm/pull/1246)
* [OCPBUGS-77067](https://issues.redhat.com/browse/OCPBUGS-77067): Remove the collect-profiles info from the microshift kustomization file [#1234](https://github.com/openshift/operator-framework-olm/pull/1234)
* [OCPBUGS-76325](https://issues.redhat.com/browse/OCPBUGS-76325): [release-4.21]remove qe case of testing collect-profiles [#1222](https://github.com/openshift/operator-framework-olm/pull/1222)
* [OCPBUGS-76266](https://issues.redhat.com/browse/OCPBUGS-76266): Remove the collect-profiles job [#1220](https://github.com/openshift/operator-framework-olm/pull/1220)
* [OCPBUGS-72580](https://issues.redhat.com/browse/OCPBUGS-72580): [release-4.21] OCPQE-31297: enhance ocp and microshift olm case [#1189](https://github.com/openshift/operator-framework-olm/pull/1189)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/7d2dd62c2a73b66aa99e82c90f64ab53dd523ddf...58e4b429bc3f122b0488916a37a2ef00625c37a4)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)

* [OCPBUGS-77580](https://issues.redhat.com/browse/OCPBUGS-77580): Update NetworkPolicy egress to support HyperShift custom API ports [#729](https://github.com/operator-framework/operator-marketplace/pull/729)
* [OCPBUGS-73881](https://issues.redhat.com/browse/OCPBUGS-73881): Increase default catalog polling interval to 4h (240m) [#705](https://github.com/operator-framework/operator-marketplace/pull/705)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/6792bede6c2ed304046c8ef993b4e870378a8be1...efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/fc6a53f0e48f0418652c1ea4dee6c30e431127fc)

* [OCPBUGS-76472](https://issues.redhat.com/browse/OCPBUGS-76472): OCPBUGS-72532: Branch Sync release-4.22 to release-4.21 [12-19-2025] [#3022](https://github.com/openshift/ovn-kubernetes/pull/3022)
* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Minimize ACLs by combining ipBlocks into single ACL [#2995](https://github.com/openshift/ovn-kubernetes/pull/2995)
* [OCPBUGS-77309](https://issues.redhat.com/browse/OCPBUGS-77309): Clear stale conntrack UDP entries for nodePorts [#3002](https://github.com/openshift/ovn-kubernetes/pull/3002)
* [OCPBUGS-77046](https://issues.redhat.com/browse/OCPBUGS-77046), [OCPBUGS-77086](https://issues.redhat.com/browse/OCPBUGS-77086): [release-4.21] combined backport PR for 2 escalations [#2984](https://github.com/openshift/ovn-kubernetes/pull/2984)
* [OCPBUGS-74267](https://issues.redhat.com/browse/OCPBUGS-74267): release-4.21 fix(localnet, ipamless): Prevent LSP deletion on sync [#2940](https://github.com/openshift/ovn-kubernetes/pull/2940)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/25a714b82c643bcfdf5543cb467afa32dac06787...fc6a53f0e48f0418652c1ea4dee6c30e431127fc)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/3de9763f36128ffa8b25a63c9447f6d64114c270)

* [OCPBUGS-77295](https://issues.redhat.com/browse/OCPBUGS-77295): backport upstream fix to reconcile resources with inconsistent status [#365](https://github.com/openshift/prometheus-operator/pull/365)
* [OCPBUGS-74477](https://issues.redhat.com/browse/OCPBUGS-74477): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#359](https://github.com/openshift/prometheus-operator/pull/359)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/4889ec9a591e78f50916a9ffedf4499c6fc63259...3de9763f36128ffa8b25a63c9447f6d64114c270)


### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/00961b9b7a696e8d5caf3641ab8caac906e85fb6)

* [COS-3946](https://issues.redhat.com/browse/COS-3946): Backport rhel-10.2 support to release-4.21 branch [#1898](https://github.com/openshift/os/pull/1898)
* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1889](https://github.com/openshift/os/pull/1889)
* NO-JIRA: Remove (commented) WASM mentions [#1888](https://github.com/openshift/os/pull/1888)
* [OCPBUGS-72560](https://issues.redhat.com/browse/OCPBUGS-72560): package: add ose-crio-credential-provider [#1880](https://github.com/openshift/os/pull/1880)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/fdd134fa0fb3d878504d1f64cd3734abb3ccedf5...00961b9b7a696e8d5caf3641ab8caac906e85fb6)


### [rhel-coreos-10, rhel-coreos-10-extensions](https://github.com/openshift/os/tree/e8f5a55a31574c1d1e415b23e939e20ddcfcc399)

* NO-JIRA: Remove (commented) WASM mentions [#1888](https://github.com/openshift/os/pull/1888)
* [OCPBUGS-72560](https://issues.redhat.com/browse/OCPBUGS-72560): package: add ose-crio-credential-provider [#1880](https://github.com/openshift/os/pull/1880)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/46fc1a46f4df404128ce084356c626bf8d3f86c1...e8f5a55a31574c1d1e415b23e939e20ddcfcc399)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/559b7122d1a0cad4ff475b496c2896b39eed8c08)

* [OCPBUGS-76641](https://issues.redhat.com/browse/OCPBUGS-76641): filter ingress namespace on UnmanagedRoutes metric [#73](https://github.com/openshift/route-controller-manager/pull/73)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/8a69194a461dc33d2ed67a220bca91d384d34df4...559b7122d1a0cad4ff475b496c2896b39eed8c08)


### [tests](https://github.com/openshift/origin/tree/355b44bdd0e6283f83f9baa1b7e935ff80d727bb)

* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Update optimized builds test to use rpm -qa instead of dnf [#30856](https://github.com/openshift/origin/pull/30856)
* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Allow test to tolerate running on minimal images [#30852](https://github.com/openshift/origin/pull/30852)
* [OCPBUGS-77823](https://issues.redhat.com/browse/OCPBUGS-77823): add the missing namespace from managed openshift [#30838](https://github.com/openshift/origin/pull/30838)
* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): Remove exception for monitoring OLM Progression condition [#30839](https://github.com/openshift/origin/pull/30839)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Add test for CPMS OnDelete strategy with full master replacement [#30802](https://github.com/openshift/origin/pull/30802)
* : OCPBUGS-76856:cert tests: mark TLS registry test as informing [#30779](https://github.com/openshift/origin/pull/30779)
* [OCPBUGS-76529](https://issues.redhat.com/browse/OCPBUGS-76529): Fix flakiness in MutableCSINodeAllocatableCount test [#30772](https://github.com/openshift/origin/pull/30772)
* [OCPBUGS-76955](https://issues.redhat.com/browse/OCPBUGS-76955): co/kube-storage-version-migrator reports Available=False in a non-upgrade job [#30740](https://github.com/openshift/origin/pull/30740)
* [OCPBUGS-75513](https://issues.redhat.com/browse/OCPBUGS-75513): adjust olm test to pass on a degraded run [#30749](https://github.com/openshift/origin/pull/30749)
* [OCPBUGS-75513](https://issues.redhat.com/browse/OCPBUGS-75513): update test logic for degraded cluster run [#30748](https://github.com/openshift/origin/pull/30748)
* [OCPBUGS-74499](https://issues.redhat.com/browse/OCPBUGS-74499): Update MCN tests to better handle condition transitions through the "Unknown" state [#30729](https://github.com/openshift/origin/pull/30729)
* [OCPBUGS-74503](https://issues.redhat.com/browse/OCPBUGS-74503): VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex [#30730](https://github.com/openshift/origin/pull/30730)
* [OCPBUGS-74372](https://issues.redhat.com/browse/OCPBUGS-74372): Add/RemoveSigtermProtection event matcher for SigstoreImageVerification test [#30723](https://github.com/openshift/origin/pull/30723)
* [OCPBUGS-74303](https://issues.redhat.com/browse/OCPBUGS-74303): Add filter for openshift-copy-to-node ns [#30715](https://github.com/openshift/origin/pull/30715)
* [OCPBUGS-74094](https://issues.redhat.com/browse/OCPBUGS-74094): Ignore repeated TopologyAwareHintsDisabled events [#30699](https://github.com/openshift/origin/pull/30699)
* [OCPBUGS-73808](https://issues.redhat.com/browse/OCPBUGS-73808): update watch request limits for cluster-autoscaler-operator [#30691](https://github.com/openshift/origin/pull/30691)
* [OCPBUGS-67016](https://issues.redhat.com/browse/OCPBUGS-67016): Isolate and reduce parallelism for OrderedNamespaceDeletion tests. [#30661](https://github.com/openshift/origin/pull/30661)
* [OCPBUGS-70143](https://issues.redhat.com/browse/OCPBUGS-70143): Fix race condition in external binary extraction [#30641](https://github.com/openshift/origin/pull/30641)
* [OCPBUGS-72414](https://issues.redhat.com/browse/OCPBUGS-72414): change iperf2 test to serial from parallel [#30673](https://github.com/openshift/origin/pull/30673)
* [Full changelog](https://github.com/openshift/origin/compare/1d23a96bb921ad1ceffaaed8bf295d26626f87d5...355b44bdd0e6283f83f9baa1b7e935ff80d727bb)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/d6a19449cc5d49541221d48d62c67d7a48142d19)

* [OCPBUGS-74701](https://issues.redhat.com/browse/OCPBUGS-74701): Fix update of stable-generation annotation [#330](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/330)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/57c19630194a26e9e2338b0ba8a32e8922e74259...d6a19449cc5d49541221d48d62c67d7a48142d19)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/a35d685a88aca94ed1d805c1079ebf14dfb81c9d)

* [OCPBUGS-74706](https://issues.redhat.com/browse/OCPBUGS-74706): fix concurrent map writes [#207](https://github.com/openshift/vsphere-problem-detector/pull/207)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/5ddf3f06b3c50c4500195d315cbea1688e45ba22...a35d685a88aca94ed1d805c1079ebf14dfb81c9d)