# 4.21.17

Created: 2026-05-21 19:24:17 +0000 UTC

Image Digest: `sha256:52a9c863ddc434eedee8c0e75cf610805db2b6b91502688857bc8afa62ed1dd6`


## Changes from 4.21.1

### Components

* Kubectl 1.34.1
* Kubernetes upgraded from 1.34.2 to 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260204-0 to 10.2.20260513-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| EventTTL <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| IngressControllerDynamicConfigurationManager <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| KMSEncryptionProvider <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled<br/>(Changed)| Disabled<br/>(Changed) |
| KMSEncryption <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* cluster-kube-cluster-api-operator
* libvirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [e5713826](https://github.com/openshift/assisted-installer-agent/commit/e57138265957c81b33d3ac13078d35f6ca07069d) `sha256:59cb7551e6285adeb8d62ffa19a72749cd3811310d8f1b7e01cdddd4dbbd15ff`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:583f7fa8f863fc94fa64701fdc9f73d3cb2e3489a824c0acce5bbe7be316c3f0`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [10ceef5e](https://github.com/openshift/cluster-api-provider-aws/commit/10ceef5e6f6d0cb79a3345de4fd8851f6300205c) `sha256:33d3b0a841e965c04e003231f843d29151af86963cb666ee559bad2927c4a686`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [ff9c8d4e](https://github.com/openshift/aws-karpenter-provider-aws/commit/ff9c8d4e8fdc55d3e60c6add0942c018826ae870) `sha256:71afe8c9691ee703ac13b0890907f33c75a228b59c814d6b82f2a65a1e47ade4`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [938565c9](https://github.com/openshift/machine-api-provider-aws/commit/938565c9f796fba385c0978a5ae1cc0a79f0f857) `sha256:944aa629155f7178117d9a0bbd7bb0ed004d3366fbcf57631fbfe83a2bc368c6`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [5cd42ed1](https://github.com/openshift/aws-pod-identity-webhook/commit/5cd42ed1e5151f45f0134593e9cfebdb6517b385) `sha256:79cba6d8170de79871ba17cab38590214ac607cbb70f8cea3b6d5e2e02459ef2`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [83b3f9ec](https://github.com/openshift/cloud-provider-azure/commit/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8) `sha256:eb42844eab339ea395b4602416c980869df131dba59919427f2030c8637584cb`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [83b3f9ec](https://github.com/openshift/cloud-provider-azure/commit/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8) `sha256:8aae47deb7ed9c93ea1550a4e7a095b27929b445c6da66b357481ecea7547696`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [b8b8cb1c](https://github.com/openshift/machine-api-provider-azure/commit/b8b8cb1c5af7d2a3ef9a4a99a0739a2166a7932c) `sha256:92da519b676d1e67fca18661be99dc37bf6dc8b495e2a8f6014bd1f73c0ebd26`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [3f2a6e0d](https://github.com/openshift/azure-workload-identity/commit/3f2a6e0d1ea68af321f9674b0b097939be7d2014) `sha256:6b9b731bd9507e7697e44ad1d50b69ba887ff289c38487dcf9b20066fa9907f3`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [659138fe](https://github.com/openshift/cluster-api-provider-metal3/commit/659138fef3abd4c71b0b01fa1279146745699a5a) `sha256:1089968ddd8b2f384bc430585b52186ee5e8a1e87b22828829a5070177c699fb`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4e6a729c](https://github.com/openshift/cluster-api-provider-baremetal/commit/4e6a729c5ac8fde8859db5830def262dfdee28ea) `sha256:42e915db33cda8eff13c9059b0f08f0726a1022e904de8aff549a62999c7b095`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [dec12ba6](https://github.com/openshift/cluster-autoscaler-operator/commit/dec12ba632a4810b4ff43a9172f462a1dd291e44) `sha256:079857ea9446e9f5271915305cad92a6058525c138e95ca9e0d1adc607c453b9`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [dc0d4a5c](https://github.com/openshift/cluster-bootstrap/commit/dc0d4a5cdaf8a7477cab584208dc99352f46efe2) `sha256:3a7fea6d73c0058ab2ab3b389a11fd287ed94bd4b84044ad3845f837327ae893`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [6148c0cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/6148c0cca626bcf0bfebcc6dd0c77a41944cba87) `sha256:aa5612c01cd4a3b8ed4536fd0210bc340cd487f1c5db55e76e1fe0a4d7e1b2b5`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [1eb450a3](https://github.com/openshift/cluster-config-operator/commit/1eb450a3a2456f6e3fe3d727208b5f7b0dd35aba) `sha256:4dcca96cc1098fc9f8caa84312eb5bb95bf9b40f7e68fbe70dfa2f036107b884`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [2dde33fb](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/2dde33fb94aae47b460a5f6a672d06c9ee4225d8) `sha256:066088b2da98cbd11eba710779b1702bcebe5f4e0edb1e5a1f3c0d106b70b7d0`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [41a53fed](https://github.com/openshift/cluster-dns-operator/commit/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9) `sha256:0d072ef32cfb35efa4839aa9322dd996f6ada6a1184841b96a0c5b988b2679ad`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b2dfc3bb](https://github.com/openshift/cluster-image-registry-operator/commit/b2dfc3bba3dfd8dba90918a4a3be74deb3c548dd) `sha256:9858c6a18b4544829492b23c8d512c1ccf59bb85accf7391d1757ea9927b2507`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [395de967](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/395de96705749de9c6a5f25747b9d5c3d5f65a8f) `sha256:220ae5ead3716b681dd35b1b64079ff6ddbba18decef051da11d400f92550933`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [8a42beeb](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/8a42beebd580bd2e241aa6d93860c09e907f2407) `sha256:57d040a42eb53bc8628369ab2a2ba5e8c0896116c9f12135c2c7a1f05a94c6ff`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [d864813c](https://github.com/openshift/cluster-machine-approver/commit/d864813cd3ab01c0f975b2bf41e9046948f0afa1) `sha256:edd04f343ab4194bdc35d712025a89ed3d61753579c4893d97676d93361a34b7`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2617a201](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2617a201bb3607192a9f82faa18384676f611e3c) `sha256:582a6829822f50c3c10b715fe097f313e572ad2c20599df7eca8546b78102397`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [8b775487](https://github.com/openshift/cluster-policy-controller/commit/8b775487512fb543bff470ff1042bd3ac31b29be) `sha256:14abc306d7f63b16821732a58721bf5628000a779000f968afd96b3a91412469`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [11ed1942](https://github.com/openshift/cluster-samples-operator/commit/11ed1942dbbf7a8334862b3d598a967e9b92aa77) `sha256:ecd4ee7a1176a302b15ce61590357556b54e1891601f066ce2a73b1c192cd388`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b3cae8f2](https://github.com/openshift/cluster-update-keys/commit/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f) `sha256:fefeb4a35d5f9084d0c7d83e0d627ee588eddaca612ebc02858144fda631b16d`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [16114b8d](https://github.com/openshift/configmap-reload/commit/16114b8de20278b8f4b7a425ece6d35d53214773) `sha256:b0655c6feb7794fc5e9fa846df5bf8cf6f7b78e3b841eb6f3d147fb9a8674fe9`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:6d66d598d56b94ac48ee79fcc1689a42f01fac275e580ff8c675ad2bbe1b5e86`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:f0eb5b2d683f328d91690623964225dfd1ea42e367fa389dcaf2c8b149416b07`
* [coredns](https://github.com/openshift/coredns) git [7486e9e4](https://github.com/openshift/coredns/commit/7486e9e4330c1e41d9a91e4673b7f2782efc112c) `sha256:4ca89c81b23abca0cf93995f22124a23766d7464f1a0463699ef631cb19674c2`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [d880a1ec](https://github.com/openshift/csi-external-resizer/commit/d880a1ec6da02dbf61600ec7999266185ca9f784) `sha256:9ffb919975c2dbd4845c5050a712308f6ae5e118a4784d1e5e81dc5778d77320`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [af250fdb](https://github.com/openshift/csi-external-snapshot-metadata/commit/af250fdbac8af84d9808a2892bfc911c04162115) `sha256:2af6d3e8950104eb2203fff51cdd99418d427a45b42d611ca6f992770fa256b6`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [9098db0e](https://github.com/openshift/csi-external-snapshotter/commit/9098db0e434e0d986eeadd2ebe69119540a550d1) `sha256:34689de4f996279d60f5480b01476eaf830f873ad847107b40727f18cbb63758`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [78dacb7c](https://github.com/openshift/csi-livenessprobe/commit/78dacb7c661a62c78036c2737401afd3eb6fd04d) `sha256:ccfde1461ce4f6a60cd9d3459207678edcb4bc7c6a0430b2fc89878335c42596`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d29f3f7a](https://github.com/openshift/csi-node-driver-registrar/commit/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c) `sha256:dc6794c5e79a02d025b945b7911af163f032bb99061e6147aedfc07c0985afcc`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [9098db0e](https://github.com/openshift/csi-external-snapshotter/commit/9098db0e434e0d986eeadd2ebe69119540a550d1) `sha256:372ac8398d433b5d51ce8ce2a8fd2475d35778ab342c3d9c36b796d2cb1c6056`
* [docker-registry](https://github.com/openshift/image-registry) git [602f51c7](https://github.com/openshift/image-registry/commit/602f51c795dcdcd71c75f6abfe79dc0424a0476a) `sha256:aa05d64cd9cc32ec7bf6d32a4fba8ae7e5488c13b19284d6a316c466ff07b55c`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:ac0430e800549977b3bbb5804232b80d351ecb8b8c81d1fb64d4ef0a94fdb8e1`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:4f7d601dce0c9b7b1d4edc2fd940c93a6c57bf5cc554d2cc80bf4c36fa8d304f`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d481e5cb](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d481e5cb9323b01964bf143b58403b62fa31e5e7) `sha256:295ee351f218fe3be2fb62b9e8edfee6ea271d7c29bb8a2b0af21c17ec494e77`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [c566572b](https://github.com/openshift/cloud-provider-ibm/commit/c566572b2cf0120499e81181f1efb1e729e9c418) `sha256:e3c73ba0b80d326752bcd06823b69cac75a531694b193ea9247384f7330601a5`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [00bc7407](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/00bc740728d9f8ec86fe04199884108c2a091b58) `sha256:d3c2edad5f743036f72a171f01e338e2e37ab1f30ecbbe94627272050b5575c2`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [f7e3ec30](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/f7e3ec30f746add35458fad54dd6bccb97e307bf) `sha256:a85169465b210fdde8cb1378f7dd3933fb5d486e2f6041707698ff2ddc25fdf4`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [b95b05fe](https://github.com/openshift/ironic-static-ip-manager/commit/b95b05fe0ba17255ef61e92d4167ca4c9de789b8) `sha256:eb8769392df4c6e768f21ddef17c0945a29ebf6467a2a2864d32a094abff7db1`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [cd636680](https://github.com/openshift/kube-rbac-proxy/commit/cd636680e06a55395c26570dff0cb37277014388) `sha256:3531cbdb9512d8c734ae154a9694632d14e60efbc06fa3a68cc9bd1180a8e3e8`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [ce5ff17e](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/ce5ff17e9a81ce754567e6dd5053d13409c251e9) `sha256:90ba12ba7ca5ee59968b770afdb405672b640f700cca06ca61a03148c57feaef`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:4b7c13993cebe8fbbb1635a0cc0106bc1928d1fcaffce0cdc7acc0926583833c`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d95feb67](https://github.com/openshift/multus-admission-controller/commit/d95feb67adfb97346849c79e36b6a9d404296ae9) `sha256:9481c720231b8bb67f2435fba83853b403c758f309c20f81df20f5629a4125e0`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:b461f896b98bb85815039629d8ef18acbc59826bf021092dfc3e6ce3ac73d11e`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:39645dff4db76fe5cb0530c0b0bca9c84c1207c60eb573b423604ccae459366d`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:84174d5e6b89733c77584d02e68f03864aa78cb00bcea0450e6a8b2615f22a26`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [844fa588](https://github.com/openshift/network-metrics-daemon/commit/844fa588c4200b8ff768d1916d63f1d4c1db2daf) `sha256:5b0c3d11eb635e5cd767ee8d8875a8dd2440bef70fc8f8b590907ec082509753`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:c104280d7af3a0f04784dd79820dfdaa2ec62270773c40b8b75883c1b4c6e25e`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33b7bec6](https://github.com/openshift/cloud-provider-nutanix/commit/33b7bec6fe27b8d126982a70b4579112cd67052b) `sha256:15516b07973f5385e132e485e188d38b88a4a7849afec7272a4cc664f9038d5a`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b15a665c](https://github.com/openshift/machine-api-provider-nutanix/commit/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be) `sha256:7c946026731604397631c26c2da88dbb5925c14aae10dcf8378205ef60876b54`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [71c41b2d](https://github.com/openshift/oauth-apiserver/commit/71c41b2d8abb0c6ad90dca286baf5d03c1340646) `sha256:5a8d0da9a7966e8ab8e78666629c5ce5360d83ba01522628a5a33b93564c7968`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [7f518c02](https://github.com/openshift/oauth-proxy/commit/7f518c02931f8c5c1c3aa5d2192a905f973b2b34) `sha256:226ad38862b86cd05a686b3bf208058c6695af8879b1a1e854591ea8f82f5bc9`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [64dea074](https://github.com/openshift/openshift-apiserver/commit/64dea074d6b457e1fae3598cea0bb72493d2cab8) `sha256:3652dfabddf5ba8c179ce722452b614da6742b6e1cbd201d956a7faa7c303c8a`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [438d52e7](https://github.com/openshift/openshift-controller-manager/commit/438d52e79d691e016d66eabfe9a53c84229db40c) `sha256:4d4bca54cd1a13d86447ef7a1e31cccda52e73929905d787be7eb9ab127dc276`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [ab605a4b](https://github.com/openshift/openshift-state-metrics/commit/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8) `sha256:3d9762437f5f7247f0dc502a2569349218ec102cc4ce850265ae2e6bc3ef3cf8`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [70f5ad34](https://github.com/openshift/openstack-resource-controller/commit/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72) `sha256:04ffa5b7d6c2e53f6f01752d1933f9aac1918946546d8b82cdd4a57efbbee7b6`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [969a04e9](https://github.com/openshift/cloud-provider-powervs/commit/969a04e9dcb4cdde10e3038a9e28d2e27548918d) `sha256:42a2a7180e59596904ee6021f4cea29816aeb53a80dcbe4e4f6c897d352ae7d7`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [551974ef](https://github.com/openshift/machine-api-provider-powervs/commit/551974ef93dedb1b9677a778e1533391448e0c56) `sha256:12a768b391a6d8e74f4269a0dc38e6e9b32eed70102890105989147de6aa1b25`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [610c11b5](https://github.com/openshift/prom-label-proxy/commit/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494) `sha256:1bdd73e09e5963d35446bd36b970a515bdd77c25dde05135af4da59417ac6e4c`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [3dbe0b64](https://github.com/openshift/prometheus-alertmanager/commit/3dbe0b64ae3b9439b888be65a32431c7bf0d6806) `sha256:e703320d7dc1864bf5bf8a56a80f16e40a1854955afaca0375ed3fac224883c2`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [39d72873](https://github.com/openshift/node_exporter/commit/39d728735779afef886bc10a8bc7cf72f54d51a0) `sha256:0a7e1fde6f39e9c3f3015cb12e4512a4018235eac347f9506e88dfa3d0a45c60`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e9622ba1](https://github.com/openshift/service-ca-operator/commit/e9622ba18c86bf24aceab0c19fdcb87339c14f44) `sha256:423f66d9163e855ac9c975b399ad56d2c524711fe3e063c3301d98fb4284160f`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8b929332](https://github.com/openshift/volume-data-source-validator/commit/8b9293323cf8fdce93824e37168573ca3f73de3a) `sha256:38808191b42e57fc9a77e776f1d7e33ab130a73d500c5494b201e3f252d32239`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f69584d6](https://github.com/openshift/cloud-provider-vsphere/commit/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e) `sha256:5fcbf3b2f0a4e8b45c883cdfb8f0bd40d6df8e2b6c77f0b124849e0c0d006a61`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [a35d685a](https://github.com/openshift/vsphere-problem-detector/commit/a35d685a88aca94ed1d805c1079ebf14dfb81c9d) `sha256:53044bc5800772175d491fd3f2455de1c87fd37f9221f4c6e851f9f14b87b1e0`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/a88966fd44394937c070dd9007e56ab4b4ace922)

* [OCPBUGS-81843](https://issues.redhat.com/browse/OCPBUGS-81843): Mark raw FC/iSCSI multipath members as ineligible [#10148](https://github.com/openshift/assisted-service/pull/10148)
* [OCPBUGS-81843](https://issues.redhat.com/browse/OCPBUGS-81843): Prefer multipath disk in ABI disk selection [#10112](https://github.com/openshift/assisted-service/pull/10112)
* [OCPBUGS-79580](https://issues.redhat.com/browse/OCPBUGS-79580): Fix multi-document YAML parsing for NMStateConfig [#10058](https://github.com/openshift/assisted-service/pull/10058)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#8806](https://github.com/openshift/assisted-service/pull/8806)
* [Full changelog](https://github.com/openshift/assisted-service/compare/463b8527179ebd248856b8240318898bb192da11...a88966fd44394937c070dd9007e56ab4b4ace922)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/070f654bf5003765d3d00ab1811ef5ad111a5d4a)

* [OCPBUGS-81642](https://issues.redhat.com/browse/OCPBUGS-81642): fix: allow workers to join TNA cluster when 1 master + arbiter are ready [#2066](https://github.com/openshift/assisted-installer/pull/2066)
* [OCPBUGS-77536](https://issues.redhat.com/browse/OCPBUGS-77536): Fix root partition before copying IRI registry data [#2038](https://github.com/openshift/assisted-installer/pull/2038)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/79093911c4613f9aa916b552a6376f3e38e3cbc1...070f654bf5003765d3d00ab1811ef5ad111a5d4a)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/c7ea3d63462c49de12e7ccc5f57e9fa431f8b750)

* [OCPBUGS-85541](https://issues.redhat.com/browse/OCPBUGS-85541): Bump msw pkg version to 2.13.5 (#3729) [#3729](https://github.com/openshift-assisted/assisted-installer-ui/pull/3729)
* fix monted pull secret parsing (#3727) [#3727](https://github.com/openshift-assisted/assisted-installer-ui/pull/3727)
* [OCPBUGS-84235](https://issues.redhat.com/browse/OCPBUGS-84235): add pull secret auto populate logic to ABI local UI (#3509) [#3509](https://github.com/openshift-assisted/assisted-installer-ui/pull/3509)
* Allow to install SNO topology (#3722) [#3722](https://github.com/openshift-assisted/assisted-installer-ui/pull/3722)
* [OCPBUGS-85261](https://issues.redhat.com/browse/OCPBUGS-85261): [release-4.21] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3684) [#3684](https://github.com/openshift-assisted/assisted-installer-ui/pull/3684)
* Remove 2 node arbiter option from the control plane dropdown option (#3680) [#3680](https://github.com/openshift-assisted/assisted-installer-ui/pull/3680)
* [OCPBUGS-84608](https://issues.redhat.com/browse/OCPBUGS-84608), [OCPBUGS-84830](https://issues.redhat.com/browse/OCPBUGS-84830), [OCPBUGS-84993](https://issues.redhat.com/browse/OCPBUGS-84993), [OCPBUGS-85009](https://issues.redhat.com/browse/OCPBUGS-85009), [OCPBUGS-85039](https://issues.redhat.com/browse/OCPBUGS-85039): Bump axios to ^1.15.1 (#3690) [#3690](https://github.com/openshift-assisted/assisted-installer-ui/pull/3690)
* [MGMT-24152](https://issues.redhat.com/browse/MGMT-24152): UI allows editing pull secret in draft cluster (#3674) [#3674](https://github.com/openshift-assisted/assisted-installer-ui/pull/3674)
* Update OWNERS file (#3654) [#3654](https://github.com/openshift-assisted/assisted-installer-ui/pull/3654)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3525) [#3525](https://github.com/openshift-assisted/assisted-installer-ui/pull/3525)
* fix operators list in ABI below the sea (#3599) [#3599](https://github.com/openshift-assisted/assisted-installer-ui/pull/3599)
* [OCPBUGS-81589](https://issues.redhat.com/browse/OCPBUGS-81589): bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3581) [#3581](https://github.com/openshift-assisted/assisted-installer-ui/pull/3581)
* [OCPBUGS-83303](https://issues.redhat.com/browse/OCPBUGS-83303): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3583) [#3583](https://github.com/openshift-assisted/assisted-installer-ui/pull/3583)
* [OCPBUGS-81587](https://issues.redhat.com/browse/OCPBUGS-81587): upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3535) [#3535](https://github.com/openshift-assisted/assisted-installer-ui/pull/3535)
* Add support for release branches in PR workflow (#3528) [#3528](https://github.com/openshift-assisted/assisted-installer-ui/pull/3528)
* populate default values in local ui from infraEnv (#3503) [#3503](https://github.com/openshift-assisted/assisted-installer-ui/pull/3503)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/479a68f329b4c4088a999a6f4f1c4a078a9b4e93...c7ea3d63462c49de12e7ccc5f57e9fa431f8b750)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23)

* [OCPBUGS-84120](https://issues.redhat.com/browse/OCPBUGS-84120): Update OCP version for Konflux [#301](https://github.com/openshift/agent-installer-utils/pull/301)
* [OCPBUGS-85526](https://issues.redhat.com/browse/OCPBUGS-85526): update konflux references [#287](https://github.com/openshift/agent-installer-utils/pull/287)
* [OCPBUGS-83852](https://issues.redhat.com/browse/OCPBUGS-83852): Pass environment through to podman [#292](https://github.com/openshift/agent-installer-utils/pull/292)
* [OCPBUGS-82588](https://issues.redhat.com/browse/OCPBUGS-82588): Update OCP version in Konflux [#285](https://github.com/openshift/agent-installer-utils/pull/285)
* [OCPBUGS-82539](https://issues.redhat.com/browse/OCPBUGS-82539): Update Konflux references [#265](https://github.com/openshift/agent-installer-utils/pull/265)
* [OCPBUGS-81645](https://issues.redhat.com/browse/OCPBUGS-81645): Update operator versions [#282](https://github.com/openshift/agent-installer-utils/pull/282)
* [OCPBUGS-78393](https://issues.redhat.com/browse/OCPBUGS-78393): Update Konflux release version to 4.21.5 [#270](https://github.com/openshift/agent-installer-utils/pull/270)
* [OCPBUGS-78188](https://issues.redhat.com/browse/OCPBUGS-78188): Add a flag to provide a custom appliance image [#273](https://github.com/openshift/agent-installer-utils/pull/273)
* [OCPBUGS-78144](https://issues.redhat.com/browse/OCPBUGS-78144): Update to use the 4.21 Catalog [#271](https://github.com/openshift/agent-installer-utils/pull/271)
* [OCPBUGS-77538](https://issues.redhat.com/browse/OCPBUGS-77538): (Backport) Override prefilled rendezvousIP [#263](https://github.com/openshift/agent-installer-utils/pull/263)
* [OCPBUGS-77302](https://issues.redhat.com/browse/OCPBUGS-77302): Remove multiple redhat-operator-index catalogs [#262](https://github.com/openshift/agent-installer-utils/pull/262)
* [OCPBUGS-77236](https://issues.redhat.com/browse/OCPBUGS-77236): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a [#222](https://github.com/openshift/agent-installer-utils/pull/222)
* [OCPBUGS-77220](https://issues.redhat.com/browse/OCPBUGS-77220): Update Konflux references [#251](https://github.com/openshift/agent-installer-utils/pull/251)
* [OCPBUGS-76590](https://issues.redhat.com/browse/OCPBUGS-76590): Update Konflux files to build 4.21.1 [#254](https://github.com/openshift/agent-installer-utils/pull/254)
* [OCPBUGS-76411](https://issues.redhat.com/browse/OCPBUGS-76411): Include additional operators in OVE config [#253](https://github.com/openshift/agent-installer-utils/pull/253)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#248](https://github.com/openshift/agent-installer-utils/pull/248)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/e45bb707b42a6709deb5b87a04879b1557c697a5...dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fdc7f3f15c693593cb573b6bef6f0363256b6f52)

* [OCPCLOUD-3341](https://issues.redhat.com/browse/OCPCLOUD-3341): Updates ecr-credential-provider make target [#134](https://github.com/openshift/cloud-provider-aws/pull/134)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/3365bc9ca5b116c63c1c90130c017f3496a139a1...fdc7f3f15c693593cb573b6bef6f0363256b6f52)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709)

* [OCPBUGS-80734](https://issues.redhat.com/browse/OCPBUGS-80734): Bump google.golang.org/grpc to v1.79.3 [#310](https://github.com/openshift/aws-ebs-csi-driver/pull/310)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/57eebffcc8abbbbb6edcf3b536b769d97e31819c...1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/5f294954dc029e0ed120243c3188af81df89d9e4)

* [OCPBUGS-85234](https://issues.redhat.com/browse/OCPBUGS-85234): Mount writable /tmp in SMB CSI driver [#551](https://github.com/openshift/csi-operator/pull/551)
* [OCPBUGS-80844](https://issues.redhat.com/browse/OCPBUGS-80844): Bump google.golang.org/grpc to v1.79.3 [#539](https://github.com/openshift/csi-operator/pull/539)
* [OCPBUGS-78779](https://issues.redhat.com/browse/OCPBUGS-78779): Fix readonly root fs in Azure init containers [#528](https://github.com/openshift/csi-operator/pull/528)
* [OCPBUGS-78155](https://issues.redhat.com/browse/OCPBUGS-78155): Add only to tags to volume object, if volume is not already tagged [#521](https://github.com/openshift/csi-operator/pull/521)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d3789c528621d54b0d46b40795acd9c635b2982d...5f294954dc029e0ed120243c3188af81df89d9e4)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/887615ffa8a595ee3693e92fa56db4dd30f20f73)

* [OCPBUGS-80711](https://issues.redhat.com/browse/OCPBUGS-80711): Bump google.golang.org/grpc to v1.79.3 [#40](https://github.com/openshift/aws-encryption-provider/pull/40)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...887615ffa8a595ee3693e92fa56db4dd30f20f73)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ebf58aac3fc6746fe2037f2166f1226b73b424f4)

* [OCPBUGS-80740](https://issues.redhat.com/browse/OCPBUGS-80740): Bump google.golang.org/grpc to v1.79.3 [#383](https://github.com/openshift/cluster-api-provider-azure/pull/383)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/5d6af81d7ab9b289c3def6c0350313118d63923a...ebf58aac3fc6746fe2037f2166f1226b73b424f4)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/aed3ad0d7780188dbfb7ae67a5d69118b7d74556)

* [OCPBUGS-85285](https://issues.redhat.com/browse/OCPBUGS-85285): check for node name in waitForDiskManagedByTobeRemoved [#147](https://github.com/openshift/azure-disk-csi-driver/pull/147)
* UPSTREAM: 3569: OCPBUGS-80741: Bump grpc to v1.79.3 [#137](https://github.com/openshift/azure-disk-csi-driver/pull/137)
* [OCPBUGS-78012](https://issues.redhat.com/browse/OCPBUGS-78012): 4.21 rebase v1.34.2 [#126](https://github.com/openshift/azure-disk-csi-driver/pull/126)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/3cfa501e46765e7fcdcd27c129fcb729e324c48d...aed3ad0d7780188dbfb7ae67a5d69118b7d74556)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/45061e97a5e2b20b01cd55fee97e5dac43fd79e4)

* UPSTREAM: 3023: OCPBUGS-80744: Bump grpc to v1.79.3 [#125](https://github.com/openshift/azure-file-csi-driver/pull/125)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/c77d75f90b7f84dfc25ba3439bc5eff87c3a2755...45061e97a5e2b20b01cd55fee97e5dac43fd79e4)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/21e0a215b7e5b31eaa75027e0df9eee943e48323)

* [OCPBUGS-80712](https://issues.redhat.com/browse/OCPBUGS-80712): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#34](https://github.com/openshift/azure-kubernetes-kms/pull/34)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/fe1d311ba5aadc40b5f48d47d43175157a73c881...21e0a215b7e5b31eaa75027e0df9eee943e48323)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/5e84c83176d7630f70802b35cb10cdf2b60fd6d3)

* [OCPBUGS-80713](https://issues.redhat.com/browse/OCPBUGS-80713): Bump google.golang.org/grpc to v1.79.3 [#28](https://github.com/openshift/azure-service-operator/pull/28)
* [OCPBUGS-83864](https://issues.redhat.com/browse/OCPBUGS-83864): UPSTREAM: &lt;carry&gt;: add openshift/e2e-tests.sh [#24](https://github.com/openshift/azure-service-operator/pull/24)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8...5e84c83176d7630f70802b35cb10cdf2b60fd6d3)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9a415c497e70d5234c473325cf17aeef78c03544)

* [OCPBUGS-84225](https://issues.redhat.com/browse/OCPBUGS-84225): ibmcloud: bump vpc-go-sdk and capibm [#10514](https://github.com/openshift/installer/pull/10514)
* [OCPBUGS-82439](https://issues.redhat.com/browse/OCPBUGS-82439): [release-4.21] Mount pullsecret manifest to UI container [#10489](https://github.com/openshift/installer/pull/10489)
* [OCPBUGS-79074](https://issues.redhat.com/browse/OCPBUGS-79074): [release 4.21] - Allow all instance types in the install config for GCP [#10417](https://github.com/openshift/installer/pull/10417)
* [OCPBUGS-79378](https://issues.redhat.com/browse/OCPBUGS-79378): Use correct Project ID with GCP Shared VPC [#10423](https://github.com/openshift/installer/pull/10423)
* [OCPBUGS-79424](https://issues.redhat.com/browse/OCPBUGS-79424): Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition [#10428](https://github.com/openshift/installer/pull/10428)
* [OCPBUGS-79421](https://issues.redhat.com/browse/OCPBUGS-79421): Fix race condition: wait for agent-register-infraenv before showing UI URL [#10425](https://github.com/openshift/installer/pull/10425)
* no-jira: fix SC2328 shellcheck errors [#10424](https://github.com/openshift/installer/pull/10424)
* [OCPBUGS-77900](https://issues.redhat.com/browse/OCPBUGS-77900): Add c8g* to tested_instance_types_aarch64 [#10366](https://github.com/openshift/installer/pull/10366)
* [OCPBUGS-79375](https://issues.redhat.com/browse/OCPBUGS-79375): Don't auto-calculate RendezvousIP in unconfigured-ignition [#10410](https://github.com/openshift/installer/pull/10410)
* [OCPBUGS-78696](https://issues.redhat.com/browse/OCPBUGS-78696): [release-4.21] : Disable LoadBalancer in cloud config when Octavia is unavailable [#10399](https://github.com/openshift/installer/pull/10399)
* [OCPBUGS-78241](https://issues.redhat.com/browse/OCPBUGS-78241): Increase timeout for waiting control plane [#10383](https://github.com/openshift/installer/pull/10383)
* [OCPBUGS-77504](https://issues.redhat.com/browse/OCPBUGS-77504): fix wavelength zone name regex [#10343](https://github.com/openshift/installer/pull/10343)
* [OCPBUGS-77551](https://issues.redhat.com/browse/OCPBUGS-77551): Increase size of /var/ostreecontainer mount [#10346](https://github.com/openshift/installer/pull/10346)
* [OCPBUGS-73878](https://issues.redhat.com/browse/OCPBUGS-73878): handle SSH rule deletion for Azure private [#10225](https://github.com/openshift/installer/pull/10225)
* [OCPBUGS-76358](https://issues.redhat.com/browse/OCPBUGS-76358): [release-4.21] Fix destroy bootstrap command for Azure [#10293](https://github.com/openshift/installer/pull/10293)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#10250](https://github.com/openshift/installer/pull/10250)
* [Full changelog](https://github.com/openshift/installer/compare/2c105c33e9e373b6e66c9ef8814f78a72539ae53...9a415c497e70d5234c473325cf17aeef78c03544)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/0aeba7af56b884fadf7f7209d7557e6214b9f49c)

* [OCPBUGS-82141](https://issues.redhat.com/browse/OCPBUGS-82141): Fix PPI for ACM [#476](https://github.com/openshift/baremetal-operator/pull/476)
* [OCPBUGS-65683](https://issues.redhat.com/browse/OCPBUGS-65683): OCPBUGS-78835: PR2774 and PR2793 backports [release-4.21] [#469](https://github.com/openshift/baremetal-operator/pull/469)
* Bug OCPBUGS-76492: BMO fails to start servicing despite updates to HFC spec [#459](https://github.com/openshift/baremetal-operator/pull/459)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a5a9a72ad5738bfd44d639454c92b5e3b9200fb4...0aeba7af56b884fadf7f7209d7557e6214b9f49c)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)

* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#383](https://github.com/openshift/baremetal-runtimecfg/pull/383)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/8404689ecbcb940e113bfb7141909a6231401fee...d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/9d9df34c46c9deba8c291a2a084de5724c0bd820)

* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Allow multiple machine-os versions [#2244](https://github.com/openshift/oc/pull/2244)
* [COS-4005](https://issues.redhat.com/browse/COS-4005): Allow periods in display name labels for version validation [#2243](https://github.com/openshift/oc/pull/2243)
* [OCPBUGS-77486](https://issues.redhat.com/browse/OCPBUGS-77486): Makefile: Strip debugging symbols by default [#2211](https://github.com/openshift/oc/pull/2211)
* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install subscription-manager in required images [#2208](https://github.com/openshift/oc/pull/2208)
* [Full changelog](https://github.com/openshift/oc/compare/19a2243fe780f1aa9b5c8d80bd413a8721cc2e8c...9d9df34c46c9deba8c291a2a084de5724c0bd820)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/693d9f3485b21cf128fa379eabd6787737fa56ad)

* [OCPBUGS-79367](https://issues.redhat.com/browse/OCPBUGS-79367): google.golang.org/grpc v1.79.3 [#993](https://github.com/openshift/cloud-credential-operator/pull/993)
* [OCPBUGS-78199](https://issues.redhat.com/browse/OCPBUGS-78199): Fix infrastructure resource name filtering in watch predicate [#988](https://github.com/openshift/cloud-credential-operator/pull/988)
* [OCPBUGS-71222](https://issues.redhat.com/browse/OCPBUGS-71222): test-ext: remove kubernetes module dependency [#958](https://github.com/openshift/cloud-credential-operator/pull/958)
* [OCPBUGS-74545](https://issues.redhat.com/browse/OCPBUGS-74545): Resolve nil pointer exception in hasResourceTags [#969](https://github.com/openshift/cloud-credential-operator/pull/969)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/3fd434e647dba248e1662267971b91e66da082ea...693d9f3485b21cf128fa379eabd6787737fa56ad)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/57db2d05e057dc90bae3dc1b0e806b3259d38fc0)

* [OCPBUGS-77154](https://issues.redhat.com/browse/OCPBUGS-77154): Refrain from adding Egress IP to public LB backend pool [#205](https://github.com/openshift/cloud-network-config-controller/pull/205)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/dcdf24f542ab4d65c85a4d63d553cc49085567ea...57db2d05e057dc90bae3dc1b0e806b3259d38fc0)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/65eb4b2193d0860c1c1f45b08ea7203694db909f)

* [OCPBUGS-81677](https://issues.redhat.com/browse/OCPBUGS-81677): Do not return error when an IdP returns 500 during a grant check [#868](https://github.com/openshift/cluster-authentication-operator/pull/868)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#847](https://github.com/openshift/cluster-authentication-operator/pull/847)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): carry test assertion [#848](https://github.com/openshift/cluster-authentication-operator/pull/848)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the oauth-apiserver container [#846](https://github.com/openshift/cluster-authentication-operator/pull/846)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#844](https://github.com/openshift/cluster-authentication-operator/pull/844)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e6c52f89298cb0720ce7fb88aced4c35562907e9...65eb4b2193d0860c1c1f45b08ea7203694db909f)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/838a5957d0bebc33c7a0a8a7efd4f5dcb4098286)

* [OCPBUGS-78684](https://issues.redhat.com/browse/OCPBUGS-78684): allow clusterapi provider to skip paused resources [#410](https://github.com/openshift/kubernetes-autoscaler/pull/410)
* [OCPBUGS-76296](https://issues.redhat.com/browse/OCPBUGS-76296): Pick upstream commits to Fix VPA recommender concurrent access panic [#404](https://github.com/openshift/kubernetes-autoscaler/pull/404)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/73b87353dd524cc63932c58bab555a94d67bff1b...838a5957d0bebc33c7a0a8a7efd4f5dcb4098286)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/18e163a4c14db692938da08b7bec821d483945f9)

* [OCPBUGS-78580](https://issues.redhat.com/browse/OCPBUGS-78580): Allow ProvisioningCIDR for unmanaged network [#576](https://github.com/openshift/cluster-baremetal-operator/pull/576)
* [OCPBUGS-77418](https://issues.redhat.com/browse/OCPBUGS-77418): Fix ironic-proxy service routing for port 6385 [#560](https://github.com/openshift/cluster-baremetal-operator/pull/560)
* [OCPBUGS-77035](https://issues.redhat.com/browse/OCPBUGS-77035): Update kubebuilder tools to more latest version [#558](https://github.com/openshift/cluster-baremetal-operator/pull/558)
* [OCPBUGS-74204](https://issues.redhat.com/browse/OCPBUGS-74204): Fix libguestfs /tmp access in machine-os-downloader init container [#551](https://github.com/openshift/cluster-baremetal-operator/pull/551)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/8f9cb31a63e1db99f64fe52af006023f26fa270a...18e163a4c14db692938da08b7bec821d483945f9)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)

* [OCPBUGS-80749](https://issues.redhat.com/browse/OCPBUGS-80749): Bump google.golang.org/grpc to v1.79.3 [#293](https://github.com/openshift/cluster-api/pull/293)
* [Full changelog](https://github.com/openshift/cluster-api/compare/a957484acb353220da0d3062867168d24494a2b6...9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/f9513d3255926b63185a5b5203126699925133c3)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#554](https://github.com/openshift/cluster-capi-operator/pull/554)
* [OCPBUGS-80753](https://issues.redhat.com/browse/OCPBUGS-80753): Bump google.golang.org/grpc to v1.79.3 [#550](https://github.com/openshift/cluster-capi-operator/pull/550)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/80728a61725bb6ec7f4515c2ac2b3a249f3c5742...f9513d3255926b63185a5b5203126699925133c3)


### [cluster-config-api](https://github.com/openshift/api/tree/d6cd612317218735862945e2bafc4a4054be2798)

* [OCPBUGS-83756](https://issues.redhat.com/browse/OCPBUGS-83756): fix(config/v1): define constants for authentication types as typed constants [#2815](https://github.com/openshift/api/pull/2815)
* [CNTRLPLANE-2796](https://issues.redhat.com/browse/CNTRLPLANE-2796): promote the event-ttl feature [#2809](https://github.com/openshift/api/pull/2809)
* [OCPBUGS-82578](https://issues.redhat.com/browse/OCPBUGS-82578): [release-4.21] postpone the removal of the DeploymentConfig API [#2801](https://github.com/openshift/api/pull/2801)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Introduce KMSEncryption feature gate [#2670](https://github.com/openshift/api/pull/2670)
* [OCPBUGS-76408](https://issues.redhat.com/browse/OCPBUGS-76408): Move DynamicConfigurationManager back to TPNU [#2703](https://github.com/openshift/api/pull/2703)
* [Full changelog](https://github.com/openshift/api/compare/d1c4dc4fd37b8e8f6e4992cda4e84167a3f2cb8c...d6cd612317218735862945e2bafc4a4054be2798)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/8c1ebc60a2014ab925cbad6ef255e06ea0bd72b4)

* [OCPBUGS-82971](https://issues.redhat.com/browse/OCPBUGS-82971): Fix PDB unhealthyPodEvictionPolicy field name [#272](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/272)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/43ad01e88038be54792f16f0d692b96da1244404...8c1ebc60a2014ab925cbad6ef255e06ea0bd72b4)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/10012737e9b23528357c130184ef4d890ae8ea33)

* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1604](https://github.com/openshift/cluster-etcd-operator/pull/1604)
* [OCPBUGS-77921](https://issues.redhat.com/browse/OCPBUGS-77921): Prefer to remove members where they have another healthy machine in the same failure domain index [#1563](https://github.com/openshift/cluster-etcd-operator/pull/1563)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Wait for revision stability before removing etcd members [#1555](https://github.com/openshift/cluster-etcd-operator/pull/1555)
* [OCPBUGS-74489](https://issues.redhat.com/browse/OCPBUGS-74489): configure inertia for all controllers, bump to 10m [#1535](https://github.com/openshift/cluster-etcd-operator/pull/1535)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2e46bfdf639578074b824bd63eaf3ab8b1cc14ea...10012737e9b23528357c130184ef4d890ae8ea33)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6c70966cd2011f861843e85efb8bf08c3a938fe1)

* [OCPBUGS-82544](https://issues.redhat.com/browse/OCPBUGS-82544): set trustBundleName in Istio global values [#1418](https://github.com/openshift/cluster-ingress-operator/pull/1418)
* [OCPBUGS-77432](https://issues.redhat.com/browse/OCPBUGS-77432), [OCPBUGS-77433](https://issues.redhat.com/browse/OCPBUGS-77433): Ensure canary cert matches the default ingress controller's cert [#1367](https://github.com/openshift/cluster-ingress-operator/pull/1367)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b62dd27c901d495e6e78b11968872c002cc2416f...6c70966cd2011f861843e85efb8bf08c3a938fe1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/424f27c9c415373b7f60756b5a1c24f48f248512)

* [OCPBUGS-85563](https://issues.redhat.com/browse/OCPBUGS-85563): [4.21] operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization [#2151](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2151)
* [OCPBUGS-85270](https://issues.redhat.com/browse/OCPBUGS-85270): fsync static pod cert and manifest writes for crash durability [#2144](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2144)
* [OCPBUGS-83855](https://issues.redhat.com/browse/OCPBUGS-83855): Allow setting the oauthMetadata when auth type is None [#2116](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2116)
* [OCPBUGS-78548](https://issues.redhat.com/browse/OCPBUGS-78548): [release-4.21] : Always set service-account-jwks-uri to LB URL even with custom issuer [#2071](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2071)
* [OCPBUGS-78784](https://issues.redhat.com/browse/OCPBUGS-78784): [4.21] move event-ttl test to its own suite [#2073](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2073)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#2063](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2063)
* [OCPBUGS-77969](https://issues.redhat.com/browse/OCPBUGS-77969): Add support for event-ttl cases and go test cases in Kube API Server Operator [#2066](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2066)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Carry test assertion [#2064](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2064)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the kube-apiserver container [#2061](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2061)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#2054](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2054)
* [OCPBUGS-74181](https://issues.redhat.com/browse/OCPBUGS-74181): SCC: allow image volume type for all SCCs [#2007](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2007)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/41d526c4367b210b9868fe025d0a50e55f30ac64...424f27c9c415373b7f60756b5a1c24f48f248512)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5ef1df3be41d38ddae9b3d22ce51ba486939e9f1)

* [OCPBUGS-83737](https://issues.redhat.com/browse/OCPBUGS-83737): add /var/run/kubernetes as emptyDir [#641](https://github.com/openshift/cluster-kube-scheduler-operator/pull/641)
* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#619](https://github.com/openshift/cluster-kube-scheduler-operator/pull/619)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/7809937c07c5dbfa272bfbe87d99e09104bf3fc9...5ef1df3be41d38ddae9b3d22ce51ba486939e9f1)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c5ffc7afc457f7fc29c2818bb0ca6c9015ed0c39)

* [OCPBUGS-80765](https://issues.redhat.com/browse/OCPBUGS-80765): bump 4.21 grpc to v1.79.3 [#2875](https://github.com/openshift/cluster-monitoring-operator/pull/2875)
* [OCPBUGS-74425](https://issues.redhat.com/browse/OCPBUGS-74425): Include `kube_pod_labels` in minimal profile [#2797](https://github.com/openshift/cluster-monitoring-operator/pull/2797)
* [OCPBUGS-77908](https://issues.redhat.com/browse/OCPBUGS-77908): [release-4.21] add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod [#2840](https://github.com/openshift/cluster-monitoring-operator/pull/2840)
* [OCPBUGS-76541](https://issues.redhat.com/browse/OCPBUGS-76541): Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts [#2815](https://github.com/openshift/cluster-monitoring-operator/pull/2815)
* [OCPBUGS-77271](https://issues.redhat.com/browse/OCPBUGS-77271): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2829](https://github.com/openshift/cluster-monitoring-operator/pull/2829)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/edfb52319f871c7009db54f68e90da0e12021e73...c5ffc7afc457f7fc29c2818bb0ca6c9015ed0c39)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/b5955e9ede2128e8558c41ce87c1e8a11e09a515)

* [OCPBUGS-84169](https://issues.redhat.com/browse/OCPBUGS-84169): Handle zero-worker HyperShift clusters in daemonset rollout [4.21 backport] [#2972](https://github.com/openshift/cluster-network-operator/pull/2972)
* [OCPBUGS-83422](https://issues.redhat.com/browse/OCPBUGS-83422): wait for patch port to apply drop garp flows [#2946](https://github.com/openshift/cluster-network-operator/pull/2946)
* [OCPBUGS-76333](https://issues.redhat.com/browse/OCPBUGS-76333): Silence ovnkube-lib.sh to avoid mass of logs to collectors [#2900](https://github.com/openshift/cluster-network-operator/pull/2900)
* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Add config override for openflow-probe [#2917](https://github.com/openshift/cluster-network-operator/pull/2917)
* [OCPBUGS-76285](https://issues.redhat.com/browse/OCPBUGS-76285): Remove duplicated openssl parameter [#2899](https://github.com/openshift/cluster-network-operator/pull/2899)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/05d65e63fd668e97c1b7f45837ba66075f478d6d...b5955e9ede2128e8558c41ce87c1e8a11e09a515)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)

* [OCPBUGS-85016](https://issues.redhat.com/browse/OCPBUGS-85016): e2e: Add irqbalance StartLimitBurst &gt;= 100 config test [#1505](https://github.com/openshift/cluster-node-tuning-operator/pull/1505)
* [OCPBUGS-81122](https://issues.redhat.com/browse/OCPBUGS-81122): CNF-21333: [4.21]:perfprof: enable exec-cpu-affinity by default [#1484](https://github.com/openshift/cluster-node-tuning-operator/pull/1484)
* [OCPBUGS-76375](https://issues.redhat.com/browse/OCPBUGS-76375): AA: E2E: LLC: Add tests related to odd cpus [#1467](https://github.com/openshift/cluster-node-tuning-operator/pull/1467)
* [OCPBUGS-77464](https://issues.redhat.com/browse/OCPBUGS-77464): E2E: Add test case to check Infrastructure pods affinity [#1476](https://github.com/openshift/cluster-node-tuning-operator/pull/1476)
* [OCPBUGS-78173](https://issues.redhat.com/browse/OCPBUGS-78173): workloadhints: use IsVM to skip BM-only tests [#1480](https://github.com/openshift/cluster-node-tuning-operator/pull/1480)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/0e275839ec18e436487508b729ed7fcfe41e3875...a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/03bedb913bce9c7deabf7868e5cbefc57cf3490b)

* [OCPBUGS-80769](https://issues.redhat.com/browse/OCPBUGS-80769): Bump google.golang.org/grpc to v1.79.3 [#197](https://github.com/openshift/cluster-olm-operator/pull/197)
* [OCPBUGS-76269](https://issues.redhat.com/browse/OCPBUGS-76269): add resources to clusterOperator relatedObjects [#170](https://github.com/openshift/cluster-olm-operator/pull/170)
* [OCPBUGS-81311](https://issues.redhat.com/browse/OCPBUGS-81311): Fix golangci-lint timeout in CI [#189](https://github.com/openshift/cluster-olm-operator/pull/189)
* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): cluster-olm-operator sets Progressing=True during upgrade [#177](https://github.com/openshift/cluster-olm-operator/pull/177)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/81989478e114b090ec0cfbf9ae7c000f9b876749...03bedb913bce9c7deabf7868e5cbefc57cf3490b)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/52fd1773757b2c3ff497e7db084c3d71cde5478f)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#666](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/666)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the openshift-apiserver container [#664](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/664)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#656](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/656)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/c2d0127291dfe824d9591d4e37ec319a739d988e...52fd1773757b2c3ff497e7db084c3d71cde5478f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e403475164a4de23d358a93106a35353ec29f3d7)

* [OCPBUGS-79531](https://issues.redhat.com/browse/OCPBUGS-79531): volume-data-source-validator should run on master nodes [#687](https://github.com/openshift/cluster-storage-operator/pull/687)
* [OCPBUGS-74569](https://issues.redhat.com/browse/OCPBUGS-74569): add vsphere permissions for checking if users is authorized to see metrics [#660](https://github.com/openshift/cluster-storage-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/dc5d5f1f47ce949339f3bced4021f3768ed1c57c...e403475164a4de23d358a93106a35353ec29f3d7)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)

* [OCPBUGS-77256](https://issues.redhat.com/browse/OCPBUGS-77256): Implement mTLS authentication and authorization for CVO metrics endpoint [#1326](https://github.com/openshift/cluster-version-operator/pull/1326)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6fb3e84b9738a7a57a00d72cd6bc6f84d6c8e16e...d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)


### [console](https://github.com/openshift/console/tree/d365e0ed18e1871400e0a4f6faa18a6776b473fa)

* [OCPBUGS-85520](https://issues.redhat.com/browse/OCPBUGS-85520): Fix create visual connector in Topology [#16439](https://github.com/openshift/console/pull/16439)
* NO-JIRA: enable multi-architecture yarn builds [#16420](https://github.com/openshift/console/pull/16420)
* [OCPBUGS-85040](https://issues.redhat.com/browse/OCPBUGS-85040): Remove PII from events [#16401](https://github.com/openshift/console/pull/16401)
* [OCPBUGS-84967](https://issues.redhat.com/browse/OCPBUGS-84967): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16396](https://github.com/openshift/console/pull/16396)
* [OCPBUGS-84858](https://issues.redhat.com/browse/OCPBUGS-84858): Fix ConsoleDataView filter order: Name and Label shoul… [#16386](https://github.com/openshift/console/pull/16386)
* [OCPBUGS-83494](https://issues.redhat.com/browse/OCPBUGS-83494): remove dev to admin links as dev monitoring views are enabled [#16164](https://github.com/openshift/console/pull/16164)
* [OCPBUGS-83572](https://issues.redhat.com/browse/OCPBUGS-83572): fix Developer Sandbox telemetry [#16286](https://github.com/openshift/console/pull/16286)
* [OCPBUGS-83418](https://issues.redhat.com/browse/OCPBUGS-83418): Fix resource log dropdown TypeError [#16281](https://github.com/openshift/console/pull/16281)
* [OCPBUGS-81517](https://issues.redhat.com/browse/OCPBUGS-81517): Follow up on fixing the remaining issues in the multi-group impersonation feature [#16236](https://github.com/openshift/console/pull/16236)
* [OCPBUGS-81714](https://issues.redhat.com/browse/OCPBUGS-81714): Add missing i18n translations for Pagination component [#16255](https://github.com/openshift/console/pull/16255)
* [OCPBUGS-79351](https://issues.redhat.com/browse/OCPBUGS-79351): Make folder field optional for vsphere [#16189](https://github.com/openshift/console/pull/16189)
* [OCPBUGS-79040](https://issues.redhat.com/browse/OCPBUGS-79040): Fix incorrect OLMv1 documentation URL [#16186](https://github.com/openshift/console/pull/16186)
* [OCPBUGS-81308](https://issues.redhat.com/browse/OCPBUGS-81308): Fix VolumeSnapshot and VolumeSnapshotContent tables sorting [#16216](https://github.com/openshift/console/pull/16216)
* [OCPBUGS-79037](https://issues.redhat.com/browse/OCPBUGS-79037): Fix useOperatorCatalogCategories hook. [#16185](https://github.com/openshift/console/pull/16185)
* [OCPBUGS-81330](https://issues.redhat.com/browse/OCPBUGS-81330): Fix entire app suspending to load perspective switcher icon [#16226](https://github.com/openshift/console/pull/16226)
* [OCPBUGS-81488](https://issues.redhat.com/browse/OCPBUGS-81488): Add robots.txt policy to console [#16227](https://github.com/openshift/console/pull/16227)
* [OCPBUGS-80931](https://issues.redhat.com/browse/OCPBUGS-80931): Hide filter category selector when only one filter exists [#16199](https://github.com/openshift/console/pull/16199)
* [OCPBUGS-77246](https://issues.redhat.com/browse/OCPBUGS-77246): AsyncComponent type improvements [#16058](https://github.com/openshift/console/pull/16058)
* [OCPBUGS-79035](https://issues.redhat.com/browse/OCPBUGS-79035): Fix TypeError in OLS code import to console [#16184](https://github.com/openshift/console/pull/16184)
* [OCPBUGS-78799](https://issues.redhat.com/browse/OCPBUGS-78799): Fix search component to not pass ALL_NAMESPACES_KEY to… [#16170](https://github.com/openshift/console/pull/16170)
* [OCPBUGS-79533](https://issues.redhat.com/browse/OCPBUGS-79533): enable keyboard shortcut for DataViewTextFilter [#16195](https://github.com/openshift/console/pull/16195)
* [OCPBUGS-78927](https://issues.redhat.com/browse/OCPBUGS-78927), [OCPBUGS-78928](https://issues.redhat.com/browse/OCPBUGS-78928): OLM prompts for GCP Workload Identity parameters during Kiali Operato… [#16176](https://github.com/openshift/console/pull/16176)
* [OCPBUGS-78308](https://issues.redhat.com/browse/OCPBUGS-78308): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16050](https://github.com/openshift/console/pull/16050)
* [OCPBUGS-78599](https://issues.redhat.com/browse/OCPBUGS-78599): Migrate InstallPlan components table to PatternFly Table [#16159](https://github.com/openshift/console/pull/16159)
* [OCPBUGS-78599](https://issues.redhat.com/browse/OCPBUGS-78599): Reset pagination page when changing namespace [#16158](https://github.com/openshift/console/pull/16158)
* [OCPBUGS-77029](https://issues.redhat.com/browse/OCPBUGS-77029): Fixed Metrics page React error #306 by exporting QueryBrowser component [#16038](https://github.com/openshift/console/pull/16038)
* [OCPBUGS-77251](https://issues.redhat.com/browse/OCPBUGS-77251): Fix editing secrets with mixed text and binary data [#16060](https://github.com/openshift/console/pull/16060)
* [OCPBUGS-77561](https://issues.redhat.com/browse/OCPBUGS-77561): Fix ConsolePluginStatus icon [#16090](https://github.com/openshift/console/pull/16090)
* [OCPBUGS-75000](https://issues.redhat.com/browse/OCPBUGS-75000): Clean up old session cookies to prevent accumulation [#15985](https://github.com/openshift/console/pull/15985)
* [OCPBUGS-77957](https://issues.redhat.com/browse/OCPBUGS-77957): [CI] Fix the VolumeSnapshot CRUD flaky test failures [#16118](https://github.com/openshift/console/pull/16118)
* [OCPBUGS-77882](https://issues.redhat.com/browse/OCPBUGS-77882): Fix infinite recursion in project access form [#16112](https://github.com/openshift/console/pull/16112)
* [OCPBUGS-65948](https://issues.redhat.com/browse/OCPBUGS-65948): prep for 4.21 GA SDK publish [#16116](https://github.com/openshift/console/pull/16116)
* [OCPBUGS-76385](https://issues.redhat.com/browse/OCPBUGS-76385): Workloads - Edit pod count and Edit parallelism : Content is in English [#16005](https://github.com/openshift/console/pull/16005)
* [OCPBUGS-76387](https://issues.redhat.com/browse/OCPBUGS-76387): DataView Pagination page menus : i18n misses [#16007](https://github.com/openshift/console/pull/16007)
* [OCPBUGS-76386](https://issues.redhat.com/browse/OCPBUGS-76386): i18n upload/download routine task - 4.21 / 281 (Latest) [#16006](https://github.com/openshift/console/pull/16006)
* [OCPBUGS-77430](https://issues.redhat.com/browse/OCPBUGS-77430): run and enforce `yarn dedupe` [#16075](https://github.com/openshift/console/pull/16075)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16059](https://github.com/openshift/console/pull/16059)
* [OCPBUGS-76389](https://issues.redhat.com/browse/OCPBUGS-76389): Use Actions button instead of kebab menu on Subscription details page [#16008](https://github.com/openshift/console/pull/16008)
* [Full changelog](https://github.com/openshift/console/compare/984efb6ad2c5c64edf839f2ec27dd610ca85bd8d...d365e0ed18e1871400e0a4f6faa18a6776b473fa)


### [console-operator](https://github.com/openshift/console-operator/tree/2b3dcd53e99ef44f442850df9e1543e7be674404)

* [OCPBUGS-82037](https://issues.redhat.com/browse/OCPBUGS-82037): Redeploy console pods upon cert rotation [#1139](https://github.com/openshift/console-operator/pull/1139)
* [OCPBUGS-78929](https://issues.redhat.com/browse/OCPBUGS-78929): Remove orphaned console-conversion-webhook deployment and related resource [#1128](https://github.com/openshift/console-operator/pull/1128)
* Sync Dockerfile.ocp image [#1126](https://github.com/openshift/console-operator/pull/1126)
* [OCPBUGS-72562](https://issues.redhat.com/browse/OCPBUGS-72562): Add missing relatedObjects + small refactoring [#1090](https://github.com/openshift/console-operator/pull/1090)
* [OCPBUGS-74686](https://issues.redhat.com/browse/OCPBUGS-74686): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1104](https://github.com/openshift/console-operator/pull/1104)
* [Full changelog](https://github.com/openshift/console-operator/compare/bdf006d0b1f6653b36f2b44a4d3bb16d1a5cb0b5...2b3dcd53e99ef44f442850df9e1543e7be674404)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/a123414456212431a2843d4e3a4f7250182402e4)

* UPSTREAM-SYNC: Sync release-4.21 with upstream release-1.34 [#371](https://github.com/openshift/cloud-provider-openstack/pull/371)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/bf508c062084dc6dec20480f7d173f047ad4f2d6...a123414456212431a2843d4e3a4f7250182402e4)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/ebfd16d227b3af490f4327a8a040f6c9657a3b01)

* [OCPBUGS-80783](https://issues.redhat.com/browse/OCPBUGS-80783): CVE-2026-33186: bump google.golang.org/grpc v1.79.3 [#176](https://github.com/openshift/csi-driver-nfs/pull/176)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/49f2d86fb6172d9d8909ed0f70cb3bc71a4f7c01...ebfd16d227b3af490f4327a8a040f6c9657a3b01)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/6a3be10e6795c8149c4bd3c9856f7e2d312108e2)

* [OCPBUGS-80784](https://issues.redhat.com/browse/OCPBUGS-80784): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/csi-external-attacher/pull/102)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/344669a2189fecdf5471fdc9a1246dd751cb1afb...6a3be10e6795c8149c4bd3c9856f7e2d312108e2)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)

* [OCPBUGS-80785](https://issues.redhat.com/browse/OCPBUGS-80785): Bump google.golang.org/grpc to v1.79.3 [#132](https://github.com/openshift/csi-external-provisioner/pull/132)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58...ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)


### [docker-builder](https://github.com/openshift/builder/tree/48fce231bac118a63992f466acc8b29a29e1ddde)

* [OCPBUGS-70149](https://issues.redhat.com/browse/OCPBUGS-70149): bump buildah to 1.39.7 to fix CVE-2025-52881 [#495](https://github.com/openshift/builder/pull/495)
* [Full changelog](https://github.com/openshift/builder/compare/c0ef8399e6c3d8731b47502e7ed9d8563a481cdc...48fce231bac118a63992f466acc8b29a29e1ddde)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad)

* [OCPBUGS-78535](https://issues.redhat.com/browse/OCPBUGS-78535): Support ubi minimal base image [#186](https://github.com/openshift/driver-toolkit/pull/186)
* [OCPBUGS-77887](https://issues.redhat.com/browse/OCPBUGS-77887): Clean up cruft in /var/cache/dnf [#183](https://github.com/openshift/driver-toolkit/pull/183)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/5c53d757ae380994b89701a98d8b61912154aca7...f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/e27accef1fa99089410e4b0894db21a392d9bf99)

* [OCPBUGS-83615](https://issues.redhat.com/browse/OCPBUGS-83615): Fix OSD ILB bug [#108](https://github.com/openshift/cloud-provider-gcp/pull/108)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/8732386c3ddcb98dae624f7bb925ed0ef8d077d5...e27accef1fa99089410e4b0894db21a392d9bf99)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/fe230b8a6407a06e1be9d6994a92ac8c5a43237d)

* [OCPBUGS-80805](https://issues.redhat.com/browse/OCPBUGS-80805): Bump google.golang.org/grpc to v1.79.3 [#287](https://github.com/openshift/cluster-api-provider-gcp/pull/287)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/e2d0c20eab31c513764507a6d8774de2aef3db2c...fe230b8a6407a06e1be9d6994a92ac8c5a43237d)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/49b8eb1bbdd364b8144dee270a88cace41271e4d)

* [OCPBUGS-80828](https://issues.redhat.com/browse/OCPBUGS-80828): Bump gRPC-Go package for CVE fix [#154](https://github.com/openshift/machine-api-provider-gcp/pull/154)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/91f71c9adfd6b715a6ef340bb43ea5e1a8b44245...49b8eb1bbdd364b8144dee270a88cace41271e4d)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1da557fe54562347dbf18bee04fe6564a2697707)

* [OCPBUGS-80809](https://issues.redhat.com/browse/OCPBUGS-80809): Bump google.golang.org/grpc to v1.79.3 in release-4.21 [#104](https://github.com/openshift/gcp-pd-csi-driver/pull/104)
* [OCPBUGS-77716](https://issues.redhat.com/browse/OCPBUGS-77716): Support Downward API node name [#101](https://github.com/openshift/gcp-pd-csi-driver/pull/101)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/a022e754beec5b234f922ee3b7330ea157c852d8...1da557fe54562347dbf18bee04fe6564a2697707)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)

* [OCPBUGS-77494](https://issues.redhat.com/browse/OCPBUGS-77494): Pass node name to csi-driver container [#173](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/173)
* [OCPBUGS-77310](https://issues.redhat.com/browse/OCPBUGS-77310): Add RBAC permission for node driver to get Node objects [#171](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/171)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/73b5939d71b7e3ded7ce418049dc28a5c3a2bb09...ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)


### [haproxy-router](https://github.com/openshift/router/tree/5949f713517b3cc158cd78b34d71d5a9084d2e1c)

* [OCPBUGS-79374](https://issues.redhat.com/browse/OCPBUGS-79374): Lower verbosity for parseIPList empty list logging [#752](https://github.com/openshift/router/pull/752)
* [Full changelog](https://github.com/openshift/router/compare/b231c65b5c06c1f74590ca8e77caecc6213beb6a...5949f713517b3cc158cd78b34d71d5a9084d2e1c)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/eab2218b931d0c20740d6259df59f242abf32ef7)

* [OCPBUGS-85500](https://issues.redhat.com/browse/OCPBUGS-85500): Bump Kubernetes v1.34.8 to release-4.21 [#2665](https://github.com/openshift/kubernetes/pull/2665)
* "OCPBUGS-83608: Bump to k8s v1.34.7" [#2647](https://github.com/openshift/kubernetes/pull/2647)
* NO-JIRA: UPSTREAM: &lt;carry&gt;: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS [#2636](https://github.com/openshift/kubernetes/pull/2636)
* [OCPBUGS-78991](https://issues.redhat.com/browse/OCPBUGS-78991): Bump 1.34.6 to release-4.21 [#2634](https://github.com/openshift/kubernetes/pull/2634)
* [OCPBUGS-77475](https://issues.redhat.com/browse/OCPBUGS-77475): Bump v1.34.5 to release-4.21 [#2601](https://github.com/openshift/kubernetes/pull/2601)
* [OCPBUGS-76516](https://issues.redhat.com/browse/OCPBUGS-76516): Bump v1.34.4 [#2590](https://github.com/openshift/kubernetes/pull/2590)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0df353502309af2497270ddf993bb866e2f2b5a9...eab2218b931d0c20740d6259df59f242abf32ef7)


### [hypershift](https://github.com/openshift/hypershift/tree/6d6591b4008606c96fd5cbd02f506c65132b628f)

* [OCPBUGS-85781](https://issues.redhat.com/browse/OCPBUGS-85781): Add AWS ISO domains to konnectivity IsCloudAPI [#8531](https://github.com/openshift/hypershift/pull/8531)
* [OCPBUGS-85621](https://issues.redhat.com/browse/OCPBUGS-85621): fix CVE-2026-33186 by updating grpc-go [#8518](https://github.com/openshift/hypershift/pull/8518)
* [OCPBUGS-83710](https://issues.redhat.com/browse/OCPBUGS-83710): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8270](https://github.com/openshift/hypershift/pull/8270)
* [OCPBUGS-85538](https://issues.redhat.com/browse/OCPBUGS-85538): [release-4.21] Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs [#8214](https://github.com/openshift/hypershift/pull/8214)
* [OCPBUGS-85538](https://issues.redhat.com/browse/OCPBUGS-85538): [release-4.21] CNTRLPLANE-2740: Add KAS liveness readiness sidecar to OAS and OAuth API Server [#8213](https://github.com/openshift/hypershift/pull/8213)
* [OCPBUGS-76447](https://issues.redhat.com/browse/OCPBUGS-76447): Add UserAgent telemetry to CPO Azure SDK clients [#7685](https://github.com/openshift/hypershift/pull/7685)
* [OCPBUGS-81745](https://issues.redhat.com/browse/OCPBUGS-81745): [release-4.21] Honor AWS AMI override in NodePool token generation [#8170](https://github.com/openshift/hypershift/pull/8170)
* [OCPBUGS-81836](https://issues.redhat.com/browse/OCPBUGS-81836): OCPBUGS-81670: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field [#8157](https://github.com/openshift/hypershift/pull/8157)
* [OCPBUGS-81490](https://issues.redhat.com/browse/OCPBUGS-81490): fix(cpo): skip router LB services for ARO HCP [#8135](https://github.com/openshift/hypershift/pull/8135)
* [OCPBUGS-77966](https://issues.redhat.com/browse/OCPBUGS-77966): fix: global-pull-secret-syncer pod ~15-minute delay scheduling on new nodes [#8129](https://github.com/openshift/hypershift/pull/8129)
* [OCPBUGS-81287](https://issues.redhat.com/browse/OCPBUGS-81287): fix(release): allow multiple machine-os component versions [#8103](https://github.com/openshift/hypershift/pull/8103)
* [OCPBUGS-81285](https://issues.redhat.com/browse/OCPBUGS-81285): fix(releaseinfo): allow periods in version display name regex [#8102](https://github.com/openshift/hypershift/pull/8102)
* [OCPBUGS-78933](https://issues.redhat.com/browse/OCPBUGS-78933): fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8014](https://github.com/openshift/hypershift/pull/8014)
* [CNTRLPLANE-3006](https://issues.redhat.com/browse/CNTRLPLANE-3006): Azure web identity webhook 4.21 [#7997](https://github.com/openshift/hypershift/pull/7997)
* [OCPBUGS-78957](https://issues.redhat.com/browse/OCPBUGS-78957): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#7975](https://github.com/openshift/hypershift/pull/7975)
* [OCPBUGS-78473](https://issues.redhat.com/browse/OCPBUGS-78473): Fix deadlock when changing release image during initial provisioning [#7954](https://github.com/openshift/hypershift/pull/7954)
* [OCPBUGS-78484](https://issues.redhat.com/browse/OCPBUGS-78484): fix(catalogs): update catalog image version cap to 4.21 [#7956](https://github.com/openshift/hypershift/pull/7956)
* [OCPBUGS-77456](https://issues.redhat.com/browse/OCPBUGS-77456): Add dynamic NodePort range validation [#7820](https://github.com/openshift/hypershift/pull/7820)
* [OCPBUGS-77647](https://issues.redhat.com/browse/OCPBUGS-77647): remove resource limits from Agent CAPI provider [#7844](https://github.com/openshift/hypershift/pull/7844)
* [OCPBUGS-78304](https://issues.redhat.com/browse/OCPBUGS-78304): Fix context cancel accumulation in getMirrorFromICSPOrIDMS [#7891](https://github.com/openshift/hypershift/pull/7891)
* [OCPBUGS-78196](https://issues.redhat.com/browse/OCPBUGS-78196): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7914](https://github.com/openshift/hypershift/pull/7914)
* [CNTRLPLANE-2812](https://issues.redhat.com/browse/CNTRLPLANE-2812): feat(aro): Swift support [#7826](https://github.com/openshift/hypershift/pull/7826)
* [OCPBUGS-77365](https://issues.redhat.com/browse/OCPBUGS-77365): Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping [#7834](https://github.com/openshift/hypershift/pull/7834)
* [OCPBUGS-75930](https://issues.redhat.com/browse/OCPBUGS-75930): [release-4.21] fix(cpo): Correct route labeling logic for HCP router infrastructure [#7641](https://github.com/openshift/hypershift/pull/7641)
* [OCPBUGS-75884](https://issues.redhat.com/browse/OCPBUGS-75884): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7632](https://github.com/openshift/hypershift/pull/7632)
* fix: OCPBUGS-74104: Fix CVE-2025-58183 [#7545](https://github.com/openshift/hypershift/pull/7545)
* [OCPBUGS-71133](https://issues.redhat.com/browse/OCPBUGS-71133): fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed [#7433](https://github.com/openshift/hypershift/pull/7433)
* [OCPBUGS-74893](https://issues.redhat.com/browse/OCPBUGS-74893): fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment [#7618](https://github.com/openshift/hypershift/pull/7618)
* [Full changelog](https://github.com/openshift/hypershift/compare/7b81622daa2f53547529f5394acedaf10cd0284b...6d6591b4008606c96fd5cbd02f506c65132b628f)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f)

* [OCPBUGS-80815](https://issues.redhat.com/browse/OCPBUGS-80815): Bump google.golang.org/grpc to v1.79.3 [#146](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/146)
* [OCPBUGS-77203](https://issues.redhat.com/browse/OCPBUGS-77203): [release-4.21] standardize build paths [#121](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ab36dcc19e6063bf55158b59588448151a200170...f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/f80ea3216387639dde6550a70a6e08599fd67f5f)

* [OCPBUGS-77445](https://issues.redhat.com/browse/OCPBUGS-77445): [release-4.21] bump vpc go sdk [#81](https://github.com/openshift/machine-api-provider-ibmcloud/pull/81)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#84](https://github.com/openshift/machine-api-provider-ibmcloud/pull/84)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/e72a84714e5fb8c3256def77f7d77ffdc4b9b82e...f80ea3216387639dde6550a70a6e08599fd67f5f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2bc8825afccf2456f95d8bfea097a528d072bd11)

* [OCPBUGS-80818](https://issues.redhat.com/browse/OCPBUGS-80818): Bump google.golang.org/grpc to v1.79.3 [#1285](https://github.com/openshift/insights-operator/pull/1285)
* [OCPBUGS-81573](https://issues.redhat.com/browse/OCPBUGS-81573): kubeletconfig gatherer [#1266](https://github.com/openshift/insights-operator/pull/1266)
* [OCPBUGS-79534](https://issues.redhat.com/browse/OCPBUGS-79534): [release-4.21] Add OpenTelemetry CR Gatherer [#1258](https://github.com/openshift/insights-operator/pull/1258)
* [OCPBUGS-76960](https://issues.redhat.com/browse/OCPBUGS-76960): Extends the time for the extractor liveness probe [#1233](https://github.com/openshift/insights-operator/pull/1233)
* [Full changelog](https://github.com/openshift/insights-operator/compare/599209e2705e68bedfc21f842f5c3f379b8f27c3...2bc8825afccf2456f95d8bfea097a528d072bd11)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/8c41cb8680f29a915d33e4954fc5ff7f5352411b)

* Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 [#78](https://github.com/openshift/insights-runtime-extractor/pull/78)
* Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#77](https://github.com/openshift/insights-runtime-extractor/pull/77)
* Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#75](https://github.com/openshift/insights-runtime-extractor/pull/75)
* Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#71](https://github.com/openshift/insights-runtime-extractor/pull/71)
* Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 [#72](https://github.com/openshift/insights-runtime-extractor/pull/72)
* Revert "Bump Go to 1.25" [#73](https://github.com/openshift/insights-runtime-extractor/pull/73)
* Bump Go to 1.25 [#70](https://github.com/openshift/insights-runtime-extractor/pull/70)
* [OCPBUGS-77491](https://issues.redhat.com/browse/OCPBUGS-77491): remove dnf cache from the container images [#64](https://github.com/openshift/insights-runtime-extractor/pull/64)
* Fix EAP 8.1 e2e test [#65](https://github.com/openshift/insights-runtime-extractor/pull/65)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/015f7b616bdf0cc062b370079eb42685e81ba11d...8c41cb8680f29a915d33e4954fc5ff7f5352411b)


### [ironic](https://github.com/openshift/ironic-image/tree/6e93d7a042c96f1db6307549d348da8f6f89b06a)

* [OCPBUGS-84853](https://issues.redhat.com/browse/OCPBUGS-84853): Bump pyasn to 0.5.1-5 [#823](https://github.com/openshift/ironic-image/pull/823)
* [OCPBUGS-82298](https://issues.redhat.com/browse/OCPBUGS-82298): Bump sushy hash to include Supermicro ARS-111GL-NHR fix [#840](https://github.com/openshift/ironic-image/pull/840)
* [ART-14497](https://issues.redhat.com/browse/ART-14497): Fix ART builds with -minimal [#809](https://github.com/openshift/ironic-image/pull/809)
* [OCPBUGS-76934](https://issues.redhat.com/browse/OCPBUGS-76934): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#791](https://github.com/openshift/ironic-image/pull/791)
* [OCPBUGS-76474](https://issues.redhat.com/browse/OCPBUGS-76474): Update requirements.cachito for 4.21 with heartbeat inspection fix commit [#785](https://github.com/openshift/ironic-image/pull/785)
* [OCPBUGS-76282](https://issues.redhat.com/browse/OCPBUGS-76282): Update ironic hash [#780](https://github.com/openshift/ironic-image/pull/780)
* [OCPBUGS-74603](https://issues.redhat.com/browse/OCPBUGS-74603): fix for minimal builds [#774](https://github.com/openshift/ironic-image/pull/774)
* [Full changelog](https://github.com/openshift/ironic-image/compare/4b0b3b050f01ca9696266e38d9f0569a87c62c34...6e93d7a042c96f1db6307549d348da8f6f89b06a)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce)

* [OCPBUGS-74603](https://issues.redhat.com/browse/OCPBUGS-74603): fixes for minimal builds [#241](https://github.com/openshift/ironic-agent-image/pull/241)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/e39f354cbf0ed5f2eea09ed93f7b066d0ef0fd1e...ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/707c226243ac401f2994952fe0e55823511111b0)

* [OCPBUGS-74204](https://issues.redhat.com/browse/OCPBUGS-74204): Export TMPDIR to be available to child processes [#112](https://github.com/openshift/ironic-rhcos-downloader/pull/112)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/08fdfd37a6d41bfc6a1fe7ac90dbe293c8a5b555...707c226243ac401f2994952fe0e55823511111b0)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/e00f5806587e71188805bab43dad9099524b9059)

* [OCPBUGS-78048](https://issues.redhat.com/browse/OCPBUGS-78048): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#226](https://github.com/openshift/images/pull/226)
* [Full changelog](https://github.com/openshift/images/compare/c4506d8a1bbede077d3e8e7e4dcf2736909d8e89...e00f5806587e71188805bab43dad9099524b9059)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)

* [OCPBUGS-80716](https://issues.redhat.com/browse/OCPBUGS-80716): Bump google.golang.org/grpc to v1.79.3 [#61](https://github.com/openshift/kubernetes-metrics-server/pull/61)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/ed76a5e8051caae6519342ae189088b8ddd09979...ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/ce6f3742ed123b671acd6de4d3605c3a7f644cf8)

* [OCPBUGS-80823](https://issues.redhat.com/browse/OCPBUGS-80823): Bump google.golang.org/grpc to v1.79.3 [#138](https://github.com/openshift/kube-state-metrics/pull/138)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/cb0aa591e89797cc0f45b934b8baeccc3a3b09bf...ce6f3742ed123b671acd6de4d3605c3a7f644cf8)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)

* [OCPBUGS-76994](https://issues.redhat.com/browse/OCPBUGS-76994): [release-4.21] Sync Upstream 2026-01-27 [#61](https://github.com/openshift/cloud-provider-kubevirt/pull/61)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/daf5fba2d1a1514bcbe67edc0230a06136156094...1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/4bb70e49c9d05690f3a26edc0a6feaf093169cbb)

* [OCPBUGS-79038](https://issues.redhat.com/browse/OCPBUGS-79038): Add annotation-based fallback for infra VM node ID resolution [#83](https://github.com/openshift/kubevirt-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/9e2dbddfe27080b834c83ef93503f886ad4189b6...4bb70e49c9d05690f3a26edc0a6feaf093169cbb)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/76ca249e2efb662565972bbfa4f09bdc8f4bcb32)

* [OCPBUGS-77943](https://issues.redhat.com/browse/OCPBUGS-77943): Remove cluster-api-provider-libvirt references [#1473](https://github.com/openshift/machine-api-operator/pull/1473)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/83936ddec5de0d3c9e6db44e541e0abac2b60b6c...76ca249e2efb662565972bbfa4f09bdc8f4bcb32)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0e0d3ab9356fb65cb7e1bfee9528d0253807775b)

* [OCPBUGS-86037](https://issues.redhat.com/browse/OCPBUGS-86037): use `--delete-if-present` for karg removal [#6058](https://github.com/openshift/machine-config-operator/pull/6058)
* [OCPBUGS-85645](https://issues.redhat.com/browse/OCPBUGS-85645): Add terminationMessagePolicy to build pod containers [#6045](https://github.com/openshift/machine-config-operator/pull/6045)
* [OCPBUGS-85386](https://issues.redhat.com/browse/OCPBUGS-85386): Fix CVE-2026-34986 [#6025](https://github.com/openshift/machine-config-operator/pull/6025)
* [OCPBUGS-85286](https://issues.redhat.com/browse/OCPBUGS-85286): Fix Admin Ack message for azure/vsphere clusters upgrading to 4.22 [#6017](https://github.com/openshift/machine-config-operator/pull/6017)
* [OCPBUGS-85126](https://issues.redhat.com/browse/OCPBUGS-85126): Fix units rollback if update failure [#6008](https://github.com/openshift/machine-config-operator/pull/6008)
* [OCPBUGS-84941](https://issues.redhat.com/browse/OCPBUGS-84941): Fix ssh and password rollbacks [#5987](https://github.com/openshift/machine-config-operator/pull/5987)
* [OCPBUGS-84970](https://issues.redhat.com/browse/OCPBUGS-84970): Fix encapsulated IGN version [#5996](https://github.com/openshift/machine-config-operator/pull/5996)
* [OCPBUGS-84878](https://issues.redhat.com/browse/OCPBUGS-84878): Update AMI Whitelist [#5915](https://github.com/openshift/machine-config-operator/pull/5915)
* [OCPBUGS-84253](https://issues.redhat.com/browse/OCPBUGS-84253): improve JSON unmarshalling for secret decoding [#5877](https://github.com/openshift/machine-config-operator/pull/5877)
* [OCPBUGS-83874](https://issues.redhat.com/browse/OCPBUGS-83874): Allow enablement of systemd units with existing files [#5869](https://github.com/openshift/machine-config-operator/pull/5869)
* [OCPBUGS-83708](https://issues.redhat.com/browse/OCPBUGS-83708): Update AMI Whitelist [#5857](https://github.com/openshift/machine-config-operator/pull/5857)
* [OCPBUGS-83390](https://issues.redhat.com/browse/OCPBUGS-83390): Use HA leader election defaults for MCO on SNO [#5838](https://github.com/openshift/machine-config-operator/pull/5838)
* [OCPBUGS-81711](https://issues.redhat.com/browse/OCPBUGS-81711): When adding new nodes, MCD executes commands after setting the nodes' state as Done [#5836](https://github.com/openshift/machine-config-operator/pull/5836)
* [OCPBUGS-79482](https://issues.redhat.com/browse/OCPBUGS-79482): Skip boot image updates until cluster is stable [#5804](https://github.com/openshift/machine-config-operator/pull/5804)
* [OCPBUGS-79426](https://issues.redhat.com/browse/OCPBUGS-79426): Update AMI Whitelist [#5798](https://github.com/openshift/machine-config-operator/pull/5798)
* [OCPBUGS-79372](https://issues.redhat.com/browse/OCPBUGS-79372): set default-timeout-stop to 200s globally [#5793](https://github.com/openshift/machine-config-operator/pull/5793)
* [OCPBUGS-78800](https://issues.redhat.com/browse/OCPBUGS-78800): Re-order logger setting to eliminate race condition [#5779](https://github.com/openshift/machine-config-operator/pull/5779)
* [OCPBUGS-78528](https://issues.redhat.com/browse/OCPBUGS-78528): Fix e2e iri tests [#5759](https://github.com/openshift/machine-config-operator/pull/5759)
* [OCPBUGS-78201](https://issues.redhat.com/browse/OCPBUGS-78201): kubelet: Less aggressive low memory reservation [#5756](https://github.com/openshift/machine-config-operator/pull/5756)
* [OCPBUGS-77833](https://issues.redhat.com/browse/OCPBUGS-77833): Update AMI Whitelist [#5743](https://github.com/openshift/machine-config-operator/pull/5743)
* [OCPBUGS-77689](https://issues.redhat.com/browse/OCPBUGS-77689): Create admin-ack gates for azure/vsphere clusters upgrading to 4.22 [#5735](https://github.com/openshift/machine-config-operator/pull/5735)
* [OCPBUGS-77577](https://issues.redhat.com/browse/OCPBUGS-77577): Fix failure domain matching during vsphere boot image updates [#5727](https://github.com/openshift/machine-config-operator/pull/5727)
* [OCPBUGS-77534](https://issues.redhat.com/browse/OCPBUGS-77534): Update AMI Whitelist [#5722](https://github.com/openshift/machine-config-operator/pull/5722)
* [OCPBUGS-77354](https://issues.redhat.com/browse/OCPBUGS-77354): Clean up vsphere login error logging [#5705](https://github.com/openshift/machine-config-operator/pull/5705)
* [OCPBUGS-76555](https://issues.redhat.com/browse/OCPBUGS-76555): Remove MCD liveness probe [#5651](https://github.com/openshift/machine-config-operator/pull/5651)
* [OCPBUGS-77072](https://issues.redhat.com/browse/OCPBUGS-77072): mcd_config_drift not working properly [#5675](https://github.com/openshift/machine-config-operator/pull/5675)
* [OCPBUGS-76823](https://issues.redhat.com/browse/OCPBUGS-76823): reduce MCO image size [#5657](https://github.com/openshift/machine-config-operator/pull/5657)
* [OCPBUGS-76833](https://issues.redhat.com/browse/OCPBUGS-76833): Machine-config controller should not log about non-existent pull-secret changes [#5659](https://github.com/openshift/machine-config-operator/pull/5659)
* [OCPBUGS-73805](https://issues.redhat.com/browse/OCPBUGS-73805): Prevent unnecessary systemd unit disable [#5648](https://github.com/openshift/machine-config-operator/pull/5648)
* [MCO-2017](https://issues.redhat.com/browse/MCO-2017): Backport OSImageStreams to 4.21 [#5515](https://github.com/openshift/machine-config-operator/pull/5515)
* [OCPBUGS-76356](https://issues.redhat.com/browse/OCPBUGS-76356): crio: disable short_name_mode until we introduce ctrcfg api for it [#5636](https://github.com/openshift/machine-config-operator/pull/5636)
* [OCPBUGS-76359](https://issues.redhat.com/browse/OCPBUGS-76359): Update AMI script and list [#5639](https://github.com/openshift/machine-config-operator/pull/5639)
* [OCPBUGS-76271](https://issues.redhat.com/browse/OCPBUGS-76271): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5624](https://github.com/openshift/machine-config-operator/pull/5624)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport InternalReleaseImage support [#5610](https://github.com/openshift/machine-config-operator/pull/5610)
* [OCPBUGS-74145](https://issues.redhat.com/browse/OCPBUGS-74145): enable nodeip-configuration for platform external [#5581](https://github.com/openshift/machine-config-operator/pull/5581)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a3c57fb568ba9201394624595e88c3ba6a5bd165...0e0d3ab9356fb65cb7e1bfee9528d0253807775b)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/65aeb3607f05dd71ec27a4457945ce1e054ea9e9)

* [OCPBUGS-78536](https://issues.redhat.com/browse/OCPBUGS-78536): Return error when network data Secret lacks nmstate key [#171](https://github.com/openshift/image-customization-controller/pull/171)
* [OCPBUGS-77031](https://issues.redhat.com/browse/OCPBUGS-77031): Add IPA messages for console and SSH login [#163](https://github.com/openshift/image-customization-controller/pull/163)
* [OCPBUGS-77490](https://issues.redhat.com/browse/OCPBUGS-77490): Clean up dnf cache to reduce container image size [#164](https://github.com/openshift/image-customization-controller/pull/164)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d958f0bf39ee93368c89919b7dbe23363f38493e...65aeb3607f05dd71ec27a4457945ce1e054ea9e9)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd)

* [OCPBUGS-85478](https://issues.redhat.com/browse/OCPBUGS-85478): Force rebuild for OCP 4.21 [#89](https://github.com/openshift/machine-os-images/pull/89)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9a8e96a60bb6d8e3c86c2780fd4212e80f5d28e5...e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/462c78890ffb636e05d91d41ca718bb3c81da4cf)

* [OCPBUGS-79460](https://issues.redhat.com/browse/OCPBUGS-79460): immutable bump: fix for CVE-2026-29063 [4.21] [#947](https://github.com/openshift/monitoring-plugin/pull/947)
* [OU-1368](https://issues.redhat.com/browse/OU-1368): reset queries when namespace changes in dev perspective [#940](https://github.com/openshift/monitoring-plugin/pull/940)
* [OU-1367](https://issues.redhat.com/browse/OU-1367): prevent namespace and project desync [#937](https://github.com/openshift/monitoring-plugin/pull/937)
* NO-JIRA: release-4.21 e2e-monitoring and e2e-coo working [#904](https://github.com/openshift/monitoring-plugin/pull/904)
* [OCPBUGS-83494](https://issues.redhat.com/browse/OCPBUGS-83494): [release-4.21] feat: re enable dev console views [#856](https://github.com/openshift/monitoring-plugin/pull/856)
* [OCPBUGS-83304](https://issues.redhat.com/browse/OCPBUGS-83304): [release-4.21] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#890](https://github.com/openshift/monitoring-plugin/pull/890)
* [OCPBUGS-82302](https://issues.redhat.com/browse/OCPBUGS-82302): [release-4.21] fix: re encode params when redirecting from graph to query-browser [#871](https://github.com/openshift/monitoring-plugin/pull/871)
* [OCPBUGS-78358](https://issues.redhat.com/browse/OCPBUGS-78358): fix for CVE-2025-69873 [#845](https://github.com/openshift/monitoring-plugin/pull/845)
* NO-JIRA: [release-4.21] e2e-monitoring fixing loop on legacy dashboard [#828](https://github.com/openshift/monitoring-plugin/pull/828)
* [OCPBUGS-77227](https://issues.redhat.com/browse/OCPBUGS-77227): [openshift-4.21] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via __proto__ Key in mergeConfig [#795](https://github.com/openshift/monitoring-plugin/pull/795)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): [release-4.21] feat: mark alert menu active for incidents tab [#761](https://github.com/openshift/monitoring-plugin/pull/761)
* NO-JIRA: [release-4.21] simplify frontend build in Dockerfile.art [#808](https://github.com/openshift/monitoring-plugin/pull/808)
* [OCPBUGS-74909](https://issues.redhat.com/browse/OCPBUGS-74909): fix: update vulnerable dependencies [#751](https://github.com/openshift/monitoring-plugin/pull/751)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/4b2b90bb04e9c73a1c4fa1c62124d07abf455bea...462c78890ffb636e05d91d41ca718bb3c81da4cf)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/4f696e721ac0897a782c2fde3c24d961938feff3)

* [OCPBUGS-82064](https://issues.redhat.com/browse/OCPBUGS-82064): Bump CNI version to 1.1.0 [#284](https://github.com/openshift/multus-cni/pull/284)
* [Full changelog](https://github.com/openshift/multus-cni/compare/93556f99405e29900c5445f7bbf7c70b8935e339...4f696e721ac0897a782c2fde3c24d961938feff3)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)

* [OCPBUGS-77489](https://issues.redhat.com/browse/OCPBUGS-77489): Clean up dnf cache [#100](https://github.com/openshift/multus-networkpolicy/pull/100)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5ed5d2408a35847dabfc843b032ee3eecb4d6ee1...e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)


### [must-gather](https://github.com/openshift/must-gather/tree/eeb267f4b7f8016f13d12866013cad43c7403482)

* [OCPBUGS-85050](https://issues.redhat.com/browse/OCPBUGS-85050): Collect object size with the object count [#542](https://github.com/openshift/must-gather/pull/542)
* [Full changelog](https://github.com/openshift/must-gather/compare/b4b434c427ddde3dafd8518d1aa754e49b7bfef1...eeb267f4b7f8016f13d12866013cad43c7403482)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/268037d76fd97d29f39eae2f25f0a2b2910cb30e)

* [OCPBUGS-81620](https://issues.redhat.com/browse/OCPBUGS-81620): Update lodash to 4.18.1 for CVE-2026-4800 [#372](https://github.com/openshift/networking-console-plugin/pull/372)
* [OCPBUGS-83388](https://issues.redhat.com/browse/OCPBUGS-83388): Fix CVE-2026-34043 in serialize-javascript [#369](https://github.com/openshift/networking-console-plugin/pull/369)
* [OCPBUGS-82161](https://issues.redhat.com/browse/OCPBUGS-82161): Migrate to npm [#359](https://github.com/openshift/networking-console-plugin/pull/359)
* [OCPBUGS-66283](https://issues.redhat.com/browse/OCPBUGS-66283), [OCPBUGS-67252](https://issues.redhat.com/browse/OCPBUGS-67252), [OCPBUGS-70285](https://issues.redhat.com/browse/OCPBUGS-70285), [OCPBUGS-74473](https://issues.redhat.com/browse/OCPBUGS-74473): Fix CVEs via upgrading yarn.lock [#346](https://github.com/openshift/networking-console-plugin/pull/346)
* [CNV-59877](https://issues.redhat.com/browse/CNV-59877): Fix permissions request for NADs [#353](https://github.com/openshift/networking-console-plugin/pull/353)
* [OCPBUGS-77887](https://issues.redhat.com/browse/OCPBUGS-77887): Clean up cruft in /var/cache/dnf [#361](https://github.com/openshift/networking-console-plugin/pull/361)
* [OCPBUGS-77225](https://issues.redhat.com/browse/OCPBUGS-77225): Fix NAD creation using default namespace instead of selected one [#349](https://github.com/openshift/networking-console-plugin/pull/349)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/11492b3193c4ab3ba6494e7fc79a6eb4551616b1...268037d76fd97d29f39eae2f25f0a2b2910cb30e)


### [oauth-server](https://github.com/openshift/oauth-server/tree/2b8183592190365c269ca0c92b1955bbad9a0236)

* [OCPBUGS-77454](https://issues.redhat.com/browse/OCPBUGS-77454): groupmapper: avoid mutating original group users slice when removing user [#213](https://github.com/openshift/oauth-server/pull/213)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3ab74506e64c804a465eb74b74046174a1121dd8...2b8183592190365c269ca0c92b1955bbad9a0236)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/994deebef2836ca75003dd15372f7110d2448fa6)

* [OCPBUGS-82546](https://issues.redhat.com/browse/OCPBUGS-82546): Only print catalog rebuild message if there are catalogs to rebuild [#1388](https://github.com/openshift/oc-mirror/pull/1388)
* [OCPBUGS-82543](https://issues.redhat.com/browse/OCPBUGS-82543): Fix printing collection messages with 0 collection items [#1387](https://github.com/openshift/oc-mirror/pull/1387)
* [OCPBUGS-81743](https://issues.redhat.com/browse/OCPBUGS-81743): Remove status field from CatalogSource, ClusterCatalog... [#1383](https://github.com/openshift/oc-mirror/pull/1383)
* [CLID-549](https://issues.redhat.com/browse/CLID-549), [OCPBUGS-78458](https://issues.redhat.com/browse/OCPBUGS-78458): Update Dockerfile.tests to run Go integration tests [#1371](https://github.com/openshift/oc-mirror/pull/1371)
* [OCPBUGS-77222](https://issues.redhat.com/browse/OCPBUGS-77222): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1358](https://github.com/openshift/oc-mirror/pull/1358)
* [OCPBUGS-76126](https://issues.redhat.com/browse/OCPBUGS-76126): Fix reg config detection for explicit false values [#1349](https://github.com/openshift/oc-mirror/pull/1349)
* [OCPBUGS-74981](https://issues.redhat.com/browse/OCPBUGS-74981): fix conversion issue for catalog [#1346](https://github.com/openshift/oc-mirror/pull/1346)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/520cd16bfe17c495b197dbb0c09afdaf6700a8c7...994deebef2836ca75003dd15372f7110d2448fa6)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/9bf1d982a091f54597e582c407d61f8ecfbc4f95)

* [OCPBUGS-81993](https://issues.redhat.com/browse/OCPBUGS-81993), [OCPBUGS-81994](https://issues.redhat.com/browse/OCPBUGS-81994): Bump github.com/go-jose/go-jose/v4 to 4.1.4 [#718](https://github.com/openshift/operator-framework-operator-controller/pull/718)
* [OCPBUGS-80839](https://issues.redhat.com/browse/OCPBUGS-80839), [OCPBUGS-80840](https://issues.redhat.com/browse/OCPBUGS-80840): Bump google.golang.org/grpc to v1.79.3 [#721](https://github.com/openshift/operator-framework-operator-controller/pull/721)
* [OCPBUGS-79059](https://issues.redhat.com/browse/OCPBUGS-79059): update OCP-75441 to support multi-arch[release-4.21] [#671](https://github.com/openshift/operator-framework-operator-controller/pull/671)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/dfc0e537df7af5f9785b90da40e77a268d345c6a...9bf1d982a091f54597e582c407d61f8ecfbc4f95)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/f4f439d4ce40c1175188c81591284dcc9fe6facf)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#394](https://github.com/openshift/cluster-api-provider-openstack/pull/394)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/e1c0f2f9e2e70843d5c42dfe3bddf70530a97b0f...f4f439d4ce40c1175188c81591284dcc9fe6facf)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)

* [OCPBUGS-76789](https://issues.redhat.com/browse/OCPBUGS-76789): Fix make test [#156](https://github.com/openshift/machine-api-provider-openstack/pull/156)
* [OCPBUGS-69644](https://issues.redhat.com/browse/OCPBUGS-69644): Don't record event for every reconcile [#146](https://github.com/openshift/machine-api-provider-openstack/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/b5a300cae8a79a59417c0a24c371af9a8f0258fe...b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/149d553b2057320d761c4d1913098a66787dd09a)

* [OCPBUGS-81995](https://issues.redhat.com/browse/OCPBUGS-81995), [OCPBUGS-81996](https://issues.redhat.com/browse/OCPBUGS-81996), [OCPBUGS-81997](https://issues.redhat.com/browse/OCPBUGS-81997): Bump github.com/go-jose/go-jose/v4 to v4.1.4 [#1294](https://github.com/openshift/operator-framework-olm/pull/1294)
* [OCPBUGS-80847](https://issues.redhat.com/browse/OCPBUGS-80847), [OCPBUGS-80848](https://issues.redhat.com/browse/OCPBUGS-80848), [OCPBUGS-80849](https://issues.redhat.com/browse/OCPBUGS-80849): Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] [#1289](https://github.com/openshift/operator-framework-olm/pull/1289)
* [OCPBUGS-79398](https://issues.redhat.com/browse/OCPBUGS-79398): Fix SA restore resourceVersion conflict error [#1266](https://github.com/openshift/operator-framework-olm/pull/1266)
* [OCPBUGS-79400](https://issues.redhat.com/browse/OCPBUGS-79400): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1265](https://github.com/openshift/operator-framework-olm/pull/1265)
* [OCPBUGS-79380](https://issues.redhat.com/browse/OCPBUGS-79380): enhance case to make it pass per test bundle change [#1263](https://github.com/openshift/operator-framework-olm/pull/1263)
* [OCPBUGS-78558](https://issues.redhat.com/browse/OCPBUGS-78558): Re-Apply Fix admin context race condition in parallel tests [#1261](https://github.com/openshift/operator-framework-olm/pull/1261)
* [OCPBUGS-77712](https://issues.redhat.com/browse/OCPBUGS-77712): Update NetworkPolicy egress to support HyperShift custom API ports [#1246](https://github.com/openshift/operator-framework-olm/pull/1246)
* [OCPBUGS-77067](https://issues.redhat.com/browse/OCPBUGS-77067): Remove the collect-profiles info from the microshift kustomization file [#1234](https://github.com/openshift/operator-framework-olm/pull/1234)
* [OCPBUGS-76325](https://issues.redhat.com/browse/OCPBUGS-76325): [release-4.21]remove qe case of testing collect-profiles [#1222](https://github.com/openshift/operator-framework-olm/pull/1222)
* [OCPBUGS-76266](https://issues.redhat.com/browse/OCPBUGS-76266): Remove the collect-profiles job [#1220](https://github.com/openshift/operator-framework-olm/pull/1220)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/67b24a854479ff5e92f98a928b07683bddfc91b6...149d553b2057320d761c4d1913098a66787dd09a)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)

* [OCPBUGS-77580](https://issues.redhat.com/browse/OCPBUGS-77580): Update NetworkPolicy egress to support HyperShift custom API ports [#729](https://github.com/operator-framework/operator-marketplace/pull/729)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7c1eba6b75e8e458ef5d676c8fee086489824f9b...efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/d586f851c25d8f7cd04840cda79a0a6a98ea8485)

* [OCPBUGS-84923](https://issues.redhat.com/browse/OCPBUGS-84923): Branch Sync release-4.22 to release-4.21 [04-27-2026] [#3160](https://github.com/openshift/ovn-kubernetes/pull/3160)
* [OCPBUGS-81634](https://issues.redhat.com/browse/OCPBUGS-81634), [OCPBUGS-83814](https://issues.redhat.com/browse/OCPBUGS-83814): Branch Sync release-4.22 to release-4.21 [04-16-2026] [#3145](https://github.com/openshift/ovn-kubernetes/pull/3145)
* [OCPBUGS-83566](https://issues.redhat.com/browse/OCPBUGS-83566): Branch Sync release-4.22 to release-4.21 [03-25-2026] [#3087](https://github.com/openshift/ovn-kubernetes/pull/3087)
* [OCPBUGS-81475](https://issues.redhat.com/browse/OCPBUGS-81475): node: fix serviceUpdateNotNeeded nil pointer comparison [#3098](https://github.com/openshift/ovn-kubernetes/pull/3098)
* [OCPBUGS-77257](https://issues.redhat.com/browse/OCPBUGS-77257), [OCPBUGS-78094](https://issues.redhat.com/browse/OCPBUGS-78094): Branch Sync release-4.22 to release-4.21 [03-23-2026] [#3080](https://github.com/openshift/ovn-kubernetes/pull/3080)
* [OCPBUGS-78771](https://issues.redhat.com/browse/OCPBUGS-78771): Branch Sync release-4.22 to release-4.21 [03-11-2026] [#3050](https://github.com/openshift/ovn-kubernetes/pull/3050)
* [OCPBUGS-76472](https://issues.redhat.com/browse/OCPBUGS-76472): OCPBUGS-72532: Branch Sync release-4.22 to release-4.21 [12-19-2025] [#3022](https://github.com/openshift/ovn-kubernetes/pull/3022)
* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Minimize ACLs by combining ipBlocks into single ACL [#2995](https://github.com/openshift/ovn-kubernetes/pull/2995)
* [OCPBUGS-77309](https://issues.redhat.com/browse/OCPBUGS-77309): Clear stale conntrack UDP entries for nodePorts [#3002](https://github.com/openshift/ovn-kubernetes/pull/3002)
* [OCPBUGS-77046](https://issues.redhat.com/browse/OCPBUGS-77046), [OCPBUGS-77086](https://issues.redhat.com/browse/OCPBUGS-77086): [release-4.21] combined backport PR for 2 escalations [#2984](https://github.com/openshift/ovn-kubernetes/pull/2984)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/190e114128b9f358d1d6a700c464797d4c3e36af...d586f851c25d8f7cd04840cda79a0a6a98ea8485)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/114fe69249450f3bec773cba2956a8c06e7b0da9)

* [OCPBUGS-80852](https://issues.redhat.com/browse/OCPBUGS-80852): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#127](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/127)
* [OCPBUGS-82924](https://issues.redhat.com/browse/OCPBUGS-82924): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#121](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a...114fe69249450f3bec773cba2956a8c06e7b0da9)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/b714ab87d079db5ef3c4097520db40cd289b025e)

* Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/107)
* [OCPBUGS-80853](https://issues.redhat.com/browse/OCPBUGS-80853): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#106](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/106)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/e22228ae9f53298e7520d9ae2b9230b2d5dd4cff...b714ab87d079db5ef3c4097520db40cd289b025e)


### [prometheus](https://github.com/openshift/prometheus/tree/78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)

* [OCPBUGS-80855](https://issues.redhat.com/browse/OCPBUGS-80855): Bump google.golang.org/grpc to v1.79.3 [#309](https://github.com/openshift/prometheus/pull/309)
* [OCPBUGS-78581](https://issues.redhat.com/browse/OCPBUGS-78581): [release-4.21] chore(kubernetes): deduplicate warning logs from the API [#298](https://github.com/openshift/prometheus/pull/298)
* [Full changelog](https://github.com/openshift/prometheus/compare/ac9443d270b96912311ede64da160f839278bb65...78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/3de9763f36128ffa8b25a63c9447f6d64114c270)

* [OCPBUGS-77295](https://issues.redhat.com/browse/OCPBUGS-77295): backport upstream fix to reconcile resources with inconsistent status [#365](https://github.com/openshift/prometheus-operator/pull/365)
* [OCPBUGS-74477](https://issues.redhat.com/browse/OCPBUGS-74477): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#359](https://github.com/openshift/prometheus-operator/pull/359)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/4889ec9a591e78f50916a9ffedf4499c6fc63259...3de9763f36128ffa8b25a63c9447f6d64114c270)


### [rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions](https://github.com/openshift/os/tree/10f1a2e738aa55fff22dbe0346609e83a5f6eb90)

* [OCPBUGS-82523](https://issues.redhat.com/browse/OCPBUGS-82523): post-process: Remove workaround for openvswitch additional group [#1926](https://github.com/openshift/os/pull/1926)
* - [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 [#1914](https://github.com/openshift/os/pull/1914)
* NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 [#1913](https://github.com/openshift/os/pull/1913)
* [COS-3946](https://issues.redhat.com/browse/COS-3946): Backport rhel-10.2 support to release-4.21 branch [#1898](https://github.com/openshift/os/pull/1898)
* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1889](https://github.com/openshift/os/pull/1889)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/e8f5a55a31574c1d1e415b23e939e20ddcfcc399...10f1a2e738aa55fff22dbe0346609e83a5f6eb90)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/559b7122d1a0cad4ff475b496c2896b39eed8c08)

* [OCPBUGS-76641](https://issues.redhat.com/browse/OCPBUGS-76641): filter ingress namespace on UnmanagedRoutes metric [#73](https://github.com/openshift/route-controller-manager/pull/73)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/8a69194a461dc33d2ed67a220bca91d384d34df4...559b7122d1a0cad4ff475b496c2896b39eed8c08)


### [telemeter](https://github.com/openshift/telemeter/tree/b79b872a65edd845891db70f6c9a184458a178da)

* [OCPBUGS-80868](https://issues.redhat.com/browse/OCPBUGS-80868): Bump google.golang.org/grpc to v1.79.3 [#589](https://github.com/openshift/telemeter/pull/589)
* [OCPBUGS-81817](https://issues.redhat.com/browse/OCPBUGS-81817): [release-1.21] Fix CVE-2026-34986 [#593](https://github.com/openshift/telemeter/pull/593)
* [Full changelog](https://github.com/openshift/telemeter/compare/a54acdfeb2d62c79516d099e37f3319205c903a7...b79b872a65edd845891db70f6c9a184458a178da)


### [tests](https://github.com/openshift/origin/tree/c2da98a5a8f0e23886ac536fbeb81140e798fb71)

* [OCPQE-32041](https://issues.redhat.com/browse/OCPQE-32041): bump(k8s): move docker types into container package [#31169](https://github.com/openshift/origin/pull/31169)
* [OCPBUGS-74373](https://issues.redhat.com/browse/OCPBUGS-74373): Remove restriction of unmanaged x-k8s.io [#30718](https://github.com/openshift/origin/pull/30718)
* [OCPBUGS-84655](https://issues.redhat.com/browse/OCPBUGS-84655): fix openshift/network/third-party suite selecting zero tests [#31091](https://github.com/openshift/origin/pull/31091)
* [OCPBUGS-84978](https://issues.redhat.com/browse/OCPBUGS-84978): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31123](https://github.com/openshift/origin/pull/31123)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): test: add monitortest to detect pods stuck in Pending state [#31117](https://github.com/openshift/origin/pull/31117)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31118](https://github.com/openshift/origin/pull/31118)
* [OCPBUGS-81638](https://issues.redhat.com/browse/OCPBUGS-81638): Manual cherry-pick node swap feature testcases to 4.21 [#30973](https://github.com/openshift/origin/pull/30973)
* [OCPBUGS-82064](https://issues.redhat.com/browse/OCPBUGS-82064): Assert CNI version greater than equal to 1.0.0 [#30977](https://github.com/openshift/origin/pull/30977)
* [OCPBUGS-81638](https://issues.redhat.com/browse/OCPBUGS-81638): Add openshift/disruptive-longrunning testsuite in release-4.21 branch [#30976](https://github.com/openshift/origin/pull/30976)
* [OCPBUGS-78780](https://issues.redhat.com/browse/OCPBUGS-78780): changed http to https for three places to reduce test false positives and false negatives [#30902](https://github.com/openshift/origin/pull/30902)
* [OCPBUGS-79365](https://issues.redhat.com/browse/OCPBUGS-79365): Verify etc pod should start with oom_score_adj as system-node-critical [#30916](https://github.com/openshift/origin/pull/30916)
* [OCPBUGS-78485](https://issues.redhat.com/browse/OCPBUGS-78485): run resource request/limit check early [#30879](https://github.com/openshift/origin/pull/30879)
* [OCPBUGS-78192](https://issues.redhat.com/browse/OCPBUGS-78192): Exclude disruption during NoExecuteTaintManager serial tests [#30857](https://github.com/openshift/origin/pull/30857)
* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Update optimized builds test to use rpm -qa instead of dnf [#30856](https://github.com/openshift/origin/pull/30856)
* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Allow test to tolerate running on minimal images [#30852](https://github.com/openshift/origin/pull/30852)
* [OCPBUGS-77823](https://issues.redhat.com/browse/OCPBUGS-77823): add the missing namespace from managed openshift [#30838](https://github.com/openshift/origin/pull/30838)
* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): Remove exception for monitoring OLM Progression condition [#30839](https://github.com/openshift/origin/pull/30839)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Add test for CPMS OnDelete strategy with full master replacement [#30802](https://github.com/openshift/origin/pull/30802)
* : OCPBUGS-76856:cert tests: mark TLS registry test as informing [#30779](https://github.com/openshift/origin/pull/30779)
* [OCPBUGS-76529](https://issues.redhat.com/browse/OCPBUGS-76529): Fix flakiness in MutableCSINodeAllocatableCount test [#30772](https://github.com/openshift/origin/pull/30772)
* [OCPBUGS-76955](https://issues.redhat.com/browse/OCPBUGS-76955): co/kube-storage-version-migrator reports Available=False in a non-upgrade job [#30740](https://github.com/openshift/origin/pull/30740)
* [Full changelog](https://github.com/openshift/origin/compare/6708c9503223318f3e09a1be4151c3cb12cf56cd...c2da98a5a8f0e23886ac536fbeb81140e798fb71)


### [thanos](https://github.com/openshift/thanos/tree/afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3)

* [OCPBUGS-84492](https://issues.redhat.com/browse/OCPBUGS-84492): Revert "OCPBUGS-80870: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21]" [#180](https://github.com/openshift/thanos/pull/180)
* [OCPBUGS-80870](https://issues.redhat.com/browse/OCPBUGS-80870): CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21] [#174](https://github.com/openshift/thanos/pull/174)
* [Full changelog](https://github.com/openshift/thanos/compare/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8...afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/3adfe2b56b259b2d27906d8772354f817e338da5)

* [OCPBUGS-80875](https://issues.redhat.com/browse/OCPBUGS-80875): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/cluster-api-provider-vsphere/pull/102)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6626b2998e29189d1ff031c0a589f9c3413feac4...3adfe2b56b259b2d27906d8772354f817e338da5)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/69e1c6ed3201efc16bcd320cf558aa8fe869ec69)

* [OCPBUGS-80878](https://issues.redhat.com/browse/OCPBUGS-80878): Bump google.golang.org/grpc  to 1.79.3 [#171](https://github.com/openshift/vmware-vsphere-csi-driver/pull/171)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/5e680186a305e1e0a11950630f7addcb1aa19e0e...69e1c6ed3201efc16bcd320cf558aa8fe869ec69)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/d6a19449cc5d49541221d48d62c67d7a48142d19)

* [OCPBUGS-74701](https://issues.redhat.com/browse/OCPBUGS-74701): Fix update of stable-generation annotation [#330](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/330)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/57c19630194a26e9e2338b0ba8a32e8922e74259...d6a19449cc5d49541221d48d62c67d7a48142d19)