# 4.21.34

Created: 2026-09-17 15:25:32 +0000 UTC

Image Digest: `sha256:c4d448adf37a2563f777b0f2777a89142b3d8f378e28faedf6c312e2957dc1b9`


## Changes from 4.21.27

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.9
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:8b8a3be4f3a90883305220c2034e37252e85898b4b93071c60f2bc7e213a2e2a`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [fdc7f3f1](https://github.com/openshift/cloud-provider-aws/commit/fdc7f3f15c693593cb573b6bef6f0363256b6f52) `sha256:0a454102a443943c8fecca2900bf99f9e398acd9878471b4744b4f40d6730680`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d8cec7d](https://github.com/openshift/aws-ebs-csi-driver/commit/1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709) `sha256:e0540c7aeec4e7155b39a0d84c3000015e136284c7e87819ef02431803e1296f`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [887615ff](https://github.com/openshift/aws-encryption-provider/commit/887615ffa8a595ee3693e92fa56db4dd30f20f73) `sha256:16bfb962d795b77c894e7bc9ffc86fcc319731575527accac294d5719cc82c0e`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [938565c9](https://github.com/openshift/machine-api-provider-aws/commit/938565c9f796fba385c0978a5ae1cc0a79f0f857) `sha256:9873e45a5e9c529ca16ee2f6e314cbca33b4c0bc055192c08c99e82d55581949`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [5cd42ed1](https://github.com/openshift/aws-pod-identity-webhook/commit/5cd42ed1e5151f45f0134593e9cfebdb6517b385) `sha256:b66600471c11ceb44afb3ce74225456dace1ee6ed63ce4004936c2a360f8cca5`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [c9afac2f](https://github.com/openshift/cloud-provider-azure/commit/c9afac2fda20f18d786271340826c628f5419150) `sha256:341ac74da2dd9d6f37c5774ccfced3e1c108986378abdbb35d19eecc6a03cf68`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [c9afac2f](https://github.com/openshift/cloud-provider-azure/commit/c9afac2fda20f18d786271340826c628f5419150) `sha256:cb6867a1a5c2fa9a7267cf215f46340ce23ca0074ba2c983a0dffb5f397e60eb`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [782f0ab6](https://github.com/openshift/machine-api-provider-azure/commit/782f0ab6a2636aef0f699cfe7a49e8fadefb9807) `sha256:4e13e60bcd817d5ff99b3afac67b1802190c62ac029fb905b06cf83ba05944ab`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [5e84c831](https://github.com/openshift/azure-service-operator/commit/5e84c83176d7630f70802b35cb10cdf2b60fd6d3) `sha256:4fc45251006d8764653803c502900a49809ce5f09f2f4fa4870f7060d8ed8f5d`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [ae8ffaf0](https://github.com/openshift/azure-workload-identity/commit/ae8ffaf0b4a893e9b38fb4007de3cef8492b71f3) `sha256:1779966f966ba3f09cf9fba395cfd49b48c61c138ca6f831067a1374bd0fc79a`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [659138fe](https://github.com/openshift/cluster-api-provider-metal3/commit/659138fef3abd4c71b0b01fa1279146745699a5a) `sha256:86e7b345698e3a073b072b436ec7cf4d873a239ffd27808312c152ef734a8ce2`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4e6a729c](https://github.com/openshift/cluster-api-provider-baremetal/commit/4e6a729c5ac8fde8859db5830def262dfdee28ea) `sha256:cb80273b98dda66c32b24d5543b763e7262b6d8642889fc3d527a9c3b5d3e7eb`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [d5c58b32](https://github.com/openshift/baremetal-operator/commit/d5c58b32e71e0e979e190b40a3804d012509d93b) `sha256:806531cddf386818cb89a88f92762e195b98a1ef470e18e525de5568cc767ba2`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [d7e3fc12](https://github.com/openshift/baremetal-runtimecfg/commit/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14) `sha256:fdde1106a81dbbc3bc79a3ed5bbbe7c210ceddff37a1d0d6635ba95f1487f004`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [bd0a5785](https://github.com/openshift/cloud-credential-operator/commit/bd0a5785a37eeccedb3ba357eb4254860acd6ef4) `sha256:f6abc616342cfabc74128b98e493799f9ff849e13ee821cfbdcd4ff65d144a1f`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [57db2d05](https://github.com/openshift/cloud-network-config-controller/commit/57db2d05e057dc90bae3dc1b0e806b3259d38fc0) `sha256:ae1d150365cc251d5476b6eb2eaef4fc512861dab9965c07243936715cc6ab5e`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [65eb4b21](https://github.com/openshift/cluster-authentication-operator/commit/65eb4b2193d0860c1c1f45b08ea7203694db909f) `sha256:4992674b65511d26a9010adf1061c8a3b1d024afeadebb2075b52d2d4671a8fc`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [13af370f](https://github.com/openshift/cluster-baremetal-operator/commit/13af370f526ab7541a8a73aa0d94952496ccca58) `sha256:0a4f95a707d561af92e64d101856ead95d724475106b3d2fd87357989fe82a1a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [dc0d4a5c](https://github.com/openshift/cluster-bootstrap/commit/dc0d4a5cdaf8a7477cab584208dc99352f46efe2) `sha256:b1a8b48406360a7579ad9a120d677e67deac7be74704f4e9c257cffe6c9a91f1`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [9dd5eba0](https://github.com/openshift/cluster-api/commit/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874) `sha256:039aa1be236a88495d2299d31c9a80dbb7e0dba5ac002c8e2e93cde940ae08ec`
* [cluster-config-api](https://github.com/openshift/api) git [1cb630ce](https://github.com/openshift/api/commit/1cb630ce7109e6c4780332bb8140c8c4f7157426) `sha256:5659e439f783953661ba020742aa817daf4fead69c4df28b328c6b062757a0d9`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [1eb450a3](https://github.com/openshift/cluster-config-operator/commit/1eb450a3a2456f6e3fe3d727208b5f7b0dd35aba) `sha256:65f96c1fee9cc52d7337319ffd306c50f060ffe1e58cadf223c7d63df1e5ff72`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [41a53fed](https://github.com/openshift/cluster-dns-operator/commit/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9) `sha256:3f2fd0c0ebc88481ea82affb72a674e295d00251444b2774c265ca3f8307fb6a`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [dc1c217c](https://github.com/openshift/cluster-kube-apiserver-operator/commit/dc1c217c263cd220ddd2ed6fe827a466d47e3ebb) `sha256:464d2cd2913e506aace1c46524c9fa7752643023d438d14ed8f288c086351d50`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [395de967](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/395de96705749de9c6a5f25747b9d5c3d5f65a8f) `sha256:0410d4ec839fd3ba18bc7ceaf2c511fd2442d6cf732219d2b040c131cfe30ce8`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [5ef1df3b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/5ef1df3be41d38ddae9b3d22ce51ba486939e9f1) `sha256:93ddacccbc9104d484b820d90b1ce8baa00b99089bac17a04aa2201018716953`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [8a42beeb](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/8a42beebd580bd2e241aa6d93860c09e907f2407) `sha256:3c6b7eb8cdb07c7b11a4fed0d0be30724eedd7add45a778776e0183bd9a4492c`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [d864813c](https://github.com/openshift/cluster-machine-approver/commit/d864813cd3ab01c0f975b2bf41e9046948f0afa1) `sha256:8e4e1d2dcc34cf224875638c74cfd949a418ab62c684ca957fb40bc7b4bb72bc`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [03bedb91](https://github.com/openshift/cluster-olm-operator/commit/03bedb913bce9c7deabf7868e5cbefc57cf3490b) `sha256:26cbf3db13e8408cf5bb57b8cb63c934e871add223f53294de8c2636cb0e7757`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2617a201](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2617a201bb3607192a9f82faa18384676f611e3c) `sha256:5df72069c494d9c895e771f8797a83a535b9f9a1e99fbf90b9733414666941aa`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [e510507e](https://github.com/openshift/cluster-policy-controller/commit/e510507e20f6eb09694c880ecd79fa512a2b3470) `sha256:a0f5e6325bd53549f40b7366b7bcd35b3a620701c7b4d6add41562566a2931a0`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [11ed1942](https://github.com/openshift/cluster-samples-operator/commit/11ed1942dbbf7a8334862b3d598a967e9b92aa77) `sha256:01ff20f32afaa6e4257c1888d78c9af982f64e7f1873fc0c8a48448ad87344dd`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e4034751](https://github.com/openshift/cluster-storage-operator/commit/e403475164a4de23d358a93106a35353ec29f3d7) `sha256:99a04014de3b6821a1fa784d408d264c42ffe1035f43d5a71279797d2ffa5c84`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b3cae8f2](https://github.com/openshift/cluster-update-keys/commit/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f) `sha256:f09d3389bf46c95e2b137d6f90ed126f1e174dc98951eebe3259efc324476594`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [d37e5a05](https://github.com/openshift/cluster-version-operator/commit/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a) `sha256:8cb1e76e2d82bb3470bd97576e7be12f1421ac1fb2698c68f4585a5669cfcb3b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [16114b8d](https://github.com/openshift/configmap-reload/commit/16114b8de20278b8f4b7a425ece6d35d53214773) `sha256:2ac5ed0bc5385d5a9e8c64ae334148f6e5871ad9fb923e640d255f150465444b`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:af055d3a60e32242766ce1ec23a5265b90995b346dc0bb1282ff0519502a99ee`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:72b1646a63daa1203b9ba2f0a1ba9d57591294ba2ad938ed1362fd30bc0f05e8`
* [coredns](https://github.com/openshift/coredns) git [7486e9e4](https://github.com/openshift/coredns/commit/7486e9e4330c1e41d9a91e4673b7f2782efc112c) `sha256:c8c86cafb5d79eb694e4aae72f40482d17e0131cc29d287dcbc81fdccafbf440`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [ee321fbd](https://github.com/openshift/cloud-provider-openstack/commit/ee321fbd37b2ded41a96004d52a7652b67e28809) `sha256:60e1198bd5a93cf0f74951a8d8b29f0fd1d44e4a5ff31f0aacbbb154b7749793`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [6a3be10e](https://github.com/openshift/csi-external-attacher/commit/6a3be10e6795c8149c4bd3c9856f7e2d312108e2) `sha256:290dd37d8f8688feda31d24aa6e041a548d3c78fb21e906dccebfbe0841b9968`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [af250fdb](https://github.com/openshift/csi-external-snapshot-metadata/commit/af250fdbac8af84d9808a2892bfc911c04162115) `sha256:845e51e9a1c28fa8942d87a07d89be02c3b7f4ec4425bebf2b95bf32daf6d275`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [2c14afc5](https://github.com/openshift/csi-external-snapshotter/commit/2c14afc50a30de62cb00cc8263b061383cfbd3b5) `sha256:5334041661434194bb094ea5ab0a331d5e40c76f29c18d035cd974d39484bb69`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [78dacb7c](https://github.com/openshift/csi-livenessprobe/commit/78dacb7c661a62c78036c2737401afd3eb6fd04d) `sha256:5486d315ceff956873a3cef875d507e8049ea6dd21b89f45a181985041355328`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d29f3f7a](https://github.com/openshift/csi-node-driver-registrar/commit/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c) `sha256:2e1ed49e6189e9f8c9d59a719b9bfd899cdc407bbbbb3846dcf00c441d03037f`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [2c14afc5](https://github.com/openshift/csi-external-snapshotter/commit/2c14afc50a30de62cb00cc8263b061383cfbd3b5) `sha256:6d704c24c4db6e11080e9e38fc5eef3b28efd93edfe24a4aa0f73d79c8305af6`
* [docker-builder](https://github.com/openshift/builder) git [48fce231](https://github.com/openshift/builder/commit/48fce231bac118a63992f466acc8b29a29e1ddde) `sha256:ae587fe8bbbbcebee77ebc657f7e65a5367358b683810659af368675ef2829c6`
* [docker-registry](https://github.com/openshift/image-registry) git [602f51c7](https://github.com/openshift/image-registry/commit/602f51c795dcdcd71c75f6abfe79dc0424a0476a) `sha256:e99e852221635fc311277e1959255edf7129ffcd3061300950de440b7d59942b`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:62a469916d56ae91cae09dc3a466fa0b9a089838c05bae433be7dff0640a2f79`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [0ec77dd1](https://github.com/openshift/egress-router-cni/commit/0ec77dd178e3b0433f01fce5bcce96abcc126deb) `sha256:7a3fa67e00d300e37b08e4c9d58cedc9ecd6778671d154e00e44541bfa31edcb`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [fe230b8a](https://github.com/openshift/cluster-api-provider-gcp/commit/fe230b8a6407a06e1be9d6994a92ac8c5a43237d) `sha256:e1eb12e33b0ffa26d44c02b6e3e710f0a0e1ff5d94cb95b39836e7454752c07c`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1da557fe](https://github.com/openshift/gcp-pd-csi-driver/commit/1da557fe54562347dbf18bee04fe6564a2697707) `sha256:4f9871643d7f46192ce914fc504050d99cb8f479c81b149ef6968af62261e385`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [8d9f11a7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/8d9f11a7f2c4e757bfc5e99ba69084d29a28b79b) `sha256:7e7d117079c2e9f3d9e5acaafe8010452d0f3201432e1cb36522a8cbacce928a`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d481e5cb](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d481e5cb9323b01964bf143b58403b62fa31e5e7) `sha256:8a58d0da1e2f1c6b540cf47c113f6212ee733566a84ea08b646fd83bbce4890f`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [c566572b](https://github.com/openshift/cloud-provider-ibm/commit/c566572b2cf0120499e81181f1efb1e729e9c418) `sha256:e0284faec5ce6e423e4df493f7370d5ac9d219a198412f8fd35fec74e59c19d8`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [f0baa47e](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f) `sha256:0d29ccd02e867ea778bc28da82c471a86ab5ff106d10e947d934a2070ab9a4a1`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [00bc7407](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/00bc740728d9f8ec86fe04199884108c2a091b58) `sha256:f1747e5b425455f1b029811affdb6968eb5a5cf8574d0edfde72ffb84fc9af6b`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:e7dc1ef25ff044365ec834c6c50d4481750dc36e16291c45c0af6f8ff41c5089`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:7da3d2419019d5d1b4355b56e439e321b7c107582a85950d54af11852775612b`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:866679558d6f81a43839bdbf63ee6c6e4d41674b8f1aafbde38f2b41a8923e9f`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [b95b05fe](https://github.com/openshift/ironic-static-ip-manager/commit/b95b05fe0ba17255ef61e92d4167ca4c9de789b8) `sha256:5369463e0a801aa8e5d0a2274ba7c0dc175d71437ed7d533e579af57e55a33ef`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f0241a3d](https://github.com/openshift/images/commit/f0241a3d2a12a8b2965cc36542babce8a1dffcf8) `sha256:ae7ef3b8e4427fa37fd3dc6d7557d56a48ba9c3663d31efcd3cec8bc44622117`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [ff4f3e2a](https://github.com/openshift/kubernetes-metrics-server/commit/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3) `sha256:ab98a3cdc1b772dd2884c397b3e3fb8fa7f28436854586e2ce090d845759cfb2`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [cd636680](https://github.com/openshift/kube-rbac-proxy/commit/cd636680e06a55395c26570dff0cb37277014388) `sha256:fdee7b5d98fcac2b2026a0700440a81b4f5497174ceee7d219f948db1dbbce7d`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [8406e402](https://github.com/openshift/kube-state-metrics/commit/8406e402ad020185813942842d4914ff7730fdc1) `sha256:790c89d84d7eb74f2d756968593cff6ad24369fe3c7b12d217510d8274a2d11e`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [ce5ff17e](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/ce5ff17e9a81ce754567e6dd5053d13409c251e9) `sha256:f8dd89eea6f6ad3243c30c19d5bb751a43dadd60fa63d54bee89913e0337cafe`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [1e6fdd66](https://github.com/openshift/cloud-provider-kubevirt/commit/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934) `sha256:95b79cd2dce9cbb2e74e8c809712862dc633bce7b93140b45ead3d7e6d7e1bb7`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8a115121](https://github.com/openshift/kubevirt-csi-driver/commit/8a115121952348de9a4e4a73478755258a401a86) `sha256:2d06c6f1ba355b23e02e588bb45462aa011b6b3f86a62a7af7ef8d887ef769db`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [65aeb360](https://github.com/openshift/image-customization-controller/commit/65aeb3607f05dd71ec27a4457945ce1e054ea9e9) `sha256:affb3422193ef6ffacd85e57233f01c6766316808456b140545fe13a00c58cef`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [581c9d9e](https://github.com/openshift/machine-os-images/commit/581c9d9e453c73f67a93c44fb6715057c0cc8bf5) `sha256:68b76894d392896adca8cac65e32abfb6fa5e11f44aac90c182fad1b333dd394`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:4eeb06b4f589faabd7553e3d50ad833d1602cb0a28a99fb306d82ffa642c43ed`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d95feb67](https://github.com/openshift/multus-admission-controller/commit/d95feb67adfb97346849c79e36b6a9d404296ae9) `sha256:575e68c74ece915a08de8f1d20b155335d6c0ad9fb6675528260e1ca2bfa6347`
* [multus-cni](https://github.com/openshift/multus-cni) git [8f5dd8b1](https://github.com/openshift/multus-cni/commit/8f5dd8b1e9f0c2b2404e3c8ddcffb1fd9441003d) `sha256:aaacdab5d84dfc53cdc486837316030d194985130727b7988c98740ce56da2ff`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [8f5dd8b1](https://github.com/openshift/multus-cni/commit/8f5dd8b1e9f0c2b2404e3c8ddcffb1fd9441003d) `sha256:41c7e1e71d6fa8269145ff5e5a4dc9f3e77a34df94e0a6fb0bec489a21d5bc2d`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [e9f2f3c7](https://github.com/openshift/multus-networkpolicy/commit/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498) `sha256:66e6365a3be87c081ebed84a3cef239b210cd77e14d4a5ca18f297144f8e3896`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:714c58ded40d8cbc2fcb113b47f0c9303724681b42fe9251f8c742a2c868b3b6`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:6258851d9279d91aed5c638e3c231df90957ce9c5d16891417737f03bdd49f61`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:e2019f8cfc64fe6cf6447408053e00492d4458da0e49ee9153d9c9825e4494c7`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:4a60ffacc849d0125d1f942f21409d3726d1edc621ef83a10a5690b5846a4606`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:7e489cf726d288b8704813fab8c0613a65aa971ef821b45efe9b059f4ef6e948`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33b7bec6](https://github.com/openshift/cloud-provider-nutanix/commit/33b7bec6fe27b8d126982a70b4579112cd67052b) `sha256:b69d511f639a4389603bf00edc2403772de2317a1c83aab7f759d447fcfb2acc`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b15a665c](https://github.com/openshift/machine-api-provider-nutanix/commit/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be) `sha256:d413ad8198ccfa01fdd0e1de2f6cf715c1c0760b400f34af9324ea5aa2b1e2ad`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [71c41b2d](https://github.com/openshift/oauth-apiserver/commit/71c41b2d8abb0c6ad90dca286baf5d03c1340646) `sha256:a3b725aeea9d476e2c1c20164f73bcf1e42ef3fc75a0ec7b7a49d0b92f1dcb9a`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [d4c7cc97](https://github.com/openshift/oauth-proxy/commit/d4c7cc97754f353d9270de238990c988c85d1c97) `sha256:1c0403f1eb89076cb6407881c24e88663e2bc49add51b53fe5baec47c601ab1a`
* [oauth-server](https://github.com/openshift/oauth-server) git [85a8ae35](https://github.com/openshift/oauth-server/commit/85a8ae3529821203c39559c4df6231ef3607e64e) `sha256:437f44bd36e54fd5d449c65c9630daf0c98dde04b1b1224e0f3462226d5479a4`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [f427de80](https://github.com/openshift/openshift-apiserver/commit/f427de801b98823e486bdd5955468d88e95c2ac4) `sha256:19f9692f82a829f5283aba6e26e43c968289c7d4ce8f52611adb48e01a8586bf`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [438d52e7](https://github.com/openshift/openshift-controller-manager/commit/438d52e79d691e016d66eabfe9a53c84229db40c) `sha256:cb4cc5e0ee4f0f83f0d8bedcec8ced78bb148f060303cb15d76ba55ba202c69c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [ab605a4b](https://github.com/openshift/openshift-state-metrics/commit/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8) `sha256:8442e7db071bf99a116caebcc16208f39d38333198558cfcffa21b540552e6f0`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [ee321fbd](https://github.com/openshift/cloud-provider-openstack/commit/ee321fbd37b2ded41a96004d52a7652b67e28809) `sha256:e78126805551871811ee5c64e77070a220fe9458de7db6f18bf5c0077914b21a`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [ee321fbd](https://github.com/openshift/cloud-provider-openstack/commit/ee321fbd37b2ded41a96004d52a7652b67e28809) `sha256:f6f3719f510ce0da22d9e0ded1a64e8a5624e57484d4862c673a22e8ea8d8a10`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [b7456a2a](https://github.com/openshift/machine-api-provider-openstack/commit/b7456a2a12d1e65a5688693a005ad1e18aaee1be) `sha256:e9e7b57bebbea3364850eda55c049e1f7b3b41ea411ddcc3d03e2021c96425a7`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [efb1a1ea](https://github.com/operator-framework/operator-marketplace/commit/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce) `sha256:0eff3c508c88d3b26b7eb9ad57c7bdc4c1d0b95707364eb847c45e076edd60fe`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [40d1c0ad](https://github.com/openshift/cloud-provider-powervs/commit/40d1c0adfedeca36498a5d93d69aee96831c756d) `sha256:49856a9d017517430a9a80603e29c161d018cad37977fb07deb3d7969583d39a`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [551974ef](https://github.com/openshift/machine-api-provider-powervs/commit/551974ef93dedb1b9677a778e1533391448e0c56) `sha256:ff567d4acdb7379a339a953f42d46f8febd5ad60637845e5415365e3ab68955c`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [610c11b5](https://github.com/openshift/prom-label-proxy/commit/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494) `sha256:0c1c8455e466017c8d9eb1c3a7cba87ff84a7c8c6fe2e45ea7809c4759666943`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [39d72873](https://github.com/openshift/node_exporter/commit/39d728735779afef886bc10a8bc7cf72f54d51a0) `sha256:d51c425cea83fbd5c98a388a2e67f9b81253bba54868d346e7e86224675e0749`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [166a3e96](https://github.com/openshift/route-controller-manager/commit/166a3e96f8151d9e789b3951ae75b03cdede5081) `sha256:e1db113fc1793da3f672e86959062e33765e4e17381d9aa3ffab69cea727d30e`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e9622ba1](https://github.com/openshift/service-ca-operator/commit/e9622ba18c86bf24aceab0c19fdcb87339c14f44) `sha256:6f32eb15120c81d23a72ba7792cdc9231a617652dec47ff66350233097b656d1`
* [telemeter](https://github.com/openshift/telemeter) git [b79b872a](https://github.com/openshift/telemeter/commit/b79b872a65edd845891db70f6c9a184458a178da) `sha256:9bd112b8e292515071603b0b1fda7a7e02f7ef660b7315b90d5facf5d56e388f`
* [thanos](https://github.com/openshift/thanos) git [afeb1c85](https://github.com/openshift/thanos/commit/afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3) `sha256:4e2c41d796f3aeea9b376e8621189693db6a13dd95ed948a3bef1c0bed681549`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8b929332](https://github.com/openshift/volume-data-source-validator/commit/8b9293323cf8fdce93824e37168573ca3f73de3a) `sha256:c35aaec06e2a5e18026e96812471952fe5653f94e5ec79bc15f360248c9b2f80`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f69584d6](https://github.com/openshift/cloud-provider-vsphere/commit/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e) `sha256:17dd4e2a903a3e329044bc8c576937b864d25a4892d5b8a6c00bf339cbacbb15`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [3adfe2b5](https://github.com/openshift/cluster-api-provider-vsphere/commit/3adfe2b56b259b2d27906d8772354f817e338da5) `sha256:854711917af686851df4335192c72f3c5551ca4b65c6d5355ec06fd8d4f61842`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [d6a19449](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/d6a19449cc5d49541221d48d62c67d7a48142d19) `sha256:2c9a4078536e187c755c1dfd1b73972c1882ec08a1810e7df6a488f376919415`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bddba7290d9b08f7c0ce350e8082364819579525)

* [OCPBUGS-89984](https://issues.redhat.com/browse/OCPBUGS-89984): patching golang.org/x/crypto with sustaining/crypto@v0.48.0-sec.2 [#10793](https://github.com/openshift/assisted-service/pull/10793)
* [OCPBUGS-105879](https://issues.redhat.com/browse/OCPBUGS-105879): manifest_generator add a label to LUKS root [#10797](https://github.com/openshift/assisted-service/pull/10797)
* [Full changelog](https://github.com/openshift/assisted-service/compare/c343c325944592570613d582e7d07ae35f5863dd...bddba7290d9b08f7c0ce350e8082364819579525)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/c4e448f8e3c3f91d2dac98d846eb3fe400f15232)

* [OCPBUGS-104025](https://issues.redhat.com/browse/OCPBUGS-104025): Bump x/net to v0.35.0-sec.4 [#2298](https://github.com/openshift/assisted-installer/pull/2298)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/070f654bf5003765d3d00ab1811ef5ad111a5d4a...c4e448f8e3c3f91d2dac98d846eb3fe400f15232)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/5bf169cca60bec1ddc1bc5cf6b79b74bcfc16b2e)

* [OCPBUGS-104032](https://issues.redhat.com/browse/OCPBUGS-104032): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1621](https://github.com/openshift/assisted-installer-agent/pull/1621)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/1d5163811da9ec9eaeea69c252c9495889f624a9...5bf169cca60bec1ddc1bc5cf6b79b74bcfc16b2e)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/ac7876cd44df4a73ea0b7e467557f1ef2d4204a6)

* [OCPBUGS-123207](https://issues.redhat.com/browse/OCPBUGS-123207): Remove stale OCM_REFRESH_TOKEN code (#4026) [#4026](https://github.com/openshift-assisted/assisted-installer-ui/pull/4026)
* [OCPBUGS-104546](https://issues.redhat.com/browse/OCPBUGS-104546): Bump tmp to ^0.2.6 to address CVE-2026-44705 (#4015) [#4015](https://github.com/openshift-assisted/assisted-installer-ui/pull/4015)
* Update OWNERS file (#3991) [#3991](https://github.com/openshift-assisted/assisted-installer-ui/pull/3991)
* Bug OCPBUGS-100525,OCPBUGS-103013: Bump ip-address to 10.5.0 to fix CVE-2026-54272 and CVE-2026-69192 (#3986) [#3986](https://github.com/openshift-assisted/assisted-installer-ui/pull/3986)
* [OCPBUGS-109782](https://issues.redhat.com/browse/OCPBUGS-109782): Bump tar pkg to ^7.5.21 to address CVE-2026-73566 (#3971) [#3971](https://github.com/openshift-assisted/assisted-installer-ui/pull/3971)
* [OCPBUGS-104484](https://issues.redhat.com/browse/OCPBUGS-104484): Pin minimatch to ^10.2.6 and brace-expansion to ^5.0.9 (CVE-2026-14257) (#3960) [#3960](https://github.com/openshift-assisted/assisted-installer-ui/pull/3960)
* move @types/react-dom to dependencies to fix Hermeto (#3956) [#3956](https://github.com/openshift-assisted/assisted-installer-ui/pull/3956)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/a5c154ef58ffba5d7b42e48979d593217a5a97c6...ac7876cd44df4a73ea0b7e467557f1ef2d4204a6)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/cc8ca89bc5a0ce79227e8ab0860693950608ca04)

* [OCPBUGS-105452](https://issues.redhat.com/browse/OCPBUGS-105452): Update Konflux references [#335](https://github.com/openshift/agent-installer-utils/pull/335)
* [OCPBUGS-101761](https://issues.redhat.com/browse/OCPBUGS-101761): Update Konflux references [#330](https://github.com/openshift/agent-installer-utils/pull/330)
* [OCPBUGS-100311](https://issues.redhat.com/browse/OCPBUGS-100311): Update Konflux release version to 4.21.27 [#326](https://github.com/openshift/agent-installer-utils/pull/326)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/974dca83df8d440dc9435f5a6ba29f3834ea1309...cc8ca89bc5a0ce79227e8ab0860693950608ca04)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/68d3742af62df1fb40187c79d1c22015c8e92c7d)

* 🐛 OCPBUGS-112498: UPSTREAM: 6132: Persist ProviderID immediately after instance creation [#627](https://github.com/openshift/cluster-api-provider-aws/pull/627)
* 🐛 OCPBUGS-121766: UPSTREAM: <carry>: Fix unit tests for OpenShift CI environment [#628](https://github.com/openshift/cluster-api-provider-aws/pull/628)
* 🌱 [release-4.21] OCPBUGS-120321: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#635](https://github.com/openshift/cluster-api-provider-aws/pull/635)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/10ceef5e6f6d0cb79a3345de4fd8851f6300205c...68d3742af62df1fb40187c79d1c22015c8e92c7d)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a52a578c6aea1ac5da131f60b8e359969151d7e1)

* [OCPBUGS-104051](https://issues.redhat.com/browse/OCPBUGS-104051): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#613](https://github.com/openshift/csi-operator/pull/613)
* [OCPBUGS-109655](https://issues.redhat.com/browse/OCPBUGS-109655): csi-driver-smb: DeleteVolume call fails to mkdir under /tmp [#598](https://github.com/openshift/csi-operator/pull/598)
* [Full changelog](https://github.com/openshift/csi-operator/compare/20bb13fab3865444b7a4ae454dd234391c4d7e49...a52a578c6aea1ac5da131f60b8e359969151d7e1)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/f4af9b89aed3a47b2168d7bd5a7dd8b6453f1945)

* [OCPBUGS-104008](https://issues.redhat.com/browse/OCPBUGS-104008): Fix CVE-2026-33814 [#36](https://github.com/openshift/aws-karpenter-provider-aws/pull/36)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/ff9c8d4e8fdc55d3e60c6add0942c018826ae870...f4af9b89aed3a47b2168d7bd5a7dd8b6453f1945)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/3ae65a465e6da7d92ecec285fe8543acd8bb3dd4)

* [OCPBUGS-89991](https://issues.redhat.com/browse/OCPBUGS-89991): Address CVE-2026-39829 [#398](https://github.com/openshift/cluster-api-provider-azure/pull/398)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/ebf58aac3fc6746fe2037f2166f1226b73b424f4...3ae65a465e6da7d92ecec285fe8543acd8bb3dd4)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/8318a54892a51c76e3233e2fd60fb5d499afb6dc)

* [OCPBUGS-96484](https://issues.redhat.com/browse/OCPBUGS-96484): Bump golang.org/x/net to  v0.55.0 [#166](https://github.com/openshift/azure-disk-csi-driver/pull/166)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/aed3ad0d7780188dbfb7ae67a5d69118b7d74556...8318a54892a51c76e3233e2fd60fb5d499afb6dc)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/c0415d38bb792e507e0d2346b44d057ab7b2e024)

* [OCPBUGS-104045](https://issues.redhat.com/browse/OCPBUGS-104045): Bump golang.org/x/net to v0.50.0-sec.4 [#155](https://github.com/openshift/azure-file-csi-driver/pull/155)
* [OCPBUGS-111837](https://issues.redhat.com/browse/OCPBUGS-111837): fix failing unit tests in azure-file-csi-driver [#152](https://github.com/openshift/azure-file-csi-driver/pull/152)
* [OCPBUGS-92988](https://issues.redhat.com/browse/OCPBUGS-92988): Bump golang.org/x/crypto to v0.48.0-sec.1 [#145](https://github.com/openshift/azure-file-csi-driver/pull/145)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/45061e97a5e2b20b01cd55fee97e5dac43fd79e4...c0415d38bb792e507e0d2346b44d057ab7b2e024)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/97a682d9baff04f7c873ae378dee4afb6b697252)

* [OCPBUGS-104007](https://issues.redhat.com/browse/OCPBUGS-104007): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#58](https://github.com/openshift/azure-kubernetes-kms/pull/58)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/21e0a215b7e5b31eaa75027e0df9eee943e48323...97a682d9baff04f7c873ae378dee4afb6b697252)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/1d6640d424ff59840b59a731fe99bfd9bb742bb5)

* [OCPBUGS-100062](https://issues.redhat.com/browse/OCPBUGS-100062): openstack: Reserve addresses for load balancer [#10724](https://github.com/openshift/installer/pull/10724)
* [OCPBUGS-112472](https://issues.redhat.com/browse/OCPBUGS-112472): Update timeout in GetMarketplaceImage to 5 minutes [#10785](https://github.com/openshift/installer/pull/10785)
* [OCPBUGS-104042](https://issues.redhat.com/browse/OCPBUGS-104042): Bump golang.org/x/net to v0.50.0-sec.4 [#10806](https://github.com/openshift/installer/pull/10806)
* [OCPBUGS-113535](https://issues.redhat.com/browse/OCPBUGS-113535): Update RHCOS-release-4.21 bootimage metadata to 9.6.20260815-0 [#10792](https://github.com/openshift/installer/pull/10792)
* [OCPBUGS-87813](https://issues.redhat.com/browse/OCPBUGS-87813): [release-4.21] fix: reset associatedVCenter in failure domain validation loop [#10605](https://github.com/openshift/installer/pull/10605)
* [OCPBUGS-112029](https://issues.redhat.com/browse/OCPBUGS-112029): Bump google-cloud-cli to 563.0.0-1 [#10769](https://github.com/openshift/installer/pull/10769)
* [Full changelog](https://github.com/openshift/installer/compare/129c91fe1aad20fee24160703a27ef387048de88...1d6640d424ff59840b59a731fe99bfd9bb742bb5)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d0bf7cc5959bf8408912e5276f2ea9e269ede24d)

* [OCPBUGS-104179](https://issues.redhat.com/browse/OCPBUGS-104179): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#2379](https://github.com/openshift/oc/pull/2379)
* Fix for OCPBUGS-88239: CVE-2026-39821 [#2361](https://github.com/openshift/oc/pull/2361)
* [OCPBUGS-98550](https://issues.redhat.com/browse/OCPBUGS-98550): Revert pull request 2310 [#2348](https://github.com/openshift/oc/pull/2348)
* [Full changelog](https://github.com/openshift/oc/compare/0276efa6de22b45e3c2915423fd203555382ff1c...d0bf7cc5959bf8408912e5276f2ea9e269ede24d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/a921db0077641ab179c3048c9b5d21f54bb36e55)

* [OCPBUGS-109654](https://issues.redhat.com/browse/OCPBUGS-109654): UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references [#436](https://github.com/openshift/kubernetes-autoscaler/pull/436)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/838a5957d0bebc33c7a0a8a7efd4f5dcb4098286...a921db0077641ab179c3048c9b5d21f54bb36e55)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/b2423439fe1004bae5e84500cf449d033c1f0378)

* [OCPBUGS-104038](https://issues.redhat.com/browse/OCPBUGS-104038): Bump x/net package in release-4.21 [#386](https://github.com/openshift/cluster-autoscaler-operator/pull/386)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/dec12ba632a4810b4ff43a9172f462a1dd291e44...b2423439fe1004bae5e84500cf449d033c1f0378)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/87a6893e678af405043625bc3a209b30836f299f)

* [OCPBUGS-104049](https://issues.redhat.com/browse/OCPBUGS-104049): Bump golang.org/x/net to v0.50.0-sec.3 [#662](https://github.com/openshift/cluster-capi-operator/pull/662)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/f9513d3255926b63185a5b5203126699925133c3...87a6893e678af405043625bc3a209b30836f299f)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/c050cf15d939b1456e99caa71a46fb797d7b56c1)

* [OCPBUGS-82034](https://issues.redhat.com/browse/OCPBUGS-82034): Add delete permission for Azure load balancers in credentials request [#441](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/441)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6148c0cca626bcf0bfebcc6dd0c77a41944cba87...c050cf15d939b1456e99caa71a46fb797d7b56c1)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c4fdb41e357280bfa7e8ebbc934007a657168310)

* [OCPBUGS-90510](https://issues.redhat.com/browse/OCPBUGS-90510): Fixed issue where nameserver is not set when recreating cpms [#411](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/411)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/2dde33fb94aae47b460a5f6a672d06c9ee4225d8...c4fdb41e357280bfa7e8ebbc934007a657168310)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/eb43a7a80d1b314eb8bbe63b6b73de91ba8cc7aa)

* [OCPBUGS-104057](https://issues.redhat.com/browse/OCPBUGS-104057): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#296](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/8c1ebc60a2014ab925cbad6ef255e06ea0bd72b4...eb43a7a80d1b314eb8bbe63b6b73de91ba8cc7aa)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1cad682c3cdb0db2bd19c4cba27098703477734f)

* [OCPBUGS-100121](https://issues.redhat.com/browse/OCPBUGS-100121): Revert 'OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale' [#1662](https://github.com/openshift/cluster-etcd-operator/pull/1662)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/90faa26eef6b280777d8c4ad6fa61e5625df8cad...1cad682c3cdb0db2bd19c4cba27098703477734f)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/044fc0bce30bed270732f61213e2895d667ebf87)

* [OCPBUGS-75001](https://issues.redhat.com/browse/OCPBUGS-75001): Backport Azure ARM SDK migration and Azure Stack Hub compatibility [#1303](https://github.com/openshift/cluster-image-registry-operator/pull/1303)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b2dfc3bba3dfd8dba90918a4a3be74deb3c548dd...044fc0bce30bed270732f61213e2895d667ebf87)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f30c6160c94034639739df5ce940d60d1d7c028a)

* [OCPBUGS-93736](https://issues.redhat.com/browse/OCPBUGS-93736): Guard OLM subscription lookup with capability check [#1490](https://github.com/openshift/cluster-ingress-operator/pull/1490)
* [OCPBUGS-104065](https://issues.redhat.com/browse/OCPBUGS-104065): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.50.0-sec.3 to mitigate CVE-2026-33814 [#1554](https://github.com/openshift/cluster-ingress-operator/pull/1554)
* [OCPBUGS-99453](https://issues.redhat.com/browse/OCPBUGS-99453): Respect proxy configuration on gwapi provisioning [#1518](https://github.com/openshift/cluster-ingress-operator/pull/1518)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/172349116c92d6b0d9cf56610be99de2115ae726...f30c6160c94034639739df5ce940d60d1d7c028a)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/9b8c136071a82310b47a9ceab869257378a929c3)

* [OCPBUGS-112573](https://issues.redhat.com/browse/OCPBUGS-112573): [release-4.21] Makefile: version-stamp golangci-lint binary to prevent stale linter [#3065](https://github.com/openshift/cluster-monitoring-operator/pull/3065)
* [OCPBUGS-104068](https://issues.redhat.com/browse/OCPBUGS-104068): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#3070](https://github.com/openshift/cluster-monitoring-operator/pull/3070)
* [OCPBUGS-105305](https://issues.redhat.com/browse/OCPBUGS-105305): [release-4.21] wrap library-go resourceCache with mutex for thread safety [#3044](https://github.com/openshift/cluster-monitoring-operator/pull/3044)
* [OCPBUGS-104537](https://issues.redhat.com/browse/OCPBUGS-104537): Backport e2e stabilization 4.21 [#3027](https://github.com/openshift/cluster-monitoring-operator/pull/3027)
* [OCPBUGS-100369](https://issues.redhat.com/browse/OCPBUGS-100369): [release-4.21] fix: watch cluster wide proxy changes and apply changes accordingly [#3021](https://github.com/openshift/cluster-monitoring-operator/pull/3021)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/07e75e813de3a51a9e129dcf866d919c3194a675...9b8c136071a82310b47a9ceab869257378a929c3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d1d5e0e61459c068cd5024746b54275685279f9f)

* [OCPBUGS-112789](https://issues.redhat.com/browse/OCPBUGS-112789): [4.21] frr-k8s: use Recreate strategy for statuscleaner deployment [#3135](https://github.com/openshift/cluster-network-operator/pull/3135)
* [OCPBUGS-105600](https://issues.redhat.com/browse/OCPBUGS-105600): Remove version-specific CNI binary copy logic [#3117](https://github.com/openshift/cluster-network-operator/pull/3117)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/83a7d5c233e26c9bb858c93f556dcbe9f653f032...d1d5e0e61459c068cd5024746b54275685279f9f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/6075cffc70be79fa499558474f135ea244c93fc0)

* [OCPBUGS-114931](https://issues.redhat.com/browse/OCPBUGS-114931): Update PPC help description [#1623](https://github.com/openshift/cluster-node-tuning-operator/pull/1623)
* [OCPBUGS-112011](https://issues.redhat.com/browse/OCPBUGS-112011): BUG-FIX Latency Test [#1592](https://github.com/openshift/cluster-node-tuning-operator/pull/1592)
* [OCPBUGS-114013](https://issues.redhat.com/browse/OCPBUGS-114013): Use Add() instead of AddRateLimited() for routine Profile enqueues [#1616](https://github.com/openshift/cluster-node-tuning-operator/pull/1616)
* [OCPBUGS-104586](https://issues.redhat.com/browse/OCPBUGS-104586): e2e: fix: clear hugepages before switching kernelPageSize to 4k [#1576](https://github.com/openshift/cluster-node-tuning-operator/pull/1576)
* [OCPBUGS-100540](https://issues.redhat.com/browse/OCPBUGS-100540): e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes [#1573](https://github.com/openshift/cluster-node-tuning-operator/pull/1573)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/91c812dcaf932134f521a42554328a12a0eab82d...6075cffc70be79fa499558474f135ea244c93fc0)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/810221c4d6f91efae7277224e3022ec5c4778e14)

* [OCPBUGS-105475](https://issues.redhat.com/browse/OCPBUGS-105475): Add HostToContainer mountPropagation to node-pullsecrets volume mount [#750](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/750)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/52fd1773757b2c3ff497e7db084c3d71cde5478f...810221c4d6f91efae7277224e3022ec5c4778e14)


### [console](https://github.com/openshift/console/tree/c4707af42ca9f5e17ec9d515d66c5bf0f3b9c8ad)

* [OCPBUGS-122212](https://issues.redhat.com/browse/OCPBUGS-122212): Wait for demo plugin deployment readiness [#17160](https://github.com/openshift/console/pull/17160)
* [OCPBUGS-116250](https://issues.redhat.com/browse/OCPBUGS-116250): Validate chart URL in /api/helm/verify [#17136](https://github.com/openshift/console/pull/17136)
* [OCPBUGS-113468](https://issues.redhat.com/browse/OCPBUGS-113468): Remove unscoped CSV watch from ClusterNotUpgradeableAlert [#17079](https://github.com/openshift/console/pull/17079)
* Fix for OCPBUGS-92072: CVE-2026-44990 [#16714](https://github.com/openshift/console/pull/16714)
* [OCPBUGS-113732](https://issues.redhat.com/browse/OCPBUGS-113732): make cloud provider fields optional during operator install [#17091](https://github.com/openshift/console/pull/17091)
* [OCPBUGS-100518](https://issues.redhat.com/browse/OCPBUGS-100518), [OCPBUGS-101793](https://issues.redhat.com/browse/OCPBUGS-101793): Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss [#17055](https://github.com/openshift/console/pull/17055)
* Fix OCPBUGS-99410: CVE-2026-59877 [#16835](https://github.com/openshift/console/pull/16835)
* [OCPBUGS-112273](https://issues.redhat.com/browse/OCPBUGS-112273): Fix flaky TestAsyncCache backend test [#17046](https://github.com/openshift/console/pull/17046)
* Fix for OCPBUGS-101827: CVE-2026-69152 [#16931](https://github.com/openshift/console/pull/16931)
* Fix for OCPBUGS-105892: CVE-2026-73086 [#16966](https://github.com/openshift/console/pull/16966)
* [OCPBUGS-105864](https://issues.redhat.com/browse/OCPBUGS-105864): Fix leading whitespace in Quick Start execute code snippets [#16961](https://github.com/openshift/console/pull/16961)
* Fix for OCPBUGS-89706: CVE-2026-12143 [#16645](https://github.com/openshift/console/pull/16645)
* [OCPBUGS-98434](https://issues.redhat.com/browse/OCPBUGS-98434): CVE-2026-59869 bump js-yaml [#16772](https://github.com/openshift/console/pull/16772)
* [OCPBUGS-100058](https://issues.redhat.com/browse/OCPBUGS-100058): quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) [#16868](https://github.com/openshift/console/pull/16868)
* [OCPBUGS-100377](https://issues.redhat.com/browse/OCPBUGS-100377): Re-enable Knative Cypress e2e tests [#16896](https://github.com/openshift/console/pull/16896)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/0c6bbc2cc760fa4f8329982488de196b795b5163...c4707af42ca9f5e17ec9d515d66c5bf0f3b9c8ad)


### [console-operator](https://github.com/openshift/console-operator/tree/f730484ce5f2606e7f665d561227c374183fff14)

* [OCPBUGS-100111](https://issues.redhat.com/browse/OCPBUGS-100111): Sort plugin list to make them deterministic [#1203](https://github.com/openshift/console-operator/pull/1203)
* [Full changelog](https://github.com/openshift/console-operator/compare/47f72c1d16b5bb5b17bc94e09b04d6e7eb3a8f67...f730484ce5f2606e7f665d561227c374183fff14)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/b5e4888ca8e420ba9245805a1a8c976074a8b793)

* [OCPBUGS-82899](https://issues.redhat.com/browse/OCPBUGS-82899): Bump github.com/moby/spdystream@v0.5.1 [#191](https://github.com/openshift/csi-driver-nfs/pull/191)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/ebfd16d227b3af490f4327a8a040f6c9657a3b01...b5e4888ca8e420ba9245805a1a8c976074a8b793)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/8d29fc4b7cb1f910c4c03e0a63fdd375d6294125)

* UPSTREAM: 1544: OCPBUGS-96508: Bump golang.org/x/net to v0.50.0-sec.4 [#149](https://github.com/openshift/csi-external-provisioner/pull/149)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/06644b9a4a2cc350fd755b50a78621a003fb738f...8d29fc4b7cb1f910c4c03e0a63fdd375d6294125)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/d5c2c2b47fbd76677d6060956f309bc675957c31)

* [OCPBUGS-104092](https://issues.redhat.com/browse/OCPBUGS-104092): Bump golang.org/x/net to v0.50.0-sec.4 [#210](https://github.com/openshift/csi-external-resizer/pull/210)
* [OCPBUGS-80786](https://issues.redhat.com/browse/OCPBUGS-80786): Bump google.golang.org/grpc to v1.79.3 [#200](https://github.com/openshift/csi-external-resizer/pull/200)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/d880a1ec6da02dbf61600ec7999266185ca9f784...d5c2c2b47fbd76677d6060956f309bc675957c31)


### [etcd](https://github.com/openshift/etcd/tree/b6dda5413ec33fc88fc9751d98d3b4bd96ea877d)

* [OCPBUGS-100390](https://issues.redhat.com/browse/OCPBUGS-100390): UPSTREAM: 21443: Revert "Reuse events between sync loops" [#394](https://github.com/openshift/etcd/pull/394)
* [Full changelog](https://github.com/openshift/etcd/compare/806f690e1f140e0aea2eb05ef5f288b756b62895...b6dda5413ec33fc88fc9751d98d3b4bd96ea877d)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/0b668ce7bac61039537f573ad6d6f7297dd34b05)

* NO-JIRA: Update OWNERS [#159](https://github.com/openshift/cloud-provider-gcp/pull/159)
* [OCPBUGS-115261](https://issues.redhat.com/browse/OCPBUGS-115261): Fix node.kubernetes.io/exclude-from-external-load-balancers on masters [#142](https://github.com/openshift/cloud-provider-gcp/pull/142)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/e27accef1fa99089410e4b0894db21a392d9bf99...0b668ce7bac61039537f573ad6d6f7297dd34b05)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/53820aadd2cc313cb0ce54788bb1fceec5b95eed)

* [OCPBUGS-104131](https://issues.redhat.com/browse/OCPBUGS-104131): Bump golang.org/x/net to v0.50.0-sec.3 [#186](https://github.com/openshift/machine-api-provider-gcp/pull/186)
* [OCPBUGS-105415](https://issues.redhat.com/browse/OCPBUGS-105415): [release-4.21] Add the N4A machine type [#179](https://github.com/openshift/machine-api-provider-gcp/pull/179)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/49b8eb1bbdd364b8144dee270a88cace41271e4d...53820aadd2cc313cb0ce54788bb1fceec5b95eed)


### [haproxy-router](https://github.com/openshift/router/tree/22531cf0bb2435e73437be73c244913de4844812)

* [OCPBUGS-86729](https://issues.redhat.com/browse/OCPBUGS-86729): Prevent SSRF via FQDN-typed EndpointSlices [#818](https://github.com/openshift/router/pull/818)
* [Full changelog](https://github.com/openshift/router/compare/dc4c01d494f572773a05e82bffd19c2cdaf8dce9...22531cf0bb2435e73437be73c244913de4844812)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/93afd702239e69df4bf4b7e66140455ab8282acd)

* [OCPBUGS-87157](https://issues.redhat.com/browse/OCPBUGS-87157): Fix performance related issues when selinux metrics are emitted [#2678](https://github.com/openshift/kubernetes/pull/2678)
* NO-JIRA: Update openshift-hack/rebase.sh [#2745](https://github.com/openshift/kubernetes/pull/2745)
* [Full changelog](https://github.com/openshift/kubernetes/compare/ba6535cbb8719c3ba6c3923f2725ba050c87faab...93afd702239e69df4bf4b7e66140455ab8282acd)


### [hypershift](https://github.com/openshift/hypershift/tree/db86285f89737b67a53668e42a47ffd6c8cd5170)

* [OCPBUGS-82913](https://issues.redhat.com/browse/OCPBUGS-82913): Address CVE-2026-35469 [#9023](https://github.com/openshift/hypershift/pull/9023)
* [OCPBUGS-96712](https://issues.redhat.com/browse/OCPBUGS-96712): Apply MetricsSet relabel configs to KAS ServiceMonitor [#9294](https://github.com/openshift/hypershift/pull/9294)
* [OCPBUGS-105505](https://issues.redhat.com/browse/OCPBUGS-105505): fix(upsert): add desired-state hash to detect spec field removals [#9268](https://github.com/openshift/hypershift/pull/9268)
* [OCPBUGS-104592](https://issues.redhat.com/browse/OCPBUGS-104592): Add proxy env vars to AWS cloud-controller-manager deployment [#9224](https://github.com/openshift/hypershift/pull/9224)
* [OCPBUGS-105434](https://issues.redhat.com/browse/OCPBUGS-105434): [release-4.21] fix router component ordering to prevent missing HAProxy backends [#9263](https://github.com/openshift/hypershift/pull/9263)
* [OCPBUGS-94179](https://issues.redhat.com/browse/OCPBUGS-94179): fix registry override matching and propagation to init containers [#8879](https://github.com/openshift/hypershift/pull/8879)
* [OCPBUGS-100194](https://issues.redhat.com/browse/OCPBUGS-100194): fix(cpo): set correct --advertise-client-url for etcd grpc-proxy [#9184](https://github.com/openshift/hypershift/pull/9184)
* [CNTRLPLANE-3873](https://issues.redhat.com/browse/CNTRLPLANE-3873): Backport controlPlaneVersion status to release-4.21 [#9054](https://github.com/openshift/hypershift/pull/9054)
* [Full changelog](https://github.com/openshift/hypershift/compare/c0d1af55398d2b879d51db011c1239ec5fce2847...db86285f89737b67a53668e42a47ffd6c8cd5170)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/d2dc1470a6b71312fcfefdf4d334288302b6cfec)

* [OCPBUGS-104105](https://issues.redhat.com/browse/OCPBUGS-104105): Replace golang.org/x/net with openshift-sustaining/net [#175](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/175)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/f7e3ec30f746add35458fad54dd6bccb97e307bf...d2dc1470a6b71312fcfefdf4d334288302b6cfec)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/22e131a00d874c240531c40141a8a780fbb48bd5)

* [OCPBUGS-104113](https://issues.redhat.com/browse/OCPBUGS-104113): replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 [#101](https://github.com/openshift/machine-api-provider-ibmcloud/pull/101)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/f80ea3216387639dde6550a70a6e08599fd67f5f...22e131a00d874c240531c40141a8a780fbb48bd5)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f113c1d5386eaeaab5acfe68de160defd082bc68)

* [OCPBUGS-104096](https://issues.redhat.com/browse/OCPBUGS-104096): Bump golang.org/x/net to v0.50.0-sec.3 [#1352](https://github.com/openshift/insights-operator/pull/1352)
* [OCPBUGS-109390](https://issues.redhat.com/browse/OCPBUGS-109390): secrets and configmap revisions count gathering [#1342](https://github.com/openshift/insights-operator/pull/1342)
* [OCPBUGS-100248](https://issues.redhat.com/browse/OCPBUGS-100248): Fix indentation bug on livenessProbe [#1333](https://github.com/openshift/insights-operator/pull/1333)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a4cc366f068e2e64681242e5339faa6910347672...f113c1d5386eaeaab5acfe68de160defd082bc68)


### [ironic](https://github.com/openshift/ironic-image/tree/843f55a9276bf03d3cb659de5cb38f189e6e8fcf)

* [OCPBUGS-105861](https://issues.redhat.com/browse/OCPBUGS-105861): update ironic pin to include CVE-2026-54423 fix (release-4.21) [#890](https://github.com/openshift/ironic-image/pull/890)
* [OCPBUGS-88473](https://issues.redhat.com/browse/OCPBUGS-88473): Update openstack-ironic commit hash in requirements.cachito that addresses CVE-2026-43003 [#885](https://github.com/openshift/ironic-image/pull/885)
* [OCPBUGS-97991](https://issues.redhat.com/browse/OCPBUGS-97991): Update openstack-ironic commit hash for CVE-2026-44918 [#876](https://github.com/openshift/ironic-image/pull/876)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f2cbd623f92ebd5797744930ea7072ac1bc3cc87...843f55a9276bf03d3cb659de5cb38f189e6e8fcf)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/156ef6b4730f01279216d3296349ca0cae29466c)

* [OCPBUGS-100051](https://issues.redhat.com/browse/OCPBUGS-100051): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#296](https://github.com/openshift/ironic-agent-image/pull/296)
* [OCPBUGS-88473](https://issues.redhat.com/browse/OCPBUGS-88473): Update commit SHA in requirements.cachito to address CVE-2026-43003 [#298](https://github.com/openshift/ironic-agent-image/pull/298)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/25155e54fcc29ff604aedda802486b0750176802...156ef6b4730f01279216d3296349ca0cae29466c)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/aac6c87b2ebf762bf049c6a69aedbc6096323e1c)

* [OCPBUGS-104125](https://issues.redhat.com/browse/OCPBUGS-104125): replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 [#1542](https://github.com/openshift/machine-api-operator/pull/1542)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/88f39dc939cceb2c1999f2b0ab99f1118f26358f...aac6c87b2ebf762bf049c6a69aedbc6096323e1c)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0c32560860e39c44babcc69692782c63119fb331)

* [OCPBUGS-120453](https://issues.redhat.com/browse/OCPBUGS-120453): Update message for MachineOSBuildFailed condition [#6493](https://github.com/openshift/machine-config-operator/pull/6493)
* [OCPBUGS-116929](https://issues.redhat.com/browse/OCPBUGS-116929): Update AMI Whitelist [#6486](https://github.com/openshift/machine-config-operator/pull/6486)
* [OCPBUGS-112469](https://issues.redhat.com/browse/OCPBUGS-112469): Fix SHA idempotency test in nmstate-configuration.sh [#6430](https://github.com/openshift/machine-config-operator/pull/6430)
* [OCPBUGS-114391](https://issues.redhat.com/browse/OCPBUGS-114391): Use kubernetes scheme in drain controller event recorder [#6457](https://github.com/openshift/machine-config-operator/pull/6457)
* [OCPBUGS-109656](https://issues.redhat.com/browse/OCPBUGS-109656): Fix duplicate template error [#6405](https://github.com/openshift/machine-config-operator/pull/6405)
* [OCPBUGS-105303](https://issues.redhat.com/browse/OCPBUGS-105303): Use providerSpec.Template in vSphere machineset reconciliation [#6381](https://github.com/openshift/machine-config-operator/pull/6381)
* [OCPBUGS-105214](https://issues.redhat.com/browse/OCPBUGS-105214): Update AMI Whitelist [#6376](https://github.com/openshift/machine-config-operator/pull/6376)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/0ba66a27bc734f20b2982d2d874b8bada58b78fd...0c32560860e39c44babcc69692782c63119fb331)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/563488150549466015299a876981a19e54c22b8b)

* [OCPBUGS-98789](https://issues.redhat.com/browse/OCPBUGS-98789): [release-4.21] replace outdated react-linkify dependency [#1149](https://github.com/openshift/monitoring-plugin/pull/1149)
* [OCPBUGS-98425](https://issues.redhat.com/browse/OCPBUGS-98425): fix for CVE-2026-59869 [#1136](https://github.com/openshift/monitoring-plugin/pull/1136)
* Fix for OCPBUGS-89702: CVE-2026-12143 [#1090](https://github.com/openshift/monitoring-plugin/pull/1090)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a9d006185acbb33f045f643a7674f405abc2b553...563488150549466015299a876981a19e54c22b8b)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/9af0359dc73e8489059057a625d53c5293923993)

* [OCPBUGS-104121](https://issues.redhat.com/browse/OCPBUGS-104121): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#150](https://github.com/openshift/network-metrics-daemon/pull/150)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/844fa588c4200b8ff768d1916d63f1d4c1db2daf...9af0359dc73e8489059057a625d53c5293923993)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/7f30aa50c9eb323c94fb07f0f60664fb59b9cbb8)

* [OCPNETUI-82](https://issues.redhat.com/browse/OCPNETUI-82): Lower Dockerfile base image versions [#518](https://github.com/openshift/networking-console-plugin/pull/518)
* [OCPBUGS-85606](https://issues.redhat.com/browse/OCPBUGS-85606): Fix React error on MultiNetworkPolicies page [#484](https://github.com/openshift/networking-console-plugin/pull/484)
* [OCPBUGS-98790](https://issues.redhat.com/browse/OCPBUGS-98790): Updating linkify-it to 5.0.2 to fix CVE-2026-48801 [#463](https://github.com/openshift/networking-console-plugin/pull/463)
* [OCPBUGS-74099](https://issues.redhat.com/browse/OCPBUGS-74099): fixed translations of pod column titles [#435](https://github.com/openshift/networking-console-plugin/pull/435)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/35868a96e0f9df8aedda5357279d32fa61e4096e...7f30aa50c9eb323c94fb07f0f60664fb59b9cbb8)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9c41c399a30d4e3a6e2f60aae8b4fbee1013c9c2)

* [OCPBUGS-105785](https://issues.redhat.com/browse/OCPBUGS-105785): fix for CVE-2026-39829 [#1503](https://github.com/openshift/oc-mirror/pull/1503)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/f9812811fdc23a9baa72f075afe566caddfe2280...9c41c399a30d4e3a6e2f60aae8b4fbee1013c9c2)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/92ef079dccfdf08c11d653113d5758827e67616c)

* [OCPBUGS-100383](https://issues.redhat.com/browse/OCPBUGS-100383): Fix cache path to avoid /var/cache/dnf conflict [#785](https://github.com/openshift/operator-framework-operator-controller/pull/785)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/9a537cc07f453743ce02b568b5df02df18df01bb...92ef079dccfdf08c11d653113d5758827e67616c)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d02231d0a92491926666f4f1f5e45a7e2c733cb7)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#417](https://github.com/openshift/cluster-api-provider-openstack/pull/417)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/f4f439d4ce40c1175188c81591284dcc9fe6facf...d02231d0a92491926666f4f1f5e45a7e2c733cb7)


### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/83fb75dff1a6527f4632d8550f269d424e3e598c)

* UPSTREAM-SYNC: Bump envtest version [#47](https://github.com/openshift/openstack-resource-controller/pull/47)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72...83fb75dff1a6527f4632d8550f269d424e3e598c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e0c18696b033d125090f0af6205ec5cd39eaf9de)

* [OCPBUGS-104147](https://issues.redhat.com/browse/OCPBUGS-104147), [OCPBUGS-104152](https://issues.redhat.com/browse/OCPBUGS-104152): CVE-2026-33814: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 [#1363](https://github.com/openshift/operator-framework-olm/pull/1363)
* [OCPBUGS-95444](https://issues.redhat.com/browse/OCPBUGS-95444), [OCPBUGS-95447](https://issues.redhat.com/browse/OCPBUGS-95447): bumping containerd to v1.7.33 [#1354](https://github.com/openshift/operator-framework-olm/pull/1354)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/149d553b2057320d761c4d1913098a66787dd09a...e0c18696b033d125090f0af6205ec5cd39eaf9de)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e2e61dbe576da162f711394c89068b8067f72343)

* [OCPBUGS-112513](https://issues.redhat.com/browse/OCPBUGS-112513): NO-JIRA: Branch Sync release-4.22 to release-4.21 [08-21-2026] [#3413](https://github.com/openshift/ovn-kubernetes/pull/3413)
* [OCPBUGS-99165](https://issues.redhat.com/browse/OCPBUGS-99165): Branch Sync release-4.22 to release-4.21 [08-13-2026] [#3393](https://github.com/openshift/ovn-kubernetes/pull/3393)
* [OCPBUGS-105516](https://issues.redhat.com/browse/OCPBUGS-105516), [OCPBUGS-105605](https://issues.redhat.com/browse/OCPBUGS-105605): Branch Sync release-4.22 to release-4.21 [08-10-2026] [#3374](https://github.com/openshift/ovn-kubernetes/pull/3374)
* [OCPBUGS-90029](https://issues.redhat.com/browse/OCPBUGS-90029), [OCPBUGS-90470](https://issues.redhat.com/browse/OCPBUGS-90470), [OCPBUGS-92544](https://issues.redhat.com/browse/OCPBUGS-92544), [OCPBUGS-93018](https://issues.redhat.com/browse/OCPBUGS-93018): Branch Sync release-4.22 to release-4.21 [08-06-2026] [#3365](https://github.com/openshift/ovn-kubernetes/pull/3365)
* [OCPBUGS-95075](https://issues.redhat.com/browse/OCPBUGS-95075): Branch Sync release-4.22 to release-4.21 [07-29-2026] [#3337](https://github.com/openshift/ovn-kubernetes/pull/3337)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9f20d9cb39b32feb1dc2d4b1b33e686c9a3d8d9b...e2e61dbe576da162f711394c89068b8067f72343)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/bd7dd70130c531cce7d9a50138fe4286e4208b69)

* [OCPBUGS-104161](https://issues.redhat.com/browse/OCPBUGS-104161), [OCPBUGS-89654](https://issues.redhat.com/browse/OCPBUGS-89654), [OCPBUGS-90028](https://issues.redhat.com/browse/OCPBUGS-90028), [OCPBUGS-90454](https://issues.redhat.com/browse/OCPBUGS-90454), [OCPBUGS-91231](https://issues.redhat.com/browse/OCPBUGS-91231), [OCPBUGS-92545](https://issues.redhat.com/browse/OCPBUGS-92545), [OCPBUGS-93024](https://issues.redhat.com/browse/OCPBUGS-93024), [OCPBUGS-93510](https://issues.redhat.com/browse/OCPBUGS-93510), [OCPBUGS-95008](https://issues.redhat.com/browse/OCPBUGS-95008), [OCPBUGS-96558](https://issues.redhat.com/browse/OCPBUGS-96558): Bump golang.org dependencies [#144](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/114fe69249450f3bec773cba2956a8c06e7b0da9...bd7dd70130c531cce7d9a50138fe4286e4208b69)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/ac080eb0fe6c3849d2ff8cd8233a6d911f508043)

* [OCPBUGS-104163](https://issues.redhat.com/browse/OCPBUGS-104163): Mitigate CVE-2026-33814 by bumping golang.org/x/net to v0.57.0 [#122](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/122)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/b714ab87d079db5ef3c4097520db40cd289b025e...ac080eb0fe6c3849d2ff8cd8233a6d911f508043)


### [prometheus](https://github.com/openshift/prometheus/tree/6e65a831d39940685cf4cfaf6343278c163edede)

* [OCPBUGS-93729](https://issues.redhat.com/browse/OCPBUGS-93729): fix for CVE-2026-42151 [#357](https://github.com/openshift/prometheus/pull/357)
* [Full changelog](https://github.com/openshift/prometheus/compare/669596b0ae312b441ae687b77557d07e8be92351...6e65a831d39940685cf4cfaf6343278c163edede)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/99c776df40d65fb32f96a09b063d9c159f843f9a)

* [OCPBUGS-104155](https://issues.redhat.com/browse/OCPBUGS-104155): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#169](https://github.com/openshift/prometheus-alertmanager/pull/169)
* [OCPBUGS-98182](https://issues.redhat.com/browse/OCPBUGS-98182): build(deps): bump github.com/hashicorp/memberlist to a forked version which fixes CVE-2026-14362 [#158](https://github.com/openshift/prometheus-alertmanager/pull/158)
* [OCPBUGS-100352](https://issues.redhat.com/browse/OCPBUGS-100352): Set testdata CA expiry to 20 years from issue date (#4112) [#145](https://github.com/openshift/prometheus-alertmanager/pull/145)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/377c84b84a9f85b900736cde6bfc7c5285aa8c7a...99c776df40d65fb32f96a09b063d9c159f843f9a)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/d392d80ac2194cf33969ec56aed5d624da8053e0)

* [OCPBUGS-104160](https://issues.redhat.com/browse/OCPBUGS-104160), [OCPBUGS-104188](https://issues.redhat.com/browse/OCPBUGS-104188): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#394](https://github.com/openshift/prometheus-operator/pull/394)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3de9763f36128ffa8b25a63c9447f6d64114c270...d392d80ac2194cf33969ec56aed5d624da8053e0)


### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e)

* [OCPBUGS-105490](https://issues.redhat.com/browse/OCPBUGS-105490): NetworkManager-ovs has moved to RHCOS [#1957](https://github.com/openshift/os/pull/1957)
* [Full changelog](https://github.com/openshift/os/compare/10f1a2e738aa55fff22dbe0346609e83a5f6eb90...b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e)


### [tests](https://github.com/openshift/origin/tree/c941d145e570817f0408dc531c4261eecc21c4e7)

* [OCPBUGS-69943](https://issues.redhat.com/browse/OCPBUGS-69943): feat: render OTE JSON results in spyglass [#30633](https://github.com/openshift/origin/pull/30633)
* [OCPBUGS-120726](https://issues.redhat.com/browse/OCPBUGS-120726): fix: skip MCPs with non-ready nodes during MCN property validation [#31524](https://github.com/openshift/origin/pull/31524)
* [OCPBUGS-115200](https://issues.redhat.com/browse/OCPBUGS-115200): fix: adjusting DaemonSet test to dynamically compute expected pod count [#31523](https://github.com/openshift/origin/pull/31523)
* [OCPBUGS-115282](https://issues.redhat.com/browse/OCPBUGS-115282): Raise status polling timeout and write bound [#31587](https://github.com/openshift/origin/pull/31587)
* [OCPBUGS-114439](https://issues.redhat.com/browse/OCPBUGS-114439): Fix probe termination test to use pod status instead of kubelet event text [#31569](https://github.com/openshift/origin/pull/31569)
* [OCPBUGS-100439](https://issues.redhat.com/browse/OCPBUGS-100439): retry GetVotingMemberNames on transient etcd client fails [#31507](https://github.com/openshift/origin/pull/31507)
* [OCPBUGS-99671](https://issues.redhat.com/browse/OCPBUGS-99671): Backport node_e2e test migrations [#31426](https://github.com/openshift/origin/pull/31426)
* [Full changelog](https://github.com/openshift/origin/compare/36a247f24e17d72c4f00404b03a3be623ec3e73c...c941d145e570817f0408dc531c4261eecc21c4e7)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/d163d71ccf646b3c2b36f4f2fd6ef78f3c254ed5)

* [OCPBUGS-96573](https://issues.redhat.com/browse/OCPBUGS-96573): Bump golang.org/x/net to v0.50.0-sec.4 [#196](https://github.com/openshift/vmware-vsphere-csi-driver/pull/196)
* [OCPBUGS-93031](https://issues.redhat.com/browse/OCPBUGS-93031): Bump golang.org/x/crypto/ssh to v0.48.0-sec.1 [#190](https://github.com/openshift/vmware-vsphere-csi-driver/pull/190)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/69e1c6ed3201efc16bcd320cf558aa8fe869ec69...d163d71ccf646b3c2b36f4f2fd6ef78f3c254ed5)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/a644ba6cea8f898ef9a856b8ef955e23a1bf4868)

* [OCPBUGS-104206](https://issues.redhat.com/browse/OCPBUGS-104206): Bump golang.org/x/net to v0.50.0-sec.4 [#230](https://github.com/openshift/vsphere-problem-detector/pull/230)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/e4130b0a049c0ced1600ff7c296bf505e5446ddb...a644ba6cea8f898ef9a856b8ef955e23a1bf4868)