# 4.21.35

Created: 2026-09-25 06:48:58 +0000 UTC

Image Digest: `sha256:1f8f423477982ce16193469c26f8941ba797a6f4fc3b3621a5d426ae19deb457`


## Changes from 4.21.32

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.9
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [cc8ca89b](https://github.com/openshift/agent-installer-utils/commit/cc8ca89bc5a0ce79227e8ab0860693950608ca04) `sha256:f88e1466f5e5fd3bc87eb2f76b8eab86f76ecee7aae23d8c0e3384b5883defca`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:5db653d4f6ffb147abd99670ae1518f535c3f31efa7ad72be632a21c53929167`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [fdc7f3f1](https://github.com/openshift/cloud-provider-aws/commit/fdc7f3f15c693593cb573b6bef6f0363256b6f52) `sha256:f988e8ead554f5ae5e2f8066353a341deeee92d7ee6e0122c2dd4a8a41c5366e`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d8cec7d](https://github.com/openshift/aws-ebs-csi-driver/commit/1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709) `sha256:075cde7711706036990709137fb0514cf018c17e4f245b7fb015daf87b304549`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f4af9b89](https://github.com/openshift/aws-karpenter-provider-aws/commit/f4af9b89aed3a47b2168d7bd5a7dd8b6453f1945) `sha256:4f002861bc5a3e7deda33a6d5d0ed799dc48f84ebd5e2a76b3f0378c1d7f036c`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [887615ff](https://github.com/openshift/aws-encryption-provider/commit/887615ffa8a595ee3693e92fa56db4dd30f20f73) `sha256:2395da9906c34f2cd1ca7aa7c96cea57b6c1de279def8ba347e824b236105f7b`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [938565c9](https://github.com/openshift/machine-api-provider-aws/commit/938565c9f796fba385c0978a5ae1cc0a79f0f857) `sha256:23c81f1d0cb195e11662c4b20ce353200ad844951869ec82c1e7d4df6df7983c`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [5cd42ed1](https://github.com/openshift/aws-pod-identity-webhook/commit/5cd42ed1e5151f45f0134593e9cfebdb6517b385) `sha256:3724c00e06ffce8ecf0bab67a5e0e7363acf9d59ba572c7022c7b4dc324fc89a`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [3ae65a46](https://github.com/openshift/cluster-api-provider-azure/commit/3ae65a465e6da7d92ecec285fe8543acd8bb3dd4) `sha256:84262d6519c4a3963a9c7391a65985c54707e4491d583c4ca8758add71ae79a0`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [8318a548](https://github.com/openshift/azure-disk-csi-driver/commit/8318a54892a51c76e3233e2fd60fb5d499afb6dc) `sha256:639223532eb47e7a5837c9997c06e39ed80d949b7e61c858f111eb0afc2d76c3`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [97a682d9](https://github.com/openshift/azure-kubernetes-kms/commit/97a682d9baff04f7c873ae378dee4afb6b697252) `sha256:98d708e85167fcd2620175dab9b72e057a2077a0e2aec1b0c567ae7ce7d96a79`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [5e84c831](https://github.com/openshift/azure-service-operator/commit/5e84c83176d7630f70802b35cb10cdf2b60fd6d3) `sha256:c338bb2898affc6ff8ef77c1710c057ba4a0e549abb77932154e40b000033903`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [ae8ffaf0](https://github.com/openshift/azure-workload-identity/commit/ae8ffaf0b4a893e9b38fb4007de3cef8492b71f3) `sha256:209b307ec35848c816a3fa75245de2230a43cafdd1dea9d4dbefa665cc1d6880`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [659138fe](https://github.com/openshift/cluster-api-provider-metal3/commit/659138fef3abd4c71b0b01fa1279146745699a5a) `sha256:b3dbf258905cc1d376a29c67a200f7f66bf71855d19625666815a6509329dc6c`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4e6a729c](https://github.com/openshift/cluster-api-provider-baremetal/commit/4e6a729c5ac8fde8859db5830def262dfdee28ea) `sha256:9db65698a29ac5c2df1d75d4a59a15ebc6994223e0c23c8fce47a02ef0fe5292`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [d5c58b32](https://github.com/openshift/baremetal-operator/commit/d5c58b32e71e0e979e190b40a3804d012509d93b) `sha256:4df39e78c19f62dce6c950906fcf37cbf96d1fca4a368c3f8f3adba9fe4fb88c`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [d7e3fc12](https://github.com/openshift/baremetal-runtimecfg/commit/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14) `sha256:a1aa787d8108217c262fcd0fe5c117a23fadd8c859e91f7a810dc3c74966fca4`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [bd0a5785](https://github.com/openshift/cloud-credential-operator/commit/bd0a5785a37eeccedb3ba357eb4254860acd6ef4) `sha256:5b6ddc5e1f70b06591a294c7b87b1e8e15e879f278c7c7292dd8c6344b02d8d5`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [57db2d05](https://github.com/openshift/cloud-network-config-controller/commit/57db2d05e057dc90bae3dc1b0e806b3259d38fc0) `sha256:651121d0549e9d6899b24712cfed886890f6778255905c993c21d4809c2bbaeb`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [a921db00](https://github.com/openshift/kubernetes-autoscaler/commit/a921db0077641ab179c3048c9b5d21f54bb36e55) `sha256:a44d0ad72fb6edb7e42ddb8a8209dd66c921823b8ebe3239d0925bf7845f0847`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [b2423439](https://github.com/openshift/cluster-autoscaler-operator/commit/b2423439fe1004bae5e84500cf449d033c1f0378) `sha256:89204913384d712bd62c5c947f41d22b470983ae0a3109472a71edbe987effd6`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [13af370f](https://github.com/openshift/cluster-baremetal-operator/commit/13af370f526ab7541a8a73aa0d94952496ccca58) `sha256:a1609ed7020400b7b3b2028cd57bc46cef7dc02822567316243ef3541b703cdb`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [dc0d4a5c](https://github.com/openshift/cluster-bootstrap/commit/dc0d4a5cdaf8a7477cab584208dc99352f46efe2) `sha256:ebf22f6323bd2b38cb01bcb267456331b1b6ecb69c6d66fc3ca0c7e063882f89`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [9dd5eba0](https://github.com/openshift/cluster-api/commit/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874) `sha256:36fecf9e7d03aa9f4c384c0fbc077a3d7c440c494c0fa977d20c95cef83646cd`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [c050cf15](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/c050cf15d939b1456e99caa71a46fb797d7b56c1) `sha256:730e030679ce844aba2271c7b7254146aa8adbd3462abf3eeefe004c3f28b1c7`
* [cluster-config-api](https://github.com/openshift/api) git [1cb630ce](https://github.com/openshift/api/commit/1cb630ce7109e6c4780332bb8140c8c4f7157426) `sha256:832970d85f8eeb9ce427f63c47a1949477db9ae2a81562b6a43563df0b42d942`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [1eb450a3](https://github.com/openshift/cluster-config-operator/commit/1eb450a3a2456f6e3fe3d727208b5f7b0dd35aba) `sha256:7f59f35ee6657f445d98e6001b2fccdd987bf87af05161c8282a22355403967f`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [c4fdb41e](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/c4fdb41e357280bfa7e8ebbc934007a657168310) `sha256:591070c05368d1996182a583ce214f5ce78e37e724dbf495260d532c2446a8d4`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [41a53fed](https://github.com/openshift/cluster-dns-operator/commit/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9) `sha256:302e30c07ae928c8811277a497759c57b385c72f5f749f52560443b6cf228c16`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [1cad682c](https://github.com/openshift/cluster-etcd-operator/commit/1cad682c3cdb0db2bd19c4cba27098703477734f) `sha256:d2401ca8661362e2a29d23ce60e03b3cf40e4024927711af1435a43d18cac7d0`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [044fc0bc](https://github.com/openshift/cluster-image-registry-operator/commit/044fc0bce30bed270732f61213e2895d667ebf87) `sha256:7d09c6511a3b1eba905a7121ffa7112c905feb49accb3093d245edd5928da34c`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [dc1c217c](https://github.com/openshift/cluster-kube-apiserver-operator/commit/dc1c217c263cd220ddd2ed6fe827a466d47e3ebb) `sha256:2b263c687ecba2f1417d5818783e4267be14c2c4ca184b4e4a2a08d01e0325fc`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [395de967](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/395de96705749de9c6a5f25747b9d5c3d5f65a8f) `sha256:adb962dc7884c977c7809496ff95caa19a97d6d74cd3d0de59f491702384ec0e`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [5ef1df3b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/5ef1df3be41d38ddae9b3d22ce51ba486939e9f1) `sha256:e416bc772d12e323bb2bac9ec0352e3e79d081d023aeb579f422ced47a12949d`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [8a42beeb](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/8a42beebd580bd2e241aa6d93860c09e907f2407) `sha256:295e63bf7c340bcdd2bc035d58c9811fec984b7e2fdb0a8db204978f3dd1f625`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [d864813c](https://github.com/openshift/cluster-machine-approver/commit/d864813cd3ab01c0f975b2bf41e9046948f0afa1) `sha256:f69eac2b49cfd5825f02d0fa9c26d6d9159b6642ba4637c15ff7abdfb691d146`
* [cluster-network-operator](https://github.com/openshift/cluster-network-operator) git [d1d5e0e6](https://github.com/openshift/cluster-network-operator/commit/d1d5e0e61459c068cd5024746b54275685279f9f) `sha256:8cda29da5176b85e5278fd521f206301af8477e071154abed57025452a366908`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [6075cffc](https://github.com/openshift/cluster-node-tuning-operator/commit/6075cffc70be79fa499558474f135ea244c93fc0) `sha256:83074c3e603d01826d4b77d51d60ea269548b8fd35ceacc5ada046540e7f00b9`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [03bedb91](https://github.com/openshift/cluster-olm-operator/commit/03bedb913bce9c7deabf7868e5cbefc57cf3490b) `sha256:d9e8e9365c5eb7943fdc583800ca4f821823b0ebdaf51d90cdfa1d924de3117b`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [810221c4](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/810221c4d6f91efae7277224e3022ec5c4778e14) `sha256:0d832f90dccd476b1e3fae03aef0ca1da92f0b7361673dc8b6f646b7b1e2113f`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2617a201](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2617a201bb3607192a9f82faa18384676f611e3c) `sha256:6457124986f63555d0aeed644c0c7dbf5d928518c731cfda80dc7632cda11c6a`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [e510507e](https://github.com/openshift/cluster-policy-controller/commit/e510507e20f6eb09694c880ecd79fa512a2b3470) `sha256:37c291ab5c758129480523d9f63e871ac6c6caeb4dd39b978cdd8a09c6676c30`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [11ed1942](https://github.com/openshift/cluster-samples-operator/commit/11ed1942dbbf7a8334862b3d598a967e9b92aa77) `sha256:a6fa143df7edfe4f0841c1813945805d58d7d8e0be8c0d03fc5e8a5351039c97`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e4034751](https://github.com/openshift/cluster-storage-operator/commit/e403475164a4de23d358a93106a35353ec29f3d7) `sha256:4e68a36713777e520c15f2d1dedc7da517866501c3411f72776364d6aebd39c8`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b3cae8f2](https://github.com/openshift/cluster-update-keys/commit/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f) `sha256:5cc8a1e84c25d5a87aac037a629cb0e784e58f99126d22dce173bc654ed6c21b`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [d37e5a05](https://github.com/openshift/cluster-version-operator/commit/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a) `sha256:c8a0da961c360655a30bb431cc3a4b9f25b85f408b2f95c1099aa32de248af9a`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [16114b8d](https://github.com/openshift/configmap-reload/commit/16114b8de20278b8f4b7a425ece6d35d53214773) `sha256:fea6c6aeff103590764c6b38277fbb9f7faa7058feb1e4f2476af68ec3f0d42c`
* [console-operator](https://github.com/openshift/console-operator) git [f730484c](https://github.com/openshift/console-operator/commit/f730484ce5f2606e7f665d561227c374183fff14) `sha256:966d819abc7cf0e182b3799470b28958e702fd0718aa72c42dde7db7be17cdb9`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:5cd0b1cdd4511ef8ae8c9c0c68210efdd9cdcb8bb5b253fdf2853e7f0ff463e9`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:6c614a3e137b9366d72062659d58a67fe8374cdb28ab3c35348c86800281355b`
* [coredns](https://github.com/openshift/coredns) git [7486e9e4](https://github.com/openshift/coredns/commit/7486e9e4330c1e41d9a91e4673b7f2782efc112c) `sha256:d26886b96df1012395e7179d95cb896d452b54319d7fbd08fd6a155d18a383a9`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b5e4888c](https://github.com/openshift/csi-driver-nfs/commit/b5e4888ca8e420ba9245805a1a8c976074a8b793) `sha256:888dc5072f424672b6f46ddd3a228844a45a377f3ffcf57af90d2dcdb60bd0e8`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [6a3be10e](https://github.com/openshift/csi-external-attacher/commit/6a3be10e6795c8149c4bd3c9856f7e2d312108e2) `sha256:2a01335180ecfa02999f3a6a894afb9884e22a20592630193ff270ce082f46f2`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [8d29fc4b](https://github.com/openshift/csi-external-provisioner/commit/8d29fc4b7cb1f910c4c03e0a63fdd375d6294125) `sha256:942c28a95e8380a6c1718e09bfe2fc4197772fba2bdc49a5fbb31c86c519dff0`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [af250fdb](https://github.com/openshift/csi-external-snapshot-metadata/commit/af250fdbac8af84d9808a2892bfc911c04162115) `sha256:9f6a4881b6811824b38842ea4f69fc670d8c2c522550b6c63d1923a2177277a5`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [2c14afc5](https://github.com/openshift/csi-external-snapshotter/commit/2c14afc50a30de62cb00cc8263b061383cfbd3b5) `sha256:38c7bc3752d07f270bb968bb59a113f0a240f74813634fb4ed298db7f35c3982`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [78dacb7c](https://github.com/openshift/csi-livenessprobe/commit/78dacb7c661a62c78036c2737401afd3eb6fd04d) `sha256:7dd57dd432a84e618b8578bc69ef26d169e18903177913fc6c163b63b0c1bea5`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d29f3f7a](https://github.com/openshift/csi-node-driver-registrar/commit/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c) `sha256:dcef291564fcc330935a07a7662d19c5c4bb08126057b3f45acc0ad3d625ebd8`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [2c14afc5](https://github.com/openshift/csi-external-snapshotter/commit/2c14afc50a30de62cb00cc8263b061383cfbd3b5) `sha256:9d3a0b2de619aa5021fe34e3ad2e3f2971f4ec4404af5d657b15d225df0c3dc9`
* [docker-registry](https://github.com/openshift/image-registry) git [602f51c7](https://github.com/openshift/image-registry/commit/602f51c795dcdcd71c75f6abfe79dc0424a0476a) `sha256:9960ce0210902b4a564deb29e8922ae9c6ed319a557a2da09af2a68ee4319add`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:7beb06531fe028d1cb29447ba2d7676dd5a8bee7848e776536b865b5fbc123fe`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [0ec77dd1](https://github.com/openshift/egress-router-cni/commit/0ec77dd178e3b0433f01fce5bcce96abcc126deb) `sha256:1ad17409ba0c0701e71eeb566a67d26547b7f1b6d6a41d374abc863c9341caaf`
* [etcd](https://github.com/openshift/etcd) git [b6dda541](https://github.com/openshift/etcd/commit/b6dda5413ec33fc88fc9751d98d3b4bd96ea877d) `sha256:4b0396014c5ade192368f23854746ca0277fb60d3b3ddd6b1e277e7155895ee2`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [fe230b8a](https://github.com/openshift/cluster-api-provider-gcp/commit/fe230b8a6407a06e1be9d6994a92ac8c5a43237d) `sha256:dde65d2f4c379ee1ca3645af071d7c03105d73bc99508252cf53aa235b20dd21`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1da557fe](https://github.com/openshift/gcp-pd-csi-driver/commit/1da557fe54562347dbf18bee04fe6564a2697707) `sha256:56180cf7cf48dcc55cc438810c03b4b2cd1b293c52cac059bddca20e3f749f75`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [8d9f11a7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/8d9f11a7f2c4e757bfc5e99ba69084d29a28b79b) `sha256:1945acf715072b9498302a7bd248306b5305b5585f7c5a733c77d33ba8f3cc75`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d481e5cb](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d481e5cb9323b01964bf143b58403b62fa31e5e7) `sha256:8e54d714d0c5a7bd8a2b8940f53cfbcb4b03d10d26dfa9182fe80d56241ad780`
* [haproxy-router](https://github.com/openshift/router) git [22531cf0](https://github.com/openshift/router/commit/22531cf0bb2435e73437be73c244913de4844812) `sha256:183a11f2343e3be18d14dea3949a4c2db1c47a814ca319986f11096ef812bd88`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [c566572b](https://github.com/openshift/cloud-provider-ibm/commit/c566572b2cf0120499e81181f1efb1e729e9c418) `sha256:c794012636b3291cc7dc936e22aa0213450f81ee74c870ab0a3a2f56edea5b92`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [f0baa47e](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f) `sha256:36256c7324bc9ba3ad7c5504a60c681d0bd1f676fe0604264f69099c840e55ae`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [00bc7407](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/00bc740728d9f8ec86fe04199884108c2a091b58) `sha256:67dac077493c5333d15f2a71c9c34039110f2b5bce991c4633fc781167917e66`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [22e131a0](https://github.com/openshift/machine-api-provider-ibmcloud/commit/22e131a00d874c240531c40141a8a780fbb48bd5) `sha256:fd9dbf0430b4e2da29f83884c508dd70c3b1f568fcadc4eccbdc5a055c2d89b3`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:8e423e11e2f67955f5a809c55d8994c4de3403f6f243ee6441be6532ddaeb946`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:4b5be9df5d5e2623a5db33cfcba06a7ada08d4a38ac21de09f95a63f7543ee86`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [156ef6b4](https://github.com/openshift/ironic-agent-image/commit/156ef6b4730f01279216d3296349ca0cae29466c) `sha256:5572650276d513d4f9185ff004965ac30ea819b3fc8e589343ba54989569adb6`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:102a39c0233803f920c58a069bd42e34c634fcf7702a7418618bf09a75fd6ab4`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [b95b05fe](https://github.com/openshift/ironic-static-ip-manager/commit/b95b05fe0ba17255ef61e92d4167ca4c9de789b8) `sha256:3196341871d421e770e13c5963e10b3cbfe5d0794822299b08e9af5a6916a887`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f0241a3d](https://github.com/openshift/images/commit/f0241a3d2a12a8b2965cc36542babce8a1dffcf8) `sha256:14908c461803d51d0edeaaf2d39191bf409e5012f23958d0c767321084102435`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [ff4f3e2a](https://github.com/openshift/kubernetes-metrics-server/commit/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3) `sha256:cf7629c2aee4aab526ae0e6772c124a4d09737686d77ebfe87b7350ec3eae808`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [cd636680](https://github.com/openshift/kube-rbac-proxy/commit/cd636680e06a55395c26570dff0cb37277014388) `sha256:1342421df8aadc795ea5dc9bf85fb0085b0e3ffe617f7f2b6ec5846c0d53a055`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [8406e402](https://github.com/openshift/kube-state-metrics/commit/8406e402ad020185813942842d4914ff7730fdc1) `sha256:9f3553334ef36e59a66f62cdfe78dbd1379e7e3bb8236cbf7d9b301b423f1f03`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [ce5ff17e](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/ce5ff17e9a81ce754567e6dd5053d13409c251e9) `sha256:d5897593af2836ef17f04edfe4d7aab6b560a2300a3c87da8fcc97af68dbed3c`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [1e6fdd66](https://github.com/openshift/cloud-provider-kubevirt/commit/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934) `sha256:46533c0dd0b67810d6ef2f462ae1504e0a4412a212bf96c5a1129f17fb5fe693`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8a115121](https://github.com/openshift/kubevirt-csi-driver/commit/8a115121952348de9a4e4a73478755258a401a86) `sha256:da5aee917ead82babc5cc0dac66425d10abe1bf238997bd30b94f8293d57d2b5`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [65aeb360](https://github.com/openshift/image-customization-controller/commit/65aeb3607f05dd71ec27a4457945ce1e054ea9e9) `sha256:c5cb37d427974d994aceb86bb06e61ab8f548bf076aab50ec0ed14109dfba6a7`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [581c9d9e](https://github.com/openshift/machine-os-images/commit/581c9d9e453c73f67a93c44fb6715057c0cc8bf5) `sha256:b625bfbb1dcc687ea3ef08679614255114cbaf86103e953acd4695415ceb1f16`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:2e226c73c062f79777b98f6b805cd5d4e9d42718e34677b1ed3f8266470c4e2d`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d95feb67](https://github.com/openshift/multus-admission-controller/commit/d95feb67adfb97346849c79e36b6a9d404296ae9) `sha256:28ba7b5fb1d2a356e9bd0b361fc6e1f4540c8e72cbce09f296fe2e95793bb26a`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [e9f2f3c7](https://github.com/openshift/multus-networkpolicy/commit/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498) `sha256:5b7de01dd531a1fdf03b01cce84eda51d7d8b3b9250e75bcb9b6aeabfc614761`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:ac2f9a4d5b2938c354662d8e1c8a77b7ab79041e20b0debd11ff0e6e44977dcc`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:63de97121420c04b65ed8f3cce568c86b59e7c8238e16cb742d92e6d6eb97ae2`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:a3cd56ed22ea776a1b5939165dc0f17fdecb09b8ea86ab769c8c65269662a664`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:22c5d04ebf1fd613a2a0dc65d3682bfda98c1e3bb95c4625e8d2331b95cb3036`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:d85d182022c0ae8f0e620e58a579f67f9a4942a825a6c70cf611abf49ce4df6b`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33b7bec6](https://github.com/openshift/cloud-provider-nutanix/commit/33b7bec6fe27b8d126982a70b4579112cd67052b) `sha256:f47ad3f6af414fc2d79623a69566ce5bf55bcb7d9f179da80f60efc48611ad65`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b15a665c](https://github.com/openshift/machine-api-provider-nutanix/commit/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be) `sha256:f34e7d1c35a8ea61faa7fe1da6252fcb16a35f73146573be61b2d73060cb1314`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [71c41b2d](https://github.com/openshift/oauth-apiserver/commit/71c41b2d8abb0c6ad90dca286baf5d03c1340646) `sha256:9364681869b74c0e34659098894260ab09dca22b9cff57f62ec6120eb6055946`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [d4c7cc97](https://github.com/openshift/oauth-proxy/commit/d4c7cc97754f353d9270de238990c988c85d1c97) `sha256:a78b2ecc8e14122374cb9bebce8d40827986498cd1e767bda6244e0550452911`
* [oauth-server](https://github.com/openshift/oauth-server) git [85a8ae35](https://github.com/openshift/oauth-server/commit/85a8ae3529821203c39559c4df6231ef3607e64e) `sha256:d2ae74213f6e6406b41f04275cdf9aab1d66f3b5e6bbe99e96770ea05a24ffd9`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [f427de80](https://github.com/openshift/openshift-apiserver/commit/f427de801b98823e486bdd5955468d88e95c2ac4) `sha256:5c1c5df76d24f1679fba6119c75a83bde9abdd4495edb846f5e3ba3433f6c524`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [438d52e7](https://github.com/openshift/openshift-controller-manager/commit/438d52e79d691e016d66eabfe9a53c84229db40c) `sha256:a54c6df49ff424dbcd150f89219abfc9cbb0b8d140650a3dd6c6e72ed1fc8468`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [ab605a4b](https://github.com/openshift/openshift-state-metrics/commit/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8) `sha256:00d40a4d03ed1e42ef86bfe876eb665b77d8edcfe712c0cb062cae28cc18f3d2`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [b7456a2a](https://github.com/openshift/machine-api-provider-openstack/commit/b7456a2a12d1e65a5688693a005ad1e18aaee1be) `sha256:cea9a0eaeef3f5d65afb5ef71c5cbd877bd161802084982bc7fa49c633ccb2ad`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [efb1a1ea](https://github.com/operator-framework/operator-marketplace/commit/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce) `sha256:7f6c35ec5ff45fcc86ac38ef8c898f0792ab7a7a1953b19aa7371c9264deb3b5`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [e2e61dbe](https://github.com/openshift/ovn-kubernetes/commit/e2e61dbe576da162f711394c89068b8067f72343) `sha256:f121627873911dc2758ad750e87f4febf94616bd5527ba72f2187612beb3bb6f`
* [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [e2e61dbe](https://github.com/openshift/ovn-kubernetes/commit/e2e61dbe576da162f711394c89068b8067f72343) `sha256:e6d55a8e6dc43639f7fa8f8f0fce42cb9409dd19a6bc5ba2fe2cafd043b8662b`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [40d1c0ad](https://github.com/openshift/cloud-provider-powervs/commit/40d1c0adfedeca36498a5d93d69aee96831c756d) `sha256:12b255829c16a2a71dab8561ada85b9bcd885db122e13a79246925ca6f983e4c`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [551974ef](https://github.com/openshift/machine-api-provider-powervs/commit/551974ef93dedb1b9677a778e1533391448e0c56) `sha256:1f4364c69dd319f581bf1df8a581d01e0b3b3ec5ebd380cecb23071781430747`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [610c11b5](https://github.com/openshift/prom-label-proxy/commit/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494) `sha256:129a8550013d0cfff7cc15aa75d017d4721508ba8087be9c281d0764f409c923`
* [prometheus](https://github.com/openshift/prometheus) git [6e65a831](https://github.com/openshift/prometheus/commit/6e65a831d39940685cf4cfaf6343278c163edede) `sha256:31ffd9fb72c1aa60fe7063fce3de31c12f714025a6147814722dc0d11fa31507`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [39d72873](https://github.com/openshift/node_exporter/commit/39d728735779afef886bc10a8bc7cf72f54d51a0) `sha256:d3e250396ddce5eab7a1fa99a5951e32c1960012634e461751987d20717428d9`
* [rhel-coreos](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:0f21b04b2385329eee22267fb6b5d02268189b3afeb17abe225b34185d9ee2fa`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:5525a416f5af4f072a1ce14a1c7c0fea776bd15efb1b7157bb1c503a81dc0194`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [166a3e96](https://github.com/openshift/route-controller-manager/commit/166a3e96f8151d9e789b3951ae75b03cdede5081) `sha256:a3c3c4b31ff1e614d1fceb891076cc60c80aa082eadffa6ed753c97eec230e4d`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e9622ba1](https://github.com/openshift/service-ca-operator/commit/e9622ba18c86bf24aceab0c19fdcb87339c14f44) `sha256:ea4b6688f938f2e98f1fb4ecffe35e07a253a13046a847974af9132ce28ba63e`
* [telemeter](https://github.com/openshift/telemeter) git [b79b872a](https://github.com/openshift/telemeter/commit/b79b872a65edd845891db70f6c9a184458a178da) `sha256:62aa313d2d039dd131dd272066ce3567d3fa78adbbc1e404634dce5a039ec25e`
* [thanos](https://github.com/openshift/thanos) git [afeb1c85](https://github.com/openshift/thanos/commit/afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3) `sha256:c3cafde2910f152b7f42bd276c0c22df3cb4e1e8060c52d899ac9ae8334d5fac`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8b929332](https://github.com/openshift/volume-data-source-validator/commit/8b9293323cf8fdce93824e37168573ca3f73de3a) `sha256:aae1c06faf3141840a71e5cb87244440d7c35207598f9713090e06f19311a5fe`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f69584d6](https://github.com/openshift/cloud-provider-vsphere/commit/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e) `sha256:c30dc3588378bb510bacc19da27b14ad6ec5395a7fa492e8b0440e9a0b5b7f73`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [3adfe2b5](https://github.com/openshift/cluster-api-provider-vsphere/commit/3adfe2b56b259b2d27906d8772354f817e338da5) `sha256:c4b208516daf9ce7d69f1c8b8ef841499a83c86c88e8207963aac8fcc6a690e8`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [d163d71c](https://github.com/openshift/vmware-vsphere-csi-driver/commit/d163d71ccf646b3c2b36f4f2fd6ef78f3c254ed5) `sha256:71db99c0330ecea23bb31aa0a557870c2d33a86f8dbf61b015af95c15848cd45`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [d6a19449](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/d6a19449cc5d49541221d48d62c67d7a48142d19) `sha256:bc3fb9b04a31af78ee98904d598d1f3fe6d3566fe73c4bc466f3343def82bb30`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [d163d71c](https://github.com/openshift/vmware-vsphere-csi-driver/commit/d163d71ccf646b3c2b36f4f2fd6ef78f3c254ed5) `sha256:6e9a6894e61be96f1b8b876e3b2c61647c90d9b49abca5b4d6d1d82d22bf5efd`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [a644ba6c](https://github.com/openshift/vsphere-problem-detector/commit/a644ba6cea8f898ef9a856b8ef955e23a1bf4868) `sha256:c811e747f60b54fcda7cbbc35ce3a02e2f0c142cd9e086975006b789953af55b`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bddba7290d9b08f7c0ce350e8082364819579525)

* [OCPBUGS-89984](https://issues.redhat.com/browse/OCPBUGS-89984): patching golang.org/x/crypto with sustaining/crypto@v0.48.0-sec.2 [#10793](https://github.com/openshift/assisted-service/pull/10793)
* [Full changelog](https://github.com/openshift/assisted-service/compare/3977af16577a830b9c9c8822fe8f2925b38eac9c...bddba7290d9b08f7c0ce350e8082364819579525)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/c4e448f8e3c3f91d2dac98d846eb3fe400f15232)

* [OCPBUGS-104025](https://issues.redhat.com/browse/OCPBUGS-104025): Bump x/net to v0.35.0-sec.4 [#2298](https://github.com/openshift/assisted-installer/pull/2298)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/070f654bf5003765d3d00ab1811ef5ad111a5d4a...c4e448f8e3c3f91d2dac98d846eb3fe400f15232)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/5bf169cca60bec1ddc1bc5cf6b79b74bcfc16b2e)

* [OCPBUGS-104032](https://issues.redhat.com/browse/OCPBUGS-104032): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1621](https://github.com/openshift/assisted-installer-agent/pull/1621)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/1d5163811da9ec9eaeea69c252c9495889f624a9...5bf169cca60bec1ddc1bc5cf6b79b74bcfc16b2e)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/9569dc2c423736f6dcaf0dd24417cffe1a5db151)

* [OCPBUGS-119963](https://issues.redhat.com/browse/OCPBUGS-119963): Bump qs to >=6.16.0 in release-4.21 (#4044) [#4044](https://github.com/openshift-assisted/assisted-installer-ui/pull/4044)
* [OCPBUGS-123207](https://issues.redhat.com/browse/OCPBUGS-123207): Remove stale OCM_REFRESH_TOKEN code (#4026) [#4026](https://github.com/openshift-assisted/assisted-installer-ui/pull/4026)
* [OCPBUGS-104546](https://issues.redhat.com/browse/OCPBUGS-104546): Bump tmp to ^0.2.6 to address CVE-2026-44705 (#4015) [#4015](https://github.com/openshift-assisted/assisted-installer-ui/pull/4015)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/ceb80cf713675916334a5d116759805bf6687643...9569dc2c423736f6dcaf0dd24417cffe1a5db151)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2932c37fdd58de0c01f29a1e7c1531fd7e4395ee)

* 🐛 [release-4.21] OCPBUGS-81976: Bump go-jose/go-jose/v4@v4.1.4 [#609](https://github.com/openshift/cluster-api-provider-aws/pull/609)
* 🐛 OCPBUGS-112498: UPSTREAM: 6132: Persist ProviderID immediately after instance creation [#627](https://github.com/openshift/cluster-api-provider-aws/pull/627)
* 🐛 OCPBUGS-121766: UPSTREAM: <carry>: Fix unit tests for OpenShift CI environment [#628](https://github.com/openshift/cluster-api-provider-aws/pull/628)
* 🌱 [release-4.21] OCPBUGS-120321: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#635](https://github.com/openshift/cluster-api-provider-aws/pull/635)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/10ceef5e6f6d0cb79a3345de4fd8851f6300205c...2932c37fdd58de0c01f29a1e7c1531fd7e4395ee)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a52a578c6aea1ac5da131f60b8e359969151d7e1)

* [OCPBUGS-104051](https://issues.redhat.com/browse/OCPBUGS-104051): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#613](https://github.com/openshift/csi-operator/pull/613)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5f992443bef481a73eaadca79085b81435a59bdd...a52a578c6aea1ac5da131f60b8e359969151d7e1)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/53d73b17f0209026eef63d68e39faf195472adf5)

* [OCPBUGS-104016](https://issues.redhat.com/browse/OCPBUGS-104016), [OCPBUGS-104207](https://issues.redhat.com/browse/OCPBUGS-104207): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#205](https://github.com/openshift/cloud-provider-azure/pull/205)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/c9afac2fda20f18d786271340826c628f5419150...53d73b17f0209026eef63d68e39faf195472adf5)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/c0415d38bb792e507e0d2346b44d057ab7b2e024)

* [OCPBUGS-104045](https://issues.redhat.com/browse/OCPBUGS-104045): Bump golang.org/x/net to v0.50.0-sec.4 [#155](https://github.com/openshift/azure-file-csi-driver/pull/155)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/c783955a815aa0ecb5c6e92daf918c365295fa09...c0415d38bb792e507e0d2346b44d057ab7b2e024)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/65ba1a8d7133b2947eec2fe16e43de0134921e03)

* [OCPBUGS-104120](https://issues.redhat.com/browse/OCPBUGS-104120): replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 [#210](https://github.com/openshift/machine-api-provider-azure/pull/210)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/782f0ab6a2636aef0f699cfe7a49e8fadefb9807...65ba1a8d7133b2947eec2fe16e43de0134921e03)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/006669f5812a47dbc733b6736584b87ef696e898)

* [OCPBUGS-90031](https://issues.redhat.com/browse/OCPBUGS-90031), [OCPBUGS-92990](https://issues.redhat.com/browse/OCPBUGS-92990): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto v0.48.0-sec.2 [#10820](https://github.com/openshift/installer/pull/10820)
* [OCPBUGS-100062](https://issues.redhat.com/browse/OCPBUGS-100062): openstack: Reserve addresses for load balancer [#10724](https://github.com/openshift/installer/pull/10724)
* [Full changelog](https://github.com/openshift/installer/compare/8c6b7f3e85ba330aee741b9f719f44d4ecf470d2...006669f5812a47dbc733b6736584b87ef696e898)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d0bf7cc5959bf8408912e5276f2ea9e269ede24d)

* [OCPBUGS-104179](https://issues.redhat.com/browse/OCPBUGS-104179): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#2379](https://github.com/openshift/oc/pull/2379)
* [Full changelog](https://github.com/openshift/oc/compare/4717c66ce35180eea2efcd759aeec77bdc611375...d0bf7cc5959bf8408912e5276f2ea9e269ede24d)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/419ef9d44ad0e63927900add4a90fcb9a9fce3d0)

* [OCPBUGS-104035](https://issues.redhat.com/browse/OCPBUGS-104035): Bump golang.org/x/net from v0.43.0 to v0.50.0-sec.4 [#980](https://github.com/openshift/cluster-authentication-operator/pull/980)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/65eb4b2193d0860c1c1f45b08ea7203694db909f...419ef9d44ad0e63927900add4a90fcb9a9fce3d0)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/87a6893e678af405043625bc3a209b30836f299f)

* [OCPBUGS-104049](https://issues.redhat.com/browse/OCPBUGS-104049): Bump golang.org/x/net to v0.50.0-sec.3 [#662](https://github.com/openshift/cluster-capi-operator/pull/662)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/f9513d3255926b63185a5b5203126699925133c3...87a6893e678af405043625bc3a209b30836f299f)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/eb43a7a80d1b314eb8bbe63b6b73de91ba8cc7aa)

* [OCPBUGS-104057](https://issues.redhat.com/browse/OCPBUGS-104057): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#296](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/8c1ebc60a2014ab925cbad6ef255e06ea0bd72b4...eb43a7a80d1b314eb8bbe63b6b73de91ba8cc7aa)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f30c6160c94034639739df5ce940d60d1d7c028a)

* [OCPBUGS-93736](https://issues.redhat.com/browse/OCPBUGS-93736): Guard OLM subscription lookup with capability check [#1490](https://github.com/openshift/cluster-ingress-operator/pull/1490)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e45a96d194a3eea3178c1fe046a9b68220254173...f30c6160c94034639739df5ce940d60d1d7c028a)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/9b8c136071a82310b47a9ceab869257378a929c3)

* [OCPBUGS-112573](https://issues.redhat.com/browse/OCPBUGS-112573): [release-4.21] Makefile: version-stamp golangci-lint binary to prevent stale linter [#3065](https://github.com/openshift/cluster-monitoring-operator/pull/3065)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/83a70ac38893dfa662e893e8d7b6cae43724ed5d...9b8c136071a82310b47a9ceab869257378a929c3)


### [console](https://github.com/openshift/console/tree/2f1997abe650fbe9de360a061360c5fc0a67f6d9)

* [OCPBUGS-122212](https://issues.redhat.com/browse/OCPBUGS-122212): Wait for demo plugin deployment readiness [#17160](https://github.com/openshift/console/pull/17160)
* [OCPBUGS-116250](https://issues.redhat.com/browse/OCPBUGS-116250): Validate chart URL in /api/helm/verify [#17136](https://github.com/openshift/console/pull/17136)
* [Full changelog](https://github.com/openshift/console/compare/e37b355bb57fc90e6368c3a3d9c1f0519118b484...2f1997abe650fbe9de360a061360c5fc0a67f6d9)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/063501a59511f2924cd40222ba0d2cca03af8388)

* [OCPBUGS-96550](https://issues.redhat.com/browse/OCPBUGS-96550): Bump golang.org/x/net to v0.50.0-sec.4 [#417](https://github.com/openshift/cloud-provider-openstack/pull/417)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/ee321fbd37b2ded41a96004d52a7652b67e28809...063501a59511f2924cd40222ba0d2cca03af8388)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/d5c2c2b47fbd76677d6060956f309bc675957c31)

* [OCPBUGS-104092](https://issues.redhat.com/browse/OCPBUGS-104092): Bump golang.org/x/net to v0.50.0-sec.4 [#210](https://github.com/openshift/csi-external-resizer/pull/210)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/39a0b534c17d6d652e25d2fad8f8949ba1bed9cb...d5c2c2b47fbd76677d6060956f309bc675957c31)


### [docker-builder](https://github.com/openshift/builder/tree/3c27415e6167879dc02bf2fc4388a7d914109b2c)

* [OCPBUGS-90033](https://issues.redhat.com/browse/OCPBUGS-90033), [OCPBUGS-90475](https://issues.redhat.com/browse/OCPBUGS-90475), [OCPBUGS-92525](https://issues.redhat.com/browse/OCPBUGS-92525), [OCPBUGS-92654](https://issues.redhat.com/browse/OCPBUGS-92654), [OCPBUGS-92992](https://issues.redhat.com/browse/OCPBUGS-92992): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#547](https://github.com/openshift/builder/pull/547)
* [Full changelog](https://github.com/openshift/builder/compare/48fce231bac118a63992f466acc8b29a29e1ddde...3c27415e6167879dc02bf2fc4388a7d914109b2c)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/0b668ce7bac61039537f573ad6d6f7297dd34b05)

* NO-JIRA: Update OWNERS [#159](https://github.com/openshift/cloud-provider-gcp/pull/159)
* [OCPBUGS-115261](https://issues.redhat.com/browse/OCPBUGS-115261): Fix node.kubernetes.io/exclude-from-external-load-balancers on masters [#142](https://github.com/openshift/cloud-provider-gcp/pull/142)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/e27accef1fa99089410e4b0894db21a392d9bf99...0b668ce7bac61039537f573ad6d6f7297dd34b05)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/53820aadd2cc313cb0ce54788bb1fceec5b95eed)

* [OCPBUGS-104131](https://issues.redhat.com/browse/OCPBUGS-104131): Bump golang.org/x/net to v0.50.0-sec.3 [#186](https://github.com/openshift/machine-api-provider-gcp/pull/186)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/689c32d583d5c0a49de77e0ccc15646a15cae065...53820aadd2cc313cb0ce54788bb1fceec5b95eed)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/601ff80b0459adda2d2c5865bfb8d568a1fa68b7)

* UPSTREAM: <carry>: OCPBUGS-99230: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters [#2722](https://github.com/openshift/kubernetes/pull/2722)
* [OCPBUGS-87157](https://issues.redhat.com/browse/OCPBUGS-87157): Fix performance related issues when selinux metrics are emitted [#2678](https://github.com/openshift/kubernetes/pull/2678)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7ffd39de9bbb8e3edca8ee7530cf1dab522fbce2...601ff80b0459adda2d2c5865bfb8d568a1fa68b7)


### [hypershift](https://github.com/openshift/hypershift/tree/86702ff674f423e3785551d4579a07bb3615d1ee)

* [OCPBUGS-120751](https://issues.redhat.com/browse/OCPBUGS-120751): update Containerfile.cli runtime base image to floating tag [release-4.21] [#9557](https://github.com/openshift/hypershift/pull/9557)
* [OCPBUGS-125792](https://issues.redhat.com/browse/OCPBUGS-125792): hardcode ETCD_METRICS=extensive in etcd StatefulSet template [#9696](https://github.com/openshift/hypershift/pull/9696)
* [Full changelog](https://github.com/openshift/hypershift/compare/db86285f89737b67a53668e42a47ffd6c8cd5170...86702ff674f423e3785551d4579a07bb3615d1ee)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/d2dc1470a6b71312fcfefdf4d334288302b6cfec)

* [OCPBUGS-104105](https://issues.redhat.com/browse/OCPBUGS-104105): Replace golang.org/x/net with openshift-sustaining/net [#175](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/175)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/f7e3ec30f746add35458fad54dd6bccb97e307bf...d2dc1470a6b71312fcfefdf4d334288302b6cfec)


### [insights-operator](https://github.com/openshift/insights-operator/tree/1117c195d377924c2843df48e42096b8de3291bc)

* [OCPBUGS-123175](https://issues.redhat.com/browse/OCPBUGS-123175): add custom proxy field to insights config [#1365](https://github.com/openshift/insights-operator/pull/1365)
* [OCPBUGS-104096](https://issues.redhat.com/browse/OCPBUGS-104096): Bump golang.org/x/net to v0.50.0-sec.3 [#1352](https://github.com/openshift/insights-operator/pull/1352)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a6c3cab2c07793952697511b1dc29d13737ac0a1...1117c195d377924c2843df48e42096b8de3291bc)


### [ironic](https://github.com/openshift/ironic-image/tree/d9db7430c1e402239d980e0c10428341f49937de)

* [OCPBUGS-115166](https://issues.redhat.com/browse/OCPBUGS-115166): ZTP deployment failed on an iDRAC10 cluster [#919](https://github.com/openshift/ironic-image/pull/919)
* [Full changelog](https://github.com/openshift/ironic-image/compare/843f55a9276bf03d3cb659de5cb38f189e6e8fcf...d9db7430c1e402239d980e0c10428341f49937de)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/aac6c87b2ebf762bf049c6a69aedbc6096323e1c)

* [OCPBUGS-104125](https://issues.redhat.com/browse/OCPBUGS-104125): replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 [#1542](https://github.com/openshift/machine-api-operator/pull/1542)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/88f39dc939cceb2c1999f2b0ab99f1118f26358f...aac6c87b2ebf762bf049c6a69aedbc6096323e1c)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0c32560860e39c44babcc69692782c63119fb331)

* [OCPBUGS-120453](https://issues.redhat.com/browse/OCPBUGS-120453): Update message for MachineOSBuildFailed condition [#6493](https://github.com/openshift/machine-config-operator/pull/6493)
* [OCPBUGS-116929](https://issues.redhat.com/browse/OCPBUGS-116929): Update AMI Whitelist [#6486](https://github.com/openshift/machine-config-operator/pull/6486)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4e11f4db779899ed2da55452f7c213ee414163a1...0c32560860e39c44babcc69692782c63119fb331)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/bf3d167908ec0e4ac35c9c07eeadb1dd979d4efb)

* NO-JIRA: [release-4.21] Sanitize alert runbook URLs [#1296](https://github.com/openshift/monitoring-plugin/pull/1296)
* Fix OCPBUGS-104124: CVE-2026-33814 Replace golang.org/x/net with the patched github.com/openshift-sustaining/net@v0.50.0-sec.4 fork to remediate CVE-2026-33814 [#1201](https://github.com/openshift/monitoring-plugin/pull/1201)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/563488150549466015299a876981a19e54c22b8b...bf3d167908ec0e4ac35c9c07eeadb1dd979d4efb)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/838992e31e88cdf921fa32e0da8846beb301a020)

* [OCPBUGS-120763](https://issues.redhat.com/browse/OCPBUGS-120763): [Release 4.21] Cherry-pick fix for the issue of stripping delegate datastore config on CNI DEL, leaking IPAM addresses [#351](https://github.com/openshift/multus-cni/pull/351)
* [Full changelog](https://github.com/openshift/multus-cni/compare/8f5dd8b1e9f0c2b2404e3c8ddcffb1fd9441003d...838992e31e88cdf921fa32e0da8846beb301a020)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/9af0359dc73e8489059057a625d53c5293923993)

* [OCPBUGS-104121](https://issues.redhat.com/browse/OCPBUGS-104121): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#150](https://github.com/openshift/network-metrics-daemon/pull/150)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/844fa588c4200b8ff768d1916d63f1d4c1db2daf...9af0359dc73e8489059057a625d53c5293923993)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/053ddf6c5f90ae6d01422e931710ee34d61bfff9)

* maintenance: Bump the npm group across 1 directory with 20 updates [#536](https://github.com/openshift/networking-console-plugin/pull/536)
* maintenance: Bump the npm group with 232 updates [#498](https://github.com/openshift/networking-console-plugin/pull/498)
* [OCPNETUI-82](https://issues.redhat.com/browse/OCPNETUI-82): Lower Dockerfile base image versions [#518](https://github.com/openshift/networking-console-plugin/pull/518)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/bb43b26444230a391f36feec1811d1fa9523f703...053ddf6c5f90ae6d01422e931710ee34d61bfff9)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/400e482b88c53973f595fc30de366aa2675f33c5)

* [OCPBUGS-104166](https://issues.redhat.com/browse/OCPBUGS-104166): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#801](https://github.com/openshift/operator-framework-operator-controller/pull/801)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/92ef079dccfdf08c11d653113d5758827e67616c...400e482b88c53973f595fc30de366aa2675f33c5)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d02231d0a92491926666f4f1f5e45a7e2c733cb7)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#417](https://github.com/openshift/cluster-api-provider-openstack/pull/417)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/f4f439d4ce40c1175188c81591284dcc9fe6facf...d02231d0a92491926666f4f1f5e45a7e2c733cb7)


### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/1ff3909142325a184993917fd9447c24cd6ce63f)

* [OCPBUGS-104030](https://issues.redhat.com/browse/OCPBUGS-104030): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.3 to address CVE-2026-33814 [#44](https://github.com/openshift/openstack-resource-controller/pull/44)
* UPSTREAM-SYNC: Bump envtest version [#47](https://github.com/openshift/openstack-resource-controller/pull/47)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72...1ff3909142325a184993917fd9447c24cd6ce63f)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e0c18696b033d125090f0af6205ec5cd39eaf9de)

* [OCPBUGS-104147](https://issues.redhat.com/browse/OCPBUGS-104147), [OCPBUGS-104152](https://issues.redhat.com/browse/OCPBUGS-104152): CVE-2026-33814: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 [#1363](https://github.com/openshift/operator-framework-olm/pull/1363)
* [OCPBUGS-95444](https://issues.redhat.com/browse/OCPBUGS-95444), [OCPBUGS-95447](https://issues.redhat.com/browse/OCPBUGS-95447): bumping containerd to v1.7.33 [#1354](https://github.com/openshift/operator-framework-olm/pull/1354)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/149d553b2057320d761c4d1913098a66787dd09a...e0c18696b033d125090f0af6205ec5cd39eaf9de)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/bd7dd70130c531cce7d9a50138fe4286e4208b69)

* [OCPBUGS-104161](https://issues.redhat.com/browse/OCPBUGS-104161), [OCPBUGS-89654](https://issues.redhat.com/browse/OCPBUGS-89654), [OCPBUGS-90028](https://issues.redhat.com/browse/OCPBUGS-90028), [OCPBUGS-90454](https://issues.redhat.com/browse/OCPBUGS-90454), [OCPBUGS-91231](https://issues.redhat.com/browse/OCPBUGS-91231), [OCPBUGS-92545](https://issues.redhat.com/browse/OCPBUGS-92545), [OCPBUGS-93024](https://issues.redhat.com/browse/OCPBUGS-93024), [OCPBUGS-93510](https://issues.redhat.com/browse/OCPBUGS-93510), [OCPBUGS-95008](https://issues.redhat.com/browse/OCPBUGS-95008), [OCPBUGS-96558](https://issues.redhat.com/browse/OCPBUGS-96558): Bump golang.org dependencies [#144](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/114fe69249450f3bec773cba2956a8c06e7b0da9...bd7dd70130c531cce7d9a50138fe4286e4208b69)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/ac080eb0fe6c3849d2ff8cd8233a6d911f508043)

* [OCPBUGS-104163](https://issues.redhat.com/browse/OCPBUGS-104163): Mitigate CVE-2026-33814 by bumping golang.org/x/net to v0.57.0 [#122](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/122)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/b714ab87d079db5ef3c4097520db40cd289b025e...ac080eb0fe6c3849d2ff8cd8233a6d911f508043)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/99c776df40d65fb32f96a09b063d9c159f843f9a)

* [OCPBUGS-104155](https://issues.redhat.com/browse/OCPBUGS-104155): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#169](https://github.com/openshift/prometheus-alertmanager/pull/169)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/9b60183df3d2e4aa0e90a7ecf09855e2ee91d39b...99c776df40d65fb32f96a09b063d9c159f843f9a)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/d392d80ac2194cf33969ec56aed5d624da8053e0)

* [OCPBUGS-104160](https://issues.redhat.com/browse/OCPBUGS-104160), [OCPBUGS-104188](https://issues.redhat.com/browse/OCPBUGS-104188): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#394](https://github.com/openshift/prometheus-operator/pull/394)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3de9763f36128ffa8b25a63c9447f6d64114c270...d392d80ac2194cf33969ec56aed5d624da8053e0)


### [tests](https://github.com/openshift/origin/tree/c941d145e570817f0408dc531c4261eecc21c4e7)

* [OCPBUGS-69943](https://issues.redhat.com/browse/OCPBUGS-69943): feat: render OTE JSON results in spyglass [#30633](https://github.com/openshift/origin/pull/30633)
* [OCPBUGS-120726](https://issues.redhat.com/browse/OCPBUGS-120726): fix: skip MCPs with non-ready nodes during MCN property validation [#31524](https://github.com/openshift/origin/pull/31524)
* [OCPBUGS-115200](https://issues.redhat.com/browse/OCPBUGS-115200): fix: adjusting DaemonSet test to dynamically compute expected pod count [#31523](https://github.com/openshift/origin/pull/31523)
* [OCPBUGS-115282](https://issues.redhat.com/browse/OCPBUGS-115282): Raise status polling timeout and write bound [#31587](https://github.com/openshift/origin/pull/31587)
* [Full changelog](https://github.com/openshift/origin/compare/5909517e5c1325b035d11d416ae274bd7a3ae9ee...c941d145e570817f0408dc531c4261eecc21c4e7)