# 4.22.4

Created: 2026-07-02 13:03:55 +0000 UTC

Image Digest: `sha256:a961faec0b28568cb4bf9850fee8079a2327a0c72ccf3b4258e3646e903f027b`


## Changes from 4.22.0

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.5
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260521-0 to 10.2.20260630-0


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:94b04a88f6ab61c718ee681cf057b95c708b28ec0a26453a5aa47bf21007b96c`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [b4bad3f8](https://github.com/openshift/cloud-provider-aws/commit/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3) `sha256:4fff79b11a5df010035daadeed202d9e91424388c1258dfecad062c94db8c35b`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [9172366c](https://github.com/openshift/cluster-api-provider-aws/commit/9172366ccfbde3225e045b59587d38db655edd94) `sha256:7d208db6e9a810c24fb35524b512ca1786a063c850d9f2611f69bcb112f223f2`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [51d6bc76](https://github.com/openshift/aws-ebs-csi-driver/commit/51d6bc760234ffccb0348937a5cfd70b326119b9) `sha256:391cc80fc2e23b399665146c57ddb847175e800b8cfe70708a9686523ec5cd37`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:408fd88ff1f7ab6b00b4641eb3113191acf16db0f4db21b8c2060a9500b4d690`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:dca38a8139b8c42daf39700b5ad3d1f37239021801d4f24018e33a6a90ceee91`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [1a0ccbcf](https://github.com/openshift/machine-api-provider-aws/commit/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c) `sha256:d80c20d496a59e0fb97e355eee53bbd849e00b2490413be5ac3e44f69ed632f2`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:797472f17af425c2b0107efb3e1d43d812318f67756a196b00e5f3b343c8cf06`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:5329d84cb01bd09ac547c38dfdc86cf171116218cdc9b5619123945b382f6324`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a6ffab6a](https://github.com/openshift/cluster-api-provider-azure/commit/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3) `sha256:5e40c61073e9d43832746982c332a03dc7648b35b18caf15415379b9d15f9c16`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [403f856e](https://github.com/openshift/azure-file-csi-driver/commit/403f856e29605126b2711a1bfe7a4f6c276b344d) `sha256:77ef8ed7e62297c424b7d91806f80841117abdda0391f416cd50bbfae7d91606`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [99b9a3a3](https://github.com/openshift/azure-kubernetes-kms/commit/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39) `sha256:8c85f600b328496eb7599f432cfe2c838e35bf47a5931ad04d654f224ce2ccbf`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b44d4444](https://github.com/openshift/azure-service-operator/commit/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36) `sha256:16ab3b990bd2f1d051b6b31377f4bd188157c56fda25b109d676891b1a29812f`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [a8fb3bf1](https://github.com/openshift/azure-workload-identity/commit/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45) `sha256:55c21284b787e64346d504fd24527c09485e6b49e497310f2efdb9b160db186d`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:02c729c7aacdf6041df206462d4b0db66e796287d96234c3e103da4f1ed924ca`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [dca8cb1b](https://github.com/openshift/baremetal-runtimecfg/commit/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40) `sha256:08dea93431ec2f52f9185f529107550d88ca185250e1aea7a97dc026573a0f87`
* [cli](https://github.com/openshift/oc) git [062bc544](https://github.com/openshift/oc/commit/062bc5449c4987c92c76da4d315ef4969c22d638) `sha256:ebc4962c5b44edd3a80cac3b202021c30f9702c59aee42dc0acc16429231e84e`
* [cli-artifacts](https://github.com/openshift/oc) git [062bc544](https://github.com/openshift/oc/commit/062bc5449c4987c92c76da4d315ef4969c22d638) `sha256:fb9d2b0ab694fd5bd2325d717e4d415fe9caa2bf34ff99c9f38502bc00778fff`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [c23bddf5](https://github.com/openshift/cloud-credential-operator/commit/c23bddf58e561b725ab5eb012252091e7a472084) `sha256:b2b9d83d9dbe0150d0f8095a0165cf9f0dc803fa62d0b407961e0db7b056a813`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:b4136ff4d7e48abdfa8bf8d089460d819828a705cb1a9fbf4ecb14e24776f5e7`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [5a44cc2a](https://github.com/openshift/cluster-authentication-operator/commit/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88) `sha256:b13ef092b7adccba6f346cafd96f813b783695b1161c94589d76f3af1a571f42`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [521e545f](https://github.com/openshift/kubernetes-autoscaler/commit/521e545fb92e7138b2ce2bc05f871f53a6c112fb) `sha256:0c4756ca25cb2abbaa20c4f07087919ecc4efae02d06da94ca3af27929417119`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [260ea1b5](https://github.com/openshift/cluster-autoscaler-operator/commit/260ea1b5967f47768a0727e8c84d451dc9de5ced) `sha256:b1478affbd9d53271b60e8711e6c7d9034d24f1434ed49b33ec46c9e7f8aee0f`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [e6be0fdf](https://github.com/openshift/cluster-bootstrap/commit/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383) `sha256:5c3ab8f33263b765c45f7f902f3f83fd3c4e225b19dcede02b5737c221b95807`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f1718df9](https://github.com/openshift/cluster-api/commit/f1718df9c13b0cee5ede1b6354e29acc466607a4) `sha256:8c5018ef343ccca6aa9d8956ec9bdf093329447033718e2492b44941647bddaf`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [b84112ef](https://github.com/openshift/cluster-capi-operator/commit/b84112efbe1a3f34cbabe262335be28595041afc) `sha256:592b7809363d66ec09cb97f9d0192b1f0d23ec09fd75dcc2324ab52b7f29459d`
* [cluster-config-api](https://github.com/openshift/api) git [694421e6](https://github.com/openshift/api/commit/694421e64aeeae4374e7e7394014ad40ab5a1f30) `sha256:7b7720100d85ec222f7aaa9e67d89c33204f261cc801f2997402fafccae4ec1f`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [e0c2428e](https://github.com/openshift/cluster-config-operator/commit/e0c2428e4618493ad9db0681e3b91444746ddf2c) `sha256:4647b8ddf7bb506bb125276c8c2610766ae981203adf67d0b71c08babfcd6cb7`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:726b608b09a83457ac1695fa661450051d9b98310a0ba7acd7b395f286f93b56`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [90e608b3](https://github.com/openshift/cluster-image-registry-operator/commit/90e608b3e66c284a5b41bc57e6d0d3a45aceebdc) `sha256:f1ef4ff4f894a3ad65a8c4fa7bb1b24b162e20223eb17a7b92337222134d9aca`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [95150ed5](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/95150ed5dbf11370b4a06e6959c77efa13768561) `sha256:2f414c12fa5464f908a931794c5990f108cacb1c190d9864651c42d2cade7218`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [51ea59ab](https://github.com/openshift/cluster-kube-scheduler-operator/commit/51ea59abd057d0cef56b29b8a74efc28411d5427) `sha256:23cfe3d67d7922cf600c8e60fa479ba0f43dec860dfb9598d8d87d4bece82be6`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9afe6687](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9afe66875bff8b5926f2bf6dec4eade1e4a09bab) `sha256:759531156b0c46f90986855914eb7b29ebb18344723255dac3adad94c8d137eb`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [d131450b](https://github.com/openshift/cluster-olm-operator/commit/d131450b2645623089b26353a309015c95c8871c) `sha256:ab59d20fba5d006985b154a62190d69388fafd161ffcd22de197092ddd1ac958`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [1924cf6f](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6) `sha256:957e588d6331078a52a39baa40f26fb410e45a3135a1584418d2b48caa2c4bc6`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2d2699e4](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2d2699e4f3fabc80e402f4c090c8cf80c4517977) `sha256:4e666a60f6f115f7bba33d8ecf3bb47b29eae83434261b92490a86a6efb1c1d7`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [44985a13](https://github.com/openshift/cluster-policy-controller/commit/44985a1306411101c84dd5081598fc928b432321) `sha256:dfb02c2af65ec78b297c26ed3e6c84ba11f55b1f9883f0d5ee92e8d38f0ab404`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8dfdf2ef](https://github.com/openshift/cluster-storage-operator/commit/8dfdf2ef3310358f3559a5481df43b98b2294791) `sha256:121af7c6edd4f70c1c0adf167ba5bd74f7997f4a3323f5639582317ccfce1ba8`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:fde6b2f02e11ffe2af57866c3ef1da49a7ce2c25d101d6a34240b9c89f52129c`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:47efb79bd70233796199bec6a01e901a43eee1fbd436b62377f42039d5462141`
* [coredns](https://github.com/openshift/coredns) git [9a71d9a6](https://github.com/openshift/coredns/commit/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4) `sha256:1e039f19316a11ee06fa705750b91d7be3be14eabe8df02597d6b627b4bddef2`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [95a19797](https://github.com/openshift/csi-external-attacher/commit/95a1979700f021e20879480b98b953bc382a0eaf) `sha256:05fcf2b8f1f58fcddb8300b5a29b2426ba7a211864d880cb01cc9e1ed1d9864a`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:85951717df238c5b17a900d387de1cfe84b5c3c1a444dab4693116b332efe564`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:dd6cc7a247b3bf65bb84c74d979b54ef4489e630bfed988a3970490a5303e4fc`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:db3832e2d54bb1b518c21ec0544b3181be8f74561ca1b52f0c9e0856b9a2d35a`
* [deployer](https://github.com/openshift/oc) git [062bc544](https://github.com/openshift/oc/commit/062bc5449c4987c92c76da4d315ef4969c22d638) `sha256:4df44d88ac9350f7a2e536e971b06bbb571d79e91242f9ffab9425302ef68c25`
* [docker-builder](https://github.com/openshift/builder) git [fcd4ce2d](https://github.com/openshift/builder/commit/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9) `sha256:1d839f1c9a1fd7070fd98fae3b1d8b55ae00cf77b15b6f2d1ea17d06b7933f44`
* [docker-registry](https://github.com/openshift/image-registry) git [9eae44fc](https://github.com/openshift/image-registry/commit/9eae44fcf44142a705031fa16a613c450dbe685a) `sha256:d730def2723965a22d713c6c6359a2429a32d73ebd46e473daa24d3dcaf6a2a0`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:a8f5d1a62b957f638d3518ceefca4bf08484a38e408db9e8dc433afc149b11e6`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:115f564a8095a51b27c14c44a04350909c3f9b388b7de01ad043617fa66a9e7b`
* [etcd](https://github.com/openshift/etcd) git [d8d67b8c](https://github.com/openshift/etcd/commit/d8d67b8ce849f816d6d23c904098336632e2348f) `sha256:99fd46ffd13b83a8495afc0062208b6709c54ab0e5d9ebb0caa927292d2b5017`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [ea31ab85](https://github.com/openshift/cloud-provider-gcp/commit/ea31ab85a7cf25e88532598b73502d535462a5d7) `sha256:cf1a0b51f33119ef0356b79ee9108698e4ae7c5386119ae00cdf36c574d8fdf8`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e7674ede](https://github.com/openshift/cluster-api-provider-gcp/commit/e7674ede9ce8d021a878a6d5e81942875387e5eb) `sha256:d4b496ae64f8cd0245f02b7ad4b83a8981915fd4d1ea97a4162c92463b7f1362`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [0073bd11](https://github.com/openshift/machine-api-provider-gcp/commit/0073bd1187c07febc963fc67f0df67cd33c8f218) `sha256:4aaee21ee2c526d273316f5d36bb7752329410290f3f424433828fb2e28320ed`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [48a7a1aa](https://github.com/openshift/gcp-pd-csi-driver/commit/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0) `sha256:880754af189b060dc9e5696c3d61e78dfa89c6861ea2294eed102b7927f008cd`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:9111d1bd061d0c6807cb6ae145607228fda2859f22c4d11982095f3811c1f6ae`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [24cff9a6](https://github.com/openshift/cloud-provider-ibm/commit/24cff9a691e1ebee94669c834320c6ea974a2010) `sha256:f1ec90f2deb2148f51966e6f2ba3be338dafc40d34a00c9531256dcb8dd14c3a`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [d362aef2](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/d362aef240c280676249fa34c80fa1b39c684560) `sha256:773fb1df5b3b906d9c20f9ab8a31cdf3b2d124d53ac2fad686b66f02e5c17378`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [03b143d5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/03b143d588768a18fd8afa1534ea7d7a04b4d1f3) `sha256:82bfc46622a54364e7c27c71b187b2a205cb3b8201ef1e98e2ec9c455c7728e8`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [46b8c72c](https://github.com/openshift/machine-api-provider-ibmcloud/commit/46b8c72c675770295f5c2c8f85f5f705ca35787c) `sha256:c622fea555fba7873482f70156396263982d9676cad7eea25a8a4e9f61a2ab1b`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:0b1d40fcdd5592d85289c7a185f9dac2348cbf7add3d1bb7ce3a8c8204172c1d`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:b8907fa7440332688b68f77dcabb57d07cc685b3570f16c8383805a4333760ea`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [0336e638](https://github.com/openshift/ironic-agent-image/commit/0336e6383c98f4f0c6b35c71e00116d3c3160c43) `sha256:aa9e23c104fc47ff3b2b782f8349d3ada4c6ae9b3919f1b9a3e3311604c47db2`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:821a0b3fbdc48e25f2af1c792a7caf4956a28cf3d1b2587924da447577efa9ca`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:eecf733eb6b8e93510b0fc577291425398010c093309d6c7916699e81be0d89f`
* [keepalived-ipfailover](https://github.com/openshift/images) git [edb8b1e6](https://github.com/openshift/images/commit/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71) `sha256:1db88c3d0fc616ae7e63a35e56062ff928ece8ca47f9dde489187986a89e0046`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:feb4e5ff437b8a2e734582d1da6abc17a6ef2d0d7728e2b4673ae6150c784023`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:ac7014fd0ba615e0d46cdc119a5e6fc83baf7277e69cccf150e546659045b251`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:2e45b8f9d0c01aa468ae98385a38d55f1820517ab12dc8e3ab5e70758cb4944f`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:99786ce64d2e9d663dc40909253db869a932bc371af5566c078bb1adc4830734`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [771b562d](https://github.com/openshift/kubevirt-csi-driver/commit/771b562d4875296007850a4d3709a7ae1c6ed3e2) `sha256:b292f5dc408f64bb0f7b36b082173013ce09d3f0f7a5c54b82339c20d6a2dc8e`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [78c5104d](https://github.com/openshift/machine-api-operator/commit/78c5104d9a69072749f4ddf681926bcc404ef271) `sha256:d61c75d3abb3470f30693f5ab91007bb1e1611920b6eb7181ee9910406a2373a`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:33ec9631a27e019c284a614d5655b1336365ff84a980ab5313aa0d33bce68e83`
* [metallb-frr](https://github.com/openshift/frr) git [843347fd](https://github.com/openshift/frr/commit/843347fdc9460e0fd064d68a003eae5459cac1fa) `sha256:6969bcb7a747aeedb84b8a44580199a5baa3e3a67ab3b401a4d8ddde75ae7428`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d4dd42ba](https://github.com/openshift/multus-admission-controller/commit/d4dd42ba9c17b04e0e5003147f4e140ea5e34749) `sha256:3c49253be2a6410363747cd1fa74332ad4d1157d2808f0322b3e45919db352ef`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:6cbc5389281689c3c2f7e50ef8d40733d8694f77d91f502fd0eb21713b4d72f3`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:0671a12cda0a06f669dbd746641e879171cb60e1c51a2f1cdda12737f7fad419`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:5b8eb977a558da8c70133804ffbb94a63b29d161b237a6e1397107aba7986195`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:dcc64d5d8c715b468d3a0d73148a0284b1c1471cfc7a847d08b8d6d02685918a`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:3d6a227a32cdbc61e31c9239eebaea8e1492d2a96014f69a9dc8f5a830dff0a4`
* [must-gather](https://github.com/openshift/must-gather) git [8554213f](https://github.com/openshift/must-gather/commit/8554213fa214e8e165e7bedaf8d892bb824d83ef) `sha256:247045b6df3e9f7ccc796c6df492be3fa1df4937c284fbb5a08a6614af0f93e1`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:b489f9340d69416ece9747bf3f2bf7efb180b73adc1d2feba30f3b358a2209bf`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:731404a498898200b47c7ab6b2022df839cdc7fb8d7438b0f05a7b0d52f45257`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:d9142b465aca13b0dbbd7cb70bf5906b5c3e297ef907c073a75a04c8a188d430`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:bac00451ea7bc778f653fcf12416f4602232608878902cdac12ba946675febb3`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:532b49ff20a227617172a17947f8cd500153243a4050d018114cd995bfd5e0b7`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [4c002a91](https://github.com/openshift/oauth-apiserver/commit/4c002a9114937ea9c20213f00892761c2013e60b) `sha256:d827442072ca9356abc2ea4af44caea1ebeb8b9a7c8f3a19e806ad6957a528d5`
* [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [26b84896](https://github.com/openshift/operator-framework-operator-controller/commit/26b848969eabd4e1899439f40a4346552f08ff38) `sha256:41b67debb238ee1bb6146403f50caff215de225c75959ddb14f9376f003d2d0c`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [26b84896](https://github.com/openshift/operator-framework-operator-controller/commit/26b848969eabd4e1899439f40a4346552f08ff38) `sha256:67d3efc0d63bb5b4ab29c8ea830e373078ca852e1a7cb5fa25cb85cdbe3ba0dc`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:77d34b4effd5f461cfc03975df564e6c3ed7e3510e2d22be792c7a338a7b9272`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:415bfb5c41c298f716e41f4cc4778b77cf48a0888e82f5497a38722548af6b6b`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [06d95461](https://github.com/openshift/cluster-api-provider-openstack/commit/06d95461581f9374ae05959b66fc50e2a17d077c) `sha256:394ea5aa3174ee97e6e5eddc9de4b1ee51a8bca429632f8b1080a13a5a3b9ebf`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [8a8c354b](https://github.com/openshift/machine-api-provider-openstack/commit/8a8c354b99ce83e3c05a91358aadec09944c2fce) `sha256:42bc43c2bfca1bcc131340e3b2edc88a7bab429acbf688c0085f52ac54aab130`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [cbea7a9c](https://github.com/openshift/openstack-resource-controller/commit/cbea7a9cab145c32e2f347be69996b649893cc22) `sha256:fac7520bdf27296e5b3295562f8f1420954b4ac23dd42799a3b3d9361acba245`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:a82b47552098882317e41d1e80f1e77a83d9adbefe0e05e5ded4462e9784ba51`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:9c5052966b58e01ecb0929baeaef49a44098d00983154f2cfc26e9cdadf1a7fe`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:567d597b579625eb5e9d31b7446fc449b93588f1199d5e79eb71135b2609e333`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:07d7fcbcd84b5fb44ece3a8dac3b008d1ed39a74ea2e88fa31c35c41e513a748`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [02959a8d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/02959a8d7096501e240d1d9f65da90b87bac45b9) `sha256:fc5f341786143a0592dd65beb49a9cd28b944be86357e9b4e878ea7c436b719f`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [27747821](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/277478211cfc7302e9c09b41a0935fbba678614a) `sha256:4fb15bdd50f7b493de33d82f01ba197e6435ded205271119feb963326041e1d9`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [766c0952](https://github.com/openshift/cloud-provider-powervs/commit/766c0952fd19f8225fe59b2be8e8c8932b24ebd7) `sha256:ec76214da2c034569fad63afdfc0e15f97d1745b52cfc3897c96fc79d7ba5f53`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:858bb859e421e6cdcc6e07c17a7149d0d787bb0f41cc9f77c895a696129a2a9e`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:bddc1fd33bbf4c79ac28c5e132505d9d11b48eaabd0382777e694fee7124c92a`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [02dc3e9e](https://github.com/openshift/prometheus-alertmanager/commit/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde) `sha256:899d45c2de9f6180db58566b887953b2ece96ff12cd949f27493e0b422c4a95d`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:7dfc43a4a93fe79c21c940deaf6cc1445fb1f09fefa88c48f0711fcf5e6b05bf`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:e221ccdce2d0b44ee6a7d8ebfa49aad7fa083d6a0469aed43b30aedb14abe652`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:77099263b9cb5fb6482c611ea849b586e53cd0a15e0eadd0dac1a9b2f1df9db6`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:ce8a3b300f50c56760dce51e2b2fd586b7397bb3dae15373e0fa494e395a5e70`
* [rhel-coreos](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:b080e7fc1ba799afd68236ea0a05b9d0eaa9f2e6f77012219bfeec08e528f36d`
* [rhel-coreos-10](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:2dcf831e5a3ce8416cde288979fbf9d97e9fe2f9315198588259e7da543f4ac8`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:75fc6e9113d09c26d5a76777d466fc981839ef54cc105fe017b078afc4925241`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:1d01c0e95b87c90432b50cbcd31c434eee9b2630953b6d92bbd67d204cee64cd`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [55f77ca4](https://github.com/openshift/route-controller-manager/commit/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b) `sha256:d03cae8534bf20b54b4a4334ad70698fcbdaf36e6290c2eb3203bd1d91c1e5ef`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [9fff46a5](https://github.com/openshift/service-ca-operator/commit/9fff46a576033685f66fbb1121eb0a2f134a29be) `sha256:ec11d3405db435fa4081283df4f3cd43b9ec825f5540b9de5023464e82007c74`
* [telemeter](https://github.com/openshift/telemeter) git [c2ffb0a7](https://github.com/openshift/telemeter/commit/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4) `sha256:f3174b9dcb2f283230e03fbfd23adf641e596fb1d14fa2f06227da26b394c916`
* [tools](https://github.com/openshift/oc) git [062bc544](https://github.com/openshift/oc/commit/062bc5449c4987c92c76da4d315ef4969c22d638) `sha256:9bf2d7b7ebc4bab9f294f12585bcd50dfbdf66ac2669639156f4f5cb8c348816`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:492f9a6ce9ce43823caf81e4d2d43319230c03157022a9bf367ab587195152eb`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [39008107](https://github.com/openshift/cloud-provider-vsphere/commit/39008107b1463e3299b0d60c3ac1f7e71ad3e014) `sha256:009c742b8efee992e807c1e33970c9d821e10bec83c137a5bc9bb51f53085cb2`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [ac542b5a](https://github.com/openshift/cluster-api-provider-vsphere/commit/ac542b5afbd9a3897cda34e7ea1852b61c945e36) `sha256:5bf2c9a7e3ad1d9958113baf2feb4519f81e4411d0c7aed5a271e315f63e55bf`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [d3668c9a](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/d3668c9a9510f189604343e817cc79ab23367f40) `sha256:f84de9e7a756e6c98763280804dd9666b0a0c4bbe7c4d9cdb3af01d240e01bc5`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/1090e097e9274cbc807cbb0f2586fa592408f4b1)

* [OCPBUGS-92056](https://issues.redhat.com/browse/OCPBUGS-92056): Stop setting DevPreviewNoUpgrade for TNF clusters [#10516](https://github.com/openshift/assisted-service/pull/10516)
* [OCPBUGS-90638](https://issues.redhat.com/browse/OCPBUGS-90638): Add sourcedir /run/chrony-dhcp to generated chrony.conf [#10488](https://github.com/openshift/assisted-service/pull/10488)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8a98e5cd5e866b638a155a9d8b8b2d01555e13e7...1090e097e9274cbc807cbb0f2586fa592408f4b1)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/24e894263b3231ab8bb27acc9127a835b7b6e997)

* [OCPBUGS-69953](https://issues.redhat.com/browse/OCPBUGS-69953): Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.22 [#1406](https://github.com/openshift/assisted-installer/pull/1406)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b...24e894263b3231ab8bb27acc9127a835b7b6e997)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/753d625f3417752aabb1cf7088f311da4ec43da3)

* [OCPBUGS-84392](https://issues.redhat.com/browse/OCPBUGS-84392): Bump go-jose in v4.22 [#1488](https://github.com/openshift/assisted-installer-agent/pull/1488)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f562f3539125da83145eb1012ea8a4f4d62d0807...753d625f3417752aabb1cf7088f311da4ec43da3)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/67a8dc3ce46676839a2e32f7df4de87652a777a1)

* Fix nested expandable sections (#3798) [#3798](https://github.com/openshift-assisted/assisted-installer-ui/pull/3798)
* [OCPBUGS-86813](https://issues.redhat.com/browse/OCPBUGS-86813): Custom manifests are broken in local assisted UI (#3768) [#3768](https://github.com/openshift-assisted/assisted-installer-ui/pull/3768)
* [OCPBUGS-86258](https://issues.redhat.com/browse/OCPBUGS-86258): Static ip prefill for ove below the sea (#3767) [#3767](https://github.com/openshift-assisted/assisted-installer-ui/pull/3767)
* Operators section should not be displayed on review and installation progress pages when no operators are selected (#3750) [#3750](https://github.com/openshift-assisted/assisted-installer-ui/pull/3750)
* Remove Arbiter button (#3748) [#3748](https://github.com/openshift-assisted/assisted-installer-ui/pull/3748)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/60bd5908981ddb6b3c5b648ca8f2b031e156dc3f...67a8dc3ce46676839a2e32f7df4de87652a777a1)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/114155274b3e4aef0014739286ff586fd4ac3ea4)

* [OCPBUGS-89320](https://issues.redhat.com/browse/OCPBUGS-89320): bump mtv-operator to release-v2.12 [#310](https://github.com/openshift/agent-installer-utils/pull/310)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/abf81a7f11af9f3050c151cd167dcfc4f9709368...114155274b3e4aef0014739286ff586fd4ac3ea4)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2dc8bfba20a785131909895e590966832621ae38)

* [OCPBUGS-91947](https://issues.redhat.com/browse/OCPBUGS-91947): maxOpenShiftVersion should be bumped to 5.0 [#572](https://github.com/openshift/csi-operator/pull/572)
* [Full changelog](https://github.com/openshift/csi-operator/compare/08c62f7e711ae56f7b5b219704744dae1830a801...2dc8bfba20a785131909895e590966832621ae38)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/a17a3e3eb36b14f0348b003018879a32394c7264)

* [OCPBUGS-88485](https://issues.redhat.com/browse/OCPBUGS-88485): Bump golang.org/x/net from v0.49.0 to v0.55.0 [#193](https://github.com/openshift/cloud-provider-azure/pull/193)
* [OCPBUGS-85706](https://issues.redhat.com/browse/OCPBUGS-85706), [OCPBUGS-85707](https://issues.redhat.com/browse/OCPBUGS-85707): UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 [#185](https://github.com/openshift/cloud-provider-azure/pull/185)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/4c7a764630c621d5e1700649fc056800d35bb6d1...a17a3e3eb36b14f0348b003018879a32394c7264)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/cfed1785cb39a7448347485dba95ef4364095b64)

* [OCPBUGS-83633](https://issues.redhat.com/browse/OCPBUGS-83633): Bump spdystream to v0.5.1 [#150](https://github.com/openshift/azure-disk-csi-driver/pull/150)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/799ce30e63a4dd3ac74b391e494dc8b50066644f...cfed1785cb39a7448347485dba95ef4364095b64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/be827be84a2f772e7482889dba45cbc9d9fd32f8)

* [OCPBUGS-86996](https://issues.redhat.com/browse/OCPBUGS-86996): Don't permanently fail Machines after provisioning [#195](https://github.com/openshift/machine-api-provider-azure/pull/195)
* [PIXAA-7](https://issues.redhat.com/browse/PIXAA-7): Leverage SpotRebalanceRecommendation for instance termination when available [#198](https://github.com/openshift/machine-api-provider-azure/pull/198)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/69d049094ee36ad9c706d65694a8cd42e9a64800...be827be84a2f772e7482889dba45cbc9d9fd32f8)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/6481b52008f0991912f80fdf9d74af3e631a7269)

* [OCPBUGS-86688](https://issues.redhat.com/browse/OCPBUGS-86688): Adopt existing Metal3 Remediation CRDs on upgrade [#83](https://github.com/openshift/cluster-api-provider-metal3/pull/83)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/ad4eb8a5e67dc08c0686f006641847df4370d599...6481b52008f0991912f80fdf9d74af3e631a7269)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/2e33096a58847329454b34ba11d74d770a688e29)

* no-jira: images: bump UPI image dependencies to 4.22 [#10582](https://github.com/openshift/installer/pull/10582)
* [OCPBUGS-84402](https://issues.redhat.com/browse/OCPBUGS-84402): Bump go-jose/v4 to 4.1.4 [#10597](https://github.com/openshift/installer/pull/10597)
* [OCPBUGS-84643](https://issues.redhat.com/browse/OCPBUGS-84643): Update RHCOS-release-4.22 bootimage metadata to 10.2.20260521-0 / 9.8.20260520-0 [#10572](https://github.com/openshift/installer/pull/10572)
* [Full changelog](https://github.com/openshift/installer/compare/92cb4e39665966fd3128abd6256b13aa56523eeb...2e33096a58847329454b34ba11d74d770a688e29)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/c7bddefa772231786ccba9ffb8e750978fb1c5f7)

* [OCPBUGS-87963](https://issues.redhat.com/browse/OCPBUGS-87963): Fix preprovisioning network Secret lifecycle during BMH deletion [#491](https://github.com/openshift/baremetal-operator/pull/491)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c5e5048987427f58d3ca76238537e74bd3175e0f...c7bddefa772231786ccba9ffb8e750978fb1c5f7)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/5805e17a895ac569decd193153d45662ede5fc6f)

* [OCPBUGS-87212](https://issues.redhat.com/browse/OCPBUGS-87212): Add watcher for both TLS Adherence policy and profile changes [#610](https://github.com/openshift/cluster-baremetal-operator/pull/610)
* [OCPBUGS-86226](https://issues.redhat.com/browse/OCPBUGS-86226): Fix empty IRONIC_BASE_URL [#606](https://github.com/openshift/cluster-baremetal-operator/pull/606)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/4ac0e75c11e14023fbf3ab3ea1fa6dba01b01769...5805e17a895ac569decd193153d45662ede5fc6f)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/f6221889236cf9f2b24359d121c3291f08b74151)

* [OCPBUGS-92656](https://issues.redhat.com/browse/OCPBUGS-92656): e2e/ccm-aws-ote: support to dual-stack IPv6 primary [#480](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1eccfe33d83686e74769ea196660b8d09d249b04...f6221889236cf9f2b24359d121c3291f08b74151)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/55dea4dc947da2d8a9c1ffba451a41c3b3662718)

* [OCPBUGS-87968](https://issues.redhat.com/browse/OCPBUGS-87968): Fixed issue where nameserver is not set when recreating cpms [#409](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/409)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b2e26b937e7f6dab36b63ace9c8453ba9654011c...55dea4dc947da2d8a9c1ffba451a41c3b3662718)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/4847d2e09adb887610a0e18061bbf508e17f6ee3)

* [OCPBUGS-88472](https://issues.redhat.com/browse/OCPBUGS-88472): Fix group snapshots on HyperShift [#280](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/280)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/108f37f0e378accc322cbeb68136ec500ec35b94...4847d2e09adb887610a0e18061bbf508e17f6ee3)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/bba8f344c513e7a7fd3f3cc2234059d70e376e92)

* [OCPBUGS-90542](https://issues.redhat.com/browse/OCPBUGS-90542): fix etcd operator deadlock when etcd-endpoints configmap is stale [#1636](https://github.com/openshift/cluster-etcd-operator/pull/1636)
* [OCPBUGS-86960](https://issues.redhat.com/browse/OCPBUGS-86960): validate snapshot before destructive operations in cluster-restore-tnf.sh [#1627](https://github.com/openshift/cluster-etcd-operator/pull/1627)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3698b93d071f8b279b1721f90ced478f0b90b426...bba8f344c513e7a7fd3f3cc2234059d70e376e92)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/531cea1bee8c085e81b0394dd47296fc4bd3fdf0)

* [OCPBUGS-91967](https://issues.redhat.com/browse/OCPBUGS-91967): Guard OLM watches with capability check in gatewayclass controller [#1481](https://github.com/openshift/cluster-ingress-operator/pull/1481)
* [OCPBUGS-87164](https://issues.redhat.com/browse/OCPBUGS-87164): Add referencegrants and backendtlspolicies to Gateway API RBAC [#1461](https://github.com/openshift/cluster-ingress-operator/pull/1461)
* [OCPBUGS-87167](https://issues.redhat.com/browse/OCPBUGS-87167): Add configuration override for X-SSL strip [#1468](https://github.com/openshift/cluster-ingress-operator/pull/1468)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8ae91f62ca9e6ca1f210b815ab54edbae856ac4c...531cea1bee8c085e81b0394dd47296fc4bd3fdf0)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9c413cd4dc8c3876cc40ee85c207bf9b143f106f)

* [OCPBUGS-87844](https://issues.redhat.com/browse/OCPBUGS-87844): Fix kube-apiserver-to-kubelet-signer refresh interval [#2187](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2187)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/fb68eab51544f9dffac9916796723f6cee4faf3c...9c413cd4dc8c3876cc40ee85c207bf9b143f106f)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa)

* [OCPBUGS-86773](https://issues.redhat.com/browse/OCPBUGS-86773): fix: use feature-gate annotation for CAPI manifests [#305](https://github.com/openshift/cluster-machine-approver/pull/305)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/a9edd695aca56fb58e739b774670a01428360dd8...fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/cc54f3b3fedd7e9e1f62c9addb0f3e69ee8ded69)

* [OCPBUGS-92193](https://issues.redhat.com/browse/OCPBUGS-92193): set Prometheus shards value explicitly [#2974](https://github.com/openshift/cluster-monitoring-operator/pull/2974)
* [OCPBUGS-88321](https://issues.redhat.com/browse/OCPBUGS-88321): fix(TestDocExamples) flake: use internal registry for test pods [#2965](https://github.com/openshift/cluster-monitoring-operator/pull/2965)
* [OCPBUGS-86807](https://issues.redhat.com/browse/OCPBUGS-86807): jsonnet: exclude ReplicationController from catch-all … [#2940](https://github.com/openshift/cluster-monitoring-operator/pull/2940)
* [OCPBUGS-86990](https://issues.redhat.com/browse/OCPBUGS-86990): increase lookup interval [#2945](https://github.com/openshift/cluster-monitoring-operator/pull/2945)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/b4ce8c8e60a691ec428c6cb822c411d9b11efb5f...cc54f3b3fedd7e9e1f62c9addb0f3e69ee8ded69)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ad6c2f8350892f7e330105c1ffb10818150eec35)

* [OCPBUGS-84739](https://issues.redhat.com/browse/OCPBUGS-84739): Use dedicated service accounts for multus pods [#2985](https://github.com/openshift/cluster-network-operator/pull/2985)
* [OCPBUGS-90721](https://issues.redhat.com/browse/OCPBUGS-90721): NVIDIA-596: Enable dpu healthcheck [#3009](https://github.com/openshift/cluster-network-operator/pull/3009)
* [OCPBUGS-89244](https://issues.redhat.com/browse/OCPBUGS-89244): NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating [#3029](https://github.com/openshift/cluster-network-operator/pull/3029)
* [OCPBUGS-88307](https://issues.redhat.com/browse/OCPBUGS-88307): Remove --enable-interconnect flag from OVN-K manifests [#3028](https://github.com/openshift/cluster-network-operator/pull/3028)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e20b9cb9a0b3bc293e622ef1caf70a813710ffa8...ad6c2f8350892f7e330105c1ffb10818150eec35)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/9553086d2f3b04f929609f225d61fd60daacae8d)

* [OCPBUGS-86071](https://issues.redhat.com/browse/OCPBUGS-86071): perf: latency: compute memory resources dynamically [#1520](https://github.com/openshift/cluster-node-tuning-operator/pull/1520)
* [OCPBUGS-87891](https://issues.redhat.com/browse/OCPBUGS-87891): Enable timer migrations for all use-cases [#1542](https://github.com/openshift/cluster-node-tuning-operator/pull/1542)
* [OCPBUGS-87158](https://issues.redhat.com/browse/OCPBUGS-87158): e2e: Remove unnecessary len(numa) < 2 skip gates [#1538](https://github.com/openshift/cluster-node-tuning-operator/pull/1538)
* [OCPBUGS-84431](https://issues.redhat.com/browse/OCPBUGS-84431): Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 [#1529](https://github.com/openshift/cluster-node-tuning-operator/pull/1529)
* [OCPBUGS-86247](https://issues.redhat.com/browse/OCPBUGS-86247): Revert stalld backend to sched_debug [#1523](https://github.com/openshift/cluster-node-tuning-operator/pull/1523)
* [OCPBUGS-86024](https://issues.redhat.com/browse/OCPBUGS-86024): Requeue PerformanceStatus update when status write fails [#1518](https://github.com/openshift/cluster-node-tuning-operator/pull/1518)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/74d2449d12e30f58cdaf46bd87a96f10dd4883d1...9553086d2f3b04f929609f225d61fd60daacae8d)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/191a6aec444bfdbe5d70f7a23a20ee2fd25b7080)

* [OKD-379](https://issues.redhat.com/browse/OKD-379): Fix missing namespace in database template image triggers [#701](https://github.com/openshift/cluster-samples-operator/pull/701)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/317b21a930d074951c27c45c77c02ea211c43f14...191a6aec444bfdbe5d70f7a23a20ee2fd25b7080)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7de363f2a12bb17c6703c77dec5b34760b3292db)

* [OCPBUGS-77681](https://issues.redhat.com/browse/OCPBUGS-77681): Updating cluster-version-operator-container image to be consistent with ART for 4.22 [#1331](https://github.com/openshift/cluster-version-operator/pull/1331)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e9c1c39e21ec353ff5993d386c42bc1b15063dbf...7de363f2a12bb17c6703c77dec5b34760b3292db)


### [console](https://github.com/openshift/console/tree/afed24225ae0dfd69626782d4b3a48116c030986)

* [OCPBUGS-88748](https://issues.redhat.com/browse/OCPBUGS-88748): [release-4.22] webpack-dev-server: Information disclosure and denial of service via improper proxy configuration [#16656](https://github.com/openshift/console/pull/16656)
* [OCPBUGS-89337](https://issues.redhat.com/browse/OCPBUGS-89337): Use fixed artifacts directory to prevent stale temp dir accumulation [#16638](https://github.com/openshift/console/pull/16638)
* [OCPBUGS-90636](https://issues.redhat.com/browse/OCPBUGS-90636): Fix RoleBindings tab error for non-cluster-admin users [#16662](https://github.com/openshift/console/pull/16662)
* [OCPBUGS-90495](https://issues.redhat.com/browse/OCPBUGS-90495): Projects cannot be filtered by display name [#16652](https://github.com/openshift/console/pull/16652)
* [OCPBUGS-90110](https://issues.redhat.com/browse/OCPBUGS-90110): Fix ColumnManagementModal not showing NamespaceColumnHelpText [#16643](https://github.com/openshift/console/pull/16643)
* Fix for OCPBUGS-84470: CVE-2026-4800 [#16573](https://github.com/openshift/console/pull/16573)
* [OCPBUGS-87933](https://issues.redhat.com/browse/OCPBUGS-87933), [OCPBUGS-87985](https://issues.redhat.com/browse/OCPBUGS-87985): Bump protobufjs and shell-quote [#16619](https://github.com/openshift/console/pull/16619)
* [OCPBUGS-87997](https://issues.redhat.com/browse/OCPBUGS-87997): Bump fast-uri to 3.1.2 to fix CVE-2026-6322 [#16605](https://github.com/openshift/console/pull/16605)
* [OCPBUGS-88304](https://issues.redhat.com/browse/OCPBUGS-88304): Allow VolumeSnapshot restore when parent PVC is deleted [#16592](https://github.com/openshift/console/pull/16592)
* [OCPBUGS-87096](https://issues.redhat.com/browse/OCPBUGS-87096): fixing severity not showing number of issues [#16575](https://github.com/openshift/console/pull/16575)
* [OCPBUGS-86580](https://issues.redhat.com/browse/OCPBUGS-86580): Fix macOS Option key in pod terminal [#16504](https://github.com/openshift/console/pull/16504)
* [OCPBUGS-77804](https://issues.redhat.com/browse/OCPBUGS-77804): Update Console 4.22 plugin SDK CHANGELOG [#16521](https://github.com/openshift/console/pull/16521)
* [OCPBUGS-86700](https://issues.redhat.com/browse/OCPBUGS-86700): Fix and re-enable operator e2e tests disabled for createRoot [#16518](https://github.com/openshift/console/pull/16518)
* [OCPBUGS-77804](https://issues.redhat.com/browse/OCPBUGS-77804): prep for 4.22 GA SDK publish [#16508](https://github.com/openshift/console/pull/16508)
* [OCPBUGS-86410](https://issues.redhat.com/browse/OCPBUGS-86410): Fix Shipwright detail pages crashing with React error #310 [#16485](https://github.com/openshift/console/pull/16485)
* [OCPBUGS-86239](https://issues.redhat.com/browse/OCPBUGS-86239): Adapt dashboard Prometheus polling interval based on query response time [#16469](https://github.com/openshift/console/pull/16469)
* [OCPBUGS-84963](https://issues.redhat.com/browse/OCPBUGS-84963): Remove DataViewToolbar wrapper from bottom pagination [#16483](https://github.com/openshift/console/pull/16483)
* [OCPBUGS-86227](https://issues.redhat.com/browse/OCPBUGS-86227): Show empty state instead of 403 error for users without projects [#16467](https://github.com/openshift/console/pull/16467)
* [OCPBUGS-86222](https://issues.redhat.com/browse/OCPBUGS-86222): Use ETag conditional requests for OpenAPI v2 fetching [#16466](https://github.com/openshift/console/pull/16466)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/09626a30822d9473ad4c3e77a1cf0d5ed1f6ec9c...afed24225ae0dfd69626782d4b3a48116c030986)


### [console-operator](https://github.com/openshift/console-operator/tree/07e509a906dd79e190d663fe233c56b3d586b9af)

* [OCPBUGS-92829](https://issues.redhat.com/browse/OCPBUGS-92829): Clean up old temp directories in downloads pod [#1177](https://github.com/openshift/console-operator/pull/1177)
* [OCPBUGS-86118](https://issues.redhat.com/browse/OCPBUGS-86118): Add unit and e2e test coverage for cert rotation redeployment [#1161](https://github.com/openshift/console-operator/pull/1161)
* [OCPBUGS-83941](https://issues.redhat.com/browse/OCPBUGS-83941): bump gRPC-Go package [#1157](https://github.com/openshift/console-operator/pull/1157)
* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1097](https://github.com/openshift/console-operator/pull/1097)
* [OCPBUGS-85507](https://issues.redhat.com/browse/OCPBUGS-85507): feat: use 2 replicas for console on tnf [#1155](https://github.com/openshift/console-operator/pull/1155)
* [Full changelog](https://github.com/openshift/console-operator/compare/f0619391890c61e1a4ebdf5c1c0b247b30f81248...07e509a906dd79e190d663fe233c56b3d586b9af)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/db552ad333e84b99ca279a9c01ca2d918ec00c99)

* [OCPBUGS-83942](https://issues.redhat.com/browse/OCPBUGS-83942): Bump grpc to 1.79.3 to address CVE-2026-33186 [#243](https://github.com/openshift/containernetworking-plugins/pull/243)
* [OCPBUGS-87165](https://issues.redhat.com/browse/OCPBUGS-87165): CI build root image tag sync with ART 4.22 [#240](https://github.com/openshift/containernetworking-plugins/pull/240)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/747ad66caa1109b2b490aebad01af42bd2d738f1...db552ad333e84b99ca279a9c01ca2d918ec00c99)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/710a2aea744fd04546d11ac781fb874694e33ad8)

* [OCPBUGS-83552](https://issues.redhat.com/browse/OCPBUGS-83552): Bump google.golang.org/grpc to 1.79.3 [#395](https://github.com/openshift/cloud-provider-openstack/pull/395)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f146b90407764c052b7e26ee5a4da338b240eea5...710a2aea744fd04546d11ac781fb874694e33ad8)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/b69115537b79a5b3516e2a900f9095f4ebb3cbe5)

* [OCPBUGS-84434](https://issues.redhat.com/browse/OCPBUGS-84434): Bump github.com/moby/spdystream@v0.5.1 [#190](https://github.com/openshift/csi-driver-nfs/pull/190)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/5a8887df841e38a71c82d78922380c6027a2b486...b69115537b79a5b3516e2a900f9095f4ebb3cbe5)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/2d611ab4a7c6fa227a72d54c7ac88530d2c8513b)

* [OCPBUGS-84435](https://issues.redhat.com/browse/OCPBUGS-84435): Bump github.com/moby/spdystream to v0.5.1 in 4.22 [#136](https://github.com/openshift/csi-external-provisioner/pull/136)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3b79aefc35a504ccef3f36f6e43aafbdd3301341...2d611ab4a7c6fa227a72d54c7ac88530d2c8513b)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/28f6e06357f2840c241b9cfe09d301516e681c87)

* [OCPBUGS-88723](https://issues.redhat.com/browse/OCPBUGS-88723): UPSTREAM: 1392: Fix VolumeSnapshotContent deletion [#222](https://github.com/openshift/csi-external-snapshotter/pull/222)
* [OCPBUGS-83949](https://issues.redhat.com/browse/OCPBUGS-83949), [OCPBUGS-83952](https://issues.redhat.com/browse/OCPBUGS-83952): Bump google.golang.org/grpc to v1.79.3 [#216](https://github.com/openshift/csi-external-snapshotter/pull/216)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/d1bc3ffaa9759c13a06c2ec61c541342e71bd109...28f6e06357f2840c241b9cfe09d301516e681c87)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/bb6a6378d2af235b3b253cb422d406bd3d7e30b1)

* [OCPBUGS-84436](https://issues.redhat.com/browse/OCPBUGS-84436): Bump github.com/moby/spdystream to v0.5.1 [#105](https://github.com/openshift/csi-node-driver-registrar/pull/105)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/cf174b30fad107d354afb0f0b09030a7c97fd296...bb6a6378d2af235b3b253cb422d406bd3d7e30b1)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3da58a8c88a425e8e05d6e907f5492a49a0ee348)

* [OCPBUGS-86574](https://issues.redhat.com/browse/OCPBUGS-86574): VolumeSnapshot snapshot-c9v52 is not ready within 5m0s… [#193](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/193)
* [OCPBUGS-83968](https://issues.redhat.com/browse/OCPBUGS-83968): Bump google.golang.org/grpc to v1.79.3 [#183](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/183)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9...3da58a8c88a425e8e05d6e907f5492a49a0ee348)


### [haproxy-router](https://github.com/openshift/router/tree/5586fa9c77025679df4dee2a0895e95333ffbc8a)

* [OCPBUGS-87167](https://issues.redhat.com/browse/OCPBUGS-87167): Strip X-SSL-* headers for plain HTTP [#793](https://github.com/openshift/router/pull/793)
* [Full changelog](https://github.com/openshift/router/compare/1d980e1d4c65832893e91150df92fc6ad1932d89...5586fa9c77025679df4dee2a0895e95333ffbc8a)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/03c5938b61486a1fde89b5d546f57bb4c6ad1acc)

* [OCPBUGS-93787](https://issues.redhat.com/browse/OCPBUGS-93787): backport kubernetes/conformance umbrella suite [#2705](https://github.com/openshift/kubernetes/pull/2705)
* [OCPBUGS-86898](https://issues.redhat.com/browse/OCPBUGS-86898): Fix performance related issues when selinux metrics are emitted [#2676](https://github.com/openshift/kubernetes/pull/2676)
* [Full changelog](https://github.com/openshift/kubernetes/compare/c5ea727d19837f8a22cda5c0ba8899960b7777ff...03c5938b61486a1fde89b5d546f57bb4c6ad1acc)


### [hypershift](https://github.com/openshift/hypershift/tree/115431cac03d6af63d9279089267a4df956921c8)

* [OCPBUGS-88325](https://issues.redhat.com/browse/OCPBUGS-88325): fix(cpo) delete terminated MCD pods to retry in-place upgrades [#8729](https://github.com/openshift/hypershift/pull/8729)
* [OCPBUGS-87364](https://issues.redhat.com/browse/OCPBUGS-87364): Gate Route watch on management cluster capability [#8692](https://github.com/openshift/hypershift/pull/8692)
* [CNTRLPLANE-3661](https://issues.redhat.com/browse/CNTRLPLANE-3661): add etcd data re-encryption after encryption key rotation (#8219) [#8790](https://github.com/openshift/hypershift/pull/8790)
* [OCPBUGS-88356](https://issues.redhat.com/browse/OCPBUGS-88356): fix(cpo): deduplicate VPC endpoint subnets by AZ [#8724](https://github.com/openshift/hypershift/pull/8724)
* [CNTRLPLANE-3619](https://issues.redhat.com/browse/CNTRLPLANE-3619): backport API-driven Azure topology and private connectivity (Phase 1) [#8721](https://github.com/openshift/hypershift/pull/8721)
* [OCPBUGS-90563](https://issues.redhat.com/browse/OCPBUGS-90563): Fix metrics-proxy unbounded memory growth [#8788](https://github.com/openshift/hypershift/pull/8788)
* [OCPBUGS-89352](https://issues.redhat.com/browse/OCPBUGS-89352): build(operator): drop hypershift-no-cgo from operator container images [#8756](https://github.com/openshift/hypershift/pull/8756)
* [OCPBUGS-86912](https://issues.redhat.com/browse/OCPBUGS-86912): [release-4.22] Stop controllers fighting over HCP status [#8632](https://github.com/openshift/hypershift/pull/8632)
* [OCPBUGS-86039](https://issues.redhat.com/browse/OCPBUGS-86039): OCPBUGS-62177: [release-4.22] Verify cert revocation against all KAS pods [#8538](https://github.com/openshift/hypershift/pull/8538)
* [OCPBUGS-86578](https://issues.redhat.com/browse/OCPBUGS-86578): bootstrap serving certs at hypershift operator startup [#8599](https://github.com/openshift/hypershift/pull/8599)
* [OCPBUGS-86354](https://issues.redhat.com/browse/OCPBUGS-86354): add Konflux pipeline definitions for CPO 4.22 [#8608](https://github.com/openshift/hypershift/pull/8608)
* [Full changelog](https://github.com/openshift/hypershift/compare/d6c72d15350752e315c198f7a68558ae4086e3c7...115431cac03d6af63d9279089267a4df956921c8)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/3d5956ddd2292c381309106d23fff1765380c55e)

* [OCPBUGS-83774](https://issues.redhat.com/browse/OCPBUGS-83774): Bump google.golang.org/grpc to v1.79.3 [#171](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/171)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f859eac9612d8fff52013b809840b015cee6742d...3d5956ddd2292c381309106d23fff1765380c55e)


### [insights-operator](https://github.com/openshift/insights-operator/tree/0168cccf812470293494ff72042c153c684af58c)

* [OCPBUGS-88026](https://issues.redhat.com/browse/OCPBUGS-88026): fall back to kube-system/global-pull-secret for Insights token [#1305](https://github.com/openshift/insights-operator/pull/1305)
* [OCPBUGS-86818](https://issues.redhat.com/browse/OCPBUGS-86818): extractor controller [#1296](https://github.com/openshift/insights-operator/pull/1296)
* [Full changelog](https://github.com/openshift/insights-operator/compare/db59978d438a92e6fe805e9a9fb4dbbc5edaa4b6...0168cccf812470293494ff72042c153c684af58c)


### [ironic](https://github.com/openshift/ironic-image/tree/6984e87571f14d42463e10acee6bae32f9294534)

* [OCPBUGS-84369](https://issues.redhat.com/browse/OCPBUGS-84369): selectively backport servicing patches to 4.22 [#848](https://github.com/openshift/ironic-image/pull/848)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f934d2cdf0bebbde4992980a770dd799056ab867...6984e87571f14d42463e10acee6bae32f9294534)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0111656f618a3eade677e214919077826db47192)

* [OCPBUGS-86653](https://issues.redhat.com/browse/OCPBUGS-86653): [Backport] Handle DeletedFinalStateUnknown panic [#142](https://github.com/openshift/kube-state-metrics/pull/142)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/6fa06eac4c3942ba64bff18ca93b5a019ea5c976...0111656f618a3eade677e214919077826db47192)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c038cef79a7154854bbd66a5a102cc5646c33b9a)

* [OCPBUGS-89329](https://issues.redhat.com/browse/OCPBUGS-89329): Fix kubelet certificate wait loop in criometricsproxy.yaml [#6200](https://github.com/openshift/machine-config-operator/pull/6200)
* [OCPBUGS-93743](https://issues.redhat.com/browse/OCPBUGS-93743): Fix bootupd workaround in old nodes [#6239](https://github.com/openshift/machine-config-operator/pull/6239)
* [OCPBUGS-92026](https://issues.redhat.com/browse/OCPBUGS-92026): OCPEDGE-2474: TNF - Add fencing taint/untaint alert agent scripts [#6230](https://github.com/openshift/machine-config-operator/pull/6230)
* [OCPBUGS-92022](https://issues.redhat.com/browse/OCPBUGS-92022): MCO-2275: Migrate OS layering tests from openshift-tests-private [#6218](https://github.com/openshift/machine-config-operator/pull/6218)
* [release:4.22] OCPBUGS-88330: MCO-2209 MCO-2213 MCO-2207: Migrate security, daemon, and kernel TCs from mco.go [#6171](https://github.com/openshift/machine-config-operator/pull/6171)
* [OCPBUGS-91958](https://issues.redhat.com/browse/OCPBUGS-91958): Boot image skew check silently passes when MachineSets are reconcile-skipped [#6227](https://github.com/openshift/machine-config-operator/pull/6227)
* [OCPBUGS-91954](https://issues.redhat.com/browse/OCPBUGS-91954): Make vsphere template updates atomic [#6226](https://github.com/openshift/machine-config-operator/pull/6226)
* [OCPBUGS-88184](https://issues.redhat.com/browse/OCPBUGS-88184): Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole [#6170](https://github.com/openshift/machine-config-operator/pull/6170)
* [OCPBUGS-88683](https://issues.redhat.com/browse/OCPBUGS-88683): Process rebuild annotation on machine-os-builder restart [#6190](https://github.com/openshift/machine-config-operator/pull/6190)
* [OCPBUGS-87981](https://issues.redhat.com/browse/OCPBUGS-87981): Fix MCP.status.osImageStream [#6164](https://github.com/openshift/machine-config-operator/pull/6164)
* [OCPBUGS-88496](https://issues.redhat.com/browse/OCPBUGS-88496): Update custom containerfile OCB test to work in a disconnected environment [#6188](https://github.com/openshift/machine-config-operator/pull/6188)
* [OCPBUGS-88001](https://issues.redhat.com/browse/OCPBUGS-88001): Add mco_extensions.go e2e test suite for MCO extension install, enable, and validation [#6184](https://github.com/openshift/machine-config-operator/pull/6184)
* [OCPBUGS-88329](https://issues.redhat.com/browse/OCPBUGS-88329): In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred [#6175](https://github.com/openshift/machine-config-operator/pull/6175)
* [OCPBUGS-87019](https://issues.redhat.com/browse/OCPBUGS-87019): fix: update arbiter crio config [#6142](https://github.com/openshift/machine-config-operator/pull/6142)
* [OCPBUGS-88487](https://issues.redhat.com/browse/OCPBUGS-88487): make test 69755 more stable [#6186](https://github.com/openshift/machine-config-operator/pull/6186)
* [OCPBUGS-88331](https://issues.redhat.com/browse/OCPBUGS-88331): [release-4.22] Remove skopeo-install script [#6176](https://github.com/openshift/machine-config-operator/pull/6176)
* [OCPBUGS-84679](https://issues.redhat.com/browse/OCPBUGS-84679): add RootCA cert to the sysContextBuilder certs [#5897](https://github.com/openshift/machine-config-operator/pull/5897)
* [OCPBUGS-87840](https://issues.redhat.com/browse/OCPBUGS-87840): vSphere boot image hot loop detection is non-functional due to stable template names [#6157](https://github.com/openshift/machine-config-operator/pull/6157)
* [OCPBUGS-87900](https://issues.redhat.com/browse/OCPBUGS-87900): [release-4.22] OCPBUGS-87181:  MCO-2211: MCO-2210: MCO-2234 MCO-Migrate MCO tests from openshift-tests-private [#6148](https://github.com/openshift/machine-config-operator/pull/6148)
* [OCPBUGS-88114](https://issues.redhat.com/browse/OCPBUGS-88114): Skip chrony-wait on first node join [#6168](https://github.com/openshift/machine-config-operator/pull/6168)
* [OCPBUGS-88120](https://issues.redhat.com/browse/OCPBUGS-88120): daemon: don't pull/extract extensions for all OS updates [#6169](https://github.com/openshift/machine-config-operator/pull/6169)
* [OCPBUGS-87811](https://issues.redhat.com/browse/OCPBUGS-87811): [release-4.22] OCPBUGS-87550: Update TC-88366 to check osImageStream status after update completes [#6153](https://github.com/openshift/machine-config-operator/pull/6153)
* [OCPBUGS-87161](https://issues.redhat.com/browse/OCPBUGS-87161): [release-4.22] OCPBUGS-87027: MCO-2212: MCO-2213: Migrate mco_observability and mco_daemon test-suite [#6143](https://github.com/openshift/machine-config-operator/pull/6143)
* [OCPBUGS-86865](https://issues.redhat.com/browse/OCPBUGS-86865): Stabilize ocl 4.22 [#6115](https://github.com/openshift/machine-config-operator/pull/6115)
* [OCPBUGS-86985](https://issues.redhat.com/browse/OCPBUGS-86985): MCO-2297: Add OCP-88366 and OCP-88814 for osImageStream with osImageURL [#6083](https://github.com/openshift/machine-config-operator/pull/6083)
* [OCPBUGS-87163](https://issues.redhat.com/browse/OCPBUGS-87163): Remove trailing newline (\n) characters in klog message strings [#6147](https://github.com/openshift/machine-config-operator/pull/6147)
* [OCPBUGS-86893](https://issues.redhat.com/browse/OCPBUGS-86893): Add version guard for OSStream rendering [#6123](https://github.com/openshift/machine-config-operator/pull/6123)
* [OCPBUGS-86997](https://issues.redhat.com/browse/OCPBUGS-86997): [release-4.22] OCPBUGS-86984: MCO-2273: MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite [#6126](https://github.com/openshift/machine-config-operator/pull/6126)
* [OCPBUGS-86297](https://issues.redhat.com/browse/OCPBUGS-86297): configure-ovs: copy lldp mode to br-ex port [#6073](https://github.com/openshift/machine-config-operator/pull/6073)
* [OCPBUGS-86870](https://issues.redhat.com/browse/OCPBUGS-86870): Update AMI Whitelist [#6116](https://github.com/openshift/machine-config-operator/pull/6116)
* [OCPBUGS-86732](https://issues.redhat.com/browse/OCPBUGS-86732): remove tests using base images older than 4.13 [#6104](https://github.com/openshift/machine-config-operator/pull/6104)
* [OCPBUGS-86769](https://issues.redhat.com/browse/OCPBUGS-86769): Adapt test '54922 - daemon: add check before updating kernel [#6103](https://github.com/openshift/machine-config-operator/pull/6103)
* [MCO-2233](https://issues.redhat.com/browse/MCO-2233): Migrate Kernel related MCO test-cases [#5860](https://github.com/openshift/machine-config-operator/pull/5860)
* [OCPBUGS-86262](https://issues.redhat.com/browse/OCPBUGS-86262): Verify extension packages are installed [#6071](https://github.com/openshift/machine-config-operator/pull/6071)
* [OCPBUGS-85127](https://issues.redhat.com/browse/OCPBUGS-85127): Fix wrong early exit during kubelet MCs regeneration [#6009](https://github.com/openshift/machine-config-operator/pull/6009)
* [OCPBUGS-86267](https://issues.redhat.com/browse/OCPBUGS-86267): Fix CVE-2026-33186 [#6072](https://github.com/openshift/machine-config-operator/pull/6072)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/ab81640d1510800b1be795066ef4d392dbcdf470...c038cef79a7154854bbd66a5a102cc5646c33b9a)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/e5342c9905a94069e6801737dd6aeddfb74bbac4)

* [OCPBUGS-87872](https://issues.redhat.com/browse/OCPBUGS-87872): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#96](https://github.com/openshift/machine-os-images/pull/96)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/4843e69841263a99f7fbc05187557db408abf265...e5342c9905a94069e6801737dd6aeddfb74bbac4)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/3bd7c2092ee0fe8bbad7fb4006b41ff23755343a)

* [OCPBUGS-87979](https://issues.redhat.com/browse/OCPBUGS-87979): [release-4.22] fast-uri: URI authority bypass due to improper delimiter handling [#989](https://github.com/openshift/monitoring-plugin/pull/989)
* [OCPBUGS-88413](https://issues.redhat.com/browse/OCPBUGS-88413): [release-4.22] Fix CVE-2026-44494: bump axios to ^1.16.0 via overrides [#997](https://github.com/openshift/monitoring-plugin/pull/997)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/cf64033683b8caed13ac3b39c2d4c9564888c8e7...3bd7c2092ee0fe8bbad7fb4006b41ff23755343a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/25392430212ebb716e63aaafd7eb3bb77dded5f7)

* [OCPBUGS-92205](https://issues.redhat.com/browse/OCPBUGS-92205): Updated doc links based on release [#438](https://github.com/openshift/networking-console-plugin/pull/438)
* [OCPBUGS-92196](https://issues.redhat.com/browse/OCPBUGS-92196): fixed translations of pod column titles [#437](https://github.com/openshift/networking-console-plugin/pull/437)
* [OCPBUGS-88314](https://issues.redhat.com/browse/OCPBUGS-88314): Trim subnet input in UDN creation form [#431](https://github.com/openshift/networking-console-plugin/pull/431)
* [CNV-90049](https://issues.redhat.com/browse/CNV-90049): [UDN] Add condition column to the list page [#432](https://github.com/openshift/networking-console-plugin/pull/432)
* [OCPBUGS-88025](https://issues.redhat.com/browse/OCPBUGS-88025): Fix empty state Create button links [#429](https://github.com/openshift/networking-console-plugin/pull/429)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d73167a4d7fca871d64d3591aac388cfd2d37bbe...25392430212ebb716e63aaafd7eb3bb77dded5f7)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/b402a1dcbe2c2ef3bc7d14459a8f223e7a4811b7)

* [OCPBUGS-93565](https://issues.redhat.com/browse/OCPBUGS-93565): update x/crypto to v0.52.0 and x/net to v0.55.0 [#369](https://github.com/openshift/oauth-proxy/pull/369)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/f777d2b5c940422f9e506a8749ac1bcbecc389fe...b402a1dcbe2c2ef3bc7d14459a8f223e7a4811b7)


### [oauth-server](https://github.com/openshift/oauth-server/tree/42031614956a88806d0503cd619b49975ad61682)

* [OCPBUGS-84381](https://issues.redhat.com/browse/OCPBUGS-84381): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#233](https://github.com/openshift/oauth-server/pull/233)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9...42031614956a88806d0503cd619b49975ad61682)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3033291cb2611da35306d077b0de11bb35f0b3ef)

* [OCPBUGS-88484](https://issues.redhat.com/browse/OCPBUGS-88484): Include tag+digest images in both IDMS and ITMS [#1442](https://github.com/openshift/oc-mirror/pull/1442)
* [OCPBUGS-87806](https://issues.redhat.com/browse/OCPBUGS-87806): fixes race condition when mirroring operator catalogs [#1434](https://github.com/openshift/oc-mirror/pull/1434)
* [OCPBUGS-84389](https://issues.redhat.com/browse/OCPBUGS-84389): Upgrade go-jose to v4.1.4 to fix CVE-2026-34986 [#1419](https://github.com/openshift/oc-mirror/pull/1419)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/ca5eebdcecf9650248f15fe6009b22788ba0c434...3033291cb2611da35306d077b0de11bb35f0b3ef)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7fa546d41a73b519e3af0e6428471c4aaf5c71e5)

* [OCPBUGS-87022](https://issues.redhat.com/browse/OCPBUGS-87022): fix concurrent map race in project authorization cache [#653](https://github.com/openshift/openshift-apiserver/pull/653)
* [OCPBUGS-84454](https://issues.redhat.com/browse/OCPBUGS-84454): Address CVE-2026-35469 [#651](https://github.com/openshift/openshift-apiserver/pull/651)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/fbea5220c4fe13c20107d6c4631f4e53007ca761...7fa546d41a73b519e3af0e6428471c4aaf5c71e5)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9)

* [OCPBUGS-88718](https://issues.redhat.com/browse/OCPBUGS-88718): Branch Sync main to release-4.22 [06-10-2026] [#3244](https://github.com/openshift/ovn-kubernetes/pull/3244)
* [OCPBUGS-87214](https://issues.redhat.com/browse/OCPBUGS-87214): Branch Sync main to release-4.22 [06-05-2026] [#3232](https://github.com/openshift/ovn-kubernetes/pull/3232)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/72db5e8d8ec23d4108183a8c67b45cdfdb8057ba...8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9)


### [prometheus](https://github.com/openshift/prometheus/tree/13ce9de4694ded595ef1455dd836ba4033fed0ea)

* [OCPBUGS-93919](https://issues.redhat.com/browse/OCPBUGS-93919): fix(tsdb): temporarily ignore Direct IO enablement errors on unsupported filesystems [#339](https://github.com/openshift/prometheus/pull/339)
* [OCPBUGS-92818](https://issues.redhat.com/browse/OCPBUGS-92818): bump x/crypto, x/net, and otel dependencies to fix CVEs [#337](https://github.com/openshift/prometheus/pull/337)
* [OCPBUGS-88666](https://issues.redhat.com/browse/OCPBUGS-88666): remote: validate snappy decoded length before allocation in read endpoint [#330](https://github.com/openshift/prometheus/pull/330)
* [Full changelog](https://github.com/openshift/prometheus/compare/6e5d1aec83edd83e693019ba1e1767cb69d1c640...13ce9de4694ded595ef1455dd836ba4033fed0ea)


### [tests](https://github.com/openshift/origin/tree/c3ca9662f45445c8546f2a39aabaa4a88578c9d4)

* [OCPBUGS-87838](https://issues.redhat.com/browse/OCPBUGS-87838): support Parents field on origin test suites [#31270](https://github.com/openshift/origin/pull/31270)
* [OCPBUGS-92656](https://issues.redhat.com/browse/OCPBUGS-92656): bump openshift-tests-extension to fix klog stdout parsing on 4.22 [#31349](https://github.com/openshift/origin/pull/31349)
* [OCPBUGS-92048](https://issues.redhat.com/browse/OCPBUGS-92048): fix PDB AlwaysAllow test failure on IPv6-primary dualstack clusters [#31337](https://github.com/openshift/origin/pull/31337)
* [OCPBUGS-92047](https://issues.redhat.com/browse/OCPBUGS-92047): Fix AWS DualStack CI jobs consistently encounter 2 EgressFirewall Test Failures [#31336](https://github.com/openshift/origin/pull/31336)
* [OCPBUGS-85708](https://issues.redhat.com/browse/OCPBUGS-85708): Raise OpenStack operator watch limits [#31183](https://github.com/openshift/origin/pull/31183)
* [Full changelog](https://github.com/openshift/origin/compare/f9132b5985893b5c6c73fbefff404835b0779b6d...c3ca9662f45445c8546f2a39aabaa4a88578c9d4)


### [thanos](https://github.com/openshift/thanos/tree/8938facdb517ad9fb2b0d94eaa3a3f5858f314f1)

* [OCPBUGS-92813](https://issues.redhat.com/browse/OCPBUGS-92813): Fix CVE-2026-39883 [#191](https://github.com/openshift/thanos/pull/191)
* [Full changelog](https://github.com/openshift/thanos/compare/5d9d0f387e5cc651470f27352b28674103bfdd77...8938facdb517ad9fb2b0d94eaa3a3f5858f314f1)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/ecd20781f41ed71552c05650c76021da57138b7d)

* [OCPBUGS-83636](https://issues.redhat.com/browse/OCPBUGS-83636): Bump spdystream to v0.5.1 [#180](https://github.com/openshift/vmware-vsphere-csi-driver/pull/180)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cf21e1211225e3cf6baa27bdb12ae86c5c13db39...ecd20781f41ed71552c05650c76021da57138b7d)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/438d5aad88be4f7d9237d87ed70589e1ebaf18f8)

* [OCPBUGS-86866](https://issues.redhat.com/browse/OCPBUGS-86866): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#221](https://github.com/openshift/vsphere-problem-detector/pull/221)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/842aed3df97005839ef5deaf560abbe6486b9daf...438d5aad88be4f7d9237d87ed70589e1ebaf18f8)