# 4.22.0-rc.4

Created: 2026-05-18 11:17:21 +0000 UTC

Image Digest: `sha256:0b4edeba3be55c65205edc9915b81672bbc53014b2fd5891d0e5714c09dc746d`


## Changes from 4.22.0-ec.5

### Components

* Kubectl 1.35.2
* Kubernetes upgraded from 1.35.3 to 1.35.4
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260405-0 to 10.2.20260513-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| DualReplica <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| EVPN <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| GatewayAPIWithoutOLM <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| OpenShiftPodSecurityAdmission <br/> (0 tests)| Disabled<br/>(Changed)| Disabled<br/>(Changed)| Enabled| Enabled| Disabled<br/>(Changed)| Disabled<br/>(Changed)| Enabled| Enabled |


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:ca2314a03930d2a966b86cac97c21e2fe007953bcccdca9e53612c2081639eb2`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [e73d6a38](https://github.com/openshift/cloud-provider-aws/commit/e73d6a3821655afc6fb19d88a66907078e6854f2) `sha256:49d4ef213400ac24ff7dbd38dd223ebd5d2356e4cd747ed5a9e04da48598eec9`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:28ca58901c1c0f9dcf7c70a7245de171dc8a54d6ebb9be6b9afa1bcb46ce4e52`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:22277f0494d222ec2a41747f0545ea8294562e51b68800c33b9e18707c6051ec`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:eddd45baaba97141d7d324d78b46cb6994cd093e40c031a3997e333dd60c1c0c`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:54df9ef9040b065e321493d69938a039622b3a4e3bf06218dd96fab20144bbab`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [4c7a7646](https://github.com/openshift/cloud-provider-azure/commit/4c7a764630c621d5e1700649fc056800d35bb6d1) `sha256:396a0169aa1fb20ebf918c137c4819ddd7dd443870154a5a0af5bc9f3f83928d`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [4c7a7646](https://github.com/openshift/cloud-provider-azure/commit/4c7a764630c621d5e1700649fc056800d35bb6d1) `sha256:6941c1f60d41b17ff626e287de4d1121f78d894eb2b644c2a4d678f7a463b5c5`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [99b9a3a3](https://github.com/openshift/azure-kubernetes-kms/commit/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39) `sha256:f83d9c02f460cfc3a3537d81386435d7ed1cb8a4fa60f8851d95b46a62371ed3`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [69d04909](https://github.com/openshift/machine-api-provider-azure/commit/69d049094ee36ad9c706d65694a8cd42e9a64800) `sha256:62b77fb07b8a3b585842b5582cc0994275aafd60d436dd207838cb972b5d9c31`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [ad4eb8a5](https://github.com/openshift/cluster-api-provider-metal3/commit/ad4eb8a5e67dc08c0686f006641847df4370d599) `sha256:7d63f9e3ba7584c61f44ec8c16bcaa74ee349787afbf55913a104b2ea1e0dcaa`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:2edf5b91c8e7cf7f069648f0e54027adec6cfc200b428ac999849193e5962e86`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [c5e50489](https://github.com/openshift/baremetal-operator/commit/c5e5048987427f58d3ca76238537e74bd3175e0f) `sha256:c8ed78269b9fbb71e17904451ad937491b2d5f3f20897eb8f4be91439bab3735`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [dca8cb1b](https://github.com/openshift/baremetal-runtimecfg/commit/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40) `sha256:290ce7a706e1c1c219f5dfbf30ca96c348137895b5f2a8da558b6388b205ed1b`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:85ffda6b4926815d32fc3488ad23248ba0212559b35aada5ad54cf2b67a02b2c`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [e6be0fdf](https://github.com/openshift/cluster-bootstrap/commit/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383) `sha256:dabc1eba022bfeb1261b3a403e2d57336fdefe6a369a6a3dae22ca904a73caa1`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [b2e26b93](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/b2e26b937e7f6dab36b63ace9c8453ba9654011c) `sha256:d83cfc005475800936af77d4e607f80ed67ddd62400dadaeb04e12db3191c527`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:e1bbb4ca16cde09212476326d4228e4583f540652d7343fd90595e068f45bd66`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [a9edd695](https://github.com/openshift/cluster-machine-approver/commit/a9edd695aca56fb58e739b774670a01428360dd8) `sha256:8b93d3f1d92d109be2863e24bc0f227854173ba593a4cf6582119a48f51323f9`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [44985a13](https://github.com/openshift/cluster-policy-controller/commit/44985a1306411101c84dd5081598fc928b432321) `sha256:5615a2fae428ce58ea12618c267014f99dbf323f59d020fc740e6feead7742c3`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8dfdf2ef](https://github.com/openshift/cluster-storage-operator/commit/8dfdf2ef3310358f3559a5481df43b98b2294791) `sha256:ca7737de33805e90adb247c575b24b453b2a025b433a2fe53908f4d7afc7f20f`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:4f1ae1ced44d0d88537015759bcfc0096c52868da13a948ff4c90a71ec644713`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:da9a6b4845c71270b7761b0d30d3b7130087a9f9b00bd3fc444bc69aacac413d`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:7141ac0db618d5135044f182fa26f5689211e340cc0b52bcb501914f52a39115`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:e68c577994350df7d0ff57649f24daaf0e28c8e5b7afadfd5357fe90e8387e39`
* [coredns](https://github.com/openshift/coredns) git [0dded2d2](https://github.com/openshift/coredns/commit/0dded2d232dab43c107b1dab9d0d9fdfd8259622) `sha256:25272a0944e00a27ce1d63e2cc1dfba29b896b89890fe191f394f67b6e13ae05`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:932fcb0a6fa206657d30c72572cf06ef679cae07a013511bbd73f400b4f01e5e`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:3e4a8d77aeca131804684e87a0952f9200d895d1c13e491327dabe1ab9348804`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [d1bc3ffa](https://github.com/openshift/csi-external-snapshotter/commit/d1bc3ffaa9759c13a06c2ec61c541342e71bd109) `sha256:adf7b7e0bc45aaff09af2dfdde96edc5d4d85c8b97eb6f2548c89c58834b2f72`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:b6d4331ae19fa986c860a7659cb56e9ce3d99539f31222b3f7b9c2e82e453c96`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [cf174b30](https://github.com/openshift/csi-node-driver-registrar/commit/cf174b30fad107d354afb0f0b09030a7c97fd296) `sha256:d16c60f741d26dfcc3752681ef411247df0c9cd336181033d6525242a25880c8`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [d1bc3ffa](https://github.com/openshift/csi-external-snapshotter/commit/d1bc3ffaa9759c13a06c2ec61c541342e71bd109) `sha256:02bdca6af3c8aa48ecfe1f24259cb24850e28b1614727e0e6abb7a47732d3237`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:d7cde855f92b3e0f891d1ee82289c18c3ec0433028ac82cdef8a7f885f26be99`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:944390ee4e8854ba0dd01378cab9ac41d37a91333557846ca3fd58bad62cd780`
* [etcd](https://github.com/openshift/etcd) git [d8d67b8c](https://github.com/openshift/etcd/commit/d8d67b8ce849f816d6d23c904098336632e2348f) `sha256:efb4a7b5cc545269651a2f8700556702e0e9d600f8b19e251e4fb01f03d42572`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [0073bd11](https://github.com/openshift/machine-api-provider-gcp/commit/0073bd1187c07febc963fc67f0df67cd33c8f218) `sha256:09c43632fea405c442b57c50f0423dd4e271ceaa58c54a20fdf85d27a349da5b`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:7ed232c669ee0801e995e8d18ab8f260ef8d7e3ff964f1005477a8cef726a5f8`
* [haproxy-router](https://github.com/openshift/router) git [89639077](https://github.com/openshift/router/commit/896390778ebe15f57f87e6ca78f11c96e64c2652) `sha256:2f11b7a4f6cc23e213a30566cab93ac01d347a49aa40825feab57ba5010a66f6`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [d9222a1c](https://github.com/openshift/cloud-provider-ibm/commit/d9222a1c00c37d635da02b65606fde1e54b2ec03) `sha256:c8787145a8ac0a4dfdcd24e8f580fcde891d05c5990c60a73587fd655988fb95`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [aa40cd7e](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf) `sha256:6a42939718fc6cd8a52c2905381f4daac789a41757128501d98ed9878fd2ac47`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [f859eac9](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/f859eac9612d8fff52013b809840b015cee6742d) `sha256:ee511955a3bfec181596ba2c32d4d9fbcb2a55fb6a03b2fad1d3a995f4d3eb3d`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [03b143d5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/03b143d588768a18fd8afa1534ea7d7a04b4d1f3) `sha256:1d6da9c22a3094c2cd95672b5964bd530f66e6def5b0b1f1fe834ad9adbab5d1`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [46b8c72c](https://github.com/openshift/machine-api-provider-ibmcloud/commit/46b8c72c675770295f5c2c8f85f5f705ca35787c) `sha256:6a7a74882265f8ba6b93ee79c523cd1b023bc32403bf8176c5856e098ea959cf`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:5349681343612a607c59563799a5acf6df55211f6c46d45d14372cf8e73e47e9`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:0b976d9bc86804f034be679a5a3b8410d6e904e912623cb7adf7bb3b271f8749`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [0336e638](https://github.com/openshift/ironic-agent-image/commit/0336e6383c98f4f0c6b35c71e00116d3c3160c43) `sha256:bc591fa39e2470191c904ca32cb8ba3d5320bcb3706650ed67a142eca64d1544`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:567d222e29d5ca0af970986d388a32e740c48881de2fe629d24954af1ec55e65`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:2dcdd91e96fd03712d617ca820805a03b0fd178643caa77eb2497c01d9edcba8`
* [keepalived-ipfailover](https://github.com/openshift/images) git [edb8b1e6](https://github.com/openshift/images/commit/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71) `sha256:180b44f18f77bcd6cf88c07e6b54bc81569483bb75ad291bddd95890afbd581c`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:291383c1613a6bb0218305fba72badb87e3d39773ea8eee75374ca0268f6dbef`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:28ce4fb536ad0b695620ffcd026ff3284b6aee36821ffce0e291159d7ae78804`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [6fa06eac](https://github.com/openshift/kube-state-metrics/commit/6fa06eac4c3942ba64bff18ca93b5a019ea5c976) `sha256:f32d0c4c735f9fc815578d4d06b68756a1ec26a1c628bb6153488254af7ff10c`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:39057679d075d9dc72082c41916c93c3844ea42258baf07c43b152ea9f95baa3`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:b83f4f02a97c25e2e92ddf4afa95d99fa7c737613ebf307f3a20dfcd2776032f`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [771b562d](https://github.com/openshift/kubevirt-csi-driver/commit/771b562d4875296007850a4d3709a7ae1c6ed3e2) `sha256:26f5a92ff13091b50d6c5a01dc07a68ecff454209d442300129cd06763e77b00`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:cb7444b4d531af1eb3fc57b8de20a2be0e6d1b8492048ee72ed1f6fee644a648`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [df9a652c](https://github.com/openshift/machine-os-images/commit/df9a652cb1572172e404655bb021525be2e3d8ab) `sha256:40cf4ae495d1ffa9e610af779bcab929b5fc3ee248b496260f0c4adaf630b9b4`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [16ba7ef8](https://github.com/openshift/multus-admission-controller/commit/16ba7ef8026f5b6d0d08b19c707648d82b1ac592) `sha256:f3ff13c679280cca8b0755dc749c2ab18be85f1ac6b3baf236ba9cefeb5d42d2`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:b6d7b9b2821409704fb6ca50ad0083a97345540d3c114713824da6c8c5590e78`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:05e3dd857008fb90e2e4ccdeb26dfafd39ddcca397283c6f8563bc13192da4cd`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:25ae005ff5d7fa9c38f134d2061f01073ae3cac566c8cb361b13a43ac6c8911c`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:e87ceea6019e09fe1cb18212361c19ea4b918dd23b7dcf5df561b2e812a7429d`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:550fe49ed0971af234c90712ac40bdeb7d487ed33983c412749ef8fa048908e7`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:8033a7c7c9fb4b50f4ffbb7f1ce357be99a3ce8aada0facf8af9be47e0c170d4`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:72da8b077c45e4c100b5c2f99c58d1e09e8d045129ab43aac889438190a45502`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:41145b0cd726793b5ede5111a5d1b8b1ce85d5e7fec572eebe74641c014021e3`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:5288203ab9d0b5e176533b8f1db7123bf361b9fcf21ecf92105a93dfaf616a71`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [714292f5](https://github.com/openshift/oauth-proxy/commit/714292f5478e6c12da6a31710f72bc8fbe6fb925) `sha256:564a397fb6f0b43ffba34af676f5a8176b7a859080986b38df15cf8c6a294319`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:afb46f0b09d3794332864a06b5f3f957bd1575127cb4594aad38c9355acf38f5`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:5d1bbc574747feb2e43b1353a44d8b61f0baa54f94c98f6abb9c6179cd2fe55b`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [8a8c354b](https://github.com/openshift/machine-api-provider-openstack/commit/8a8c354b99ce83e3c05a91358aadec09944c2fce) `sha256:6741563b8bce7ed66fe9af1571c49086f9a19fba8aedd697b80a667a92f78327`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [cbea7a9c](https://github.com/openshift/openstack-resource-controller/commit/cbea7a9cab145c32e2f347be69996b649893cc22) `sha256:c7e4dc99998c1f3a3ca5f0e2d1103faacb9dd9618337348746c4d2bf30115aaf`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:f01d1bd96a8767b90f3e517a0c6cd9b9c73904b4eeae59b8add114bcf91393e8`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:531fe7fc155fe961dbe2384c2d135e9060aac735622b63029d621e8536c53d6d`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:5a8b1dd661674ba98dabf1aea6a57adcb364eac5a2182911ecd62e5238fe3b1f`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [02dc3e9e](https://github.com/openshift/prometheus-alertmanager/commit/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde) `sha256:3131bad8578f6e0f136cc349c4c4601a1b2bc18a9860dc906676fff2acf925a7`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:68513cfffcab7a734124f169d9ad5f28ecb5bf14a503f80be8310ef43a662d3c`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:f968a40810c997a9d3e60c942a3fbe465b41043f1a73904f20b183b5c9038cf5`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:85248dddab4abe78ddf638e0b87f06d94690b8d6bc94d0d210b72ca34765b0bd`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:918f49010f2d2c7dd20c66e94bc3aa2a8611d62d239d19d526574f5238d75fc0`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [624742d9](https://github.com/openshift/route-controller-manager/commit/624742d93f3a7885cf7f70985f1e23ff60da580d) `sha256:7313fc6641f323dc34bc0852dee81d9fea553c5ae82ca7d8c77d6ddae3ec1c07`
* [thanos](https://github.com/openshift/thanos) git [5d9d0f38](https://github.com/openshift/thanos/commit/5d9d0f387e5cc651470f27352b28674103bfdd77) `sha256:a13fc29f30ad52029e5a449b67d227262a5b47f98f8729fd010632cfbd722ef1`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:8d5c7fce63d884c0bb695d99d00ff9cb369307c950a75d7b78c617f16058ae5a`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [d3668c9a](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/d3668c9a9510f189604343e817cc79ab23367f40) `sha256:75222f64c27c265418cc4986e6e8024d2d2ebae3da563e57205477c8ae7dd417`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [842aed3d](https://github.com/openshift/vsphere-problem-detector/commit/842aed3df97005839ef5deaf560abbe6486b9daf) `sha256:1ef6614006dd529ff6cae1a7153077efabcfdc044b07f73265dab3397e5749da`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8a98e5cd5e866b638a155a9d8b8b2d01555e13e7)

* [OCPBUGS-83542](https://issues.redhat.com/browse/OCPBUGS-83542): Mark raw FC/iSCSI multipath members as ineligible [#10150](https://github.com/openshift/assisted-service/pull/10150)
* [OCPBUGS-83511](https://issues.redhat.com/browse/OCPBUGS-83511): Fix IRI patcher feature check [#10147](https://github.com/openshift/assisted-service/pull/10147)
* [MGMT-23548](https://issues.redhat.com/browse/MGMT-23548): Ensure tests w/ gomock controllers call Finish() [#10024](https://github.com/openshift/assisted-service/pull/10024)
* [MGMT-22849](https://issues.redhat.com/browse/MGMT-22849): Remove the nmconnection that the openshift-installer writes for the bootstrap. [#10086](https://github.com/openshift/assisted-service/pull/10086)
* NO-ISSUE: Detect missing PostgreSQL client in development [#10119](https://github.com/openshift/assisted-service/pull/10119)
* NO-ISSUE: Add assisted-service-writing-unit-tests agent skill [#10123](https://github.com/openshift/assisted-service/pull/10123)
* [MGMT-23451](https://issues.redhat.com/browse/MGMT-23451): Lower SNO vCPU min to 4 instead of 8 for assisted for OCP 4.22 and above [#10040](https://github.com/openshift/assisted-service/pull/10040)
* [MGMT-23141](https://issues.redhat.com/browse/MGMT-23141): Cluster creation returns SQL error rather than API error [#10113](https://github.com/openshift/assisted-service/pull/10113)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 [#10120](https://github.com/openshift/assisted-service/pull/10120)
* [MGMT-23340](https://issues.redhat.com/browse/MGMT-23340): upgrade assisted-service postgresql from 13 to 15 [#10096](https://github.com/openshift/assisted-service/pull/10096)
* NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock [#10082](https://github.com/openshift/assisted-service/pull/10082)
* [Full changelog](https://github.com/openshift/assisted-service/compare/a63f435fb43135b6fa125a16b70e361183991d33...8a98e5cd5e866b638a155a9d8b8b2d01555e13e7)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b)

* NO-ISSUE: Refresh RPM lockfiles [#2069](https://github.com/openshift/assisted-installer/pull/2069)
* [MGMT-23545](https://issues.redhat.com/browse/MGMT-23545): Mount pull secret token as a file [#2053](https://github.com/openshift/assisted-installer/pull/2053)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/f38859829b2adc6ea1211f838d1e5112fbac657e...a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f562f3539125da83145eb1012ea8a4f4d62d0807)

* [OCPBUGS-84129](https://issues.redhat.com/browse/OCPBUGS-84129): add --copy-network when manual network config is detected [#1416](https://github.com/openshift/assisted-installer-agent/pull/1416)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/008935c33fb03bb246c22f8873da7599ec30aa2c...f562f3539125da83145eb1012ea8a4f4d62d0807)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/2c9007c648cc6395a885c3a563cfeda8dff5c82b)

* [OCPBUGS-85230](https://issues.redhat.com/browse/OCPBUGS-85230): Ensure follow-redirects pkg resolves to ^1.16.0 (#3705) [#3705](https://github.com/openshift-assisted/assisted-installer-ui/pull/3705)
* [OCPBUGS-85265](https://issues.redhat.com/browse/OCPBUGS-85265): [release-4.22] OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled "Next" button during background validation (#3703) [#3703](https://github.com/openshift-assisted/assisted-installer-ui/pull/3703)
* [OCPBUGS-84318](https://issues.redhat.com/browse/OCPBUGS-84318): fix operators list in ABI below the sea (#3645) [#3645](https://github.com/openshift-assisted/assisted-installer-ui/pull/3645)
* Hide internally generated custom manifests on the Cluster Review page (#3700) [#3700](https://github.com/openshift-assisted/assisted-installer-ui/pull/3700)
* [OCPBUGS-85199](https://issues.redhat.com/browse/OCPBUGS-85199): [release-4.22] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3683) [#3683](https://github.com/openshift-assisted/assisted-installer-ui/pull/3683)
* Remove 2 node arbiter option from the control plane dropdown option (#3702) [#3702](https://github.com/openshift-assisted/assisted-installer-ui/pull/3702)
* [OCPBUGS-85220](https://issues.redhat.com/browse/OCPBUGS-85220), [OCPBUGS-85222](https://issues.redhat.com/browse/OCPBUGS-85222), [OCPBUGS-85224](https://issues.redhat.com/browse/OCPBUGS-85224), [OCPBUGS-85226](https://issues.redhat.com/browse/OCPBUGS-85226), [OCPBUGS-85228](https://issues.redhat.com/browse/OCPBUGS-85228): Bump axios to ^1.15.1 (#3693) [#3693](https://github.com/openshift-assisted/assisted-installer-ui/pull/3693)
* [OCPBUGS-84272](https://issues.redhat.com/browse/OCPBUGS-84272): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3638) [#3638](https://github.com/openshift-assisted/assisted-installer-ui/pull/3638)
* Update OWNERS file (#3660) [#3660](https://github.com/openshift-assisted/assisted-installer-ui/pull/3660)
* NO-ISSUE: Update translation files to match new i18next format (#3658) [#3658](https://github.com/openshift-assisted/assisted-installer-ui/pull/3658)
* chore(deps): update dependency rimraf to v6 (#3564) [#3564](https://github.com/openshift-assisted/assisted-installer-ui/pull/3564)
* chore(deps): update konflux references (#3562) [#3562](https://github.com/openshift-assisted/assisted-installer-ui/pull/3562)
* chore(deps): update konflux references (#3561) [#3561](https://github.com/openshift-assisted/assisted-installer-ui/pull/3561)
* chore(deps): update module golang.org/x/sys to v0.43.0 (#3492) [#3492](https://github.com/openshift-assisted/assisted-installer-ui/pull/3492)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775724628 (#3560) [#3560](https://github.com/openshift-assisted/assisted-installer-ui/pull/3560)
* chore(deps): update dependency qs to v6.15.1 (#3559) [#3559](https://github.com/openshift-assisted/assisted-installer-ui/pull/3559)
* chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3 (#3539) [#3539](https://github.com/openshift-assisted/assisted-installer-ui/pull/3539)
* chore(deps): update dependency msw to v2 (#3557) [#3557](https://github.com/openshift-assisted/assisted-installer-ui/pull/3557)
* chore(deps): update dependency concurrently to v9 (#3554) [#3554](https://github.com/openshift-assisted/assisted-installer-ui/pull/3554)
* chore(deps): update dependency @openapitools/openapi-generator-cli to v2.31.1 (#3534) [#3534](https://github.com/openshift-assisted/assisted-installer-ui/pull/3534)
* chore(deps): update dependency typescript to v5.9.3 (#3489) [#3489](https://github.com/openshift-assisted/assisted-installer-ui/pull/3489)
* chore(deps): update dependency @types/node to v24 (#3543) [#3543](https://github.com/openshift-assisted/assisted-installer-ui/pull/3543)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775651161 (#3548) [#3548](https://github.com/openshift-assisted/assisted-installer-ui/pull/3548)
* chore(deps): update dependency i18next-parser to v9 (#3556) [#3556](https://github.com/openshift-assisted/assisted-installer-ui/pull/3556)
* Bump basic-ftp from 5.2.0 to 5.2.1 (#3552) [#3552](https://github.com/openshift-assisted/assisted-installer-ui/pull/3552)
* chore(deps): update dependency axios to v1.15.0 (#3551) [#3551](https://github.com/openshift-assisted/assisted-installer-ui/pull/3551)
* chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.0 (#3550) [#3550](https://github.com/openshift-assisted/assisted-installer-ui/pull/3550)
* [MGMT-23313](https://issues.redhat.com/browse/MGMT-23313): long text breaks table layout (#3545) [#3545](https://github.com/openshift-assisted/assisted-installer-ui/pull/3545)
* Bump vite from 5.4.21 to 6.4.2 (#3547) [#3547](https://github.com/openshift-assisted/assisted-installer-ui/pull/3547)
* chore(deps): update dependency eslint-plugin-import to v2.32.0 (#3475) [#3475](https://github.com/openshift-assisted/assisted-installer-ui/pull/3475)
* fix(deps): update dependency monaco-editor to v0.55.1 (#3505) [#3505](https://github.com/openshift-assisted/assisted-installer-ui/pull/3505)
* fix(deps): update dependency cypress to v13.17.0 (#3500) [#3500](https://github.com/openshift-assisted/assisted-installer-ui/pull/3500)
* fix(deps): update dependency react-monaco-editor to v0.59.0 (#3537) [#3537](https://github.com/openshift-assisted/assisted-installer-ui/pull/3537)
* chore(deps): update dependency dpdm to v3.15.1 (#3473) [#3473](https://github.com/openshift-assisted/assisted-installer-ui/pull/3473)
* chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.3 (#3471) [#3471](https://github.com/openshift-assisted/assisted-installer-ui/pull/3471)
* chore(deps): update dependency axios to v1.14.0 (#3536) [#3536](https://github.com/openshift-assisted/assisted-installer-ui/pull/3536)
* chore(deps): update dependency @types/eslint to v9 (#3541) [#3541](https://github.com/openshift-assisted/assisted-installer-ui/pull/3541)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/19e469ff37880eb24ae3ec6deaedf09b1cd861b2...2c9007c648cc6395a885c3a563cfeda8dff5c82b)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/113794d5b89d0caa153fe763d42627cfe0c2f845)

* [OCPBUGS-84141](https://issues.redhat.com/browse/OCPBUGS-84141): Update 4.22 Konflux files [#295](https://github.com/openshift/agent-installer-utils/pull/295)
* [OCPBUGS-83734](https://issues.redhat.com/browse/OCPBUGS-83734): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-22 [#291](https://github.com/openshift/agent-installer-utils/pull/291)
* [OCPBUGS-82537](https://issues.redhat.com/browse/OCPBUGS-82537): update konflux references [#274](https://github.com/openshift/agent-installer-utils/pull/274)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/0df8de22b48eddb3bee026619b43ee582d07ce04...113794d5b89d0caa153fe763d42627cfe0c2f845)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/905f4a9f558075b7957e44dabd255410022b55ad)

* OCPBUGS-83899,UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.10.3 into release-4.22 [#603](https://github.com/openshift/cluster-api-provider-aws/pull/603)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/2d7aa679a7847b8831f4a14e84154170d33574ed...905f4a9f558075b7957e44dabd255410022b55ad)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/51d6bc760234ffccb0348937a5cfd70b326119b9)

* [OCPBUGS-83900](https://issues.redhat.com/browse/OCPBUGS-83900): UPSTREAM: 2911: bump google.golang.org/grpc v1.80.0 to fix CVE-2026-33186 [#316](https://github.com/openshift/aws-ebs-csi-driver/pull/316)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/0927af1c1397b6f3c7545c715e1a87e0263ae2bf...51d6bc760234ffccb0348937a5cfd70b326119b9)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/03efa661bf0a53129259fb4e355584ac5a5d4fb7)

* [OCPBUGS-85116](https://issues.redhat.com/browse/OCPBUGS-85116): Mount writable /tmp in SMB CSI driver [#550](https://github.com/openshift/csi-operator/pull/550)
* [OCPBUGS-84243](https://issues.redhat.com/browse/OCPBUGS-84243): [release-4.22] Add VolumeAttributesClass e2e test manifests for Azure disk [#544](https://github.com/openshift/csi-operator/pull/544)
* [Full changelog](https://github.com/openshift/csi-operator/compare/8253452c39841b626cedd0b42dc0449943ccf938...03efa661bf0a53129259fb4e355584ac5a5d4fb7)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c)

* [OCPBUGS-85125](https://issues.redhat.com/browse/OCPBUGS-85125): Fixed broken test and simplified some logic [#184](https://github.com/openshift/machine-api-provider-aws/pull/184)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/37a067230cbad4997dcf1d2c16685e36b6991c9e...1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3)

* [OCPBUGS-83906](https://issues.redhat.com/browse/OCPBUGS-83906): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.1 (dbeb413) into release-4.22 [#381](https://github.com/openshift/cluster-api-provider-azure/pull/381)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/de16e88406265ae154e18bc06e973579ef249cfa...a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/799ce30e63a4dd3ac74b391e494dc8b50066644f)

* [OCPBUGS-85193](https://issues.redhat.com/browse/OCPBUGS-85193): check for node name in waitForDiskManagedByTobeRemoved [#146](https://github.com/openshift/azure-disk-csi-driver/pull/146)
* UPSTREAM: 3569: OCPBUGS-83425: Bump grpc to v1.79.3 [#136](https://github.com/openshift/azure-disk-csi-driver/pull/136)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/950b1622c43e9c41a38354efb7bfa0d2aba50cdb...799ce30e63a4dd3ac74b391e494dc8b50066644f)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/403f856e29605126b2711a1bfe7a4f6c276b344d)

* UPSTREAM: 3023: OCPBUGS-83329: Bump grpc to v1.79.3 [#126](https://github.com/openshift/azure-file-csi-driver/pull/126)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/c481e92ba74550bbd3134a9ae92ccef31de7f60c...403f856e29605126b2711a1bfe7a4f6c276b344d)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36)

* [OCPBUGS-83879](https://issues.redhat.com/browse/OCPBUGS-83879): Bump grpc package for CVE fix in 4.22 [#27](https://github.com/openshift/azure-service-operator/pull/27)
* [OCPBUGS-84333](https://issues.redhat.com/browse/OCPBUGS-84333): Updating ose-azure-service-operator-container image to be consistent with ART for 4.22 [#25](https://github.com/openshift/azure-service-operator/pull/25)
* [OCPBUGS-83835](https://issues.redhat.com/browse/OCPBUGS-83835): UPSTREAM: &lt;carry&gt;: add openshift/e2e-tests.sh [#23](https://github.com/openshift/azure-service-operator/pull/23)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8...b44d444422f5a7eb21b9ca65f3975a2d13ec9b36)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45)

* [OCPBUGS-84394](https://issues.redhat.com/browse/OCPBUGS-84394): github.com/go-jose/go-jose/v4 v4.1.4 [#47](https://github.com/openshift/azure-workload-identity/pull/47)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/81a256e668a054385d4a27a393afd77148f268b0...a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b8a967b9336275a333e96a658dcccebbc0fb8fea)

* [OCPBUGS-84701](https://issues.redhat.com/browse/OCPBUGS-84701): vSphere - Missing unit tests to cover polarion workitems [#10526](https://github.com/openshift/installer/pull/10526)
* [OCPBUGS-84663](https://issues.redhat.com/browse/OCPBUGS-84663): add unit tests for Nutanix to replace polarion workitems [#10525](https://github.com/openshift/installer/pull/10525)
* [OCPBUGS-84643](https://issues.redhat.com/browse/OCPBUGS-84643): Update RHCOS-release-4.22 bootimage metadata to 10.2.20260423-0 / 9.8.20260428-0 [#10523](https://github.com/openshift/installer/pull/10523)
* [OCPBUGS-83611](https://issues.redhat.com/browse/OCPBUGS-83611): PowerVS: update release 4.22 CAPI to v0.12.2 [#10509](https://github.com/openshift/installer/pull/10509)
* [MULTIARCH-5854](https://issues.redhat.com/browse/MULTIARCH-5854): implements retry-after logic to limit failures [#10421](https://github.com/openshift/installer/pull/10421)
* [OCPBUGS-78151](https://issues.redhat.com/browse/OCPBUGS-78151): Add provisioningNetworkGateway field to install-config [#10387](https://github.com/openshift/installer/pull/10387)
* [OCPBUGS-77965](https://issues.redhat.com/browse/OCPBUGS-77965): Update RHCOS-release-4.22 bootimage metadata to 10.2.20260405-0 / 9.8.20260403-0 [#10482](https://github.com/openshift/installer/pull/10482)
* [OCPBUGS-77917](https://issues.redhat.com/browse/OCPBUGS-77917): PowerVS: Use short regions and provide a default resource group in survey [#10369](https://github.com/openshift/installer/pull/10369)
* [CORS-3900](https://issues.redhat.com/browse/CORS-3900): Add IPv6 frontend IP configurations for dual-stack [#10328](https://github.com/openshift/installer/pull/10328)
* [MCO-2135](https://issues.redhat.com/browse/MCO-2135): Label Machines, MachineSets, and ControlPaneMachineSets with OSStream labels [#10426](https://github.com/openshift/installer/pull/10426)
* [OCPBUGS-81509](https://issues.redhat.com/browse/OCPBUGS-81509): fix ASO CRD duplication [#10451](https://github.com/openshift/installer/pull/10451)
* [OCPBUGS-76468](https://issues.redhat.com/browse/OCPBUGS-76468): PowerVS:: SSH key must be RSA [#10289](https://github.com/openshift/installer/pull/10289)
* no-jira: PowerVS: add mjturek and hamzy to approvers list [#10483](https://github.com/openshift/installer/pull/10483)
* [OCPEDGE-2072](https://issues.redhat.com/browse/OCPEDGE-2072): bump(ocp/api): pull in latest for DualReplica promotion [#10471](https://github.com/openshift/installer/pull/10471)
* [OCPBUGS-77830](https://issues.redhat.com/browse/OCPBUGS-77830): skip redirect when validating endpoint accessibility [#10360](https://github.com/openshift/installer/pull/10360)
* [OCPBUGS-81622](https://issues.redhat.com/browse/OCPBUGS-81622): Collect bootstrap service records in agent-gather [#10457](https://github.com/openshift/installer/pull/10457)
* [AGENT-1448](https://issues.redhat.com/browse/AGENT-1448): Add IRI registry authentication support [#10389](https://github.com/openshift/installer/pull/10389)
* [Full changelog](https://github.com/openshift/installer/compare/f8a1613fc01e0b5de8ee9906e8aa067ba2fdb98e...b8a967b9336275a333e96a658dcccebbc0fb8fea)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/66dee73f66c4f048c333c6a77d76871872027896)

* NO-JIRA: claude: Split tester agent away from code-reviewer [#2250](https://github.com/openshift/oc/pull/2250)
* [OCPBUGS-77845](https://issues.redhat.com/browse/OCPBUGS-77845): Fix extraction of gated manifests using --install-config [#2249](https://github.com/openshift/oc/pull/2249)
* [Full changelog](https://github.com/openshift/oc/compare/075cd278d1e62cf49b266e157891967bda16079d...66dee73f66c4f048c333c6a77d76871872027896)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c23bddf58e561b725ab5eb012252091e7a472084)

* [OCPBUGS-84398](https://issues.redhat.com/browse/OCPBUGS-84398): github.com/go-jose/go-jose/v4 v4.1.4 [#1020](https://github.com/openshift/cloud-credential-operator/pull/1020)
* [OCPBUGS-83625](https://issues.redhat.com/browse/OCPBUGS-83625): test-ext: hypershift skip CCO metrics endpoint validation [#1013](https://github.com/openshift/cloud-credential-operator/pull/1013)
* [CCO-738](https://issues.redhat.com/browse/CCO-738), [CCO-739](https://issues.redhat.com/browse/CCO-739), [CCO-740](https://issues.redhat.com/browse/CCO-740): Overhaul status logic to correctly match spec [#1008](https://github.com/openshift/cloud-credential-operator/pull/1008)
* [CCO-787](https://issues.redhat.com/browse/CCO-787): use apiserver tls config [#965](https://github.com/openshift/cloud-credential-operator/pull/965)
* [CCO-824](https://issues.redhat.com/browse/CCO-824): feat(gcp): add key-storage-method flag for workload identity providers [#1004](https://github.com/openshift/cloud-credential-operator/pull/1004)
* [CCO-779](https://issues.redhat.com/browse/CCO-779): e2e for removing kube-rbac-proxy container (CCO-779) [#991](https://github.com/openshift/cloud-credential-operator/pull/991)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d8b4ae016b4948ceef1620b626e16f11ba7e8130...c23bddf58e561b725ab5eb012252091e7a472084)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88)

* [OCPBUGS-85105](https://issues.redhat.com/browse/OCPBUGS-85105): Fix OAuth page showing OKD branding instead of OpenShift [#888](https://github.com/openshift/cluster-authentication-operator/pull/888)
* [OCPBUGS-84954](https://issues.redhat.com/browse/OCPBUGS-84954): Fix terminationMessagePolicy on network policy e2e test pods [#884](https://github.com/openshift/cluster-authentication-operator/pull/884)
* [CNTRLPLANE-2625](https://issues.redhat.com/browse/CNTRLPLANE-2625): Add Auth network policy e2e cases [#831](https://github.com/openshift/cluster-authentication-operator/pull/831)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9d60ca2ef96e8f208adbfbc51cabd624018212c7...5a44cc2a8c36d144f8782e23f47bc31e2e4ead88)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/521e545fb92e7138b2ce2bc05f871f53a6c112fb)

* [OCPBUGS-84131](https://issues.redhat.com/browse/OCPBUGS-84131): [release-4.22] UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references [#419](https://github.com/openshift/kubernetes-autoscaler/pull/419)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/05bcec5a83ea3d9afc3a342a1b8878e30c19ef94...521e545fb92e7138b2ce2bc05f871f53a6c112fb)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/260ea1b5967f47768a0727e8c84d451dc9de5ced)

* [OCPBUGS-65578](https://issues.redhat.com/browse/OCPBUGS-65578): report Progressing=True on version upgrade [#366](https://github.com/openshift/cluster-autoscaler-operator/pull/366)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/478f8905bca879837e72b1cf77cabeddd6f105a1...260ea1b5967f47768a0727e8c84d451dc9de5ced)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/8283556016a8018642899fd1846bab127c29f4ef)

* [OCPBUGS-84936](https://issues.redhat.com/browse/OCPBUGS-84936): Fix webhook server not starting due to missing WithValidator [#598](https://github.com/openshift/cluster-baremetal-operator/pull/598)
* [OCPBUGS-84924](https://issues.redhat.com/browse/OCPBUGS-84924): Bind the plain HTTP 8080 metrics port to localhost [#596](https://github.com/openshift/cluster-baremetal-operator/pull/596)
* [OCPBUGS-78151](https://issues.redhat.com/browse/OCPBUGS-78151): Add provisioningNetworkGateway field to CBO [#575](https://github.com/openshift/cluster-baremetal-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/62d32143962b5f1446c64c06ce7e5dcbdf96abd8...8283556016a8018642899fd1846bab127c29f4ef)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/f1718df9c13b0cee5ede1b6354e29acc466607a4)

* OCPBUGS-83913,UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.7 (b5fa593) into release-4.22 [#285](https://github.com/openshift/cluster-api/pull/285)
* [OCPBUGS-83759](https://issues.redhat.com/browse/OCPBUGS-83759), [OCPCLOUD-3419](https://issues.redhat.com/browse/OCPCLOUD-3419): Adopt IPAM CRDs on upgrade [#280](https://github.com/openshift/cluster-api/pull/280)
* [Full changelog](https://github.com/openshift/cluster-api/compare/c11cf5d40d83b88479be4e8dd121801a71b3f0e0...f1718df9c13b0cee5ede1b6354e29acc466607a4)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/6c7ba9cea681f90fbab82d9e2e222e5afbacd885)

* [OCPBUGS-84942](https://issues.redhat.com/browse/OCPBUGS-84942): fix: remove retired Microsoft.ClassicStorage permission [#548](https://github.com/openshift/cluster-capi-operator/pull/548)
* [OCPBUGS-83917](https://issues.redhat.com/browse/OCPBUGS-83917): Bump grpc package for CVE fix in 4.22 [#539](https://github.com/openshift/cluster-capi-operator/pull/539)
* [OCPBUGS-84365](https://issues.redhat.com/browse/OCPBUGS-84365): Fix e2e flake when workers are in us-west-2b [#530](https://github.com/openshift/cluster-capi-operator/pull/530)
* NO-JIRA: Optimize envtest CRD loading by specifying necessary files explicitly [#520](https://github.com/openshift/cluster-capi-operator/pull/520)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Remove capiinstaller controller [#507](https://github.com/openshift/cluster-capi-operator/pull/507)
* [OCPCLOUD-3419](https://issues.redhat.com/browse/OCPCLOUD-3419): Add adopt-existing annotation [#514](https://github.com/openshift/cluster-capi-operator/pull/514)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/eb4433469646f20d809e51fff94b55300de9bc28...6c7ba9cea681f90fbab82d9e2e222e5afbacd885)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/1eccfe33d83686e74769ea196660b8d09d249b04)

* NO-JIRA: fix: report all degraded controller conditions instead of first only#444 [#444](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/444)
* [OCPCLOUD-3348](https://issues.redhat.com/browse/OCPCLOUD-3348): Honor TLSAdherence [#440](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/440)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/4f5632ab56f63660054cd60a6fe045d2712ba495...1eccfe33d83686e74769ea196660b8d09d249b04)


### [cluster-config-api](https://github.com/openshift/api/tree/694421e64aeeae4374e7e7394014ad40ab5a1f30)

* Promote EVPN Feature Gate to GA [#2826](https://github.com/openshift/api/pull/2826)
* [OCPBUGS-85102](https://issues.redhat.com/browse/OCPBUGS-85102): Add labelSelector to MachineSet status for scale subresource [#2831](https://github.com/openshift/api/pull/2831)
* [OCPBUGS-83846](https://issues.redhat.com/browse/OCPBUGS-83846): Add component names, manifestSubstitutions, and observedGeneration to CAPI revisions [#2819](https://github.com/openshift/api/pull/2819)
* [OCPBUGS-83768](https://issues.redhat.com/browse/OCPBUGS-83768): extend supported values for MCN IRI image status field [#2817](https://github.com/openshift/api/pull/2817)
* [OCPBUGS-83755](https://issues.redhat.com/browse/OCPBUGS-83755): fix(config/v1): define constants for authentication types as typed constants [#2816](https://github.com/openshift/api/pull/2816)
* [OCPBUGS-68358](https://issues.redhat.com/browse/OCPBUGS-68358): Disable PSA for 4.22 [#2802](https://github.com/openshift/api/pull/2802)
* [MON-4035](https://issues.redhat.com/browse/MON-4035): Add ThanosQuerierConfig to ClusterMonitoring API [#2769](https://github.com/openshift/api/pull/2769)
* [NE-2520](https://issues.redhat.com/browse/NE-2520): Promote GatewayAPIWithoutOLM to GA [#2772](https://github.com/openshift/api/pull/2772)
* [OCPEDGE-2197](https://issues.redhat.com/browse/OCPEDGE-2197): Promote TNF (Dual Replica) to default [#2723](https://github.com/openshift/api/pull/2723)
* [OCPBUGS-81627](https://issues.redhat.com/browse/OCPBUGS-81627): Load ClusterResourceQuota CRD before CVO manifests [#2796](https://github.com/openshift/api/pull/2796)
* [OCPEDGE-2492](https://issues.redhat.com/browse/OCPEDGE-2492): feat: promote pacemaker to v1 in prep for tnf [#2792](https://github.com/openshift/api/pull/2792)
* Update verify-feature-promotion HTML output to sort entries and fix overflow [#2793](https://github.com/openshift/api/pull/2793)
* [Full changelog](https://github.com/openshift/api/compare/ad9eb11110b6e704efa5000c12c5fb5db1685e8a...694421e64aeeae4374e7e7394014ad40ab5a1f30)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/e0c2428e4618493ad9db0681e3b91444746ddf2c)

* [OCPEDGE-2071](https://issues.redhat.com/browse/OCPEDGE-2071): bump(ocp/api): pull in latest for DualReplica promotion [#480](https://github.com/openshift/cluster-config-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/7253dceba215f03434b73d23d9efa70db46507ee...e0c2428e4618493ad9db0681e3b91444746ddf2c)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/108f37f0e378accc322cbeb68136ec500ec35b94)

* [OCPBUGS-82535](https://issues.redhat.com/browse/OCPBUGS-82535): Fix PDB unhealthyPodEvictionPolicy field name [#271](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/271)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/98d8223ebe55a0ddc10bb485e7603deb2c0acbb9...108f37f0e378accc322cbeb68136ec500ec35b94)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3698b93d071f8b279b1721f90ced478f0b90b426)

* NO-JIRA: Apply `go fix` changes [#1589](https://github.com/openshift/cluster-etcd-operator/pull/1589)
* NO-JIRA: Remove unused lib/resourcemerge package [#1590](https://github.com/openshift/cluster-etcd-operator/pull/1590)
* [OCPEDGE-2495](https://issues.redhat.com/browse/OCPEDGE-2495): upkeep: bump ocp/api ocp/client-go [#1591](https://github.com/openshift/cluster-etcd-operator/pull/1591)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): pacemaker CronJob: tune history limit and Job TTL [#1581](https://github.com/openshift/cluster-etcd-operator/pull/1581)
* [OCPEDGE-2495](https://issues.redhat.com/browse/OCPEDGE-2495): feat: update pacemaker in preparation for DualReplica promotion [#1587](https://github.com/openshift/cluster-etcd-operator/pull/1587)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/e05708bc8a68e777fbff1e27d918cbb1af1b8649...3698b93d071f8b279b1721f90ced478f0b90b426)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/ad611da1488fdf6604a66d0ac9da5ccf39d79d65)

* [OCPBUGS-83692](https://issues.redhat.com/browse/OCPBUGS-83692): Allow longer window before going Degraded [#1323](https://github.com/openshift/cluster-image-registry-operator/pull/1323)
* [OCPBUGS-83650](https://issues.redhat.com/browse/OCPBUGS-83650): CNTRLPLANE-2660:e2e testing automation: Image Registry network policy [#1322](https://github.com/openshift/cluster-image-registry-operator/pull/1322)
* [OCPBUGS-83265](https://issues.redhat.com/browse/OCPBUGS-83265): ImageConfigController: add inertia before ImageConfigControllerDegraded [#1321](https://github.com/openshift/cluster-image-registry-operator/pull/1321)
* [CNTRLPLANE-3184](https://issues.redhat.com/browse/CNTRLPLANE-3184): Create network policies for image-registry components [#1301](https://github.com/openshift/cluster-image-registry-operator/pull/1301)
* [OCPBUGS-81750](https://issues.redhat.com/browse/OCPBUGS-81750): Use deterministic S3 bucket naming to prevent orphaned buckets [#1317](https://github.com/openshift/cluster-image-registry-operator/pull/1317)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/e203e6d0e35b65b4b4b01a16b4d3a77d62ed1143...ad611da1488fdf6604a66d0ac9da5ccf39d79d65)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/52c2b0465ecf1dcdcd57c010b9b15ac28f62a2ba)

* [OCPBUGS-85024](https://issues.redhat.com/browse/OCPBUGS-85024): TestUnsupportedConfigOverride: Ignore featuregate and defaults [#1432](https://github.com/openshift/cluster-ingress-operator/pull/1432)
* [OCPBUGS-85064](https://issues.redhat.com/browse/OCPBUGS-85064): Allow host network connections to the ingress canary [#1433](https://github.com/openshift/cluster-ingress-operator/pull/1433)
* [OCPBUGS-84841](https://issues.redhat.com/browse/OCPBUGS-84841): isFIPSEnabled: Check FIPS_ENABLED env. var. first [#1429](https://github.com/openshift/cluster-ingress-operator/pull/1429)
* [OCPBUGS-81550](https://issues.redhat.com/browse/OCPBUGS-81550): AWS, Azure and GCP ClusterHostedDNS: Add Ingress LB IPs to Infra CR after masters up [#1411](https://github.com/openshift/cluster-ingress-operator/pull/1411)
* [OCPBUGS-76609](https://issues.redhat.com/browse/OCPBUGS-76609): Do not take over OSSM subscription [#1398](https://github.com/openshift/cluster-ingress-operator/pull/1398)
* [NE-2332](https://issues.redhat.com/browse/NE-2332): Implement ROUTER_CURVES environment variable [#1409](https://github.com/openshift/cluster-ingress-operator/pull/1409)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/3c1da4b8b3d4a9fbaf033f4324b5a0ffe2fbf633...52c2b0465ecf1dcdcd57c010b9b15ac28f62a2ba)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1741228b58952244aceb8e74d35f918431717191)

* [OCPBUGS-85260](https://issues.redhat.com/browse/OCPBUGS-85260): operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization [#2142](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2142)
* [OCPBUGS-84536](https://issues.redhat.com/browse/OCPBUGS-84536): Bump library-go [#2131](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2131)
* [OCPBUGS-83770](https://issues.redhat.com/browse/OCPBUGS-83770): Allow setting the oauthMetadata when auth type is None [#2112](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2112)
* [OCPBUGS-68365](https://issues.redhat.com/browse/OCPBUGS-68365): revert dev cert rotation [#2017](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2017)
* [CNTRLPLANE-2698](https://issues.redhat.com/browse/CNTRLPLANE-2698): add network policies for apiserver operator and operands [#2029](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2029)
* [OCPBUGS-23366](https://issues.redhat.com/browse/OCPBUGS-23366): bindata/bootkube: Remove configmap-csr-controller-ca.yaml [#2076](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2076)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/360d3fee5c01437f857d761cff755f8b2e5004b3...1741228b58952244aceb8e74d35f918431717191)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/95150ed5dbf11370b4a06e6959c77efa13768561)

* [OCPBUGS-84560](https://issues.redhat.com/browse/OCPBUGS-84560): CNTRLPLANE-3107: e2e testing automation Create network network policy test cases [#931](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/931)
* [CNTRLPLANE-3211](https://issues.redhat.com/browse/CNTRLPLANE-3211): enable configurable PKI for managed certificate rotation [#925](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/925)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/b646f5481a723f5613ea45cd4a49dd716f5ae16c...95150ed5dbf11370b4a06e6959c77efa13768561)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/51ea59abd057d0cef56b29b8a74efc28411d5427)

* [OCPBUGS-83736](https://issues.redhat.com/browse/OCPBUGS-83736): add /var/run/kubernetes as emptyDir [#640](https://github.com/openshift/cluster-kube-scheduler-operator/pull/640)
* [CNTRLPLANE-3219](https://issues.redhat.com/browse/CNTRLPLANE-3219): vendor: bump library-go, api, client-go for configurable PKI [#636](https://github.com/openshift/cluster-kube-scheduler-operator/pull/636)
* [CNTRLPLANE-2756](https://issues.redhat.com/browse/CNTRLPLANE-2756): Add operator and operand network policies [#629](https://github.com/openshift/cluster-kube-scheduler-operator/pull/629)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/ddbfddb8a0c77b03c1d7c994991caa031d99c330...51ea59abd057d0cef56b29b8a74efc28411d5427)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/32ad4fc38c2361033fde8e95039c4fe3a350ca38)

* [OCPBUGS-84312](https://issues.redhat.com/browse/OCPBUGS-84312): schedule migrator pods on control-plane nodes [#162](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/162)
* [CNTRLPLANE-3055](https://issues.redhat.com/browse/CNTRLPLANE-3055): Migrate go standard casee to ote [#156](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/156)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/93c77b0461026649724fc5299d8b74ac79ca3ef6...32ad4fc38c2361033fde8e95039c4fe3a350ca38)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/f6a7969c5c070e4deb6136c3561af60ab44780e1)

* [MON-4543](https://issues.redhat.com/browse/MON-4543), [OPNET-765](https://issues.redhat.com/browse/OPNET-765): Add kubernetes-nmstate telemetry metrics to allowlist [#2855](https://github.com/openshift/cluster-monitoring-operator/pull/2855)
* [OCPBUGS-74645](https://issues.redhat.com/browse/OCPBUGS-74645): delay alert dispatch in Alertmanager [#2848](https://github.com/openshift/cluster-monitoring-operator/pull/2848)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/03eab5156b417210797f0fc50fcc0f2c4cf4f191...f6a7969c5c070e4deb6136c3561af60ab44780e1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/e20b9cb9a0b3bc293e622ef1caf70a813710ffa8)

* [OCPBUGS-83637](https://issues.redhat.com/browse/OCPBUGS-83637): only report Progressing for active network rollouts [#2962](https://github.com/openshift/cluster-network-operator/pull/2962)
* [CORENET-6543](https://issues.redhat.com/browse/CORENET-6543): Align VTEP CRD additionalPrinterColumns with upstream [#2957](https://github.com/openshift/cluster-network-operator/pull/2957)
* [CNF-21001](https://issues.redhat.com/browse/CNF-21001): multus: MultiNetworkPolicy nftables [#2883](https://github.com/openshift/cluster-network-operator/pull/2883)
* [CORENET-6816](https://issues.redhat.com/browse/CORENET-6816): Add NetworkPolicies for CNO and its operands [#2892](https://github.com/openshift/cluster-network-operator/pull/2892)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f3e41c5bf61313ae7408f15b263140bfc184b7d6...e20b9cb9a0b3bc293e622ef1caf70a813710ffa8)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/74d2449d12e30f58cdaf46bd87a96f10dd4883d1)

* [OCPBUGS-85020](https://issues.redhat.com/browse/OCPBUGS-85020): e2e: Add irqbalance StartLimitBurst &gt;= 100 config test [#1506](https://github.com/openshift/cluster-node-tuning-operator/pull/1506)
* NO-JIRA: Bump ghw dependency [#1492](https://github.com/openshift/cluster-node-tuning-operator/pull/1492)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/1d3e91fd6b0af04e048a9523182321653572440a...74d2449d12e30f58cdaf46bd87a96f10dd4883d1)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/d131450b2645623089b26353a309015c95c8871c)

* [OPRUN-4521](https://issues.redhat.com/browse/OPRUN-4521): handle OCP 4.23/5.0 upgrade boundary [#184](https://github.com/openshift/cluster-olm-operator/pull/184)
* [OCPBUGS-77899](https://issues.redhat.com/browse/OCPBUGS-77899): Fix wait logic to handle NewOLM enabled on Default Feature [#193](https://github.com/openshift/cluster-olm-operator/pull/193)
* NO-ISSUE: remove no-op os.Remove call in TestRenderHelmTemplate [#192](https://github.com/openshift/cluster-olm-operator/pull/192)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/4a37804d95b6253cb23130728b5150c17f2c9455...d131450b2645623089b26353a309015c95c8871c)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6)

* [OCPBUGS-85097](https://issues.redhat.com/browse/OCPBUGS-85097): e2e network policy tests [#687](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/687)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/855d6f12ab80cc4334233ef77a9bbf6d2da4349b...1924cf6f12c632d56f1d41341f08ff9ff6eae7d6)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a)

* [OCPBUGS-81472](https://issues.redhat.com/browse/OCPBUGS-81472): Prevent possibility of running controllers against empty informer caches [#426](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/426)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e0d28ec9e1c91b0b72ff66c98f7a3b126f4480ad...e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/317b21a930d074951c27c45c77c02ea211c43f14)

* [CNTRLPLANE-3176](https://issues.redhat.com/browse/CNTRLPLANE-3176): implements operator tls config compliance [#688](https://github.com/openshift/cluster-samples-operator/pull/688)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/eeac6ba8ddbe5cc6d3a403293581648affdf6566...317b21a930d074951c27c45c77c02ea211c43f14)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e9c1c39e21ec353ff5993d386c42bc1b15063dbf)

* [OTA-1933](https://issues.redhat.com/browse/OTA-1933): pkg/risk: Refactor alerts into a generic update-risk interface [#1367](https://github.com/openshift/cluster-version-operator/pull/1367)
* NO-JIRA: All CVO manifests in payload should be included [#1337](https://github.com/openshift/cluster-version-operator/pull/1337)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/26e376532660fd7fc0a636e4808e498c60dd443d...e9c1c39e21ec353ff5993d386c42bc1b15063dbf)


### [console](https://github.com/openshift/console/tree/052918e85b8385795d26474b545dcadc81969a6b)

* [OCPBUGS-85505](https://issues.redhat.com/browse/OCPBUGS-85505): Add Suspense boundary to LazyRoutePage for plugin routes [#16438](https://github.com/openshift/console/pull/16438)
* [OCPBUGS-85494](https://issues.redhat.com/browse/OCPBUGS-85494): Prevent binary secret data corruption when editing [#16435](https://github.com/openshift/console/pull/16435)
* NO-JIRA: enable multi-architecture yarn builds [#16415](https://github.com/openshift/console/pull/16415)
* [OCPBUGS-85196](https://issues.redhat.com/browse/OCPBUGS-85196): Remove `@console` imports from SDK dist [#16407](https://github.com/openshift/console/pull/16407)
* [OCPBUGS-84843](https://issues.redhat.com/browse/OCPBUGS-84843): i18n upload/download routine task - version 4.22 [#16382](https://github.com/openshift/console/pull/16382)
* [OCPBUGS-85114](https://issues.redhat.com/browse/OCPBUGS-85114): Fix SDK publish workflow for Yarn Berry [#16403](https://github.com/openshift/console/pull/16403)
* [OCPBUGS-84963](https://issues.redhat.com/browse/OCPBUGS-84963): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16394](https://github.com/openshift/console/pull/16394)
* [OCPBUGS-84556](https://issues.redhat.com/browse/OCPBUGS-84556): re-enable helm-release.feature [#16358](https://github.com/openshift/console/pull/16358)
* [OCPBUGS-84916](https://issues.redhat.com/browse/OCPBUGS-84916): Remove PII from events [#16393](https://github.com/openshift/console/pull/16393)
* [OCPBUGS-84811](https://issues.redhat.com/browse/OCPBUGS-84811): fix Helm list page redirect after upgrade/rollback [#16380](https://github.com/openshift/console/pull/16380)
* [OCPBUGS-84848](https://issues.redhat.com/browse/OCPBUGS-84848): Fix ConsoleDataView filter order: Name and Label should appear first [#16383](https://github.com/openshift/console/pull/16383)
* [OCPBUGS-84807](https://issues.redhat.com/browse/OCPBUGS-84807): Fix race conditions in create-namespace Cypress tests [#16379](https://github.com/openshift/console/pull/16379)
* [OCPBUGS-84681](https://issues.redhat.com/browse/OCPBUGS-84681): Fix crash when switching language to English [#16373](https://github.com/openshift/console/pull/16373)
* [OCPBUGS-84216](https://issues.redhat.com/browse/OCPBUGS-84216): Fix create visual connector in Topology [#16314](https://github.com/openshift/console/pull/16314)
* [OCPBUGS-84345](https://issues.redhat.com/browse/OCPBUGS-84345): Update resolveDynamicModuleMaps to skip unavailable packages [#16342](https://github.com/openshift/console/pull/16342)
* [OCPBUGS-83546](https://issues.redhat.com/browse/OCPBUGS-83546): Fix Cypress test timeouts by using correct timeout option [#16292](https://github.com/openshift/console/pull/16292)
* [OCPBUGS-84246](https://issues.redhat.com/browse/OCPBUGS-84246): prepare for 4.22-prerelease.3 sdk publish [#16337](https://github.com/openshift/console/pull/16337)
* [OCPBUGS-84246](https://issues.redhat.com/browse/OCPBUGS-84246): 4.22 SDK fixes [#16321](https://github.com/openshift/console/pull/16321)
* [OCPBUGS-83543](https://issues.redhat.com/browse/OCPBUGS-83543): Add empty state visibility check to CRD test [#16309](https://github.com/openshift/console/pull/16309)
* [OCPBUGS-83543](https://issues.redhat.com/browse/OCPBUGS-83543): Fix race condition in CRD Cypress test [#16290](https://github.com/openshift/console/pull/16290)
* [CONSOLE-4809](https://issues.redhat.com/browse/CONSOLE-4809): Extend RTL Test Coverage for Components Migrated from Enzyme [#16249](https://github.com/openshift/console/pull/16249)
* [CONSOLE-4512](https://issues.redhat.com/browse/CONSOLE-4512), [OCPBUGS-82473](https://issues.redhat.com/browse/OCPBUGS-82473): Switch from legacy `render` to `createRoot` [#16202](https://github.com/openshift/console/pull/16202)
* [OCPBUGS-77113](https://issues.redhat.com/browse/OCPBUGS-77113): remove dev to admin links as dev monitoring views are enabled [#16163](https://github.com/openshift/console/pull/16163)
* NO-JIRA: Update Dockerfile.dev to use latest base images [#16264](https://github.com/openshift/console/pull/16264)
* [CONSOLE-5065](https://issues.redhat.com/browse/CONSOLE-5065): Refactor dynamic module import transform code [#16224](https://github.com/openshift/console/pull/16224)
* [OCPBUGS-76556](https://issues.redhat.com/browse/OCPBUGS-76556): fix Developer Sandbox telemetry [#16020](https://github.com/openshift/console/pull/16020)
* NO-JIRA: Add stefanonardo to frontend reviewers#16267 [#16267](https://github.com/openshift/console/pull/16267)
* [OCPBUGS-78904](https://issues.redhat.com/browse/OCPBUGS-78904): Mark notification drawer title for translation [#16229](https://github.com/openshift/console/pull/16229)
* [CONSOLE-3955](https://issues.redhat.com/browse/CONSOLE-3955): Migrate LogSnippet to PatternFly component [#16190](https://github.com/openshift/console/pull/16190)
* [OCPBUGS-81654](https://issues.redhat.com/browse/OCPBUGS-81654): Filter out isActionCell prop to fix React warning [#16247](https://github.com/openshift/console/pull/16247)
* [CONSOLE-5152](https://issues.redhat.com/browse/CONSOLE-5152): bump cypress to latest [#16244](https://github.com/openshift/console/pull/16244)
* [OCPBUGS-81744](https://issues.redhat.com/browse/OCPBUGS-81744): Convert cluster update status integration test to unit test [#16260](https://github.com/openshift/console/pull/16260)
* [Full changelog](https://github.com/openshift/console/compare/d0f125261b8e9ec601e83fef1e1d960ef7d86a42...052918e85b8385795d26474b545dcadc81969a6b)


### [console-operator](https://github.com/openshift/console-operator/tree/f0619391890c61e1a4ebdf5c1c0b247b30f81248)

* [OCPBUGS-79068](https://issues.redhat.com/browse/OCPBUGS-79068): Fix HelmChartRepository YAML format [#1129](https://github.com/openshift/console-operator/pull/1129)
* [Full changelog](https://github.com/openshift/console-operator/compare/4bd76c3d0a1353dabccfcb8276e90cf736ccdf89...f0619391890c61e1a4ebdf5c1c0b247b30f81248)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f146b90407764c052b7e26ee5a4da338b240eea5)

* UPSTREAM-SYNC: Sync release-4.22 with upstream release-1.35 [#381](https://github.com/openshift/cloud-provider-openstack/pull/381)
* [OCPBUGS-85241](https://issues.redhat.com/browse/OCPBUGS-85241): Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 [#392](https://github.com/openshift/cloud-provider-openstack/pull/392)
* [OCPBUGS-85239](https://issues.redhat.com/browse/OCPBUGS-85239): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 [#390](https://github.com/openshift/cloud-provider-openstack/pull/390)
* [OCPBUGS-85240](https://issues.redhat.com/browse/OCPBUGS-85240): Updating csi-driver-manila-container image to be consistent with ART for 4.22 [#391](https://github.com/openshift/cloud-provider-openstack/pull/391)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/fd31b5da11d75a7a80e7c4a6c7a56acf304e2661...f146b90407764c052b7e26ee5a4da338b240eea5)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/5a8887df841e38a71c82d78922380c6027a2b486)

* [OCPBUGS-83946](https://issues.redhat.com/browse/OCPBUGS-83946): CVE-2026-33186: bump google.golang.org/grpc to v1.79.3 [#174](https://github.com/openshift/csi-driver-nfs/pull/174)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e9f249405ad2bced3d1805dd5beda368d7f3d564...5a8887df841e38a71c82d78922380c6027a2b486)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/95a1979700f021e20879480b98b953bc382a0eaf)

* [OCPBUGS-83947](https://issues.redhat.com/browse/OCPBUGS-83947): Bump google.golang.org/grpc to v1.79.3 [#107](https://github.com/openshift/csi-external-attacher/pull/107)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/98b1f4acf9c004687ef55e9f187703768933bb56...95a1979700f021e20879480b98b953bc382a0eaf)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/3b79aefc35a504ccef3f36f6e43aafbdd3301341)

* [OCPBUGS-82033](https://issues.redhat.com/browse/OCPBUGS-82033): Bump google.golang.org/grpc to 1.79.3 [#133](https://github.com/openshift/csi-external-provisioner/pull/133)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f90c06a3113696cdb757e4b7c9dcfeb0e9dddb81...3b79aefc35a504ccef3f36f6e43aafbdd3301341)


### [docker-builder](https://github.com/openshift/builder/tree/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9)

* [OKD-322](https://issues.redhat.com/browse/OKD-322): Update Dockerfile to work on CentOS/RHEL 10 [#500](https://github.com/openshift/builder/pull/500)
* [Full changelog](https://github.com/openshift/builder/compare/711f2e6886a2afaa281524cd08327f86771f53b0...fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9)


### [docker-registry](https://github.com/openshift/image-registry/tree/9eae44fcf44142a705031fa16a613c450dbe685a)

* [OCPBUGS-84738](https://issues.redhat.com/browse/OCPBUGS-84738): pin cloud.google.com/go/storage to v1.30.1 to fix blob deletion [#470](https://github.com/openshift/image-registry/pull/470)
* [Full changelog](https://github.com/openshift/image-registry/compare/c3fa7db05e878e35ff95fcff896f716e82fdd170...9eae44fcf44142a705031fa16a613c450dbe685a)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/4d9707e182c4f8734d83ebf21e3ffcc4c38d04e9)

* [OCPBUGS-78471](https://issues.redhat.com/browse/OCPBUGS-78471): Fix OSD ILB bug [#103](https://github.com/openshift/cloud-provider-gcp/pull/103)
* [OCPCLOUD-3274](https://issues.redhat.com/browse/OCPCLOUD-3274): Merge https://github.com/kubernetes/cloud-provider-gcp:master (378730f) into main [#99](https://github.com/openshift/cloud-provider-gcp/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/c87eef5d0dfc33bc07c9b74cd68f4b5f38203c04...4d9707e182c4f8734d83ebf21e3ffcc4c38d04e9)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/663485baa799d3fc117b937f2ce3c51bd49b6761)

* [OCPBUGS-83966](https://issues.redhat.com/browse/OCPBUGS-83966): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into release-4.22 [#293](https://github.com/openshift/cluster-api-provider-gcp/pull/293)
* [OCPBUGS-84862](https://issues.redhat.com/browse/OCPBUGS-84862): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 [#286](https://github.com/openshift/cluster-api-provider-gcp/pull/286)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/37085d5287031ee68f58b165256d4104bba99886...663485baa799d3fc117b937f2ce3c51bd49b6761)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0)

* [OCPBUGS-81649](https://issues.redhat.com/browse/OCPBUGS-81649): Bump google.golang.org/grpc to v1.79.3 in release 4.22 [#108](https://github.com/openshift/gcp-pd-csi-driver/pull/108)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/2ba117405ff1cee765d42491f5863b06a1c9a2da...48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9)

* [OCPBUGS-85023](https://issues.redhat.com/browse/OCPBUGS-85023): Add test e2e manifest for images volumeSnapshotClass CSI tests [#180](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/180)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/6b00096f4a84203a69467802b846f215b4e04888...a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/6b9ddbe6e09aa225e949baecde4145208bf94c8e)

* [OCPBUGS-85415](https://issues.redhat.com/browse/OCPBUGS-85415): [release-4.22] Improve WatchList test robustness [#2663](https://github.com/openshift/kubernetes/pull/2663)
* [OCPBUGS-84640](https://issues.redhat.com/browse/OCPBUGS-84640): devicemanager: constrain topology hints to device NUMA nodes [#2656](https://github.com/openshift/kubernetes/pull/2656)
* [OCPBUGS-83607](https://issues.redhat.com/browse/OCPBUGS-83607): Bump to k8s v1.35.4 [#2646](https://github.com/openshift/kubernetes/pull/2646)
* [OCPBUGS-84055](https://issues.redhat.com/browse/OCPBUGS-84055): Update the csi-driver-host-path version to 1.17.1 [#2650](https://github.com/openshift/kubernetes/pull/2650)
* [Full changelog](https://github.com/openshift/kubernetes/compare/9193b12ab88e006723c8605bea1659bfcbe7d638...6b9ddbe6e09aa225e949baecde4145208bf94c8e)


### [hypershift](https://github.com/openshift/hypershift/tree/cf680a59c77c51f3f8a0f7994340db8ee2426645)

* [ACM-33601](https://issues.redhat.com/browse/ACM-33601): use the latest ubi9 nginx image [#8465](https://github.com/openshift/hypershift/pull/8465)
* [OCPBUGS-78988](https://issues.redhat.com/browse/OCPBUGS-78988): bump go builder and ubi images [#8457](https://github.com/openshift/hypershift/pull/8457)
* [CNTRLPLANE-2939](https://issues.redhat.com/browse/CNTRLPLANE-2939): Coordinate CRD lifecycle with Cluster CAPI Operator [#8442](https://github.com/openshift/hypershift/pull/8442)
* [OCPBUGS-85104](https://issues.redhat.com/browse/OCPBUGS-85104): fix, cno, skip cloud-network-config-controller check on non-cloud platforms [#8438](https://github.com/openshift/hypershift/pull/8438)
* NO-JIRA: fix(ci): use PR base SHA for api-lint diff in GHA [#8430](https://github.com/openshift/hypershift/pull/8430)
* [OCPBUGS-84841](https://issues.redhat.com/browse/OCPBUGS-84841): fix(ingress): set FIPS_ENABLED env var on ingress operator [#8388](https://github.com/openshift/hypershift/pull/8388)
* [OCPBUGS-83709](https://issues.redhat.com/browse/OCPBUGS-83709): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8272](https://github.com/openshift/hypershift/pull/8272)
* [OCPBUGS-78988](https://issues.redhat.com/browse/OCPBUGS-78988): chore(deps): weekly dependabot consolidation [#8383](https://github.com/openshift/hypershift/pull/8383)
* [OCPBUGS-84632](https://issues.redhat.com/browse/OCPBUGS-84632): fix(azure): detect and replace stale role assignments on cluster re-creation [#8359](https://github.com/openshift/hypershift/pull/8359)
* [OCPBUGS-83576](https://issues.redhat.com/browse/OCPBUGS-83576): fix(metrics-proxy): resolve ports from pods instead of deployments [#8260](https://github.com/openshift/hypershift/pull/8260)
* NO-JIRA: revert: remove .git/ from .dockerignore [#8234](https://github.com/openshift/hypershift/pull/8234)
* [OCPBUGS-83285](https://issues.redhat.com/browse/OCPBUGS-83285): revert 5.0 supported version from release-4.22 [#8216](https://github.com/openshift/hypershift/pull/8216)
* [CNTRLPLANE-3233](https://issues.redhat.com/browse/CNTRLPLANE-3233): ci(gha): add release-4.22 branch to GitHub Actions workflows [#8218](https://github.com/openshift/hypershift/pull/8218)
* [CNTRLPLANE-3197](https://issues.redhat.com/browse/CNTRLPLANE-3197): update latest supported version from 4.22 to 4.23 [#8193](https://github.com/openshift/hypershift/pull/8193)
* [CNTRLPLANE-3174](https://issues.redhat.com/browse/CNTRLPLANE-3174): Add unit tests for CPO controller packages [#8184](https://github.com/openshift/hypershift/pull/8184)
* [CNTRLPLANE-3215](https://issues.redhat.com/browse/CNTRLPLANE-3215): fix envtest GHA workflow path filters for CRD test suites [#8200](https://github.com/openshift/hypershift/pull/8200)
* [CNTRLPLANE-2078](https://issues.redhat.com/browse/CNTRLPLANE-2078): add unit tests for AWS Route53 and IAM [#8079](https://github.com/openshift/hypershift/pull/8079)
* [OCPBUGS-82301](https://issues.redhat.com/browse/OCPBUGS-82301): fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 [#8195](https://github.com/openshift/hypershift/pull/8195)
* NO-JIRA: control-plane-pki-operator: fix Event emission logic, format [#8190](https://github.com/openshift/hypershift/pull/8190)
* [OCPBUGS-82192](https://issues.redhat.com/browse/OCPBUGS-82192): fix(webhookcerts): handle upgrade from service-ca managed certs [#8189](https://github.com/openshift/hypershift/pull/8189)
* [OCPBUGS-82159](https://issues.redhat.com/browse/OCPBUGS-82159): fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads [#8182](https://github.com/openshift/hypershift/pull/8182)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): refactor(cpo): move OAuth internal LB annotation into ReconcileService [#8185](https://github.com/openshift/hypershift/pull/8185)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): Support OAuth LoadBalancer with Azure Private Link Service [#8149](https://github.com/openshift/hypershift/pull/8149)
* [OCPBUGS-81644](https://issues.redhat.com/browse/OCPBUGS-81644): fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology [#8151](https://github.com/openshift/hypershift/pull/8151)
* [OCPBUGS-33097](https://issues.redhat.com/browse/OCPBUGS-33097): Remove deprecated OVNSbDb service type from default strategy mappings [#8164](https://github.com/openshift/hypershift/pull/8164)
* [CNTRLPLANE-3174](https://issues.redhat.com/browse/CNTRLPLANE-3174): test: Add unit tests for product-cli, token-minter, and sync-fg-configmap [#8178](https://github.com/openshift/hypershift/pull/8178)
* [CNTRLPLANE-3050](https://issues.redhat.com/browse/CNTRLPLANE-3050): feat(ci): use Konflux-built image for GitHub Actions runners [#8092](https://github.com/openshift/hypershift/pull/8092)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): test(e2e): add metrics-forwarder e2e test verifying data-plane scraping [#8147](https://github.com/openshift/hypershift/pull/8147)
* [CNTRLPLANE-3037](https://issues.redhat.com/browse/CNTRLPLANE-3037): Create separate assets package specifically for CRD management [#8150](https://github.com/openshift/hypershift/pull/8150)
* [GCP-462](https://issues.redhat.com/browse/GCP-462): Add GCP hosted cluster documentation [#8027](https://github.com/openshift/hypershift/pull/8027)
* NO-JIRA: docs(ci): add sync-community-fork token rotation guide [#8173](https://github.com/openshift/hypershift/pull/8173)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics [#8146](https://github.com/openshift/hypershift/pull/8146)
* NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup [#8137](https://github.com/openshift/hypershift/pull/8137)
* NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list [#8171](https://github.com/openshift/hypershift/pull/8171)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure [#8148](https://github.com/openshift/hypershift/pull/8148)
* NO-JIRA: chore(ci): add client/ to codecov ignore list [#8167](https://github.com/openshift/hypershift/pull/8167)
* NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests [#8144](https://github.com/openshift/hypershift/pull/8144)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/51af991f187e2d4fbbf9f576c1261a89e8696d6f...cf680a59c77c51f3f8a0f7994340db8ee2426645)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7b7630574e477d50439b40fd839e05ef672bc38a)

* [OCPBUGS-83976](https://issues.redhat.com/browse/OCPBUGS-83976): Bump google.golang.org/grpc to v1.79.3 [#1287](https://github.com/openshift/insights-operator/pull/1287)
* [Full changelog](https://github.com/openshift/insights-operator/compare/d7b9c77e6565d4452ff79cd346f3ee6b8535698c...7b7630574e477d50439b40fd839e05ef672bc38a)


### [ironic](https://github.com/openshift/ironic-image/tree/f934d2cdf0bebbde4992980a770dd799056ab867)

* [OKD-362](https://issues.redhat.com/browse/OKD-362): Add watchdog to python-requirements.okd [#844](https://github.com/openshift/ironic-image/pull/844)
* [OCPBUGS-84651](https://issues.redhat.com/browse/OCPBUGS-84651): Bump sushy [#843](https://github.com/openshift/ironic-image/pull/843)
* [OCPBUGS-82540](https://issues.redhat.com/browse/OCPBUGS-82540): Bump pyasn1 to 0.5.1-5 [#822](https://github.com/openshift/ironic-image/pull/822)
* [Full changelog](https://github.com/openshift/ironic-image/compare/437c88a98ba1a5f5ce847e87ff73f6ff0b2d1a39...f934d2cdf0bebbde4992980a770dd799056ab867)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/33cb2da02d57004711bd09dd8f288ed6174f48fc)

* [OCPCLOUD-3346](https://issues.redhat.com/browse/OCPCLOUD-3346): tls: use centralized TLS [#1456](https://github.com/openshift/machine-api-operator/pull/1456)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/b8fd3454befc80bd58247b91cd34e33b49a3aa22...33cb2da02d57004711bd09dd8f288ed6174f48fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/864d1bc04264397caddb7ff1ffa43fc5502aa5e7)

* [OCPBUGS-85481](https://issues.redhat.com/browse/OCPBUGS-85481): Add fix for ossImagestream status [#6026](https://github.com/openshift/machine-config-operator/pull/6026)
* [OCPBUGS-84813](https://issues.redhat.com/browse/OCPBUGS-84813): Include RootCA in the temporal CC [#5904](https://github.com/openshift/machine-config-operator/pull/5904)
* [OCPBUGS-84406](https://issues.redhat.com/browse/OCPBUGS-84406): Fix CVE-2026-34986 [#5986](https://github.com/openshift/machine-config-operator/pull/5986)
* [OCPBUGS-85156](https://issues.redhat.com/browse/OCPBUGS-85156): Bootloader update attempt should be conditional [#6011](https://github.com/openshift/machine-config-operator/pull/6011)
* [OCPBUGS-84693](https://issues.redhat.com/browse/OCPBUGS-84693): prom rules: add alert for nodes using runc [#5998](https://github.com/openshift/machine-config-operator/pull/5998)
* [OCPBUGS-84667](https://issues.redhat.com/browse/OCPBUGS-84667): Fix encapsulated IGN version [#5895](https://github.com/openshift/machine-config-operator/pull/5895)
* [OCPBUGS-84480](https://issues.redhat.com/browse/OCPBUGS-84480): Fix units rollback if update failure [#5882](https://github.com/openshift/machine-config-operator/pull/5882)
* [OCPBUGS-84949](https://issues.redhat.com/browse/OCPBUGS-84949): Fix OCL test to handle temporarily empty current-machine-os-build annotation [#5989](https://github.com/openshift/machine-config-operator/pull/5989)
* [OCPBUGS-84840](https://issues.redhat.com/browse/OCPBUGS-84840): Fix ssh and password rollbacks [#5906](https://github.com/openshift/machine-config-operator/pull/5906)
* [OCPBUGS-84865](https://issues.redhat.com/browse/OCPBUGS-84865): MachineOSConfig "build was not found" error [#5912](https://github.com/openshift/machine-config-operator/pull/5912)
* [OCPBUGS-83779](https://issues.redhat.com/browse/OCPBUGS-83779): Auto-append :ref suffix to additionalLayerStores in storage.conf [#5903](https://github.com/openshift/machine-config-operator/pull/5903)
* [OCPBUGS-84861](https://issues.redhat.com/browse/OCPBUGS-84861): Update AMI Whitelist [#5911](https://github.com/openshift/machine-config-operator/pull/5911)
* [OCPBUGS-84850](https://issues.redhat.com/browse/OCPBUGS-84850): Custom pool booting must handle matchExpressions in nodeSelector [#5909](https://github.com/openshift/machine-config-operator/pull/5909)
* [OCPBUGS-84849](https://issues.redhat.com/browse/OCPBUGS-84849): Support bootloader update [#5908](https://github.com/openshift/machine-config-operator/pull/5908)
* [OCPBUGS-84719](https://issues.redhat.com/browse/OCPBUGS-84719): deploy-from-self when skopeo  &lt; 1.22.2 [#5901](https://github.com/openshift/machine-config-operator/pull/5901)
* [OCPBUGS-84700](https://issues.redhat.com/browse/OCPBUGS-84700): Bump image build timeout for status reporting test [#5900](https://github.com/openshift/machine-config-operator/pull/5900)
* [OCPBUGS-83818](https://issues.redhat.com/browse/OCPBUGS-83818): ClusterHostedDNS on AWS/Azure/GCP: Modify Corefile template to better handle empty record types [#5862](https://github.com/openshift/machine-config-operator/pull/5862)
* [OCPBUGS-83771](https://issues.redhat.com/browse/OCPBUGS-83771): Make IRI registry read-only via environment variable [#5859](https://github.com/openshift/machine-config-operator/pull/5859)
* [OCPBUGS-83577](https://issues.redhat.com/browse/OCPBUGS-83577): Allow enablement of systemd units with existing files [#5855](https://github.com/openshift/machine-config-operator/pull/5855)
* [OCPBUGS-83559](https://issues.redhat.com/browse/OCPBUGS-83559): Update AMI Whitelist [#5853](https://github.com/openshift/machine-config-operator/pull/5853)
* [OCPBUGS-83540](https://issues.redhat.com/browse/OCPBUGS-83540): order corosync after OVS configuration on TNF clusters] [#5852](https://github.com/openshift/machine-config-operator/pull/5852)
* Revert "OCPBUGS-69936: ovs: increase CPU priority for Open vSwitch Forwarding Unit" [#5850](https://github.com/openshift/machine-config-operator/pull/5850)
* [MCO-2135](https://issues.redhat.com/browse/MCO-2135): Add test for OSStream labeling of Machines, MachineSets, and ControlPaneMachineSets [#5814](https://github.com/openshift/machine-config-operator/pull/5814)
* [AGENT-1307](https://issues.redhat.com/browse/AGENT-1307): add MCD IRI manager [#5807](https://github.com/openshift/machine-config-operator/pull/5807)
* [MCO-2202](https://issues.redhat.com/browse/MCO-2202): separate duplicate PinnedImageSet validation into OCP-88562 [#5839](https://github.com/openshift/machine-config-operator/pull/5839)
* [MCO-2163](https://issues.redhat.com/browse/MCO-2163): adds machine-config-osimagestream installer helper [#5770](https://github.com/openshift/machine-config-operator/pull/5770)
* [OCPBUGS-69936](https://issues.redhat.com/browse/OCPBUGS-69936): ovs: increase CPU priority for Open vSwitch Forwarding Unit [#5797](https://github.com/openshift/machine-config-operator/pull/5797)
* [MCO-1972](https://issues.redhat.com/browse/MCO-1972): Removes OSImageURLConfig from the build controller [#5424](https://github.com/openshift/machine-config-operator/pull/5424)
* Reapply "MCO-2120: Rework OS Image Stream label classification" [#5767](https://github.com/openshift/machine-config-operator/pull/5767)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c4a08067821f304642e731fdcca0c8c6a6b19484...864d1bc04264397caddb7ff1ffa43fc5502aa5e7)


### [metallb-frr](https://github.com/openshift/frr/tree/843347fdc9460e0fd064d68a003eae5459cac1fa)

* [OCPBUGS-84960](https://issues.redhat.com/browse/OCPBUGS-84960): [release-4.22]: Bump to frr10 [#130](https://github.com/openshift/frr/pull/130)
* [Full changelog](https://github.com/openshift/frr/compare/5ccdd521dd93522575c172dac86d0b6f301fb3ef...843347fdc9460e0fd064d68a003eae5459cac1fa)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f3f3c199a35f28b5a3cb7e5e123d3f34c25dcdfd)

* [OCPBUGS-85088](https://issues.redhat.com/browse/OCPBUGS-85088): Sync Main to 4.22 [#916](https://github.com/openshift/monitoring-plugin/pull/916)
* [OU-1307](https://issues.redhat.com/browse/OU-1307): [release-4.22] don't fight console to setActiveNamespace [#881](https://github.com/openshift/monitoring-plugin/pull/881)
* NO-JIRA: re-enable get CSRF token [#876](https://github.com/openshift/monitoring-plugin/pull/876)
* [OU-1264](https://issues.redhat.com/browse/OU-1264): mcpToolUI basic implementation for OpenShift Lightpseed + obs-mcp + Perses [#797](https://github.com/openshift/monitoring-plugin/pull/797)
* NO-JIRA: breaking changes follow up [#875](https://github.com/openshift/monitoring-plugin/pull/875)
* [OU-1175](https://issues.redhat.com/browse/OU-1175): OCP 4.22 Breaking Changes [#863](https://github.com/openshift/monitoring-plugin/pull/863)
* [OCPBUGS-81567](https://issues.redhat.com/browse/OCPBUGS-81567): fix: re encode params when redirecting from graph to query-browser [#869](https://github.com/openshift/monitoring-plugin/pull/869)
* [OU-1184](https://issues.redhat.com/browse/OU-1184): lint enabled against cypress files and changes post coo [#862](https://github.com/openshift/monitoring-plugin/pull/862)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/0f8b1fe03025cbcd04fbe6505d2cef383798ca20...f3f3c199a35f28b5a3cb7e5e123d3f34c25dcdfd)


### [must-gather](https://github.com/openshift/must-gather/tree/8554213fa214e8e165e7bedaf8d892bb824d83ef)

* [MG-241](https://issues.redhat.com/browse/MG-241): Adding support for skipping rotated logs [#536](https://github.com/openshift/must-gather/pull/536)
* [Full changelog](https://github.com/openshift/must-gather/compare/eb617ed38ea00534c967be022a53d43a89898916...8554213fa214e8e165e7bedaf8d892bb824d83ef)


### [network-tools](https://github.com/openshift/network-tools/tree/5c4b905c09ccd6edadb2ff359f45b70ed334f948)

* NO-JIRA: Image slimming [#154](https://github.com/openshift/network-tools/pull/154)
* [Full changelog](https://github.com/openshift/network-tools/compare/a6bcd3cdaf956beec70e6edde2160625d8e8f817...5c4b905c09ccd6edadb2ff359f45b70ed334f948)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/d73167a4d7fca871d64d3591aac388cfd2d37bbe)

* [CNV-74110](https://issues.redhat.com/browse/CNV-74110): new translations [#407](https://github.com/openshift/networking-console-plugin/pull/407)
* [OCPBUGS-84204](https://issues.redhat.com/browse/OCPBUGS-84204): CVE dependency remediation [#381](https://github.com/openshift/networking-console-plugin/pull/381)
* Bump lodash from 4.17.23 to 4.18.1 [#366](https://github.com/openshift/networking-console-plugin/pull/366)
* [OCPBUGS-70285](https://issues.redhat.com/browse/OCPBUGS-70285): Upgrade cypress to v15 to fix CVEs [#345](https://github.com/openshift/networking-console-plugin/pull/345)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f9c8030dbcdf76e3556e803d34828a120e2eb407...d73167a4d7fca871d64d3591aac388cfd2d37bbe)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/4c002a9114937ea9c20213f00892761c2013e60b)

* [OCPBUGS-82579](https://issues.redhat.com/browse/OCPBUGS-82579): [release-4.22]: chore: sync with openshift repositories [#191](https://github.com/openshift/oauth-apiserver/pull/191)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/29215dddf12f5b0f549125c22cebe56f14596529...4c002a9114937ea9c20213f00892761c2013e60b)


### [oauth-server](https://github.com/openshift/oauth-server/tree/6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9)

* [OCPBUGS-82579](https://issues.redhat.com/browse/OCPBUGS-82579): [release-4.22]: chore: sync with openshift repositories [#222](https://github.com/openshift/oauth-server/pull/222)
* [Full changelog](https://github.com/openshift/oauth-server/compare/69bdf8bc63e094815d07aa16fc2537df5c045489...6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/ca5eebdcecf9650248f15fe6009b22788ba0c434)

* [CLID-532](https://issues.redhat.com/browse/CLID-532): Separate Image struct into AdditionalImage, BlockedImage, SampleImage [#1372](https://github.com/openshift/oc-mirror/pull/1372)
* [OCPBUGS-62603](https://issues.redhat.com/browse/OCPBUGS-62603): Fix printing collection messages with 0 collection items [#1385](https://github.com/openshift/oc-mirror/pull/1385)
* [OCPBUGS-61136](https://issues.redhat.com/browse/OCPBUGS-61136): Only print catalog rebuild message if there are catalo… [#1386](https://github.com/openshift/oc-mirror/pull/1386)
* [CLID-524](https://issues.redhat.com/browse/CLID-524): additionalImages collector error handling [#1343](https://github.com/openshift/oc-mirror/pull/1343)
* [CLID-535](https://issues.redhat.com/browse/CLID-535): api: use OCI definitions from opencontainers spec [#1341](https://github.com/openshift/oc-mirror/pull/1341)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/18c646f13d9e127bd50b3b4c70d78935b344a7b7...ca5eebdcecf9650248f15fe6009b22788ba0c434)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/26b848969eabd4e1899439f40a4346552f08ff38)

* [OCPBUGS-85059](https://issues.redhat.com/browse/OCPBUGS-85059): fix(test): drop blocking namespace-deletion wait between both-watch-modes scenarios [#714](https://github.com/openshift/operator-framework-operator-controller/pull/714)
* [OPRUN-4546](https://issues.redhat.com/browse/OPRUN-4546): Fix boxcutter finalizer ResourceNames in preflight test [#695](https://github.com/openshift/operator-framework-operator-controller/pull/695)
* NO-ISSUE: Synchronize From Upstream Repositories [#694](https://github.com/openshift/operator-framework-operator-controller/pull/694)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/14a49c8179f2c033b2ba1e5e87f2deadc6102ff6...26b848969eabd4e1899439f40a4346552f08ff38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/fbea5220c4fe13c20107d6c4631f4e53007ca761)

* [OCPBUGS-82579](https://issues.redhat.com/browse/OCPBUGS-82579): [release-4.22] CNTRLPLANE-3226: Sync with openshift apiserver 4.22 kubernetes 1.34.1 [#631](https://github.com/openshift/openshift-apiserver/pull/631)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/56aa2d96edd725e44ddd7ff13f23e53e6c509828...fbea5220c4fe13c20107d6c4631f4e53007ca761)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/06d95461581f9374ae05959b66fc50e2a17d077c)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into release-4.22 [#409](https://github.com/openshift/cluster-api-provider-openstack/pull/409)
* [OCPBUGS-84994](https://issues.redhat.com/browse/OCPBUGS-84994): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 [#410](https://github.com/openshift/cluster-api-provider-openstack/pull/410)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/74cb5b085a21fdec9f0f8c5c1dfa3933075fb1dc...06d95461581f9374ae05959b66fc50e2a17d077c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/de6260e53055e10e216ec668d692a35554ab0585)

* [OCPBUGS-84411](https://issues.redhat.com/browse/OCPBUGS-84411), [OCPBUGS-84412](https://issues.redhat.com/browse/OCPBUGS-84412): Update github.com/go-jose/go-jose/v4 to v4.1.4 [release-4.22] [#1292](https://github.com/openshift/operator-framework-olm/pull/1292)
* [OCPBUGS-77984](https://issues.redhat.com/browse/OCPBUGS-77984): test(olm): skip ppc64le/s390x for tests using single-arch images [#1276](https://github.com/openshift/operator-framework-olm/pull/1276)
* NO-ISSUE: Synchronize From Upstream Repositories [#1278](https://github.com/openshift/operator-framework-olm/pull/1278)
* NO-ISSUE: Synchronize From Upstream Repositories [#1277](https://github.com/openshift/operator-framework-olm/pull/1277)
* NO-ISSUE: retry transient registry errors in opm QE [#1272](https://github.com/openshift/operator-framework-olm/pull/1272)
* NO-ISSUE: Synchronize From Upstream Repositories [#1275](https://github.com/openshift/operator-framework-olm/pull/1275)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/51af59545315b37207a76f55825f397f5df13910...de6260e53055e10e216ec668d692a35554ab0585)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/72db5e8d8ec23d4108183a8c67b45cdfdb8057ba)

* [OCPBUGS-84384](https://issues.redhat.com/browse/OCPBUGS-84384): CORENET-6537: OTE: Add external container support to infra provider [#3147](https://github.com/openshift/ovn-kubernetes/pull/3147)
* [OCPBUGS-83535](https://issues.redhat.com/browse/OCPBUGS-83535): CARRY: skip ote tests 4.22 [#3139](https://github.com/openshift/ovn-kubernetes/pull/3139)
* NO-JIRA: DownStream Merge [2026-04-09] [#3126](https://github.com/openshift/ovn-kubernetes/pull/3126)
* NO-JIRA: DownStream Merge [04-02-2026] [#3114](https://github.com/openshift/ovn-kubernetes/pull/3114)
* NO-JIRA: Disable informing tests for the time being [#3118](https://github.com/openshift/ovn-kubernetes/pull/3118)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ee514f9f66a328f4dd4b583709a8e411b515fa5f...72db5e8d8ec23d4108183a8c67b45cdfdb8057ba)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/02959a8d7096501e240d1d9f65da90b87bac45b9)

* [OCPBUGS-84007](https://issues.redhat.com/browse/OCPBUGS-84007): Mitigate CVE-2026-33186 by bumping grpc-go to v1.79.3 [#132](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/132)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/c208095b1f3ff79e2d9eed7f8045d330a8e15c08...02959a8d7096501e240d1d9f65da90b87bac45b9)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/277478211cfc7302e9c09b41a0935fbba678614a)

* [OCPBUGS-84008](https://issues.redhat.com/browse/OCPBUGS-84008): Mitigate CVE-2026-33186 by bumping grpc-go to v1.79.3 [#113](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/113)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a56f9e95588f656435e2cc3b256d9782213a7813...277478211cfc7302e9c09b41a0935fbba678614a)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/766c0952fd19f8225fe59b2be8e8c8932b24ebd7)

* [OCPBUGS-83398](https://issues.redhat.com/browse/OCPBUGS-83398): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into release-4.22 [#95](https://github.com/openshift/cloud-provider-powervs/pull/95)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/d8bc2845303cbfb3fa4cb0f0e11fa4b78d2c87ac...766c0952fd19f8225fe59b2be8e8c8932b24ebd7)


### [prometheus](https://github.com/openshift/prometheus/tree/85b4bbcbdf5d275f982408732542e3e06db1dc74)

* [OCPBUGS-84010](https://issues.redhat.com/browse/OCPBUGS-84010): bump google.golang.org/grpc to v1.79.3 [release-4.22] [#310](https://github.com/openshift/prometheus/pull/310)
* [Full changelog](https://github.com/openshift/prometheus/compare/e1e355916c789607fe98c8832920e2218de4bad5...85b4bbcbdf5d275f982408732542e3e06db1dc74)


### [rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions](https://github.com/openshift/os/tree/f41264dc5f1c1f0a389787ecc5aaec573d485b8e)

* NO-JIRA: Revert "OCPBUGS-77244: 9.8: override runc package to pull in newer fixes" [#1925](https://github.com/openshift/os/pull/1925)
* [OCPBUGS-64841](https://issues.redhat.com/browse/OCPBUGS-64841): post-process: Remove workaround for openvswitch additional group [#1918](https://github.com/openshift/os/pull/1918)
* [OCPBUGS-77244](https://issues.redhat.com/browse/OCPBUGS-77244): 9.8: override runc package to pull in newer fixes [#1923](https://github.com/openshift/os/pull/1923)
* [Full changelog](https://github.com/openshift/os/compare/3d00d375d491de94fd9dcd0b5440a0efbec3d9db...f41264dc5f1c1f0a389787ecc5aaec573d485b8e)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/9fff46a576033685f66fbb1121eb0a2f134a29be)

* [OCPBUGS-84953](https://issues.redhat.com/browse/OCPBUGS-84953): e2e network policy tests [#353](https://github.com/openshift/service-ca-operator/pull/353)
* [OCPBUGS-82110](https://issues.redhat.com/browse/OCPBUGS-82110): fix service-ca-controller CrashLoop on MicroShift [#344](https://github.com/openshift/service-ca-operator/pull/344)
* [CNTRLPLANE-2845](https://issues.redhat.com/browse/CNTRLPLANE-2845): add service-ca operator and workload network policies [#324](https://github.com/openshift/service-ca-operator/pull/324)
* [CNTRLPLANE-2947](https://issues.redhat.com/browse/CNTRLPLANE-2947): Enable configurable PKI for signing CA and serving certificates [#327](https://github.com/openshift/service-ca-operator/pull/327)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/951ea66067b4d69c868470e26a5a1a9f689be23e...9fff46a576033685f66fbb1121eb0a2f134a29be)


### [telemeter](https://github.com/openshift/telemeter/tree/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4)

* [OCPBUGS-84021](https://issues.redhat.com/browse/OCPBUGS-84021): update google.golang.org/grpc [#605](https://github.com/openshift/telemeter/pull/605)
* [OCPBUGS-84937](https://issues.redhat.com/browse/OCPBUGS-84937): fix(deps): bump go-jose/v3 to v3.0.5 for JWE unwrap DoS [#598](https://github.com/openshift/telemeter/pull/598)
* [Full changelog](https://github.com/openshift/telemeter/compare/d6c7dd499f7106df78aa8bfd9dee332121ab2f09...c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4)


### [tests](https://github.com/openshift/origin/tree/01fdf25d4c2dbbdab8a6305184dc3eac840cd289)

* [OCPBUGS-85339](https://issues.redhat.com/browse/OCPBUGS-85339): Add e2e tests for KubeletEnsureSecretPulledImages feature gate [#31148](https://github.com/openshift/origin/pull/31148)
* [OCPBUGS-85089](https://issues.redhat.com/browse/OCPBUGS-85089): Allow OVN-Kubernetes CIDROverlap pathological events [#31141](https://github.com/openshift/origin/pull/31141)
* [OCPBUGS-85122](https://issues.redhat.com/browse/OCPBUGS-85122): Add ArtifactVolume tests and register artifact image [#31108](https://github.com/openshift/origin/pull/31108)
* [OCPBUGS-84944](https://issues.redhat.com/browse/OCPBUGS-84944): Fix timeout in PinnedImages GC test [#31115](https://github.com/openshift/origin/pull/31115)
* [OCPBUGS-84946](https://issues.redhat.com/browse/OCPBUGS-84946): skip on BM which has insufficient host [#31116](https://github.com/openshift/origin/pull/31116)
* [OCPBUGS-84958](https://issues.redhat.com/browse/OCPBUGS-84958): Optimize NetworkPolicy reconciliation test to reduce timeout [#31119](https://github.com/openshift/origin/pull/31119)
* [OCPBUGS-84382](https://issues.redhat.com/browse/OCPBUGS-84382): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31074](https://github.com/openshift/origin/pull/31074)
* [OCPBUGS-84382](https://issues.redhat.com/browse/OCPBUGS-84382): test: add monitortest to detect pods stuck in Pending state [#31073](https://github.com/openshift/origin/pull/31073)
* [OCPBUGS-84888](https://issues.redhat.com/browse/OCPBUGS-84888): Disable particular CSI tests if CSI driver is removed [#31111](https://github.com/openshift/origin/pull/31111)
* [OCPBUGS-84654](https://issues.redhat.com/browse/OCPBUGS-84654): fix openshift/network/third-party suite selecting zero tests [#31090](https://github.com/openshift/origin/pull/31090)
* [SREP-4676](https://issues.redhat.com/browse/SREP-4676): skipping namespaces are using default sa [#31101](https://github.com/openshift/origin/pull/31101)
* [OCPBUGS-84362](https://issues.redhat.com/browse/OCPBUGS-84362), [OCPBUGS-84363](https://issues.redhat.com/browse/OCPBUGS-84363): fix: skip unused tests for two node [#31069](https://github.com/openshift/origin/pull/31069)
* [OCPBUGS-84706](https://issues.redhat.com/browse/OCPBUGS-84706): Skip dev fuse test on runc runtime [#31099](https://github.com/openshift/origin/pull/31099)
* [OCPBUGS-84628](https://issues.redhat.com/browse/OCPBUGS-84628): Fix project name error during wait [#31085](https://github.com/openshift/origin/pull/31085)
* [OCPBUGS-84674](https://issues.redhat.com/browse/OCPBUGS-84674): retry transient kubeconfig read failures in GetClientConfig [#31096](https://github.com/openshift/origin/pull/31096)
* [OCPBUGS-84676](https://issues.redhat.com/browse/OCPBUGS-84676): Add sleep to give cvo time to reconcile [#31097](https://github.com/openshift/origin/pull/31097)
* [OCPBUGS-84231](https://issues.redhat.com/browse/OCPBUGS-84231): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31060](https://github.com/openshift/origin/pull/31060)
* [OCPBUGS-84322](https://issues.redhat.com/browse/OCPBUGS-84322): Fix Gateway cleanup in parallel e2e test workers [#31068](https://github.com/openshift/origin/pull/31068)
* [OCPBUGS-84049](https://issues.redhat.com/browse/OCPBUGS-84049): [CNTRLPLANE-2751]:Adding e2e network policy cases for config-operator [#31076](https://github.com/openshift/origin/pull/31076)
* "OCPBUGS-84206: [release-4.22] STOR-2807: Add e2e test to verify CSI driver operators use service CA signed certificates" [#31048](https://github.com/openshift/origin/pull/31048)
* [OCPBUGS-84210](https://issues.redhat.com/browse/OCPBUGS-84210): skip serial and disruptive cases from suite [#31057](https://github.com/openshift/origin/pull/31057)
* [OCPBUGS-84319](https://issues.redhat.com/browse/OCPBUGS-84319): cache kube client instance [#31067](https://github.com/openshift/origin/pull/31067)
* [OCPBUGS-84298](https://issues.redhat.com/browse/OCPBUGS-84298): Skip test case updateLifecycle if the worker pool is paused [#31065](https://github.com/openshift/origin/pull/31065)
* [OCPBUGS-84222](https://issues.redhat.com/browse/OCPBUGS-84222): OVNK BGP: Improve VRF-Lite test stability [#31058](https://github.com/openshift/origin/pull/31058)
* [OCPBUGS-83803](https://issues.redhat.com/browse/OCPBUGS-83803): Move imagepolicy test to disruptive long-running suite [#31056](https://github.com/openshift/origin/pull/31056)
* [OCPBUGS-83783](https://issues.redhat.com/browse/OCPBUGS-83783): Add test to verify for backup container exists when etcd crashes [#31035](https://github.com/openshift/origin/pull/31035)
* [OCPBUGS-83778](https://issues.redhat.com/browse/OCPBUGS-83778): Verify etc pod should start with oom_score_adj as system-node-critical [#31034](https://github.com/openshift/origin/pull/31034)
* [OCPBUGS-83712](https://issues.redhat.com/browse/OCPBUGS-83712): Use upgrades.Skippable for Gateway API upgrade test skip logic [#31030](https://github.com/openshift/origin/pull/31030)
* [OCPBUGS-83787](https://issues.redhat.com/browse/OCPBUGS-83787): OCPSTRAT-3082:TLS propagation test [#31038](https://github.com/openshift/origin/pull/31038)
* [OCPBUGS-78997](https://issues.redhat.com/browse/OCPBUGS-78997): Revert "NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m" [#30919](https://github.com/openshift/origin/pull/30919)
* [OCPBUGS-82557](https://issues.redhat.com/browse/OCPBUGS-82557): DCM tests need to be backward compatible [#30999](https://github.com/openshift/origin/pull/30999)
* [OCPBUGS-77948](https://issues.redhat.com/browse/OCPBUGS-77948), [OCPBUGS-77949](https://issues.redhat.com/browse/OCPBUGS-77949), [OCPBUGS-78298](https://issues.redhat.com/browse/OCPBUGS-78298), [OCPEDGE-2443](https://issues.redhat.com/browse/OCPEDGE-2443): TNF node replacement test updates [#30846](https://github.com/openshift/origin/pull/30846)
* NO-JIRA: Update OWNERS [#30996](https://github.com/openshift/origin/pull/30996)
* [OCPBUGS-82046](https://issues.redhat.com/browse/OCPBUGS-82046): Revert "remove some duplicate ovnk test cases" [#30975](https://github.com/openshift/origin/pull/30975)
* [OCPBUGS-78090](https://issues.redhat.com/browse/OCPBUGS-78090): Avoid copy of the oc binary, to support heterogeneous environments [#30992](https://github.com/openshift/origin/pull/30992)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): fix pacemaker CronJob duplicate-event namespace [#30985](https://github.com/openshift/origin/pull/30985)
* [OCPEDGE-2491](https://issues.redhat.com/browse/OCPEDGE-2491): Log pcs status and etcd member list after every recovery [#30949](https://github.com/openshift/origin/pull/30949)
* [NE-2561](https://issues.redhat.com/browse/NE-2561): Add Gateway API OLM to NO-OLM migration upgrade test [#30897](https://github.com/openshift/origin/pull/30897)
* [OCPBUGS-81716](https://issues.redhat.com/browse/OCPBUGS-81716): Add retry logic for transient network errors in restartKubeletOnNode [#30966](https://github.com/openshift/origin/pull/30966)
* [CORENET-6168](https://issues.redhat.com/browse/CORENET-6168): Add ovn tests extension [#30560](https://github.com/openshift/origin/pull/30560)
* [OCPBUGS-81640](https://issues.redhat.com/browse/OCPBUGS-81640): test/ccm: upgrade ccm healthz test to use aws sdk v2 [#30954](https://github.com/openshift/origin/pull/30954)
* [TRT-2084](https://issues.redhat.com/browse/TRT-2084): terminationmessagepolicy: relax for 5.0 [#30979](https://github.com/openshift/origin/pull/30979)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): openshift-tests: allow duplicate pacemaker status collector CronJob events [#30953](https://github.com/openshift/origin/pull/30953)
* [OCPBUGS-81737](https://issues.redhat.com/browse/OCPBUGS-81737): Dynamically find worker-generated-kubelet MC name to support different platforms [#30967](https://github.com/openshift/origin/pull/30967)
* [OCPBUGS-81742](https://issues.redhat.com/browse/OCPBUGS-81742): Add exception for the newly added kas-bootstrap-container [#30963](https://github.com/openshift/origin/pull/30963)
* [OCPNODE-4224](https://issues.redhat.com/browse/OCPNODE-4224): Migrating test case OCP-70987 from OTP to origin [#30948](https://github.com/openshift/origin/pull/30948)
* [OCPBUGS-82039](https://issues.redhat.com/browse/OCPBUGS-82039): Fix DCM ingress tests to support IPv6-only clusters [#30972](https://github.com/openshift/origin/pull/30972)
* [OCPBUGS-81685](https://issues.redhat.com/browse/OCPBUGS-81685): OVNK BGP: fix curl arguments not properly tokenized [#30961](https://github.com/openshift/origin/pull/30961)
* [OCPBUGS-81751](https://issues.redhat.com/browse/OCPBUGS-81751): Fix GatewayClass update conflict in markTestDone [#30964](https://github.com/openshift/origin/pull/30964)
* NO-JIRA: Ignore extra fields [#30939](https://github.com/openshift/origin/pull/30939)
* NO-JIRA: fix CUDN status condition tests for new TransportAccepted condition [#30958](https://github.com/openshift/origin/pull/30958)
* [Full changelog](https://github.com/openshift/origin/compare/c77ff4a065bf31ba00214064111d49e5ef14e093...01fdf25d4c2dbbdab8a6305184dc3eac840cd289)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/39008107b1463e3299b0d60c3ac1f7e71ad3e014)

* NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-vsphere:release-1.35 (93af0f7) into main [#113](https://github.com/openshift/cloud-provider-vsphere/pull/113)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/854aeeabab6301b204efaf041e916847a3b47672...39008107b1463e3299b0d60c3ac1f7e71ad3e014)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/ac542b5afbd9a3897cda34e7ea1852b61c945e36)

* [OCPBUGS-84028](https://issues.redhat.com/browse/OCPBUGS-84028): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into release-4.22 [#108](https://github.com/openshift/cluster-api-provider-vsphere/pull/108)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/f12e50512efa829a2df97c897862c3f45c201300...ac542b5afbd9a3897cda34e7ea1852b61c945e36)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/cf21e1211225e3cf6baa27bdb12ae86c5c13db39)

* [OCPBUGS-81525](https://issues.redhat.com/browse/OCPBUGS-81525): Bump google.golang.org/grpc  to 1.79.3 [#170](https://github.com/openshift/vmware-vsphere-csi-driver/pull/170)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/e5c5c1ea677ee1fbfd74823265afa1b82b91df50...cf21e1211225e3cf6baa27bdb12ae86c5c13db39)