# 4.22.0-rc.5

Created: 2026-05-27 15:50:26 +0000 UTC

Image Digest: `sha256:59f1edd704211e947040c251732e3e164d3a26b3d538528c0b150140ea4f2c8b`


## Changes from 4.22.0-rc.0

### Components

* Kubectl 1.35.2
* Kubernetes upgraded from 1.35.3 to 1.35.5
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260408-0 to 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| EVPN <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [a9bfcccd](https://github.com/openshift/assisted-installer/commit/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b) `sha256:5d79cecf43e71d7e8652e99ed90fb0b8719b60d7ce37a7d5193684ab5bcf127a`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [a9bfcccd](https://github.com/openshift/assisted-installer/commit/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b) `sha256:23dd60ed42d592454cda3b0d3c52eacc2e5dc4b5ae5d175d24f294f57cb09508`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:2c45d0b5e0cf01dcb077fa735c1ad9caede6abe857e58d1e1990f0cd12e974b3`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:6fde6ed1b1b9a0989ad3e5a8b092c39d01616277f948ba7f2222428cc657b3e3`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:10c1618b64a42c008038ae80a9de2bf5e2dd2e59e66913dd086b093241143585`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:a72adc52502e5fca5bdc45ed298d6a676dfd8389907fee35dd10d2af66960c8f`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:8016aed8c28caa1dc90e73c1d9ccb86a9cb40a216bbf396fd3b3bb4b20c7fdd5`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [4c7a7646](https://github.com/openshift/cloud-provider-azure/commit/4c7a764630c621d5e1700649fc056800d35bb6d1) `sha256:562c79d416d8f5d8bb166efd7ea410333c3bfe98cc0bb2385f5448a87428d751`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [4c7a7646](https://github.com/openshift/cloud-provider-azure/commit/4c7a764630c621d5e1700649fc056800d35bb6d1) `sha256:5a27d9c579decbf735538046cba9e5651cfe767ae5986072a94f7eaf71c4ec53`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [99b9a3a3](https://github.com/openshift/azure-kubernetes-kms/commit/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39) `sha256:6f3198de3c6e287415a038bbbcd49b67f8d6f49993ef4eafdbc3db1d66c337cf`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [69d04909](https://github.com/openshift/machine-api-provider-azure/commit/69d049094ee36ad9c706d65694a8cd42e9a64800) `sha256:d6663c3ae50f1031e6ce82befe9a17caccdf3b7870a7eaeadf21c4e574ab78ab`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [ad4eb8a5](https://github.com/openshift/cluster-api-provider-metal3/commit/ad4eb8a5e67dc08c0686f006641847df4370d599) `sha256:7db6ab61803e8e95695357d7a757bed0b6c2990ed11cd02a367182907ac5128e`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:b8b16d4c1db2e86f0c6594557fbdddf035b517ecaf83d2dce7971f0bd855d9c7`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [c5e50489](https://github.com/openshift/baremetal-operator/commit/c5e5048987427f58d3ca76238537e74bd3175e0f) `sha256:ee12440b968d658d822e93125da49ea33e91d400f0d038d92ecfdc884cc42b48`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [dca8cb1b](https://github.com/openshift/baremetal-runtimecfg/commit/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40) `sha256:a4fbc1f99ec517f34be5335feac128c1d1f56addfe36d96b4705b70ee6a2fd78`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:2fdc7a1aa3b8a30501e9e640e50ff87045e48b63a4d36a1cd9c616a9b0464ba9`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [260ea1b5](https://github.com/openshift/cluster-autoscaler-operator/commit/260ea1b5967f47768a0727e8c84d451dc9de5ced) `sha256:39c074611b3dbe3c6942085a086eef8d5c2e0d5f0a0aa499ac61c71e96615de0`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [e6be0fdf](https://github.com/openshift/cluster-bootstrap/commit/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383) `sha256:4ac329d80e4b1807496b0f70a7298cdbae50164e76fdfbd948c3a20ecee75ca9`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [1eccfe33](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/1eccfe33d83686e74769ea196660b8d09d249b04) `sha256:c7b8032204fa282aaa2ae2daac3e849af7be2f649f9e3a0e34e0862fa79b2456`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [e0c2428e](https://github.com/openshift/cluster-config-operator/commit/e0c2428e4618493ad9db0681e3b91444746ddf2c) `sha256:a75978720d831066ccc076e40cc2890bc1d2995e1bb8bb48a9568fcdeb4467ba`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [b2e26b93](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/b2e26b937e7f6dab36b63ace9c8453ba9654011c) `sha256:5219a90c4ebe770cd22a5d75be4da0eda1433eaf3ea3261cbb79c040105d4d1b`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [108f37f0](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/108f37f0e378accc322cbeb68136ec500ec35b94) `sha256:8c48ef51be3741afc825fd1278e96d75add03ff1fe4f232e1024bd690241c728`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:7f8862afcd547bdf814505a4e6866f38fdc093ae2446f1e41a03f92c8284a605`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [3698b93d](https://github.com/openshift/cluster-etcd-operator/commit/3698b93d071f8b279b1721f90ced478f0b90b426) `sha256:ae420bf3f2b349ccc05838b03801395d6f2fe64d8ee6767bb0410143c6dc95d5`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [a9edd695](https://github.com/openshift/cluster-machine-approver/commit/a9edd695aca56fb58e739b774670a01428360dd8) `sha256:c699e1f55059bce137d17b07730d87032b89ee5162c4f2d9b7833317d05f995c`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [d131450b](https://github.com/openshift/cluster-olm-operator/commit/d131450b2645623089b26353a309015c95c8871c) `sha256:8e983a1474784ed4475b4def0a43b331f7b79a294222b10b959039d1de9af03a`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [44985a13](https://github.com/openshift/cluster-policy-controller/commit/44985a1306411101c84dd5081598fc928b432321) `sha256:5194de1a067f3149d29565db899d26a447d38ce6f1c79fab1ac898721aa8ab7e`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8dfdf2ef](https://github.com/openshift/cluster-storage-operator/commit/8dfdf2ef3310358f3559a5481df43b98b2294791) `sha256:1ea3e411bf75efa3c4c1e6193bae20657d7e3f2293e5bf3d2d7073dc0d5393a0`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:bdc8ba8e9b7881d4e166ef727716a1b6cfb3d44b8286ff82cadc47cbb9f5cdf2`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [e9c1c39e](https://github.com/openshift/cluster-version-operator/commit/e9c1c39e21ec353ff5993d386c42bc1b15063dbf) `sha256:16ad36bc9f536cf1dc78a6ed6612b1dd8c1c1e76a40081b935b41f4ef4c247fe`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:75ab62df368732f94f42b59f08a5fb8f158e6c5485695c0ce65800e16afd1f65`
* [console-operator](https://github.com/openshift/console-operator) git [f0619391](https://github.com/openshift/console-operator/commit/f0619391890c61e1a4ebdf5c1c0b247b30f81248) `sha256:1289393f8b6b84a66f0cf20d16701b5be20e596117f29ab9890ba765a9b71f32`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:48439c3024ddf344e1f66488290d0049b2bcc3afb9da951ee045024c6de0ce8b`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:5d954d7c3e2b610b84d2541448b5585d2283e96d2578a5419b273de7b4e48c98`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:6e4824d8b009619376eccad4cfca089e6edec9ed0f66de39640bb7d5966265f5`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:88bc45bf890ee6250be38c26613ab7ea8f870d1c562dbd5d56d3ca050e772c06`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [d1bc3ffa](https://github.com/openshift/csi-external-snapshotter/commit/d1bc3ffaa9759c13a06c2ec61c541342e71bd109) `sha256:c391d70285ea62232fc434c86e8ed570f1567711c912e1dda5a7379f40569bc2`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:9afafd9011168685bd382b8a8b2ec2563cb4a0c5b5e6e8ad2da13ebeb568f9b9`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [cf174b30](https://github.com/openshift/csi-node-driver-registrar/commit/cf174b30fad107d354afb0f0b09030a7c97fd296) `sha256:9b8a3c212253498099b01e647d85015c392e06c616e6e0723de81773ce4c0621`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [d1bc3ffa](https://github.com/openshift/csi-external-snapshotter/commit/d1bc3ffaa9759c13a06c2ec61c541342e71bd109) `sha256:305536d437c8f12f056bd9fec73c554cfa15371a495827bff9e2e3cc756a4f73`
* [docker-builder](https://github.com/openshift/builder) git [fcd4ce2d](https://github.com/openshift/builder/commit/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9) `sha256:3d54b4340f911fe645205e957b079d6320f3850639c8fd339af7c97775b13616`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:87941abc4ee4070fd8deefffa8c47d85e75fbd4d4de959efcce84e085029813b`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:f9d7345e09351a0529b65125d09d90af5de86289a21307cd8c0efaa330ec47aa`
* [etcd](https://github.com/openshift/etcd) git [d8d67b8c](https://github.com/openshift/etcd/commit/d8d67b8ce849f816d6d23c904098336632e2348f) `sha256:0b78f777a343a0b61637004fbece09209c5b60663baabc5843367734b01b1227`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [0073bd11](https://github.com/openshift/machine-api-provider-gcp/commit/0073bd1187c07febc963fc67f0df67cd33c8f218) `sha256:68d1b43144ee524ffc4e1a2c22846473d3563aacaa4e15c1ddab31383310974c`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:61d2855b75d6b0f65b46b3b7cf9288b2cd80f4b3e1f21c6cde76584d06f85db0`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [f859eac9](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/f859eac9612d8fff52013b809840b015cee6742d) `sha256:10747c63d6d250091db36326ef6b14e1307d1ff2593df2b6eb47d96f9bc71828`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [03b143d5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/03b143d588768a18fd8afa1534ea7d7a04b4d1f3) `sha256:4dbff92ae32e21acdc705b868cf11563252a13c7c95b4250cc81c1e2cbb26f22`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [46b8c72c](https://github.com/openshift/machine-api-provider-ibmcloud/commit/46b8c72c675770295f5c2c8f85f5f705ca35787c) `sha256:a62bf71c611dae4590cfdb7fccef1b9637ee6b9bbc161d6fb28e70252e7b6948`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:a27734671bb9000087e4283249d710eff4b8a36582e011b448762a217add1b12`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:0e3dfd74158cccd6997bcc333ba5a935522738436e9a3278d0acc555617d363b`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [0336e638](https://github.com/openshift/ironic-agent-image/commit/0336e6383c98f4f0c6b35c71e00116d3c3160c43) `sha256:5fd33ddf23d469c177aebe888b3fb484fbdbe872168919ccad8f6ef879534f37`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:746481f63477ce3e2844813bff0efea3d158ff27051c0dfa87f7c3dd27f5f3a4`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:089019993fda1911b485da454ec01420b092f25aac3f216d882c546a06878a56`
* [keepalived-ipfailover](https://github.com/openshift/images) git [edb8b1e6](https://github.com/openshift/images/commit/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71) `sha256:7d21309c80ff71c71f618170b3cd25a0deb0283b28ead1187dff4369c6cab31d`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:668eded1d7275aeccc83d95f6c6a7217d8ec9af501df617aa6c5bc623bb3197e`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:482b260c9ed6b71530baafcaaed97e0b766a5ff9a03442ac12b60efe36a442b6`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [6fa06eac](https://github.com/openshift/kube-state-metrics/commit/6fa06eac4c3942ba64bff18ca93b5a019ea5c976) `sha256:570b982b149a31958fac2c84cb2fec577b5ecd466def3845078b3bdc09a314cb`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:a7abedcab26d21bcf2e173a1f5c9c5981d906dde3dd7fab9d53aa7a0e6428507`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:7062d50b9587ccb2971ac766b8f668c6d5143dd097410c484895267ed25e3ce7`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [771b562d](https://github.com/openshift/kubevirt-csi-driver/commit/771b562d4875296007850a4d3709a7ae1c6ed3e2) `sha256:1341ae96d8cb8cc037d29ef46bfd7ad1e9457960388b672ca7683bf81e059bf0`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:8af5aa530aa4718d10bf6c7cb5ecf46ecc2d04388f66ed4ea42f0cf146923840`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:c29c2d172af6c2a8eec35b4996c546652890670bee279349ac21874bd3efb8f4`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:180f0ea11339d6aacfc67a58100c55c2bf522eef902b7a6e72f331c72b82a463`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:9b4bd1c18aa05904c90034c0533c39e2240cbea727bf80733c823defef30d4f5`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:2b9dc6813a7672a1acf94ef152bfe58ce8f9ff193a9a4eeb8a62118c70537db7`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:1a6ab4c94b3e0aef545aabb3a2efa16fc5f6df951e295bd4ede8cd5ad7b4ea82`
* [must-gather](https://github.com/openshift/must-gather) git [8554213f](https://github.com/openshift/must-gather/commit/8554213fa214e8e165e7bedaf8d892bb824d83ef) `sha256:8abf29a77b29ae50fb5634048353451f53dd2c32a5f0b20afb6bfb23e20b29fc`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:c3220adbb87a3bbbb109f426a8d4b2f9fa6768b57fea86ed5e7d84dab0948d25`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:b8dc5279788e87edb9c510cf2d2a6c01d48e1223b73eee65f1360653bc18414a`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:96c1df8f11a21e30e52345e10d7c1b157ad3eacc4897240fc10a589f58ae993a`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:d15868625534a6562cbb1c182a3b3debfdf54f92f2b2d1e810d09860916d947a`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:45108dac00d6dc0f48bd62f9bd3d342760aaee7cd875e3702348b0ed59443831`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [ca5eebdc](https://github.com/openshift/oc-mirror/commit/ca5eebdcecf9650248f15fe6009b22788ba0c434) `sha256:98c8c137a748e49042751079f4c89fe61167f5f4687ccb70bdb8886aaef09b3c`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:7a0abe7be4967ea86932600ce237f0a91bc5c4884952088419e60a2d3d7d403c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:1daf46ced0b6e4c52ca5191fd9fd5fa6bcfd8435a47c5424ff1e60e922475900`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [8a8c354b](https://github.com/openshift/machine-api-provider-openstack/commit/8a8c354b99ce83e3c05a91358aadec09944c2fce) `sha256:0ba94b231c093969329921d0dd692678ec1946cd8239a7c36ac61bdbcd5a4d95`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [cbea7a9c](https://github.com/openshift/openstack-resource-controller/commit/cbea7a9cab145c32e2f347be69996b649893cc22) `sha256:109ba73f51bdcf40b3a33c8aa5e9d9e9ca8edf09bae402ce52fcbe4d93568a44`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:9e4f76f018217c06ae0d9660836e6e9c7f332eb3d2947e40bc63a411a514c246`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [766c0952](https://github.com/openshift/cloud-provider-powervs/commit/766c0952fd19f8225fe59b2be8e8c8932b24ebd7) `sha256:65b7d3ea274b46a552edb13847de5ee10db3bafc8dc5decef02992ce58d80b80`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:17151dbba6a336735fce95fddcad66eac2a78e7fb60a938b68a1245bcae557fa`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:8442ffbbb2e319e66a370467d3c3a1b1081c722a71395d794bcabfa60d16bf5e`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [02dc3e9e](https://github.com/openshift/prometheus-alertmanager/commit/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde) `sha256:e20f8fd0d540a5bd6be32d0189832bbe10fdeb88579be4f78cc70fc6917bc22e`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:028703217e08f4210d235d830d432cf71baace90f642dc9284e053a3e7a7a59f`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:998d73da6282b87b1bd2cd58a2cd852034872eb3b022a452d05b4fd2433e0e85`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:66be934805e7d4d672a5fc2602eb37c55a2783bfe71961e2f8482a23f957084d`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:d7bac163e3b837574bedde5ea726fa59210e4130a8d593158ccede778eed5da7`
* [rhel-coreos](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:6599ea587737de2929740f76233b300f85e9b039dbc4665c88a240a2483ee3e8`
* [rhel-coreos-10](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:caf1d88fb6160df369ab2e863cf1624bc966517ca71f739fd9733d741fdf7f57`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:99be0e1fa70cd66aea616dca1007fc004996528682c2dbc438b6c2fbe44c67b4`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:d1ffa6cc20e3d64dbf036c93efa5d0334c9392d5d8dc5ea7fa871f8d5b2c1cc7`
* [thanos](https://github.com/openshift/thanos) git [5d9d0f38](https://github.com/openshift/thanos/commit/5d9d0f387e5cc651470f27352b28674103bfdd77) `sha256:9b99e9e1e2242abd942880018e2139cdf34a95fb5dce423aa2e44e0ebd84ff57`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:0fb71b380fd126cfb6fdebd2d4e69dc36ad05e5c0f4fd00db1f74c481b5ed539`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [39008107](https://github.com/openshift/cloud-provider-vsphere/commit/39008107b1463e3299b0d60c3ac1f7e71ad3e014) `sha256:f78dd967fdf96160596104be27f96acb8918c150af29011547b83dbfe43f8df6`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cf21e121](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cf21e1211225e3cf6baa27bdb12ae86c5c13db39) `sha256:18cb3005bf544a46cb373a1747fdb96eb0a5a4556e2c9a4ea734e93259cf9b27`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [d3668c9a](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/d3668c9a9510f189604343e817cc79ab23367f40) `sha256:369cfe052729c163ec152bbe1c78171fc115b8053c99cfdc8b53f3758605f6c3`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [cf21e121](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cf21e1211225e3cf6baa27bdb12ae86c5c13db39) `sha256:602289f8798d47a1e9dce1e8ada76a05a981d049f7e03d8755dc9e76a3f10945`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [842aed3d](https://github.com/openshift/vsphere-problem-detector/commit/842aed3df97005839ef5deaf560abbe6486b9daf) `sha256:9415a18dd8bbb59dc4dd594a0ad5b006705d1a3edd026baaaf0926283b96a225`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8a98e5cd5e866b638a155a9d8b8b2d01555e13e7)

* [OCPBUGS-83542](https://issues.redhat.com/browse/OCPBUGS-83542): Mark raw FC/iSCSI multipath members as ineligible [#10150](https://github.com/openshift/assisted-service/pull/10150)
* [OCPBUGS-83511](https://issues.redhat.com/browse/OCPBUGS-83511): Fix IRI patcher feature check [#10147](https://github.com/openshift/assisted-service/pull/10147)
* [Full changelog](https://github.com/openshift/assisted-service/compare/aed50cb7f9a7dd63dd865dfae9afb6844a2dd787...8a98e5cd5e866b638a155a9d8b8b2d01555e13e7)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f562f3539125da83145eb1012ea8a4f4d62d0807)

* [OCPBUGS-84129](https://issues.redhat.com/browse/OCPBUGS-84129): add --copy-network when manual network config is detected [#1416](https://github.com/openshift/assisted-installer-agent/pull/1416)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/008935c33fb03bb246c22f8873da7599ec30aa2c...f562f3539125da83145eb1012ea8a4f4d62d0807)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/60bd5908981ddb6b3c5b648ca8f2b031e156dc3f)

* fix monted pull secret parsing (#3724) [#3724](https://github.com/openshift-assisted/assisted-installer-ui/pull/3724)
* Allow to install SNO topology (#3721) [#3721](https://github.com/openshift-assisted/assisted-installer-ui/pull/3721)
* [OCPBUGS-85230](https://issues.redhat.com/browse/OCPBUGS-85230): Ensure follow-redirects pkg resolves to ^1.16.0 (#3705) [#3705](https://github.com/openshift-assisted/assisted-installer-ui/pull/3705)
* [OCPBUGS-85265](https://issues.redhat.com/browse/OCPBUGS-85265): [release-4.22] OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled "Next" button during background validation (#3703) [#3703](https://github.com/openshift-assisted/assisted-installer-ui/pull/3703)
* [OCPBUGS-84318](https://issues.redhat.com/browse/OCPBUGS-84318): fix operators list in ABI below the sea (#3645) [#3645](https://github.com/openshift-assisted/assisted-installer-ui/pull/3645)
* Hide internally generated custom manifests on the Cluster Review page (#3700) [#3700](https://github.com/openshift-assisted/assisted-installer-ui/pull/3700)
* [OCPBUGS-85199](https://issues.redhat.com/browse/OCPBUGS-85199): [release-4.22] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3683) [#3683](https://github.com/openshift-assisted/assisted-installer-ui/pull/3683)
* Remove 2 node arbiter option from the control plane dropdown option (#3702) [#3702](https://github.com/openshift-assisted/assisted-installer-ui/pull/3702)
* [OCPBUGS-85220](https://issues.redhat.com/browse/OCPBUGS-85220), [OCPBUGS-85222](https://issues.redhat.com/browse/OCPBUGS-85222), [OCPBUGS-85224](https://issues.redhat.com/browse/OCPBUGS-85224), [OCPBUGS-85226](https://issues.redhat.com/browse/OCPBUGS-85226), [OCPBUGS-85228](https://issues.redhat.com/browse/OCPBUGS-85228): Bump axios to ^1.15.1 (#3693) [#3693](https://github.com/openshift-assisted/assisted-installer-ui/pull/3693)
* [OCPBUGS-84272](https://issues.redhat.com/browse/OCPBUGS-84272): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3638) [#3638](https://github.com/openshift-assisted/assisted-installer-ui/pull/3638)
* Update OWNERS file (#3660) [#3660](https://github.com/openshift-assisted/assisted-installer-ui/pull/3660)
* NO-ISSUE: Update translation files to match new i18next format (#3658) [#3658](https://github.com/openshift-assisted/assisted-installer-ui/pull/3658)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/72477b8616cffcd9abe7e3a32b93b83f60761b06...60bd5908981ddb6b3c5b648ca8f2b031e156dc3f)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/abf81a7f11af9f3050c151cd167dcfc4f9709368)

* [OCPBUGS-86042](https://issues.redhat.com/browse/OCPBUGS-86042): Filter out link-local IPv6 addresses [#306](https://github.com/openshift/agent-installer-utils/pull/306)
* [OCPBUGS-85525](https://issues.redhat.com/browse/OCPBUGS-85525): update konflux references [#296](https://github.com/openshift/agent-installer-utils/pull/296)
* [OCPBUGS-84141](https://issues.redhat.com/browse/OCPBUGS-84141): Update 4.22 Konflux files [#295](https://github.com/openshift/agent-installer-utils/pull/295)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/1f7abf3147e6ba2f9d29ae469fdde2c4240d6de5...abf81a7f11af9f3050c151cd167dcfc4f9709368)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3)

* [OCPBUGS-83898](https://issues.redhat.com/browse/OCPBUGS-83898): UPSTREAM: &lt;drop&gt;: bump google.golang.org/grpc to v1.79.3 [#155](https://github.com/openshift/cloud-provider-aws/pull/155)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/e73d6a3821655afc6fb19d88a66907078e6854f2...b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/9172366ccfbde3225e045b59587d38db655edd94)

* [OCPBUGS-84393](https://issues.redhat.com/browse/OCPBUGS-84393): Bump github.com/go-jose/go-jose/v4 to 4.1.4 [#606](https://github.com/openshift/cluster-api-provider-aws/pull/606)
* OCPBUGS-83899,UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.10.3 into release-4.22 [#603](https://github.com/openshift/cluster-api-provider-aws/pull/603)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/2d7aa679a7847b8831f4a14e84154170d33574ed...9172366ccfbde3225e045b59587d38db655edd94)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/51d6bc760234ffccb0348937a5cfd70b326119b9)

* [OCPBUGS-83900](https://issues.redhat.com/browse/OCPBUGS-83900): UPSTREAM: 2911: bump google.golang.org/grpc v1.80.0 to fix CVE-2026-33186 [#316](https://github.com/openshift/aws-ebs-csi-driver/pull/316)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/0927af1c1397b6f3c7545c715e1a87e0263ae2bf...51d6bc760234ffccb0348937a5cfd70b326119b9)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/08c62f7e711ae56f7b5b219704744dae1830a801)

* [OCPBUGS-85532](https://issues.redhat.com/browse/OCPBUGS-85532): Add init container for Manila node daemonset [#555](https://github.com/openshift/csi-operator/pull/555)
* [OCPBUGS-85116](https://issues.redhat.com/browse/OCPBUGS-85116): Mount writable /tmp in SMB CSI driver [#550](https://github.com/openshift/csi-operator/pull/550)
* [OCPBUGS-84243](https://issues.redhat.com/browse/OCPBUGS-84243): [release-4.22] Add VolumeAttributesClass e2e test manifests for Azure disk [#544](https://github.com/openshift/csi-operator/pull/544)
* [Full changelog](https://github.com/openshift/csi-operator/compare/8253452c39841b626cedd0b42dc0449943ccf938...08c62f7e711ae56f7b5b219704744dae1830a801)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c)

* [OCPBUGS-85125](https://issues.redhat.com/browse/OCPBUGS-85125): Fixed broken test and simplified some logic [#184](https://github.com/openshift/machine-api-provider-aws/pull/184)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/37a067230cbad4997dcf1d2c16685e36b6991c9e...1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3)

* [OCPBUGS-83906](https://issues.redhat.com/browse/OCPBUGS-83906): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.1 (dbeb413) into release-4.22 [#381](https://github.com/openshift/cluster-api-provider-azure/pull/381)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/de16e88406265ae154e18bc06e973579ef249cfa...a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/799ce30e63a4dd3ac74b391e494dc8b50066644f)

* [OCPBUGS-85193](https://issues.redhat.com/browse/OCPBUGS-85193): check for node name in waitForDiskManagedByTobeRemoved [#146](https://github.com/openshift/azure-disk-csi-driver/pull/146)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a995719b8666626dbffe09c03f039611feb48612...799ce30e63a4dd3ac74b391e494dc8b50066644f)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/403f856e29605126b2711a1bfe7a4f6c276b344d)

* UPSTREAM: 3023: OCPBUGS-83329: Bump grpc to v1.79.3 [#126](https://github.com/openshift/azure-file-csi-driver/pull/126)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/c481e92ba74550bbd3134a9ae92ccef31de7f60c...403f856e29605126b2711a1bfe7a4f6c276b344d)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36)

* [OCPBUGS-83879](https://issues.redhat.com/browse/OCPBUGS-83879): Bump grpc package for CVE fix in 4.22 [#27](https://github.com/openshift/azure-service-operator/pull/27)
* [OCPBUGS-84333](https://issues.redhat.com/browse/OCPBUGS-84333): Updating ose-azure-service-operator-container image to be consistent with ART for 4.22 [#25](https://github.com/openshift/azure-service-operator/pull/25)
* [OCPBUGS-83835](https://issues.redhat.com/browse/OCPBUGS-83835): UPSTREAM: &lt;carry&gt;: add openshift/e2e-tests.sh [#23](https://github.com/openshift/azure-service-operator/pull/23)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8...b44d444422f5a7eb21b9ca65f3975a2d13ec9b36)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45)

* [OCPBUGS-84394](https://issues.redhat.com/browse/OCPBUGS-84394): github.com/go-jose/go-jose/v4 v4.1.4 [#47](https://github.com/openshift/azure-workload-identity/pull/47)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/81a256e668a054385d4a27a393afd77148f268b0...a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/92cb4e39665966fd3128abd6256b13aa56523eeb)

* [OCPBUGS-85407](https://issues.redhat.com/browse/OCPBUGS-85407): PowerVS: Add port 80 security group rule [#10548](https://github.com/openshift/installer/pull/10548)
* [OCPBUGS-85503](https://issues.redhat.com/browse/OCPBUGS-85503): PowerVS: Fix supported system types retrieval [#10521](https://github.com/openshift/installer/pull/10521)
* [OCPBUGS-84701](https://issues.redhat.com/browse/OCPBUGS-84701): vSphere - Missing unit tests to cover polarion workitems [#10526](https://github.com/openshift/installer/pull/10526)
* [OCPBUGS-84663](https://issues.redhat.com/browse/OCPBUGS-84663): add unit tests for Nutanix to replace polarion workitems [#10525](https://github.com/openshift/installer/pull/10525)
* [OCPBUGS-84643](https://issues.redhat.com/browse/OCPBUGS-84643): Update RHCOS-release-4.22 bootimage metadata to 10.2.20260423-0 / 9.8.20260428-0 [#10523](https://github.com/openshift/installer/pull/10523)
* [Full changelog](https://github.com/openshift/installer/compare/dfb58c0c74c7a27a9859c5b84d5d087e70f5f6a3...92cb4e39665966fd3128abd6256b13aa56523eeb)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/062bc5449c4987c92c76da4d315ef4969c22d638)

* [OCPBUGS-85066](https://issues.redhat.com/browse/OCPBUGS-85066): Add required-scc annotation to node-joiner pod [#2266](https://github.com/openshift/oc/pull/2266)
* [Full changelog](https://github.com/openshift/oc/compare/66dee73f66c4f048c333c6a77d76871872027896...062bc5449c4987c92c76da4d315ef4969c22d638)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c23bddf58e561b725ab5eb012252091e7a472084)

* [OCPBUGS-84398](https://issues.redhat.com/browse/OCPBUGS-84398): github.com/go-jose/go-jose/v4 v4.1.4 [#1020](https://github.com/openshift/cloud-credential-operator/pull/1020)
* [OCPBUGS-83625](https://issues.redhat.com/browse/OCPBUGS-83625): test-ext: hypershift skip CCO metrics endpoint validation [#1013](https://github.com/openshift/cloud-credential-operator/pull/1013)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c50292310b1070ff8bfe842ca7424bf5ae2c9346...c23bddf58e561b725ab5eb012252091e7a472084)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88)

* [OCPBUGS-85105](https://issues.redhat.com/browse/OCPBUGS-85105): Fix OAuth page showing OKD branding instead of OpenShift [#888](https://github.com/openshift/cluster-authentication-operator/pull/888)
* [OCPBUGS-84954](https://issues.redhat.com/browse/OCPBUGS-84954): Fix terminationMessagePolicy on network policy e2e test pods [#884](https://github.com/openshift/cluster-authentication-operator/pull/884)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/51ea6cdc877f997cc9b376aa26820e8e83d8c1c7...5a44cc2a8c36d144f8782e23f47bc31e2e4ead88)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/521e545fb92e7138b2ce2bc05f871f53a6c112fb)

* [OCPBUGS-84131](https://issues.redhat.com/browse/OCPBUGS-84131): [release-4.22] UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references [#419](https://github.com/openshift/kubernetes-autoscaler/pull/419)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/05bcec5a83ea3d9afc3a342a1b8878e30c19ef94...521e545fb92e7138b2ce2bc05f871f53a6c112fb)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/4ac0e75c11e14023fbf3ab3ea1fa6dba01b01769)

* [OCPBUGS-85640](https://issues.redhat.com/browse/OCPBUGS-85640): Fix webhook to validate the actual admission request object [#602](https://github.com/openshift/cluster-baremetal-operator/pull/602)
* [OCPBUGS-84936](https://issues.redhat.com/browse/OCPBUGS-84936): Fix webhook server not starting due to missing WithValidator [#598](https://github.com/openshift/cluster-baremetal-operator/pull/598)
* [OCPBUGS-84924](https://issues.redhat.com/browse/OCPBUGS-84924): Bind the plain HTTP 8080 metrics port to localhost [#596](https://github.com/openshift/cluster-baremetal-operator/pull/596)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/e4f3cd50b6a33337b723beb682c4fdcf5cdd820c...4ac0e75c11e14023fbf3ab3ea1fa6dba01b01769)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/f1718df9c13b0cee5ede1b6354e29acc466607a4)

* OCPBUGS-83913,UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.7 (b5fa593) into release-4.22 [#285](https://github.com/openshift/cluster-api/pull/285)
* [OCPBUGS-83759](https://issues.redhat.com/browse/OCPBUGS-83759), [OCPCLOUD-3419](https://issues.redhat.com/browse/OCPCLOUD-3419): Adopt IPAM CRDs on upgrade [#280](https://github.com/openshift/cluster-api/pull/280)
* [Full changelog](https://github.com/openshift/cluster-api/compare/c11cf5d40d83b88479be4e8dd121801a71b3f0e0...f1718df9c13b0cee5ede1b6354e29acc466607a4)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/b84112efbe1a3f34cbabe262335be28595041afc)

* [OCPBUGS-86353](https://issues.redhat.com/browse/OCPBUGS-86353): fix: scope webhook to capi namespace, remove unused webhook endpoints [#568](https://github.com/openshift/cluster-capi-operator/pull/568)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#555](https://github.com/openshift/cluster-capi-operator/pull/555)
* [OCPBUGS-84942](https://issues.redhat.com/browse/OCPBUGS-84942): fix: remove retired Microsoft.ClassicStorage permission [#548](https://github.com/openshift/cluster-capi-operator/pull/548)
* [OCPBUGS-83917](https://issues.redhat.com/browse/OCPBUGS-83917): Bump grpc package for CVE fix in 4.22 [#539](https://github.com/openshift/cluster-capi-operator/pull/539)
* [OCPBUGS-84365](https://issues.redhat.com/browse/OCPBUGS-84365): Fix e2e flake when workers are in us-west-2b [#530](https://github.com/openshift/cluster-capi-operator/pull/530)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/807bdc323f2f042961bcd783bd999bb3d03bda4b...b84112efbe1a3f34cbabe262335be28595041afc)


### [cluster-config-api](https://github.com/openshift/api/tree/694421e64aeeae4374e7e7394014ad40ab5a1f30)

* Promote EVPN Feature Gate to GA [#2826](https://github.com/openshift/api/pull/2826)
* [OCPBUGS-85102](https://issues.redhat.com/browse/OCPBUGS-85102): Add labelSelector to MachineSet status for scale subresource [#2831](https://github.com/openshift/api/pull/2831)
* [OCPBUGS-83846](https://issues.redhat.com/browse/OCPBUGS-83846): Add component names, manifestSubstitutions, and observedGeneration to CAPI revisions [#2819](https://github.com/openshift/api/pull/2819)
* [OCPBUGS-83768](https://issues.redhat.com/browse/OCPBUGS-83768): extend supported values for MCN IRI image status field [#2817](https://github.com/openshift/api/pull/2817)
* [OCPBUGS-83755](https://issues.redhat.com/browse/OCPBUGS-83755): fix(config/v1): define constants for authentication types as typed constants [#2816](https://github.com/openshift/api/pull/2816)
* [Full changelog](https://github.com/openshift/api/compare/b37d107c490a35659457ed38f9f5b109f85448da...694421e64aeeae4374e7e7394014ad40ab5a1f30)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/90e608b3e66c284a5b41bc57e6d0d3a45aceebdc)

* [OCPBUGS-85342](https://issues.redhat.com/browse/OCPBUGS-85342): Fix stale config cache causing incorrect deployment [#1342](https://github.com/openshift/cluster-image-registry-operator/pull/1342)
* [OCPBUGS-83692](https://issues.redhat.com/browse/OCPBUGS-83692): Allow longer window before going Degraded [#1323](https://github.com/openshift/cluster-image-registry-operator/pull/1323)
* [OCPBUGS-83650](https://issues.redhat.com/browse/OCPBUGS-83650): CNTRLPLANE-2660:e2e testing automation: Image Registry network policy [#1322](https://github.com/openshift/cluster-image-registry-operator/pull/1322)
* [OCPBUGS-83265](https://issues.redhat.com/browse/OCPBUGS-83265): ImageConfigController: add inertia before ImageConfigControllerDegraded [#1321](https://github.com/openshift/cluster-image-registry-operator/pull/1321)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/3a32428c3d183a0c6011359d2c6cf87d05736472...90e608b3e66c284a5b41bc57e6d0d3a45aceebdc)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/8ae91f62ca9e6ca1f210b815ab54edbae856ac4c)

* [OCPBUGS-86074](https://issues.redhat.com/browse/OCPBUGS-86074): Update grpc-go and x/net [#1449](https://github.com/openshift/cluster-ingress-operator/pull/1449)
* [OCPBUGS-85024](https://issues.redhat.com/browse/OCPBUGS-85024): TestUnsupportedConfigOverride: Ignore featuregate and defaults [#1432](https://github.com/openshift/cluster-ingress-operator/pull/1432)
* [OCPBUGS-85064](https://issues.redhat.com/browse/OCPBUGS-85064): Allow host network connections to the ingress canary [#1433](https://github.com/openshift/cluster-ingress-operator/pull/1433)
* [OCPBUGS-84841](https://issues.redhat.com/browse/OCPBUGS-84841): isFIPSEnabled: Check FIPS_ENABLED env. var. first [#1429](https://github.com/openshift/cluster-ingress-operator/pull/1429)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2c5b4ef0021db96ba6fecf630c53a15c12134578...8ae91f62ca9e6ca1f210b815ab54edbae856ac4c)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/fb68eab51544f9dffac9916796723f6cee4faf3c)

* [OCPBUGS-85269](https://issues.redhat.com/browse/OCPBUGS-85269): fsync static pod cert and manifest writes for crash durability [#2143](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2143)
* [OCPBUGS-85260](https://issues.redhat.com/browse/OCPBUGS-85260): operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization [#2142](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2142)
* [OCPBUGS-84536](https://issues.redhat.com/browse/OCPBUGS-84536): Bump library-go [#2131](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2131)
* [OCPBUGS-83770](https://issues.redhat.com/browse/OCPBUGS-83770): Allow setting the oauthMetadata when auth type is None [#2112](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2112)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ebd723168d8bac16ce678a01c3ea7a7467030169...fb68eab51544f9dffac9916796723f6cee4faf3c)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/95150ed5dbf11370b4a06e6959c77efa13768561)

* [OCPBUGS-84560](https://issues.redhat.com/browse/OCPBUGS-84560): CNTRLPLANE-3107: e2e testing automation Create network network policy test cases [#931](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/931)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/e2d54f2da0346309b329c34552d9896476683fc8...95150ed5dbf11370b4a06e6959c77efa13768561)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/51ea59abd057d0cef56b29b8a74efc28411d5427)

* [OCPBUGS-83736](https://issues.redhat.com/browse/OCPBUGS-83736): add /var/run/kubernetes as emptyDir [#640](https://github.com/openshift/cluster-kube-scheduler-operator/pull/640)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/b80850a15da8485c52c486de30cec79600782206...51ea59abd057d0cef56b29b8a74efc28411d5427)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/9afe66875bff8b5926f2bf6dec4eade1e4a09bab)

* [OCPBUGS-85570](https://issues.redhat.com/browse/OCPBUGS-85570): add PodDisruptionBudget for migrator deployment [#174](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/174)
* [OCPBUGS-84312](https://issues.redhat.com/browse/OCPBUGS-84312): schedule migrator pods on control-plane nodes [#162](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/162)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e4e983adfde0ccf999efca551fc07b9e28562a10...9afe66875bff8b5926f2bf6dec4eade1e4a09bab)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/b4ce8c8e60a691ec428c6cb822c411d9b11efb5f)

* [OCPBUGS-86034](https://issues.redhat.com/browse/OCPBUGS-86034): fix: use numeric ports in NetworkPolicies and add enforcement e2e test [#2929](https://github.com/openshift/cluster-monitoring-operator/pull/2929)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/f6a7969c5c070e4deb6136c3561af60ab44780e1...b4ce8c8e60a691ec428c6cb822c411d9b11efb5f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/e20b9cb9a0b3bc293e622ef1caf70a813710ffa8)

* [OCPBUGS-83637](https://issues.redhat.com/browse/OCPBUGS-83637): only report Progressing for active network rollouts [#2962](https://github.com/openshift/cluster-network-operator/pull/2962)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bc5af87f8957262a504b225591593c92db1c8bc2...e20b9cb9a0b3bc293e622ef1caf70a813710ffa8)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/74d2449d12e30f58cdaf46bd87a96f10dd4883d1)

* [OCPBUGS-85020](https://issues.redhat.com/browse/OCPBUGS-85020): e2e: Add irqbalance StartLimitBurst &gt;= 100 config test [#1506](https://github.com/openshift/cluster-node-tuning-operator/pull/1506)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3d98f7ee7fe0651d182b8a780956512eb407a963...74d2449d12e30f58cdaf46bd87a96f10dd4883d1)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6)

* [OCPBUGS-85097](https://issues.redhat.com/browse/OCPBUGS-85097): e2e network policy tests [#687](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/687)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/e6a55cd55c867bf9e26e7ec0ba5accc959b0c27c...1924cf6f12c632d56f1d41341f08ff9ff6eae7d6)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2d2699e4f3fabc80e402f4c090c8cf80c4517977)

* [OCPBUGS-86054](https://issues.redhat.com/browse/OCPBUGS-86054): e2e network policy tests [#436](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/436)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a...2d2699e4f3fabc80e402f4c090c8cf80c4517977)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/317b21a930d074951c27c45c77c02ea211c43f14)

* [CNTRLPLANE-3176](https://issues.redhat.com/browse/CNTRLPLANE-3176): implements operator tls config compliance [#688](https://github.com/openshift/cluster-samples-operator/pull/688)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/eeac6ba8ddbe5cc6d3a403293581648affdf6566...317b21a930d074951c27c45c77c02ea211c43f14)


### [console](https://github.com/openshift/console/tree/09626a30822d9473ad4c3e77a1cf0d5ed1f6ec9c)

* [OCPBUGS-86228](https://issues.redhat.com/browse/OCPBUGS-86228): Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption [#16468](https://github.com/openshift/console/pull/16468)
* [OCPBUGS-86064](https://issues.redhat.com/browse/OCPBUGS-86064): Enable Topology e2e tests [#16458](https://github.com/openshift/console/pull/16458)
* [OCPBUGS-83940](https://issues.redhat.com/browse/OCPBUGS-83940): bump gRPC-Go to v1.79.3 [#16443](https://github.com/openshift/console/pull/16443)
* [OCPBUGS-83416](https://issues.redhat.com/browse/OCPBUGS-83416): [release-4.22] CVE-2026-26996 Bump minimatch library [#16278](https://github.com/openshift/console/pull/16278)
* [OCPBUGS-85505](https://issues.redhat.com/browse/OCPBUGS-85505): Add Suspense boundary to LazyRoutePage for plugin routes [#16438](https://github.com/openshift/console/pull/16438)
* [OCPBUGS-85494](https://issues.redhat.com/browse/OCPBUGS-85494): Prevent binary secret data corruption when editing [#16435](https://github.com/openshift/console/pull/16435)
* NO-JIRA: enable multi-architecture yarn builds [#16415](https://github.com/openshift/console/pull/16415)
* [OCPBUGS-85196](https://issues.redhat.com/browse/OCPBUGS-85196): Remove `@console` imports from SDK dist [#16407](https://github.com/openshift/console/pull/16407)
* [OCPBUGS-84843](https://issues.redhat.com/browse/OCPBUGS-84843): i18n upload/download routine task - version 4.22 [#16382](https://github.com/openshift/console/pull/16382)
* [OCPBUGS-85114](https://issues.redhat.com/browse/OCPBUGS-85114): Fix SDK publish workflow for Yarn Berry [#16403](https://github.com/openshift/console/pull/16403)
* [OCPBUGS-84963](https://issues.redhat.com/browse/OCPBUGS-84963): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16394](https://github.com/openshift/console/pull/16394)
* [OCPBUGS-84556](https://issues.redhat.com/browse/OCPBUGS-84556): re-enable helm-release.feature [#16358](https://github.com/openshift/console/pull/16358)
* [OCPBUGS-84916](https://issues.redhat.com/browse/OCPBUGS-84916): Remove PII from events [#16393](https://github.com/openshift/console/pull/16393)
* [OCPBUGS-84811](https://issues.redhat.com/browse/OCPBUGS-84811): fix Helm list page redirect after upgrade/rollback [#16380](https://github.com/openshift/console/pull/16380)
* [OCPBUGS-84848](https://issues.redhat.com/browse/OCPBUGS-84848): Fix ConsoleDataView filter order: Name and Label should appear first [#16383](https://github.com/openshift/console/pull/16383)
* [OCPBUGS-84807](https://issues.redhat.com/browse/OCPBUGS-84807): Fix race conditions in create-namespace Cypress tests [#16379](https://github.com/openshift/console/pull/16379)
* [OCPBUGS-84681](https://issues.redhat.com/browse/OCPBUGS-84681): Fix crash when switching language to English [#16373](https://github.com/openshift/console/pull/16373)
* [OCPBUGS-84216](https://issues.redhat.com/browse/OCPBUGS-84216): Fix create visual connector in Topology [#16314](https://github.com/openshift/console/pull/16314)
* [OCPBUGS-84345](https://issues.redhat.com/browse/OCPBUGS-84345): Update resolveDynamicModuleMaps to skip unavailable packages [#16342](https://github.com/openshift/console/pull/16342)
* [OCPBUGS-83546](https://issues.redhat.com/browse/OCPBUGS-83546): Fix Cypress test timeouts by using correct timeout option [#16292](https://github.com/openshift/console/pull/16292)
* [OCPBUGS-84246](https://issues.redhat.com/browse/OCPBUGS-84246): prepare for 4.22-prerelease.3 sdk publish [#16337](https://github.com/openshift/console/pull/16337)
* [OCPBUGS-84246](https://issues.redhat.com/browse/OCPBUGS-84246): 4.22 SDK fixes [#16321](https://github.com/openshift/console/pull/16321)
* [OCPBUGS-83543](https://issues.redhat.com/browse/OCPBUGS-83543): Add empty state visibility check to CRD test [#16309](https://github.com/openshift/console/pull/16309)
* [OCPBUGS-83543](https://issues.redhat.com/browse/OCPBUGS-83543): Fix race condition in CRD Cypress test [#16290](https://github.com/openshift/console/pull/16290)
* [Full changelog](https://github.com/openshift/console/compare/52099b4a905e210e1a30f54727ca3d214d130902...09626a30822d9473ad4c3e77a1cf0d5ed1f6ec9c)


### [coredns](https://github.com/openshift/coredns/tree/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4)

* [OCPBUGS-86189](https://issues.redhat.com/browse/OCPBUGS-86189): [release-4.22] OCPBUGS-83943: Bump gRPC to v1.79.3 to resolve CVE-2026-33186 [#185](https://github.com/openshift/coredns/pull/185)
* [Full changelog](https://github.com/openshift/coredns/compare/0dded2d232dab43c107b1dab9d0d9fdfd8259622...9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f146b90407764c052b7e26ee5a4da338b240eea5)

* UPSTREAM-SYNC: Sync release-4.22 with upstream release-1.35 [#381](https://github.com/openshift/cloud-provider-openstack/pull/381)
* [OCPBUGS-85241](https://issues.redhat.com/browse/OCPBUGS-85241): Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 [#392](https://github.com/openshift/cloud-provider-openstack/pull/392)
* [OCPBUGS-85239](https://issues.redhat.com/browse/OCPBUGS-85239): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 [#390](https://github.com/openshift/cloud-provider-openstack/pull/390)
* [OCPBUGS-85240](https://issues.redhat.com/browse/OCPBUGS-85240): Updating csi-driver-manila-container image to be consistent with ART for 4.22 [#391](https://github.com/openshift/cloud-provider-openstack/pull/391)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/fd31b5da11d75a7a80e7c4a6c7a56acf304e2661...f146b90407764c052b7e26ee5a4da338b240eea5)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/5a8887df841e38a71c82d78922380c6027a2b486)

* [OCPBUGS-83946](https://issues.redhat.com/browse/OCPBUGS-83946): CVE-2026-33186: bump google.golang.org/grpc to v1.79.3 [#174](https://github.com/openshift/csi-driver-nfs/pull/174)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e9f249405ad2bced3d1805dd5beda368d7f3d564...5a8887df841e38a71c82d78922380c6027a2b486)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/95a1979700f021e20879480b98b953bc382a0eaf)

* [OCPBUGS-83947](https://issues.redhat.com/browse/OCPBUGS-83947): Bump google.golang.org/grpc to v1.79.3 [#107](https://github.com/openshift/csi-external-attacher/pull/107)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/98b1f4acf9c004687ef55e9f187703768933bb56...95a1979700f021e20879480b98b953bc382a0eaf)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/3b79aefc35a504ccef3f36f6e43aafbdd3301341)

* [OCPBUGS-82033](https://issues.redhat.com/browse/OCPBUGS-82033): Bump google.golang.org/grpc to 1.79.3 [#133](https://github.com/openshift/csi-external-provisioner/pull/133)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f90c06a3113696cdb757e4b7c9dcfeb0e9dddb81...3b79aefc35a504ccef3f36f6e43aafbdd3301341)


### [docker-registry](https://github.com/openshift/image-registry/tree/9eae44fcf44142a705031fa16a613c450dbe685a)

* [OCPBUGS-84738](https://issues.redhat.com/browse/OCPBUGS-84738): pin cloud.google.com/go/storage to v1.30.1 to fix blob deletion [#470](https://github.com/openshift/image-registry/pull/470)
* [Full changelog](https://github.com/openshift/image-registry/compare/c3fa7db05e878e35ff95fcff896f716e82fdd170...9eae44fcf44142a705031fa16a613c450dbe685a)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/ea31ab85a7cf25e88532598b73502d535462a5d7)

* [OCPBUGS-83965](https://issues.redhat.com/browse/OCPBUGS-83965), [OCPBUGS-84447](https://issues.redhat.com/browse/OCPBUGS-84447): Update grpc and spdy dependencies [#117](https://github.com/openshift/cloud-provider-gcp/pull/117)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/4d9707e182c4f8734d83ebf21e3ffcc4c38d04e9...ea31ab85a7cf25e88532598b73502d535462a5d7)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/e7674ede9ce8d021a878a6d5e81942875387e5eb)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into release-4.22 [#294](https://github.com/openshift/cluster-api-provider-gcp/pull/294)
* [OCPBUGS-83966](https://issues.redhat.com/browse/OCPBUGS-83966): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into release-4.22 [#293](https://github.com/openshift/cluster-api-provider-gcp/pull/293)
* [OCPBUGS-84862](https://issues.redhat.com/browse/OCPBUGS-84862): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 [#286](https://github.com/openshift/cluster-api-provider-gcp/pull/286)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/37085d5287031ee68f58b165256d4104bba99886...e7674ede9ce8d021a878a6d5e81942875387e5eb)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0)

* [OCPBUGS-81649](https://issues.redhat.com/browse/OCPBUGS-81649): Bump google.golang.org/grpc to v1.79.3 in release 4.22 [#108](https://github.com/openshift/gcp-pd-csi-driver/pull/108)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/2ba117405ff1cee765d42491f5863b06a1c9a2da...48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9)

* [OCPBUGS-85023](https://issues.redhat.com/browse/OCPBUGS-85023): Add test e2e manifest for images volumeSnapshotClass CSI tests [#180](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/180)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/6b00096f4a84203a69467802b846f215b4e04888...a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9)


### [haproxy-router](https://github.com/openshift/router/tree/1d980e1d4c65832893e91150df92fc6ad1932d89)

* [OCPBUGS-83969](https://issues.redhat.com/browse/OCPBUGS-83969): Bump google.golang.org/grpc to v1.79.3 [#776](https://github.com/openshift/router/pull/776)
* [Full changelog](https://github.com/openshift/router/compare/896390778ebe15f57f87e6ca78f11c96e64c2652...1d980e1d4c65832893e91150df92fc6ad1932d89)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/c5ea727d19837f8a22cda5c0ba8899960b7777ff)

* [OCPBUGS-85499](https://issues.redhat.com/browse/OCPBUGS-85499): Bump Kubernetes v1.35.5 to release-4.22 [#2664](https://github.com/openshift/kubernetes/pull/2664)
* [OCPBUGS-85415](https://issues.redhat.com/browse/OCPBUGS-85415): [release-4.22] Improve WatchList test robustness [#2663](https://github.com/openshift/kubernetes/pull/2663)
* [OCPBUGS-84640](https://issues.redhat.com/browse/OCPBUGS-84640): devicemanager: constrain topology hints to device NUMA nodes [#2656](https://github.com/openshift/kubernetes/pull/2656)
* [OCPBUGS-83607](https://issues.redhat.com/browse/OCPBUGS-83607): Bump to k8s v1.35.4 [#2646](https://github.com/openshift/kubernetes/pull/2646)
* [OCPBUGS-84055](https://issues.redhat.com/browse/OCPBUGS-84055): Update the csi-driver-host-path version to 1.17.1 [#2650](https://github.com/openshift/kubernetes/pull/2650)
* [Full changelog](https://github.com/openshift/kubernetes/compare/9193b12ab88e006723c8605bea1659bfcbe7d638...c5ea727d19837f8a22cda5c0ba8899960b7777ff)


### [hypershift](https://github.com/openshift/hypershift/tree/d6c72d15350752e315c198f7a68558ae4086e3c7)

* [OCPBUGS-86354](https://issues.redhat.com/browse/OCPBUGS-86354): set limits for aro.openshift.io/swift-nic in request overrides for ARO swift [#8564](https://github.com/openshift/hypershift/pull/8564)
* [OCPBUGS-85620](https://issues.redhat.com/browse/OCPBUGS-85620): Fix webhook TLS failure after service-ca to self-managed cert migration [#8513](https://github.com/openshift/hypershift/pull/8513)
* [OCPBUGS-83836](https://issues.redhat.com/browse/OCPBUGS-83836): add missing RBAC for webhook configurations [#8295](https://github.com/openshift/hypershift/pull/8295)
* [OCPBUGS-84939](https://issues.redhat.com/browse/OCPBUGS-84939): [release-4.22] add CP pull-secret watches for in-place propagation [#8408](https://github.com/openshift/hypershift/pull/8408)
* [OCPBUGS-86026](https://issues.redhat.com/browse/OCPBUGS-86026): Fix metrics-proxy deployment failure due to dots in volume names [#8534](https://github.com/openshift/hypershift/pull/8534)
* [OCPBUGS-85779](https://issues.redhat.com/browse/OCPBUGS-85779): Add AWS ISO domains to konnectivity IsCloudAPI [#8447](https://github.com/openshift/hypershift/pull/8447)
* [OCPBUGS-85659](https://issues.redhat.com/browse/OCPBUGS-85659): Clarify --base-domain flag default behavior [#8525](https://github.com/openshift/hypershift/pull/8525)
* [ACM-33601](https://issues.redhat.com/browse/ACM-33601): use the latest ubi9 nginx image [#8465](https://github.com/openshift/hypershift/pull/8465)
* [OCPBUGS-78988](https://issues.redhat.com/browse/OCPBUGS-78988): bump go builder and ubi images [#8457](https://github.com/openshift/hypershift/pull/8457)
* [CNTRLPLANE-2939](https://issues.redhat.com/browse/CNTRLPLANE-2939): Coordinate CRD lifecycle with Cluster CAPI Operator [#8442](https://github.com/openshift/hypershift/pull/8442)
* [OCPBUGS-85104](https://issues.redhat.com/browse/OCPBUGS-85104): fix, cno, skip cloud-network-config-controller check on non-cloud platforms [#8438](https://github.com/openshift/hypershift/pull/8438)
* NO-JIRA: fix(ci): use PR base SHA for api-lint diff in GHA [#8430](https://github.com/openshift/hypershift/pull/8430)
* [OCPBUGS-84841](https://issues.redhat.com/browse/OCPBUGS-84841): fix(ingress): set FIPS_ENABLED env var on ingress operator [#8388](https://github.com/openshift/hypershift/pull/8388)
* [OCPBUGS-83709](https://issues.redhat.com/browse/OCPBUGS-83709): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8272](https://github.com/openshift/hypershift/pull/8272)
* [OCPBUGS-78988](https://issues.redhat.com/browse/OCPBUGS-78988): chore(deps): weekly dependabot consolidation [#8383](https://github.com/openshift/hypershift/pull/8383)
* [OCPBUGS-84632](https://issues.redhat.com/browse/OCPBUGS-84632): fix(azure): detect and replace stale role assignments on cluster re-creation [#8359](https://github.com/openshift/hypershift/pull/8359)
* [OCPBUGS-83576](https://issues.redhat.com/browse/OCPBUGS-83576): fix(metrics-proxy): resolve ports from pods instead of deployments [#8260](https://github.com/openshift/hypershift/pull/8260)
* [Full changelog](https://github.com/openshift/hypershift/compare/5431b93cee3c5096ea1b72eecbccb47581bac200...d6c72d15350752e315c198f7a68558ae4086e3c7)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/24cff9a691e1ebee94669c834320c6ea974a2010)

* [OCPBUGS-83973](https://issues.redhat.com/browse/OCPBUGS-83973): Upgrade grpc for CVE-2026-33186 [#105](https://github.com/openshift/cloud-provider-ibm/pull/105)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/d9222a1c00c37d635da02b65606fde1e54b2ec03...24cff9a691e1ebee94669c834320c6ea974a2010)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/d362aef240c280676249fa34c80fa1b39c684560)

* [OCPBUGS-83974](https://issues.redhat.com/browse/OCPBUGS-83974): Bump google.golang.org/grpc to v1.79.3 [#147](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/147)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf...d362aef240c280676249fa34c80fa1b39c684560)


### [insights-operator](https://github.com/openshift/insights-operator/tree/db59978d438a92e6fe805e9a9fb4dbbc5edaa4b6)

* [OCPBUGS-86013](https://issues.redhat.com/browse/OCPBUGS-86013): add trusted-ca-bundle to gatherin job [#1290](https://github.com/openshift/insights-operator/pull/1290)
* [OCPBUGS-83976](https://issues.redhat.com/browse/OCPBUGS-83976): Bump google.golang.org/grpc to v1.79.3 [#1287](https://github.com/openshift/insights-operator/pull/1287)
* [Full changelog](https://github.com/openshift/insights-operator/compare/d7b9c77e6565d4452ff79cd346f3ee6b8535698c...db59978d438a92e6fe805e9a9fb4dbbc5edaa4b6)


### [ironic](https://github.com/openshift/ironic-image/tree/f934d2cdf0bebbde4992980a770dd799056ab867)

* [OKD-362](https://issues.redhat.com/browse/OKD-362): Add watchdog to python-requirements.okd [#844](https://github.com/openshift/ironic-image/pull/844)
* [OCPBUGS-84651](https://issues.redhat.com/browse/OCPBUGS-84651): Bump sushy [#843](https://github.com/openshift/ironic-image/pull/843)
* [Full changelog](https://github.com/openshift/ironic-image/compare/208ccd1666573f55b608475e53f9072175f9562f...f934d2cdf0bebbde4992980a770dd799056ab867)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/78c5104d9a69072749f4ddf681926bcc404ef271)

* [OCPBUGS-85102](https://issues.redhat.com/browse/OCPBUGS-85102): Populate status label selector for scale subresource [#1497](https://github.com/openshift/machine-api-operator/pull/1497)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/33cb2da02d57004711bd09dd8f288ed6174f48fc...78c5104d9a69072749f4ddf681926bcc404ef271)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ab81640d1510800b1be795066ef4d392dbcdf470)

* [OCPBUGS-85341](https://issues.redhat.com/browse/OCPBUGS-85341): Apply password only if changes exist [#6053](https://github.com/openshift/machine-config-operator/pull/6053)
* [OCPBUGS-86047](https://issues.redhat.com/browse/OCPBUGS-86047): Manually uncordoned nodes are not automatically re-cordoned [#6060](https://github.com/openshift/machine-config-operator/pull/6060)
* [OCPBUGS-85124](https://issues.redhat.com/browse/OCPBUGS-85124): use `--delete-if-present` for karg removal [#6007](https://github.com/openshift/machine-config-operator/pull/6007)
* [OCPBUGS-85626](https://issues.redhat.com/browse/OCPBUGS-85626): only check password hash in /etc/shadow [#6042](https://github.com/openshift/machine-config-operator/pull/6042)
* [OCPBUGS-85651](https://issues.redhat.com/browse/OCPBUGS-85651): BareMetal skew e2e fails patching provisioning CR after CBO webhook fix [#6047](https://github.com/openshift/machine-config-operator/pull/6047)
* [OCPBUGS-85198](https://issues.redhat.com/browse/OCPBUGS-85198): Add `terminationMessagePolicy` to build pod containers [#6012](https://github.com/openshift/machine-config-operator/pull/6012)
* [OCPBUGS-85481](https://issues.redhat.com/browse/OCPBUGS-85481): Add fix for ossImagestream status [#6026](https://github.com/openshift/machine-config-operator/pull/6026)
* [OCPBUGS-84813](https://issues.redhat.com/browse/OCPBUGS-84813): Include RootCA in the temporal CC [#5904](https://github.com/openshift/machine-config-operator/pull/5904)
* [OCPBUGS-84406](https://issues.redhat.com/browse/OCPBUGS-84406): Fix CVE-2026-34986 [#5986](https://github.com/openshift/machine-config-operator/pull/5986)
* [OCPBUGS-85156](https://issues.redhat.com/browse/OCPBUGS-85156): Bootloader update attempt should be conditional [#6011](https://github.com/openshift/machine-config-operator/pull/6011)
* [OCPBUGS-84693](https://issues.redhat.com/browse/OCPBUGS-84693): prom rules: add alert for nodes using runc [#5998](https://github.com/openshift/machine-config-operator/pull/5998)
* [OCPBUGS-84667](https://issues.redhat.com/browse/OCPBUGS-84667): Fix encapsulated IGN version [#5895](https://github.com/openshift/machine-config-operator/pull/5895)
* [OCPBUGS-84480](https://issues.redhat.com/browse/OCPBUGS-84480): Fix units rollback if update failure [#5882](https://github.com/openshift/machine-config-operator/pull/5882)
* [OCPBUGS-84949](https://issues.redhat.com/browse/OCPBUGS-84949): Fix OCL test to handle temporarily empty current-machine-os-build annotation [#5989](https://github.com/openshift/machine-config-operator/pull/5989)
* [OCPBUGS-84840](https://issues.redhat.com/browse/OCPBUGS-84840): Fix ssh and password rollbacks [#5906](https://github.com/openshift/machine-config-operator/pull/5906)
* [OCPBUGS-84865](https://issues.redhat.com/browse/OCPBUGS-84865): MachineOSConfig "build was not found" error [#5912](https://github.com/openshift/machine-config-operator/pull/5912)
* [OCPBUGS-83779](https://issues.redhat.com/browse/OCPBUGS-83779): Auto-append :ref suffix to additionalLayerStores in storage.conf [#5903](https://github.com/openshift/machine-config-operator/pull/5903)
* [OCPBUGS-84861](https://issues.redhat.com/browse/OCPBUGS-84861): Update AMI Whitelist [#5911](https://github.com/openshift/machine-config-operator/pull/5911)
* [OCPBUGS-84850](https://issues.redhat.com/browse/OCPBUGS-84850): Custom pool booting must handle matchExpressions in nodeSelector [#5909](https://github.com/openshift/machine-config-operator/pull/5909)
* [OCPBUGS-84849](https://issues.redhat.com/browse/OCPBUGS-84849): Support bootloader update [#5908](https://github.com/openshift/machine-config-operator/pull/5908)
* [OCPBUGS-84719](https://issues.redhat.com/browse/OCPBUGS-84719): deploy-from-self when skopeo  &lt; 1.22.2 [#5901](https://github.com/openshift/machine-config-operator/pull/5901)
* [OCPBUGS-84700](https://issues.redhat.com/browse/OCPBUGS-84700): Bump image build timeout for status reporting test [#5900](https://github.com/openshift/machine-config-operator/pull/5900)
* [OCPBUGS-83818](https://issues.redhat.com/browse/OCPBUGS-83818): ClusterHostedDNS on AWS/Azure/GCP: Modify Corefile template to better handle empty record types [#5862](https://github.com/openshift/machine-config-operator/pull/5862)
* [OCPBUGS-83771](https://issues.redhat.com/browse/OCPBUGS-83771): Make IRI registry read-only via environment variable [#5859](https://github.com/openshift/machine-config-operator/pull/5859)
* [OCPBUGS-83577](https://issues.redhat.com/browse/OCPBUGS-83577): Allow enablement of systemd units with existing files [#5855](https://github.com/openshift/machine-config-operator/pull/5855)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/eadf8329c93aba9b187de7668ec3e469bc6d168e...ab81640d1510800b1be795066ef4d392dbcdf470)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/4843e69841263a99f7fbc05187557db408abf265)

* [OCPBUGS-85477](https://issues.redhat.com/browse/OCPBUGS-85477): Force rebuild for OCP 4.22 [#88](https://github.com/openshift/machine-os-images/pull/88)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/df9a652cb1572172e404655bb021525be2e3d8ab...4843e69841263a99f7fbc05187557db408abf265)


### [metallb-frr](https://github.com/openshift/frr/tree/843347fdc9460e0fd064d68a003eae5459cac1fa)

* [OCPBUGS-84960](https://issues.redhat.com/browse/OCPBUGS-84960): [release-4.22]: Bump to frr10 [#130](https://github.com/openshift/frr/pull/130)
* [Full changelog](https://github.com/openshift/frr/compare/5ccdd521dd93522575c172dac86d0b6f301fb3ef...843347fdc9460e0fd064d68a003eae5459cac1fa)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/cf64033683b8caed13ac3b39c2d4c9564888c8e7)

* [OU-1360](https://issues.redhat.com/browse/OU-1360): reset queries when namespace changes in dev perspective [#934](https://github.com/openshift/monitoring-plugin/pull/934)
* [OU-1366](https://issues.redhat.com/browse/OU-1366): prevent namespace and project desync [#935](https://github.com/openshift/monitoring-plugin/pull/935)
* [OCPBUGS-85088](https://issues.redhat.com/browse/OCPBUGS-85088): Sync Main to 4.22 [#916](https://github.com/openshift/monitoring-plugin/pull/916)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c43889fdf60b85fe43dc45417be3f644586e7cc4...cf64033683b8caed13ac3b39c2d4c9564888c8e7)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/d4dd42ba9c17b04e0e5003147f4e140ea5e34749)

* [OCPBUGS-85569](https://issues.redhat.com/browse/OCPBUGS-85569): Bump Go version to 1.25.0 for ML-KEM/PQC support [#116](https://github.com/openshift/multus-admission-controller/pull/116)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/16ba7ef8026f5b6d0d08b19c707648d82b1ac592...d4dd42ba9c17b04e0e5003147f4e140ea5e34749)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/d73167a4d7fca871d64d3591aac388cfd2d37bbe)

* [CNV-74110](https://issues.redhat.com/browse/CNV-74110): new translations [#407](https://github.com/openshift/networking-console-plugin/pull/407)
* [OCPBUGS-84204](https://issues.redhat.com/browse/OCPBUGS-84204): CVE dependency remediation [#381](https://github.com/openshift/networking-console-plugin/pull/381)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/5422f79693a1f8625db4e2a23c3048e75b59c092...d73167a4d7fca871d64d3591aac388cfd2d37bbe)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/4c002a9114937ea9c20213f00892761c2013e60b)

* [OCPBUGS-82579](https://issues.redhat.com/browse/OCPBUGS-82579): [release-4.22]: chore: sync with openshift repositories [#191](https://github.com/openshift/oauth-apiserver/pull/191)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/29215dddf12f5b0f549125c22cebe56f14596529...4c002a9114937ea9c20213f00892761c2013e60b)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/f777d2b5c940422f9e506a8749ac1bcbecc389fe)

* [OCPBUGS-86213](https://issues.redhat.com/browse/OCPBUGS-86213): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 [#366](https://github.com/openshift/oauth-proxy/pull/366)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/714292f5478e6c12da6a31710f72bc8fbe6fb925...f777d2b5c940422f9e506a8749ac1bcbecc389fe)


### [oauth-server](https://github.com/openshift/oauth-server/tree/6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9)

* [OCPBUGS-82579](https://issues.redhat.com/browse/OCPBUGS-82579): [release-4.22]: chore: sync with openshift repositories [#222](https://github.com/openshift/oauth-server/pull/222)
* [Full changelog](https://github.com/openshift/oauth-server/compare/69bdf8bc63e094815d07aa16fc2537df5c045489...6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/26b848969eabd4e1899439f40a4346552f08ff38)

* [OCPBUGS-85059](https://issues.redhat.com/browse/OCPBUGS-85059): fix(test): drop blocking namespace-deletion wait between both-watch-modes scenarios [#714](https://github.com/openshift/operator-framework-operator-controller/pull/714)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/a3e5b4ff3745e6e6f0371fc14c124089a7289e7c...26b848969eabd4e1899439f40a4346552f08ff38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/fbea5220c4fe13c20107d6c4631f4e53007ca761)

* [OCPBUGS-82579](https://issues.redhat.com/browse/OCPBUGS-82579): [release-4.22] CNTRLPLANE-3226: Sync with openshift apiserver 4.22 kubernetes 1.34.1 [#631](https://github.com/openshift/openshift-apiserver/pull/631)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/56aa2d96edd725e44ddd7ff13f23e53e6c509828...fbea5220c4fe13c20107d6c4631f4e53007ca761)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/06d95461581f9374ae05959b66fc50e2a17d077c)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into release-4.22 [#409](https://github.com/openshift/cluster-api-provider-openstack/pull/409)
* [OCPBUGS-84994](https://issues.redhat.com/browse/OCPBUGS-84994): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 [#410](https://github.com/openshift/cluster-api-provider-openstack/pull/410)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/74cb5b085a21fdec9f0f8c5c1dfa3933075fb1dc...06d95461581f9374ae05959b66fc50e2a17d077c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/de6260e53055e10e216ec668d692a35554ab0585)

* [OCPBUGS-84411](https://issues.redhat.com/browse/OCPBUGS-84411), [OCPBUGS-84412](https://issues.redhat.com/browse/OCPBUGS-84412): Update github.com/go-jose/go-jose/v4 to v4.1.4 [release-4.22] [#1292](https://github.com/openshift/operator-framework-olm/pull/1292)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e627823c743797da91b4ae8a318d2420a511b752...de6260e53055e10e216ec668d692a35554ab0585)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/72db5e8d8ec23d4108183a8c67b45cdfdb8057ba)

* [OCPBUGS-84384](https://issues.redhat.com/browse/OCPBUGS-84384): CORENET-6537: OTE: Add external container support to infra provider [#3147](https://github.com/openshift/ovn-kubernetes/pull/3147)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/14b5022bad5b21334e3ad9d500763474016b2a9c...72db5e8d8ec23d4108183a8c67b45cdfdb8057ba)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/02959a8d7096501e240d1d9f65da90b87bac45b9)

* [OCPBUGS-84007](https://issues.redhat.com/browse/OCPBUGS-84007): Mitigate CVE-2026-33186 by bumping grpc-go to v1.79.3 [#132](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/132)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/c208095b1f3ff79e2d9eed7f8045d330a8e15c08...02959a8d7096501e240d1d9f65da90b87bac45b9)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/277478211cfc7302e9c09b41a0935fbba678614a)

* [OCPBUGS-84008](https://issues.redhat.com/browse/OCPBUGS-84008): Mitigate CVE-2026-33186 by bumping grpc-go to v1.79.3 [#113](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/113)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a56f9e95588f656435e2cc3b256d9782213a7813...277478211cfc7302e9c09b41a0935fbba678614a)


### [prometheus](https://github.com/openshift/prometheus/tree/6e5d1aec83edd83e693019ba1e1767cb69d1c640)

* [OCPBUGS-86248](https://issues.redhat.com/browse/OCPBUGS-86248): fix: TLS client cert rotation when no CA is configured [#313](https://github.com/openshift/prometheus/pull/313)
* [OCPBUGS-84010](https://issues.redhat.com/browse/OCPBUGS-84010): bump google.golang.org/grpc to v1.79.3 [release-4.22] [#310](https://github.com/openshift/prometheus/pull/310)
* [Full changelog](https://github.com/openshift/prometheus/compare/e1e355916c789607fe98c8832920e2218de4bad5...6e5d1aec83edd83e693019ba1e1767cb69d1c640)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b)

* [OCPBUGS-86184](https://issues.redhat.com/browse/OCPBUGS-86184): OCPBUGS-83892: Update grpc-go and x/net [#90](https://github.com/openshift/route-controller-manager/pull/90)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/624742d93f3a7885cf7f70985f1e23ff60da580d...55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/9fff46a576033685f66fbb1121eb0a2f134a29be)

* [OCPBUGS-84953](https://issues.redhat.com/browse/OCPBUGS-84953): e2e network policy tests [#353](https://github.com/openshift/service-ca-operator/pull/353)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/7b3033bba87d7b40684b66f8f44a3525433d1ac7...9fff46a576033685f66fbb1121eb0a2f134a29be)


### [telemeter](https://github.com/openshift/telemeter/tree/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4)

* [OCPBUGS-84021](https://issues.redhat.com/browse/OCPBUGS-84021): update google.golang.org/grpc [#605](https://github.com/openshift/telemeter/pull/605)
* [OCPBUGS-84937](https://issues.redhat.com/browse/OCPBUGS-84937): fix(deps): bump go-jose/v3 to v3.0.5 for JWE unwrap DoS [#598](https://github.com/openshift/telemeter/pull/598)
* [Full changelog](https://github.com/openshift/telemeter/compare/d6c7dd499f7106df78aa8bfd9dee332121ab2f09...c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4)


### [tests](https://github.com/openshift/origin/tree/f9132b5985893b5c6c73fbefff404835b0779b6d)

* [OCPBUGS-85655](https://issues.redhat.com/browse/OCPBUGS-85655): Validate no WAL corruption when both nodes shutdown gracefully [#31174](https://github.com/openshift/origin/pull/31174)
* [OCPBUGS-85515](https://issues.redhat.com/browse/OCPBUGS-85515): Verify dynamic revision bump for etcd during kernel crash [#31166](https://github.com/openshift/origin/pull/31166)
* [OCPBUGS-85339](https://issues.redhat.com/browse/OCPBUGS-85339): Add e2e tests for KubeletEnsureSecretPulledImages feature gate [#31148](https://github.com/openshift/origin/pull/31148)
* [OCPBUGS-85089](https://issues.redhat.com/browse/OCPBUGS-85089): Allow OVN-Kubernetes CIDROverlap pathological events [#31141](https://github.com/openshift/origin/pull/31141)
* [OCPBUGS-85122](https://issues.redhat.com/browse/OCPBUGS-85122): Add ArtifactVolume tests and register artifact image [#31108](https://github.com/openshift/origin/pull/31108)
* [OCPBUGS-84944](https://issues.redhat.com/browse/OCPBUGS-84944): Fix timeout in PinnedImages GC test [#31115](https://github.com/openshift/origin/pull/31115)
* [OCPBUGS-84946](https://issues.redhat.com/browse/OCPBUGS-84946): skip on BM which has insufficient host [#31116](https://github.com/openshift/origin/pull/31116)
* [OCPBUGS-84958](https://issues.redhat.com/browse/OCPBUGS-84958): Optimize NetworkPolicy reconciliation test to reduce timeout [#31119](https://github.com/openshift/origin/pull/31119)
* [OCPBUGS-84382](https://issues.redhat.com/browse/OCPBUGS-84382): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31074](https://github.com/openshift/origin/pull/31074)
* [OCPBUGS-84382](https://issues.redhat.com/browse/OCPBUGS-84382): test: add monitortest to detect pods stuck in Pending state [#31073](https://github.com/openshift/origin/pull/31073)
* [OCPBUGS-84888](https://issues.redhat.com/browse/OCPBUGS-84888): Disable particular CSI tests if CSI driver is removed [#31111](https://github.com/openshift/origin/pull/31111)
* [OCPBUGS-84654](https://issues.redhat.com/browse/OCPBUGS-84654): fix openshift/network/third-party suite selecting zero tests [#31090](https://github.com/openshift/origin/pull/31090)
* [SREP-4676](https://issues.redhat.com/browse/SREP-4676): skipping namespaces are using default sa [#31101](https://github.com/openshift/origin/pull/31101)
* [OCPBUGS-84362](https://issues.redhat.com/browse/OCPBUGS-84362), [OCPBUGS-84363](https://issues.redhat.com/browse/OCPBUGS-84363): fix: skip unused tests for two node [#31069](https://github.com/openshift/origin/pull/31069)
* [OCPBUGS-84706](https://issues.redhat.com/browse/OCPBUGS-84706): Skip dev fuse test on runc runtime [#31099](https://github.com/openshift/origin/pull/31099)
* [OCPBUGS-84628](https://issues.redhat.com/browse/OCPBUGS-84628): Fix project name error during wait [#31085](https://github.com/openshift/origin/pull/31085)
* [OCPBUGS-84674](https://issues.redhat.com/browse/OCPBUGS-84674): retry transient kubeconfig read failures in GetClientConfig [#31096](https://github.com/openshift/origin/pull/31096)
* [OCPBUGS-84676](https://issues.redhat.com/browse/OCPBUGS-84676): Add sleep to give cvo time to reconcile [#31097](https://github.com/openshift/origin/pull/31097)
* [OCPBUGS-84231](https://issues.redhat.com/browse/OCPBUGS-84231): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31060](https://github.com/openshift/origin/pull/31060)
* [OCPBUGS-84322](https://issues.redhat.com/browse/OCPBUGS-84322): Fix Gateway cleanup in parallel e2e test workers [#31068](https://github.com/openshift/origin/pull/31068)
* [OCPBUGS-84049](https://issues.redhat.com/browse/OCPBUGS-84049): [CNTRLPLANE-2751]:Adding e2e network policy cases for config-operator [#31076](https://github.com/openshift/origin/pull/31076)
* "OCPBUGS-84206: [release-4.22] STOR-2807: Add e2e test to verify CSI driver operators use service CA signed certificates" [#31048](https://github.com/openshift/origin/pull/31048)
* [OCPBUGS-84210](https://issues.redhat.com/browse/OCPBUGS-84210): skip serial and disruptive cases from suite [#31057](https://github.com/openshift/origin/pull/31057)
* [OCPBUGS-84319](https://issues.redhat.com/browse/OCPBUGS-84319): cache kube client instance [#31067](https://github.com/openshift/origin/pull/31067)
* [OCPBUGS-84298](https://issues.redhat.com/browse/OCPBUGS-84298): Skip test case updateLifecycle if the worker pool is paused [#31065](https://github.com/openshift/origin/pull/31065)
* [OCPBUGS-84222](https://issues.redhat.com/browse/OCPBUGS-84222): OVNK BGP: Improve VRF-Lite test stability [#31058](https://github.com/openshift/origin/pull/31058)
* [OCPBUGS-83803](https://issues.redhat.com/browse/OCPBUGS-83803): Move imagepolicy test to disruptive long-running suite [#31056](https://github.com/openshift/origin/pull/31056)
* [OCPBUGS-83783](https://issues.redhat.com/browse/OCPBUGS-83783): Add test to verify for backup container exists when etcd crashes [#31035](https://github.com/openshift/origin/pull/31035)
* [OCPBUGS-83778](https://issues.redhat.com/browse/OCPBUGS-83778): Verify etc pod should start with oom_score_adj as system-node-critical [#31034](https://github.com/openshift/origin/pull/31034)
* [OCPBUGS-83712](https://issues.redhat.com/browse/OCPBUGS-83712): Use upgrades.Skippable for Gateway API upgrade test skip logic [#31030](https://github.com/openshift/origin/pull/31030)
* [OCPBUGS-83787](https://issues.redhat.com/browse/OCPBUGS-83787): OCPSTRAT-3082:TLS propagation test [#31038](https://github.com/openshift/origin/pull/31038)
* [Full changelog](https://github.com/openshift/origin/compare/1a93dad027b5135d67388b359c2b12d87beae0b0...f9132b5985893b5c6c73fbefff404835b0779b6d)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/ac542b5afbd9a3897cda34e7ea1852b61c945e36)

* [OCPBUGS-84028](https://issues.redhat.com/browse/OCPBUGS-84028): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into release-4.22 [#108](https://github.com/openshift/cluster-api-provider-vsphere/pull/108)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/f12e50512efa829a2df97c897862c3f45c201300...ac542b5afbd9a3897cda34e7ea1852b61c945e36)