# 4.22.17 Created: 2026-10-01 19:50:27 +0000 UTC Image Digest: `sha256:9bde31879df303de7db7c100878393a520215f33815d0d9b188e3b4436c876a7` ## Changes from 4.22.14 ### Components * Kubectl 1.35.2 * Kubernetes upgraded from 1.35.6 to 1.35.8 * Kubernetes Tests 1.35.1 * Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260908-0 to 10.2.20260928-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | | GCPSovereignCloudInstall
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled | | VSphereMultiVCenterDay2
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) | ### Rebuilt images without code change * [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:eecebbb9856221b082e4f0a3188ea069055160dca066cc8c38c0970451c4f599` * [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [b4bad3f8](https://github.com/openshift/cloud-provider-aws/commit/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3) `sha256:eb528a49dd881e96e042c383916abeea0f8d671b8381e50d179026e9ec51fd5e` * [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [51d6bc76](https://github.com/openshift/aws-ebs-csi-driver/commit/51d6bc760234ffccb0348937a5cfd70b326119b9) `sha256:ee41cfc011b38fdeeb690253751d99df1dba1c6c5ea8f932a99a1271bed76ddc` * [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:7447fbf25df7b3725306e5c72cbd3afa9fd513e3586d4615339713f228a94e07` * [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f607bada](https://github.com/openshift/aws-karpenter-provider-aws/commit/f607badaa794779517b2a16a9d978f05a502ce8e) `sha256:ecdef0706954d27619cb179c21c161423bbce3de33d3f246ec2e1e11697eae08` * [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:8fb4896d606d2ce5c4dea8877279aab5b77a26640ca8c1d9d8c7ce2493ba76e3` * [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:008ec487bfa44c8e7e7c74c11a24440bedcbf9c25bdc45fc82be9542e7e93847` * [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:25debf9285cd0170b92a5ba108dc2283cf2545dcba6d4fe650079476397a7a67` * [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [dd79471c](https://github.com/openshift/cluster-api-provider-azure/commit/dd79471cc2f34c7c0b074ee8abc6f43a069811c2) `sha256:416e603c67af2f604a5be81c92404a75db17a518f98a05f59d9bb0f150957e6b` * [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [b9046c19](https://github.com/openshift/azure-disk-csi-driver/commit/b9046c19b05e2dc75a929328e698ab2cc7e279c9) `sha256:7dcce56293fee8406a335dc7c7557d8ea0ab99a1e57d2a74713174abd7443fdd` * [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:e5fc3cb706b49cb15b55ddd7fe049e3c2c6da7e9e773e741ebc44705421fd5ba` * [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [32f72754](https://github.com/openshift/azure-file-csi-driver/commit/32f7275441afca97750de9f1e415bad7c8fbdee3) `sha256:04a6e8c2f5052de47675cbfc82065fa83e6fae7267c0394ed37a2b01ca165420` * [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:b530992a7a4c2b6d85b9facc982d764a30265047d98cf103a52ae2480df5d726` * [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [bad7e944](https://github.com/openshift/machine-api-provider-azure/commit/bad7e9447fa66002e5ec7b0b7952545e7e8a6c9f) `sha256:127a2a179101bcdd6358afcf421e950a1a179064d1836b39a523f425927b8a6b` * [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b44d4444](https://github.com/openshift/azure-service-operator/commit/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36) `sha256:18182de17e0c96182a1df2e5fbc9984925ce793daf66dcdbaa7e723af968a15e` * [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [a8fb3bf1](https://github.com/openshift/azure-workload-identity/commit/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45) `sha256:e5de358070227266b699edfe2b9c44080eeda4d9e23484ac9126aaf92c6bb73b` * [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [6481b520](https://github.com/openshift/cluster-api-provider-metal3/commit/6481b52008f0991912f80fdf9d74af3e631a7269) `sha256:cb007e07af3c96cf3d8adb53931688df5f7d851e7279b0f909f6ccadb6607515` * [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:1a4fa2d4c69a861513bc2b446594759dc8eb9084c6673becece086adfff0447b` * [baremetal-operator](https://github.com/openshift/baremetal-operator) git [7fc3bd6c](https://github.com/openshift/baremetal-operator/commit/7fc3bd6c4f36acec9944d5adcd2083ae21a8df4b) `sha256:2779c2fe8525e391719e1e50a1ff69432937f9f002596238bd9762627940518f` * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [1df16554](https://github.com/openshift/baremetal-runtimecfg/commit/1df165545dd61e73101e73ec174e7bd2c930887a) `sha256:c927b02464a533479a477f26b03f5c5dc1236abd78c4c704a5594fb8518702b0` * [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [8bc05a82](https://github.com/openshift/cloud-network-config-controller/commit/8bc05a827fe54e1421013a198ffefe776efa5b6f) `sha256:9663321a3f4e1e99a4a676e5bb23079ccd4021ab3d2c7926e0c5aa4cee4ba75a` * [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [89f51dcb](https://github.com/openshift/kubernetes-autoscaler/commit/89f51dcb39919234f4b9b1efb37ffecb68ba7366) `sha256:072fa9bdcda1ae5b2202de8a7924024180401e120432e6fae894dc7552153277` * [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [effcafee](https://github.com/openshift/cluster-autoscaler-operator/commit/effcafeed5e4ab9cee8e312de2aa123331eea9fa) `sha256:fffffb47988f0d5b57c6ef0369656da5941359f5002f9fcfa3426f63aff9045c` * [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [4e98263f](https://github.com/openshift/cluster-baremetal-operator/commit/4e98263f296f7886468df2f15f8354fb265b4d91) `sha256:f51f7a2ebb940b5ad6bc8f8aa253a42f5145814c4815ffce6fc5a12bc61050be` * [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f1718df9](https://github.com/openshift/cluster-api/commit/f1718df9c13b0cee5ede1b6354e29acc466607a4) `sha256:5174efae7897da636e36219d6de2a3a1bb9dca7a1454991bdf1e86328ebb481c` * [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [5430ff7a](https://github.com/openshift/cluster-capi-operator/commit/5430ff7a34d4c0a946740dcdcd98690c14c63cf9) `sha256:57bcc46e3f14629aca624db7c6cf62ec3c9f1b132816cf5c2b6766cd8bc4012a` * [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [e9b3b21f](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/e9b3b21fbc322cb410a58b5f147ac76893d851ea) `sha256:ca61a741812d39b80c78540cbfa2bd413f5d84384f1b11596445747f7f7e3175` * [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:958edbe74908064e4cedf5a17792dc61be7f8beb7c9096b2aec78bd6685e6203` * [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [c331da28](https://github.com/openshift/cluster-image-registry-operator/commit/c331da28c42721724ed5229c972c956cd1d9502c) `sha256:7b438db49fe6bfe04b1b63df474d1f9fae8bafc28880d21880f63fa9b38d9d33` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9afe6687](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9afe66875bff8b5926f2bf6dec4eade1e4a09bab) `sha256:7ccf6a797606c89a67ed735666aa9d2220d9e770be12fffcc48520665c102aac` * [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [f66065f7](https://github.com/openshift/cluster-olm-operator/commit/f66065f7ae39fefe3058d72aa100d41d4327a407) `sha256:f5f5e363787f0716b2872bd4c2c37d365f1bad04661311515712f0fee426151b` * [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2d2699e4](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2d2699e4f3fabc80e402f4c090c8cf80c4517977) `sha256:dcde3820808c494982ed23cc4e4fbb03e5adc10f2e027217bdc7d662c892a941` * [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [2e306e14](https://github.com/openshift/cluster-policy-controller/commit/2e306e143051492a84c5e47a7b3126e096fdf76a) `sha256:da032212696532bba912725886cfb3f235d6b156aa43162d61ce7a3f4ba2ecdc` * [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [191a6aec](https://github.com/openshift/cluster-samples-operator/commit/191a6aec444bfdbe5d70f7a23a20ee2fd25b7080) `sha256:c63f32d6ab1e05716a75568cb95d62590be83d05b1a71f3711f28b9881dedb10` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8f4ce041](https://github.com/openshift/cluster-storage-operator/commit/8f4ce04189e9c5496548ed53e33943aba8756279) `sha256:589d656c97c9a6ebf4a4866299d7e1be93cc440e54639dad989db483c10e436a` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:200ae2c7a34b0b79e2cc24bad9eaab97fe3679b9f66de5cba2a6a3a5c0159abd` * [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [6ac86dc9](https://github.com/openshift/cluster-version-operator/commit/6ac86dc99c02366314381b720ab1d4a38d38f1c2) `sha256:49a386ee3303e2d00fa023f13bc53b2ea187b55c315068d03f25e3a974b0098e` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:900e6fdd727b59cf28cea462ae6fa02fe28990df50bc446d6fdcfc294edd7e2d` * [console-operator](https://github.com/openshift/console-operator) git [35170581](https://github.com/openshift/console-operator/commit/35170581874b91514a9459766758fa0aa5da22f6) `sha256:3163c19855ca65519d0946c87cc18f33ba2c4caee6f624393c05d783d5e47835` * [coredns](https://github.com/openshift/coredns) git [9a71d9a6](https://github.com/openshift/coredns/commit/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4) `sha256:a6a18d22cde19fffc90c6edd7c1f5cc5b87f5469abd4d1ecf5ecbfed32b87f52` * [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:c7765e9144af189a778b80889b277862c8214cce29df9ec35e40b05257821f90` * [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b6911553](https://github.com/openshift/csi-driver-nfs/commit/b69115537b79a5b3516e2a900f9095f4ebb3cbe5) `sha256:88b67365b6d020fa0dc07304f4217046e34fc4595becf6014e41f6dd5d77a8dc` * [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [253b987d](https://github.com/openshift/csi-external-provisioner/commit/253b987d5233b1adb93b5ae2c63102c0d06c01cf) `sha256:7732edd4640c7decaa2fc6add02605539d92f669594317184c9f7d7dbcb100b7` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [20f7fbe4](https://github.com/openshift/csi-external-resizer/commit/20f7fbe41654ebe10d2d4f50ae423c9686ce1c25) `sha256:b3dda9615c3f194e68de51949d778a14ad4587245299110e0e85f4d182736f20` * [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [b48f0478](https://github.com/openshift/csi-external-snapshot-metadata/commit/b48f04782c567b8759292085b7ad554dce013d8a) `sha256:8c04f18f6a7554a070c378363718a04df0e7e33eb71c2820b2cd3714aba81999` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:bbae6d9ee169aa2043194cae9d3ddd53b21c2bb7dcd5d4744ff61e98f49265e8` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb6a6378](https://github.com/openshift/csi-node-driver-registrar/commit/bb6a6378d2af235b3b253cb422d406bd3d7e30b1) `sha256:95f7fc14149a1b4ceab3bc86fb715217c0e878a2d6afd5a6039e602627b98360` * [docker-registry](https://github.com/openshift/image-registry) git [179d7925](https://github.com/openshift/image-registry/commit/179d7925210490c5de4846540e01c33601cd8cd1) `sha256:616de81fc913fd854fee924af7d9025473e2ebf17683e9d9289a1efdcfd76fb3` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:4fc954ce5ee630ca54f46533ed3eecb2bcc8988f6fbc36514339687affa2f0e0` * [etcd](https://github.com/openshift/etcd) git [6bd01267](https://github.com/openshift/etcd/commit/6bd01267dc858aca6ff21632f95e98dc62ba33e7) `sha256:15e89c1980494f9d1b2f5cc5259827f80e07f036e4d848ec8561b93e26d241cc` * [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e7674ede](https://github.com/openshift/cluster-api-provider-gcp/commit/e7674ede9ce8d021a878a6d5e81942875387e5eb) `sha256:eabbeeacb4945bb828be8bc9da3509f0ee87a1bc051018f01d9168a749dc2509` * [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [03efd8ba](https://github.com/openshift/machine-api-provider-gcp/commit/03efd8ba0751d4b7cb2be874e32ac9b72e086e4d) `sha256:7adb59de1b6db90fa6460c567e4d333c86ab3f1be36bfe180589747e1f5315aa` * [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [e3556b4d](https://github.com/openshift/gcp-pd-csi-driver/commit/e3556b4d8912f40ae4013f6bd597edd7c9cdb59d) `sha256:a49b24f95753231a9f85442385bb69c1631ad5f38dfa8c882f83652769423ecb` * [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [d9cd6ca1](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/d9cd6ca1661bb11dfbb828815665985830e32622) `sha256:2cb2cc0f413d63e885d76d81c6e23565561e8f72370aa324f3cd6e66fbd41ca6` * [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:2bfe5fd3bfdb18089c27622e7fc4e5407b2ca7d026bba382cc40c42e6f7ac54e` * [haproxy-router](https://github.com/openshift/router) git [b70b28c0](https://github.com/openshift/router/commit/b70b28c0380056950793382f42b9b2eaf9330945) `sha256:bbb416c41c3bab7ef94cf1eb51a0feb789e2cedc48885edbc204404139c518e0` * [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [d362aef2](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/d362aef240c280676249fa34c80fa1b39c684560) `sha256:95f9d5d6d346671c14ff6b06a9ee89195609004cc14c74b25c09f7e633452340` * [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3d5956dd](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3d5956ddd2292c381309106d23fff1765380c55e) `sha256:003e552a5e4a422a778caacb84b073bcb08cae53bcb428c2f219265027d4bdc5` * [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [c378efee](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/c378efee05fd02323d241e86244dee3b56e32a45) `sha256:f5aafb94f53469ec75c511baa895707373701d4fbda03b5d84c4a4efa8206aaf` * [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [9e5537cd](https://github.com/openshift/machine-api-provider-ibmcloud/commit/9e5537cd7d239a31d6b2eb56cd44af3ec7b47dd5) `sha256:d5d02da94742710da8b285817994e48b1156656c9cd047ebebd6da886e8b3721` * [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:2eb29ce145072394c536bd78c434a4cde67e241ef45bc72336a1be27010c1951` * [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:24735457eff9ec67d7382f57794e783058117958e6a5199a5925cc72287210a7` * [ironic-agent](https://github.com/openshift/ironic-agent-image) git [be386561](https://github.com/openshift/ironic-agent-image/commit/be386561e40cc3bb56ddd05fbf73a7c9ead5198c) `sha256:f2bf5f6384ea6562155a666f0628ac14101c49c29252ce3ea0e06a1bf9014568` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:f84b638876adff9093891e4a0dc657d0764dc835e729b49f1667a828c76cb1fd` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:59cfbff6268874a487afab709fc37ab5e7214ea1564817c75096ca817ddce8f6` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:66e335480515a58c1b1110146e32645ce9bee065160899c181bdfc8135b4b8fb` * [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [0a5ea07c](https://github.com/openshift/kube-state-metrics/commit/0a5ea07ca01263c4273a1a929854969e11a69bea) `sha256:c633351518c5984151622d4546aa1cfd0578f2f8629b534f7fc77f5f7575b25c` * [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [09a0a5be](https://github.com/openshift/cloud-provider-kubevirt/commit/09a0a5beaa65fb589d7b571dc47f9748d2463b1c) `sha256:f1d7ea897c4a97fe37c03defc0a193cb5690e239a4bd8d8192db8128bff13558` * [machine-os-images](https://github.com/openshift/machine-os-images) git [e5342c99](https://github.com/openshift/machine-os-images/commit/e5342c9905a94069e6801737dd6aeddfb74bbac4) `sha256:d2ed033609de31efd21a777db5dc7ca7b4a0cdbd588b3119b17d5a96c86dcd15` * [metallb-frr](https://github.com/openshift/frr) git [1277b238](https://github.com/openshift/frr/commit/1277b2387272397d3479d74d2d65112112f985b8) `sha256:9baf1675d85b9f1cb6c505d5d07ba2afee38f95df53da642fb7220b5d40b67fd` * [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:eb7199132046e91dd1e20c4891e2bc83fc398472aedcb7465c077a63d7ffb091` * [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:c48a4e3c10223df1e910f954c0be53ed757c1aaddf3fea79de779570cd817a86` * [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:7d26699bc8b44d6faf46fa83ba64021e1201fcbc5febb56bb0b3b4bbf9b2c871` * [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:0eb427345b3654a9d2e40602e737229ee469c65e476c95642e2096153c96c9ca` * [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:795f155ebc3b696776d401ec552954c49f46a6cfb714e38d6ea88f5604daf44c` * [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:34575ee7877476bc7df30245b1298cf04ff3dd2fb1e15166b008786d569483b6` * [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [74bd2dd2](https://github.com/openshift/machine-api-provider-openstack/commit/74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba) `sha256:3ea75e572dd123bbb58d7d59bf9876b8887ac3f37c0b7edd01a94cac5d5c0e2a` * [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [5359e605](https://github.com/openshift/operator-framework-olm/commit/5359e60525288af86885e14d89e3210878f87274) `sha256:d3ae8969f7ee176bf7f8299e0c096145e7088b9a7d391501370f6d6f405c8a0f` * [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [5359e605](https://github.com/openshift/operator-framework-olm/commit/5359e60525288af86885e14d89e3210878f87274) `sha256:d0201570969cde3ed99f00e449068d5186da963c5981b357ead85ac5abae911b` * [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:3d032144c836824b8bae45efa2b2de8fe886c39c55dfccd1ded8f3238234f6f0` * [operator-registry](https://github.com/openshift/operator-framework-olm) git [5359e605](https://github.com/openshift/operator-framework-olm/commit/5359e60525288af86885e14d89e3210878f87274) `sha256:1cee88b88f59ed8c09b0e37ffa10854e751815dd56b1f2bf4b00a04312e6c677` * [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [1173437f](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/1173437f341d58a340d83cb87449af28228a1040) `sha256:0f02e1a380a2ccc68361bc8a0b47ce286c69d21f347c82d36629c41d57b9dc51` * [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [6e859b18](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/6e859b18170daf013897d09ce3ef4f915ada6757) `sha256:411ed48e020850e18371898e18c6ae63d89509be83010bc69fffde3952ca3799` * [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [766c0952](https://github.com/openshift/cloud-provider-powervs/commit/766c0952fd19f8225fe59b2be8e8c8932b24ebd7) `sha256:f9039152ff54b65cbb133e4540e281814ee4457aa60ea816abdcbcfeff5280db` * [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:ba8bca4c06d22ea56eb3123673f562dd66ea7df49332812be9d8b918d35f5c4a` * [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [f090d141](https://github.com/openshift/prometheus-alertmanager/commit/f090d1413836ce12c0a2f70f862de5787dfe59d0) `sha256:977a8915b361289b2a71d3c73eb38ba4cd9d7182307d1a7a326b6ec2d237327c` * [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [fb32abba](https://github.com/openshift/prometheus-operator/commit/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77) `sha256:0b4a90ec0d81df2c92daa6ed4c0034738df83251501410d774ef14d5e738e2fd` * [prometheus-operator](https://github.com/openshift/prometheus-operator) git [fb32abba](https://github.com/openshift/prometheus-operator/commit/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77) `sha256:92680cb774ba4bb4c807e8b5fbf77819f09bfcc140e4cd5dde6fc5960f8c1ce9` * [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [fb32abba](https://github.com/openshift/prometheus-operator/commit/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77) `sha256:aa3eac647b77c0eed50f6bd64db0111c73b718ece155094ac870911edde15f82` * [rhel-coreos](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:7ff6e6da6316acf53e0181b6c644d907a0787fe9bac6f10f42fcb061ff02e02f` * [rhel-coreos-10](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:f663eace75db71266d5ea9b4d477b1fecaa8f9a76714e06cbdb5d1f223b7dd7c` * [rhel-coreos-10-extensions](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:feeeee33d773660fce79578431e33f5d7878e38cb8a0c6f62ce3ea417e05e536` * [rhel-coreos-extensions](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:551ca68c989505e09e0808968f3b1a1e064eaae96c7d8934f370fe28b385cb39` * [route-controller-manager](https://github.com/openshift/route-controller-manager) git [55f77ca4](https://github.com/openshift/route-controller-manager/commit/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b) `sha256:b5d2f7343a58dadb5ee38a4b03689d854e97bafd6f568716234ce054a833cf1b` * [thanos](https://github.com/openshift/thanos) git [98b43345](https://github.com/openshift/thanos/commit/98b433450fed7685ec04af89b4de20afbaf856ae) `sha256:4e11c453e61ce3c1ebd3f0a5fa35738e37255a236cc70f78ef036dbb547cafd6` * [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [39008107](https://github.com/openshift/cloud-provider-vsphere/commit/39008107b1463e3299b0d60c3ac1f7e71ad3e014) `sha256:1e31c0ee0f30d9f8d16a0584239d5c4d4ebf88ad5ef627f293eff648f74568c1` * [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [ac542b5a](https://github.com/openshift/cluster-api-provider-vsphere/commit/ac542b5afbd9a3897cda34e7ea1852b61c945e36) `sha256:95965c787809fe0dc3c2513f5b6bb965ff5269c322bd833525866aba6de32347` * [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [19c75111](https://github.com/openshift/vmware-vsphere-csi-driver/commit/19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e) `sha256:9951d4b551ad31076de9a61876f5d7d2fb5dc057aad1d286b32c761c0b9b8cbf` * [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [19c75111](https://github.com/openshift/vmware-vsphere-csi-driver/commit/19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e) `sha256:8bbd21a116c479be1656917f161997fb2f9c79d5aa03d6b9adb603c72abb01b2` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f271c506cb111693925c7602c5a0ea12e04b37d2) * [OCPBUGS-127124](https://issues.redhat.com/browse/OCPBUGS-127124): Allow agent-installer invoker to have a suffix [#10986](https://github.com/openshift/assisted-service/pull/10986) * [OCPBUGS-69811](https://issues.redhat.com/browse/OCPBUGS-69811): Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.22 [#8601](https://github.com/openshift/assisted-service/pull/8601) * [Full changelog](https://github.com/openshift/assisted-service/compare/d31ed58ac20a5c181f21a42e5adf900bbd69f52a...f271c506cb111693925c7602c5a0ea12e04b37d2) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/9e182cda60781b48aa0daeeb9f3113a0668c4d30) * [OCPBUGS-127124](https://issues.redhat.com/browse/OCPBUGS-127124): Allow agent-installer invoker to have a suffix [#2350](https://github.com/openshift/assisted-installer/pull/2350) * [OCPBUGS-69893](https://issues.redhat.com/browse/OCPBUGS-69893): Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.22 [#1405](https://github.com/openshift/assisted-installer/pull/1405) * [Full changelog](https://github.com/openshift/assisted-installer/compare/d5515fa077062f9bfcb763d8131b0302bba6a144...9e182cda60781b48aa0daeeb9f3113a0668c4d30) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/d958406a2cfbe3ed9db4963d004bc4d69226b84e) * [OCPBUGS-69939](https://issues.redhat.com/browse/OCPBUGS-69939): Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.22 [#1227](https://github.com/openshift/assisted-installer-agent/pull/1227) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/2dd2e384dfc739a26763b4e18e7d63ca0de192e2...d958406a2cfbe3ed9db4963d004bc4d69226b84e) ### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/188c15eb661bccccfd39447c977b5a786c68291c) * [OCPBUGS-123183](https://issues.redhat.com/browse/OCPBUGS-123183): Do not show IRI custom manifests in the disconnected UI [#4052](https://github.com/openshift-assisted/assisted-installer-ui/pull/4052) * And 7 elided commits (e.g. from squash or rebase merges) * [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/9380434565d3f9b0031b353a008ae97050b038a0...188c15eb661bccccfd39447c977b5a786c68291c) ### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/c0d0cf6b00931cf87684144841872e17e024ac45) * [OCPBUGS-127041](https://issues.redhat.com/browse/OCPBUGS-127041): Refresh rendezvous IP selection list [#352](https://github.com/openshift/agent-installer-utils/pull/352) * [OCPBUGS-127009](https://issues.redhat.com/browse/OCPBUGS-127009): Fix agent TUI timeout [#351](https://github.com/openshift/agent-installer-utils/pull/351) * [Full changelog](https://github.com/openshift/agent-installer-utils/compare/817b11805be82a177657128eac624df2e969d9b2...c0d0cf6b00931cf87684144841872e17e024ac45) ### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/ac9d4e839ef4949cb29d28fa16405c0f0889aa14) * [OCPBUGS-101854](https://issues.redhat.com/browse/OCPBUGS-101854): replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [#648](https://github.com/openshift/cluster-api-provider-aws/pull/648) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/f60301561fe801da499b22f58aae57eae16ada5a...ac9d4e839ef4949cb29d28fa16405c0f0889aa14) ### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/061ffd2a2ccc7d801214034d8737039d7392c3b9) * [OCPBUGS-70017](https://issues.redhat.com/browse/OCPBUGS-70017): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.22 [#33](https://github.com/openshift/aws-encryption-provider/pull/33) * [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...061ffd2a2ccc7d801214034d8737039d7392c3b9) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/8b603c86b757f8a3bcfb579df4227e6f0d8e720d) * [OCPBUGS-126916](https://issues.redhat.com/browse/OCPBUGS-126916): Add opt-in pprof endpoint to machine-controller-manager [#218](https://github.com/openshift/machine-api-provider-aws/pull/218) * [OCPBUGS-126916](https://issues.redhat.com/browse/OCPBUGS-126916): Cache region validation response and close AWS sessions [#219](https://github.com/openshift/machine-api-provider-aws/pull/219) * [OCPBUGS-85277](https://issues.redhat.com/browse/OCPBUGS-85277): Changed timeout for node ready logic in OTE [#187](https://github.com/openshift/machine-api-provider-aws/pull/187) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c...8b603c86b757f8a3bcfb579df4227e6f0d8e720d) ### [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler/tree/f909c408a6999444aff66ea496f9b884709cf372) * [OCPBUGS-101837](https://issues.redhat.com/browse/OCPBUGS-101837): CVE-2026-33814 openshift4/aws-node-termination-handler-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.22] [#14](https://github.com/openshift/aws-node-termination-handler/pull/14) * [Full changelog](https://github.com/openshift/aws-node-termination-handler/compare/341ed3a086925b17671c5349343fedf988a1139e...f909c408a6999444aff66ea496f9b884709cf372) ### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/facac71adec60e553ff81da27f1b1f1c0ff82b25) * [OCPBUGS-74021](https://issues.redhat.com/browse/OCPBUGS-74021): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.22 [#27](https://github.com/openshift/azure-kubernetes-kms/pull/27) * [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/42b1def6c429806b08ca71c0275aba7924f5ced0...facac71adec60e553ff81da27f1b1f1c0ff82b25) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b53cd6a8c6d02a02173a3bc6eda6862eaa6ea3fd) * [OCPBUGS-126568](https://issues.redhat.com/browse/OCPBUGS-126568): [release-4.22] Bump Azure Marketplace Images to be up-to-date [#10884](https://github.com/openshift/installer/pull/10884) * [OCPBUGS-127124](https://issues.redhat.com/browse/OCPBUGS-127124): use different INSTALL_INVOKER for unconfigured ignition [#10903](https://github.com/openshift/installer/pull/10903) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Add vSphere multi vCenter Day 2 support [#10740](https://github.com/openshift/installer/pull/10740) * [OCPBUGS-122251](https://issues.redhat.com/browse/OCPBUGS-122251): [release-4.22]: Promote GCD to GA [#10871](https://github.com/openshift/installer/pull/10871) * [OCPBUGS-126806](https://issues.redhat.com/browse/OCPBUGS-126806): Inject the pull-secret as podman secret in the agent-installer-ui container [#10897](https://github.com/openshift/installer/pull/10897) * [OCPBUGS-122133](https://issues.redhat.com/browse/OCPBUGS-122133): gcp: skip disk type check when the permission is denied [#10862](https://github.com/openshift/installer/pull/10862) * [OCPBUGS-119240](https://issues.redhat.com/browse/OCPBUGS-119240): gcp: allow GCD load balancer health-check firewall ranges [#10853](https://github.com/openshift/installer/pull/10853) * [Full changelog](https://github.com/openshift/installer/compare/e9327a5587a02cff8aae7e41a06ef86382334b4c...b53cd6a8c6d02a02173a3bc6eda6862eaa6ea3fd) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d0f23b14fbf35493e5b713e25ecf662ec239e76c) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Fix go vet warning in process.go [#2408](https://github.com/openshift/oc/pull/2408) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#2399](https://github.com/openshift/oc/pull/2399) * [Full changelog](https://github.com/openshift/oc/compare/96ed0f43f0b5adf771ce3bd4fbc86809e93139f8...d0f23b14fbf35493e5b713e25ecf662ec239e76c) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a79c9b1ea13e880adc1398fb1dfa43a55482dfe9) * [OCPBUGS-101875](https://issues.redhat.com/browse/OCPBUGS-101875): Bump golang.org/x/net to v0.56.0 to address CVE-2026-33814 [#1096](https://github.com/openshift/cloud-credential-operator/pull/1096) * [OCPBUGS-114669](https://issues.redhat.com/browse/OCPBUGS-114669): [release-4.22] GCP Alternate Universe Domain Support for WIF [#1092](https://github.com/openshift/cloud-credential-operator/pull/1092) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/26005d211cfdd678a036d06316d783a09eab2446...a79c9b1ea13e880adc1398fb1dfa43a55482dfe9) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/8a0eef716961f0562523ee20f0ec8fb96dc8cc15) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#1000](https://github.com/openshift/cluster-authentication-operator/pull/1000) * [OCPBUGS-101881](https://issues.redhat.com/browse/OCPBUGS-101881): Bump golang.org/x/net from v0.47.0 to v0.53.0 [#979](https://github.com/openshift/cluster-authentication-operator/pull/979) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88...8a0eef716961f0562523ee20f0ec8fb96dc8cc15) ### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/4fc7368dbab7a85969d5c5a0462403b986e1d630) * [OCPBUGS-123142](https://issues.redhat.com/browse/OCPBUGS-123142): Update build-machinery-go vendor dependency [#148](https://github.com/openshift/cluster-bootstrap/pull/148) * [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383...4fc7368dbab7a85969d5c5a0462403b986e1d630) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/097842b5c1e0757e3f9b6ac56909efdc0b6e8638) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Added support to manage kube-cloud-config for vSphere in openshift-config-managed [#498](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/498) * [OCPBUGS-101897](https://issues.redhat.com/browse/OCPBUGS-101897): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#509](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/509) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e893bf67ceaaf4c0305ea821faf7cb3b98bd3efa...097842b5c1e0757e3f9b6ac56909efdc0b6e8638) ### [cluster-config-api](https://github.com/openshift/api/tree/231177cd43bccd49bad2bfb4c3cd4cc8153288fb) * [OCPBUGS-122251](https://issues.redhat.com/browse/OCPBUGS-122251): Promote GCD to GA in 4.22 [#3034](https://github.com/openshift/api/pull/3034) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Add vSphere multi vCenter Day 2 [#2969](https://github.com/openshift/api/pull/2969) * [Full changelog](https://github.com/openshift/api/compare/42fb550ea02a47ab1de1ee81d798706cb74035a1...231177cd43bccd49bad2bfb4c3cd4cc8153288fb) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/29d2f219417244d952b5a5e89165dca3b0d2b4a4) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Migrate vSphere sync of kube-cloud-config to 3CMO [#498](https://github.com/openshift/cluster-config-operator/pull/498) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#503](https://github.com/openshift/cluster-config-operator/pull/503) * [OCPBUGS-77604](https://issues.redhat.com/browse/OCPBUGS-77604): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 [#473](https://github.com/openshift/cluster-config-operator/pull/473) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/e0c2428e4618493ad9db0681e3b91444746ddf2c...29d2f219417244d952b5a5e89165dca3b0d2b4a4) ### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/1a0670568fedf4f75225de2a3bcd33613b9b5bfe) * [OCPBUGS-121958](https://issues.redhat.com/browse/OCPBUGS-121958): Guard against empty workspace field on vsphere [#420](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/420) * [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/55dea4dc947da2d8a9c1ffba451a41c3b3662718...1a0670568fedf4f75225de2a3bcd33613b9b5bfe) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/43da660c27b3cfeb490837158cfaf3d2135d4fa2) * [OCPBUGS-89322](https://issues.redhat.com/browse/OCPBUGS-89322): cluster-restore.sh: move extra /var/lib/etcd files to backup [#1632](https://github.com/openshift/cluster-etcd-operator/pull/1632) * [OCPBUGS-101904](https://issues.redhat.com/browse/OCPBUGS-101904): Bump golang.org/x/net to v0.53.0 address CVE-2026-33814 [#1691](https://github.com/openshift/cluster-etcd-operator/pull/1691) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#1704](https://github.com/openshift/cluster-etcd-operator/pull/1704) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/14ecb163d4a69d1e53802c21d799d6f16b2303dc...43da660c27b3cfeb490837158cfaf3d2135d4fa2) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ab5f68632a64486c295c84301600f630c6693976) * [OCPBUGS-112634](https://issues.redhat.com/browse/OCPBUGS-112634): Support Alternate Universe Domain [#1564](https://github.com/openshift/cluster-ingress-operator/pull/1564) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/656d475a0bc76b31b8e387abd9e19458531cc4a3...ab5f68632a64486c295c84301600f630c6693976) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a18571de7438badd6206ba84f40a17160f524e94) * [OCPBUGS-101906](https://issues.redhat.com/browse/OCPBUGS-101906): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#2295](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2295) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#2312](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2312) * [OCPBUGS-86944](https://issues.redhat.com/browse/OCPBUGS-86944): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.22 [#2072](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2072) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a2ba9c6a2d1ed76ea98a40885cf9a824eb9b9071...a18571de7438badd6206ba84f40a17160f524e94) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b0509dae420643b9432921a158b3d219da3abd03) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#969](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/969) * [OCPBUGS-77677](https://issues.redhat.com/browse/OCPBUGS-77677): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 [#916](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/916) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/c5c678b3e04a64214ae62f5ad6d873c8899ac363...b0509dae420643b9432921a158b3d219da3abd03) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/497c7928d45d88396c5c1e204592811427cc256b) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#678](https://github.com/openshift/cluster-kube-scheduler-operator/pull/678) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/da4bf66b8f6d057ab1562b6640261d8fe9ded28f...497c7928d45d88396c5c1e204592811427cc256b) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/e13a380d18753308d3fb35cb6fc181b94204bd06) * [OCPBUGS-128496](https://issues.redhat.com/browse/OCPBUGS-128496): Revert EgressIP validation backport [#337](https://github.com/openshift/cluster-machine-approver/pull/337) * [OCPBUGS-120752](https://issues.redhat.com/browse/OCPBUGS-120752), [OCPBUGS-127108](https://issues.redhat.com/browse/OCPBUGS-127108): Always validate EgressIPs [#317](https://github.com/openshift/cluster-machine-approver/pull/317) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa...e13a380d18753308d3fb35cb6fc181b94204bd06) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ed2e62ae9bec79f1d4a71d15126dea0e6f20b3c7) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#3112](https://github.com/openshift/cluster-monitoring-operator/pull/3112) * [OCPBUGS-127466](https://issues.redhat.com/browse/OCPBUGS-127466): fix(e2e): use Job with backoffLimit for TestDocExamples [#3103](https://github.com/openshift/cluster-monitoring-operator/pull/3103) * [OCPBUGS-126959](https://issues.redhat.com/browse/OCPBUGS-126959): restore node-exporter textfile metrics with read-only rootfs [#3095](https://github.com/openshift/cluster-monitoring-operator/pull/3095) * [OCPBUGS-111059](https://issues.redhat.com/browse/OCPBUGS-111059): chore: backport support for ogx api adoption metrics [#3058](https://github.com/openshift/cluster-monitoring-operator/pull/3058) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/0354fe76edacf5fbb2a01c9e56d1e467d8621c79...ed2e62ae9bec79f1d4a71d15126dea0e6f20b3c7) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/80ad6fc01b6a270e7584b4e44dbaff40e33d098f) * [OCPBUGS-119956](https://issues.redhat.com/browse/OCPBUGS-119956): Allow per-node OVN encap IP override via env-overrides [#3148](https://github.com/openshift/cluster-network-operator/pull/3148) * [OCPBUGS-99048](https://issues.redhat.com/browse/OCPBUGS-99048): Restart pods when rendering egressIP settings [#3061](https://github.com/openshift/cluster-network-operator/pull/3061) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/fe422f7670aa55e037c2180f1b7f2dc4e3d34cde...80ad6fc01b6a270e7584b4e44dbaff40e33d098f) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ec4783d7ba0a08b9d933a20636a6e2488097ec92) * [OCPBUGS-101927](https://issues.redhat.com/browse/OCPBUGS-101927): Bump golang.org/x/net from v0.49.0 to v0.58.0 [#1634](https://github.com/openshift/cluster-node-tuning-operator/pull/1634) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3cd3ee48a5e99051d4392af47db09e976b180992...ec4783d7ba0a08b9d933a20636a6e2488097ec92) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/f6648e03639d2eb2c9f88bf340ac0871f1c0b26e) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#772](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/772) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/8417fa98338c2adab73386c63c6d84af14ef99e4...f6648e03639d2eb2c9f88bf340ac0871f1c0b26e) ### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/5639160c0b8e785afa3eaf7cdde811c0369283a3) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#249](https://github.com/openshift/containernetworking-plugins/pull/249) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/db552ad333e84b99ca279a9c01ca2d918ec00c99...5639160c0b8e785afa3eaf7cdde811c0369283a3) ### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/4a6ddf89c57bbff5a7721efe96894f3520be256e) * [OCPBUGS-96666](https://issues.redhat.com/browse/OCPBUGS-96666): Bump golang.org/x/net to v0.55.0 [#416](https://github.com/openshift/cloud-provider-openstack/pull/416) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/710a2aea744fd04546d11ac781fb874694e33ad8...4a6ddf89c57bbff5a7721efe96894f3520be256e) ### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/fa0bcf1d3a3dfc4855d38fe39cef49e117ab614d) * UPSTREAM: 110: OCPBUGS-101913: Bump golang.org/x/net to v0.57.0 [#111](https://github.com/openshift/csi-external-attacher/pull/111) * [Full changelog](https://github.com/openshift/csi-external-attacher/compare/95a1979700f021e20879480b98b953bc382a0eaf...fa0bcf1d3a3dfc4855d38fe39cef49e117ab614d) ### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/c6b83544b30baa8049d6aa37e1e41f25e0ac5c61) * [OCPBUGS-101938](https://issues.redhat.com/browse/OCPBUGS-101938): UPSTREAM: 1452: Bump golang.org/x/net v0.53.0 to mitigate CVE-2026-33814 [#234](https://github.com/openshift/csi-external-snapshotter/pull/234) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/28f6e06357f2840c241b9cfe09d301516e681c87...c6b83544b30baa8049d6aa37e1e41f25e0ac5c61) ### [docker-builder](https://github.com/openshift/builder/tree/989ff30cd36cf3b857e0d1e8861f27f5aa778371) * [OCPBUGS-95539](https://issues.redhat.com/browse/OCPBUGS-95539): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#551](https://github.com/openshift/builder/pull/551) * [Full changelog](https://github.com/openshift/builder/compare/3dead2dcc98d83fb97f42d46b05c5253752e7910...989ff30cd36cf3b857e0d1e8861f27f5aa778371) ### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/de48cd14b2296d57397c1139076af4d1474c301f) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Update Dockerfiles [#114](https://github.com/openshift/egress-router-cni/pull/114) * [Full changelog](https://github.com/openshift/egress-router-cni/compare/af8f30136791fa3f3dc9e5638bdb062db133bbbd...de48cd14b2296d57397c1139076af4d1474c301f) ### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/d8b2fbfce05b94e7f33277a3e8926fbbb189a2be) * [OCPBUGS-101949](https://issues.redhat.com/browse/OCPBUGS-101949), [OCPBUGS-102055](https://issues.redhat.com/browse/OCPBUGS-102055): Bump golang.org/x/net to v0.53.0 for CVE-2026-33814 [#134](https://github.com/openshift/cloud-provider-gcp/pull/134) * NO-JIRA: Update OWNERS [#160](https://github.com/openshift/cloud-provider-gcp/pull/160) * [OCPBUGS-112265](https://issues.redhat.com/browse/OCPBUGS-112265): UPSTREAM: 1250: Support Universe Domain client options (#1250) [#141](https://github.com/openshift/cloud-provider-gcp/pull/141) * [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/2e28a1aa036a64a1f315170b70b912f1f8ab9f92...d8b2fbfce05b94e7f33277a3e8926fbbb189a2be) ### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9858a610ffeeca53f0ba04e92c634665c67237f5) * NO-JIRA: Rebase release-4.22 to Kubernetes v1.35.8 [#2773](https://github.com/openshift/kubernetes/pull/2773) * [OCPBUGS-107557](https://issues.redhat.com/browse/OCPBUGS-107557), [OCPBUGS-107672](https://issues.redhat.com/browse/OCPBUGS-107672): bump otel to v1.44.0 to fix CVE-2026-41178 [#2770](https://github.com/openshift/kubernetes/pull/2770) * [Full changelog](https://github.com/openshift/kubernetes/compare/19365a06f558a5c5dc7f5654fa99a8318e4a77f4...9858a610ffeeca53f0ba04e92c634665c67237f5) ### [hypershift](https://github.com/openshift/hypershift/tree/ca947c90f3323c31019e8011572b27e600fd1ee3) * [OCPBUGS-119698](https://issues.redhat.com/browse/OCPBUGS-119698): Add proxy env vars to cluster-storage-operator deployment" [#9494](https://github.com/openshift/hypershift/pull/9494) * [CNTRLPLANE-4158](https://issues.redhat.com/browse/CNTRLPLANE-4158): Maintain ingress serving cert for HostedCluster ingress [#9607](https://github.com/openshift/hypershift/pull/9607) * [OCPBUGS-120746](https://issues.redhat.com/browse/OCPBUGS-120746): Move packageserver PDB from guest cluster to management cluster [#9548](https://github.com/openshift/hypershift/pull/9548) * [OCPBUGS-127173](https://issues.redhat.com/browse/OCPBUGS-127173): filter AWS-reserved tag keys before calling DeleteTags [#9733](https://github.com/openshift/hypershift/pull/9733) * [OCPBUGS-123727](https://issues.redhat.com/browse/OCPBUGS-123727): fix(azure): skip KMS validation for private Key Vaults on ARO HCP [#9624](https://github.com/openshift/hypershift/pull/9624) * [OCPBUGS-112731](https://issues.redhat.com/browse/OCPBUGS-112731): fix(certs): normalize IP SANs to stop dual-stack KAS cert churn [#9496](https://github.com/openshift/hypershift/pull/9496) * [OCPBUGS-114436](https://issues.redhat.com/browse/OCPBUGS-114436): fix(konnectivity): enable --sync-forever to restore lost agent-server tunnels [#9432](https://github.com/openshift/hypershift/pull/9432) * [ACM-46124](https://issues.redhat.com/browse/ACM-46124): improve hypershift-rhel9-operator container grade on MCE 2.12 [release-4.22] [#9740](https://github.com/openshift/hypershift/pull/9740) * [OCPBUGS-125659](https://issues.redhat.com/browse/OCPBUGS-125659): fix(cpo): preserve immutable AWS load balancer annotations [#9637](https://github.com/openshift/hypershift/pull/9637) * [OCPBUGS-120704](https://issues.redhat.com/browse/OCPBUGS-120704): [release-4.22] fix(operator): health probes + pki-operator TLS config [#9600](https://github.com/openshift/hypershift/pull/9600) * [OCPBUGS-100445](https://issues.redhat.com/browse/OCPBUGS-100445): create virt-launcher NetworkPolicy on external infra cluster [#9205](https://github.com/openshift/hypershift/pull/9205) * [OCPBUGS-114889](https://issues.redhat.com/browse/OCPBUGS-114889): hardcode ETCD_METRICS=extensive in etcd StatefulSet template [#9440](https://github.com/openshift/hypershift/pull/9440) * [Full changelog](https://github.com/openshift/hypershift/compare/7273000c23583d67eaa63db019318e5aa7381297...ca947c90f3323c31019e8011572b27e600fd1ee3) ### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/c8562135da8db1b79d6de930299eeeeb48bec6df) * [OCPBUGS-120700](https://issues.redhat.com/browse/OCPBUGS-120700): Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 [#110](https://github.com/openshift/cloud-provider-ibm/pull/110) * [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/24cff9a691e1ebee94669c834320c6ea974a2010...c8562135da8db1b79d6de930299eeeeb48bec6df) ### [insights-operator](https://github.com/openshift/insights-operator/tree/49f3bec7ab0ffe4572c3b643ff38873ec0771b6b) * [OCPBUGS-113495](https://issues.redhat.com/browse/OCPBUGS-113495): Add multicluster gatherer [#1351](https://github.com/openshift/insights-operator/pull/1351) * [OCPBUGS-122009](https://issues.redhat.com/browse/OCPBUGS-122009): add custom proxy field to insights config [#1362](https://github.com/openshift/insights-operator/pull/1362) * [Full changelog](https://github.com/openshift/insights-operator/compare/a46094471cfb564f3224975a2b1ea6c12d9d057b...49f3bec7ab0ffe4572c3b643ff38873ec0771b6b) ### [ironic](https://github.com/openshift/ironic-image/tree/cc7292ea2591cee804f8901b84a76b188d7d44e7) * Bug OCPBUGS-112711: Telco bugfixes sep26 [#915](https://github.com/openshift/ironic-image/pull/915) * [OCPBUGS-115160](https://issues.redhat.com/browse/OCPBUGS-115160): bump ironic to include fix [#907](https://github.com/openshift/ironic-image/pull/907) * [Full changelog](https://github.com/openshift/ironic-image/compare/f949f43243eec3ad861fe984a69e49a4c2468f01...cc7292ea2591cee804f8901b84a76b188d7d44e7) ### [keepalived-ipfailover](https://github.com/openshift/images/tree/d6a9ffc8bd60573ca6e343dce14a964ba67f6c24) * [OCPBUGS-70034](https://issues.redhat.com/browse/OCPBUGS-70034): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.22 [#219](https://github.com/openshift/images/pull/219) * [Full changelog](https://github.com/openshift/images/compare/6035d101dbc9a7fdd8861d864aeb6f66bacd964b...d6a9ffc8bd60573ca6e343dce14a964ba67f6c24) ### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/cb54716635ad48eb41ff5e0681ea006ec6f43322) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#90](https://github.com/openshift/kubernetes-metrics-server/pull/90) * [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/38c16c4698d131ab0e2da0d4b4b76d5322a89bab...cb54716635ad48eb41ff5e0681ea006ec6f43322) ### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/5f86c7d2bace76cacd57770e2de0e1525cd4be15) * [OCPBUGS-77815](https://issues.redhat.com/browse/OCPBUGS-77815): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 [#240](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/240) * [OCPBUGS-123142](https://issues.redhat.com/browse/OCPBUGS-123142): Update build-machinery-go vendor dependency [#261](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/261) * [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/72835e43c7754356645e41031f3a99926b4d42e6...5f86c7d2bace76cacd57770e2de0e1525cd4be15) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/9b959f8e94e210769cbf445751ea5a70b8827b5c) * [OCPBUGS-69717](https://issues.redhat.com/browse/OCPBUGS-69717): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.22 [#77](https://github.com/openshift/kubevirt-csi-driver/pull/77) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/90f14506c2d4fecfba2c355934bde87e6f101a20...9b959f8e94e210769cbf445751ea5a70b8827b5c) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/c692bdb6104278a5f795cdc3ead4ed75c32a6eb7) * [OCPBUGS-126916](https://issues.redhat.com/browse/OCPBUGS-126916): Add opt-in kube-rbac-proxy sidecar for pprof endpoint (AWS) [#1558](https://github.com/openshift/machine-api-operator/pull/1558) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Added multi vCenter Day 2 Support [#1531](https://github.com/openshift/machine-api-operator/pull/1531) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/e38046acfe255e67aa5ab9c9a6f4efd882ed7dbb...c692bdb6104278a5f795cdc3ead4ed75c32a6eb7) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/f1cb35589f1e61afc98b0cdef263592e92d460f7) * [OCPBUGS-127016](https://issues.redhat.com/browse/OCPBUGS-127016): disable bootimages update in TC-52373 proxy test [#6600](https://github.com/openshift/machine-config-operator/pull/6600) * [OCPBUGS-128622](https://issues.redhat.com/browse/OCPBUGS-128622): Add fix TC 63866 failing in CI job [#6601](https://github.com/openshift/machine-config-operator/pull/6601) * [OCPBUGS-123173](https://issues.redhat.com/browse/OCPBUGS-123173): remove nft chains before checking the ignition config [#6541](https://github.com/openshift/machine-config-operator/pull/6541) * [OCPBUGS-119240](https://issues.redhat.com/browse/OCPBUGS-119240): drop GCD health-check ranges in openshift-gcp-routes [#6564](https://github.com/openshift/machine-config-operator/pull/6564) * [OCPBUGS-101987](https://issues.redhat.com/browse/OCPBUGS-101987): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#6503](https://github.com/openshift/machine-config-operator/pull/6503) * [OCPBUGS-127018](https://issues.redhat.com/browse/OCPBUGS-127018): Correctly handle MC deletion in image mode when no new build is required [#6567](https://github.com/openshift/machine-config-operator/pull/6567) * [OCPBUGS-127016](https://issues.redhat.com/browse/OCPBUGS-127016): Fix IsBootImageUpdateSupported to include vSphere and Azure platforms [#6565](https://github.com/openshift/machine-config-operator/pull/6565) * [OCPBUGS-125661](https://issues.redhat.com/browse/OCPBUGS-125661): Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole [#6551](https://github.com/openshift/machine-config-operator/pull/6551) * [OCPBUGS-122130](https://issues.redhat.com/browse/OCPBUGS-122130): Retry on conflict in syncMachineConfigNodes [#6521](https://github.com/openshift/machine-config-operator/pull/6521) * [OCPBUGS-126739](https://issues.redhat.com/browse/OCPBUGS-126739): improve JSON unmarshalling for secret decoding [#6561](https://github.com/openshift/machine-config-operator/pull/6561) * [OCPBUGS-126637](https://issues.redhat.com/browse/OCPBUGS-126637): Mount /etc/container in mosb [#6557](https://github.com/openshift/machine-config-operator/pull/6557) * [OCPBUGS-122239](https://issues.redhat.com/browse/OCPBUGS-122239): [TNF] Add infinite retry on untaint systemd unit [#6554](https://github.com/openshift/machine-config-operator/pull/6554) * [OCPBUGS-122961](https://issues.redhat.com/browse/OCPBUGS-122961): updateLayeredOS deploy-from-self when skopeo < 1.22.2 [#6538](https://github.com/openshift/machine-config-operator/pull/6538) * [OCPBUGS-122279](https://issues.redhat.com/browse/OCPBUGS-122279): limit ContainerRuntimeConfig status condition to 3 [#6531](https://github.com/openshift/machine-config-operator/pull/6531) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/90b269666abb8df37c46bf49d9b54dcf2604447c...f1cb35589f1e61afc98b0cdef263592e92d460f7) ### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d3987ccbfd395465cb531bada3f5b4d7695ab4f0) * [OCPBUGS-101953](https://issues.redhat.com/browse/OCPBUGS-101953): Bump golang.org/x/net to v0.53.0 [#196](https://github.com/openshift/image-customization-controller/pull/196) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/a43d9c977f6332577efcd383cf173a2ff5805a4d...d3987ccbfd395465cb531bada3f5b4d7695ab4f0) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/6e076ce45d38c2934d55fc971d97a9524b1775b6) * NO-JIRA: [release-4.22] Sanitize alert runbook URLs [#1295](https://github.com/openshift/monitoring-plugin/pull/1295) * [OCPBUGS-101991](https://issues.redhat.com/browse/OCPBUGS-101991): CVE-2026-33814 openshift4/ose-monitoring-plugin-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.22] [#1202](https://github.com/openshift/monitoring-plugin/pull/1202) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/8416b67c1bd96dfca3796e208c27c44ffd375a74...6e076ce45d38c2934d55fc971d97a9524b1775b6) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/d5dc7fc724bdad569676e56a3b61aec67824da43) * [OCPBUGS-101972](https://issues.redhat.com/browse/OCPBUGS-101972): bump golang.org/x/net to v0.53.0 to fix CVE-2026-33814 [#130](https://github.com/openshift/multus-admission-controller/pull/130) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d4dd42ba9c17b04e0e5003147f4e140ea5e34749...d5dc7fc724bdad569676e56a3b61aec67824da43) ### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/42f55da4d9cb1bae11f79bfaf196f1982252a204) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#360](https://github.com/openshift/multus-cni/pull/360) * [Full changelog](https://github.com/openshift/multus-cni/compare/a87f7a50bdf2fba01fdf234bb878bd5dd16cdaa7...42f55da4d9cb1bae11f79bfaf196f1982252a204) ### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/ad9a8654c91ec0ec9155f619ea4cb84c9f22e202) * [OCPBUGS-101970](https://issues.redhat.com/browse/OCPBUGS-101970): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#124](https://github.com/openshift/multus-networkpolicy/pull/124) * [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/834a093f693e521b8dc4ec7168d03cfba2c1cba1...ad9a8654c91ec0ec9155f619ea4cb84c9f22e202) ### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/92556e11a280668cfb87cd8f28197f18a4d91f43) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#79](https://github.com/openshift/route-override-cni/pull/79) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#80](https://github.com/openshift/route-override-cni/pull/80) * [Full changelog](https://github.com/openshift/route-override-cni/compare/08af4127c77976510cad1c096d9aca977d8ae5af...92556e11a280668cfb87cd8f28197f18a4d91f43) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/bdbe534288c6bf78de2429acbf10bb41c5f0a664) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#429](https://github.com/openshift/whereabouts-cni/pull/429) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d691040e509bb20c26b5e8366c0d6f3bb45a5e02...bdbe534288c6bf78de2429acbf10bb41c5f0a664) ### [must-gather](https://github.com/openshift/must-gather/tree/0e52d3009279e9517f5c9df0178d2cc15d9ad31a) * [OCPBUGS-123142](https://issues.redhat.com/browse/OCPBUGS-123142): Update build-machinery-go vendor dependency [#565](https://github.com/openshift/must-gather/pull/565) * [Full changelog](https://github.com/openshift/must-gather/compare/8554213fa214e8e165e7bedaf8d892bb824d83ef...0e52d3009279e9517f5c9df0178d2cc15d9ad31a) ### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/06d7a6add78f1360ae5b8d09b49873763a43b7bf) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#124](https://github.com/openshift/bond-cni/pull/124) * [OCPBUGS-69972](https://issues.redhat.com/browse/OCPBUGS-69972): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.22 [#109](https://github.com/openshift/bond-cni/pull/109) * [Full changelog](https://github.com/openshift/bond-cni/compare/5ef2d3205f11fba65e3949c0c57897420a83974a...06d7a6add78f1360ae5b8d09b49873763a43b7bf) ### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/a4519a29cde04c7606fb36ec6fd71584e1024023) * [OCPBUGS-77680](https://issues.redhat.com/browse/OCPBUGS-77680): Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 [#142](https://github.com/openshift/network-metrics-daemon/pull/142) * [OCPBUGS-101990](https://issues.redhat.com/browse/OCPBUGS-101990): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 [#149](https://github.com/openshift/network-metrics-daemon/pull/149) * [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5b233ea1d80733c1b00c6bad65dec0620dbf783a...a4519a29cde04c7606fb36ec6fd71584e1024023) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/310cb411433a727d406f263d22d6545b2108b7da) * [OCPNETUI-147](https://issues.redhat.com/browse/OCPNETUI-147): Align shared modules with Console [#564](https://github.com/openshift/networking-console-plugin/pull/564) * maintenance: Bump the npm group with 15 updates [#552](https://github.com/openshift/networking-console-plugin/pull/552) * maintenance: Bump the npm group across 1 directory with 20 updates [#535](https://github.com/openshift/networking-console-plugin/pull/535) * maintenance: Bump the npm group with 249 updates [#507](https://github.com/openshift/networking-console-plugin/pull/507) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/a05766f6d5b6f2a4ff5967cf65ed732540465216...310cb411433a727d406f263d22d6545b2108b7da) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/52fd93c590624badba3fb667c273fa7a011793f6) * [OCPBUGS-109741](https://issues.redhat.com/browse/OCPBUGS-109741): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.22 [#218](https://github.com/openshift/oauth-apiserver/pull/218) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#230](https://github.com/openshift/oauth-apiserver/pull/230) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/4c002a9114937ea9c20213f00892761c2013e60b...52fd93c590624badba3fb667c273fa7a011793f6) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/50d6087dd965f0eb85d54abe4a56bb663cb03aab) * [OCPBUGS-112096](https://issues.redhat.com/browse/OCPBUGS-112096): bugfix: rewrite open redirect strings to '/' [#379](https://github.com/openshift/oauth-proxy/pull/379) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/367b72380a41025060d2372269d192cffb4167de...50d6087dd965f0eb85d54abe4a56bb663cb03aab) ### [oauth-server](https://github.com/openshift/oauth-server/tree/6a3cf06edd0922ea79b857ad888c7bcd83b94ea5) * [OCPBUGS-92015](https://issues.redhat.com/browse/OCPBUGS-92015): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#268](https://github.com/openshift/oauth-server/pull/268) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#263](https://github.com/openshift/oauth-server/pull/263) * [OCPBUGS-100337](https://issues.redhat.com/browse/OCPBUGS-100337): Updating oauth-server-container image to be consistent with ART for 4.22 [#256](https://github.com/openshift/oauth-server/pull/256) * [Full changelog](https://github.com/openshift/oauth-server/compare/42031614956a88806d0503cd619b49975ad61682...6a3cf06edd0922ea79b857ad888c7bcd83b94ea5) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3f66edaf31831b93043b0baa55d02462d4e7ee39) * [OCPBUGS-115778](https://issues.redhat.com/browse/OCPBUGS-115778), [OCPBUGS-116358](https://issues.redhat.com/browse/OCPBUGS-116358): (4.22) fix zipslip path traversal in operator catalog for v1 [#54](https://github.com/openshift/oc-mirror/pull/54) * [Full changelog](https://github.com/openshift/oc-mirror/compare/739e1384c223aef6cbadab557301741332f96a52...3f66edaf31831b93043b0baa55d02462d4e7ee39) ### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/53c4f9ea3e6d716a14121e957a811514828d24aa) * [OCPBUGS-102003](https://issues.redhat.com/browse/OCPBUGS-102003): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#800](https://github.com/openshift/operator-framework-operator-controller/pull/800) * [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/433f3cc944ee4f7995a5d0b444aecb77c3891176...53c4f9ea3e6d716a14121e957a811514828d24aa) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/77f4eab69952824801ecc4113666a5e87684c899) * [OCPBUGS-109742](https://issues.redhat.com/browse/OCPBUGS-109742): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.22 [#675](https://github.com/openshift/openshift-apiserver/pull/675) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#685](https://github.com/openshift/openshift-apiserver/pull/685) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7fa546d41a73b519e3af0e6428471c4aaf5c71e5...77f4eab69952824801ecc4113666a5e87684c899) ### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/6d7ee2d70f44d25bb15a184103574b9c7b967253) * UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into release-4.22 [#419](https://github.com/openshift/cluster-api-provider-openstack/pull/419) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/06d95461581f9374ae05959b66fc50e2a17d077c...6d7ee2d70f44d25bb15a184103574b9c7b967253) ### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/b9a621ee75f4a474d3adcbb8330cd06a2731f370) * [OCPBUGS-101857](https://issues.redhat.com/browse/OCPBUGS-101857): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#43](https://github.com/openshift/openstack-resource-controller/pull/43) * [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/cbea7a9cab145c32e2f347be69996b649893cc22...b9a621ee75f4a474d3adcbb8330cd06a2731f370) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/645ed68e789fd885756d7dffb44df3c54b9e32fe) * [OCPBUGS-128612](https://issues.redhat.com/browse/OCPBUGS-128612): Branch Sync release-5.0 to release-4.22 [09-25-2026] [#3476](https://github.com/openshift/ovn-kubernetes/pull/3476) * [OCPBUGS-128244](https://issues.redhat.com/browse/OCPBUGS-128244): Branch Sync release-5.0 to release-4.22 [09-18-2026] [#3461](https://github.com/openshift/ovn-kubernetes/pull/3461) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e2082ef4a1aaad8fa5acc7b24880394b60a4e8ae...645ed68e789fd885756d7dffb44df3c54b9e32fe) ### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/3d699afbbf74177ad3a12daf78df4d73b40f95ad) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#413](https://github.com/openshift/prom-label-proxy/pull/413) * [Full changelog](https://github.com/openshift/prom-label-proxy/compare/c4c99a3071808f466ee6c3d7b7fa87108b457feb...3d699afbbf74177ad3a12daf78df4d73b40f95ad) ### [prometheus](https://github.com/openshift/prometheus/tree/916620b6a59d6a5c05e694fca91d95a0fd60fe80) * NO-ISSUE: synchronize OWNERS from main branch [#391](https://github.com/openshift/prometheus/pull/391) * [Full changelog](https://github.com/openshift/prometheus/compare/868b9ce717fdde35c0769c6f22f35f3787ff1274...916620b6a59d6a5c05e694fca91d95a0fd60fe80) ### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/3e0eb330900c872c056923efed87229686f11c1f) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#200](https://github.com/openshift/node_exporter/pull/200) * [Full changelog](https://github.com/openshift/node_exporter/compare/6c4fc0126407c8404b8604faa2f1230f385b9f44...3e0eb330900c872c056923efed87229686f11c1f) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/de05110fb2993491ff7f40455deb2f70cb95423b) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#377](https://github.com/openshift/service-ca-operator/pull/377) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/9fff46a576033685f66fbb1121eb0a2f134a29be...de05110fb2993491ff7f40455deb2f70cb95423b) ### [telemeter](https://github.com/openshift/telemeter/tree/9ae2c1bbfc57849aba79d689601f15d27f511ca6) * Fix OCPBUGS-107725: CVE-2026-41178 [#613](https://github.com/openshift/telemeter/pull/613) * [Full changelog](https://github.com/openshift/telemeter/compare/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4...9ae2c1bbfc57849aba79d689601f15d27f511ca6) ### [tests](https://github.com/openshift/origin/tree/8a97f6c0411069a271c59b7a44ef9d0eac9563c6) * [OCPBUGS-120717](https://issues.redhat.com/browse/OCPBUGS-120717): Extend image-registry single replica exception to s390x architecture [#31422](https://github.com/openshift/origin/pull/31422) * [Full changelog](https://github.com/openshift/origin/compare/6c62ada4b9b23dfc6a0431afd40db8cec506e2ca...8a97f6c0411069a271c59b7a44ef9d0eac9563c6) ### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/a67d9779a84df26ca64efbc869559d5f38650279) * [OCPBUGS-102040](https://issues.redhat.com/browse/OCPBUGS-102040): Bump golang.org/x/net to version 0.57.0 that fixes CVE-2026-33814 [#19](https://github.com/openshift/volume-data-source-validator/pull/19) * [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/8e176cec394709cac728423cbbb6c3c914be8485...a67d9779a84df26ca64efbc869559d5f38650279) ### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/19a2d3127957c50fac05c5338e4b779649783d37) * [OCPBUGS-102036](https://issues.redhat.com/browse/OCPBUGS-102036): Bump golang.org/x/net to v0.53.0 [#352](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/352) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/9be965742961e7a84b0af8ff5ea17a852e015c98...19a2d3127957c50fac05c5338e4b779649783d37) ### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/ed07cd9be72a961e19840bb4149cc691be87eed3) * [OCPBUGS-105280](https://issues.redhat.com/browse/OCPBUGS-105280): Fixed GetVCenter to handle removed FDs better [#228](https://github.com/openshift/vsphere-problem-detector/pull/228) * [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/885fd8b28b91323570ed6cbaf6aa171845d4c83c...ed07cd9be72a961e19840bb4149cc691be87eed3)