# 4.22.19 Created: 2026-10-16 15:32:54 +0000 UTC Image Digest: `sha256:c02df63adabc70ed309853f200a1e3cfd4ef38edf00fc2a3f832d5f99e8165eb` ## Changes from 4.22.15 ### Components * Kubectl 1.35.2 * Kubernetes upgraded from 1.35.6 to 1.35.8 * Kubernetes Tests 1.35.1 * Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260915-0 to 10.2.20261013-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | | GCPSovereignCloudInstall
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled | | IngressControllerDynamicConfigurationManager
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled | ### Rebuilt images without code change * [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [d958406a](https://github.com/openshift/assisted-installer-agent/commit/d958406a2cfbe3ed9db4963d004bc4d69226b84e) `sha256:03ba870df67cbb6962af5eaabbda9929d0974b6f4d8432b2be180539a1a78e9a` * [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:cfee97dca415405bd1a7ba4103fcc68a2e7ff1d5574c0e78f2f2d7a526f566e9` * [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [b4bad3f8](https://github.com/openshift/cloud-provider-aws/commit/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3) `sha256:529d0c0648331978ffb74dc5b3de2a9545bf2f56af0abc19d7cb9eecaf460205` * [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [51d6bc76](https://github.com/openshift/aws-ebs-csi-driver/commit/51d6bc760234ffccb0348937a5cfd70b326119b9) `sha256:1c7495b1708d9696c7cebbe6da8b82963dc11abefc28019ce00461b01589189e` * [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:7ce61a1be6f38869da76d942cd7c431c32d99e33ae0d9df9b1ad9f50aea7a1c4` * [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f607bada](https://github.com/openshift/aws-karpenter-provider-aws/commit/f607badaa794779517b2a16a9d978f05a502ce8e) `sha256:0e913e0b51ce62c9d08babb092133a047d2cf73e69aa6c33bef3bffb18757b29` * [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:3e2483fc185c7bef9ea9c3b4eef4e9b65a3f3b3371c3eb16a46df5379711667e` * [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:9fac1bb3cf6b2056a75d0b7f645498058c27689301e822996e1c1d23786290a6` * [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:94ef3455de4478c62fd7f395a41ec317a69dd96cd5ccefa4c85aaeff16532581` * [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [dd79471c](https://github.com/openshift/cluster-api-provider-azure/commit/dd79471cc2f34c7c0b074ee8abc6f43a069811c2) `sha256:68ff01bf5a2f49b3c8c767280421c85734600f8233306ad54369f6233a9d302b` * [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:32e6791cb9487a3ff4e831634949aa0decaf1f01544d38b6f2a9fc34adc868f0` * [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [32f72754](https://github.com/openshift/azure-file-csi-driver/commit/32f7275441afca97750de9f1e415bad7c8fbdee3) `sha256:2296c63a32a724f45f62ca77dee8d06f4c4de24683ebb6022b4853d2b86d2858` * [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:1581f0e9fc63fa588e5ef4acd49355a72fd617fd6b004cf2ac5ff66fcab0b715` * [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [facac71a](https://github.com/openshift/azure-kubernetes-kms/commit/facac71adec60e553ff81da27f1b1f1c0ff82b25) `sha256:09cb5314d38714dcf77a7369b33b645ecdac72127761e9d8e8c874ab41c6cb7d` * [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [bad7e944](https://github.com/openshift/machine-api-provider-azure/commit/bad7e9447fa66002e5ec7b0b7952545e7e8a6c9f) `sha256:826ae3beca8eb7b931d35a303102ee4c4581ee54d9698a7dc84fec2b69827c22` * [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b44d4444](https://github.com/openshift/azure-service-operator/commit/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36) `sha256:61694cfcdc748d84d2e3774ea34503b84981b9ae3738dcef9cb07cc0d44488fa` * [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [6481b520](https://github.com/openshift/cluster-api-provider-metal3/commit/6481b52008f0991912f80fdf9d74af3e631a7269) `sha256:bc94ad4664963a1db3b29502555b858456fea389808db15fb7312f5726153f96` * [baremetal-operator](https://github.com/openshift/baremetal-operator) git [7fc3bd6c](https://github.com/openshift/baremetal-operator/commit/7fc3bd6c4f36acec9944d5adcd2083ae21a8df4b) `sha256:692dd974a741f030b9eebc2c6e762574fb87accb8f09b3028d8c29553f0740cd` * [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [8bc05a82](https://github.com/openshift/cloud-network-config-controller/commit/8bc05a827fe54e1421013a198ffefe776efa5b6f) `sha256:d0e427ab54bafbdb6b79a1ffb279f6614737e9a9f5a4acb4a6476bd64d61f995` * [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [8a0eef71](https://github.com/openshift/cluster-authentication-operator/commit/8a0eef716961f0562523ee20f0ec8fb96dc8cc15) `sha256:1497bf58d1022822a527b54b7508370d7b12d7a62d5b68b8139ce264cdb8da52` * [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [89f51dcb](https://github.com/openshift/kubernetes-autoscaler/commit/89f51dcb39919234f4b9b1efb37ffecb68ba7366) `sha256:9d6f7149a2585d234c4392ef98292547fec75e60dec4ac741de3e9a6874c4338` * [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [effcafee](https://github.com/openshift/cluster-autoscaler-operator/commit/effcafeed5e4ab9cee8e312de2aa123331eea9fa) `sha256:d59c9967df6f2537b54824b274e9ba7f32bb9bcef042ada020e3f6cccd0fe014` * [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [4fc7368d](https://github.com/openshift/cluster-bootstrap/commit/4fc7368dbab7a85969d5c5a0462403b986e1d630) `sha256:f6b9c34d0427dbdd6f8007860de96aa60292826e9b02a428fae0850b3b84e15e` * [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f1718df9](https://github.com/openshift/cluster-api/commit/f1718df9c13b0cee5ede1b6354e29acc466607a4) `sha256:e98ba3334223028948a73987f3d03d17e7c75d4efb63a8743be6ff39f70b1a4f` * [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [5430ff7a](https://github.com/openshift/cluster-capi-operator/commit/5430ff7a34d4c0a946740dcdcd98690c14c63cf9) `sha256:ebef1220f4884bd4c6ed6353d0a02e5e6d138017b75aba0a60a9b5a3d5cdb11f` * [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [1a067056](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/1a0670568fedf4f75225de2a3bcd33613b9b5bfe) `sha256:19b862c8de822090c6ed67a4f9e2c1b98d4925aa8dc9c9c8e8e7abe1b30f5315` * [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [e9b3b21f](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/e9b3b21fbc322cb410a58b5f147ac76893d851ea) `sha256:be7cc993aa807702a931c99c672a1ba299d8dc49385200771c657e58a4db1a36` * [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:4e1fb6422f81ae77a1e97f37b47f2a910242d5956d8ecf4fdf0f1dd270e06fb7` * [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [c331da28](https://github.com/openshift/cluster-image-registry-operator/commit/c331da28c42721724ed5229c972c956cd1d9502c) `sha256:c8e214ab50637bc56b05368407a8ead52174ce21fb20f098feb3787a1f5b259c` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9afe6687](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9afe66875bff8b5926f2bf6dec4eade1e4a09bab) `sha256:e2fadc47d33ebeb53122d2b433d1b38858c65676862625dd4c03747b0bdab297` * [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2d2699e4](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2d2699e4f3fabc80e402f4c090c8cf80c4517977) `sha256:5f316a73ea0c800a0eb31940398a0a4a87cb6f8c1a8d4d6deb56bbf4b299ad57` * [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [191a6aec](https://github.com/openshift/cluster-samples-operator/commit/191a6aec444bfdbe5d70f7a23a20ee2fd25b7080) `sha256:0b0afa6e703b8d03998255f8634723b0a1ec0b27f0768167e314f4e5849532fe` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8f4ce041](https://github.com/openshift/cluster-storage-operator/commit/8f4ce04189e9c5496548ed53e33943aba8756279) `sha256:fc5882d3e1b51a99284779c6ad03c9fe8f4d0503269802d1d8b096910661a26e` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:4ac0266a784ddb04c1eecf7807663bf958f5dd4cd33bce1323aa68889a6aa562` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:0548011f8c59ba46b63906f44d971c45cd30244393f5501d65eac40e6c9dabfa` * [coredns](https://github.com/openshift/coredns) git [9a71d9a6](https://github.com/openshift/coredns/commit/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4) `sha256:3615541f75f57f40d54ac07463577225752bf79a38330a6e23d484b0a79187fe` * [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:43a8777c989438dd481e887df78f1209362743de62b2170b0dad2f87c42c3bc7` * [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b6911553](https://github.com/openshift/csi-driver-nfs/commit/b69115537b79a5b3516e2a900f9095f4ebb3cbe5) `sha256:c90e8385a7a50894b8ec89003dfca9eb273663a4c85073d1feb990ac87072cbd` * [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [253b987d](https://github.com/openshift/csi-external-provisioner/commit/253b987d5233b1adb93b5ae2c63102c0d06c01cf) `sha256:bbf27609931d1729b53aa870dd6ae4c2b08ee013316eba15574f1eccf3f0602c` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [20f7fbe4](https://github.com/openshift/csi-external-resizer/commit/20f7fbe41654ebe10d2d4f50ae423c9686ce1c25) `sha256:aba0d107d3292d3ed645d9d159510b081f8f77c732d0790aaf349c922be49de4` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:5d76f4819feef11572fc95cd52e9bd794d7294f1012d54222186b23c191b678e` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb6a6378](https://github.com/openshift/csi-node-driver-registrar/commit/bb6a6378d2af235b3b253cb422d406bd3d7e30b1) `sha256:0a341bf3eadc12536e662dbd160c4fb4101dcce60a0714076930e4dd234a0705` * [docker-registry](https://github.com/openshift/image-registry) git [179d7925](https://github.com/openshift/image-registry/commit/179d7925210490c5de4846540e01c33601cd8cd1) `sha256:7cb6a7bbe584af9cf1766e0c5a14ac34b068c0e67cc71509fae2885178abcade` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:dde42ebf127b85d7668315b6bc02adeb4feebdab694121327eae8d1ccf1df3a6` * [egress-router-cni](https://github.com/openshift/egress-router-cni) git [de48cd14](https://github.com/openshift/egress-router-cni/commit/de48cd14b2296d57397c1139076af4d1474c301f) `sha256:b8e7999d5a555f531ceeab23dd0dc44b1652bfcbf94de68c71decfe876c8981c` * [etcd](https://github.com/openshift/etcd) git [6bd01267](https://github.com/openshift/etcd/commit/6bd01267dc858aca6ff21632f95e98dc62ba33e7) `sha256:cd9fd43fb3fd882ee5b5dcaedb599b8e0a64d913034c99889ee8b42626f21f1a` * [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e7674ede](https://github.com/openshift/cluster-api-provider-gcp/commit/e7674ede9ce8d021a878a6d5e81942875387e5eb) `sha256:aec926c5e7ca3c5959069575e92e239aba3ce60b0a18161f60238150c790a231` * [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [03efd8ba](https://github.com/openshift/machine-api-provider-gcp/commit/03efd8ba0751d4b7cb2be874e32ac9b72e086e4d) `sha256:17de9bae0b58c4d2df8d18b46779d468de097738b959accfa16c2b0b7e2312cd` * [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:eae9827a57a56fd8243dc21b126c0367f2c5792763a70f6fbb073cb023580285` * [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [d362aef2](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/d362aef240c280676249fa34c80fa1b39c684560) `sha256:17a84b6ec70c4ab592d6a00d343092f7b09d09d6030a426348341c240330b5e2` * [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [c378efee](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/c378efee05fd02323d241e86244dee3b56e32a45) `sha256:3e53dee4c6dd581b0b9a4bf098e41e1ce73d361ee81382b5d2dfa439bd8698b8` * [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [9e5537cd](https://github.com/openshift/machine-api-provider-ibmcloud/commit/9e5537cd7d239a31d6b2eb56cd44af3ec7b47dd5) `sha256:1fa1f3e06e2b5543aea0664a16ef541a4ed319dbc92d5411b584062c746e81ab` * [ironic-agent](https://github.com/openshift/ironic-agent-image) git [be386561](https://github.com/openshift/ironic-agent-image/commit/be386561e40cc3bb56ddd05fbf73a7c9ead5198c) `sha256:130fb0e595b9b4471fc42a4df00d6f0e1d75618a02399fa76527f200b63cf142` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:7ffcfdb368b82adb8442da0fb4cb11e6daa4f52dad8e8e1e5be60f505fb02ac3` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:33a76e36f8fc0dfd68c3e8bc5ccb2da195815ec952d332a55e7cb6a345ec3972` * [keepalived-ipfailover](https://github.com/openshift/images) git [d6a9ffc8](https://github.com/openshift/images/commit/d6a9ffc8bd60573ca6e343dce14a964ba67f6c24) `sha256:30b2d63d0cb28c6efde401103e8ba9a35f0613220f080a034f274a4e1f4e552d` * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [5f86c7d2](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/5f86c7d2bace76cacd57770e2de0e1525cd4be15) `sha256:94d6e68375bd0aadc85464a8ee17a461619a0caf57eead22951032a1766fcb41` * [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [09a0a5be](https://github.com/openshift/cloud-provider-kubevirt/commit/09a0a5beaa65fb589d7b571dc47f9748d2463b1c) `sha256:5692f232f21ee65caf9ba4bf44111ade2c28e12028277028bcd236c4b5461c1f` * [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [9b959f8e](https://github.com/openshift/kubevirt-csi-driver/commit/9b959f8e94e210769cbf445751ea5a70b8827b5c) `sha256:57c9a2de6eb5604bf6b4e456791055cd7989c17714f18b90aeb8c7cddbae8cda` * [machine-os-images](https://github.com/openshift/machine-os-images) git [e5342c99](https://github.com/openshift/machine-os-images/commit/e5342c9905a94069e6801737dd6aeddfb74bbac4) `sha256:5678f6377204d698edc5661547ebf5f9face061fbca9fcf951c54df1e61384f6` * [metallb-frr](https://github.com/openshift/frr) git [1277b238](https://github.com/openshift/frr/commit/1277b2387272397d3479d74d2d65112112f985b8) `sha256:eaa1d789fecaac856434ff719fc33a84f090cc4d5c3ddc7af1da5e6ebaed80c2` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [92556e11](https://github.com/openshift/route-override-cni/commit/92556e11a280668cfb87cd8f28197f18a4d91f43) `sha256:450147b87f01dfbdf79e29ba067916df5ed659d429d7634938577f1b708a540d` * [must-gather](https://github.com/openshift/must-gather) git [0e52d300](https://github.com/openshift/must-gather/commit/0e52d3009279e9517f5c9df0178d2cc15d9ad31a) `sha256:fb58600c68f351483155b877e7483f9494c2cebcb1010626e28a6441dbb9cecd` * [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [06d7a6ad](https://github.com/openshift/bond-cni/commit/06d7a6add78f1360ae5b8d09b49873763a43b7bf) `sha256:e5f9b6265e0c417acede40116bd94f1448c54a016906b982fa1921bb53aa29f6` * [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [a4519a29](https://github.com/openshift/network-metrics-daemon/commit/a4519a29cde04c7606fb36ec6fd71584e1024023) `sha256:3a6256bb80ff4cfe273879674f5614f79c8e35b0940079eaa02462cbf776d9cf` * [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:92b59088b9730c02395b9765d6f266c4db4c6a38efc9934b716448e0e4f0afdd` * [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:006398bade3f58f20b55a4e2a77ea32106a3143c0346c611109df26041f067a6` * [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:107f3604b14156e59096ab6af858145ff636d06130f7a6d6dc4e38501fe3ac42` * [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [52fd93c5](https://github.com/openshift/oauth-apiserver/commit/52fd93c590624badba3fb667c273fa7a011793f6) `sha256:472e5aef958ab0883dd41900506d7a996e84ffda8c180d0c2f89c81219159139` * [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [53c4f9ea](https://github.com/openshift/operator-framework-operator-controller/commit/53c4f9ea3e6d716a14121e957a811514828d24aa) `sha256:366fc51333d7f14d2d52e895c4818b0c8200bd690510ac95d74800cee6207281` * [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [53c4f9ea](https://github.com/openshift/operator-framework-operator-controller/commit/53c4f9ea3e6d716a14121e957a811514828d24aa) `sha256:d3e604efaa2bf2c7b8b26942cfa093ea0de9a066b9b4332862c455344aec09b6` * [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [77f4eab6](https://github.com/openshift/openshift-apiserver/commit/77f4eab69952824801ecc4113666a5e87684c899) `sha256:505363fb9e31fbb592aafde512ae237913f655bd5fa561a540b89cdcb5291528` * [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:73d8a8e2bcedb14b2d20af42ecbdf166ab272533b66bd07d777f186465f60b38` * [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [dc8b3b3c](https://github.com/openshift/csi-operator/commit/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368) `sha256:bc8dfbac25647b69e442a4c469eed352fcd0fcf1a2f7930a5ab3104447ec1c17` * [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [6d7ee2d7](https://github.com/openshift/cluster-api-provider-openstack/commit/6d7ee2d70f44d25bb15a184103574b9c7b967253) `sha256:7960754f51da4dd1fe0006026ec904187326b5d3e5d445af2e0849fa63cdde4e` * [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [74bd2dd2](https://github.com/openshift/machine-api-provider-openstack/commit/74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba) `sha256:a1aac4380365debfbcc27df6bb3d6b7fd1552887c4e46559b6f419547f114188` * [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [b9a621ee](https://github.com/openshift/openstack-resource-controller/commit/b9a621ee75f4a474d3adcbb8330cd06a2731f370) `sha256:502af1a88373a7d5182adf46f8c77b15779c6ce6dbcceb14432ef74d3be64b78` * [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [5359e605](https://github.com/openshift/operator-framework-olm/commit/5359e60525288af86885e14d89e3210878f87274) `sha256:ceb616e1a4d6f89999424890f62997756c50f8b5538c605d271f3e8c44c1fd56` * [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [5359e605](https://github.com/openshift/operator-framework-olm/commit/5359e60525288af86885e14d89e3210878f87274) `sha256:dd8e0976e0e59ecf3ec45235af8052489d9df5eb8481f4b2f8eb7f5ea439915f` * [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:766ae035a3b60c669d4daf1f12b8160a42c2fb9151e434bd6b704ef74c400c82` * [operator-registry](https://github.com/openshift/operator-framework-olm) git [5359e605](https://github.com/openshift/operator-framework-olm/commit/5359e60525288af86885e14d89e3210878f87274) `sha256:fc2f312fd395119a28912f63fe3cde1be34c4636c971d95da84f2f8901ec5633` * [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [1173437f](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/1173437f341d58a340d83cb87449af28228a1040) `sha256:d974047195be62bc0e40ee34c44efee675cffd98a0a6be670d59b4dfaa1135bf` * [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [6e859b18](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/6e859b18170daf013897d09ce3ef4f915ada6757) `sha256:01b8211d778117f7e8f84a82d7097e454e1113252f8f6efd0d956f427b264bfb` * [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:f4d5dc1d76f7b58d50422adbb36828518a78622590b23444e3d814b4f2a5522a` * [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [fb32abba](https://github.com/openshift/prometheus-operator/commit/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77) `sha256:956e0d237a42d54b17737992920c64144e1ee1673c9a8afe2bcbbd2d561e5031` * [prometheus-operator](https://github.com/openshift/prometheus-operator) git [fb32abba](https://github.com/openshift/prometheus-operator/commit/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77) `sha256:fd41c913008c3616d1f19215cc1c91bd233c5a92e016b1dbbd8a222e44e23c67` * [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [fb32abba](https://github.com/openshift/prometheus-operator/commit/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77) `sha256:d9b83ea01b66e68634f5dde1860cb5e7ea805f248051e025d330943c9f958560` * [rhel-coreos](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:f7a8b08fab44c31a7202eef3ec7862e0e97267f49d05256e1973a383483eb925` * [rhel-coreos-10](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:70e5a0e6ab1375af2025865ea36db0f2745d42ba845639a5d4dba229a6dc4c87` * [rhel-coreos-10-extensions](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:524f3d907ef04b8b8496a0eda2a6585678959d998cb4b5bf1b0f4a6d496d6d05` * [rhel-coreos-extensions](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:13555b2622105bf3a134a1e46b6e9cc8c60899ddce1b32241cb172c0150c3822` * [route-controller-manager](https://github.com/openshift/route-controller-manager) git [55f77ca4](https://github.com/openshift/route-controller-manager/commit/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b) `sha256:11e10f993cf55d74cf972ec9453a40bd6d441bd70d6b012e8794a50fd6031e28` * [service-ca-operator](https://github.com/openshift/service-ca-operator) git [de05110f](https://github.com/openshift/service-ca-operator/commit/de05110fb2993491ff7f40455deb2f70cb95423b) `sha256:2d8a88112ba33f451a6603e3571feb4a667458f71dfe3e84f9f604d4d612dddb` * [thanos](https://github.com/openshift/thanos) git [98b43345](https://github.com/openshift/thanos/commit/98b433450fed7685ec04af89b4de20afbaf856ae) `sha256:923bd1fee52a771f0200c515415cae81345812760496058c85d673439e1ab51c` * [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [19c75111](https://github.com/openshift/vmware-vsphere-csi-driver/commit/19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e) `sha256:0349b51aa07ddc4499458eab19082babef778305285d27008a90ccb93f9b7714` * [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [19a2d312](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/19a2d3127957c50fac05c5338e4b779649783d37) `sha256:332fd6c8b2f4c0a4a348c5e676ebfed03512855a6773d2fd41191b1d978f97dd` * [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [19c75111](https://github.com/openshift/vmware-vsphere-csi-driver/commit/19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e) `sha256:cc9c96058b11b3ae60708b427146f1eda94d236f84cc5cd97101b6578a62c253` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/a7f8f4b860d889144f0d5c41cba6c8436d4057c4) * [OCPBUGS-130620](https://issues.redhat.com/browse/OCPBUGS-130620): Add ovnKubernetesConfig to install-config definition- #11116 [#11203](https://github.com/openshift/assisted-service/pull/11203) * [OCPBUGS-127124](https://issues.redhat.com/browse/OCPBUGS-127124): Allow agent-installer invoker to have a suffix [#10986](https://github.com/openshift/assisted-service/pull/10986) * [Full changelog](https://github.com/openshift/assisted-service/compare/207d87af62838d2a9ff3eaaf19c213499a732613...a7f8f4b860d889144f0d5c41cba6c8436d4057c4) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/9e182cda60781b48aa0daeeb9f3113a0668c4d30) * [OCPBUGS-127124](https://issues.redhat.com/browse/OCPBUGS-127124): Allow agent-installer invoker to have a suffix [#2350](https://github.com/openshift/assisted-installer/pull/2350) * [Full changelog](https://github.com/openshift/assisted-installer/compare/5caee2bbe7cdfcfa598f3404c1bdcd151303558a...9e182cda60781b48aa0daeeb9f3113a0668c4d30) ### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/f38c441f329c9339d9d53f484ad0057c34845ceb) * Do not show limited support level warning in disconnected flow (#4090) [#4090](https://github.com/openshift-assisted/assisted-installer-ui/pull/4090) * [OCPBUGS-113558](https://issues.redhat.com/browse/OCPBUGS-113558): Bump nanoid to >=3.3.17 in 4.22 (#4064) [#4064](https://github.com/openshift-assisted/assisted-installer-ui/pull/4064) * [OCPBUGS-110326](https://issues.redhat.com/browse/OCPBUGS-110326): Bump baseline-browser-mapping to >=2.11.0 in 4.22 (#4031) [#4031](https://github.com/openshift-assisted/assisted-installer-ui/pull/4031) * [OCPBUGS-113510](https://issues.redhat.com/browse/OCPBUGS-113510): Bump fast-uri to >= 3.1.5 (#4055) [#4055](https://github.com/openshift-assisted/assisted-installer-ui/pull/4055) * [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/831649c24d3b17fade4d94f5c58c7883146bc3d3...f38c441f329c9339d9d53f484ad0057c34845ceb) ### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/c0d0cf6b00931cf87684144841872e17e024ac45) * [OCPBUGS-127041](https://issues.redhat.com/browse/OCPBUGS-127041): Refresh rendezvous IP selection list [#352](https://github.com/openshift/agent-installer-utils/pull/352) * [OCPBUGS-127009](https://issues.redhat.com/browse/OCPBUGS-127009): Fix agent TUI timeout [#351](https://github.com/openshift/agent-installer-utils/pull/351) * [Full changelog](https://github.com/openshift/agent-installer-utils/compare/817b11805be82a177657128eac624df2e969d9b2...c0d0cf6b00931cf87684144841872e17e024ac45) ### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/ac9d4e839ef4949cb29d28fa16405c0f0889aa14) * [OCPBUGS-101854](https://issues.redhat.com/browse/OCPBUGS-101854): replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [#648](https://github.com/openshift/cluster-api-provider-aws/pull/648) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/f60301561fe801da499b22f58aae57eae16ada5a...ac9d4e839ef4949cb29d28fa16405c0f0889aa14) ### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/5b568172eafbfb1ee078d72c69c8ffb84c77bf4c) * [OCPBUGS-83877](https://issues.redhat.com/browse/OCPBUGS-83877): Bump google.golang.org/grpc to v1.79.3 [#54](https://github.com/openshift/aws-encryption-provider/pull/54) * [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/061ffd2a2ccc7d801214034d8737039d7392c3b9...5b568172eafbfb1ee078d72c69c8ffb84c77bf4c) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/b85eccc0e60dde9a184ee176112b435ed88ccf33) * [OCPBUGS-101975](https://issues.redhat.com/browse/OCPBUGS-101975): fix CVE-2026-33814 by bumping golang.org/x/net to v0.53.0 [#198](https://github.com/openshift/machine-api-provider-aws/pull/198) * [OCPBUGS-126916](https://issues.redhat.com/browse/OCPBUGS-126916): Add opt-in pprof endpoint to machine-controller-manager [#218](https://github.com/openshift/machine-api-provider-aws/pull/218) * [OCPBUGS-126916](https://issues.redhat.com/browse/OCPBUGS-126916): Cache region validation response and close AWS sessions [#219](https://github.com/openshift/machine-api-provider-aws/pull/219) * [OCPBUGS-85277](https://issues.redhat.com/browse/OCPBUGS-85277): Changed timeout for node ready logic in OTE [#187](https://github.com/openshift/machine-api-provider-aws/pull/187) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c...b85eccc0e60dde9a184ee176112b435ed88ccf33) ### [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler/tree/f909c408a6999444aff66ea496f9b884709cf372) * [OCPBUGS-101837](https://issues.redhat.com/browse/OCPBUGS-101837): CVE-2026-33814 openshift4/aws-node-termination-handler-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.22] [#14](https://github.com/openshift/aws-node-termination-handler/pull/14) * [Full changelog](https://github.com/openshift/aws-node-termination-handler/compare/341ed3a086925b17671c5349343fedf988a1139e...f909c408a6999444aff66ea496f9b884709cf372) ### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/63cb3a0a73cae9931ecebc94f73045f2a34852b3) * [OCPBUGS-111870](https://issues.redhat.com/browse/OCPBUGS-111870): Bump golang.org/x/crypto to v0.52.0 [#164](https://github.com/openshift/azure-disk-csi-driver/pull/164) * [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/b9046c19b05e2dc75a929328e698ab2cc7e279c9...63cb3a0a73cae9931ecebc94f73045f2a34852b3) ### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/d4963ff8b4681cb4ee46318464e8696ff30ffcda) * [OCPBUGS-101877](https://issues.redhat.com/browse/OCPBUGS-101877): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#59](https://github.com/openshift/azure-workload-identity/pull/59) * [Full changelog](https://github.com/openshift/azure-workload-identity/compare/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45...d4963ff8b4681cb4ee46318464e8696ff30ffcda) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/150ba781418da6428d1ba9933448592011aa8ddf) * [OCPBUGS-130602](https://issues.redhat.com/browse/OCPBUGS-130602): Add internalJoinSubnet to installConfigOverrides [#10971](https://github.com/openshift/installer/pull/10971) * [OCPBUGS-130359](https://issues.redhat.com/browse/OCPBUGS-130359): Warn about ignored install-config fields in ABI [#10964](https://github.com/openshift/installer/pull/10964) * [OCPBUGS-128831](https://issues.redhat.com/browse/OCPBUGS-128831): gcp: skip quota checks on transient errors [#10935](https://github.com/openshift/installer/pull/10935) * [OCPBUGS-126568](https://issues.redhat.com/browse/OCPBUGS-126568): [release-4.22] Bump Azure Marketplace Images to be up-to-date [#10884](https://github.com/openshift/installer/pull/10884) * [OCPBUGS-127124](https://issues.redhat.com/browse/OCPBUGS-127124): use different INSTALL_INVOKER for unconfigured ignition [#10903](https://github.com/openshift/installer/pull/10903) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Add vSphere multi vCenter Day 2 support [#10740](https://github.com/openshift/installer/pull/10740) * [OCPBUGS-122251](https://issues.redhat.com/browse/OCPBUGS-122251): [release-4.22]: Promote GCD to GA [#10871](https://github.com/openshift/installer/pull/10871) * [OCPBUGS-126806](https://issues.redhat.com/browse/OCPBUGS-126806): Inject the pull-secret as podman secret in the agent-installer-ui container [#10897](https://github.com/openshift/installer/pull/10897) * [Full changelog](https://github.com/openshift/installer/compare/cdaf698d75d93e6ed9bf6203c988c5321a086758...150ba781418da6428d1ba9933448592011aa8ddf) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/55c9cbe7f125e223f38a851ea29372059fe0ddfa) * [OCPBUGS-101871](https://issues.redhat.com/browse/OCPBUGS-101871): Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 [#264](https://github.com/openshift/cluster-api-provider-baremetal/pull/264) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b...55c9cbe7f125e223f38a851ea29372059fe0ddfa) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/671586455ff9f92a00cef95e2209cb039258117a) * [OCPBUGS-101879](https://issues.redhat.com/browse/OCPBUGS-101879): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#404](https://github.com/openshift/baremetal-runtimecfg/pull/404) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/1df165545dd61e73101e73ec174e7bd2c930887a...671586455ff9f92a00cef95e2209cb039258117a) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d0f23b14fbf35493e5b713e25ecf662ec239e76c) * [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Fix go vet warning in process.go [#2408](https://github.com/openshift/oc/pull/2408) * [Full changelog](https://github.com/openshift/oc/compare/aea5a82b408a8b83dd7d6f8b8ee9a83585dc87fd...d0f23b14fbf35493e5b713e25ecf662ec239e76c) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a79c9b1ea13e880adc1398fb1dfa43a55482dfe9) * [OCPBUGS-101875](https://issues.redhat.com/browse/OCPBUGS-101875): Bump golang.org/x/net to v0.56.0 to address CVE-2026-33814 [#1096](https://github.com/openshift/cloud-credential-operator/pull/1096) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c3656688274c633cc95fe7044f7c36dadf15e64a...a79c9b1ea13e880adc1398fb1dfa43a55482dfe9) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2831e27c7b76e07ce8f9516a9a35ea08482c3ffc) * [OCPBUGS-122244](https://issues.redhat.com/browse/OCPBUGS-122244): Make HostPath VolumeMounts ReadOnly for image customization container [#660](https://github.com/openshift/cluster-baremetal-operator/pull/660) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/4e98263f296f7886468df2f15f8354fb265b4d91...2831e27c7b76e07ce8f9516a9a35ea08482c3ffc) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/097842b5c1e0757e3f9b6ac56909efdc0b6e8638) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Added support to manage kube-cloud-config for vSphere in openshift-config-managed [#498](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/498) * [OCPBUGS-101897](https://issues.redhat.com/browse/OCPBUGS-101897): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#509](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/509) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e893bf67ceaaf4c0305ea821faf7cb3b98bd3efa...097842b5c1e0757e3f9b6ac56909efdc0b6e8638) ### [cluster-config-api](https://github.com/openshift/api/tree/7e4a91f5566b5a31a8a3f4f0474b5403e011c692) * [OCPBUGS-128542](https://issues.redhat.com/browse/OCPBUGS-128542): Promote Dynamic Configuration Manager to Default [#3068](https://github.com/openshift/api/pull/3068) * [OCPBUGS-122251](https://issues.redhat.com/browse/OCPBUGS-122251): Promote GCD to GA in 4.22 [#3034](https://github.com/openshift/api/pull/3034) * [Full changelog](https://github.com/openshift/api/compare/1a69e30ec990278cfe41c6a8ef632d32b92cc1db...7e4a91f5566b5a31a8a3f4f0474b5403e011c692) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/29d2f219417244d952b5a5e89165dca3b0d2b4a4) * [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Migrate vSphere sync of kube-cloud-config to 3CMO [#498](https://github.com/openshift/cluster-config-operator/pull/498) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/0127940075c2ed73517eceb59bda6c59fd08e867...29d2f219417244d952b5a5e89165dca3b0d2b4a4) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/43da660c27b3cfeb490837158cfaf3d2135d4fa2) * [OCPBUGS-89322](https://issues.redhat.com/browse/OCPBUGS-89322): cluster-restore.sh: move extra /var/lib/etcd files to backup [#1632](https://github.com/openshift/cluster-etcd-operator/pull/1632) * [OCPBUGS-101904](https://issues.redhat.com/browse/OCPBUGS-101904): Bump golang.org/x/net to v0.53.0 address CVE-2026-33814 [#1691](https://github.com/openshift/cluster-etcd-operator/pull/1691) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/0717f683acac640764b888ab7af312ad3f2c8842...43da660c27b3cfeb490837158cfaf3d2135d4fa2) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f4c871b3579e7b747b0f15beef511c4068ae478a) * [OCPBUGS-128542](https://issues.redhat.com/browse/OCPBUGS-128542): Promote Dynamic Configuration Manager to Default [#1611](https://github.com/openshift/cluster-ingress-operator/pull/1611) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/ab5f68632a64486c295c84301600f630c6693976...f4c871b3579e7b747b0f15beef511c4068ae478a) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a18571de7438badd6206ba84f40a17160f524e94) * [OCPBUGS-101906](https://issues.redhat.com/browse/OCPBUGS-101906): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#2295](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2295) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/49ef376780eb24d026bdcd882f305af4ab46e4e9...a18571de7438badd6206ba84f40a17160f524e94) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/83b412f83f54e0b53dbead58fab77a830b136e48) * [OCPBUGS-101900](https://issues.redhat.com/browse/OCPBUGS-101900): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#965](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/965) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/b0509dae420643b9432921a158b3d219da3abd03...83b412f83f54e0b53dbead58fab77a830b136e48) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/df837d2597c3415f262b33182546c1ab615bdff5) * [OCPBUGS-101905](https://issues.redhat.com/browse/OCPBUGS-101905): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#665](https://github.com/openshift/cluster-kube-scheduler-operator/pull/665) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/497c7928d45d88396c5c1e204592811427cc256b...df837d2597c3415f262b33182546c1ab615bdff5) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/e13a380d18753308d3fb35cb6fc181b94204bd06) * [OCPBUGS-128496](https://issues.redhat.com/browse/OCPBUGS-128496): Revert EgressIP validation backport [#337](https://github.com/openshift/cluster-machine-approver/pull/337) * [OCPBUGS-120752](https://issues.redhat.com/browse/OCPBUGS-120752), [OCPBUGS-127108](https://issues.redhat.com/browse/OCPBUGS-127108): Always validate EgressIPs [#317](https://github.com/openshift/cluster-machine-approver/pull/317) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa...e13a380d18753308d3fb35cb6fc181b94204bd06) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ed2e62ae9bec79f1d4a71d15126dea0e6f20b3c7) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#3112](https://github.com/openshift/cluster-monitoring-operator/pull/3112) * [OCPBUGS-127466](https://issues.redhat.com/browse/OCPBUGS-127466): fix(e2e): use Job with backoffLimit for TestDocExamples [#3103](https://github.com/openshift/cluster-monitoring-operator/pull/3103) * [OCPBUGS-126959](https://issues.redhat.com/browse/OCPBUGS-126959): restore node-exporter textfile metrics with read-only rootfs [#3095](https://github.com/openshift/cluster-monitoring-operator/pull/3095) * [OCPBUGS-111059](https://issues.redhat.com/browse/OCPBUGS-111059): chore: backport support for ogx api adoption metrics [#3058](https://github.com/openshift/cluster-monitoring-operator/pull/3058) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/0354fe76edacf5fbb2a01c9e56d1e467d8621c79...ed2e62ae9bec79f1d4a71d15126dea0e6f20b3c7) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/093a47793d1db5de8b257bcff3dfc47605980133) * [OCPBUGS-130582](https://issues.redhat.com/browse/OCPBUGS-130582): Added global overrides for OVN-Kubernetes [#3190](https://github.com/openshift/cluster-network-operator/pull/3190) * [OCPBUGS-127181](https://issues.redhat.com/browse/OCPBUGS-127181): Adds rendering of enable-multi-network-policy in ovnkube-node [#3172](https://github.com/openshift/cluster-network-operator/pull/3172) * [OCPBUGS-101929](https://issues.redhat.com/browse/OCPBUGS-101929): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#3155](https://github.com/openshift/cluster-network-operator/pull/3155) * [OCPBUGS-113532](https://issues.redhat.com/browse/OCPBUGS-113532): ovn-kubernetes: Move MNP from ConfigMap to CLI flags [#3136](https://github.com/openshift/cluster-network-operator/pull/3136) * [OCPBUGS-119956](https://issues.redhat.com/browse/OCPBUGS-119956): Allow per-node OVN encap IP override via env-overrides [#3148](https://github.com/openshift/cluster-network-operator/pull/3148) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6d4ef087a25c346e76149f5bef614387e86857cb...093a47793d1db5de8b257bcff3dfc47605980133) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d5c4a7e99b02388dec77cfaae132ff779ff08088) * [OCPBUGS-130423](https://issues.redhat.com/browse/OCPBUGS-130423): E2E: Fix no-op Get() assertions in mixedcpus [#1662](https://github.com/openshift/cluster-node-tuning-operator/pull/1662) * [OCPBUGS-129100](https://issues.redhat.com/browse/OCPBUGS-129100): E2E: PPC: replace no-op log-on-match with actual assertions (4 sites) [#1650](https://github.com/openshift/cluster-node-tuning-operator/pull/1650) * [OCPBUGS-129099](https://issues.redhat.com/browse/OCPBUGS-129099): E2E: add missing matcher to offlined CPU Expect() calls [#1649](https://github.com/openshift/cluster-node-tuning-operator/pull/1649) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ec4783d7ba0a08b9d933a20636a6e2488097ec92...d5c4a7e99b02388dec77cfaae132ff779ff08088) ### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a6cf66c48a88be9c20faca84646583dd7c61705d) * [OCPBUGS-101911](https://issues.redhat.com/browse/OCPBUGS-101911): Bump golang.org/x/net to v0.56.0 [#241](https://github.com/openshift/cluster-olm-operator/pull/241) * [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/f66065f7ae39fefe3058d72aa100d41d4327a407...a6cf66c48a88be9c20faca84646583dd7c61705d) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/29818d392a9c72a3f53fa464dd1e240e49a16047) * [OCPBUGS-101919](https://issues.redhat.com/browse/OCPBUGS-101919): Fix CVE-2026-33814 - update golang.org/x/net to v0.53.0 [#779](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/779) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/f6648e03639d2eb2c9f88bf340ac0871f1c0b26e...29818d392a9c72a3f53fa464dd1e240e49a16047) ### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/8fcea9019f04b65370b3aeb8bd8295b29c718b80) * [OCPBUGS-101925](https://issues.redhat.com/browse/OCPBUGS-101925): Bump golang.org/x/net to v0.55.0 [#198](https://github.com/openshift/cluster-policy-controller/pull/198) * [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/2e306e143051492a84c5e47a7b3126e096fdf76a...8fcea9019f04b65370b3aeb8bd8295b29c718b80) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/830c080bb8992e1b3f59b9d426dd05e562426e85) * [OCPBUGS-101917](https://issues.redhat.com/browse/OCPBUGS-101917): Bump golang.org/x/net to v0.55.0 [#1455](https://github.com/openshift/cluster-version-operator/pull/1455) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6ac86dc99c02366314381b720ab1d4a38d38f1c2...830c080bb8992e1b3f59b9d426dd05e562426e85) ### [console](https://github.com/openshift/console/tree/44abb921c5937425ea57e8f7d488d07b44a51971) * [OCPBUGS-123201](https://issues.redhat.com/browse/OCPBUGS-123201): Fix Namespace column hidden on Node Pods tab with active namespace [#17174](https://github.com/openshift/console/pull/17174) * [OCPBUGS-122042](https://issues.redhat.com/browse/OCPBUGS-122042): Strip existing OCI tag before appending new version + fix CSP violation crash [#17345](https://github.com/openshift/console/pull/17345) * [Full changelog](https://github.com/openshift/console/compare/82fd3852d347de8f31c78b3f0c9266d1e0c453a2...44abb921c5937425ea57e8f7d488d07b44a51971) ### [console-operator](https://github.com/openshift/console-operator/tree/1bcbc132acb053c53d003a747d8b6764b194e2e0) * [OCPBUGS-113612](https://issues.redhat.com/browse/OCPBUGS-113612): Handle disabled Ingress capability in HyperShift [#1214](https://github.com/openshift/console-operator/pull/1214) * [OCPBUGS-123142](https://issues.redhat.com/browse/OCPBUGS-123142): Bump Go to 1.26 and protobuf to v1.36.12 [#1242](https://github.com/openshift/console-operator/pull/1242) * [OCPBUGS-101926](https://issues.redhat.com/browse/OCPBUGS-101926): Fix CVE-2026-33814 [#1219](https://github.com/openshift/console-operator/pull/1219) * [Full changelog](https://github.com/openshift/console-operator/compare/35170581874b91514a9459766758fa0aa5da22f6...1bcbc132acb053c53d003a747d8b6764b194e2e0) ### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/5639160c0b8e785afa3eaf7cdde811c0369283a3) * [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#249](https://github.com/openshift/containernetworking-plugins/pull/249) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/db552ad333e84b99ca279a9c01ca2d918ec00c99...5639160c0b8e785afa3eaf7cdde811c0369283a3) ### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/4a6ddf89c57bbff5a7721efe96894f3520be256e) * [OCPBUGS-96666](https://issues.redhat.com/browse/OCPBUGS-96666): Bump golang.org/x/net to v0.55.0 [#416](https://github.com/openshift/cloud-provider-openstack/pull/416) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/710a2aea744fd04546d11ac781fb874694e33ad8...4a6ddf89c57bbff5a7721efe96894f3520be256e) ### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/fa0bcf1d3a3dfc4855d38fe39cef49e117ab614d) * UPSTREAM: 110: OCPBUGS-101913: Bump golang.org/x/net to v0.57.0 [#111](https://github.com/openshift/csi-external-attacher/pull/111) * [Full changelog](https://github.com/openshift/csi-external-attacher/compare/95a1979700f021e20879480b98b953bc382a0eaf...fa0bcf1d3a3dfc4855d38fe39cef49e117ab614d) ### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/494022db99e560a3aa9df3b8cb35334fcbd3d127) * [OCPBUGS-101935](https://issues.redhat.com/browse/OCPBUGS-101935): Bump golang.org/x/net to v0.53.0 [#30](https://github.com/openshift/csi-external-snapshot-metadata/pull/30) * [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/b48f04782c567b8759292085b7ad554dce013d8a...494022db99e560a3aa9df3b8cb35334fcbd3d127) ### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/c6b83544b30baa8049d6aa37e1e41f25e0ac5c61) * [OCPBUGS-101938](https://issues.redhat.com/browse/OCPBUGS-101938): UPSTREAM: 1452: Bump golang.org/x/net v0.53.0 to mitigate CVE-2026-33814 [#234](https://github.com/openshift/csi-external-snapshotter/pull/234) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/28f6e06357f2840c241b9cfe09d301516e681c87...c6b83544b30baa8049d6aa37e1e41f25e0ac5c61) ### [docker-builder](https://github.com/openshift/builder/tree/989ff30cd36cf3b857e0d1e8861f27f5aa778371) * [OCPBUGS-95539](https://issues.redhat.com/browse/OCPBUGS-95539): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#551](https://github.com/openshift/builder/pull/551) * [Full changelog](https://github.com/openshift/builder/compare/3dead2dcc98d83fb97f42d46b05c5253752e7910...989ff30cd36cf3b857e0d1e8861f27f5aa778371) ### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/df2fcb8be1b2d16eadcef4077ca2fa9101a6c067) * [OCPBUGS-128462](https://issues.redhat.com/browse/OCPBUGS-128462): Bump golang.org/x/net to v0.55.0 for CVE-2026-39821 [#171](https://github.com/openshift/cloud-provider-gcp/pull/171) * [OCPBUGS-101949](https://issues.redhat.com/browse/OCPBUGS-101949), [OCPBUGS-102055](https://issues.redhat.com/browse/OCPBUGS-102055): Bump golang.org/x/net to v0.53.0 for CVE-2026-33814 [#134](https://github.com/openshift/cloud-provider-gcp/pull/134) * [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/13ec7ad1510492854e6a0a2dc0cd57e244e3baea...df2fcb8be1b2d16eadcef4077ca2fa9101a6c067) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/ffd65b1b6e0ab987812f0fdef761ca82adfb8197) * [OCPBUGS-101954](https://issues.redhat.com/browse/OCPBUGS-101954): CVE-2026-33814: bump golang.org/x/net to v0.53.0 [#148](https://github.com/openshift/gcp-pd-csi-driver/pull/148) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/e3556b4d8912f40ae4013f6bd597edd7c9cdb59d...ffd65b1b6e0ab987812f0fdef761ca82adfb8197) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/03221b67d1fca980fc1ad0caf5f12ba66e40c6a6) * [OCPBUGS-101954](https://issues.redhat.com/browse/OCPBUGS-101954): Bump golang.org/x/net from v0.52.0 to v0.53.0 [#203](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/203) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/d9cd6ca1661bb11dfbb828815665985830e32622...03221b67d1fca980fc1ad0caf5f12ba66e40c6a6) ### [haproxy-router](https://github.com/openshift/router/tree/4160f9e04d27dc3a9419b0d2e0f873629b67cf40) * [OCPBUGS-99286](https://issues.redhat.com/browse/OCPBUGS-99286): Make external cert validation asynchronous and preserve deletion rejection [#858](https://github.com/openshift/router/pull/858) * [Full changelog](https://github.com/openshift/router/compare/b70b28c0380056950793382f42b9b2eaf9330945...4160f9e04d27dc3a9419b0d2e0f873629b67cf40) ### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9858a610ffeeca53f0ba04e92c634665c67237f5) * NO-JIRA: Rebase release-4.22 to Kubernetes v1.35.8 [#2773](https://github.com/openshift/kubernetes/pull/2773) * [Full changelog](https://github.com/openshift/kubernetes/compare/160626b4fccad02c2aacc0b30eb4d660bb9d4e66...9858a610ffeeca53f0ba04e92c634665c67237f5) ### [hypershift](https://github.com/openshift/hypershift/tree/bcb99b1b5072563b7c701abddfbed3e230157e32) * [OCPBUGS-121867](https://issues.redhat.com/browse/OCPBUGS-121867): Generate KubeVirt nmstate network config conditionally [#9978](https://github.com/openshift/hypershift/pull/9978) * [OCPBUGS-128505](https://issues.redhat.com/browse/OCPBUGS-128505): fix: mount combined-pull-secret in OpenShift API Server [#9884](https://github.com/openshift/hypershift/pull/9884) * [OCPBUGS-129020](https://issues.redhat.com/browse/OCPBUGS-129020): backport safe-to-evict annotation fix [#9876](https://github.com/openshift/hypershift/pull/9876) * [OCPBUGS-129145](https://issues.redhat.com/browse/OCPBUGS-129145): Count only successful upsert updates [#9900](https://github.com/openshift/hypershift/pull/9900) * [OCPBUGS-127060](https://issues.redhat.com/browse/OCPBUGS-127060): Replace exponential backoff with fixed-interval requeue in CRR controller [#9721](https://github.com/openshift/hypershift/pull/9721) * [CNTRLPLANE-4569](https://issues.redhat.com/browse/CNTRLPLANE-4569): add kubeClientQPS and kubeClientBurst to ClusterAutoscaling [#9886](https://github.com/openshift/hypershift/pull/9886) * [OCPBUGS-129105](https://issues.redhat.com/browse/OCPBUGS-129105): [release-4.22] OCPBUGS-127049: fix(globalps): schedule global-pull-secret-syncer on karpenter nodes [#9895](https://github.com/openshift/hypershift/pull/9895) * [OCPBUGS-95572](https://issues.redhat.com/browse/OCPBUGS-95572): CVE-2026-46597 openshift4/ose-hypershift-rhel9: golang… [#9264](https://github.com/openshift/hypershift/pull/9264) * [OCPBUGS-101951](https://issues.redhat.com/browse/OCPBUGS-101951): Fix CVE-2026-33814 by bumping golang.org/x/net to v0.53.0 [#9528](https://github.com/openshift/hypershift/pull/9528) * [OCPBUGS-119698](https://issues.redhat.com/browse/OCPBUGS-119698): Add proxy env vars to cluster-storage-operator deployment" [#9494](https://github.com/openshift/hypershift/pull/9494) * [CNTRLPLANE-4158](https://issues.redhat.com/browse/CNTRLPLANE-4158): Maintain ingress serving cert for HostedCluster ingress [#9607](https://github.com/openshift/hypershift/pull/9607) * [OCPBUGS-120746](https://issues.redhat.com/browse/OCPBUGS-120746): Move packageserver PDB from guest cluster to management cluster [#9548](https://github.com/openshift/hypershift/pull/9548) * [OCPBUGS-127173](https://issues.redhat.com/browse/OCPBUGS-127173): filter AWS-reserved tag keys before calling DeleteTags [#9733](https://github.com/openshift/hypershift/pull/9733) * [OCPBUGS-123727](https://issues.redhat.com/browse/OCPBUGS-123727): fix(azure): skip KMS validation for private Key Vaults on ARO HCP [#9624](https://github.com/openshift/hypershift/pull/9624) * [OCPBUGS-112731](https://issues.redhat.com/browse/OCPBUGS-112731): fix(certs): normalize IP SANs to stop dual-stack KAS cert churn [#9496](https://github.com/openshift/hypershift/pull/9496) * [OCPBUGS-114436](https://issues.redhat.com/browse/OCPBUGS-114436): fix(konnectivity): enable --sync-forever to restore lost agent-server tunnels [#9432](https://github.com/openshift/hypershift/pull/9432) * [ACM-46124](https://issues.redhat.com/browse/ACM-46124): improve hypershift-rhel9-operator container grade on MCE 2.12 [release-4.22] [#9740](https://github.com/openshift/hypershift/pull/9740) * [OCPBUGS-125659](https://issues.redhat.com/browse/OCPBUGS-125659): fix(cpo): preserve immutable AWS load balancer annotations [#9637](https://github.com/openshift/hypershift/pull/9637) * [OCPBUGS-120704](https://issues.redhat.com/browse/OCPBUGS-120704): [release-4.22] fix(operator): health probes + pki-operator TLS config [#9600](https://github.com/openshift/hypershift/pull/9600) * [OCPBUGS-100445](https://issues.redhat.com/browse/OCPBUGS-100445): create virt-launcher NetworkPolicy on external infra cluster [#9205](https://github.com/openshift/hypershift/pull/9205) * [OCPBUGS-114889](https://issues.redhat.com/browse/OCPBUGS-114889): hardcode ETCD_METRICS=extensive in etcd StatefulSet template [#9440](https://github.com/openshift/hypershift/pull/9440) * [Full changelog](https://github.com/openshift/hypershift/compare/7273000c23583d67eaa63db019318e5aa7381297...bcb99b1b5072563b7c701abddfbed3e230157e32) ### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/c8562135da8db1b79d6de930299eeeeb48bec6df) * [OCPBUGS-120700](https://issues.redhat.com/browse/OCPBUGS-120700): Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 [#110](https://github.com/openshift/cloud-provider-ibm/pull/110) * [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/24cff9a691e1ebee94669c834320c6ea974a2010...c8562135da8db1b79d6de930299eeeeb48bec6df) ### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/d271169293dd749eb9bf2ae7fc1f0ba2644afffa) * [OCPBUGS-101952](https://issues.redhat.com/browse/OCPBUGS-101952): Bump golang.org/x/net to v0.53.0 [#192](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/192) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/3d5956ddd2292c381309106d23fff1765380c55e...d271169293dd749eb9bf2ae7fc1f0ba2644afffa) ### [insights-operator](https://github.com/openshift/insights-operator/tree/49f3bec7ab0ffe4572c3b643ff38873ec0771b6b) * [OCPBUGS-113495](https://issues.redhat.com/browse/OCPBUGS-113495): Add multicluster gatherer [#1351](https://github.com/openshift/insights-operator/pull/1351) * [Full changelog](https://github.com/openshift/insights-operator/compare/3846c60a0e66659d0d4b1690a637ebf9c1a61927...49f3bec7ab0ffe4572c3b643ff38873ec0771b6b) ### [ironic](https://github.com/openshift/ironic-image/tree/cc7292ea2591cee804f8901b84a76b188d7d44e7) * Bug OCPBUGS-112711: Telco bugfixes sep26 [#915](https://github.com/openshift/ironic-image/pull/915) * [Full changelog](https://github.com/openshift/ironic-image/compare/c06e78b399c5b379bf083571c55ad5c9a28ce519...cc7292ea2591cee804f8901b84a76b188d7d44e7) ### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/cb54716635ad48eb41ff5e0681ea006ec6f43322) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#90](https://github.com/openshift/kubernetes-metrics-server/pull/90) * [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/38c16c4698d131ab0e2da0d4b4b76d5322a89bab...cb54716635ad48eb41ff5e0681ea006ec6f43322) ### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/0be240ab6d347785e2ebe91fd726b5da34a8e6b7) * [OCPBUGS-127951](https://issues.redhat.com/browse/OCPBUGS-127951): Bump golang.org/x/net from v0.52.0 to v0.58.0 to resolve CVE-2026-39821 (release-4.22) [#165](https://github.com/openshift/kube-rbac-proxy/pull/165) * [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/d12e274605248f6c59373240a7eae7a7a357dcb3...0be240ab6d347785e2ebe91fd726b5da34a8e6b7) ### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/3db0b68b4c99fe645c63b2966cc2d02c2c0a0764) * [OCPBUGS-127378](https://issues.redhat.com/browse/OCPBUGS-127378): backport kube-state-metrics 2.18 memory leak fix [#157](https://github.com/openshift/kube-state-metrics/pull/157) * [OCPBUGS-101958](https://issues.redhat.com/browse/OCPBUGS-101958): Bump golang.org/x/net to v0.53.0 [#168](https://github.com/openshift/kube-state-metrics/pull/168) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#187](https://github.com/openshift/kube-state-metrics/pull/187) * [Full changelog](https://github.com/openshift/kube-state-metrics/compare/0a5ea07ca01263c4273a1a929854969e11a69bea...3db0b68b4c99fe645c63b2966cc2d02c2c0a0764) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d09a7313a791e1d9458062e1619bcd41279fd560) * [OCPBUGS-130351](https://issues.redhat.com/browse/OCPBUGS-130351): fix race in VAP MachineSet e2e test cleanup [#1577](https://github.com/openshift/machine-api-operator/pull/1577) * [OCPBUGS-129423](https://issues.redhat.com/browse/OCPBUGS-129423): Reduce vCenter API load in the vSphere machine controller [#1574](https://github.com/openshift/machine-api-operator/pull/1574) * [OCPBUGS-126916](https://issues.redhat.com/browse/OCPBUGS-126916): Add opt-in kube-rbac-proxy sidecar for pprof endpoint (AWS) [#1558](https://github.com/openshift/machine-api-operator/pull/1558) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/3fdcb56b39e9bbaf7782b93ddb2ac724fd406e13...d09a7313a791e1d9458062e1619bcd41279fd560) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/92e253c13422774d42865cbfe9f637ab05bfe3d5) * [OCPBUGS-129432](https://issues.redhat.com/browse/OCPBUGS-129432): logout vCenter clients after use [#6636](https://github.com/openshift/machine-config-operator/pull/6636) * [OCPBUGS-128838](https://issues.redhat.com/browse/OCPBUGS-128838): Run nmstatectl format in nmstate-configuration [#6614](https://github.com/openshift/machine-config-operator/pull/6614) * [OCPBUGS-129268](https://issues.redhat.com/browse/OCPBUGS-129268): Boot image controller skips MachineSets that don't match any failure domain [#6627](https://github.com/openshift/machine-config-operator/pull/6627) * [OCPBUGS-129375](https://issues.redhat.com/browse/OCPBUGS-129375): Fix layered OS updates on older nodes whose host skopeo cannot process multi-architecture signatures [#6617](https://github.com/openshift/machine-config-operator/pull/6617) * [OCPBUGS-128961](https://issues.redhat.com/browse/OCPBUGS-128961): Filter cosign signature tags from the IRI release lookup [#6620](https://github.com/openshift/machine-config-operator/pull/6620) * [OCPBUGS-127016](https://issues.redhat.com/browse/OCPBUGS-127016): disable bootimages update in TC-52373 proxy test [#6600](https://github.com/openshift/machine-config-operator/pull/6600) * [OCPBUGS-128622](https://issues.redhat.com/browse/OCPBUGS-128622): Add fix TC 63866 failing in CI job [#6601](https://github.com/openshift/machine-config-operator/pull/6601) * [OCPBUGS-123173](https://issues.redhat.com/browse/OCPBUGS-123173): remove nft chains before checking the ignition config [#6541](https://github.com/openshift/machine-config-operator/pull/6541) * [OCPBUGS-119240](https://issues.redhat.com/browse/OCPBUGS-119240): drop GCD health-check ranges in openshift-gcp-routes [#6564](https://github.com/openshift/machine-config-operator/pull/6564) * [OCPBUGS-101987](https://issues.redhat.com/browse/OCPBUGS-101987): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#6503](https://github.com/openshift/machine-config-operator/pull/6503) * [OCPBUGS-127018](https://issues.redhat.com/browse/OCPBUGS-127018): Correctly handle MC deletion in image mode when no new build is required [#6567](https://github.com/openshift/machine-config-operator/pull/6567) * [OCPBUGS-127016](https://issues.redhat.com/browse/OCPBUGS-127016): Fix IsBootImageUpdateSupported to include vSphere and Azure platforms [#6565](https://github.com/openshift/machine-config-operator/pull/6565) * [OCPBUGS-125661](https://issues.redhat.com/browse/OCPBUGS-125661): Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole [#6551](https://github.com/openshift/machine-config-operator/pull/6551) * [OCPBUGS-122130](https://issues.redhat.com/browse/OCPBUGS-122130): Retry on conflict in syncMachineConfigNodes [#6521](https://github.com/openshift/machine-config-operator/pull/6521) * [OCPBUGS-126739](https://issues.redhat.com/browse/OCPBUGS-126739): improve JSON unmarshalling for secret decoding [#6561](https://github.com/openshift/machine-config-operator/pull/6561) * [OCPBUGS-126637](https://issues.redhat.com/browse/OCPBUGS-126637): Mount /etc/container in mosb [#6557](https://github.com/openshift/machine-config-operator/pull/6557) * [OCPBUGS-122239](https://issues.redhat.com/browse/OCPBUGS-122239): [TNF] Add infinite retry on untaint systemd unit [#6554](https://github.com/openshift/machine-config-operator/pull/6554) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/3750b27e33d4297c820c9d14fe068975db64be48...92e253c13422774d42865cbfe9f637ab05bfe3d5) ### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d3987ccbfd395465cb531bada3f5b4d7695ab4f0) * [OCPBUGS-101953](https://issues.redhat.com/browse/OCPBUGS-101953): Bump golang.org/x/net to v0.53.0 [#196](https://github.com/openshift/image-customization-controller/pull/196) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/a43d9c977f6332577efcd383cf173a2ff5805a4d...d3987ccbfd395465cb531bada3f5b4d7695ab4f0) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/002b01258ebd7e1b32dfecb1a48aed382d866a1e) * [OU-1392](https://issues.redhat.com/browse/OU-1392): [release-4.22] fix: parse datetime ranges from the specified format rather than browser specific apis [#1349](https://github.com/openshift/monitoring-plugin/pull/1349) * [OCPBUGS-129632](https://issues.redhat.com/browse/OCPBUGS-129632): [release-4.22] escape regex variable values in regex matcher contexts [#1340](https://github.com/openshift/monitoring-plugin/pull/1340) * [OU-1528](https://issues.redhat.com/browse/OU-1528): [release-4.22] Optimize namespace changes in Alerts [#1312](https://github.com/openshift/monitoring-plugin/pull/1312) * [OCPBUGS-118239](https://issues.redhat.com/browse/OCPBUGS-118239): Bump fast-uri to fix CVE-2026-84292 [#1329](https://github.com/openshift/monitoring-plugin/pull/1329) * NO-JIRA: [release-4.22] Sanitize alert runbook URLs [#1295](https://github.com/openshift/monitoring-plugin/pull/1295) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/676717b2dbb64ccf5e63e742143b5bd533c252d5...002b01258ebd7e1b32dfecb1a48aed382d866a1e) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/d5dc7fc724bdad569676e56a3b61aec67824da43) * [OCPBUGS-101972](https://issues.redhat.com/browse/OCPBUGS-101972): bump golang.org/x/net to v0.53.0 to fix CVE-2026-33814 [#130](https://github.com/openshift/multus-admission-controller/pull/130) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d4dd42ba9c17b04e0e5003147f4e140ea5e34749...d5dc7fc724bdad569676e56a3b61aec67824da43) ### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/1a84f03d6f770cd5294e7ceff0551379705666fa) * [OCPBUGS-101992](https://issues.redhat.com/browse/OCPBUGS-101992): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#353](https://github.com/openshift/multus-cni/pull/353) * [Full changelog](https://github.com/openshift/multus-cni/compare/42f55da4d9cb1bae11f79bfaf196f1982252a204...1a84f03d6f770cd5294e7ceff0551379705666fa) ### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/ad9a8654c91ec0ec9155f619ea4cb84c9f22e202) * [OCPBUGS-101970](https://issues.redhat.com/browse/OCPBUGS-101970): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#124](https://github.com/openshift/multus-networkpolicy/pull/124) * [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/834a093f693e521b8dc4ec7168d03cfba2c1cba1...ad9a8654c91ec0ec9155f619ea4cb84c9f22e202) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/ad6183342390eeed3621df3cfe71403011176221) * [OCPBUGS-101984](https://issues.redhat.com/browse/OCPBUGS-101984): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#422](https://github.com/openshift/whereabouts-cni/pull/422) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/bdbe534288c6bf78de2429acbf10bb41c5f0a664...ad6183342390eeed3621df3cfe71403011176221) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/1df0a0ab3a48a09269e176108c3dec39852b29b5) * maintenance: Bump the npm group with 20 updates [#596](https://github.com/openshift/networking-console-plugin/pull/596) * [OCPNETUI-147](https://issues.redhat.com/browse/OCPNETUI-147): dependency cleanup [#591](https://github.com/openshift/networking-console-plugin/pull/591) * [OCPNETUI-147](https://issues.redhat.com/browse/OCPNETUI-147): reassign dev and prod dependencies [#584](https://github.com/openshift/networking-console-plugin/pull/584) * maintenance: Bump the npm group with 24 updates [#578](https://github.com/openshift/networking-console-plugin/pull/578) * maintenance: Bump the npm group across 1 directory with 21 updates [#569](https://github.com/openshift/networking-console-plugin/pull/569) * [OCPNETUI-147](https://issues.redhat.com/browse/OCPNETUI-147): Align shared modules with Console [#564](https://github.com/openshift/networking-console-plugin/pull/564) * maintenance: Bump the npm group with 15 updates [#552](https://github.com/openshift/networking-console-plugin/pull/552) * maintenance: Bump the npm group across 1 directory with 20 updates [#535](https://github.com/openshift/networking-console-plugin/pull/535) * maintenance: Bump the npm group with 249 updates [#507](https://github.com/openshift/networking-console-plugin/pull/507) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/a05766f6d5b6f2a4ff5967cf65ed732540465216...1df0a0ab3a48a09269e176108c3dec39852b29b5) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/50d6087dd965f0eb85d54abe4a56bb663cb03aab) * [OCPBUGS-112096](https://issues.redhat.com/browse/OCPBUGS-112096): bugfix: rewrite open redirect strings to '/' [#379](https://github.com/openshift/oauth-proxy/pull/379) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/367b72380a41025060d2372269d192cffb4167de...50d6087dd965f0eb85d54abe4a56bb663cb03aab) ### [oauth-server](https://github.com/openshift/oauth-server/tree/4a7f2b64bd260b9318d837944270658b1f67574c) * [OCPBUGS-101994](https://issues.redhat.com/browse/OCPBUGS-101994): Bump golang.org/x/net to v0.53.0 [#285](https://github.com/openshift/oauth-server/pull/285) * [OCPBUGS-92015](https://issues.redhat.com/browse/OCPBUGS-92015): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#268](https://github.com/openshift/oauth-server/pull/268) * [Full changelog](https://github.com/openshift/oauth-server/compare/a2fd8b24155c4bb0e2d6e6a02e70c5818436b50c...4a7f2b64bd260b9318d837944270658b1f67574c) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/ed9ff0d96dcbd591d6634d200d1fff9219629b69) * [OCPBUGS-129169](https://issues.redhat.com/browse/OCPBUGS-129169): v1 accept catalog root entries and relative symlink targets [#1574](https://github.com/openshift/oc-mirror/pull/1574) * [Full changelog](https://github.com/openshift/oc-mirror/compare/739e1384c223aef6cbadab557301741332f96a52...ed9ff0d96dcbd591d6634d200d1fff9219629b69) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/079a76c3f53787b813a00e80e97ecb80d0e4803c) * [OCPBUGS-102001](https://issues.redhat.com/browse/OCPBUGS-102001): Bump golang.org/x/net to v0.53.0 [#461](https://github.com/openshift/openshift-controller-manager/pull/461) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/26d20feae8892f648f5b06ed3f5492fe6ffb4532...079a76c3f53787b813a00e80e97ecb80d0e4803c) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/1b05d926fc98aec3f9897488bcda59d7d7726789) * [OCPBUGS-130567](https://issues.redhat.com/browse/OCPBUGS-130567): Add pperiyasamy to OWNERS for release-4.22 [#3527](https://github.com/openshift/ovn-kubernetes/pull/3527) * [OCPBUGS-128906](https://issues.redhat.com/browse/OCPBUGS-128906): NO-JIRA: Branch Sync release-5.0 to release-4.22 [10-01-2026] [#3502](https://github.com/openshift/ovn-kubernetes/pull/3502) * NO-JIRA: Branch Sync release-5.0 to release-4.22 [09-29-2026] [#3490](https://github.com/openshift/ovn-kubernetes/pull/3490) * [OCPBUGS-128612](https://issues.redhat.com/browse/OCPBUGS-128612): Branch Sync release-5.0 to release-4.22 [09-25-2026] [#3476](https://github.com/openshift/ovn-kubernetes/pull/3476) * [OCPBUGS-128244](https://issues.redhat.com/browse/OCPBUGS-128244): Branch Sync release-5.0 to release-4.22 [09-18-2026] [#3461](https://github.com/openshift/ovn-kubernetes/pull/3461) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e2082ef4a1aaad8fa5acc7b24880394b60a4e8ae...1b05d926fc98aec3f9897488bcda59d7d7726789) ### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/eeef8613c0a17e38b7b914ce53eddf73a1c19eba) * [OCPBUGS-102007](https://issues.redhat.com/browse/OCPBUGS-102007), [OCPBUGS-107718](https://issues.redhat.com/browse/OCPBUGS-107718): Bump x/net and otel to address CVEs [#115](https://github.com/openshift/cloud-provider-powervs/pull/115) * [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/766c0952fd19f8225fe59b2be8e8c8932b24ebd7...eeef8613c0a17e38b7b914ce53eddf73a1c19eba) ### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/3d699afbbf74177ad3a12daf78df4d73b40f95ad) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#413](https://github.com/openshift/prom-label-proxy/pull/413) * [Full changelog](https://github.com/openshift/prom-label-proxy/compare/c4c99a3071808f466ee6c3d7b7fa87108b457feb...3d699afbbf74177ad3a12daf78df4d73b40f95ad) ### [prometheus](https://github.com/openshift/prometheus/tree/a553a62acc4ab907e540f1a38fa09a2e99f1231e) * [OCPBUGS-107716](https://issues.redhat.com/browse/OCPBUGS-107716): Bump go.opentelemetry.io/otel to fix CVE-2026-41178 [#396](https://github.com/openshift/prometheus/pull/396) * NO-ISSUE: synchronize OWNERS from main branch [#391](https://github.com/openshift/prometheus/pull/391) * [Full changelog](https://github.com/openshift/prometheus/compare/868b9ce717fdde35c0769c6f22f35f3787ff1274...a553a62acc4ab907e540f1a38fa09a2e99f1231e) ### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/791657ac4de86eafe44d1a97891141d9f6d56620) * NO-JIRA: synchronize OWNERS with main [#198](https://github.com/openshift/prometheus-alertmanager/pull/198) * [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/f090d1413836ce12c0a2f70f862de5787dfe59d0...791657ac4de86eafe44d1a97891141d9f6d56620) ### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/f939b7665026fff075771cde81d9272108f4d10d) * [OCPBUGS-102026](https://issues.redhat.com/browse/OCPBUGS-102026): Bump golang.org/x/net to v0.53.0 [#198](https://github.com/openshift/node_exporter/pull/198) * NO-ISSUE: synchronize OWNERS from main branch [release-4.22] [#200](https://github.com/openshift/node_exporter/pull/200) * [Full changelog](https://github.com/openshift/node_exporter/compare/6c4fc0126407c8404b8604faa2f1230f385b9f44...f939b7665026fff075771cde81d9272108f4d10d) ### [telemeter](https://github.com/openshift/telemeter/tree/9ae2c1bbfc57849aba79d689601f15d27f511ca6) * Fix OCPBUGS-107725: CVE-2026-41178 [#613](https://github.com/openshift/telemeter/pull/613) * [Full changelog](https://github.com/openshift/telemeter/compare/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4...9ae2c1bbfc57849aba79d689601f15d27f511ca6) ### [tests](https://github.com/openshift/origin/tree/ae0c9e87f68987c141ff6143ec51b640a63e64dc) * [OCPBUGS-128819](https://issues.redhat.com/browse/OCPBUGS-128819): Make operator log scraper and monitor tests topology-aware [#31695](https://github.com/openshift/origin/pull/31695) * [OCPBUGS-130852](https://issues.redhat.com/browse/OCPBUGS-130852): stage the creation of test pods to minimize etcd impact [#31738](https://github.com/openshift/origin/pull/31738) * [AGENT-1522](https://issues.redhat.com/browse/AGENT-1522): bump InternalReleaseImage to v1 [#31687](https://github.com/openshift/origin/pull/31687) * [OCPBUGS-120717](https://issues.redhat.com/browse/OCPBUGS-120717): Extend image-registry single replica exception to s390x architecture [#31422](https://github.com/openshift/origin/pull/31422) * [Full changelog](https://github.com/openshift/origin/compare/6c62ada4b9b23dfc6a0431afd40db8cec506e2ca...ae0c9e87f68987c141ff6143ec51b640a63e64dc) ### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/a67d9779a84df26ca64efbc869559d5f38650279) * [OCPBUGS-102040](https://issues.redhat.com/browse/OCPBUGS-102040): Bump golang.org/x/net to version 0.57.0 that fixes CVE-2026-33814 [#19](https://github.com/openshift/volume-data-source-validator/pull/19) * [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/8e176cec394709cac728423cbbb6c3c914be8485...a67d9779a84df26ca64efbc869559d5f38650279) ### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/a1dfb33f7f46ec5c8f1dc674d4f4dbe3f86c97b1) * [OCPBUGS-102043](https://issues.redhat.com/browse/OCPBUGS-102043): Bump golang.org/x/net to v0.53.0 in 4.22 [#131](https://github.com/openshift/cloud-provider-vsphere/pull/131) * [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/39008107b1463e3299b0d60c3ac1f7e71ad3e014...a1dfb33f7f46ec5c8f1dc674d4f4dbe3f86c97b1) ### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/d53353975f80d88fcf8f16b55359223aae66c2ec) * [OCPBUGS-102045](https://issues.redhat.com/browse/OCPBUGS-102045): Bump golang.org/x/net to v0.53.0 for CVE-2026-33814 [release-4.22] [#128](https://github.com/openshift/cluster-api-provider-vsphere/pull/128) * [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/ac542b5afbd9a3897cda34e7ea1852b61c945e36...d53353975f80d88fcf8f16b55359223aae66c2ec) ### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/ed07cd9be72a961e19840bb4149cc691be87eed3) * [OCPBUGS-105280](https://issues.redhat.com/browse/OCPBUGS-105280): Fixed GetVCenter to handle removed FDs better [#228](https://github.com/openshift/vsphere-problem-detector/pull/228) * [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/885fd8b28b91323570ed6cbaf6aa171845d4c83c...ed07cd9be72a961e19840bb4149cc691be87eed3)