Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.22.0-ec.5-x86_64

Team Approvals:

Tests:

• Informing jobs
  • aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-1of2
  • aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-2of2
  • aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview
  • aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-1of3
  • aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-2of3
  • aws-ovn-techpreview-serial-3of3 Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-3of3

    • Attempt 1 Failed
    • Attempt 2 Succeeded
  • driver-toolkit Failed (2 retries) periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-driver-toolkit

    • Attempt 1 Failed
    • Attempt 2 Failed
    • Attempt 3 Failed
  • fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.22-fips-payload-scan
  • metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv4
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv6

Upgrades from:

---

Loading changelog, this may take a while ...

Changes from 4.22.0-ec.4

Created: 2026-04-09 14:37:19 +0000 UTC

Image Digest: sha256:354270425f0cb661d5723910eb9d5ab7bd9510cdff43919c32695849bf0599f4

Components

• Kubectl 1.35.2
• Kubernetes upgraded from 1.35.2 to 1.35.3
• Kubernetes Tests upgraded from 1.34.1 to 1.35.1
• Red Hat Enterprise Linux CoreOS upgraded from 9.8.20260314-0 to 10.2.20260405-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
GCPClusterHostedDNS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HighlyAvailableArbiter (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
EventTTL (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
VSphereHostVMGroupZonal (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
NewOLMOwnSingleNamespace (0 tests)	Disabled	Disabled (Changed)	Disabled	Enabled	Disabled	Disabled (Changed)	Disabled	Enabled
ConfidentialCluster (0 tests)			Enabled (New)	Enabled (New)
VSphereMultiVCenterDay2 (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• apiserver-network-proxy git 5e33c228 sha256:8de160bf2bb52a88099f83bbfab5143fc9fd44478cf68485767278e5fb9bce1d
• aws-cluster-api-controllers git 2d7aa679 sha256:4bfaaf86a8f1eccf59f685ba78d3d76f309e0e0ad9f9999673e5194d83a4e702
• aws-ebs-csi-driver git 0927af1c sha256:fd9ee444eb8ea572919624123957937b2aaad4bc3a24a1b6a1aa46b113dae0ad
• aws-karpenter-provider-aws git f0be9c72 sha256:948b2261bcbfe77262ef8d11ccba206c692c8cf1ab1146d877ffc16dc747cd14
• aws-kms-encryption-provider git 19e7b623 sha256:50d65aa32ddd938c72b17e764b46e4799533051fcc96d7700e7973f815d11bc4
• aws-node-termination-handler git 341ed3a0 sha256:8be2a8f7042dcf0e1580c30cc96b6e5371f17d61d156bccf9dd60e062c24fc77
• aws-pod-identity-webhook git 82088287 sha256:6a4bb61a8213c6728ab1c81418043267f4e5d275d2872485e0f9be8400171d32
• azure-disk-csi-driver git 950b1622 sha256:7d35194dd5b6b9dd519f66377db2da0b2a6168abb9ad961804493fa8400e8caa
• azure-file-csi-driver git c481e92b sha256:7a9809f023c9adccda8873994fbc6ea361113bfabcf1cff45752f4204333f6b9
• azure-kms-encryption-provider git 99b9a3a3 sha256:586f41cb61251265cca96918c0f6e4c5614b16260e508687affaf0540ea35e0e
• azure-service-operator git 17e57462 sha256:e3f94397f4e8a551e7c5a0bfae1eab68ad3d7fd0fc0e85fac9abc50b94ee8f82
• baremetal-cluster-api-controllers git ad4eb8a5 sha256:7433de71f68abec4484ff77c75ca1747d6081eaf1354963852c95dbb7ce1295b
• baremetal-machine-controllers git 8d863b95 sha256:92eb05a2f0ab7355791ddf3448e667c3a8ddb70631443ba28d8ea5ffdd5787c4
• cluster-machine-approver git a9edd695 sha256:eb900d1268c40f1a274a0e12868b12b7b443db064c7d0e8ca7a66ba96b169f2b
• cluster-policy-controller git 44985a13 sha256:36138aedae6bc399c85703144e212e22ae56ad14b4236be9a3ad71ac555ffa1f
• cluster-samples-operator git eeac6ba8 sha256:13a1de24f2ce37e62b8db07ea429665e55d3cbdf8bb2d7fb7f0cbce49a57f920
• cluster-update-keys git 3b5c59cc sha256:ec7bbba49777a76c2c13158918d0178bbc703ba3d2cf832397e7e3cd02bbd841
• configmap-reloader git 94e41c4c sha256:c1d06530d5284a2d9ba39f1418b05e02bb5ebc4ad8bfbeccd1c503f7794ef2aa
• container-networking-plugins git 747ad66c sha256:5c4a1e2d0de1ed7e8f8988ed4dce7ce34d3b8216b7947225901f4f060f72a3b5
• containernetworking-plugins-microshift git 747ad66c sha256:6f51665ef5de8db99fddcaa42f3e7aad559aec9d231acd962f7f97122eb7f441
• coredns git 0dded2d2 sha256:20c9c40ecdbe27007c30502cd99a231c7e4091df1cf3783066b2387fef89eb8d
• csi-driver-manila git fd31b5da sha256:d8416d064c5b1645c8a247d53146a610e24cecb6e87ddc4e8e4f128acf2449db
• csi-driver-nfs git e9f24940 sha256:e52c7e924a1c1f4a8f25b844f3266bb73c1c8a3fb5a06d0a860b157816f84bd3
• csi-external-attacher git 98b1f4ac sha256:1f05a3f1483c81001b198ac82c7362ea3d8bed186325ea37266a921fb6f3303e
• csi-external-provisioner git f90c06a3 sha256:836e57e84658f5cc2aa66dfd1112329acedaa39e12540665afc12262646f2743
• csi-external-resizer git 4e74a4aa sha256:69620e8ccdeb7568d6db72257ee15dbbab725017600c08ffe1e411fa1f816ea2
• csi-external-snapshot-metadata git 76523185 sha256:13fb63a00fc3cc996eb0882a74f3b1c07462ef23929e93271600418d193fd7d4
• csi-external-snapshotter git d1bc3ffa sha256:539f1ce1f795e2d5773d98800a4c6bab05afd2d2064890f7f1686c80c5359cb1
• csi-livenessprobe git 4d5e959a sha256:e057ab508603d1644a354c809144edd6f129363535642bd8ec426f047f9aeeb5
• csi-node-driver-registrar git cf174b30 sha256:b040cc81924176bbfb433b0a391b7aca765f221d56f757412f1aaacfbff70a45
• csi-snapshot-controller git d1bc3ffa sha256:0d10afa7ab0d1348dbb08ac956851687c873457e009d6d76d1b4650b2afb1259
• docker-builder git 711f2e68 sha256:e8d0d01f69be7a56ca45f574c4c83bd4f5c27d988fd97beb16182afb33ac2341
• driver-toolkit git 7aa4007a sha256:c6686fcc68fbdb27d3522698d8d7296439903ac71de41ad7c3dc9574932260e9
• egress-router-cni git 5e0f8d1b sha256:94e13c2cf265083579aa3009b491ac34f68be6852b8465d3a2b9d54ab28affb9
• etcd git d8d67b8c sha256:daaf0832cde70078ba6e5dd11a290457fd5fa90c0811f8c7dc4aed9ccee4292a
• gcp-cloud-controller-manager git c87eef5d sha256:02ebc8b480e2105afb791574ca3eb107eb1c3788315df4af952665223fde769a
• gcp-cluster-api-controllers git 37085d52 sha256:f90e266ee480e8f713ab4f4f308941fa885b8e214a4bb5881f14f287f384e7d7
• gcp-pd-csi-driver git 2ba11740 sha256:64e24769bd8ef404cb7ea72ad3d53a27a77edc195613dfeb6661b6b5a5cd8263
• gcp-workload-identity-federation-webhook git d7675f31 sha256:a1a4075ed51af81578b06cf351de3a5034474602d9cb5c4bf264f2efa97d243d
• ibm-cloud-controller-manager git d9222a1c sha256:b8d605cfd81d5c724e5205719d497f3ad2f28343a4da2206c766d7d3e62c15ce
• ibm-vpc-block-csi-driver git aa40cd7e sha256:1ba298ce81fe7a6aa05c8366dcca543a0048155a09bfa2fb14a118bf0ba28969
• ibmcloud-cluster-api-controllers git 03b143d5 sha256:dfbbd366428756ecb86ef348d6d5afce000b841d35ce828fdd177bbcb3bd48c7
• ironic-agent git 0336e638 sha256:b19cf73ce3ec04971f90990d0ff378b0dba66926c45f355e36d6427f686e70d9
• ironic-machine-os-downloader git 9953d2b7 sha256:67e405f6343041e29b5aaa141639648b75a74d4ae07b5382277427b14bacb1a5
• ironic-static-ip-manager git a379d09f sha256:302431fff6ad9fe5b1e3517feeedb43b7385a9df0ad6a7b3b60f9d0d1e177b05
• keepalived-ipfailover git edb8b1e6 sha256:3e986855d5c138ee883302aeaed0faafbe4d356446dc77356771e8efffa17dae
• kube-metrics-server git 38c16c46 sha256:687dd1e2bc58167ecb37b9fa2f38362755b6c7ec82df58722234949be57f963e
• kube-rbac-proxy git d12e2746 sha256:b88f816a55928c2ae2d0986093a1b0b6e5b80fdc1311516560b82b19e8218388
• kube-state-metrics git 6fa06eac sha256:579f57a6322df00ceb054aeeaad5b88100b20e028c1c14cf288d5eea199115d3
• kube-storage-version-migrator git 72835e43 sha256:3399818c81e25da01f8b05462e7f7d601024faca933f65bee95238098fd82a15
• kubevirt-cloud-controller-manager git 76dd5a6f sha256:f905642e190386586d22347e50befe24afc8e849126ae1769d51a1bacf90e558
• metallb-frr git 5ccdd521 sha256:27ab8972e385846df678c913dcc66ab5cd778abec8d74b8d4bece31924c2bf04
• multus-admission-controller git 16ba7ef8 sha256:9b024d85d938d77f19c88eca46ca11faf3d82bbf96f41835f4bc1c3105253279
• multus-networkpolicy git 834a093f sha256:e35cb534582d9899890080afd9b87894f14088a1d06885dfa84fd11e8832b39d
• multus-route-override-cni git 08af4127 sha256:c12d8264bb9826cc0e5c27cf9249c7796ca79ec571b76932fbfd95aca855b553
• multus-whereabouts-ipam-cni git d691040e sha256:16e69d6d1f6d286135c01e6b1ea00599130bd519897d91642d90c25b4d00559d
• network-interface-bond-cni git 297eeb43 sha256:a9f0687c07c10da583a88f8e502dcf81ca00e9d59f3160e836158b501b9e47bc
• network-metrics-daemon git 5b233ea1 sha256:dfa47a77ca52cfdc74ba8948fe8d91bbe3ca522ed06c567afc1a52d1987b58f3
• networking-console-plugin git f9c8030d sha256:d1dabb53d6bdec065f245885326fbdff6ad5f34c5828e0374c9d581735839f13
• oauth-proxy git 714292f5 sha256:8f9492a816f200b7d29883cd91f3779bb841c905b127cf6c7c0d3229abc5e2fe
• oauth-server git 69bdf8bc sha256:19bdd7c384dd1fd747cff9a44b8aa9e7c180198051eb578744bd9c2d412c8ae1
• openshift-apiserver git 56aa2d96 sha256:46ffaef537361ab61d78fbb217aae8ff516912ab65713896ef6f83963109974d
• openshift-controller-manager git 26d20fea sha256:9f246590264f1c9ca3f66f892689995678e7b02b488d5a24cb2f07278dad7b29
• openshift-state-metrics git e71e0996 sha256:a15e41fbdfda8b36724386fa4937eb665642fbf1d39925be17cd4cb65c58ae7d
• openstack-cinder-csi-driver git fd31b5da sha256:dd4df471a3f248cccc1341c5549499e48d1640328b339a77abe52aed765caf3b
• openstack-cloud-controller-manager git fd31b5da sha256:155892781484d6d83d6bfd4fdb1e186700cbecbe411529336da422eac5ac643b
• openstack-cluster-api-controllers git 74cb5b08 sha256:4c76002af55cd5835802db8bd5ac20aee61ad14ed7749124f0d81eb45aca73ba
• powervs-block-csi-driver git c208095b sha256:1395b188fb84a39d42d32f1b30bb5c2c5cb1c661c5e9a46f8a73f7f9cb3e3821
• prom-label-proxy git c4c99a30 sha256:da2ee67dc762f866598b902282362e2dcdbfaebb8e68c85d30bdf06cbfe51c0b
• prometheus git e1e35591 sha256:036fcb24c3cd5b943142db1ba415fed55d1ae78a0a660d660e60514f2687af1c
• prometheus-node-exporter git 6c4fc012 sha256:d9b5e270e4ce9d4d2c67b006030c9ed3d68e737ef38e9e4f65ba65cc57c5d997
• rhel-coreos git 3d00d375 sha256:4d2946e27ef3e223407b307d05d274bd11acf90e2dd5787f89a55aad60d2c999
• rhel-coreos-10 git 3d00d375 sha256:b208f0f861d009008b43a103e64d087f6da59e480bb0292d401895e041095da7
• rhel-coreos-10-extensions git 3d00d375 sha256:34baf90f333d89690a2f99b3ab746f8a43fee99b1218a8a058f75231f7c7ab53
• rhel-coreos-extensions git 3d00d375 sha256:a9a21fa0264dcf6703697ab4da6d34eaea734a36e05567b0cff84eff67b7450d
• route-controller-manager git 624742d9 sha256:a95b77752d632c161c195b243186664db526eff34eddf4bdc61e919ad4527966
• telemeter git d6c7dd49 sha256:06fd86f5bdab657d3447f1c2b8a748c4d3b2c756820245f342bf737f059f9c17
• volume-data-source-validator git 8e176cec sha256:9ff41c5350fe2371e336a9243fbd7c43f8848801aa18c110a584e22475c3128f
• vsphere-cloud-controller-manager git 854aeeab sha256:8485f05057f2927262f8854501e98b1490bb1fe3b6dbbe3e8ab809cf7900fd0e
• vsphere-cluster-api-controllers git f12e5051 sha256:fb67cab7ddbd98ead2600b2ed6183f7698d7df688b80f6fa166f6ce645171f2c
• vsphere-csi-driver git e5c5c1ea sha256:6aee690930c8b98d2c3cff43e44b29a0ec76944a2bd9e350a84cc03aa9f865bf
• vsphere-csi-driver-syncer git e5c5c1ea sha256:b1417f7d3236e3c3755fa40a2d2dbf56378af4980b4b573fbee30f0f8b6c5503

agent-installer-api-server

• OCPBUGS-79576: Prefer multipath disk in ABI disk selection #10091
• NO-ISSUE: BMAC: replace per-step Update calls with deferred Patch #10095
• MGMT-22517: Change amd gpu operator namespace to openshift-amd-gpu #10007
• MGMT-23228: Update NFD config for AMD Instinct GPU detection #9918
• MGMT-23599: implement cluster and host validations for Kube API mode #10044
• MGMT-23253: Reconcile stuck day2 agent status by checking spoke cluster #10087
• NO-ISSUE: clarify error when interface in bond missing #10022
• MGMT-23060: Make InfraEnv CpuArchitecture immutable after creation #9999
• MGMT-23625: Remove pinned image version for nfd operator #10045
• MGMT-23231: Replace AcceleratorProfile with HardwareProfile #9919
• MGMT-23674: Remove controller-runtime dependency from api module #10071
• MGMT-23650: Disable image policy in assisted service operator deployment #10070
• MGMT-23300: Add missing permission for host reclaim pod #9934
• MGMT-22939: Fix cache key to get mustgather image #9940
• OCPBUGS-79470: Fix multi-document YAML parsing for NMStateConfig #10053
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.19, 4.21, 4.22 #10054
• AGENT-1426: Add localhost mirror only when missing in IRI patcher #10028
• MGMT-23446: TNA none platform on 4.19 (block for 4.21 and lower) #10013
• MGMT-23045: toggle metal3 integration #9933
• OCPBUGS-78989: Gate customDeploy on PreprovisioningImage having correct ISO #10032
• MGMT-23339: Add url to release image comparison for Kube API versions #10030
• MGMT-23550: Add feature usage for new CNI types #10027
• NO-ISSUE: add skipper skill #10014
• MGMT-23432: add third parties CNI support to KUBE API mode #10015
• NO-ISSUE: [master] Bump OCP versions: 4.21 #10023
• NO-ISSUE: Add Go workspace files to .gitignore #10000
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-23191: Ensure MCO configs are present before rebooting the bootstrap node #2039
• MGMT-23664: CVE-2026-33186 Bump google.golang.org/grpc to v1.79.3 through indirect dependency conversion #2058
• OCPBUGS-70213: fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2056
• Full changelog

agent-installer-node-agent

• MGMT-23517: Bump go modules #1373
• Full changelog

agent-installer-ui

• Updating assisted-installer-ui-container image to be consistent with ART for 4.22 (#3340) #3340
• chore(deps): update lodash monorepo to v4.18.1 (#3538) #3538
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775042950 (#3533) #3533
• chore(deps): update dependency eslint-plugin-react to v7.37.5 (#3476) #3476
• Bump @xmldom/xmldom from 0.8.10 to 0.8.12 (#3532) #3532
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774968108 (#3531) #3531
• Upgrade @openshift-console/dynamic-plugin/sdk (#3522) #3522
• Update translation files (#3524) #3524
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774618347 (#3519) #3519
• Add support for release branches in PR workflow (#3527) #3527
• chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.57 (#3407) #3407
• Add feature branch to pull request workflow (#3520) #3520
• NO-ISSUE: Add cursor rules (#3515) #3515
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.7-1774499506 (#3494) #3494
• fix(deps): update module github.com/sirupsen/logrus to v1.9.4 (#3441) #3441
• Revert abi abov the sea new flow (#3517) #3517
• Bump happy-dom from 20.0.2 to 20.8.9 (#3516) #3516
• chore(deps): update dependency swr to v2.4.1 (#3486) #3486
• Bump node-forge from 1.3.3 to 1.4.0 (#3513) #3513
• chore(deps): update konflux references (#3514) #3514
• Bump picomatch from 2.3.1 to 2.3.2 (#3507) #3507
• Bump brace-expansion from 1.1.11 to 1.1.13 (#3512) #3512
• add pull secret auto populate logic to ABI local UI (#3508) #3508
• chore(deps): update dependency tslib to v2.8.1 (#3487) #3487
• populate default values in local ui from infraEnv (#3502) #3502
• MGMT-23648: Removing the manifests using the toggle (#3498) #3498
• Add cursor rules for generated files (#3497) #3497
• chore(deps): update konflux references (#3472) #3472
• chore(deps): update dependency start-server-and-test to v2.1.5 (#3484) #3484
• Set customManifestsUpdated when users remove a manifest (#3482) #3482
• Red Hat Konflux update assisted-ui-chatbot-saas-main (#3478) #3478
• MGMT-23515: Use Network type support level (#3465) #3465
• Red Hat Konflux purge assisted-installer-chatbot-main (#3477) #3477
• fix(deps): update dependency @patternfly/react-core to v6.4.1 (#3438) #3438
• chore(deps): update dependency nodemon to v3.1.14 (#3435) #3435
• chore(deps): update dependency @vitejs/plugin-react-swc to v3.11.0 (#3444) #3444
• chore(deps): update dependency @openapitools/openapi-generator-cli to v2.30.2 (#3442) #3442
• chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.1.1 (#3470) #3470
• fix(deps): update dependency @patternfly/react-code-editor to v6.4.1 (#3437) #3437
• fix(deps): update dependency @patternfly/react-table to v6.4.1 (#3440) #3440
• chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.7.54 (#3406) #3406
• chore(deps): update dependency @sentry/browser to v7.120.4 (#3443) #3443
• chore(deps): update dependency eslint to v8.57.1 (#3432) #3432
• chore(deps): update dependency axios to v1.13.6 (#3431) #3431
• chore(deps): update dependency @types/node to v18.19.130 (#3429) #3429
• chore(deps): update dependency @types/lodash to v4.17.24 (#3428) #3428
• Bump ajv from 6.12.6 to 6.14.0 (#3411) #3411
• chore(deps): update dependency prettier to v2.8.8 (#3436) #3436
• chore(deps): update dependency msw to v1.3.5 (#3434) #3434
• chore(deps): update dependency eslint-config-prettier to v8.10.2 (#3433) #3433
• chore(deps): update dependency @types/react-redux to v7.1.34 (#3430) #3430
• chore(deps): update dependency @types/eslint to v8.56.12 (#3427) #3427
• chore(deps): update dependency @tsconfig/recommended to v1.0.13 (#3426) #3426
• Bump flatted from 3.3.1 to 3.4.2 (#3469) #3469
• fix validations for NTP and Proxy in above sea level ABI flow (#3464) #3464
• Add identifiers and checked state attribute to custom manifests switch (#3466) #3466
• MGMT-23516: Left navigation menu is cut off (#3463) #3463
• Full changelog

agent-installer-utils

• NO-JIRA: enable xtrace in build-ove-image.sh for debugging #281
• OCPBUGS-81585: Update operator versions #280
• NO-JIRA: Pass environment through to podman #279
• AGENT-1429: Pass OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY #278
• Full changelog

aws-cloud-controller-manager

• OCPCLOUD-3215: Add support for dual networking stack services #135
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-78291: Allow azure-disk sidecars to read VolumeAttributeClasses #525
• STOR-2762: Bump all deps for 4.22 #526
• OCPBUGS-77674: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #516
• OCPBUGS-77553: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #513
• OCPBUGS-77612: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #514
• Full changelog

aws-machine-controllers

• SPLAT-2627: Created OTE Tests for dedicated hosts #174
• SPLAT-2700: Added shared tags for BYO DH #181
• OCPCLOUD-3283: K8s 1.35 bump #179
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPCLOUD-3281: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (314ccf1) into main #155
• Full changelog

azure-cluster-api-controllers

• OCPCLOUD-3294: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.0 (ac446a1) into main #371
• Full changelog

azure-machine-controllers

• OCPCLOUD-3280: Bump k8s 1.35 #189
• Full changelog

azure-workload-identity-webhook

• CCO-785: add flag to configure TLS cipher suites #44
• Full changelog

baremetal-installer, installer

• OCPBUGS-81635: AWS: Increase cluster bootstrap timeout with userProvisioned DNS #10459
• CORS-4373: Remove checks for AzureClusterHostedDNSInstall featuregate #10455
• CORS-4316: Update the Installer GCP UPI documentation. #10235
• OCPBUGS-81309: Fix vSphere with static IPs on TPNU #10442
• OCPBUGS-79542: Mount pullsecret manifest to UI container #10411
• OCPBUGS-81470: Restart sshd after applying node-image to bootstrap #10452
• OCPBUGS-37587: Sign blob container using user delegated creds #9851
• SPLAT-2622: Bump govmomi to v0.53.0 #10431
• OCPBUGS-78935: Fix bootstrap VM on non-x86 platforms #10419
• CORS-4352: aws: validations to ensure install-config is valid for dualstack install #10380
• OCPBUGS-74528: upkeep: remove tna feature gate #10403
• NO-JIRA: Add Ella, Daniel to openstack-reviewers #10434
• CORS-4324: Update default release image to 4.22 #10429
• OCPBUGS-78589: baremetal: add serial console logging for bootstrap VM #10400
• CORS-4359: feature gate install into EU Sovereign Cloud #10412
• OCPBUGS-59514: redacted install config for baremetal #9972
• AGENT-1461: Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition #10393
• AGENT-1471: Fix race condition: wait for agent-register-infraenv before showing UI URL #10422
• MCO-2116: Generate OSImageStream manifest #10357
• AGENT-1136, AGENT-1229: Add auth to unconfigured-ignition #10381
• SPLAT-2172: AWS dedicate host support #10079
• MCO-2133: Select bootimages based on OSImageStream #10321
• CORS-4336: Support for AWS European Sovereign Cloud #10303
• OCPBUGS-74390: Allow all instance types in the install config for GCP #10271
• no-jira: fix SC2328 shellcheck errors #10413
• AGENT-1458: Don’t auto-calculate RendezvousIP in unconfigured-ignition #10405
• CORS-4358: aws: add ICMPv6 ingress rule for dual-stack clusters #10408
• Full changelog

baremetal-operator

• OCPBUGS-66071: Fix PPI for ACM #456
• OCPBUGS-64617: Merge upstream #473
• Full changelog

baremetal-runtimecfg

• OPNET-709: Migrate from iptables to nftables #387
• Full changelog

cli, cli-artifacts

• NO-ISSUE: recover the context in upgrade #2248
• NO-JIRA: claude: Turn pr-review skill into code-reviewer agent #2245
• OCPBUGS-59311: must-gather: Handle signals properly #2237
• OTA-1548: set up accepted risks #2170
• MCO-1961: Allow multiple machine-os versions #2157
• Revert “TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35”” #2241
• TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35” #2236
• TRT-2585: pkg/cli/admin/release/extract: Support zero-output extraction #2233
• OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
• OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
• NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cloud-credential-operator

• OCPBUGS-81584: Skip CCO health check test for PowerVS platform #1006
• OCPBUGS-81328: tests-ext: Fix MicroShift gating in CCO tests #1005
• Revert #978: CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating #1007
• CORS-4361: aws: add aws-eusc partition support for OIDC S3 buckets #995
• CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating #978
• OCPBUGS-79360: google.golang.org/grpc v1.79.3 #992
• CCO-788: Remove kube-rbac-proxy container from metrics #983
• Full changelog

cloud-network-config-controller

• OCPBUGS-74496: Add UserAgent to Azure SDK client telemetry options #208
• Full changelog

cluster-authentication-operator

• OCPBUGS-78403: Do not return error when an IdP returns 500 during a grant check #856
• Revert “CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework” #857
• CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework #839
• NO-JIRA: OWNERS: add everettraven as reviewer/approver add ibihim as approver #842
• CNTRLPLANE-2610: Create network policies for AUTH components #825
• CNTRLPLANE-2990: Update CAO to no longer write to the Authentication.spec.webhookTokenAuthenticator field #854
• CNTRLPLANE-2996: dependencies: k8s 1.35 rebase #853
• Full changelog

cluster-autoscaler

• NO-JIRA: ignore tool and hack files in .snyk scans #416
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-560: Add support for using centralized cluster TLS profile for webhook service #367
• OCPBUGS-78797: update rbac to include DRA-related resources #365
• Full changelog

cluster-baremetal-operator

• METAL-1715: Enforce 1-year validity and 30-day auto-rotation for Ironic TLS certs #570
• METAL-1780: Gate TLS profile enforcement on APIServer tlsAdherence field #582
• METAL-1720: Add IRONIC_ROOTFS_URL env var for multi-arch rootfs override #583
• METAL-1716: Handle IPv6/dual-stack addresses in certificate SANs #573
• NO-ISSUE: Update envtest version #580
• METAL-1720: Add DEPLOY_KERNEL env var for image-customization-controller #581
• METAL-1734: Add support for centralized tls #572
• Full changelog

cluster-bootstrap

• OCPBUGS-69694: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.22 #124
• Full changelog

cluster-capi-controllers

• NO-JIRA: IPAM CRDs: Use negated feature-gate: -ClusterAPIMachineManagement instead of feature-set: Default #273
• OCPCLOUD-3291: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.4 (8c01d2f5) into master #255
• OCPCLOUD-3320: Fix continuous reconciliation of cluster-api manifests #269
• Full changelog

cluster-capi-operator

• NO-JIRA: Fix flake in object pruning envtests #516
• OCPBUGS-80922: Add CVO proxy injection annotation to capi-operator Deployment #518
• OCPBUGS-81683: fix: remove Microsoft.Resourcehealth/healthevent permission #515
• NO-JIRA: Add ClusterAPI singleton to related objects #508
• OCPCLOUD-3365, OCPCLOUD-3384: Implement admission action Warn and ensure validations not active when not configured #492
• OCPCLOUD-3321, OSASINFRA-3980: Add openstack-resource-controller image to images.json #506
• OCPCLOUD-3319: Create installer controller #494
• NO-JIRA: Fix 2 failures in ci jobs #485
• SPLAT-2167: Added dedicated host support for AWS #374
• OCPCLOUD-3319: Convert ReconcileResult to use a builder pattern #501
• OCPCLOUD-3319: Simplify RelatedObjects on the cluster-api ClusterOperator #497
• NO-JIRA: Common provider manifest fixtures #498
• NO-JIRA: Drop unused replace manifests-gen #504
• OCPBUGS-77188: Fix CRD Requirement deployment on SNO #502
• NO-JIRA: Move ProviderMetadata into manifests-gen #503
• NO-JIRA: Fix malformed VAP #499
• NO-JIRA: Instruct agents more forcefully to run tests with make unit #496
• OCPCLOUD-3319: Bump controller-runtime to v0.23 #495
• Full changelog

cluster-cloud-controller-manager-operator

• SPLAT-2672: e2e/ote/ccm-aws: moving OTE binary from CCM-AWS #437
• OCPBUGS-78118: Add delete permission for Azure load balancers in credentials request #438
• OCPCLOUD-3287: Update to k8s 1.35.1 dependencies #439
• Full changelog

cluster-config-api

• Include candidate tier in default sippy queries for feature promotion #2789
• CNTRLPLANE-2796: promote the event-ttl feature #2722
• OCPBUGS-74533: Remove GCPClusterHostedDNSInstall featuregate #2776
• NO-ISSUE: Fixes KubeletConfig API doc, adds tests and kubebuilder validation #2651
• CORS-4365: Promote AzureClusterHostedDNSInstall to default #2774
• Add ConfidentialCluster feature gate #2779
• SPLAT-2664: Added new feature gate VSphereMultiVCenterDay2 #2783
• CNTRLPLANE-3115: Add envtest releases for 4.15 and 4.16 #2785
• CNTRLPLANE-2777: add TypeMeta to GenericControllerConfig #2780
• tools: codegen: increase sippy request timeout for feature promotion verification #2782
• MON-4036: Add TelemeterClientConfig to ClusterMonitoring API #2755
• Allow JobTier=candidate in featuregate-test-analyzer with warning #2781
• SPLAT-2320: vsphere vm-host zonal ga #2731
• NE-2512: operator/ingress: Add configurationManagement option #2757
• CORS-4337: allow AWS Europe Sovereign Cloud partition #2708
• AGENT-1473: add InternalReleaseImageDegraded state type for MachineConfigNodeStatus Conditions field #2777
• CNTRLPLANE-3010: Add API-side validation to enforce prefixPolicy is not set when username expression is used #2771
• OCPBUGS-74528: upkeep: HighlyAvailableArbiter has been GA for 2 releases #2759
• Improve feature-gated CEL validation merge semantics #2770
• OPRUN-4513: Move OLMv1 Single/Own Namespace support back to TP #2766
• Full changelog

cluster-config-operator

• OCPBUGS-74528: bump: ocp/api ocp/libray-go #475
• API-1646: Add config-operator workload and namespaces network policies #463
• OCPSTRAT-2876: Teach config operator to filter feature gate manifests by major version inclusion #459
• Full changelog

cluster-control-plane-machine-set-operator

• OCPCLOUD-3349: Honor TLS adherence, allow TLS overrides via flags #398
• OCPCLOUD-3284: Bump to k8s 1.35 and associated deps. #397
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-2762: Bump all deps for 4.22 #270
• Full changelog

cluster-dns-operator

• OCPBUGS-78085: Fix dual-stack service update by preserving IP families #467
• Full changelog

cluster-etcd-operator

• OCPBUGS-81341: fix: add correct annotations to stop update events #1580
• CNTRLPLANE-2621: Restart operator when TLS config changes #1556
• OCPBUGS-80959: fix(tnf): align Pacemaker kubelet and etcd retry pacing #1578
• CNTRLPLANE-2668: Migrating go standard etcd cases to ote #1575
• NO-JIRA: add Lance as a reviewer #1576
• OCPBUGS-78956: Disable member cache for quorum checker in TNF #1568
• OCPBUGS-65626: upgrade library-go to latest changes #1566
• OCPBUGS-78930: add tnf jobs to network policy exceptions #1574
• ETCD-557: Add e2e Network policy test cases #1543
• Full changelog

cluster-image-registry-operator

• OCPBUGS-66225: ImageConfigController: wait for ClusterVersion informe… #1316
• OCPBUGS-66225: fix degraded blip on stale config caches #1304
• OCPBUGS-66225: migrate to go 1.25 #1305
• IR-350: make metrics server tls configuration file-based #1297
• Full changelog

cluster-ingress-operator

• OCPBUGS-3917: filter non-FIPS TLS 1.3 ciphers from ROUTER_CIPHERSUITES on FIPS clusters #1401
• NE-2501: Add network policies for ingress resources #1392
• OCPBUGS-79376: Bump to OSSM 3.3.1 and Istio v1.28.5 #1406
• OCPBUGS-78541: Move TestIngressControllerCustomEndpoints to run last #1388
• OCPBUGS-79467: Change default log level from DEBUG to INFO #1402
• NE-2519: Move Sail Library to official release branch #1404
• NE-2523: Implement configurationManagement API #1385
• OCPBUGS-79667: Use feature-gate annotation for Sail Library RBAC #1393
• NE-2396: gatewayclass: Enable Horizontal Pod Autoscaling #1326
• CORS-4335: Add support for AWS European Sovereign Cloud #1360
• NE-2421: Support dual-stack IngressController on AWS #1376
• OCPBUGS-62237: Apply APIServer TLS security profile to canary daemonset #1386
• OCPBUGS-78523: gatewayapi_controller: Replace sync.Once with retry for GatewayClass field indexer setup #1382
• OCPBUGS-62627: cluster operator ingress reported Progressing=True wit… #1299
• OCPBUGS-62238: configure tls profile for router metrics #1378
• NE-2285: Bump to OSSM 3.3.0 and Istio v1.28.4 #1396
• OCPBUGS-77457: Respect proxy configuration on gwapi provisioning #1383
• NE-2471: Replace OLM-based Istio install with Sail Library #1354
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-76952: scc: fix uid{Min,Max}Range for nested-container #2053
• NO-JIRA:Fix TestBoundTokenOperatorSecretDeletion stability and monitor failures #2080
• CNTRLPLANE-2622: Restart operator when TLS config changes #2059
• CORS-4363: set bindAddress/bindNetwork for dual-stack clusters #2079
• CNTRLPLANE-2992: Update CKASO to use a default webhook authenticator secret when authentication type is not None #2074
• OCPBUGS-65626: update library-go to latest #2026
• CNTRLPLANE-2223: Migrate TestBoundTokenSignerController to ginkgo #2067
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-23366: bindata: Import configmap-csr-controller-ca.yaml from KAS-O #918
• CNTRLPLANE-2623: Restart operator when TLS config changes #915
• OCPBUGS-65626: update library-go to latest #905
• Full changelog

cluster-kube-scheduler-operator

• CNTRLPLANE-2810: Restart operator when TLS config changes #617
• OCPBUGS-65626: update library go to latest #610
• Full changelog

cluster-kube-storage-version-migrator-operator

• CNTRLPLANE-2706: add network policy e2e tests for operator and operand #151
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-monitoring-operator

• OCPBUGS-81554: CVE-2026-33186 - bump google.golang.org/grpc to v1.79.3 #2872
• NO-ISSUE: exclude hack/tools/vendor from shellcheck #2873
• NO-JIRA: [bot] Synchronize versions of the downstream components #2865
• OCPBUGS-81159: reject invalid collection profile in webhook #2860
• NO-ISSUE: [bot] Update jsonnet dependencies #2861
• MON-4481, MON-4482: set minimum TLS version for Thanos sidecars #2859
• NO-JIRA: update jsonnet dependencies #2858
• OCPBUGS-78976: configure repair policy to ‘evict’ #2856
• MON-4542: update Prometheus operator CRDS to v0.90.0 #2854
• NO-JIRA: update github.com/openshift/library-go #2852
• NO-JIRA: change ClusterRolefailed to ClusterRole failed #2853
• NO-JIRA: [bot] Synchronize versions of the downstream components #2857
• NO-JIRA: [bot] Synchronize versions of the downstream components #2851
• Full changelog

cluster-network-operator

• CORENET-6933: Update VTEPs/CUDN APIs #2952
• OCPBUGS-78974: Fix ManagementState being reset on operator restart #2942
• CORENET-6613: ClusterNetworkConnect DevPreview FG #2880
• no-jira: Update OWNERS_ALIASES to include myself + “taanyas” and “marty-power” #2908
• CORENET-6813: Add config override for allow-icmp-network-policy #2920
• CORENET-6100: Add support for no-overlay mode #2844
• CORENET-6561: CNO Rebase k8s to 1.35.0 #2887
• OCPBUGS-78731: Revert “NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating” #2938
• OCPBUGS-77015: wait for patch port to apply drop garp flows #2910
• OCPBUGS-70016: Updating cluster-network-operator-container image to be consistent with ART for 4.22 #2863
• Full changelog

cluster-node-tuning-operator

• NO-JIRA: E2E: move dra resource test to reboot tests directory #1486
• PSAP-2185: Support centralized TLS security profile configuration #1483
• CNF-18941: e2e: PP: cover ExecCPUAffinity support in tests #1432
• Full changelog

cluster-olm-operator

• OCPBUGS-77899: Wait for operator-controller resources before verifyig #181
• OPRUN-4518: Rename ClusterExtensionRevision to ClusterObjectSet #191
• NO-ISSUE: Add fgiudici as reviewer #190
• NO-ISSUE: return semver conversion errors #183
• OCPBUGS-81188: Update grpc and other dependencies #182
• OPRUN-4502: Use FratureGateNewOLMConfigAPI from openshift/api #180
• OPRUN-4502: Add feature-gate for DeploymentConfig #176
• Full changelog

cluster-openshift-apiserver-operator

• CNTRLPLANE-2619: Restart operator when TLS config changes #662
• CNTRLPLANE-2450: bump(k8s.io): 1.35.2 #669
• CNTRLPLANE-2619: make checkendpoints use apiserver config #657
• Full changelog

cluster-openshift-controller-manager-operator

• CNTRLPLANE-2620: Restart operator when TLS config changes #412
• Full changelog

cluster-storage-operator

• NO-JIRA: Add initial Agent Guide #682
• STOR-2770: Mount metrics certs of azure-disk and azure-file CSI driver operator for Hypershift #686
• STOR-2762: Bump all deps for 4.22 #684
• OCPBUGS-74232: volume-data-source-validator should run on master nodes #659
• Full changelog

cluster-version-operator

• OTA-1813: Drop a local label on alert-risk e2e #1363
• NO-ISSUE: Add CodeRabbit config with review rules from PR analysis #1360
• NO-JIRA: use scrape class which is more succinct #1365
• CNTRLPLANE-2777: feat(resource builder): allow to inject tls configuration into annotated config maps #1322
• OTA-1813: Populate risks from alerts #1329
• OCPBUGS-78997: Do not discard ListOptions in waitForPodCompletion. #1361
• OCPBUGS-65621: add dedicated service account to crb, cvo and version pod #1266
• NO-JIRA: Add test migration guide for openshift-tests-private to CVO #1336
• NO-JIRA: Try not to block by informing #1356
• OCPSTRAT-2876: Allow inclusion/exclusion of manifests based on the OCP major version #1282
• Full changelog

console

• OCPBUGS-81506: Add missing i18n translations for Pagination component #16233
• CNV-62016: add description to ResourceQuota page title #16086
• OCPBUGS-80989: Skip to fetch resource if model not found and load the other resources in list-page #16230
• CONSOLE-5110: Assorted fixes and improvements #16250
• OCPBUGS-79355: Fix and enable OLM Package E2E tests disabled during the public/ directory useK8sWatchResource refactoring #16220
• OCPBUGS-74156: Prevent pod log search from shifting page layout #16223
• Revert “OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching” #16218
• OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #16013
• CONSOLE-5151: Replace showdown with marked #16239
• CONSOLE-5094: cypress test improvements #16046
• OCPBUGS-81331: Storage > VolumeSnapshots and VAC throws error #16219
• CONSOLE-4447: Additional modals switched to use ModalFooterWithAlerts for consistency #16171
• OCPBUGS-80939: Add robots.txt policy to console #16205
• OCPBUGS-79315: fix analyze.sh/react-icons treeshake #16188
• CONSOLE-5015: Remove drag-and-drop from TextColumnField #16204
• CONSOLE-5065: Update list of PatternFly packages that support dynamic modules #16182
• NO-ISSUE: frontend/packages/console-dynamic-plugin-sdk/README: 4.22 doesn’t support PatternFly 5 #16206
• OCPBUGS-62700: Fix VolumeSnapshot table sorting #16200
• OCPBUGS-79581: Fix Deprecated Operator Warnings E2E tests Skipped in the Firehose Public Folder PR #16197
• OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching #16193
• OCPBUGS-79678: Align the search input so that its next to the select menu toggle #16198
• OCPBUGS-78584: Preserve query params in CatalogRedirect #16165
• OCPBUGS-79525: Fix null reference error in subscription action menu #16196
• OCPBUGS-72526: Impersonating user loads extra pages that user not authorized to view #16088
• OCPBUGS-79000: Fix perspective switcher icon suspending the whole app #16183
• CONSOLE-5015: Refactor pinned nav to react-drag-drop #16146
• CONSOLE-5031: Remove Firehose Component and Fix and Cleanup Impacted Types #16096
• CONSOLE-4983: Add Groups to node details #15981
• NO-JIRA: prep for 4.22.0-prerelease.2 SDK publish #16201
• OCPBUGS-74140: Prevent Chinese characters from rendering as unicode escape sequences in alert messages #16156
• OCPBUGS-77814: Add E2E tests for VolumeAttributesClass UI #16085
• CONSOLE-5073: Update redux-related packages to latest #16087
• OCPBUGS-78543: Hide filter category selector when only one filter exists #16153
• CONSOLE-5015: Replace react-dnd with PF MultipleFileUpload in topology #16179
• CONSOLE-5134: Update to Go 1.25, K8s 1.35, and Helm 3.20 #16147
• CONSOLE-5135: add deprecation warning for react-router-dom #16178
• OCPBUGS-79462: Skip flaky Data Grid operator E2E tests #16191
• CONSOLE-5027: Refactor public/ Directory Components to useK8sWatchResource(s) #15954
• OCPBUGS-63391: Replace DataViewTextFilter with existing custom TextFilter #16151
• OCPBUGS-73803: Fix incorrect OLMv1 documentation URL #16052
• OCPBUGS-74346: Fix useOperatorCatalogCategories hook. #16093
• OCPBUGS-78534: Make E2E test create helper idempotent and improve test cleanup #16148
• OCPBUGS-66147: Make folder field optional for vsphere #16142
• OCPBUGS-77912: Fix TypeError in OLS code import to console #16119
• OCPBUGS-44612: Remove useUserPreferenceCompatibility and withUserPreferenceCompatibility #16076
• CONSOLE-5073: Bump i18next to latest #16150
• CONSOLE-4447: Update SecretFormWrapper modal to use ModalFooterWithAlerts #16167
• RFE-7965: add basic auth support for helm repositories #15624
• CONSOLE-5094: Add pesudo CSP violation detection to Cypress #16048
• NO-JIRA: Update demo plugin README #16166
• CONSOLE-5093: Remove support for deprecated extensions #16043
• CONSOLE-4447: Remove deprecated modal components and CSS #16126
• And 11 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• CONSOLE-5138: Enable readOnlyRootFilesystem for console and download pod #1123
• OCPBUGS-78477: Bump API to support ExternalOIDCWithUpstreamParity new API fields #1125
• OCPBUGS-63502: Redeploy console pods upon cert rotation #1093
• OCPBUGS-65622: add controller for downloads service account deletion logic #1111
• Full changelog

deployer, tools

• NO-ISSUE: recover the context in upgrade #2248
• NO-JIRA: claude: Turn pr-review skill into code-reviewer agent #2245
• OCPBUGS-59311: must-gather: Handle signals properly #2237
• OTA-1548: set up accepted risks #2170
• MCO-1961: Allow multiple machine-os versions #2157
• Revert “TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35”” #2241
• TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35” #2236
• TRT-2585: pkg/cli/admin/release/extract: Support zero-output extraction #2233
• OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
• OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
• NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
• NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
• CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
• NO-JIRA:Fixing manifest ci failure #2228
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

docker-registry

• CNTRLPLANE-3073: bump kubernetes to v1.35 #467
• Full changelog

gcp-machine-controllers

• OCPBUGS-81576: Bump gRPC-Go package for CVE fix #155
• OCPCLOUD-3279: Rebase to Kube 1.35 for Machine API Provider GCP #145
• Full changelog

gcp-pd-csi-driver-operator

• STOR-2762: Bump all deps for 4.22 #175
• Full changelog

haproxy-router

• NE-2332: Add support for TLS curves in HAProxy configuration #755
• TRT-2597: Revert “NE-2333: Add support for configurable SSL curves in HAProxy configuration” #754
• NE-2333: Add support for configurable SSL curves in HAProxy configuration #678
• OCPBUGS-77773: fix backend server health check if DCM is enabled #747
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-78990: Bump 1.35.3 to master #2633
• OCPBUGS-78986: UPSTREAM: 137926: KEP-961: demote maxUnavailable feature in statefulset to off by default #2632
• NO-JIRA: UPSTREAM: <carry>: Register OpenShift cloud providers in k8s-tests-ext #2635
• OCPBUGS-78504: unflake HPAConfigurableTolerance test #2631
• UPSTREAM: <carry>: OCPBUGS-39360: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters #2603
• Full changelog

hypershift

• OCPBUGS-74960: prevent resource leak on deletion and handle DependencyViolation #7868
• NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override #8155
• CNTRLPLANE-3042: Parallelize make verify targets for faster local development #8051
• NO-JIRA: ci: fix codecov ignore patterns for docs and nested files #8156
• OCPBUGS-81270: fix(external-dns): mitigate Azure DNS API throttling #8098
• NO-JIRA: ci: ignore non-Go files in codecov coverage analysis #8154
• OCPBUGS-67240: Ignition generalize image download errors #7673
• NO-JIRA: fix(Makefile): auto-detect upstream remote for lint #8152
• OCPBUGS-79539: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8072
• AUTOSCALE-582: wire CRD sync and CEL adjustments into karpenter-api target #8119
• CNTRLPLANE-3111: docs: add service publishing strategies reference documentation #8107
• NO-JIRA: ci: make docs deploy preview non-blocking #8145
• Revert “CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics” #8141
• NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check #8128
• OCPBUGS-50003: add ConfigMap fallback and EC2 error caching for vCPU metrics resolution #6723
• CNTRLPLANE-2172: feat(azure): add private endpoint access topology for self-managed HostedClusters #7821
• CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics #7790
• CNTRLPLANE-2797: hypershift-operator webhooks port 9443 respect cluster TLS security profile #8078
• OCPBUGS-50603: Create dedicated identity for KAS bootstrap container #6827
• Revert “NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout” #8138
• NO-JIRA: ci: improve CI efficiency and codecov configuration #8113
• NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test #8131
• OCPBUGS-81162: fix(cpo): skip router LB services for ARO HCP #8087
• NO-JIRA: ci: enable paths filter on envtest workflows #8125
• NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout #8124
• NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop #8127
• NO-JIRA: chore(docs-agg): remove document count from aggregated file #8126
• NO-JIRA: ci: separate envtest from unit tests in CI workflow #8120
• OCPBUGS-80926: consolidate disaster-recovery prerequisites into dedicated page #8080
• CNTRLPLANE-3116: fix(ci): drop pip cache from docs-preview workflow #8116
• NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity #8117
• OCPBUGS-78763: fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time #7981
• CNTRLPLANE-3037: Introduce envtest for integration tests alternative #8089
• CNTRLPLANE-3116: ci(docs): migrate docs-preview job to GitHub Actions #8109
• CNTRLPLANE-244: fix(ci): configure Codecov PR comments and add unit tests #8085
• NO-JIRA: chore(deps): weekly dependabot consolidation #8077
• OCPBUGS-78931: add KubeVirt-specific backup settings #8022
• OCPBUGS-81284: fix(release): allow multiple machine-os component versions #8101
• NO-JIRA: fix(aws): load credentials from –aws-creds file using SDK v2 #8095
• NO-JIRA: chore(ci): update hypershift-ci-2 manifests #8062
• CNTRLPLANE-2678: Adapt etcd-backup command and add HO namespace manifests #8040
• CNTRLPLANE-2551: Hypershift integration for API Auth Config changes #7774
• GCP-447: inject token-minter as native sidecar init container #7965
• AUTOSCALE-538, AUTOSCALE-539: Add Autonode status node counts + enabled condition to HostedCluster API #7794
• CNTRLPLANE-244: ci: add Codecov integration to unit test workflow #8060
• CNTRLPLANE-3050: Pre-build lint tools and fix Konflux pipeline triggers #8052
• CNTRLPLANE-2838: feat(CPO): add metrics-proxy control plane component #7752
• CNTRLPLANE-2787: Introduce BASE_DOMAIN env var for E2E test configuration #7930
• CNTRLPLANE-2786: Extend controller architecture diagram with consumes relationship #8029
• IR-350: add tls security profile configuration for the image registry operator #8011
• AUTOSCALE-571: fix(karpenter): don’t associate public IP addresses for the default OpenshiftEC2NodeClass #7853
• NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP < 4.21 in backup/restore tests #8067
• CNTRLPLANE-2076: remove v2 import aliases left from SDK migration #8063
• AUTOSCALE-559: PrivateLink plumbing for karpenter ec2nodeclass subnets #7791
• STOR-2770: Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller #7970
• CNTRLPLANE-2678: Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup #8010
• NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure #8074
• CNTRLPLANE-2172: feat(api): add Azure private endpoint access and PrivateLinkService CRD #8055
• OCPSTRAT-2831: chore(owners): add cblecker to core-reviewers and core-approvers #8018
• OCPBUGS-79428: Add recipe for ACM/MCE HyperShift Operator overrides #8057
• CNTRLPLANE-2076: complete SDK v1 removal and post-migration cleanup #8038
• CNTRLPLANE-2049: update GCP validation error expectations in TestOnCreateAPIUX #8037
• CNTRLPLANE-3046: feat(ci): add monitoring and alerting for ARC runners #8044
• CNTRLPLANE-3049: split verify checks into individual GitHub Actions workflows #8049
• OCPBUGS-79352: fix(oapi): force WatchList feature gate to disabled for openshift-apiserver #8035
• OCPBUGS-79071: Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections #8030
• CNTRLPLANE-3041: Override ARO/HCP 4.20 CPO with Azure Pod Identity backport #8025
• CNTRLPLANE-3054: Apply init task 0.3 migration to fix broken Konflux pipelines #8053
• OCPBUGS-70301: force-remove karpenter finalizer when guest KAS is down #7939
• CNTRLPLANE-3047: fix(ci): use community fork token for checkout credential helper #8050
• CNTRLPLANE-2788: validate memory quantity in KubeVirt nodepool create #7884
• NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions #8048
• CNTRLPLANE-3048: refactor gh-actions-runner pipelines and improve CEL triggers #8045
• OCPBUGS-79369: Add Konflux archived PipelineRun skill and update task discovery #8043
• CNTRLPLANE-3047: add workflow to sync hypershift-community fork #8042
• NO-JIRA: chore(claude): add restructure-commits plugin command #7927
• CNTRLPLANE-2986: feat(ci): Add self-hosted GitHub Actions runners for HyperShift #7980
• NO-JIRA: fix(ci): pass –upgrade-versions to konflux task update skill #8036
• CNTRLPLANE-2998: Migrate SQS to AWS SDK v2 #8015
• NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection #7971
• OCPBUGS-78996: fix(test): create SQS queue dynamically in spot termination handler e2e test #8007
• CNTRLPLANE-2049: fix(api): audit and improve GCP API validation rules #8003
• CNTRLPLANE-2081: Migrate RAM and ARN to AWS SDK v2 #7986
• OCPBUGS-78778: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001
• And 6 elided commits (e.g. from squash or rebase merges)
• Full changelog

ibm-vpc-block-csi-driver-operator

• STOR-2762: Bump all deps for 4.22 #168
• Full changelog

ibmcloud-machine-controllers

• OCPCLOUD-3278: Rebase to Kube 1.35 for Machine API Provider IBM #83
• OCPBUGS-77729: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #80
• NO-JIRA: Modernize test infrastructure to align with other MAPI providers #82
• Full changelog

insights-operator

• CCXDEV-15964: fetch TLS profiles from API server #1257
• CCXDEV-15963: kubeletconfig gatherer #1247
• NO-JIRA: generate gatherer docs #1256
• CCXDEV-16094: add config option to disable runtime extractor #1248
• CCXDEV-16006: add permission for opentelemetrycollectors #1252
• OCPBUGS-78115: Fix string accessor error #1253
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• Update OWNERS to remove ‘tremes’ #67
• Full changelog

installer-artifacts

• OCPBUGS-81635: AWS: Increase cluster bootstrap timeout with userProvisioned DNS #10459
• CORS-4373: Remove checks for AzureClusterHostedDNSInstall featuregate #10455
• CORS-4316: Update the Installer GCP UPI documentation. #10235
• OCPBUGS-81309: Fix vSphere with static IPs on TPNU #10442
• OCPBUGS-79542: Mount pullsecret manifest to UI container #10411
• OCPBUGS-81470: Restart sshd after applying node-image to bootstrap #10452
• OCPBUGS-37587: Sign blob container using user delegated creds #9851
• SPLAT-2622: Bump govmomi to v0.53.0 #10431
• OCPBUGS-78935: Fix bootstrap VM on non-x86 platforms #10419
• CORS-4352: aws: validations to ensure install-config is valid for dualstack install #10380
• OCPBUGS-74528: upkeep: remove tna feature gate #10403
• NO-JIRA: Add Ella, Daniel to openstack-reviewers #10434
• CORS-4324: Update default release image to 4.22 #10429
• OCPBUGS-78589: baremetal: add serial console logging for bootstrap VM #10400
• CORS-4359: feature gate install into EU Sovereign Cloud #10412
• OCPBUGS-59514: redacted install config for baremetal #9972
• AGENT-1461: Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition #10393
• AGENT-1471: Fix race condition: wait for agent-register-infraenv before showing UI URL #10422
• MCO-2116: Generate OSImageStream manifest #10357
• AGENT-1136, AGENT-1229: Add auth to unconfigured-ignition #10381
• SPLAT-2172: AWS dedicate host support #10079
• MCO-2133: Select bootimages based on OSImageStream #10321
• CORS-4336: Support for AWS European Sovereign Cloud #10303
• OCPBUGS-74390: Allow all instance types in the install config for GCP #10271
• no-jira: fix SC2328 shellcheck errors #10413
• Full changelog

ironic

• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #818
• METAL-1758: Merge upstream 2026 03 16 #814
• METAL-1735: Add TLS cipher suite and curves related options to ironic for centralized tls support #810
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #816
• METAL-1771: Remove heredoc syntax for hermetic builds compatibility #815
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #812
• OCPBUGS-77528: Fix interface detection when MAC/IP matches multiple interfaces #807
• METAL-1726: Multi-stage wheel-builder for OCP builds #786
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #808
• Full changelog

kubevirt-csi-driver

• CNV-82343: Add annotation-based fallback for infra VM node ID resolution (#170) #80
• Full changelog

machine-api-operator

• MON-4497: metrics: migrate Prometheus SD from Endpoints to EndpointSlices #1457
• SPLAT-2680: Changed DHA to require hostAffinity=host #1484
• OCPCLOUD-3282, OCPCLOUD-3288: Bump to k8s 1.35 dependencies #1474
• NO-JIRA: fix flaky TestReconcile/machine_with_node_likely_to_go_unhealthy#1483 #1483
• Full changelog

machine-config-operator

• OCPBUGS-68336: When adding new nodes, MCD executes commands after setting the nodes’ state as Done #5832
• AGENT-1416: Add default NodeDisruptionPolicy for IRI #5683
• NO-ISSUE: Fix order of cleanup to further avoid race #5826
• MCO-2183: migrated configdrift, kubeletconfig, containerruntimeconfig… #5818
• OCPBUGS-78154: Use HA leader election defaults for MCO on SNO #5764
• OCPBUGS-78498: Update skew error message with doc links #5825
• MCO-2168: Deleting a PinnedImageSet does not affect images pinned by another PinnedImageSet #5786
• NO-ISSUE: In extended tests, disable Skew when disabling the bootimag… #5811
• MCO-2171: Move long running boot image tests to MCO’s disruptive suites #5808
• NO-ISSUE: Fix MCN Applied condition checks for TP and non-TP clusters #5796
• OCPBUGS-80970: MCS fallback to latest v3 #5816
• AGENT-1366: Report InternalReleaseImageController errors in IRI status #5803
• OCPBUGS-62619: Add etcd size limit validation for rendered MachineConfigs #5729
• MCO-2155: Add stream detection to some more boot image tests #5799
• MCO-2167: Migrate alert test cases from the private repository #5781
• OCPBUGS-78500: Skew enforcement should dynamically handle baremetal clusters #5768
• OCPBUGS-79088: OCPBUGS-79357: Skip boot image updates until cluster is stable #5789
• OCPBUGS-79361: Update AMI Whitelist #5788
• NO-ISSUE: Update AMI collection script for installer changes #5790
• OCPBUGS-75200: set default-timeout-stop to 200s globally #5782
• MCO-2155: Add stream detection to boot image tests #5784
• NO-ISSUE: Revert “extract oc binary from base OS image after build” #5785
• OCPBUGS-66104: Fine tune CoreDNS pod configuration to improve performance #5695
• MCO-2117: Allow default OSImageStream overrides #5714
• OCPBUGS-78595: Fix log substring matching for disruptive test suite jobs #5769
• OCPBUGS-74223: Re-order logger setting to eliminate race condition #5691
• MCO-2146: do not use OSImageStream in Hypershift #5750
• NO-ISSUE: always build golangci-lint from vendor #5772
• OCPNODE-3201: Default Enablement of system-reserved-compressible in OpenShift #5408
• OCPNODE-3880: Add criocredentialproviderconfig event handler #5487
• OCPNODE-4074: Add additional storage configuration support for CRI-O #5666
• NO-ISSUE: Increase timeout + interval for OCL test cleanup #5732
• MCO-2151: Add stream detection to the boot image controller #5752
• NO-ISSUE: Allow setting kubeletconfig log level to zero #5757
• OCPBUGS-57473: extract oc binary instead of pulling OS image #5313
• OCPBUGS-78107: Disable sandboxed-containers in arm64 10 #5754
• Full changelog

machine-image-customization-controller

• METAL-1720: Add kernel file support for multi-architecture PXE boot #170
• Full changelog

machine-os-images

• METAL-1729: Add dual CoreOS version support for RHCOS 9 and 10 #81
• Full changelog

monitoring-plugin

• NO-JIRA: automation testing fix on podImage #868
• NO-JIRA: exclude @xfail tests from CI incident commands #865
• OBSINTA-1002: consolidate COO 1.4.0 test case documentation #793
• NO-JIRA: podImage fix automation testing to remove extra click #864
• OBSINTA-993: Tests for incident detection coo 1.4.0 changes #857
• OCPBUGS-77113: feat: re enable dev console views #831
• NO-JIRA: Incident Detection Tests Stabilization #854
• NO-JIRA: switch to core platform page before test case run #837
• Full changelog

multus-cni, multus-cni-microshift

• CORENET-6886: downstream sync to kube 1.35 and go to 1.25 #281
• OKD-322: Update Dockerfile to work on CentOS/RHEL 10 #275
• Full changelog

must-gather

• no-jira: build(make): default podman flags for ART DNF wrapper #535
• no-jira: docs: add proposal for e2e #526
• RFE-8344: Add Node Feature Discovery Operator collection script #508
• Full changelog

nutanix-cloud-controller-manager

• OCPCLOUD-3272: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (9c374cb) into main #54
• Full changelog

nutanix-machine-controllers

• OCPCLOUD-3277: Bump k8s 1.35 #134
• Full changelog

oauth-apiserver

• CNTRLPLANE-2989: feat: add external-oidc subcommand to oauth-apiserver #181
• CNTRLPLANE-2260: cmd: wire up OTE ginkgo suite for tokenreviews #163
• Full changelog

oc-mirror

• CLID-547: v2: add list releases command #1373
• CLID-540: v2: add list operators command #1370
• NO-JIRA: Group dependabot updates by package origin #1336
• no-jira: lint: Remove golangci-lint v1 config. #1374
• OCPBUGS-77146: Remove status field from CatalogSource, ClusterCatalog… #1369
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #693
• OCPQE-31553: Test empty affinity erasure and cleanup #689
• NO-ISSUE: Synchronize From Upstream Repositories #692
• OPRUN-4518: Remove skip for incompatible operator check after rename of CER #690
• OCPBUGS-60693, OCPBUGS-60958: Synchronize From Upstream Repositories #691
• OPRUN-4426: add ocp-87557 #635
• OCPQE-31553: update preflight permission case #686
• NO-ISSUE: Add fgiudici as reviewer #681
• OCPBUGS-78211, OCPBUGS-78455: Synchronize From Upstream Repositories #682
• NO-ISSUE: Add long-duration test script and documents #664
• OCPBUGS-81194: Update grpc in default-catalog-consistency tests #679
• OCPBUGS-78092, OCPBUGS-78311: Synchronize From Upstream Repositories #677
• OPRUN-4063: verify volume/volumeMount override #678
• OCPBUGS-78999: Update quay-operator bundle version in OTE to fix missing arch #673
• OCPQE-31636: enhance QE cases #666
• OCPBUGS-76380: Synchronize From Upstream Repositories #676
• OPRUN-4228: Add boxcutter tests #672
• OPRUN-4468: Add OTE tests for OLMv1 DeploymentConfig support #662
• OCPBUGS-78787: Synchronize from upstream #670
• OCPBUGS-65634: UPSTREAM: <carry>: add service account to curl job #653
• OPRUN-4063: deployment config cases #654
• OCPQE-31265: update OCP-75441 to support multi-arch #668
• OPRUN-4509: Synchronize From Upstream Repositories #669
• Full changelog

openstack-machine-api-provider

• OCPBUGS-77724: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #161
• Full changelog

openstack-resource-controller

• OCPCLOUD-3321, OSASINFRA-3980: Update to image-based manifests #30
• NO-JIRA: Update OWNERS_ALIASES #28
• OCPBUGS-77719: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #26
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1274
• NO-ISSUE: Add pedjak and fgiudici as reviewers #1271
• NO-ISSUE: Synchronize From Upstream Repositories #1268
• : NO-ISSUE: Migrate away from deprecated ioutil #1160
• OCPBUGS-79397: Fix SA restore resourceVersion conflict error #1264
• OCPBUGS-77179: Synchronize From Upstream Repositories #1260
• NO-ISSUE: remove etcd dependency from failing cases #1241
• OCPQE-31468: verify images command log pollution #1262
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/operator-framework/api from 0.41.0 to 0.42.0 #738
• NO-ISSUE: Add fgiudici as reviewer #739
• NO-ISSUE: Bump the k8s-dependencies group with 3 updates #737
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-77510: DownStream Merge [03-24-2026] #3084
• OCPBUGS-77819: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 #3036
• OCPBUGS-77795: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 #3039
• NO-JIRA: DownStream Merge [02-27-2026] #3011
• Full changelog

powervs-block-csi-driver-operator

• STOR-2762: Bump all deps for 4.22 #104
• Full changelog

powervs-cloud-controller-manager

• No-Jira: Update go.opentelemetry.io/otel and google.golang.org/grpc #94
• Full changelog

powervs-machine-controllers

• OCPCLOUD-3271: Update dependencies for OpenShift 4.22 release #140
• NO-JIRA: Add damdo to approvers list in OWNERS file #141
• OCPBUGS-77745: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #139
• Full changelog

prometheus-alertmanager

• NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.31.1 #127
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.90.1 #378
• MON-4542: bump v0.90.0 #377
• Full changelog

service-ca-operator

• NO-JIRA: migrate from go-bindata to embed #326
• NO-JIRA: OWNERS: remove vrutkovs and add sanchezl #318
• NO-JIRA:Update e2e test owners #339
• NO-JIRA: Add CLAUDE.md #333
• CNTRLPLANE-3038: test/e2e: migrate validatingwebhook-ca-bundle-injection to OTE serial suite #336
• CNTRLPLANE-3035: test/e2e: migrate mutatingwebhook-ca-bundle-injection to OTE serial suite #335
• CNTRLPLANE-3034: test/e2e: migrate crd-ca-bundle-injection to OTE serial suite #334
• CNTRLPLANE-3033: test/e2e: migrate apiservice-ca-bundle-injection to OTE serial suite #332
• Full changelog

tests

• NE-2529: add new dcm e2e tests #30926
• OCPBUGS-81629: Skip NoRegistryClusterInstall feature tests if InternalReleaseImage resource was not present #30955
• NO-JIRA: feat: update etcd/certrotation suite to disruptive #30947
• OCPCLOUD-3215: test/ccm: add support for verifying NLB health check configuration #30952
• NE-2520: Enable Gateway API tests on vSphere and baremetal #30946
• SPLAT-2672: e2e/ote/ccm-aws: moving binary to cccmo #30864
• OCPNODE-3725: Add System compressible test #30935
• OCPCLOUD-3215: Detect IPv6 clusters and apply correct policy #30938
• OCPNODE-4179: Migrating test case OCP-80983 from openshift-tests-private to origin #30899
• OCPSTRAT-886: Support dual-stack LB in service disruption monitor #30936
• OCPBUGS-78978: Workaround packet sniffer timeouts in BGP tests #30912
• OTA-1813: Allow for alerts to fire from an e2e test #30929
• AGENT-1428: Add e2e extended tests for NoRegistryClusterInstall #30941
• SPLAT-2627: Added MAPA OTE entry #30808
• OCPSTRAT-2728: Rebase 1.35 #30866
• OCPNODE-4043: Add DRA e2e tests to run on NVIDIA GPU #30758
• NE-2422: Skip Gateway API tests on dual-stack clusters #30942
• NE-2131: register CIO tests extension and remove tests migrated to CIO #30911
• MCO-2171: remove MCO bootimage tests from origin #30933
• OCPBUGS-78617: Fix PinnedImages test should respect node taints #30913
• NO-ISSUE: Make MCN degrade test stable across TechPreview and non-TechPreview #30943
• TRT-2573: Show non-blocking failure message in JUnit failure output #30921
• NE-2422: Add dual-stack ingress e2e tests for AWSDualStackInstall featuregate #30904
• OCPNODE-4031: Add criocredentialprovider tests #30821
• OCPNODE-3720: Test for AutoNodeSizing #30789
• NE-2422: Fix router e2e tests for dual-stack AWS clusters #30934
• STOR-2505: Add storage binaries check #30698
• OCPBUGS-78940: Treat groups as existent if they were found but discovery is stale #30923
• NO-JIRA: Reverting case OOM score adjustment #30932
• OCPEDGE-2447: IsMicroShiftCluster: return error instead of calling Skip from container node #30914
• NE-2501: Allow prometheus test pods to access Ingress Operator metrics port #30928
• NO-JIRA: remove extra character #30920
• OCPEDGE-2447: increase precondition cluster health timeout to 10m #30893
• OCPNODE-3751: Add automated tests for kubelet LimitedSwap drop-in configuration for CNV #30795
• MCO-2155: add osstream exclusion for mco bootimage tests #30918
• TRT-2539: Fix output capture in ginkgo RunSpec to capture stdout/stderr #30769
• NE-2498: add new DCM e2e tests #30741
• NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m #30917
• TRT-2506: Add OS version info to ClusterData #30827
• NE-2292: Tests for gatewayAPIWithoutOLM featuregate graduation #30905
• OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30867
• NO-JIRA: remove test exception for Insights operator #30849
• NE-2292: Skip OLM tests when GatewayAPIWithoutOLM enabled #30896
• NO-JIRA: Remove TNF node replacement test #30901
• OCPBUGS-78384: changed http to https for three places to reduce test false positives and false negatives #30872
• CNTRLPLANE-2999: Revert PR #30746: TLS 1.3 test causing instability in 4.22 #30895
• NO-JIRA: Add a singleton instance for list of nodes #30830
• OCPNODE-3932: Add automated tests for non-CNV swap configuration #30807
• OCPBUGS-78016: Fix double counting of pod restart events #30862
• CNTRLPLANE-2449: test(sig-builds][Feature:Builds]): ignore watchapi.Bookmark as they are synthetic and used only for signaling sync completion #30885
• OCPBUGS-77281: Add exception for GCE CSI driver images #30870
• OCPBUGS-77002: Remove temporarily skip of MCO tests creating custom MCPs in RHEL10 suites #30845
• CNTRLPLANE-2549: monitortests: treat Thanos collection failure as flake in disruptive suites #30877
• OCPBUGS-76334: Add TLS 1.3 (Modern profile) support to TestTLSDefaults #30746
• OCPNODE-4093: Update readme to include long running test information #30791
• OCPBUGS-48186: Add kubelet and CRI-O panic detection invariant test #30243
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

thanos

• OCPBUGS-81494: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation #179
• Full changelog

vsphere-csi-driver-operator

• STOR-2762: Bump all deps for 4.22 #334
• Full changelog

vsphere-problem-detector

• STOR-2762: Bump all deps for 4.22 #214
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.35.1-4.rhaos4.22.gitf998e4a.el10
• kernel-6.12.0-211.7.1.el10_2
• openshift-kubelet-4.22.0-202604010134.p2.g9193b12.assembly.stream.el10
• systemd-257-23.el10

Full list (481 packages)

• NetworkManager-1:1.56.0-1.el10
• NetworkManager-cloud-setup-1:1.56.0-1.el10
• NetworkManager-libnm-1:1.56.0-1.el10
• NetworkManager-ovs-1:1.56.0-1.el10
• NetworkManager-tui-1:1.56.0-1.el10
• WALinuxAgent-udev-2.14.0.1-3.el10
• aardvark-dns-2:1.17.0-1.el10
• acl-2.3.2-4.el10
• afterburn-5.10.0-1.el10
• afterburn-dracut-5.10.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20260130-22.el10
• amd-ucode-firmware-20260130-22.el10
• attr-2.5.2-5.el10
• audit-4.0.3-5.el10
• audit-libs-4.0.3-5.el10
• audit-rules-4.0.3-5.el10
• authselect-1.5.2-1.el10
• authselect-libs-1.5.2-1.el10
• avahi-libs-0.9~rc2-2.el10
• azure-vm-utils-0.7.0-1.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-15.el10_2.1
• bind-license-32:9.18.33-15.el10_2.1
• bind-utils-32:9.18.33-15.el10_2.1
• bootc-1.13.0-1.el10
• bootupd-0.2.32-1.el10
• bsdtar-3.7.7-5.el10_1
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.34.6-1.el10
• ca-certificates-2025.2.80_v9.0.305-102.el10_1
• catatonit-5:0.2.1-1.el10
• checkpolicy-3.10-1.el10
• chrony-4.8-2.el10
• cifs-utils-7.5-1.el10
• clevis-21-9.el10
• clevis-dracut-21-9.el10
• clevis-luks-21-9.el10
• clevis-pin-tpm2-0.5.3-9.el10
• clevis-systemd-21-9.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.2.1-2.el10
• conmon-rs-0.6.6-0.rhaos4.18.el10.1
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.246.0-1.el10
• containers-common-6:5.8-2.el10
• containers-common-extra-6:5.8-2.el10
• coreos-installer-0.26.0-1.el10_2
• coreos-installer-bootinfra-0.26.0-1.el10_2
• coreutils-9.5-7.el10
• coreutils-common-9.5-7.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.35.1-4.rhaos4.22.gitf998e4a.el10
• cri-tools-1.35.0-2.el10
• criu-4.2-1.el10
• criu-libs-4.2-1.el10
• crun-1.26-1.el10
• crypto-policies-20260216-1.git0e54016.el10
• crypto-policies-scripts-20260216-1.git0e54016.el10
• cryptsetup-2.8.1-2.el10
• cryptsetup-libs-2.8.1-2.el10
• curl-8.12.1-4.el10
• cyrus-sasl-gssapi-2.1.28-29.el10
• cyrus-sasl-lib-2.1.28-29.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.210-2.el10
• device-mapper-event-10:1.02.210-2.el10
• device-mapper-event-libs-10:1.02.210-2.el10
• device-mapper-libs-10:1.02.210-2.el10
• device-mapper-multipath-0.9.9-18.el10
• device-mapper-multipath-libs-0.9.9-18.el10
• device-mapper-persistent-data-1.3.0-1.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-5.el10
• dnf-4.20.0-21.el10
• dnf-data-4.20.0-21.el10
• dnsmasq-2.90-5.el10
• dosfstools-4.2-12.el10
• dracut-107-4.el10
• dracut-network-107-4.el10
• dracut-squash-107-4.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-5.el10
• e2fsprogs-libs-1.47.1-5.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-default-yama-scope-0.194-2.el10_2
• elfutils-libelf-0.194-2.el10_2
• elfutils-libs-0.194-2.el10_2
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-2.el10
• expat-2.7.3-1.el10
• fcoe-utils-1.0.34-11.gitb233050.el10
• file-5.45-9.el10
• file-libs-5.45-9.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.4.0-1.el10_1
• flatpak-session-helper-1.16.0-9.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-2.0.19-4.1.el10_2
• gawk-5.3.0-6.el10
• gdbm-1:1.23-12.el10_0
• gdbm-libs-1:1.23-12.el10_0
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.52.0-1.el10
• glib2-2.80.4-12.el10
• glibc-2.39-113.el10
• glibc-common-2.39-113.el10
• glibc-gconv-extra-2.39-113.el10
• glibc-minimal-langpack-2.39-113.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-4.el10_1
• gnutls-3.8.10-3.el10_1
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• grub2-common-1:2.12-46.el10_2
• grub2-efi-x64-1:2.12-46.el10_2
• grub2-pc-1:2.12-46.el10_2
• grub2-pc-modules-1:2.12-46.el10_2
• grub2-tools-1:2.12-46.el10_2
• grub2-tools-minimal-1:2.12-46.el10_2
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.8.el10
• ignition-2.26.0-2.el10_2
• ignition-grub-2.26.0-2.el10_2
• ima-evm-utils-1.6.2-4.el10
• info-7.1-6.el10
• inih-58-3.el10
• intel-gpu-firmware-20260130-22.el10
• ipcalc-1.0.3-12.el10
• iproute-6.17.0-2.el10
• iproute-tc-6.17.0-2.el10
• iptables-libs-1.8.11-12.el10_1
• iptables-nft-1.8.11-12.el10_1
• iputils-20240905-5.el10
• irqbalance-2:1.9.4-6.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.58-15.el10
• kernel-6.12.0-211.7.1.el10_2
• kernel-core-6.12.0-211.7.1.el10_2
• kernel-modules-6.12.0-211.7.1.el10_2
• kernel-modules-core-6.12.0-211.7.1.el10_2
• kernel-modules-extra-6.12.0-211.7.1.el10_2
• kexec-tools-2.0.32-3.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-13.el10
• kmod-libs-31-13.el10
• kpartx-0.9.9-18.el10
• krb5-libs-1.21.3-8.el10_0
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-5.el10_1
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-18.el10
• libbpf-2:1.7.0-1.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-5.el10
• libcomps-0.1.21-3.el10
• libconfig-1.7.3-10.el10
• libcurl-minimal-8.12.1-4.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-14.el10
• libdnf-plugin-subscription-manager-1.30.12-1.el10
• libdrm-2.4.128-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-15.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-18.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-4.4.el10
• libgcrypt-1.11.0-5.el10
• libgomp-14.3.1-4.4.el10
• libgpg-error-1.50-2.el10
• libibverbs-61.0-1.el10
• libicu-74.2-5.el10_0
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.12.0-1.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.23.5-105.el10
• libluksmeta-10-1.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-18.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-5.el10_2
• libnftnl-1.3.0-3.el10
• libnghttp2-1.68.0-3.el10_2.1
• libnl3-3.11.0-1.el10
• libnvme-1.16.1-3.el10_2
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.19.0-1.el10
• librhsm-0.0.3-16.el10
• libseccomp-2.5.6-1.el10
• libselinux-3.10-1.el10
• libselinux-utils-3.10-1.el10
• libsemanage-3.10-1.el10
• libsepol-3.10-1.el10
• libsmartcols-2.40.2-18.el10
• libsmbclient-4.23.5-105.el10
• libsolv-0.7.33-2.el10
• libss-1.47.1-5.el10
• libsss_certmap-2.12.0-1.el10
• libsss_idmap-2.12.0-1.el10
• libsss_nss_idmap-2.12.0-1.el10
• libsss_sudo-2.12.0-1.el10
• libstdc++-14.3.1-4.4.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.14-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.29-3.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-18.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.23.5-105.el10
• libxcrypt-4.4.36-10.el10
• libxml2-2.12.5-10.el10
• libxmlb-0.3.24-1.el10
• libxslt-1.1.39-8.el10_0
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20260130-22.el10
• linux-firmware-whence-20260130-22.el10
• lldpad-1.1.1-4.gitf1dd9eb.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-5.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-10-1.el10
• lvm2-10:2.03.36-2.el10
• lvm2-libs-10:2.03.36-2.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.8-1.el10
• mdadm-4.4-3.el10
• microcode_ctl-4:20260210-1.el10
• mokutil-2:0.7.2-4.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-8.el10
• nano-8.1-3.el10
• ncurses-base-6.4-15.20240127.el10_1
• ncurses-libs-6.4-15.20240127.el10_1
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.17.2-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-5.el10_2
• nftables-1:1.1.5-3.el10
• nmap-ncat-4:7.92-5.el10
• nmstate-2.2.58-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-6.el10
• numactl-libs-2.0.19-3.el10
• numad-0.5-50.20251104git.el10
• nvidia-gpu-firmware-20260130-22.el10
• nvme-cli-2.16-2.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.10-1.el10
• openldap-2.6.10-1.el10
• openshift-clients-4.22.0-202604022100.p2.g075cd27.assembly.stream.el10
• openshift-kubelet-4.22.0-202604010134.p2.g9193b12.assembly.stream.el10
• openssh-9.9p1-22.el10_2
• openssh-clients-9.9p1-22.el10_2
• openssh-server-9.9p1-22.el10_2
• openssl-1:3.5.5-1.el10
• openssl-fips-provider-3.0.7-8.el10
• openssl-fips-provider-so-3.0.7-8.el10
• openssl-libs-1:3.5.5-1.el10
• openvswitch-selinux-extra-policy-1.0-39.el10fdp
• openvswitch3.5-3.5.2-63.el10fdp
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.22.0-202603272150.p2.ge73d6a3.assembly.stream.el10
• ose-azure-acr-image-credential-provider-4.22.0-202603191400.p2.g4c7a764.assembly.stream.el10
• ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el10
• ose-gcp-gcr-image-credential-provider-4.22.0-202603041118.p2.gc87eef5.assembly.stream.el10
• ostree-2025.7-1.el10
• ostree-grub2-2025.7-1.el10
• ostree-libs-2025.7-1.el10
• p11-kit-0.26.2-1.el10
• p11-kit-trust-0.26.2-1.el10
• pam-1.6.1-9.el10
• pam-libs-1.6.1-9.el10
• passt-0^20251210.gd04c480-3.el10
• passt-selinux-0^20251210.gd04c480-3.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:5.8.0-2.el10
• podman-sequoia-0.4.0~pqc.2-1.el10
• policycoreutils-3.10-1.el10
• policycoreutils-python-utils-3.10-1.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-11.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python3-3.12.12-5.el10_2
• python3-audit-4.0.3-5.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.12-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10_0
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-21.el10
• python3-dnf-plugin-versionlock-4.7.0-10.el10
• python3-dnf-plugins-core-4.7.0-10.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-14.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-14.el10
• python3-librepo-1.19.0-1.el10
• python3-libs-3.12.12-5.el10_2
• python3-libselinux-3.10-1.el10
• python3-libsemanage-3.10-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.10-1.el10
• python3-requests-2.32.4-1.el10_0
• python3-rpm-4.19.1.1-23.el10
• python3-setools-4.6.0-3.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.12-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10_1.1
• qemu-guest-agent-18:10.1.0-16.el10_2
• quota-1:4.09-10.el10
• quota-nls-1:4.09-10.el10
• rdma-core-61.0-1.el10
• readline-8.2-11.el10
• redhat-release-10.2-16.el10
• redhat-release-eula-10.2-16.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-23.el10
• rpm-build-libs-4.19.1.1-23.el10
• rpm-libs-4.19.1.1-23.el10
• rpm-ostree-2026.1-2.el10
• rpm-ostree-libs-2026.1-2.el10
• rpm-plugin-selinux-4.19.1.1-23.el10
• rpm-sequoia-1.10.1.1-2.el10
• rpm-sign-libs-4.19.1.1-23.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.23.5-105.el10
• samba-common-4.23.5-105.el10
• samba-common-libs-4.23.5-105.el10
• sed-4.9-5.el10
• selinux-policy-42.1.18-4.el10_2
• selinux-policy-targeted-42.1.18-4.el10_2
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-11.el10
• shadow-utils-subid-2:4.15.0-11.el10
• shared-mime-info-2.3-8.el10
• shim-x64-16.1-4.el10
• skopeo-2:1.22.0-2.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-5.el10_1
• ssh-key-dir-0.1.4-9.el10
• sssd-2.12.0-1.el10
• sssd-ad-2.12.0-1.el10
• sssd-client-2.12.0-1.el10
• sssd-common-2.12.0-1.el10
• sssd-common-pac-2.12.0-1.el10
• sssd-ipa-2.12.0-1.el10
• sssd-krb5-2.12.0-1.el10
• sssd-krb5-common-2.12.0-1.el10
• sssd-ldap-2.12.0-1.el10
• sssd-nfs-idmap-2.12.0-1.el10
• sssd-proxy-2.12.0-1.el10
• stalld-1.26.3-1.el10
• strace-6.12-3.el10
• subscription-manager-1.30.12-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.17-2.p2.el10
• systemd-257-23.el10
• systemd-journal-remote-257-23.el10
• systemd-libs-257-23.el10
• systemd-pam-257-23.el10
• systemd-udev-257-23.el10
• tar-2:1.35-11.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.3-1.el10
• tpm2-tools-5.7-5.el10
• tpm2-tss-4.1.3-6.el10
• tpm2-tss-fapi-4.1.3-6.el10
• tzdata-2026a-1.el10
• unbound-anchor-1.24.2-7.el10
• unbound-libs-1.24.2-7.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-18.el10
• util-linux-core-2.40.2-18.el10
• vim-data-2:9.1.083-9.el10_2.1
• vim-minimal-2:9.1.083-9.el10_2.1
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.16.0-1.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10_0
• xz-libs-1:5.6.2-4.el10_0
• zlib-ng-compat-2.2.3-3.el10_1
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• bind-libs 32:9.18.33-15.el10 → 32:9.18.33-15.el10_2.1
• bind-license 32:9.18.33-15.el10 → 32:9.18.33-15.el10_2.1
• bind-utils 32:9.18.33-15.el10 → 32:9.18.33-15.el10_2.1
• coreos-installer 0.25.0-1.el10 → 0.26.0-1.el10_2
• coreos-installer-bootinfra 0.25.0-1.el10 → 0.26.0-1.el10_2
• grub2-common 1:2.12-44.el10_2 → 1:2.12-46.el10_2
• grub2-efi-x64 1:2.12-44.el10_2 → 1:2.12-46.el10_2
• grub2-pc 1:2.12-44.el10_2 → 1:2.12-46.el10_2
• grub2-pc-modules 1:2.12-44.el10_2 → 1:2.12-46.el10_2
• grub2-tools 1:2.12-44.el10_2 → 1:2.12-46.el10_2
• grub2-tools-minimal 1:2.12-44.el10_2 → 1:2.12-46.el10_2
• ignition 2.25.1-1.el10 → 2.26.0-2.el10_2
• ignition-grub 2.25.1-1.el10 → 2.26.0-2.el10_2
• kernel 6.12.0-211.2.1.el10_2 → 6.12.0-211.7.1.el10_2
• kernel-core 6.12.0-211.2.1.el10_2 → 6.12.0-211.7.1.el10_2
• kernel-modules 6.12.0-211.2.1.el10_2 → 6.12.0-211.7.1.el10_2
• kernel-modules-core 6.12.0-211.2.1.el10_2 → 6.12.0-211.7.1.el10_2
• kernel-modules-extra 6.12.0-211.2.1.el10_2 → 6.12.0-211.7.1.el10_2
• krb5-libs 1.21.3-9.el10_1 → 1.21.3-8.el10_0
• libnghttp2 1.68.0-3.el10 → 1.68.0-3.el10_2.1
• libnvme 1.16.1-2.el10 → 1.16.1-3.el10_2
• ncurses-base 6.4-14.20240127.el10 → 6.4-15.20240127.el10_1
• ncurses-libs 6.4-14.20240127.el10 → 6.4-15.20240127.el10_1
• openshift-clients 4.22.0-202603181651.p2.gee23f05.assembly.stream.el10 → 4.22.0-202604022100.p2.g075cd27.assembly.stream.el10
• openshift-kubelet 4.22.0-202603190352.p2.g92d1d98.assembly.stream.el10 → 4.22.0-202604010134.p2.g9193b12.assembly.stream.el10
• openssh 9.9p1-20.el10_2 → 9.9p1-22.el10_2
• openssh-clients 9.9p1-20.el10_2 → 9.9p1-22.el10_2
• openssh-server 9.9p1-20.el10_2 → 9.9p1-22.el10_2
• ose-aws-ecr-image-credential-provider 4.22.0-202603170247.p2.g24a5524.assembly.stream.el10 → 4.22.0-202603272150.p2.ge73d6a3.assembly.stream.el10
• ose-azure-acr-image-credential-provider 4.22.0-202602261640.p2.g8584b9a.assembly.stream.el10 → 4.22.0-202603191400.p2.g4c7a764.assembly.stream.el10
• qemu-guest-agent 18:10.1.0-13.el10 → 18:10.1.0-16.el10_2
• rsync 3.4.1-3.el10 → 3.4.1-2.el10
• tzdata 2025c-1.el10 → 2026a-1.el10
• vim-data 2:9.1.083-8.el10 → 2:9.1.083-9.el10_2.1
• vim-minimal 2:9.1.083-8.el10 → 2:9.1.083-9.el10_2.1

Extensions

Full list (153 packages)

• NetworkManager-libreswan-1.2.30-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-12.el9_8.x86_64
• corosync-3.1.10-1.el9.x86_64
• corosynclib-3.1.10-1.el9.x86_64
• cpp-11.5.0-14.el9.x86_64
• daxctl-libs-82-1.el9.x86_64
• edk2-ovmf-20241117-8.el9.noarch
• elfutils-libelf-devel-0.194-1.el9.x86_64
• fence-agents-all-4.10.0-110.el9.x86_64
• fence-agents-amt-ws-4.10.0-110.el9.noarch
• fence-agents-apc-4.10.0-110.el9.noarch
• fence-agents-apc-snmp-4.10.0-110.el9.noarch
• fence-agents-bladecenter-4.10.0-110.el9.noarch
• fence-agents-brocade-4.10.0-110.el9.noarch
• fence-agents-cisco-mds-4.10.0-110.el9.noarch
• fence-agents-cisco-ucs-4.10.0-110.el9.noarch
• fence-agents-common-4.10.0-110.el9.noarch
• fence-agents-drac5-4.10.0-110.el9.noarch
• fence-agents-eaton-snmp-4.10.0-110.el9.noarch
• fence-agents-emerson-4.10.0-110.el9.noarch
• fence-agents-eps-4.10.0-110.el9.noarch
• fence-agents-heuristics-ping-4.10.0-110.el9.noarch
• fence-agents-hpblade-4.10.0-110.el9.noarch
• fence-agents-ibmblade-4.10.0-110.el9.noarch
• fence-agents-ifmib-4.10.0-110.el9.noarch
• fence-agents-ilo-moonshot-4.10.0-110.el9.noarch
• fence-agents-ilo-mp-4.10.0-110.el9.noarch
• fence-agents-ilo-ssh-4.10.0-110.el9.noarch
• fence-agents-ilo2-4.10.0-110.el9.noarch
• fence-agents-intelmodular-4.10.0-110.el9.noarch
• fence-agents-ipdu-4.10.0-110.el9.noarch
• fence-agents-ipmilan-4.10.0-110.el9.noarch
• fence-agents-kdump-4.10.0-110.el9.x86_64
• fence-agents-mpath-4.10.0-110.el9.noarch
• fence-agents-redfish-4.10.0-110.el9.x86_64
• fence-agents-rhevm-4.10.0-110.el9.noarch
• fence-agents-rsa-4.10.0-110.el9.noarch
• fence-agents-rsb-4.10.0-110.el9.noarch
• fence-agents-sbd-4.10.0-110.el9.noarch
• fence-agents-scsi-4.10.0-110.el9.noarch
• fence-agents-vmware-rest-4.10.0-110.el9.noarch
• fence-agents-vmware-soap-4.10.0-110.el9.noarch
• fence-agents-wti-4.10.0-110.el9.noarch
• fence-virt-4.10.0-110.el9.x86_64
• flex-2.6.4-9.el9.x86_64
• gcc-11.5.0-14.el9.x86_64
• glibc-devel-2.34-266.el9_8.x86_64
• glibc-headers-2.34-266.el9_8.x86_64
• gnutls-dane-3.8.10-3.el9.x86_64
• gnutls-utils-3.8.10-3.el9.x86_64
• ipmitool-1.8.18-27.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9.noarch
• kata-containers-3.21.0-5.rhaos4.20.el9.x86_64
• kernel-5.14.0-687.5.1.el9_8.x86_64
• kernel-core-5.14.0-687.5.1.el9_8.x86_64
• kernel-devel-5.14.0-687.5.1.el9_8.x86_64
• kernel-headers-5.14.0-687.5.1.el9_8.x86_64
• kernel-modules-5.14.0-687.5.1.el9_8.x86_64
• kernel-modules-extra-5.14.0-687.5.1.el9_8.x86_64
• kernel-rt-core-5.14.0-687.5.1.el9_8.x86_64
• kernel-rt-devel-5.14.0-687.5.1.el9_8.x86_64
• kernel-rt-modules-5.14.0-687.5.1.el9_8.x86_64
• kernel-rt-modules-core-5.14.0-687.5.1.el9_8.x86_64
• kernel-rt-modules-extra-5.14.0-687.5.1.el9_8.x86_64
• krb5-pkinit-1.21.1-9.el9_8.x86_64
• krb5-workstation-1.21.1-9.el9_8.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-9.el9_8.x86_64
• libknet1-1.28-1.el9.x86_64
• libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
• libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
• libknet1-compress-plugins-all-1.28-1.el9.x86_64
• libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
• libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
• libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
• libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
• libknet1-crypto-plugins-all-1.28-1.el9.x86_64
• libknet1-plugins-all-1.28-1.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libnozzle1-1.28-1.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-15.el9_8.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-61.0-2.el9.x86_64
• libreswan-5.2-1.el9fdp.x86_64
• libwsman1-2.8.1-2.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-82-1.el9.x86_64
• net-snmp-libs-1:5.9.1-21.el9.x86_64
• net-snmp-utils-1:5.9.1-21.el9.x86_64
• nspr-4.36.0-8.el9_4.x86_64
• nss-3.112.0-8.el9_4.x86_64
• nss-softokn-3.112.0-8.el9_4.x86_64
• nss-softokn-freebl-3.112.0-8.el9_4.x86_64
• nss-sysinit-3.112.0-8.el9_4.x86_64
• nss-tools-3.112.0-8.el9_4.x86_64
• nss-util-3.112.0-8.el9_4.x86_64
• openssl-devel-1:3.5.5-1.el9.x86_64
• openvswitch3.5-ipsec-3.5.2-72.el9fdp.x86_64
• openwsman-python3-2.8.1-2.el9.x86_64
• pacemaker-2.1.10-2.el9.x86_64
• pacemaker-cli-2.1.10-2.el9.x86_64
• pacemaker-cluster-libs-2.1.10-2.el9.x86_64
• pacemaker-libs-2.1.10-2.el9.x86_64
• pacemaker-schemas-2.1.10-2.el9.noarch
• pcp-conf-6.3.7-8.el9_8.x86_64
• pcp-libs-6.3.7-8.el9_8.x86_64
• pcs-0.11.11-2.el9.x86_64
• perl-TimeDate-1:2.33-6.el9.noarch
• pixman-0.40.0-6.el9.x86_64
• protobuf-3.14.0-17.el9.x86_64
• python3-cffi-1.14.5-5.el9.x86_64
• python3-cryptography-36.0.1-5.el9.x86_64
• python3-lxml-4.6.5-3.el9.x86_64
• python3-openvswitch3.5-3.5.2-72.el9fdp.x86_64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.x86_64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.x86_64
• qemu-img-17:10.1.0-17.el9_8.x86_64
• qemu-kvm-common-17:10.1.0-17.el9_8.x86_64
• qemu-kvm-core-17:10.1.0-17.el9_8.x86_64
• redhat-logos-90.6-1.el9.x86_64
• resource-agents-4.10.0-108.el9_8.3.x86_64
• ruby-3.0.7-165.el9_5.x86_64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.x86_64
• rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.x86_64
• rubygem-json-2.5.1-165.el9_5.x86_64
• rubygem-psych-3.3.2-165.el9_5.x86_64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.x86_64
• seabios-bin-1.16.3-5.el9.noarch
• seavgabios-bin-1.16.3-5.el9.noarch
• sysstat-12.5.4-11.el9.x86_64
• telnet-1:0.17-85.el9.x86_64
• usbguard-1.1.4-2.el9.x86_64
• usbguard-selinux-1.1.4-2.el9.noarch
• virtiofsd-1.13.3-1.el9.x86_64
• zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 10.2.20260405-0