4.12.76

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.76-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-nightly-4.12-upgrade-from-stable-4.11-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.59, 4.12.6, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.7, 4.12.70, 4.12.71, 4.12.72, 4.12.8, 4.12.9

Upgrades to:

4.13.0-0.nightly-2025-05-03-000837 (changes) - S S F S S
4.13.0-0.nightly-2025-05-02-154123 (changes) - F S F F F S
4.13.0-0.ci-2025-05-02-224504 (changes) - F S F F F F S
4.13.0-0.ci-2025-05-02-164504 (changes) - S F S
4.13.0-0.ci-2025-05-02-055909 (changes) - S S F F F F
4.13.0-0.ci-2025-05-01-231523 (changes) - F S S S

Loading changelog, this may take a while ...

Changes from 4.12.58

Created: 2025-05-01 13:59:35 +0000 UTC

Image Digest: sha256:07dfb0210dbe48ec222a9ffcad4bcf1e5b7e5e32140f911e753fe90dcfd4cd12

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202405210920-0 to 412.86.202504240545-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:74dc6c8bdbae98a3be7206377b299f931f62f32b4792a00b1dae4433e166e665
alibaba-cloud-csi-driver git 4d3b1125 sha256:5eb6ae905d3203f0dac30e3e9c51205b20c55059e15333cbe85e7bdcd540cd29
alibaba-disk-csi-driver-operator git 99bcda8d sha256:51f5a9813bbf7e3a095635c158d35b97cb8a0a5225bd6365cda82c5e560b4ce7
alibaba-machine-controllers git b9287c05 sha256:c5c6436a304955608e2382c636ccfee91df4c17a17138dafcba7131ec7e7a4a3
aws-cluster-api-controllers git 16156acc sha256:fdd3e6202bb383238f8cb779c603bd2499097cd5b3e8afa167c7df2ed379ef3a
aws-ebs-csi-driver git bbab20f9 sha256:347741e5975be4d0744ca6dae490266f06673794c65a423de86bf970b40bc166
aws-ebs-csi-driver-operator git 71bb7838 sha256:02f9a92c0322e6c0a012a36f64437b39bb8c12725102898471affe3afaebcce3
aws-machine-controllers git 440886d0 sha256:c6cbbfbff900b714cea51f3e5c861d499c576e2ef5c32390c1a6419e11181e66
aws-pod-identity-webhook git 31917a5f sha256:ab3103ae4298881d4fa51c8adea9f08c490dd37f36e2c1bd1b5167d70267ff96
azure-cloud-controller-manager git 2193ccfa sha256:f9587ba8b422232e58b37e0a8a20d33042fdf64b1f8146e7e01e532255cc70e0
azure-cloud-node-manager git 2193ccfa sha256:3a639c59f0a47d8450bf612860f4e8ffa499af311273fd092f62940f323c1cd6
azure-disk-csi-driver git a930c89b sha256:8266e1eefdd7b0fb38a63f6dc6454d082382fb15abb8e070b4ab155b3daa248b
azure-disk-csi-driver-operator git 988b8cc8 sha256:9e6e1badd9131a469375ce6edaa43ca2e0f1248a8ddae86cca3833e7d05f9298
azure-file-csi-driver git 15aade4d sha256:856512de601132c696fb6e32560b86465eb4b81c20728df5e8f7f476772e4224
azure-file-csi-driver-operator git 060ba825 sha256:642ac87486d308cf209a250c02dfa76916c714ae6b0b652c9ac91804ef5d51c2
baremetal-runtimecfg git 474ed48e sha256:b0b9ec94f3865d068b763a2c4410342ae7246aee6ec44c4006e963e660d8ff33
cli git d6912573 sha256:327c8e1b7d8d83dce487f18b0ea13b7fbf628300a7bc8331818dc2eee2aa683e
cli-artifacts git d6912573 sha256:ff95ccf3f9a4c425723a4938245fc8bc953e2131daca4a0a62d140a87fb0bde7
cloud-network-config-controller git c086bed7 sha256:7f40b2a5dde36d8c726cb2b312c7ef7fd363b5d036e5f0aef94c521de463cff3
cluster-authentication-operator git 4f7f6b1a sha256:2d77bdaa94c28c8addf3d378a28c195870fe8558d901ffbc68eb41079364b2a7
cluster-bootstrap git 138a1cf2 sha256:46f1cb2fc157b48af30fff7cdbf954b6de25dabbef12946aa0816fd4917cb83b
cluster-capi-controllers git 03d89f21 sha256:4a11baeb259df27095126b8c62b70d285345384ef4d20e16f499f60ff511706c
cluster-capi-operator git 60a36d83 sha256:4b4c93d7dc1b919dfc69da2822b6acc20fc976f17eb12dc01e8b376eaf1905b1
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:af6e6afbb76b855509b7f6d1bbe883a6db5928358779120b7fd0c4012e49db14
cluster-config-operator git 92c3b102 sha256:96015d4099bbb7162e29da51abcda5f56d81178d266d2203a02e234daec9367d
cluster-csi-snapshot-controller-operator git f573eded sha256:b62590a45223d3dfbb53278a85ebd5c16863714f3b338a201df5122359cd6ce6
cluster-kube-cluster-api-operator git d50f7322 sha256:09458946945dcc8dddacf2ceb5824d49f526ef6dd6f144d4831b13c54d595a1e
cluster-kube-controller-manager-operator git c3c07beb sha256:102daf51fc52d74f7f94b817ad8a96e2f8f78b23b045e2c2432b65d3211f22e0
cluster-kube-scheduler-operator git 48cd96c9 sha256:7b0447f6c665db30b88e5a219554f8b7263e2c0fa5ccf10adf53d292ef50934b
cluster-kube-storage-version-migrator-operator git 1a251f4d sha256:5357c97f6e8294a623b74a0ff957cfbfd6480687db5187cc9d5c5824dc05e2dc
cluster-machine-approver git 7b08a4de sha256:cd5508b961e35f0fced6384463c90d368fea0c42d36408bb4f24a1296c776aa0
cluster-node-tuning-operator git 20966da9 sha256:de7c80edc49da4fc322994d04d55b994366cddb02ffba8a58042e457338f293a
cluster-openshift-apiserver-operator git b870fc67 sha256:fb308c1f4128ca6a18b3a538cc9618122d7ada0a78377badfd3e476ed2f84d69
cluster-openshift-controller-manager-operator git ab963d8a sha256:1fe735234a25d9da80d644aabf5a535ad76f27b42b0a79103195988d3f4b0b6d
cluster-platform-operators-manager git c930dc74 sha256:91bb5d5ba4e3138407caf358f923b9fe32a7680e92bad3e87f33a458801a7620
cluster-policy-controller git cb8862b0 sha256:7e82fea706659318107b3cd58b57d9853e28df197ff955925b356ed53a4b2135
cluster-storage-operator git 21ebf328 sha256:54385ba010f154c268a5e99e17e7dac41f85a168a1c84b2477436a48551b84a2
cluster-update-keys git 2796e173 sha256:5d2a9b4154f5decf15f7963233be9d4d4b53fbd6acf353fb86d43d54ea8d3159
configmap-reloader git e4d9170e sha256:769b805fdf1e57446a8678f1ddc4ecc8650562e50ec4464c7afc6c6560b96ade
console-operator git 32e6d25c sha256:17684f276152dc3b1257d35373ce6696c190e2e2118d3c801ea911e93734f8b6
container-networking-plugins git 1b339719 sha256:e940c775a920dc4c7af9b1f6dd21275000f7ecb8d7e91f676339e206d8b72052
coredns git cc1194ea sha256:b90977538f5f0c22665055743decea88d24d6411312c8b7d4699bc502211b512
csi-driver-manila git 2f1d9f8a sha256:e85307428e82d91a910eeb0d8c225aaa30becfe063eafcbd662514ec843a01ec
csi-driver-manila-operator git 8dab5320 sha256:f939c33d9d76398b90826702ccaa10dd1b758b52368463eee138fe88220603b5
csi-driver-nfs git d9099257 sha256:6324a32b3d78b8830690a88c5fdfb418e4e47b37bbe5083ca9a307ebaad71b42
csi-driver-shared-resource git d054948f sha256:b9b0320a1473de800d16cb80dc46df0912440acb868553d97297defbd20c0017
csi-driver-shared-resource-operator git cc297702 sha256:b6e82bcebc378795c04c79f8c74829a8dcf14f456f587e5ba03e56f64a51538b
csi-driver-shared-resource-webhook git d054948f sha256:1f35467459126a85da9c535af71ba341f55474eeac0e8c204ccce7296505ce5c
csi-external-attacher git fac7b8fd sha256:17060acdffffe90fc8ffdca9284fc3031f6d8149e0cf911e3d3e9054677fdc45
csi-external-provisioner git 3aa7c527 sha256:6a7b36df6f3534debcf69890671af8f794f80894ee314d1fa25de6179733d720
csi-external-resizer git 5b066ba4 sha256:43004cc994590469a4572e39fb5d729f965d23bcf82187cbbf2f3cc3c71d73cb
csi-external-snapshotter git 6fdb648f sha256:183e0abf4d2a13c83fed1c9df286ccc3a9e9a91714e0c48fd9fc1bc89b4f2a75
csi-livenessprobe git e6545e71 sha256:273aa47ec29daae54fe1c4d1a258eb631130b1bbab9a6aad05e67ffe040b6f8b
csi-node-driver-registrar git c316b896 sha256:62baf98b05d589093aae7d4d71c58e95bf0e60fffb1319beaf53e1de87983811
csi-snapshot-controller git 6fdb648f sha256:e247022d80383100a1b5afe85f2e9b0d5f20d8caf90d311015495275157ae7c3
csi-snapshot-validation-webhook git 6fdb648f sha256:f3b4c2e710ee30ec47897741b1e6b36abdb3f541501ebef632044a79a5957516
deployer git d6912573 sha256:910163eddd80a0889b13cf0ff7a0ddcf14f05e483cea503f2b236e8926338b43
docker-registry git 9e75355c sha256:b635a1cc9a0c1cdd36e93e235f8fc1da7e2754edc20340ec060dcd205f4cf26d
driver-toolkit git 6e5c04c0 sha256:b18f761b39d142758edebd3cb37203dd3031a9b3ad9f7cc8e07ef6f7a9a989bc
egress-router-cni git a92e4157 sha256:fab339849c8fbca9f7847bd31d8557c6e93e7c9d3333bbb8361945be4c3c35dd
etcd git bb82e891 sha256:a95fcd93f2554c4509f0c1e317716a6bf1ccdce40a0493a8c1bb9ad166f45cc9
gcp-cloud-controller-manager git 8a84952e sha256:d0152605cc2f2dc551d6d24135021d8fba166bfaecfad3badb80ae011c014199
gcp-cluster-api-controllers git e00019fa sha256:4b4c87ab8020426d2507b9d73f7b02a488bca23e856eceff07d2cd5aa29d7006
gcp-machine-controllers git d6d8c1cc sha256:e71d4ec9daca4e07cd8debe7bd671fa8249cfc228a4aa857a67cce58ea3acac6
gcp-pd-csi-driver git 5dcfd675 sha256:a8600857c1aba1cb8c86bc7a6e2c367874e2cf627551320ba3f4555113bb71eb
gcp-pd-csi-driver-operator git 30e97ba5 sha256:1d01bc62c88854008e588037896a830bc5653d7f48b4b17c316d1d740a6d2479
ibm-cloud-controller-manager git 8bd0ea8f sha256:ca3279bb62072f1380f04eda1a35ebb6aaaacd3c27ee98b3ce6dce5213097f57
ibmcloud-cluster-api-controllers git 0fe74f67 sha256:db8d0e28ef3f6110eafa7479f4335a95b5f84c2d1e4f3001571d8bf1e19b71ee
ibmcloud-machine-controllers git 31a67dac sha256:9740a88090d451291e5a9fa4e13b779d04d186c314d25ddc5ba890f1925510d4
insights-operator git 6b543885 sha256:275badbf1955828eea22fbcabcb0d49466ff9e1aa8b225475564552c0aeabe7e
ironic-machine-os-downloader git c65c1f1c sha256:1f551e28cdee7976227d8d94cef7e36f554a190325d29e2dfb16dc21f0635947
ironic-static-ip-manager git a8ade8fe sha256:52e12f264b47c8fba991550bb879652628659c7e6f480d5bc5f930389462640d
k8s-prometheus-adapter git 36c06694 sha256:38bd512fa771d201ee41cbb76facfd331b12280a9ce2257e68acbcb28558fbfb
keepalived-ipfailover git 7e8a0105 sha256:82fc947411fb950bc2f05136b683088128090a90b3d90e8bc1792f2b4cbeb4e9
kube-proxy git 9706f967 sha256:e696d6d3a0aafe39db6cf9a64e5a17d35e842de5345ec2566847c1d82ab21584
kube-state-metrics git 748f7131 sha256:2c6ef1fc1a3c57087d0f873c2f86cba59db26ab406c218e53cb01aae91d84d38
kube-storage-version-migrator git 596745ce sha256:cc9e1e1ade0ef7193d5442aee44579d398c83648efe98c55fccada356a48d8af
kubevirt-cloud-controller-manager git a19615cd sha256:558545b86a5fb66730869ce45d6ced86c1c11c76fb4984b9682bcd6f8196d9ef
kubevirt-csi-driver git f407c8a7 sha256:55d46c9878c70215d75ee3fbe7b48f6702fd06779cde2c03c613ccef2bf7cbcc
kuryr-cni git 8fd2f8b0 sha256:f2d2aef8de8c639abafe4ea6c2dc5bd05e94139c887cf1fc2316bf5e87a87e99
kuryr-controller git 8fd2f8b0 sha256:b351d42097f900e63bae13e9748af8aaa3da6ae6e4e01acccedddc08c8f10954
libvirt-machine-controllers git a2882f7a sha256:a7e1bc3ef1b4aec96dfff8544188832d81064be188764eea19b738226b2636f6
machine-image-customization-controller git e456249d sha256:c0cd6fbe7da6d50b236d494be1e82f38298c0239455f9bf5e7bd60eb054eebea
machine-os-content sha256:f31bc15a2c97f3daf259d356e3d0e008c37fe29df59405e045ad2cd148e3f479
multus-admission-controller git e27952fc sha256:741611a88d7ae84f92c3af15db794691b9fd8dc0d7b85e2c89e9e8360b87d99a
multus-networkpolicy git 644461f2 sha256:65897a9c1fbe43db5a5cebe088fc81f2d1a5553a8d61ebb21b382631a0f96c55
multus-route-override-cni git efd6ffbb sha256:6ec2a6be4f9835303d9993ce68af5ac283327d4bc55f24c33b4ed9d96f2cc660
network-interface-bond-cni git 30386d6b sha256:ea622f8315b386ad1c7c2d70b203e826010043c4f9b0666e6c08ce86cce07da6
network-metrics-daemon git fad45782 sha256:01d0a68f8e883f038ea88f326fc494cef8eb7d1279674a13089481d426aa52b0
network-tools git c76613c7 sha256:93a117b3fdf152805fb93d562c17c78827818cd14afe94f108e73752c98fa0e9
oauth-proxy git 03e5b13b sha256:6552be0fbca41e4e2639741a5954a480eb93801d5dc5cc2341b5c75154296fc8
oauth-server git 0c434f42 sha256:394282b52bc59273e8c7828f29892c163fa3ee5d3e7b8d2e5cf3f4fd8dedf10c
openshift-state-metrics git 3d5dc18d sha256:6d327973cfcf5324c4e2a2d37d6787d8790939a68bc4ab0c57d569a07107cc53
openstack-cinder-csi-driver git 2f1d9f8a sha256:b71a66a41c6a4412ebdc88bcbffb500a809c3884180a2f158afa96aa0f5fbae2
openstack-cinder-csi-driver-operator git d09e51ae sha256:d2d17c6a87a5f3d9d264c509492b88d3f3a905acf169ec1b5a6ea25e29cbe800
openstack-cloud-controller-manager git 2f1d9f8a sha256:50b97273be91a88a5c08c70d0305ce7d61cc4b0c768792781255c937d73bea42
openstack-machine-api-provider git 05657663 sha256:855177ac181e6d2452adca671f921e94edcb9914b50417d6182bf278af70497c
openstack-machine-controllers git f13e381e sha256:b5f895a7730c8ba6b935a38c13d18b8ee4053e50ee24059bf8b96355533a3fed
ovirt-csi-driver git 87ab3789 sha256:6ed851fb3bb905bbc431bbc064ecb90fcdb4d3f1517a806f0c05e5b01c467151
ovirt-csi-driver-operator git e5e02335 sha256:e46e1872be7d9d5ab25b3d0c5f2561b52943fe9a3ed0284cb31f8b56630dbb9c
ovirt-machine-controllers git 03e8cb50 sha256:e340122c7c33434472ea274c52c442369f4584e955964c470e9480920546e0ff
powervs-block-csi-driver git b78e8e78 sha256:2ba271d45ef0928c7b732a5f0109beac4a7cf263e8c36ff42823b2af993fa037
powervs-block-csi-driver-operator git 7dadc08a sha256:9ec99f9e43781d49d7f6e4af4bfb25385d481a77555648bbb9739a01da88dfc0
powervs-cloud-controller-manager git 4fb4334c sha256:5aa0ea7337d8e11b04936178b9ccf6730c8712586adae5be9530344b0dd0191e
powervs-machine-controllers git 8a37e70a sha256:d6a602ad0430baa6589ad81604090c2ed1054235213d76eeec98ed2ee52885c4
prom-label-proxy git b1907888 sha256:efc865efe8ff9f167c9eb259e2989240189308660a44ececaa64c7b36eaae050
prometheus git 72ceaef4 sha256:684734ecee9131f2ca066d526ec59284e4aae230e4ce50dc08e358d35445b4b6
prometheus-alertmanager git 914cad82 sha256:dc26f8c796a38a72f2130be48a5414976c496f36046f9087b1e3b87a91e89929
prometheus-config-reloader git d1e399d5 sha256:af7bc743bfdc4ad31383933364c45431f70217a236364c1729b941d982c449df
prometheus-node-exporter git 99077a3c sha256:9ced5454e0a5a0e87d21b5a743171359e2cd0bba3a553fed10c7cf17c887bda4
prometheus-operator git d1e399d5 sha256:393986bacee176b76f8b457ec9b2f6c6f41b3aabbbfee0f2cf2b1333d9b212d2
prometheus-operator-admission-webhook git d1e399d5 sha256:b9af2dfb33e2640cc531362f3653894cc1efbb9390fbd9b4dcb0bb6c843e6722
rhel-coreos-8 sha256:be3bfefd7ce984384eef0085018be2c8ba5db4f9ffcf89dad1dc2cad49cc6755
rhel-coreos-8-extensions sha256:d10717cd3c3c2dbb81cab378e2c139300a3be0d478de69124cf24b23b8ea9105
route-controller-manager git 0f141ce9 sha256:40a0c64780cbb824241c280d40d224d03ededc9a7fd76e38a3bdbdfd5bc2dbac
sdn git 9706f967 sha256:ff8a7e806f9ad77853dda541b3972cf6a6be8aaca9820fe602f76949ce80c91d
service-ca-operator git ef1d057d sha256:8973992723da25e7e7b443ec1efc60dde102902b2d2c9b1a28d55430ed29a4da
thanos git 2867a6b5 sha256:3e2d0635c1be80bd6c6333e7894e262efacdbbcaab0ae3f511fd498631b90da8
tools git d6912573 sha256:a06baceb543989a02ba52876c6128273c3e8c706bc7e7a83139098238d2dfd7d
vsphere-cloud-controller-manager git e170dce5 sha256:b934ded89bf8d6f15cddac5fb05c663fb338cea728e026843fd9e50449fe8ffe
vsphere-cluster-api-controllers git a61d43b7 sha256:9e0e498ba8bfceb16152e4b3af502ea73e28883635eae1073b0f1d10d520cb8e
vsphere-csi-driver git e4c0e103 sha256:3dd48bd5647f32bda2890b01c729ce0fc6c5f8ffc6b7ff67e4633de638398ff9
vsphere-csi-driver-operator git d7cca470 sha256:46be338582c10b6169642e1ae59dc1ba64f35b8c83075ae294b4587326ce2c85
vsphere-csi-driver-syncer git e4c0e103 sha256:8260b7f3d9c485b96df38f1fddfa645fff378b84eafa47fa39517a15a77b8f29
vsphere-problem-detector git f25ae2ad sha256:80a0f2a2e432399eed033a01274e060397574cc73e869dc9d6bdf2f59fb0dfa3

agent-installer-api-server

OCPBUGS-53692: Bump jwt to 4.5.2 in release-4.12 (#7513) #7513
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Bump golang.org/x/net to 0.33.0 (#1026) #1026
Full changelog

agent-installer-node-agent

OCPBUGS-46953: Bump golang.org/x/net to 0.33.0 (#887) #887
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
Full changelog

aws-cloud-controller-manager

OCPBUGS-32079: update for CVE-2023-45288 [release-4.12] #85
Full changelog

azure-cluster-api-controllers

OCPBUGS-36021: Update go-retryablehttp to v0.7.7 #315
Full changelog

azure-machine-controllers

OCPBUGS-36148: Fix mapi_instance_create_failed metric with accelerated networking #115
Full changelog

baremetal-installer, installer, installer-artifacts

OTA-1310: data/manifests/bootkube/cvo-overrides: Default to eus-4.12 #9373
OCPBUGS-36087: [release-4.12]: bump go-retryablehttp for CVE fix #8660
OCPBUGS-39290: Add yq v4 to ci image #8929
OCPBUGS-36179: [release-4.12]: bump github.com/container/images for CVE fix #8663
OCPBUGS-22981: IBMCloud: Add eu-es region #7686
Full changelog

baremetal-machine-controllers

OCPBUGS-46642: Bump x/net to 0.33.0 #230
Full changelog

baremetal-operator

OCPBUGS-53335: CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] #412
Full changelog

cloud-credential-operator

OCPBUGS-53420: github.com/golang/glog v1.2.4 #847
OCPBUGS-51538: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #832
OCPBUGS-37322: update modules: grpc, protobuf, logrus #764
OCPBUGS-42166: Resolve SNYK errors in security job. #760
OCPBUGS-37422: SNYK ignore go-client misreporting #744
NO-JIRA: Add jstuever to OWNERS #733
OCPBUGS-36027: IBM/go-sdk-core update to v5.17.4 #723
Full changelog

cluster-autoscaler

OCPBUGS-45152: [release-4.12] VPA: Update OWNERS file #329
OCPBUGS-40928: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #318
Full changelog

cluster-autoscaler-operator

OCPBUGS-32005: Update x/net to v0.25.0 #325
Full changelog

cluster-baremetal-operator

OCPBUGS-32006: bump x/net to 0.23.0 #440
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48325: Add unreadyNodeGracePeriod for allowing brief node hiccups #344
OCPBUGS-35421: Improved debugging of API listing errors #306
Full changelog

cluster-dns-operator

OCPBUGS-52502: [release-4.12] Add runbook_url for CoreDNSErrorsHigh #435
Full changelog

cluster-etcd-operator

OCPBUGS-35501: return errors in wait-for-ceo #1277
Full changelog

cluster-image-registry-operator

OCPBUGS-36033: go.*,vendor: bump go-retryablehttp #1071
Full changelog

cluster-ingress-operator

OCPBUGS-43703: Add e2e test for duplicate Transfer-Encoding headers #1158
OCPBUGS-43703: Add alert for RFC 7230 violation in Transfer-Encoding headers #1162
OCPBUGS-35454: internal service changed fix target port logic #1092
OCPBUGS-35304: TestHostNetworkPortBinding: Delete t.Parallel() #1083
OCPBUGS-35027: Don’t add clientca-configmap finalizer if deleting #1080
OCPBUGS-34888: desiredRouterDeployment: Set HostPort if needed #1076
OCPBUGS-34757: Avoid spurious updates for internalTrafficPolicy #1070
OCPBUGS-34110: Avoid spurious updates for scope in IngressClass #1056
OCPBUGS-34548: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1068
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50880: Increase waitForFallbackDegradedConditionTimeout #1811
Full changelog

cluster-monitoring-operator

OCPBUGS-35558: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2383
Full changelog

cluster-network-operator

OCPBUGS-43872: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2548
OCPBUGS-38905: Add missing runbook for OVNKubernetesNorthdInactive #2479
OCPBUGS-37942: [release-4.12] update whereabouts crd #2461
Full changelog

cluster-samples-operator

OCPBUGS-54913: add rhdmalone to owners #629
OCPBUGS-49664: add shannon and aroyoredhat as owners #600
OCPBUGS-21179: update k8s.io/apiserver version #590
Full changelog

cluster-version-operator

OCPBUGS-45333: deps: bump golang.org/x/net to 0.31.0 #1122
Full changelog

console

OCPBUGS-55210: Show Observe section without PROMETHEUS and MONITORING flags #14986
Dockerfile yarn line update #14838
OCPBUGS-45291: Application creation fail when manually entering input scaling value in local setup #14572
OCPBUGS-45235: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561
OCPBUGS-36561: Increase login flow state paramater length/entropy #14539
OCPBUGS-43639: Copy response code from proxied plugin requests #14423
OCPBUGS-33519: Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334
OCPBUGS-41600: Fix plugin proxy handler #14266
OCPBUGS-41854: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283
OCPBUGS-34564: Routes created by devfiles do not always use HTTPS #13907
OCPBUGS-34933: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930
OCPBUGS-32146: Bump graphql-go to v1.3.0 #13923
OCPBUGS-34845: Fix PipelineRun Logs tab navigation #13920
Full changelog

docker-builder

OCPBUGS-43296: Bump buildah to 1.26.9 #449
OCPBUGS-43187: runc library bump to 1.1.12 #440
OCPBUGS-49345: skipping some unit tests to avoid failures as they are duplicate #437
OCPBUGS-48738: Add new team members to the OWNERS file #433
Replace ‘coreydaley’ with ‘sayan-biswas’ #408
BUILD-854: Add adambkaplan as approver #406
Full changelog

haproxy-router

OCPBUGS-43703: add duplicate_te_header_total metric #632
OCPBUGS-35875: Properly handle rewrite-target annotation #610
OCPBUGS-33432: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #593
OCPBUGS-34212: Reject routes with MD5 certs #601
Full changelog

hyperkube, pod

OCPBUGS-37282: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2046
OCPBUGS-30454: CVE 2024-24786 #1974
Full changelog

hypershift

OCPBUGS-41516: set Konnectivity cipher suites #4283
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53908: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #88
OCPBUGS-36063: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #75
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36069: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #124
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-53540: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #48
Full changelog

ironic

OCPBUGS-48145, OCPBUGS-48596: Bump jinja to 3.0.1-6.el9.2 #627
OCPBUGS-43949, OCPBUGS-43957: Bump python-waitress [4.12] #609
OCPBUGS-37766, OCPBUGS-39385: Include fixes for CVE-2024-44082 #586
OCPBUGS-38513: set min version for python3-webob #558
OCPBUGS-33373: bump werkzeug #547
OCPBUGS-34897: bump jinja2 #541
Full changelog

ironic-agent

OCPBUGS-39385: Include fixes for CVE-2024-44082 #165
OCPBUGS-38513: set webob and bump werkzeug #153
Full changelog

kube-rbac-proxy

OCPBUGS-32000: CVE-2023-45288 [4.12] #106
Full changelog

machine-api-operator

OCPBUGS-43872: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1305
OCPBUGS-32007: Update x/net to v0.25.0 #1257
Full changelog

machine-config-operator

OCPBUGS-44325: Panic seen in CI job for MCC pod #4689
OCPBUGS-38382: [release-4.12] daemon/update: disable systemd unit before overwriting #4530
Full changelog

machine-os-images

OCPBUGS-54173: Change rhcos release browser url #61
Full changelog

multus-cni

OCPBUGS-28520: Fix SAST scan issues for multus-cni-container [4.12] #225
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37942, OCPBUGS-38019: [release-4.12] Stateful fixes #310
Full changelog

must-gather

OCPBUGS-48086: Update owners #477
Full changelog

nutanix-machine-controllers

OCPBUGS-20956: bump golang.org/x/net to v0.17.0 #88
Full changelog

oauth-apiserver

OCPBUGS-32010: bump x/net to 0.24.0 #113
Full changelog

oc-mirror

changes the owners file (#1011) #1011
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1027) #1027
Full changelog

openshift-apiserver

OCPBUGS-32447: ose-openshift-apiserver-container: golang: net/http, x… #481
Full changelog

openshift-controller-manager

OCPBUGS-49644: Add new team members to the OWNERS file #364
OCPBUGS-41953: Add adambkaplan as approver #336
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46925, OCPBUGS-46932, OCPBUGS-47312: x/net bump to v0.34.0 [release-4.12] #943
NO-ISSUE: [release-4.12] Backport e2e fixes #880
OCPBUGS-38610: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #875
OCPBUGS-42161: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs #873
OCPBUGS-41881: [CARRY] perform operator apiService certificate validity checks directly #866
OCPBUGS-32854: bump go-jose to v2.6.3 #782
OCPBUGS-35242: Unblock CI #773
Full changelog

operator-marketplace

OCPBUGS-49426: Upgrade golang.org/x/net [release-4.12] #591
NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] #510
OCPBUGS-32081: update golang.org/x/net for CVE-2023-45288 #567
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-50502: EgressIP: Reload certificates for the grpc heatlhcheck server #2457
OCPBUGS-35876: [release-4.12] ipv6+all protocols conntrack flush #2214
OCPBUGS-29864: CVE-2022-41723: avoid quadratic complexity in HPACK decoding #2204
OCPBUGS-34273, OCPBUGS-34414: Improves service iptables efficiency on start up + ICMP error messages to pass through #2184
Full changelog

telemeter

OCPBUGS-34827: fix issuer check during JWT authentication 4.12 #541
Full changelog

tests

OCPBUGS-54147: Add/remove team members to the OWNERS file for Builds #29622
OCPBUGS-52585: Use payload pullspec for image info test #29593
OCPBUGS-41585: Removes dependency on samples operator images #29080
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github