Back to index

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.19.0-0.nightly-2025-08-08-044531

Team Approvals:

Tests:

• Blocking jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-serial
  • aws-ovn-single-node-upgrade-4.19-micro Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-upgrade-ovn-single-node
  • aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview
  • aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview-serial
  • aws-ovn-upgrade-4.19-micro-fips Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-upgrade-fips
  • azure-ovn-upgrade-4.19-micro Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-azure-ovn-upgrade
  • driver-toolkit Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-driver-toolkit
  • fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.19-fips-payload-scan
  • gcp-ovn-rt-upgrade-4.19-minor Succeeded periodic-ci-openshift-release-master-ci-4.19-upgrade-from-stable-4.18-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.19 Succeeded periodic-ci-openshift-hypershift-release-4.19-periodics-e2e-aws-ovn-conformance
  • install-analysis-all Succeeded periodic-ci-openshift-release-master-nightly-4.19-install-analysis-all
  • metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-bm
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6
  • microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance
  • microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance-serial
  • overall-analysis-all Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-overall-analysis-all
  • rosa-classic-sts-conformance Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-rosa-sts-ovn
• Informing jobs
  • agent-compact-ipv4 Failed periodic-ci-openshift-release-master-nightly-4.19-e2e-agent-compact-fips
  • agent-ha-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-agent-ha-dualstack-conformance
  • agent-single-node-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.19-e2e-agent-single-node-ipv6-conformance
  • aws-console Failed periodic-ci-openshift-release-master-nightly-4.19-console-aws
  • aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.19-periodics-e2e-aws
  • aws-csi Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-csi
  • aws-ovn Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn
  • aws-ovn-cgroupsv2 Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-cgroupsv2
  • aws-ovn-fips Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-fips
  • aws-ovn-single-node Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-single-node
  • aws-ovn-single-node-csi Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-single-node-csi
  • aws-ovn-single-node-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-single-node-serial
  • aws-ovn-single-node-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-single-node-techpreview
  • aws-ovn-single-node-techpreview-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-single-node-techpreview-serial
  • aws-ovn-single-node-upgrade-minor Succeeded periodic-ci-openshift-release-master-nightly-4.19-upgrade-from-stable-4.18-e2e-aws-upgrade-ovn-single-node
  • aws-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-upgrade-out-of-change
  • aws-upi Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-upi
  • azure-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.19-periodics-e2e-azure
  • azure-csi Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-azure-csi
  • azure-ovn Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-azure-ovn
  • azure-ovn-serial Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-azure-ovn-serial
  • azure-ovn-techpreview Failed periodic-ci-openshift-release-master-ci-4.19-e2e-azure-ovn-techpreview
  • azure-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-azure-ovn-techpreview-serial
  • azure-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-azure-ovn-upgrade-out-of-change
  • cnv Succeeded periodic-ci-openshift-release-master-cnv-nightly-4.19-deploy-azure-kubevirt-ovn
  • gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.19-periodics-e2e-gcp
  • gcp-ovn Failed periodic-ci-openshift-release-master-ci-4.19-e2e-gcp-ovn
  • gcp-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-gcp-ovn-csi
  • gcp-ovn-rt Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-gcp-ovn-rt
  • gcp-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-gcp-ovn-serial
  • gcp-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-gcp-ovn-techpreview
  • gcp-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.19-e2e-gcp-ovn-techpreview-serial
  • gcp-ovn-upgrade-4.19-minor Succeeded periodic-ci-openshift-release-master-ci-4.19-upgrade-from-stable-4.18-e2e-gcp-ovn-upgrade
  • gcp-ovn-upgrade-micro Failed periodic-ci-openshift-release-master-ci-4.19-e2e-gcp-ovn-upgrade
  • hypershift-kubevirt-ovn-conformance-4.19 Succeeded periodic-ci-openshift-hypershift-release-4.19-periodics-e2e-azure-kubevirt-ovn
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-dualstack-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack-techpreview
  • metal-ipi-ovn-ipv6-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6-techpreview
  • metal-ipi-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-serial-ipv4
  • metal-ipi-ovn-serial-virtualmedia Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-serial-virtualmedia
  • metal-ipi-ovn-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-techpreview
  • metal-ipi-ovn-upgrade Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-master-nightly-4.19-upgrade-from-stable-4.18-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-serial-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-serial-ovn-ipv6
  • metal-ipi-serial-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-serial-ovn-dualstack
  • metal-ipi-upgrade-ovn-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ipi-upgrade-ovn-ipv6-minor Succeeded periodic-ci-openshift-release-master-nightly-4.19-upgrade-from-stable-4.18-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ovn-single-node-recert-cluster-rename Failed periodic-ci-openshift-release-master-nightly-4.19-metal-ovn-single-node-recert-cluster-rename
  • openshift-dedicated-aws Failed periodic-ci-openshift-osde2e-main-nightly-4.19-osd-aws
  • openshift-dedicated-gcp-conformance Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-osd-ccs-gcp
  • openshift-dedicated-gcp-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.19-osd-gcp
  • ovn-proxy Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-proxy
  • ovn-single-node-live-iso Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ovn-single-node-live-iso
  • qe-perfscale Failed periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-4.19-nightly-x86-payload-control-plane-6nodes
  • rosa-classic-sts-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.19-rosa-classic-sts
  • rosa-hypershift-sts-conformance Failed periodic-ci-openshift-release-master-nightly-4.19-e2e-rosa-sts-hypershift-ovn
  • telco5g Failed periodic-ci-openshift-release-master-nightly-4.19-e2e-telco5g
  • telcov10n-metal-single-node-spoke Succeeded periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.19-telcov10n-metal-single-node-spoke
  • upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.19-upgrade-analysis-all
  • upgrade-minor-ovn Succeeded periodic-ci-openshift-release-master-ci-4.19-upgrade-from-stable-4.18-e2e-aws-ovn-upgrade
  • vsphere-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn
  • vsphere-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-csi
  • vsphere-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-serial
  • vsphere-ovn-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview
  • vsphere-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview-serial
  • vsphere-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upgrade-minor Failed periodic-ci-openshift-release-master-ci-4.19-upgrade-from-stable-4.18-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upi Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-upi
  • vsphere-ovn-upi-serial Failed periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-upi-serial
  • vsphere-static-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-static-ovn

Upgrades from:

• 4.19.0-0.nightly-2025-08-07-235121 (changes) - S S S S F S S S F
• 4.18.22 (changes) - Success
• 4.18.0-0.nightly-2025-08-07-013818 - S S F S S S

Upgrades to:

• 4.20.0-0.nightly-2025-08-08-075412 (changes) - Failed Failed
• 4.19.0-0.nightly-2025-08-08-095458 (changes) - S F P S S F S S S S

---

Loading changelog, this may take a while ...

Changes from 4.18.0-0.nightly-2025-08-07-013818

Created: 2025-08-08 04:47:25 +0000 UTC

Image Digest: sha256:b0ebe3e777cec672855c7ee5f362631576c313fab10f5615f86d08b086dd800c

Components

• Kubectl upgraded from 1.31.1 to 1.32.1
• Kubernetes upgraded from 1.31.11 to 1.32.7
• Kubernetes Tests upgraded from 1.31.10 to 1.32.6
• Red Hat Enterprise Linux CoreOS upgraded from 418.94.202508060022-0 to 9.6.20250807-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
CSIDriverSharedResource (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPI (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AdditionalRoutingCapabilities (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ConsolePluginContentSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsCollectionProfiles (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteExternalCertificate (19 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ServiceAccountTokenNodeBinding (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallIBMCloud (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
MachineAPIMigration (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GatewayAPIController (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)			Enabled (New)	Enabled (New)
DualReplica (0 tests)			Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
Example2 (0 tests)			Enabled (New)	Enabled (New)
GCPCustomAPIEndpoints (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
HighlyAvailableArbiter (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
KMSEncryptionProvider (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMCatalogdAPIV1Metas (4 tests)				Enabled (New)		Enabled (New)
NewOLMOwnSingleNamespace (0 tests)				Enabled (New)		Enabled (New)
NewOLMPreflightPermissionChecks (6 tests)				Enabled (New)		Enabled (New)
SELinuxChangePolicy (0 tests)			Enabled (New)	Enabled (New)
SELinuxMount (6 tests)			Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)
SigstoreImageVerificationPKI (0 tests)			Enabled (New)	Enabled (New)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereHostVMGroupZonal (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

• aws-karpenter-provider-aws git 68ae0c26 sha256:05048c211ca117fd605dd5faed9d2062c084ee473cca0f14f88232c8bb978cae
• azure-service-operator git 0ae129b4 sha256:c7b555b9bf35024466f7f9b122bacdfca19b22c7231636b623948abb3ff9d21a
• openstack-resource-controller git d00bab2b sha256:963bbecc7c423f65b4f28930585e9a20324bee5bafde0edf3ca4e7a62141c147

Removed images

• csi-snapshot-validation-webhook
• installer-altinfra

Rebuilt images without code change

• aws-kms-encryption-provider git 088dcaf7 sha256:db3962c1a3008e97d5f1621c963cba51458c3f1c81d427e637157d903da2763e
• kubevirt-cloud-controller-manager git 3f4542ec sha256:c45da58a1aa08a9dbef39fb7d54dd754c1e05c831da5e454da8de9f5e8de0cf0
• libvirt-machine-controllers git a336f0b5 sha256:d04b066f734f8027e9fbe2fa8c648fdd73abe97d561edc3754ed6d0406e160c4
• multus-route-override-cni git 391c1b03 sha256:063857b9a2fb8725ec55015d47c1968864ee9963c6c5f32b07853672c919d22a
• ovirt-csi-driver git 1db726a9 sha256:ee2af75717b24a31d70695c71306affd510ae9292584c298c6f0848d5b424439
• rhel-coreos git e97898c8 sha256:e80b8a4b3082b1e968b50ed52c72c697b89d32747f6b6d72eb066deb4d353ca1
• rhel-coreos-extensions git e97898c8 sha256:66927f13c2ddc112cdc8055494c75737f14c44931bc34c93f0c7a0c203138980

agent-installer-api-server

• MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
• MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
• MGMT-20009: Change OCP 4.19 to the default version #7506
• NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
• NO-ISSUE: fixing late binding #7070
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
• MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
• NO-ISSUE: Update Konflux references (#1112) #1112
• NO-ISSUE: Apply konflux migration (#1105) #1105
• NO-ISSUE: Update Konflux references (#1103) #1103
• NO-ISSUE: Update Konflux references (#1095) #1095
• Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
• NO-ISSUE: Update Konflux references (#1090) #1090
• MGMT-20153: Fix ostree race between node-image-pull and installing to rootfs (#1076) #1076
• OCPBUGS-53720: Bump jwt to 4.5.2 (#1080) #1080
• NO-ISSUE: Update Konflux references (#1082) #1082
• MGMT-19421: remove all references of HighAvailabilityMode and the command line argument –high-availability-mode (#1081) #1081
• MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
• NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
• MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
• NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
• OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
• NO-ISSUE: Update Konflux references (#1051) #1051
• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
• NO-ISSUE: Update Konflux references (#1048) #1048
• NO-ISSUE: Update Konflux references (#1042) #1042
• MGMT-19421: phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) #1027
• MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#1034) #1034
• NO-ISSUE: Update Konflux references (#1031) #1031
• NO-ISSUE: Update Konflux references (#1025) #1025
• MGMT-19819: Add the commit reference from which the image is built to the image (#1024) #1024
• MGMT-19815: Update tekton pipelines to point to new components (#1023) #1023
• MGMT-19101: Respect installer args (#1018) #1018
• NO-ISSUE: Update Konflux references (#1017) #1017
• MGMT-19621: Fix Race condition between the OLM operators monitor to the cluster installation monitor (#1014) #1014
• MGMT-19100: Install to the current boot device when CoreosImage is set (#1003) #1003
• COS-3013: overlay node image before bootstrapping if necessary (#899) #899
• NO-ISSUE: Update buildah image to fix a bug with SBOM (#1013) #1013
• MGMT-19748: Configure snyk ignore (#1010) #1010
• NO-ISSUE: Update Konflux references (#991) #991
• MGMT-19734: Add renovate config to limit number of PRs (#1009) #1009
• NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#1008) #1008
• MGMT-19645: Configure the following things for releasing in konflux: (#1004) #1004
• MGMT-19381: Change downstream base images to rhel9.4 instead of ubi9 (#1002) #1002
• MGMT-19595: Push latest tag for downstream images after merge to konflux int repo (#1001) #1001
• Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.19 (#956) #956
• OCPBUGS-13612: update gin version (#997) #997
• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#981) #981
• MGMT-19506: Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#976) #976
• chore(deps): update konflux references (#972) #972
• MGMT-19507: Stop using multi-arch builds in konflux (#971) #971
• chore(deps): update konflux references (#958) #958
• NO-ISSUE: Red Hat Konflux update assisted-installer-controller-downstream-main (#965) #965
• NO-ISSUE: Red Hat Konflux update assisted-installer-downstream-main (#966) #966
• MGMT-19453: Add downstream dockerfile (#960) #960
• MGMT-19408: Create tekton pipelines for acm 2.13 (#954) #954
• MGMT-19390: Update mce’s tekton pipelines to be multi-arch (#948) #948
• OCPBUGS-45116: Add retry to mount efi device (#947) #947
• Red Hat Konflux update assisted-installer-controller-mce-downstream-main (#946) #946
• Red Hat Konflux update assisted-installer-mce-downstream-main (#945) #945
• MGMT-19371: Add downstream dockerfiles for mce (#943) #943
• NO-ISSUE: Add giladravid16 and pastequo to approvers list (#944) #944
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Update assisted-service’s version (#997) #997
• MGMT-20296: Modify RegisterHostConflict log (#990) #990
• NO-ISSUE: Update Konflux references (#976) #976
• OCPBUGS-53712: golang-jwt/jwt/v4 to 4.5.2 (#956) #956
• NO-ISSUE: Update Konflux references (#959) #959
• OCPBUGS-52994: Update to latest ghw version (#936) #936
• MGMT-20227: Skip Motherboard serial if set to “-” (#955) #955
• MGMT-20149: Add required sast tasks for Konflux (#942) #942
• NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
• MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
• NO-ISSUE: Update Konflux references (#929) #929
• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
• NO-ISSUE: Update Konflux references (#924) #924
• MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) (#911) #912
• NO-ISSUE: Update Konflux references (#921) #921
• MGMT-19927: Modify MTU Check to Only MTUs != 1500 (#910) #910
• MGMT-19588: Also use bond interface for hostname workaround (#920) #920
• MGMT-19819: Add the commit reference from which the image is built to the image (#914) #914
• MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) #912
• NO-ISSUE: Update Konflux references (#903) #903
• NO-ISSUE: Increase image pull timeout during install (#904) #904
• MGMT-19815: Update tekton pipelines to point to new components (#902) #902
• MGMT-19102: Add boot device info to inventory (#899) #899
• NO-ISSUE: Update Konflux references (#900) #900
• MGMT-19100: Allow install to the existing root filesystem (#897) #897
• NO-ISSUE: Update docker pkg to fix cves CVE-2024-41110 and CVE-2023-2253 (#895) #895
• NO-ISSUE: Update buildah image to fix a bug with SBOM (#898) #898
• Update Konflux references (#875) #875
• MGMT-19734: Add renovate config to limit number of PRs (#896) #896
• NO-ISSUE: Stop removing stuff from the downstream image that are needed for preflight-check to succeed (#893) #893
• NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#892) #892
• MGMT-19645: Configure the following things for releasing in konflux: (#889) #889
• OCPBUGS_45910: s390x: Fix cpu clockspeed and use Maschine Type for Model Name (#857) #857
• MGMT-19381: Change downstream base images to rhel9.4 instead of ubi9 (#883) #883
• MGMT-19595: Push latest tag for downstream image after merge to konflux int repo (#882) #882
• OCPBUGS-43352: calculate outgoing interface for arping (#877) #877
• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#868) #868
• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#862) #862
• MGMT-19506: Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#856) #856
• Update Konflux references (#852) #852
• added another unkown motherboard id (#850) #850
• MGMT-19507: Stop using multi-arch builds in konflux (#851) #851
• Update Konflux references (#839) #839
• NO-ISSUE: Red Hat Konflux update assisted-installer-agent-downstream-main (#846) #846
• MGMT-19453: Add downstream dockerfile (#841) #841
• Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.19 (#838) #838
• MGMT-19408: Create tekton pipelines for acm 2.13 (#835) #835
• Implement MTU check as part of the connectivity check (#821) #821
• MGMT-19390: Update mce’s tekton pipelines to be multi-arch (#828) #828
• Red Hat Konflux update assisted-installer-agent-mce-downstream-main (#827) #827
• MGMT-19331: Add secure_boot_state to inventory (#822) #822
• MGMT-19371: Add downstream dockerfile for mce (#825) #825
• NO-ISSUE: Add giladravid16 and pastequo to approvers list (#826) #826
• Full changelog

agent-installer-utils

• OCPBUGS-60107: Add ISOBuilder Release notes #137
• OCPBUGS-59731: add back NHR and FAR operators #131
• OCPBUGS-58285: OVE ISOBuilder works only if and when the script is ex… #121
• OCPBUGS-59254: invalid default channel configuration for package “mtv… #126
• OCPBUGS-59666: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #129
• OCPBUGS-57922: Update operators list in ISOBuilder #118
• OCPBUGS-57420: Bump iso-builder appliance dependency #115
• OCPBUGS-57301: Update mtv-operator to version used in 4.19 catalog #112
• OCPBUGS-56991: OVE isobuilder fails on CentOS Stream 9 due to missing… #104
• ART-13081: append .0 to go.mod version #106
• OCPBUGS-56690: Fix nmtui redirection after quit #97
• OCPBUGS-56810: bump appliance to 936210 #99
• OCPBUGS-56759: ISOBuilder- Remove default password for nodes #100
• OCPBUGS-56490: Add operator CRs post-install in OVE build script #95
• OCPBUGS-56216: OVE builder: Remove RHEL9 image from additionalImages #92
• OCPBUGS-56116: configure the channel for each OLM operators #90
• OCPBUGS-55793: Use internal image registry #87
• OCPBUGS-55761: Include RHEL 9 guest image to support VM launches via … #85
• NO-ISSUE: Update ISOBuilder appliance image SHA #83
• NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
• OCPBUGS-55515: Include cnv operator in ISO builder script #80
• OCPBUGS-55623: update to go.mod #81
• NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
• NO-ISSUE: ISOBuilder- Update README.md #76
• NO-ISSUE: ISOBuilder: Add Clean targets. #69
• AGENT-1161: Update ISOBuilder dependencies #75
• AGENT-1154: Dev docs for ISOBuilder #74
• NO-ISSUE: Remove extra doneFunc() call #73
• AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
• NO-ISSUE: ISOBuilder: Use libpod registry #71
• AGENT-1114: Check connectivity to rendezvous node and improvements #64
• NO-ISSUE: ISOBuilder: Appliance tweaks #70
• AGENT-1138: Skip release image checks for interactive disconnected #52
• NO-ISSUE: ISOBuilder: idempotency and efficiency #66
• NO-ISSUE: ISOBuilder: Support –dir param #68
• NO-ISSUE: ISOBuilder: Update operators list #67
• AGENT-1155: Support release image url with sha digst #65
• NO-ISSUE: ISOBuilder: Make sudo optional #63
• NO-ISSUE: ISOBuilder: Restructured to resolve right image ref #62
• AGENT-1150: Move setup-agent-tui.sh into ignition file #59
• NO-ISSUE: iso_builder: add ssh key file flag #53
• AGENT-1151: Use internal appliance registry #58
• NO-ISSUE: iso_builder: Remove support for rendezvousIP #61
• NO-ISSUE: iso_builder: Revert “Merge pull request #54 from pawanpinjarkar/run-appliance-with… #60
• NO-ISSUE: iso_builder: Run appliance without sudo #54
• AGENT-1087: Add logging #50
• AGENT-1137: Support both –ocp-version and –release-image-url #49
• AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
• OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
• AGENT-1147: Update operators #51
• AGENT-1087: Support url in appliance-config.yaml #47
• AGENT-1119: agent-setup-tui.service typo fix #48
• AGENT-1087: Enable agent installer interactive flow #46
• AGENT-464: Refactor UI for Rendezvous node IP entry #42
• AGENT-1087: load agent tui #44
• AGENT-1087: OVE ISO Builder script improvements #40
• AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
• AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
• Full changelog

apiserver-network-proxy

• ART-13081: append .0 to go.mod version #79
• OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
• Full changelog

aws-cloud-controller-manager

• OCPCLOUD-2843: Update cloud-provider-aws to K8s 1.32, attempt 3 #104
• TRT-2005: Revert #102 “OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master” #103
• OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master #102
• TRT-2003: Revert #98 “OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master” #100
• OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master #98
• OCPBUGS-45516: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.19 #99
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-59241, OCPBUGS-59242: bump github.com/golang/glog to v1.2.5 #558
• OCPBUGS-55998: Update manifests to remove reliance on v1beta1 admission registration #552
• OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
• ART-12521: update go mod dependency for konflux #545
• OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
• OCPCLOUD-2855: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master #542
• NO-JIRA: Update manifests generator tooling #538
• OCPBUGS-49400: UPSTREAM: 5339: Bump glog for recent fixes #536
• OCPBUGS-45734: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.19 #534
• Full changelog

aws-ebs-csi-driver

• STOR-2253: Rebase to upstream v1.39.0 for OCP 4.19 #283
• OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
• OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
• OCPBUGS-46197: CVE-2024-45337: bump golang.org/x/crypto from v0.30.0 to v0.31.0 #281
• OCPBUGS-45562: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.19 #280
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-59893: Remove stale conditions #411
• OCPBUGS-56527: openstack-cinder: Set –with-topology flag for node driver also #384
• OCPBUGS-50493: Use 127.0.0.1 for healtz http-endpoints #364
• NO-JIRA: build only needed cmd in container image #329
• OCPBUGS-54382: Correct ASH driver inject env config #376
• OSASINFRA-3652: openstack-cinder: Use new –with-topology flag #345
• STOR-2126: Enable readOnlyFileSystem #370
• OCPBUGS-54447: Enable required driver services #369
• OCPBUGS-54180: Disable remove-not-ready-taint for azure disk csi driver #371
• OCPBUGS-54230: Bump library-go #372
• STOR-1877: Run operators without root user control #368
• STOR-1880: Role and ClusterRole with too wide permissions #367
• OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
• NO-JIRA: Fixed typo in README.md #348
• STOR-2252: Bump all deps #361
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
• CFE-1132: EFS Access Point Tags Update DAY2 #313
• CFE-1131: AWS Tags DAY2 Update #297
• STOR-2263: correct smb csi driver test manifest #360
• NO-JIRA: Remove inject-proxy annotations for aws-ebs, aws-efs node daemonsets #308
• OCPBUGS-48507: openstack-manila: update PodDisruptionBudget name #353
• STOR-2078: Enable VolumeAttributesClass on AWS EBS for resizer + provisioner #314
• NO-JIRA: Update golang.org/x/net to v0.34.0 #352
• OCPBUGS-45073: Support HCP labels #332
• STOR-2260: Bump OLM metadata to 4.19 #351
• OCPBUGS-45591: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.19 #342
• OCPBUGS-44723: remove EFS driver metrics #330
• OCPBUGS-45374: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.19 #337
• OCPBUGS-45622: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.19 #343
• Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.19 #341
• OCPBUGS-45508: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.19 #340
• OCPBUGS-45395: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.19 #339
• OCPBUGS-45352: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.19 #336
• OCPBUGS-45267: openstack-manila: modify assets selectors #335
• OCPBUGS-43357: support hcp tolerations #326
• Full changelog

aws-machine-controllers

• OCPBUGS-56633: fix: make machineset annotation controller respect paused condition #130
• OCPBUGS-55706: Update machine-api-operator pkg with fixes #128
• OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
• OCPCLOUD-2780: select instance ‘MarketType’ option #125
• OCPCLOUD-2836: Update dependencies to k8s 1.32 #123
• OCPBUGS-45578: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.19 #119
• OCPBUGS-44373: fix Associate*IpAddress flag when launch EC2 #116
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
• OCPBUGS-45443: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.19 #199
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-55162: UPSTREAM: 8920: Fix azure stack hub volume detach failed #142
• OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
• OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
• CNTRLPLANE-106: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (78638bd) into main #136
• OCPCLOUD-2844: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (dfca04a) into master #127
• OCPBUGS-45694: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.19 #129
• OCPBUGS-45859: Prevent panic when informer receives cache.DeletedFinalStateUnknown #130
• OCPBUGS-45574: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.19 #128
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-59888: Add support to disable CAPZ components through a manager flag #347
• OCPBUGS-56100: fix: reuse global TracerProvider #340
• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #339
• ART-12521: update go mod dependency for konflux #334
• CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
• OCPCLOUD-2854: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.18.0 (1957fc6) into master #332
• NO-JIRA: Update manifests generator tooling #331
• OCPBUGS-45570: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.19 #328
• Full changelog

azure-disk-csi-driver

• OCPBUGS-55494: Correct max data disk count table for L family v4 #105
• OCPBUGS-54382, OCPBUGS-55162: Fix ASH azure disk regression issues #104
• OCPBUGS-51376: Rebase against v1.32.0 #102
• OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
• OCPBUGS-51169: UPSTREAM: 2900: chore: update max data disk count table for D family v6 #100
• STOR-2256: Rebase v1.314 upstream #99
• OCPBUGS-47036: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #91
• OCPBUGS-46575: Rebase to upstream v1.31.1 for OCP 4.19 #94
• Full changelog

azure-file-csi-driver

• OCPBUGS-55831: UPSTREAM: 2515: allow deleting cross-subscription snapshots #93
• OCPBUGS-52654: Rebase to v1.32.0 #90
• OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
• OCPBUGS-47043: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #85
• OCPBUGS-46218: CVE-2024-45337: bump golang.org/x/crypto to v0.31.0 #84
• OCPBUGS-45753: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.19 #83
• Full changelog

azure-kms-encryption-provider

• ART-13081: append .0 to go.mod version #18
• NO-JIRA: Add OCP engineers to OWNERS for KMS #15
• CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
• OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
• OCPBUGS-53496: bump golang-jwt v4 #10
• Full changelog

azure-machine-controllers

• OCPBUGS-56163: [release-4.19] Update virtualmachines service to armcompute/v5 SDK #144
• OCPBUGS-56653: Fix failure when attempting to modify immutable availabilitySet #154
• OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
• OCPBUGS-31515: Re-reconcile machine on NIC provisioning failure #132
• CORS-3883: Allow managed identity from other resource groups #133
• OCPCLOUD-2839: Bump k8s 1.32 #128
• OCPBUGS-38570: Fallback to PlatformFaultDomain when Zones is otherwise unset #126
• OCPBUGS-45663: dynamically setting the amount of fault domains #124
• OCPBUGS-45481: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.19 #123
• Full changelog

azure-workload-identity-webhook

• ART-13081: append .0 to go.mod version #36
• OCPBUGS-53800: github.com/golang-jwt/jwt/v4 v4.5.2 #30
• OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
• OCPBUGS-45531: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.19 #25
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #45
• Remove ipam-controller-manager deployment #43
• Add metal3 infra group to IPAM manager RBAC #42
• Remove IPAM deployment #39
• Find Nodes by hostname #38
• downstream: regenerate manifests #37
• Merge upstream #36
• OCPBUGS-47538: Bump x/net to 0.33.0 #30
• OCPBUGS-45382: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.19 #29
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-56963: Make swift containers removal not fatal for UPI. #9765
• OCPBUGS-58403: When AWS_PROFILE is invalid ask for credentials #9829
• OCPBUGS-58073: Refactor removing loadbalancer in OpenStack. #9808
• OCPBUGS-58263: allow to deploy single nodes with UPI #9812
• OCPBUGS-57901: vSphere - remove unit tests using nip.io #9802
• OCPBUGS-58060: MCO: consider custom AMI for edge compute machine pool #9807
• OCPBUGS-56020: AWS Destroy use AWS SDK v2 #9703
• OCPBUGS-57394: Prompt User for AWS Creds when none are found #9782
• OCPBUGS-57137: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9771
• OCPBUGS-57039: ensure ctrplane nodes can access bootstrap MCS #9768
• OCPBUGS-56826: update the punctuation #9755
• OCPBUGS-56372: Added better logging for vSphere destroy #9719
• OCPBUGS-56832: add unit tests for vsphere VIPS/machinenetworks population #9757
• OCPBUGS-56811: Update Control Plane replica validation for Single Node OpenShift #9756
• MGMT-20702, OCPBUGS-56762: Avoid duplicate machine networks #9745
• OCPBUGS-55995: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9701
• OCPBUGS-56712: add the VM types that the install pass into the tested_instance_types #9730
• OCPBUGS-56646: Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 #9742
• OCPBUGS-56595: [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities #9735
• OCPBUGS-55068: Update RHCOS 4.19 bootimage metadata to 9.6.20250513-0 #9721
• OCPBUGS-56006: [release-4.19] CORS-3634, CORS-3771, CORS-3772: Azure doc: add support for Lsv4, Lasv4, Dxv6, NDs and NV series #9702
• OKD-251: Update SCOS 4.19 bootimage metadata to 9.0.20250510-0 #9714
• OCPBUGS-56061: fixes to get shellcheck to pass #9705
• OCPBUGS-56140: apply fixes for yaml-lint errors #9710
• OCPBUGS-56075: Pre-create password files for agent installer OVE #9707
• OCPBUGS-55957: Remove Terraform & Altinfra Build Artifacts #9698
• OCPBUGS-55909: Apply defaults then validate confidentialCompute #9695
• OCPBUGS-55731: azure stack: switch cloud provider to standard lb #9690
• CORS-3633: Fail the install when there are expired certs #9225
• CORS-3960: Remove Terraform from Dockerfiles #9673
• OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
• no-jira: IBI nmstate unit test fix #9680
• OCPBUGS-55324: fix nil field access when describing security groups #9676
• OCPBUGS-52203: Find GCP KMS keys #9597
• CORS-3855: Remove ARO build flag from installer #9124
• OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
• NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
• CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
• CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
• OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
• Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
• CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
• CORS-3870: add validations for subnets field with AWS API #9599
• CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
• CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
• OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
• CORS-3936: Add support for public-only networking #9544
• CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
• CORS-3854: Enable option to set boot diagnostics #9125
• CORS-3278: Switch IBMCloud to CAPI #9652
• CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
• CORS-3886: azure: Set use managed identity to false #9648
• OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
• AGENT-1159: agent docs update #9627
• OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
• NO-JIRA: fix the platform test assertions to check expected err message #9639
• OCPBUGS-43990: Filter out excess CA certs when adding node #9641
• NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
• OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
• CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
• SPLAT-2121: vsphere - if no host group found, append not found #9638
• OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
• OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
• OCPBUGS-43724: Fix Load balancer IP setup #9144
• OCPBUGS-54407: Use correct case in path error messages #9615
• OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
• OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
• OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
• NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
• OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
• NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
• CORS-3883: Remove user-assigned identity from ARM template #9625
• OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
• OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
• OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
• no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
• CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
• AGENT-587: Support Nutanix in Agent-based Installer #9537
• SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
• OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
• OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
• OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
• OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
• OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
• NO-JIRA: update OWNER_ALIASES for azure and aws #9598
• OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
• NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
• CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
• OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
• OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
• OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
• AGENT-467: show the agent ui url when available #9584
• CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
• AGENT-537: Run agent installer command to create certificates #9574
• OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
• OCPBUGS-53173: PowerVS: remove TF code #9568
• no-jira: add dev docs for bumping CAPI provider version #9567
• OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
• SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
• OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
• AGENT-537: Add agent command to generate certificates #9557
• OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
• AGENT-1113: additional refinement for loading the agent UI #9565
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
• OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
• OCPBUGS-45692: Modified ova template name to use failure domain name #9300
• OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
• NO-JIRA: OWNERS: add thuan #9555
• OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
• OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
• AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
• OCPBUGS-33370: Improve baremetal gather error message #9120
• OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
• OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
• CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
• OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
• CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
• OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
• OCPBUGS-50637: Remove error logging when determining image arch #9531
• OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
• OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
• OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
• OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
• OKD-235: Add stream metadata for scos to be used by OKD #9520
• OCPEDGE-1635: Set default values for arbiter #9530
• OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
• No-ISSUE: (dep) Bump openshift/api #9522
• CORS-3917: Add install config validation for service endpoints #9517
• NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
• OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
• NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
• OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
• SPLAT-1995: vsphere on destroy remove cns volumes #9425
• OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
• OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
• CORS-3869: static validation for new vpc.subnets field #9505
• OSASINFRA-3695: openstack: Create security group rules in batches #9042
• OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
• OCPBUGS-50534: Fix error messages in available IP code #9503
• OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
• OCPEDGE-1310: feat: add arbiter node support to installer #9159
• CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
• OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
• no-jira: Bump cluster-api to v1.9.4 #9411
• OCPBUGS-49351: Add vSphere logic to check for max network count #9419
• CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
• OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
• OCPBUGS-49940: PowerVS: datacenter supported systems #9442
• OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
• OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
• CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
• CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
• OCPBUGS-50899: PowerVS: COS eu-es hack #9490
• OCPBUGS-50920: Rely on path declaration of base image #9491
• OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
• CORS-3835: Add gcp endpoints to the installer config #9363
• OCPBUGS-46488: Validate Encryption Keys for GCP #9328
• OCPBUGS-44507: Check public zone for stray record set #9365
• OCPBUGS-50839: correct typo #9480
• OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
• OCPBUGS-50534: Fix panic when there are no available IPs #9444
• OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
• no-jira: Switch to go.uber.org/mock/gomock #9422
• OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
• no-jira: Relax serviceEndpoint URL validation for IBMCloud platform #9416
• OCPBUGS-50004: Add cluster:master_nodes metric retrieval in docs #9447
• CORS-3825: pkg/infrastructure/azure: support nvme #9232
• OCPBUGS-49737: Custom-DNS: GCP, AWS: Update worker pointer Ignition #9431
• OCPBUGS-46656: validate configured networks to not overlap with OVNKubernetes default subnets #9428
• MGMT-19545: add optional release registry field to the IBI installation config #9394
• OCPBUGS-48044: [Nutanix] Install multi-NICs cluster failed with failureDomains #9376
• OCPBUGS-49784: handle runtime panic when validating ovnKubernetesConfig #9432
• OCPBUGS-48827: aws/edge/byovpc: subnets tag kube cluster tag to shared #9413
• OCPBUGS-49594: aws/byo-ip added required permission ec2:ReleaseAddress #9420
• OCPBUGS-46549: Update RHCOS 4.19 bootimage metadata to 9.6.20250121-0 #9392
• OCPBUGS-48089: validate hostPrefix to be the same when multiple clusternetwork CIDRs are present #9398
• SPLAT-1809: Added vSphere multi disk support #9035
• OSASINFRA-2571: Add quota validation for server group #9326
• OCPBUGS-48228: Envtest: Configure IPv6 service network for API Service #9361
• CORS-3724: bump go v1.23 and k8s dependencies #9396
• CORS-3637: OWNERS files for platform provider subdirectories #9407
• OCPBUGS-47489: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9384
• MGMT-19771: Convert IDS to proper IDMS manifest #9391
• OCPBUGS-47477: aws: skip dead zones on us-east-1 when discovering AZs #9333
• OCPBUGS-48570: [Nutanix] Installation failed with timeout when uploading images to PC #9377
• OCPBUGS-45551: Updating ose-installer-altinfra-container image to be consistent with ART for 4.19 #9275
• no-jira: docs(user): fix grammer in upi install step #9292
• OCPBUGS-48719: Add new tested azure arm instance type to doc #9387
• OCPBUGS-46596: aws/permissions - defaults ec2:DescribeInstanceTypeOfferings #9341
• COS-3013: overlay node image before bootstrapping if necessary #8742
• OCPBUGS-48256: Run iscsiadm for agent-based iSCSI installations #9356
• SPLAT-1742: vSphere - enable host group based zonal #8873
• CORS-3722: bump default channel to stable-4.19 #9375
• CORS-3721: bump default release image to 4.19 #9374
• OCPBUGS-48437: PowerVS: limit by resourceGroupID #9359
• OCPBUGS-46010: wait for at least 3 kube-apiserver instances #9302
• no-jira: Remove myself from reviewers list #9358
• no-jira: images: UPI: use ART repo dir #9360
• OCPBUGS-47156: Bump golang.org/x/net to 0.33.0 #9343
• NO-ISSUE: Fix owning component name in machine config templates #9353
• NO-JIRA: remove the types which failed by RHEL-59521 and add the new gpu vm type #9337
• OCPBUGS-29067: Update MCS Cert and Key files within bootstrap Ignition with UserProvisionedDNS #9238
• NO-ISSUE: Deprecate node-joiner scripts #9304
• MCO-1457: Clean up MCS CA & TLS cert objects for management #9309
• OCPBUGS-45995: Always set AllowCrossTenantReplication parameter to false #9322
• OCPBUGS-46571: Disable IP Forwarding for CAPG Machines #9332
• OCPBUGS-46260: CVE-2024-45337 bump crypto pkg to v0.31.0 #9314
• OCPBUGS-46605: Find instances by label GCP #9336
• OCPBUGS-47504: Power VS: Private DNS service endpoint URL must end with /v1 #9335
• METAL-1137: Enable TLS for ironic API in the bootstrap VM #9189
• OCPBUGS-46144: azure: use separate /var to avoid growfs timeouts #9310
• OCPBUGS-45218: aws: fix perm requirement for edge nodes #9256
• OCPBUGS-46470: Power VS: ResourceManager also to override for Internal deploy #9317
• OCPBUGS-46035: fix skew support for node-joiner #9307
• OCPBUGS-44560: Add note about additional networks using IPv6 #9323
• OCPBUGS-45280: Allow more time for Service Account Creation #9299
• OCPBUGS-46363: Remove narrow timeout from etcd bootstrap member removal gate. #9295
• OCPBUGS-44834: aws: include permissions for edge compute #9230
• OCPBUGS-45984: IBMCloud Fix VPC-COS IAM Auth #9301
• OCPBUGS-45317: node-joiner PXE artifacts should be prefixed “node” #9280
• OCPBUGS-45727: Updating ose-installer-artifacts-container image to be consistent with ART for 4.19 #9284
• OCPBUGS-44641: GCP placing *.apps record in wrong managed zone #9216
• OCPBUGS-45855: If vCenter cluster has no esxi hosts fail with sane msg #9291
• OCPBUGS-45807: aws: fix sts:AssumeRole perm requirement #9287
• OCPBUGS-43779: Destroy all private cluster backend service resources #9270
• OCPBUGS-45162: Delete tagged disks #9274
• OCPBUGS-45482: Wait for etcd bootstrap member removal #9261
• OCPBUGS-45685: Power VS: Create region-zone-sysType hierarchy #9245
• OCPBUGS-45289: capi/aws: use LB name when finding Hosted Zone ID #9263
• OCPBUGS-45678: Updating ose-baremetal-installer-container image to be consistent with ART for 4.19 #9282
• OCPBUGS-45656: Updating ose-installer-container image to be consistent with ART for 4.19 #9279
• OCPBUGS-44925: aws: add ec2:AllocateAddress perm requirement. #9234
• OCPBUGS-44523: Remove unused variable from ASH arm template 06_workers.json #9204
• OCPBUGS-45491: Align vSphere UPI haproxy config with IPI #9273
• OCPBUGS-44938: Handle multiple mirror entries for source #9266
• OCPBUGS-45286: PowerVS: Listen to machineNetwork #9254
• ARO-12457: Include bootstrap docker config file in go module #9248
• OCPBUGS-45175: Ironic external url port should change based on protocol #9249
• NO-ISSUE: imagebasedinstaller: support json files in extramanifests directory #9136
• OCPBUGS-44924: aws: add missing ec2:GetConsoleOutput perm requirement #9233
• OCPBUGS-44193: move GCP zone filtering client-side #9169
• OCPBUGS-43561: add zsh completion #9116
• Full changelog

baremetal-machine-controllers

• METAL-1300: Update CAPB to support disablePowerOff #235
• NO-ISSUE: Update OWNERS #233
• NO-ISSUE: Update BMO and MAO #232
• OCPBUGS-47536: Bump x/net to 0.33.0 #223
• OCPBUGS-45534: Updating baremetal-machine-controller-container image to be consistent with ART for 4.19 #222
• Full changelog

baremetal-operator

• OCPBUGS-59133: Unblock BMH direct deletion when detached annotation is present #423
• OCPBUGS-56765: Make firmware update handle only a subset of Spec.Updates #420
• OCPBUGS-56026: Redfish: correctly handle missing system ID #415
• METAL-998: Merge upstream #413
• OCPBUGS-54582: Sync apr 2 #410
• OCPBUGS-53233: Sync mar 18 #403
• NO-ISSUE: Upstream Sync Mar 10 #401
• OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
• OCPBUGS-51294: Merge upstream #398
• OCPBUGS-45252: Merge upstream #397
• OCPBUGS-44949: Merge upstream #394
• NO-ISSUE: Merge upstream #392
• NO-ISSUE: Sync dec 16 #391
• OCPBUGS-45668: Updating ose-baremetal-operator-container image to be consistent with ART for 4.19 #387
• OCPBUGS-45252: Merge upstream #386
• Full changelog

baremetal-runtimecfg

• OCPBUGS-57781: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #352
• OPNET-629: Use HAProxy monitor endpoint instead of API #343
• OCPBUGS-48469: Pass in platform as a optional parameter to runtimecfg cmds #345
• OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
• OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
• Revert “OPNET-629: Use HAProxy monitor endpoint instead of API” #342
• OPNET-629: Use HAProxy monitor endpoint instead of API #336
• OCPBUGS-48194: Bump logrus version #338
• OCPBUGS-45431: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.19 #335
• OCPBUGS-44694: Extend haproxy-monitor fall time #334
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-58077: Return error in case of error #2052
• OCPBUGS-56905: avoid transfering permissions when copying artifacts from node-joiner pod #2032
• OCPBUGS-56511: Replace colon to hypen in the filename while extracting tar on Windows #2024
• OCPBUGS-56203: Adding sos.conf file for default sos config into the tools image #2020
• OCPBUGS-53106: Get installer image from configMap for node-image command #2005
• OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
• NO-JIRA: adm release new: simplify writePayload #2008
• COS-3023: Fixing rpmdiff permissions when running in container #2006
• COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
• NO-JIRA: adm release new: simplify writePayload #1997
• NO-JIRA: adm release new: simplify no operator error condition #1999
• OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
• NO-JIRA: debug: suggest nsenter instead of chroot #1991
• OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
• OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
• OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
• NO-JIRA: Bump x/oauth2 and x/crypto #1984
• OCPBUGS-51254: Bump indirect dependency go-jose to 4.0.5 version #1983
• NO-ISSUE: pkg/cli/admin/upgrade/recommend: Configureable version for test fixtures #1981
• NO-ISSUE: Test case for lowercase Jira ticket names #1964
• NO-ISSUE: pkg/cli/admin/upgrade/recommend: “Upstream” -> “Upstream update service” #1980
• trt-1995: Update Unconditional Feature Gate Notation #1979
• OCPBUGS-50682: OCPBUGS-50683: Correct oc adm top pvc messages #1974
• WRKLDS-1653: Update k8s dependencies to 1.32 #1971
• OTA-1426: pkg/cli/admin/upgrade: Check and display interesting alerts #1970
• NO-JIRA: Sanitize tar header name as it is used in path #1969
• OCPBUGS-49450: Address github.com/docker/docker CVE #1960
• NO-ISSUE: admin/upgrade/status/examples/README: Document *-alerts.json #1959
• OCPBUGS-38975: monitor should not exit for temp api disconnect #1949
• NO-ISSUE: Remove experimental tag for –report and –pxe #1956
• OCPBUGS-46361: Mark adm pod-network command as hidden and depcated #1955
• OTA-1393: status: recognize multi-arch in node phase (2) #1933
• OCPBUGS-19824: release new: replace 0.0.1-snapshot in all manifests #1945
• OCPBUGS-18961: pkg/cli/admin/release/extract_tools: Enable ImageRegistry, etc. on 4.13-to-4.14 #1539
• OCPBUGS-45991: Mark –report and –pxe flags as experimental #1951
• OCPBUGS-45311: fix oc adm node-image create –pxe command to copy the correct artifacts #1931
• OCPBUGS-45754: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.19 #1946
• NO-JIRA: adm release: simplify safe manifests mappers #1942
• OCPBUGS-45454: Update to 4.19 and Go 1.23.0 #1938
• NO-JIRA: adm release: clarify manifest processing #1936
• OCPBUGS-45363: adm node-logs: Also parse logs when encountered with standard html header #1934
• NO-JIRA: adm release: simplify image-references check #1930
• OTA-1393: status: recognize multi-arch in node phase #1928
• OCPBUGS-45022: Obfuscate sensitive data in Proxy resource while inspection #1929
• OTA-1393: status: recognize multi-arch in target version #1926
• no-jira: Documentation fix: add missing whitespace character #1911
• NO-JIRA: adm release: simplify manifest iteration #1917
• OTA-1393: status: compute mcoImagePullSpec only once #1924
• Full changelog

cloud-credential-operator

• OCPBUGS-59401: github.com/golang/glog v1.2.5 #890
• OCPBUGS-58246: ccoctl: only add owned tag to azure resources on create #881
• OCPBUGS-55798: Sync OpenStack CA Bundles from legacy location #866
• OCPBUGS-56978: Azure: resolve nil pointer exception when role assignment exists #870
• OCPBUGS-55903: Render: configure proxy on bootstrap static pod #857
• OCPBUGS-56054: golang.org/x/net v0.38.0 #858
• OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
• OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
• OCPBUGS-53824: update github.com/golang-jwt/jwt #836
• NO-JIRA: Report the error when syncing STS secrets #827
• OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
• OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
• CCO-647: Enable readOnlyRootFilesystem on all containers #819
• OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
• NO-JIRA: Add dry-run on aws create-all command #818
• NO-JIRA: add example of how to build from source #820
• CCO-629: Update modules to latest #817
• NO-JIRA: docs: rotate oidc key to use less opinionated CLUSTER_NAME #816
• CCO-631: Upgrade to k8s v0.32.0 #814
• CCO-626: pkg/operator/utils: Log diff on CredentialsRequest status change #811
• OCPBUGS-47466: golang.org/x/net v0.33.0 #803
• OCPBUGS-45699: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.19 #796
• OCPBUGS-41727: Add AWS region to aws-pod-identity-webhook #789
• NO-JIRA: docs: rotate azure key to use more accurate variable commands #797
• NO-JIRA: Fix JSON for 07-block-public-access-to-oidc-bucket.json #762
• OCPBUGS-44933: Add retry to ccoctl gcp create functions #781
• NO-JIRA: docs: rotate oidc key to specify azure storage account variables #790
• OCPBUGS-44999: github.com/golang-jwt/jwt/v4 v4.5.1 #782
• Full changelog

cloud-network-config-controller

• OCPBUGS-45891: Increase API call timeout to 30 second #168
• CNTRLPLANE-112: Remove ARO HCP MIv2 authentication from CNCC #169
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
• OSASINFRA-3755: Prefer CA cert from credentials secret #167
• OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
• SDN-5690: Rebase k8s to 1.32 #163
• OCPBUGS-45631: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.19 #160
• Full changelog

cluster-authentication-operator

• OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
• OCPBUGS-48176: Avoid duplicate OAuth client creation #757
• OCPEDGE-1510: feat: add minimum count for DualReplica #761
• OCPEDGE-1610: bump(kube,library-go,ocp/api): #759
• NO-JIRA: Keycloak e2e test improvements #714
• OCPBUGS-51981: fix: update starter path to account for mom integration #760
• CNTRLPLANE-71: update cao to manage rolebindingrestriction crd #748
• AUTH-541: OIDC structured auth config #713
• CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #751
• NO-JIRA: OWNERS: update approvers #756
• MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #752
• OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #753
• OCPEDGE-1306: feat: change minimum for arbiter ha deployments #734
• NO-JIRA: fix: resolve some integration tests #750
• API-1835: bring MOM up to date for testing and the like #744
• OCPBUGS-23435: bump library-go to bring in workload-conditions fix #739
• Full changelog

cluster-autoscaler

• OCPBUGS-59638: fix checkpoint gc of unknown recommenders #366
• OCPBUGS-54231: Fix cool down status condition to trigger scale down #355
• OCPCLOUD-2835: rebase on upstream 1.32.0 release #340
• NO-JIRA: improve nodes listing in ClusterAPI provider #354
• OCPBUGS-11115: refactor findScalableResourceProviderIDs #349
• OCPBUGS-11115: improve failed machine detection in clusterapi #347
• OCPBUGS-11115: make DecreaseTargetSize more accurate #343
• OCPBUGS-11115: improve replica counting on openshift #278
• OCPCLOUD-2500: Update to recognize both upstream and openshift ScaleFromZero annotations #335
• PODAUTO-266: Update VPA dockerfile to 4.19 #334
• OCPBUGS-25852: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #332
• OCPBUGS-45686: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.19 #331
• OCPBUGS-45565: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.19 #330
• OCPBUGS-45075: VPA OWNERS: Remove John Kyros, et al., add Max Cao #322
• Full changelog

cluster-autoscaler-operator

• OCPCLOUD-2829: Bump k8s 1.32 #339
• OCPBUGS-45451: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.19 #336
• Full changelog

cluster-baremetal-operator

• OCPBUGS-57504: Treat ResourceNotFound as non-fatal #484
• OCPBUGS-56644: Allow provisioningIP when network disabled #474
• OCPBUGS-53330: Update BMO to latest #468
• OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
• OCPBUGS-51275: Add new resources to controller relatedObjects #465
• OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
• OCPBUGS-51275: add missing relatedObjects #461
• METAL-1286: Remove legacy unused annotation exclude.release.openshift.io/internal-openshift-hosted #462
• OCPEDGE-1607: feat: add arbiter node selector #460
• OCPBUGS-36357: Replace watches with actual Watches #452
• OCPBUGS-45418: Use go version 1.23 and OCP 4.19 base image #457
• Full changelog

cluster-bootstrap

• OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
• OCPBUGS-48821: bootstrap API server should terminate only after API is HA #111
• OCPBUGS-45351: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.19 #110
• Full changelog

cluster-capi-controllers

• OCPBUGS-55998: Regenerate manifests to drop usage of v1beta1 admissionregistration #237
• OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
• OCPCLOUD-2680: Enable machine to node propagation #229
• NO-JIRA: Update manifests generator tooling #232
• OCPCLOUD-2680: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master #231
• OCPCLOUD-2857: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master #230
• OCPBUGS-45428: Updating ose-cluster-api-container image to be consistent with ART for 4.19 #228
• Full changelog

cluster-capi-operator

• OCPBUGS-59228, OCPBUGS-59229: fix: clusteroperator: do not update status.relatedobjects if only order changed #332
• OCPBUGS-57449: mapi2capi: Create new machine template when changing MAPI providerSpec #317
• OCPBUGS-56776: fix: ensure CAPI machineset is created not paused when authoritative #304
• OCPBUGS-56714: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #305
• OCPBUGS-56633: fix: watch CAPI resources in the migration controllers #303
• OCPBUGS-56722: MachineSet deletion logic #302
• OCPBUGS-56105, OCPCLOUD-2893: Add related objects to must-gather config #296
• OCPBUGS-56055: fix: machine: propagate non-authoritative deletion #294
• OCPBUGS-55998: Should not use v1beta1 of the AdmissionRegistration API group #291
• OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
• NO-JIRA: Prevent caching CAPI objects across namespaces #285
• METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
• OCPCLOUD-2648: Machine sync controller deletion logic #278
• OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
• OCPCLOUD-2564: add migration controllers #268
• OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
• OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
• METAL-966: Add metal3 provider #175
• OCPCLOUD-2895: Add AWS networkInterfaceType to conversion #280
• OCPCLOUD-2712: Update comments based on Security Group Investigation #279
• OCPCLOUD-2716: Handle Machine owner references translation between MAPI and CAPI #271
• NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 #275
• OCPCLOUD-2647: CAPI to MAPI Machine Synchronisation #265
• NO-JIRA: Update version variable in generate-ocp-manifests hook script #277
• NO-JIRA: fix: e2e: azure conditionally set identity #276
• TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
• OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
• OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
• NO-JIRA: Update TODOs with new Jira issues #269
• OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
• OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
• OCPCLOUD-2645: MAPI to CAPI Machine synchronization #258
• NO-JIRA: Add lifecyclehook script that updates manifests-gen #264
• NO-JIRA: Remove unused Dockerfile #255
• OCPCLOUD-2824: Add manifest generation script for rebasebot #257
• OCPCLOUD-2792: Repurpose unsupported controller to a broader clusteroperator one #254
• MULTIARCH-5043: Add Powervs support for CAPI-MAPI conversion #216
• OCPBUGS-29815: fix: always update clusteroperator status versions when differing #248
• OCPCLOUD-2642: Reference ASO image for installation #235
• OCPBUGS-45392: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.19 #241
• OCPCLOUD-2202: Create and manage core cluster object #236
• OCPCLOUD-2787: Add missing CustomNoUpgrade to manifests #244
• OCPCLOUD-2644: MAPI to CAPI MachineSet synchronization #237
• OCPCLOUD-2787: Updates migration controller cmd #243
• OCPCLOUD-2787: Updates migration cmd to change metrics port #242
• OCPCLOUD-2787: Deploy manifests for CustomNoUpgrade feature-set #238
• OCPCLOUD-2647: Updates machine-api-migration cmd #239
• MULTIARCH-5151, MULTIARCH-5152: Generate IBMPowerVSCluster resource for CAPI clusters #233
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-59847: Adds service for cloud-controller-manager #402
• OCPBUGS-59847: Update service selector to match deployment label #401
• OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
• OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
• OCPBUGS-41827: update injector to support secret as well #385
• OCPBUGS-48481: annotation validation policy #379
• OCPCLOUD-2843: AWS CCM should be configured with the AWS cloud provider config #384
• OCPCLOUD-2831: Bump k8s 1.32 #382
• OCPCLOUD-2843: Add AWS Cloud Config Transformer to set Shared config for AWS LB health probes #383
• OCPCLOUD-2844: Add role/binding for new Azure AKS lease #381
• OCPBUGS-44126: update azure permissions #376
• OCPBUGS-45439: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.19 #377
• OCPBUGS-45439: Update golangci-lint to v1.62.2 #378
• Full changelog

cluster-config-api

• OCPBUGS-56773: disable psa for 4.19 #2346
• OCPBUGS-56761: Revert v1alpha1 removal #2345
• OCPBUGS-56407: Fix validation for Resource field in MOSB API #2329
• Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
• OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
• OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
• MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
• Fix broken ControlPlaneMachineSet integration tests #2296
• OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
• features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
• NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
• OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
• OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
• OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
• CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
• MON-4071: GA MetricsCollectionProfiles #2286
• CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
• Promote OnClusterBuild featuregate to default #2192
• trt-2080: check devlopment start date for latest release #2285
• NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
• TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
• Temporarily pin feature-gate-analyzer to 4.19 #2276
• image/v1/types: improve documentation #2240
• NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
• SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
• OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
• SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
• MCO-1630: Generate v1 crds for PIS #2257
• IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
• NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
• NO ISSUE: Tombstone Spec.PinnedImageSets in MCN v1alpha1 API #2256
• OCPNODE-2877: Remove support to configure cgroupsv1 in OCP #2181
• Ignore partial manifests when running schemacheck #2251
• MCO-1543: Update v1alpha1 MCN API #2201
• Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
• CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
• API-1843: FeatureGate(d) KMS encryption #2035
• CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
• MCO-1521: Promote PinnedImageSet to GA #2198
• Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
• Update KAL and remove patch strategy tags #2241
• STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
• MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
• API-1689: features: add ShortCertRotation #1977
• NE-1954: Introduce GatewayAPIController feature gate #2219
• CCXDEV-14850: insights add storage spec #2200
• Support SEV_SNP and TDX confidential instance type selection on GCP #2165
• OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
• OCPEDGE-1512: feat: add dualreplica featuregate #2196
• STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
• Add changes to infrastructure object to contain service endpoints and feature flag added #2078
• security: add annotation for validated SCC type #2211
• NO-JIRA: Add example of excluding subnets pattern #2213
• OCPNODE-2339: Add PKI field to (cluster)imagepolicy #2088
• OCPBUGS-50587, OCPBUGS-51272: Reject new NodeStatus with revision set #2208
• Fix FeatureGateNewOLMCatalogdAPIV1Metas spelling error #2214
• OCPBUGS-32158: Add CEL validation for RegistrySources in Image API #1859
• no-jira: correct default CIDR for ipv6 join subnet in API descriptors #2184
• featuregate for catalogd metas web api #2202
• CORS-3842: Add API Updates for GCP Custom API Endpoints #2150
• NO-JIRA: bump controller-tools dependency to latest downstream commit #2207
• SPLAT-2000: Add configuration for vSphere multi disk thinProvisioned #2154
• NE-1871: Promote GatewayAPI to Tech Preview #2081
• OCPBUGS-44199: Allow spaces in AWS tags #2124
• OCPBUGS-48542: Remove Never option from IPsec Encapsulation #2199
• OCPBUGS-42701: api: Updated the disableMultiNetwork parameter description #2143
• ClusterOperator Conditions should be a listType=map #2194
• Add the field “MarketType” to “AwsMachineProviderConfig” #2172
• SDN-4930: Graduate UserDefinedNetworks to GA #1997
• OCPBUGS-49779: Use BASE_REF env var to pull the release version for sippy data #2187
• OCPBUGS-48078: Add ratcheting tests for PowerVS service endpoints #2142
• NO-JIRA: upkeep: update component name for arbiter feature #2182
• NO-JIRA: Add envtest archives for K8s 1.32.1 #2185
• OTA-209: operator/v1alpha1: Add the ClusterVersionOperator to scheme #2162
• OCPBUGS-45689: Updating ose-cluster-config-api-container image to be consistent with ART for 4.19 #2118
• OCPBUGS-48740: Remove unnecessary object-src directive #2176
• OSASINFRA-3690: Fix typo #2168
• OAPE-94: Update API doc for route externalCertificate #2159
• Fix race in tests using CRD patches for ratcheting #2175
• OCPBUGS-39148: Add Feature Gate AND on NetworkLoadBalancer CEL #2131
• Drop feature promotion from main verify check #2174
• Add separate Make target for feature promotion #2173
• Change OCL CRD deployment to v1 from v1alpha1 #2134
• OCPBUGS-48260: Update dns1123Subdomain validation message for machineNamePrefix #2147
• CNTRLPLANE-2: Update kubernetes to 1.32 #2096
• Fix handling of validations that require multiple feature gates #2133
• Update KAL to introduce statussubresource and maxlength linters #2160
• OCPBUGS-48740: Add missing CSP directives #2163
• SPLAT-2008: Update vSphere multi disk api size limit doc #2161
• Monitoring Config should start life as v1alpha1 #2155
• OSASINFRA-3689: Deprecate unused MAPO fields #1963
• Update linter fixing to use golangci-lint #2141
• CNV-47438: ipam, virt: graduate persistent ips feature gate to GA #2058
• SPLAT-1808: Add vSphere multi disk support #2028
• Add the option to test ratcheting validations within integration tests #2132
• MCO-1443: Promote onclusterbuild to GA #2090
• MON-3902: add initial Monitoring CRD api #1929
• Add section about why we start APIs as v1alpha1 #2130
• Add verify-lint-fix make target #2126
• Add path warning for protobuf updates #2129
• Update KAL with bug fixes for embedded fields #2128
• OCPBUGS-40906: Add encapsulation flag to IPsecConfig struct #1472
• OCPBUGS-43745: Add IdleCloseOnResponse field to IngressControllerSpec #2102
• Update KAL to introduce new linters #2125
• OTA-1029: Add ClusterVersionOperator API #2044
• OCPBUGS-46380: StaticPodOperatorStatus validation should reject downgrades and concurrent node rollouts #2123
• alert-relabel list should not be a pointer #2122
• OCPBUGS-35196: Insights types - fix duration validation #1918
• OCPEDGE-1307: feat: add HighlyAvailableArbiter control plane topology as feature for techpreview #2082
• API-1843: KMSEncryptionProvider Feature Gate #2071
• ClusterNetworkOperator API: promote the additionalRoutingCapabilities gate #2087
• For the love of consistency… Apply linter auto-fixes #2116
• Introduce KAL (Kube-API-Linter) to API repo #2114
• Revert “OCPBUGS-44693: Disable ResilientWatchCacheInitialization” #2113
• SPLAT-1743: vSphere - add host and vm based zonal #1999
• CFE-1167: Feature-gated MachineNamePrefix field for CPMS #2086
• OCPBUGS-44693: Disable ResilientWatchCacheInitialization #2111
• Add example format validation #2110
• SPLAT-1743: Add VMGroup to VSphere Provider workspace #2074
• Update kubebuilder assets to include format library #2109
• CFE-1168: Add CMPSMachineNamePrefix feature-gate #2094
• STOR-1823: Remove CSIDriverSharedResource feature gate #2052
• Full changelog

cluster-config-operator

• OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
• OCPBUGS-52744: Bump golang.org/x/crypto #433
• OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
• OCPBUGS-45477: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.19 #430
• OCPEDGE-1308: bump(api,k8s) #428
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
• OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
• SPLAT-2079: Removed VSphereControlPlaneMachineset feature gate #354
• OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
• OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
• OAPE-126: Include CPMSMachineNamePrefix feature-gate name in e2e tests #351
• OCPBUGS-50580: Fix MachineNamePrefix periodic on OpenStack #349
• OCPCLOUD-2834: Update dependencies to K8s 1.32 #345
• SPLAT-1817: Bump openshift/api to get vSphere multi disk support #335
• SPLAT-1799: Add support for vSphere host and vm group based zonal #325
• NO-JIRA: Update support matrix #339
• OAPE-78: Add e2e periodic job for machine name prefix #338
• OAPE-19: Support customized control plane machine names with prefix #332
• OCPBUGS-45449: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.19 #334
• OAPE-18: Bump openshift/api to vendor machineNamePrefix field #333
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-2126: Enable readOnlyFileSystem #229
• STOR-1880: Role and ClusterRole with too wide permissions #235
• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #234
• STOR-2281: Remove csi-snapshot-validation-webhook references #231
• OCPBUGS-24588: bump library-go #233
• STOR-2252: Bump all deps #228
• OCPBUGS-45073: Support HCP labels #223
• STOR-2136: Enable volume groupsnapshots APIs v1beta1 version #219
• OCPBUGS-45471: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.19 #220
• Full changelog

cluster-dns-operator

• OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
• OCPBUGS-45558: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.19 #425
• Full changelog

cluster-etcd-operator

• OCPBUGS-59285: fix ordering on bootstrap IP selection #1446
• OCPBUGS-45731: Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 #1376
• OCPBUGS-59313: add missing ports to svc and pod spec #1447
• OCPBUGS-57956: feat: update logic to list arbiter nodes #1437
• OCPBUGS-57490: Comply with OCP pod standards for TNF jobs #1434
• OCPBUGS-56806: increase tnf job timeouts #1427
• OCPBUGS-56109: adjust alerts according to platform #1423
• OCPBUGS-55691: Remove ‘meta’ keyword from pcs resource create command #1420
• OCPEDGE-1773: Fix arbiter field in install-config #1409
• OCPBUGS-53512: fix CVE-2025-30204 #1412
• OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
• OCPEDGE-1498: support updates to external etcd #1399
• OCPEDGE-1500: Added scaling strategies for TNF #1396
• OCPBUGS-48523: Bump to Kubernetes 1.32 and latest library-go. #1392
• OCPBUGS-48400: generate event upon successfull bootstrap member removal #1391
• NO-JIRA: fix schedule backup test #1393
• OCPBUGS-48523: Bump library-go for static pod controller apply migration fixes. #1387
• OCPEDGE-1195: Arbiter node support #1366
• OCPEDGE-1435: bump(library-go,ocp/api,ocp/client-go) #1378
• OCPBUGS-42809: always ensure quorum during bootstrap #1372
• ETCD-677: add unsupported config override for etcd container removal #1352
• OCPBUGS-43748: etcd pod containers do not start when tls min version is 1.3 #1364
• Full changelog

cluster-image-registry-operator

• OCPBUGS-53872: bump github.com/golang-jwt/jwt #1214
• OCPBUGS-56363: bump golang.org/x/oauth2 #1207
• OSASINFRA-3747: Prefer CA cert from credentials secret #1190
• OCPBUGS-45409: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 #1196
• CNTRLPLANE-112: Authenticate to Azure only once in CPO #1194
• CNTRLPLANE-112: Bump msi-dataplane dependency #1187
• CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-image-registry #1174
• NO-JIRA: update owners #1178
• OCPBUGS-50950: ensure that storage names don’t end in dashes #1177
• OCPBUGS-47503: Power VS: Revert #1076 to match new API validation #1168
• MULTIARCH-4971: Set import mode in image config based on ClusterVersion desired Architecture #1164
• OCPBUGS-44491: add runbook url on prometheus alert rules #1159
• OCPBUGS-41903: operator/status: clear azure path fix job conditions on operator removal #1142
• Full changelog

cluster-ingress-operator

• OCPBUGS-60204: Update GatewayAPI test to check if deployment has 1 or more pod #1260
• NE-2109: Add OSSM channel and version override annotations #1252
• NE-2105: desiredIstio: Enable GIE if InferencePool found #1251
• NE-2103: Bump to OSSM 3.0.1 and Istio 1.24.4 #1244
• OCPBUGS-58394: desiredIstio: Do not enable a default PDB #1241
• OCPBUGS-56213: Check capabilities before watching OLM resource #1233
• CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
• NE-2009: Relax pod bound validating admission rule for HyperShift #1221
• NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
• NE-1957: Add Gateway API DNS Feature e2e tests #1213
• OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
• NE-2009: Move VAP to Default featureset #1216
• OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
• OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
• NE-2008: Add GRPC conformance tests #1208
• NE-1277: status: Add Gateway API objects to relatedObjects #933
• NE-1994: Add E2E test for Istio manual deployment #1204
• NE-1969: Add “v1” version to OpenShift GatewayClass controller name #1202
• NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
• CORS-3907: Update ingress operator to with custom endpoints #1197
• NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
• NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
• NE-1981: Move controller test helpers to dedicated package #1199
• NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
• NE-1954: Implement GatewayAPIController feature gate #1198
• NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
• OCPBUGS-31550: Gateway API - recreating SMCP which breaks Gateway API #1115
• OCPBUGS-32776: Fix IBM Public Cloud DNS Provider Update Logic #1133
• OCPBUGS-48780: Fix IBMCloud DNS Propagation Issues in E2E #1164
• OCPBUGS-43745: Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled #1186
• NE-1260: Add Makefile target to run Gateway API conformance tests #1176
• OCPBUGS-43745: Add support for IdleCloseTerminationPolicy (Go http.Client) #1182
• OCPBUGS-45585: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.19 #1173
• OCPBUGS-41892: Single Watch on GWAPI CRD #1165
• NE-1790: Follow up to enable Dynamic Configuration Manager feature gate #1174
• SPLAT-1722: Remove alibaba #1111
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-59957: Add missing service ports to apiserver service #1880
• Revert “[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again” #1867
• OCPBUGS-58116: certregenerationcontroller: start configInformers again #1861
• OCPBUGS-56160: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1841
• OCPBUGS-56266: SCC: add hostmount-anyuid-v2 #1844
• OCPBUGS-55709: bump library-go to bring in updated audit policies #1840
• OCPBUGS-45911: revert dev cert rotation #1835
• Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
• OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
• CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
• MON-4161: add cluster:controlplane_topology:sum recording rule #1829
• MON-4160: operator: add topology metrics #1827
• OCPBUGS-35102: Bump library-go #1824
• NO-JIRA: readme: describe mapping between operatorLogLevel and log level #1820
• AUTH-541: OIDC structured auth config #1760
• OCPNODE-2940: add support for minimumKubeletVersion #1754
• MON-4129: slos: accomodate for Prometheus v3 “le” normalization #1815
• MON-4129: revert https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784 #1817
• NO-ISSUE: Bump TraceAll log level to v=10 #1814
• OCPBUGS-48673: targetconfigcontroller: check live etcd endpoints #1792
• API-1689: TLS registry: add description #1763
• OCPBUGS-49980: change one sum:apiserver_request:burnrate5m to sum:apiserver_request:burnrate6h #1804
• OCPBUGS-49763: Disregard health endpoints in the burn rate alerts #1742
• OCPQE-28167: Increase waitForFallbackDegradedConditionTimeout #1789
• OCPBUGS-49764: bindata/alerts/slo: improve burnrate calculation #1744
• OCPBUGS-48686: bump(library-go) #1795
• MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in rules defs and relabel config to accommodate the update to Prometheus v3 #1784
• NO-JIRA: alerts: update APIRemovedInNextEUSReleaseInUse for 1.32 #1794
• CNTRLPLANE-20: Update to Kubernetes 1.32.1 #1791
• OCPBUGS-45654: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.19 #1786
• OCPBUGS-48686: Bump library-go for static pod controller apply fixes. #1787
• NO-JIRA: bump library-go #1779
• OCPBUGS-45943: skip generating certs when networkConfig.status.ServiceNetwork is nil #1776
• CNTRLPLANE-1: Add resource.k8s.io/v1beta1 API for Kubernetes 1.32 #1777
• NO-JIRA: Revert Disable ResilientWatchCacheInitialization #1771
• OCPBUGS-44693: Disable ResilientWatchCacheInitialization #1769
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-45390: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.19 #56
• ACM-14968: Modified readme for cert-manager changes. #55
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-60132: Missing endpoint slices for open ports the operator uses #853
• OCPBUGS-54945: Bump library-go #838
• STOR-2267: Run SELinux warning controller #834
• NO-JIRA: readme: describe mapping between operatorLogLevel and log level #835
• NO-JIRA: readme: describe mapping between logLevel and log level #833
• NO-ISSUE: Bump TraceAll log level to v=10 #828
• OCPBUGS-48701: Bump to latest library-go #831
• CNTRLPLANE-21: Update to Kubernetes 1.32.1 #830
• OCPBUGS-48701: Bump library-go for static pod controller apply fixes. #829
• OCPBUGS-45825: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.19 ++ #826
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-54945: Bump library-go #560
• OCPBUGS-48700: Bump to latest library-go #558
• CNTRLPLANE-22: Update to Kubernetes 1.32.1 #557
• OCPBUGS-48700: Bump library-go for static pod controller apply fixes. #556
• OCPBUGS-45724: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.19 #554
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-45640: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.19 #122
• API-1835: bump library-go #120
• OCPBUGS-20062: “gracefully” shutdown KSVM pod. #118
• Full changelog

cluster-machine-approver

• OCPCLOUD-2832: Bump k8s 1.32 #268
• OCPBUGS-48056: Fix race condition in CO status controller test #264
• OCPCLOUD-2787: Deploy CAPI manifests in CustomNoUpgrade #262
• OCPBUGS-36404: Filter CSRs by signerName #243
• OCPBUGS-45434: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.19 #247
• OCPBUGS-45306: Ensure trailing dots on DNS names do not block serving cert auth #253
• OCPBUGS-45306: Client internal DNS checks should ignore trailing dot #248
• Full changelog

cluster-monitoring-operator

• OCPBUGS-59932: operator: increase wait time till degraded to max 4 times 5m #2629
• OCPBUGS-57185: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2609
• OCPBUGS-55737: [release-4.19] MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2597
• NO-JIRA: Synchronize versions of the downstream components #2594
• MON-4207: Bump prometheus-operator to v0.81.0 #2593
• NO-JIRA: [bot] Synchronize versions of the downstream components #2589
• MON-4161: add topology telemetry signals #2588
• MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
• MON-4150: chore: update prometheus-operator go dep #2586
• OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
• MON-4149: chore: update library-go #2587
• OCPBUGS-54223: Fix opentelemetry processor/receiver/exporter/extensions labels #2583
• MON-4188: Add docs for proxy_url alertmanager #2582
• NO-JIRA: [bot] Synchronize versions of the downstream components #2577
• MON-4189: Updating node-exporter accelerators configmap #2558
• MON-4043: Configuring external Alertmangers with proxy_url #2580
• MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
• MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
• NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
• OU-515: remove old nginx configmap deletion #2575
• NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
• MON-4147: test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567
• OCPBUGS-50837: Fix opentelemetry metrics to use regexp on label match #2568
• OCPBUGS-50703: Add incidents metric to telemetry #2569
• NO-JIRA: Bump prometheus-operator to v0.80.0 #2565
• MON-3866: create separate metrics client cert for metrics server #2536
• NO-JIRA: tweak asciiDocs formatting to ease the mapping into the monitoring Docs #2563
• OCPBUGS-48381: jsonnet: switch telemeter to main #2560
• OCPBUGS-48376: jsonnet: switch openshift-state-metrics to main branch #2559
• OCPBUGS-48370: chore: rename default branch in various places #2561
• NO-JIRA: [bot] Synchronize versions of the downstream components #2531
• OCPBUGS-48074: Fixing telemetry rule for accelerators #2551
• MON-4107: chore: add logs (at v=3 level) regarding the deactivation of components #2546
• OCPBUGS-31356: chore(client): DeleteXXX short-circuit if the resource doesn’t exist as a GET is less expensive than a no-op DELETE #2547
• MON-4118: chore: use alertmanager v2 in tests as v1 is not longer supported in Prometheus 3 #2544
• NO-JIRA: fix TestPrometheusRemoteWrite to align the image used for th… #2543
• NO-JIRA: Bump prometheus-operator to 0.79.2 #2542
• MGMT-19498: Fixing the configmap data fields #2540
• NO-JIRA: Bump prometheus-operator to v0.79.1 #2538
• MGMT-19498: Adding accelerators configuration file to the node-exporter #2530
• OCPBUGS-35095: unpin kubernetes-mixin #2422
• OCPBUGS-45389: update image to be consistent with ART for 4.19 #2533
• OCPBUGS-35726: remove certificate hash annotation for monitoring-plugin #2524
• OCPBUGS-45179: Use explicit name label for logging telemetry metrics #2529
• NO-JIRA: [bot] Synchronize versions of the downstream components #2527
• OCPBUGS-44831: disable token automount for alertmanager-user-workload SA #2522
• NO-JIRA: use scrape class to avoid TLS config repetitions #2492
• Full changelog

cluster-network-operator

• OCPBUGS-60095: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2762
• OCPBUGS-59645: [release-4.19] BGP related backports #2748
• OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
• OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
• OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
• OCPBUGS-54238: Update CSR status condition appropriately #2674
• CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
• SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
• CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
• CORENET-5856: Update RouteAdvertisements schema #2685
• OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
• CORENET-4481: update install-cni script #2676
• SDN-5342: Signer username validation #2560
• OCPBUGS-53180: Add IPv6 NGINX configuration #2681
• CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
• SDN-5689: Rebase k8s v1.32 #2656
• OCPBUGS-54159: frr-k8s: tolerate all taints #2677
• OCPBUGS-5241: Auto opt in for whereabouts-controller #2670
• OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
• CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
• OCPBUGS-52972: Correct namespace ref and cert dir #2665
• NO-JIRA: ovn-k: sync EgressService with upstream #2664
• OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
• SDN-4829: Add machine config watchers to report IPsec status #2383
• NP-1100: Enable fast ranges #2648
• NO-JIRA: Add “centos” to supported OS ids #2652
• SDN-5330: Keep rendering OVN IPsec when its daemonset not available #2628
• OCPBUGS-49746: ovn-k,cudn crd: Ensure matching toplogy and topology-config #2638
• OCPBUGS-48312: frr-k8s: align manifests with operator #2615
• OCPBUGS-49621: Fix UDN and CUDN hostSubnet validation #2636
• OCPBUGS-49667: OVNK should be able to annotate network ID on NADs #2634
• OCPBUGS-46564: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2610
• SDN-5426: ©UDN CRD: add IPAM section and IPAM.Mode field. #2623
• SDN-5330: Keep IPsec in OVN enabled during the upgrade #2621
• OCPBUGS-48425: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2619
• SDN-4930: Fix user-defined-networks-namespace-label binding #2616
• SDN-4930: Add host isolation mounts to ovnkube-node #2591
• SDN-4168: Cleanup ipsec state only when ipsec is not full mode #2611
• OCPBUGS-42609: Disable adding/removing the UDN namespace label #2612
• SDN-5085: Add support for route advertisements #2442
• CNF-15518: Bump the openshift api version #2586
• OCPBUGS-46065: Skip including default crypto policies to avoid authby issue #2590
• OCPBUGS-33656: Remove ip xfrm state when IPsec is disabled #2372
• OCPBUGS-45341: iptables-alerter daemonset should run everywhere #2581
• OCPBUGS-42189: Re-disable metrics server #2516
• OCPBUGS-44950: Propagate HCP pods labels to 2nd level operands #2567
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-52853: Do not add iommu.passthrough to ARM by default (#1358) #1358
• OCPBUGS-58144: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1348) #1348
• OCPBUGS-57148: E2E: Functional tests for align cpus by UncoreCache Feature (#1336) #1336
• E2E: use 4 cpus for reserved from available cpus (#1337) #1337
• e2e: arm: fix ginkgo doesn’t recognize kernelPageSize suite (#1334) #1334
• Fixed rcu_nocbs cpu parsing (#1317) #1317
• Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
• Make the e2e/basic/modules.go test reentrant (#1322) #1322
• Enhance hugepages validation error message (#1320) #1320
• Bump to k8s 1.32.3 (#1318) #1318
• Unblock production image generation (#1319) #1319
• OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
• Ignore -server-ose repos in the CI (#1314) #1314
• CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
• Obsolete pod label-based matching (#1304) #1304
• Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
• Remove pinning of all dependencies (#1309) #1309
• e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
• e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
• CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
• Add observedGeneration to Profile status (#1305) #1305
• Manage TuneD profiles with the same name and different content (#1216) #1216
• OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
• NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
• Switch builder image to multi-arch image (#1297) #1297
• CNF-16742: kernelPageSize + hugepages combinations validation (#1296) #1296
• machineconfig: add support for various hugepage sizes. (#1295) #1295
• E2E: Add test to verify runc uses valid cpus (#1088) #1088
• OCPBUGS-49823: Support hugepage size selection for ARM-based clusters (#1294) #1294
• OCPBUGS-49403: E2E: Add configuration tests related to align cpus by uncorecache feature (#1291) #1291
• OCPBUGS-48530: E2E: Add test cases to verify PerPodPowerManagement with PPC (#1284) #1284
• Fix hack/test-tuned-fdp.sh (#1285) #1285
• Add missing Polarion test case id (#1280) #1280
• use ROLE_WORKER_CNF environment variable to determine mcp name (#1261) #1261
• CNF-16267: Add kernel page size field (#1262) #1262
• OCPBUGS-46584: Adjust Workload Hints test cases based on Intel or AMD (#1258) #1258
• PPC: correct EnableHardwareTuning flag value (#1269) #1269
• E2E: Tuned deferred test automation (#1230) #1230
• hypershift: Refined mixed_cpus suite for Hosted Clusters (#1173) #1173
• Update OWNERS file (#1260) #1260
• E2E: Add hypershift support to container runtime config tests (#1229) #1229
• NO-JIRA: e2e: common way to fetch poolName (#1255) #1255
• e2e:labels: fix typo and adding type (#1256) #1256
• e2e: add irdma to module_blacklist kernel args (#1249) #1249
• OCPBUGS-45421: Linter fixes (#1253) #1253
• e2e: tuned degraded test fix (#1246) #1246
• OCPBUGS-44372: cmd: PPC: support tolerating heterogeneous core IDs (#1236) #1236
• OCPBUGS-45346: performanceprofile cpuset input validation (#1231) #1231
• OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1232) #1232
• CNF-15505: Remove container runtime selection (#1219) #1219
• Move reboot tests to appropriate make target for hypershift (#1224) #1224
• Full changelog

cluster-olm-operator

• OCPBUGS-56825: fix olm.maxOpenShiftVersion float parsing #122
• OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
• OCPBUGS-54877: Increase debug logging level for op-con/catd #114
• OPRUN-3782: Watch for permissions preflight feature gate #113
• OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
• OPRUN-3782: Watch for permissions preflight feature gate #111
• OCPBUGS-54179: Add openshift node selector annotation #109
• OPRUN-3690: Watch for new upstream feature gate APIV1MetasHandler #104
• NO-ISSUE: Update to k8s v0.32.2/v1.32.2 #108
• OCPBUGS-51357: Revert “(vendor) Bump openshift/api” #106
• NO-ISSUE: Bump kubernetes and openshift/api dependencies #105
• OPRUN-3663: Watch and reconcile feature gates changes #102
• OCPBUGS-49410: extend clusterrole with permissions for OCP observability #103
• OCPBUGS-45425: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.19 #94
• NO-ISSUE: Fixing some nitpicks #98
• OCPBUGS-45098: Add infomer for proxy.config.openshift.io #93
• NO-ISSUE: bump all bingo build dependencies #96
• NO-ISSUE: Remove m1kola from owners #97
• NO-ISSUE: Adding Lalatendu Mohanty as approver #91
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612
• MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611
• OCPBUGS-45701: Updating ose-cluster-openshift-apiserver-operator-cont… #607
• NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
• OCPBUGS-44693: Disable ResilientWatchCacheInitialization #603
• OCPBUGS-23435: bump library-go to bring in workload-conditions fix #600
• Full changelog

cluster-openshift-controller-manager-operator

• WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
• OCPBUGS-47528: Add team members to the OWNERS file #373
• OCPBUGS-45698: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372
• API-1835: bump library-go #370
• Full changelog

cluster-policy-controller

• CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
• WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #160
• MON-3866: chore: csr: Add approver for monitoring CSRs issued for metrics-server #148
• OCPBUGS-45829: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.19 ++ #159
• Full changelog

cluster-samples-operator

• OCPBUGS-54590: Samples Operator should sort failing image imports #627
• OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
• OCPBUGS-54591: only update LastTransitionTime if operator status change #625
• OCPBUGS-54471: Periodic sync of supported OCP samples #622
• OCPBUGS-54479: Periodic sync of OKD samples #621
• OCPBUGS-54349: cluster-samples-operator - fix failing unit tests MacBook (ARM chip) #618
• OCPBUGS-54216: Update the k8s API version #614
• OCPBUGS-54347: add rhdmalone to owners #616
• OCPBUGS-54149: Updates to README.md #613
• OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
• OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
• OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
• OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
• OCPBUGS-52379: relevant references to master renamed in README.md #603
• OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
• OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
• OCPBUGS-30313: Removing reference of registry.access.redhat.com #592
• OCPBUGS-48182: add shannon and aroyoredhat as owners #593
• OCPBUGS-45597: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.19 #591
• Full changelog

cluster-storage-operator

• OCPBUGS-56253: sync Azure File permissions with upstream docs #2 #580
• NO-JIRA: correct cinder operator CredentialsRequest name #577
• OCPBUGS-54491: sync Azure File permissions with upstream docs #576
• STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
• OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
• STOR-2126: Enable readOnlyFileSystem #564
• STOR-1878: Run operators without root user control #570
• STOR-1881: Role and ClusterRole with too wide permissions #569
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
• OCPBUGS-24588: bump library-go #566
• STOR-2252: Bump all deps #554
• CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
• OCPBUGS-50668: fix Vsphere cluster Storage operator in Unavailable state #556
• STOR-2078: VolumeAttributesClasses typo in resources #550
• OCPBUGS-45073: Support HCP labels #551
• STOR-2078: Typo in clusterRole resources for VolumeAttributesClasses #549
• OCPBUGS-45617: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.19 #546
• OCPBUGS-45737: Remove unecessary resources from the guest cluster #544
• STOR-2078: Add RBAC rule for Volumeattributesclass #545
• STOR-2078: Add OPERATOR_IMAGE_VERSION var to AWS-EBS operator #542
• Full changelog

cluster-update-keys

• NO-JIRA: Updating openshift-ci-release-key for 2 years #70
• Full changelog

cluster-version-operator

• OCPBUGS-60168: CVO protects /metrics with authorization #1222
• OCPBUGS-56771: Fix ImplicitlyEnabledCapabilities #1199
• OTA-1403: Add an always passing test case #1172
• NO-JIRA: make verify #1177
• OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
• NO-JIRA: manifests: make template manifests valid YAML #1171
• OTA-1488: Remove USC code #1176
• OTA-1488: Remove DevPreview USC manifests #1175
• NO-JIRA: Fix some issues identified by yamllint #1174
• OTA-1403: Create minimal openshift tests extension #1168
• NO-JIRA: Add unit test for renderManifest #1173
• OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
• OTA-209: Add CVOConfiguration controller #1163
• OTA-1427: Reconcile all nodes via a special event #1164
• OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
• NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
• OTA-1427: Recompute node insights when MC/MCP changes #1144
• OTA-209: Add ClusterVersionOperator manifests #1161
• OTA-1418: Decribe informer->usc communication #1162
• NO-JIRA: Rename fields in ClusterCapabilities for readability #1157
• OTA-1427: Polish reason and message in Node’s status insight #1145
• NO-JIRA: Refactor for readability #1131
• OCPBUGS-50498: cvo: improve error handling on port collision #1160
• NO-JIRA: Update ClusterOperator Status Conditions to listType=map #1149
• OTA-861: Generate an accepted risk for Y-then-Z upgrade #1093
• NO-JIRA: Fix a few AMD64-oriented tests on Non-AMD64 machines #1156
• OTA-1418: USC: Drop unknown insights after grace period #1150
• NO-JIRA: status: extract API types to a package #1155
• OTA-209: Bump github.com/openshift/client-go #1147
• OTA-209: Resolve lint issues #1148
• OTA-1418: Allow forcing health insights on CV #1141
• OTA-1339: USC: Pull latest UpdateStatus API code #1138
• OTA-1427: USC: Maintain status insights for Nodes #1136
• OTA-1427: Add hack/test-usc-integration.sh to start testing USC in CI #1142
• OTA-1411: USC: Maintain status insights for ClusterOperator resources #1135
• OTA-209: Bump github.com/openshift/api #1130
• OCPBUGS-45922: CONTRIBUTING.md: Rename master to main #1125
• OTA-1269: USC: Add DevPreviewNoUpgrade-gated manifests #1107
• NO-ISSUE: Simplify the preconditions code #1127
• OCPBUGS-45777: Updating cluster-version-operator-container image to be consistent with ART for 4.19 #1123
• OCPBUGS-44860: pkg/payload/precondition/clusterversion: New GiantHop update precondition #1112
• OCPBUGS-45324: deps: bump golang.org/x/net to 0.31.0 #1115
• OCPBUGS-31462: Set openshift.io/required-scc: privileged annotation in version pods #1106
• OTA-1307: pkg/cvo/updatepayload: Drop the Job controller for release-manifests downloads #1105
• Full changelog

configmap-reloader

• ART-13081: append .0 to go.mod version #68
• OCPBUGS-45705: Updating configmap-reload-container image to be consistent with ART for 4.19 #66
• Full changelog

console

• OCPBUGS-56651: Recognize Detached BMH status #15083
• OCPBUGS-58214: Incorrect i18n translations in 4.19 batch #15218
• OCPBUGS-59790: Move alertmanager settings route #15331
• OCPBUGS-59639: Fixing no resources found message can not be shown completely #15320
• OCPBUGS-59810: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15333
• OCPBUGS-56280: Follow-on fix. Add new “plugins-order” flag to bridge cli args #15168
• OCPBUGS-59199: Deleted objects remain in favorites and cause 404 errors #15267
• OCPBUGS-59557: add data-test attrs to console plugins table #15305
• OCPBUGS-59513: Update model flags when plugins load #15298
• OCPBUGS-58331: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15273
• OCPBUGS-58433: Add the Origin header to the HeaderBlacklist in the co… #15246
• OCPBUGS-59315: Not able to launch terminal window from OCP web console due to console plugin conflicts #15280
• OCPBUGS-58217: fix missing form styles in Create PVC page + Clone PVC… #15260
• OCPBUGS-58183: ContainerResource metric data for HPAs isn’t visible i… #15213
• OCPBUGS-58316: Implement sessions in openshift authenticator #15234
• OCPBUGS-58375: fix bug where / in console.tab/horizontalNav href breaks navigation #15239
• OCPBUGS-58377: fix runtime error when editing HPA using the form #15240
• OCPBUGS-58090: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15204
• NO-JIRA: Update Console plugin SDK changelogs #15212
• OCPBUGS-57390: i18n upload/download routine task - Sprint 270 #15175
• OCPBUGS-57755: Add the ability to launch multiple modals with useModal hook #15189
• OCPBUGS-57113: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15180
• OCPBUGS-57391: OpenShift console PVC clone cannot use B as the unit #15176
• OCPBUGS-57384: Update vSphere configuration form to support CM YAML f… #15174
• OCPBUGS-56950: UI for search by label is distorted in topology #15111
• OCPBUGS-56841: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15100
• OCPBUGS-56779: Fix and enable web terminal tests #15097
• OCPBUGS-55928: Improving the DevExp for passing the CSP directives to console per flag #15076
• OCPBUGS-56693: Expose PodRingSet via Dynamic Plugin SDK #15086
• OCPBUGS-57180: Fix ‘/metrics’ endpoint token review to handle interna… #15152
• OCPBUGS-57207: Getting “Oh no something went wrong” error message in web console. #15159
• OCPBUGS-57319: Add Select project field in import forms #15171
• OCPBUGS-57110: fix VirtualizedTable runtime error if sortColumn is no… #15140
• OCPBUGS-57105: Fix runtime error when navigating alert actions #15138
• OCPBUGS-56470: fix bug where AlertItem is missing info icon #15071
• OCPBUGS-57200: Opening Edit Secret modal and saving without changes throws error #15157
• OCPBUGS-56764: Fix regression with drawers and modals #15094
• OCPBUGS-56475: Enable pipeline tests by installing operator version 1.17 #15073
• OCPBUGS-56882: Add initialization link annotation support to csv anno… #15104
• OCPBUGS-57183: clarify verbiage for Lightspeed hide button #15151
• OCPBUGS-57054: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #15123
• OCPBUGS-57128: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15145
• OCPBUGS-56885: Helm resource list error in console #15105
• OCPBUGS-56888: Add flags in console static plugin for all the components of this epic #15106
• OCPBUGS-56837: Added developer getting started card in Admin project overview page #15098
• OCPBUGS-56987: fix bug where Roles list was displaying invalid data f… #15120
• OCPBUGS-56775: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #15096
• OCPBUGS-56149: Refactor Kebab+ActionsMenu to use PF #15051
• OCPBUGS-56413: [knative] Self-provisioner user can not access or create event sources via ODC #15067
• OCPBUGS-55941, OCPBUGS-56107: get go mod tidy to pass, bump Console Helm dependencies to 3.17.3 #15032
• OCPBUGS-56362: improve description of the custom logos CLI args #15061
• OCPBUGS-55979: fix alignment of Getting Started item icons #15040
• OCPBUGS-55929: Sample segment sessions #15031
• NO-JIRA: Update plugin SDK docs #15074
• OCPBUGS-55987: Fix impersonate group action #15041
• OCPBUGS-55976: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #15039
• OCPBUGS-56077: remove 60 day alert from cluster update modal #15047
• OCPBUGS-55972: Wrap ListPageHeader action with a div #15038
• OCPBUGS-55961: resolve http Context and Client handling #15036
• OCPBUGS-55959: add data-quickstart-id to quick create button #15034
• OCPBUGS-55702: fix bug where Critical Alerts section cannot be collapsed #15018
• OCPBUGS-55814: Add DEVCONSOLE_PROXY flag #15027
• OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
• OCPBUGS-55448: Fix +Add details switch animation regression #15011
• OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
• OCPBUGS-53443: Check for ACM when hiding switcher #14988
• ODC-7727: Change favourites button defaultName #14996
• CONSOLE-4492: fix: do not render if listpageheader has no props #14995
• OCPBUGS-55252: fix bug where tab underline is missing #14991
• NO-JIRA: Deprecate react-router-dom-v5-compat #14994
• OCPBUGS-54670: Use PF component group for PageHeading #14965
• OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
• OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
• OCPBUGS-54656: Add space between quick start action list items #14940
• OCPBUGS-54601: fix bug where operator appears twice #14983
• OCPBUGS-45514: Add account email to the telemetry #14978
• CONSOLE-4464: Update PatternFly to latest #14979
• OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
• OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
• OCPBUGS-55018: fix web terminal initialize form style #14974
• CONSOLE-4505: Update i18next package #14881
• OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
• CONSOLE-4542: Remove base dl dd dt CSS #14966
• CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
• CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
• OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
• ODC-7781: Running knative e2e tests from admin view #14952
• OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
• OCPBUGS-54963: Fix visual regression with knative getting started card #14968
• OCPBUGS-54536: Use router link for OLM CSV empty state #14929
• CONSOLE-4492: Use helpText for help text #14964
• OCPBUGS-54878: Align left/right margins of add card items #14963
• CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
• CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
• OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
• OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
• CONSOLE-4507: Clean up catalog view #14954
• CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
• CONSOLE-4464: Update PatternFly to 6.2.0 #14953
• OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
• OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
• OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
• OCPBUGS-54540: fix flaking update-modal test #14937
• OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
• OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
• CONSOLE-4538: Use PF component groups for Error states #14912
• ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
• CONSOLE-4540: add set as default sc action #14920
• ODC-7778: Include Quick create in Admin perspective guided tour #14850
• CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
• OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
• OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
• OCPBUGS-54461: Add missing href props to masthead items #14922
• OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
• OCPBUGS-54540: fix flaking update-modal test #14930
• OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
• CONSOLE-4520: Further base token cleanup and fixes #14909
• OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
• OCPBUGS-54477: Remove char limit for favourite names #14924
• OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
• NO-JIRA: adding new reference plugin: kuadrant #14361
• OCPBUGS-54485: Add dark theme feedback graphic #14925
• CONSOLE-4484: Fix Skip to content regression #14918
• OCPBUGS-54436: Warning: React.useMemo has a missing dependency #14913
• OCPBUGS-54430: Fix shifting play/pause button when loading #14916
• OCPBUGS-46404: i18n translations for Export as CSV button #14651
• OCPBUGS-52479: Fix OLM e2e tests #14851
• OCPBUGS-20230: Prevent yaml editor crash #14676
• CONSOLE-4464, ODC-7756: Bump PF6 to latest prereleases #14783
• CONSOLE-4501: Add unit test for Timestamp component #14799
• CONSOLE-4521: Remove old polyfills #14880
• OCPBUGS-52948: Multiple favorite icon on same page #14863
• OCPBUGS-53065: Debug pod logs are not accessible when debugging a node via OpenShift Console #14898
• CONSOLE-4462: Remove two more overrides #14891
• OCPBUGS-53227: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14901
• ODC-7770: Remove perspective switcher if only one perspective is present #14762
• OCPBUGS-52938: ‘Helm Chart Repository’ name is used in breadcrumb link, details page heading and action names #14890
• (chores) Add approvers #14895
• OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
• ODC-7773: Add e2e tests for Favorites feature #14802
• CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
• RHSTOR-6927: Removes LSO static plugin from console #14740
• OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
• OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
• CONSOLE-4081: Refactor EditSecret component #14853
• OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
• CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
• CONSOLE-3247: Remove react-measure #14844
• OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
• OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
• ODC-7776: Add getting started alert #14830
• ODC-7766: Test updates pertaining to perspective merge #14717
• CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
• OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
• CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
• OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
• OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
• CONSOLE-3414: Fix flaky Loading tests #14873
• OCPBUGS-53047: Disable guided tour in admin perspective #14866
• OCPBUGS-52166: Fix sort function on Access review table #14848
• OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
• ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
• OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
• CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
• CONSOLE-3414: Replace Loading with PF Spinner #14842
• ODC-7727: Add hover effect to favourites icon #14839
• CONSOLE-4504: set LogViewer theme using console’s theme #14827
• OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
• OCPBUGS-49348: Fix Secret form drag and drop issue #14798
• OCPBUGS-37101: Remove logoutOpenShift method call #14658
• OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
• OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
• CONSOLE-4409: Update monaco theming and sidebar logic #14835
• CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
• OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
• OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
• ODC-7727: Favoriting page in the Console admin perspective #14765
• OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
• CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
• OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
• CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
• OCPBUGS-51037: Update the monitoring topic used by the console team #14781
• OCPBUGS-50650: Retain original path when detecting perspective #14810
• CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
• OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
• CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
• OCPBUGS-48413: Sorted Links based on OS in CLI #14819
• CONSOLE-4484: follow on fix to ensure Bottom ConsoleNotification are … #14806
• NO-JIRA: Apply plugin-api-changed label on changes to the api package #14804
• OCPBUGS-52180: Fix notification drawer close button error #14809
• ODC-7724: Add guided tour in Admin perspective #14776
• ODC-7769: Add Getting started section in project Overview page #14792
• OCPBUGS-30973: Update @types/react-redux #14680
• ODC-7725: Show perspective preferences option if more than one perspective are available #14644
• OCPBUGS-51202: Fix Timestamp component #14793
• OCPBUGS-46050: Determine if disabled a11y rules can be re-enabled #14643
• CONSOLE-4484: Replace custom tabs with PF6 Tabs component #14760
• OCPBUGS-48642: Check for unused modules in static plugins #14695
• CONSOLE-4486: decrease TertiaryHeading margins in Edit resource limit… #14782
• OCPBUGS-50546: Do not load CSRs if user does not have permissions #14771
• OCPBUGS-36786: Force async package upgrade. #14775
• OCPBUGS-50670: fix bold text issues and missing underline on inline link buttons on safari and firefox. #14766
• NO-JIRA: Small demo plugin and plugin doc improvements #14779
• CONSOLE-4489: fix bug where dropdown menu can overflow #14780
• OCPBUGS-49996: add missing contextId to be able to inject tabs from plugins #14732
• OCPBUGS-49778: Linkify OLM operator uninstall message #14713
• OCPBUGS-50693: Show Observe section without PROMETHEUS and MONITORING flags #14697
• CONSOLE-4467: replace html heading elements with PatternFly components #14767
• OCPBUGS-50847: fix but where textarea can be expanded horizontally #14773
• CONSOLE-4476: Remove various upstream workarounds #14756
• OCPBUGS-45141: Store Topology sidebar alert in the localStorage #14700
• NO-JIRA: Update Console dynamic plugin SDK doc and changelogs #14768
• ODC-7735: Edit ci tests to have step to enable developer perspective #14684
• OCPBUGS-50665: fix bug where Demo Plugin tab url is always appended #14764
• CONSOLE-4079, CONSOLE-4080: Address tech debt in GenericSecretForm and KeyValueEntryForm components #14520
• OCPBUGS-49381: Workloads-DeploymentConfigs-Add storage: i18n misses #14747
• CONSOLE-4480: fix background color of Command Line Terminal tab #14759
• OCPBUGS-48548: The secret created with Basic authentication has an incorrect type #14691
• CONSOLE-4464: bump PatternFly 6 to latest available versions #14750
• CONSOLE-4443: Upgrade dynamic-demo-plugin to PatternFly 6 #14682
• OCPBUGS-48637: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14709
• OCPBUGS-46088: [Hypershift] Filter by Node type list is empty #14704
• CONSOLE-4477: more token updates #14752
• OCPBUGS-49839: fix run time error when no completed version exists #14742
• CONSOLE-4475: fix QueryBrowser tooltip styles #14751
• CONSOLE-4469: improve layout and functionality of Edit upstream confi… #14734
• OCPBUGS-43061: update the Deployment pod on change in imageStream #14523
• CONSOLE-4474: Unbold pf-v6 labels by default #14748
• CONSOLE-4465: add workaround for menu scroll #14745
• CONSOLE-4473: fix alignment issues with Bootstrap radio and checkbox … #14739
• CONSOLE-4472: fix QuickStart layout issues #14738
• CONSOLE-4471: fix bug where close button can overlap guided tour popo… #14737
• CONSOLE-4470: fix bug where Edit button is bold inside DetailsItem dt #14736
• CONSOLE-4467: replace html heading elements with PatternFly components #14726
• OCPBUGS-49988: Updating cypress config to have video enabled for the CI results #14731
• OCPBUGS-46513: Fix issue with bridge flag for conditional CSP features #14727
• OCPBUGS-47722: always show associated plugin name on CSV details page #14656
• OCPBUGS-49718: Fix Pipeline Repository overview page close button #14708
• ODC-7726, ODC-7767: Expose Topology components and utils to openshift-console/dynamic-plugin-sdk #14705
• OCPBUGS-49919: Catalog card label should be right aligned #14722
• NO-JIRA: Consolidate YAMLs Directory into yamls to Resolve macOS Case-Sensitivity Conflicts #14712
• CONSOLE-4381: PatternFly 6 README updates #14729
• OCPBUGS-49839: fix run time error when no completed version exists #14719
• OCPBUGS-49366: fix bug where Search filter dropdown label isn’t i18n #14706
• OCPBUGS-48635: fix/remove broken codeRefs #14694
• OCPBUGS-46513: Add support for conditional CSP headers #14710
• OCPBUGS-48608: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14692
• OCPBUGS-45029: dev-console cypress feature file test update #14685
• NO-JIRA: update github username #14679
• OCPBUGS-46438: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14628
• OCPEDGE-1346: feat: bump api to pull in arbiter node infra #14469
• OCPBUGS-45103: update variable name for plugin name parsing #14650
• ODC-7720: Add dev perspective nav options to admin perspective #14588
• OCPBUGS-48292: allow copying of dependency assets #14677
• OCPBUGS-45325: Fix ns dropdown UI when web terminal is open #14609
• CONSOLE-4379: remove PatternFly 4 shared modules #14671
• CONSOLE-4076: Address tech debt in SourceSecretForm component #14633
• CONSOLE-4077: Refactor BasicAuthSubform to be functional component #14631
• OCPBUGS-2956: ‘create a Project’ button on Getting started page doesn’t work #14635
• OCPBUGS-43661: Limit payload size of GQL query #14429
• OCPBUGS-46511: fix navigation from non-General User Preference tab to… #14647
• OCPBUGS-45371: Authenticate user token in openshift Authenticate func #14578
• OCPBUGS-21755: Add catalog to operator installation route parameters and PackageManifest list request label selector #14632
• OCPBUGS-45915: prefer OpenShift release version in telemetry events #14579
• OCPBUGS-47778: Improving web terminal test failures #14657
• OCPBUGS-46415: Append new errors via string instead of list #14653
• OCPBUGS-46555: fix bug where two external link icons can appear in Op… #14648
• ODC-7695: Fix and enable web-terminal tests #14308
• OCPBUGS-45213: Fix BuildSpec details section heading font size #14554
• OCPBUGS-47541: Incorrect capitalization for Lightspeed to capitalized LightSpeed in ja and zh langs #14646
• OCPBUGS-46452: i18n upload/download routine task - sprint 263 #14629
• OCPBUGS-46385: fix alignment of Font Awesome icons #14630
• OCPBUGS-32406: Test Serverless function gives no response when function is not running #14610
• OCPBUGS-46544: Post TypeScript upgrade changes #14634
• OCPBUGS-46461: Test helm CI failures #14617
• CONSOLE-4400: Upgrade TypeScript to v5 #14620
• OCPBUGS-43671: Disable GQL introspection #14409
• CONSOLE-4380: Remove more already-migrated code #14614
• OCPBUGS-41676, OCPBUGS-41826: upgrade axe-core and cypress-axe #14311
• OCPBUGS-28206: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14600
• CONSOLE-4378: remove orphaned PopupKebabMenu code #14594
• CONSOLE-4377: update to use new DropdownItemProps from PatternFly 5 #14593
• CONSOLE-4376: remove orphaned ClusterConfigurationDropdownField code #14592
• OCPBUGS-45787: Installing operator with a + in the version name doesn’t work #14602
• OCPBUGS-37058: i18n: Missing translations for “PodDisruptionBudget violated” string #14586
• OCPBUGS-45468: Updating openshift-enterprise-console-container image to be consistent with ART for 4.19 #14581
• OCPBUGS-45104: update release note link #14543
• OCPBUGS-23924: Render TaskRun results even when failed #14414
• ODC-7710: Remove @console/rhoas-plugin #14577
• OCPBUGS-45802: fix Number input focus layout issue #14597
• CONSOLE-4380: Use AlertsRulesDetailPage from monitoring-plugin #14596
• OCPBUGS-45848: Throw warnings when guessModuleFilePath is needed to guess file extensions #14599
• OCPBUGS-45319: Add customData field to the HorizontalNav component #14575
• OCPBUGS-45606: ‘Channel’ and ‘Version’ dropdowns do not collapse if the user does not select an option. #14590
• CONSOLE-3905: (deps) upgrade to webpack 5 #14378
• OCPBUGS-44059: Run check-resolution in parallel #14453
• OCPBUGS-38543: OCP web console show pod status as Init:0/1 after using Native sidecars #14313
• OCPBUGS-44920: save all window.windowErrors for easier debugging #14547
• OCPBUGS-45198: fix bug where ConsolePlugins list does not display if … #14583
• OCPBUGS-45242: fix runtime error when backend service details don’t e… #14582
• OCPBUGS-45296: Add Telemetry to the OLS Import to Console feature #14562
• OCPBUGS-44254: Bump pkijs from 2.1.89 to 2.1.90 #14470
• OCPBUGS-36212: Missing translation for ““Read write once pod (RWOP)” ja and zh #14565
• OCPBUGS-43859: Getting Oh no, something went wrong error when trying to install operator. #14526
• OCPBUGS-44800: Add Dynamic Plugins nav item #14521
• OCPBUGS-32033: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14134
• OCPBUGS-13685: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14130
• OCPBUGS-44595: only enable Save button in Console plugin enablement m… #14532
• OCPBUGS-41974: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14531
• OCPBUGS-44898: i18n upload/download routine task - sprint 262 #14502
• OCPBUGS-44265: ReRun of Resolver based PipelineRuns fails from UI #14471
• OCPBUGS-43830: Expand “Rollback Helm Release” status width #14448
• ODC-7698: Replace CopyPipelineRunButton with PF5 design #14413
• OCPBUGS-39388: Filter out empty params before Shipwright build creation #14514
• OCPBUGS-39359: Add optional build strategy params under ExpandCollapse #14540
• Full changelog

console-operator

• OCPBUGS-59488: Update downloads deployment configuration to use master node selector #1016
• OCPBUGS-59618: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1028
• OCPBUGS-56280: Add plugins order to console config #988
• OCPBUGS-56761: Revert v1alpha1 removal #991
• OCPBUGS-55716: Fix issue where console operator orphans custom logo configmaps in openshift-console namespace #985
• OCPBUGS-55842: Lift FeatureGate by bumping openshift/api #986
• ODC-7780: update quick starts to work in the converged perspective #977
• OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
• CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
• NETOBSERV-2023: Implement a quickstart for netobserv operator #955
• CONSOLE-4481: Add additional CSP test #975
• OCPBUGS-45514: Report email_domain to telemetry #971
• CONSOLE-4481: Add junit generation for unit and e2e testing #974
• ART-12521: update go mod dependency for konflux #973
• NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
• OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
• ODC-7723: Add quick start to enable developer perspective #968
• CONSOLE-4508: Enable CSP e2e test #969
• OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
• OCPBUGS-51379: Re-revert Report email_domain to telemetry + fix panic for uninitialized mail value. #964
• OCPBUGS-45514: Report email_domain to telemetry + fix panic for uninitialized mail value. #962
• OCPBUGS-51156: Revert #950 “OCPBUGS-45514: Report email_domain to telemetry” #961
• OCPBUGS-45514: Report email_domain to telemetry #950
• OCPBUGS-48536: Bump documentationBaseURL to 4.19 #956
• OCPBUGS-48740: Vendor the missing CSP directives #960
• OCPBUGS-46513: Add ConsolePluginContentSecurityPolicy feature gate to… #957
• OCPEDGE-1345: feat: add arbiter node support for HA #939
• OCPBUGS-45722: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.19 #946
• OCPBUGS-45222: Dont disable console when authConfig type is set to None #944
• OCPBUGS-44953: don’t set current clients when no OIDC providers are configured #945
• OCPBUGS-44362: Remove the v1alpha1 schema for ConsolePlugin CRD #942
• OCPBUGS-44556: console/status: set initial value of Message field #940
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-37212: Upstream sync 15042025 #183
• OCPBUGS-53198: Upstream sync 01-04-2025 #180
• OCPBUGS-53198: Sync 25-03-2025 #177
• OCPBUGS-45272: Ds merge 3/7/25 #175
• OCPBUGS-48190: Ds merge 2/5/2025 #173
• Full changelog

coredns

• ART-13081: append .0 to go.mod version #133
• OCPBUGS-45467: Updating coredns-container image to be consistent with ART for 4.19 #131
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-58834: CARRY: don’t ignore json files #338
• OCPBUGS-57799: Rebase release-4.19 onto release-1.31 #331
• OCPBUGS-56027: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #323
• ART-12521: update go mod dependency for konflux #320
• NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
• OCPBUGS-45433: Updating csi-driver-manila-container image to be consistent with ART for 4.19 #317
• OCPBUGS-45739: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.19 #318
• OCPBUGS-45412: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.19 #316
• Full changelog

csi-driver-nfs

• NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #153
• OCPBUGS-45714: Updating csi-driver-nfs-container image to be consistent with ART for 4.19 #150
• NO-JIRA: merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #149
• Full changelog

csi-external-attacher

• STOR-2251: Rebase external-attacher to v4.8.1 for OCP 4.19 #83
• OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
• OCPBUGS-45401: Updating csi-attacher-container image to be consistent with ART for 4.19 #81
• Full changelog

csi-external-provisioner

• STOR-2251: Rebase external-provisioner to upstream v5.2.0 for OCP 4.19 #111
• OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
• OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
• OCPBUGS-46727: CVE-2024-45338: bump golang.org/x/net to v0.34.0 #109
• OCPBUGS-46125: CVE-2024-45337: bump golang.org/x/crypto to v0.31.0 #108
• OCPBUGS-45735: Updating csi-provisioner-container image to be consistent with ART for 4.19 #107
• Full changelog

csi-external-resizer

• STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
• OCPBUGS-45706: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.19 #167
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
• STOR-2281: Remove csi-snapshot-validation-webhook #175
• Full changelog

csi-livenessprobe

• STOR-2251: Rebase livenessprobe to v2.15.0 for OCP 4.19 #71
• OCPBUGS-45588: Updating csi-livenessprobe-container image to be consistent with ART for 4.19 #70
• Full changelog

csi-node-driver-registrar

• STOR-2251: Rebase node-driver-registrat to v2.13.0 for OCP 4.19 #78
• OCPBUGS-45712: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.19 #77
• Full changelog

docker-builder

• OCPBUGS-57173: S2I build cpu limits observed by assemble are limited to 1 cpu #471
• OCPBUGS-45492: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.19 #467
• OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
• OCPBUGS-48741: Buildah dependency bump to v1.39.0 #455
• OCPBUGS-48667: Bump golang.org/x/crypto dependency to 0.31.0 #432
• OCPBUILD-174: Clean Up Containerfiles #414
• OCPBUILD-174: Always Build with -mod vendor #415
• OCPBUGS-47526: Add team members to the OWNERS file #419
• OCPBUILD-174: Refresh CONTRIBUTING Guide #416
• OCPBUGS-45321: skipping some unit tests to avoid failures as they are duplicate #412
• Full changelog

docker-registry

• OCPBUGS-53656: bump jwt and oauth dependencies #429
• IR-522: disable aws region check #425
• NO-JIRA: chore: update owners file #424
• OCPBUGS-25981, OCPBUGS-38874: bump docker-distribution to add new regions #419
• OCPBUGS-45414: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.19 #417
• Full changelog

driver-toolkit

• test/e2e: adapt for layered node image (#167) #167
• Getting the kernel version from the kernel-rt-core-* file. (#165) #165
• Adding pull-secrets to the oc adm release info... command. (#164) #164
• Pulling the DTK image from the CI registry instead of quay.io. (#163) #163
• OCPBUGS-48156: Assert right rt version at build time (#161) #161
• Using jq instead of yq in the e2e job. (#162) #162
• Extending the e2e job to validate the kernel-rt versions matches. (#160) #160
• Updating driver-toolkit-container image to be consistent with ART for 4.19 (#159) #159
• Full changelog

egress-router-cni

• OCPBUGS-53096: Build openshift container based on 4.19 image #89
• Full changelog

etcd

• ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
• OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
• OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
• OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
• ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
• DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
• ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
• Full changelog

gcp-cloud-controller-manager

• OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (1316392) into master #74
• OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (54cd0bb) into master #69
• OCPBUGS-43089: Do not check for PodCIDR when determining if node is in the default subnetwork. #72
• OCPBUGS-45407: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.19 #70
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #243
• ART-12521: update go mod dependency for konflux #240
• OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
• NO-JIRA: Update manifests generator tooling #238
• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.8.1 (737b737) into master #237
• OCPBUGS-45614: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.19 #234
• Full changelog

gcp-machine-controllers

• OCPBUGS-59386: Add max-concurrent-reconciles flag to machine actuator #125
• OCPBUGS-56924: allow instances with unknown quotas to be created #119
• CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
• OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
• OCPBUGS-46387: add a3 instance types to gpu quota validation logic #102
• OCPBUGS-17079, OCPBUGS-44671: Disable shielded VMs for non-UEFI disks #108
• OCPCLOUD-2840: Bump k8s 1.32 #109
• OCPBUGS-43531: Refactor exists() to handle gcp API change #101
• OCPBUGS-45923: update a2 gpu detection logic to be dynamic #98
• OCPBUGS-45733: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.19 #96
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-59749: 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer #80
• OCPBUGS-39258: UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs #77
• STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
• OCPBUGS-45567: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.19 #73
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-53451: enable VolumeAttributesClass #145
• OCPBUGS-54336: Bump library-go #144
• CORS-3911: Add custom endpoint args from infrastructure #141
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
• STOR-2252: Bump all deps #139
• OCPBUGS-48100: Rename master branch to main #138
• OCPBUGS-45400: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.19 #136
• Full changelog

gcp-workload-identity-federation-webhook

• OCPBUGS-45458: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.19 #7
• Full changelog

haproxy-router

• OCPBUGS-45759: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.19 #644
• OCPBUGS-45702: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.19 #643
• OCPBUGS-39403: Fix parseIPList to Continue Processing After Invalid IPs and Return Valid IPs #621
• OCPBUGS-45290: Reject All CA-Signed Certs Using SHA1 #642
• OCPBUGS-47761: Update default_pub_keys.pem to use SHA256 #646
• OCPBUGS-43745: Add support for IdleCloseTerminationPolicy #639
• NO-JIRA: Update OWNERS file to reflect current team #645
• OCPBUGS-38078: Validate HAProxy health check interval time value #618
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-59534: Rebase v1.32.7 to 4.19 #2367
• OCPBUGS-57886: Bump 4.19 1.32.6 #2340
• NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2341
• OCPBUGS-58175: Fix flake caused by invalid detection of active policies in VAP integration tests #2347
• OCPBUGS-55937: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2290
• OCPBUGS-56082: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2297
• OCPBUGS-56437: Bump 4.19 1.32.5 #2304
• OCPBUGS-56256: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2302
• OCPBUGS-56193: UPSTREAM: 131236: RWX tests should create RWX volumes #2301
• OCPBUGS-55895: Fix node expansion on older kubelets #2289
• OCPBUGS-55265: Bump 1.32.4 #2275
• OCPBUGS-37706: allow TLS1.3 or modern profile to be specified #2135
• OCPBUGS-53249: skip UDP LoadBalancer on external #2247
• OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
• OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
• TRT-1854: fix OVNKubernetes network skips #2256
• STOR-2285: Update group snapshot test rules #2254
• OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
• TRT-1836: UPSTREAM: <carry>: remove old k8s-tests external binary #2178
• OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
• OCPBUGS-53014: Bump 1.32.3 #2241
• TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
• STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
• OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
• OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
• NO-JIRA: Initialize testContext before enumerating tests #2229
• UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
• OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
• OCPBUGS-45214: Add groupsnapshot tests #2155
• OCPNODE-2940: add minimumkubeletversion admission package #2201
• TRT-1854: Update openshift-tests-extension version #2214
• OCPBUGS-45359: Unskip recover volume expansion failure tests #2218
• OCPBUGS-45241: UPSTREAM: <carry>: Re-enable temporarily disabled port-forward test #2213
• OAPE-96: UPSTREAM: <drop>: bump openshift/api@107848b719c5 #2217
• OCPNODE-2940: add minimumkubeletversion package #2104
• CNTRLPLANE-1: Bump 1.32.2 #2209
• NO-JIRA: UPSTREAM: fix request Host storing in openshift.io/during-graceful audit log annotation #2119
• OCPBUGS-41533: UPSTREAM: <carry>: util: inform the kubelet it has a new enough kernel for idmapped mounts #2168
• TRT-1286: List images from external test binary #2177
• OCPBUGS-46477: Disable ServiceAccountNodeAudienceRestriction feature gate and reenable Azure file tests #2202
• TRT-1854: UPSTREAM: <drop>: ./hack/update-vendor.sh for openshift-tests-extension #2194
• OCPBUGS-46038: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2171
• OCPBUGS-48694: Don’t retry storage calls with side effects. #2191
• NO-JIRA: Add benluddy to DOWNSTREAM_OWNERS. #2182
• OCPBUGS-38121: OCPBUGS-39305: UPSTREAM: <carry>: log only deprecated api requests #2113
• OCPBUGS-48177: UPSTREAM: <carry>: disable etcd readiness checks by default #2174
• OCPEDGE-1314: feat: add arbiter node role #2109
• CNTRLPLANE-1: downgrade grpc library to 1.65.0 #2190
• OCPBUGS-48077, OCPBUGS-48078: Fix status ratcheting 4.19 #2167
• OCPBUGS-48819: Fix Portworx plugin’s CSI translation to copy secret name & namespace #2185
• CNTRLPLANE-1: Update to Kubernetes v1.32.1 #2147
• OCPBUGS-48364: Update to Kubernetes 1.31.4 #2179
• TRT-1836: Bug fixes for openshift-tests-extension #2142
• OCPBUGS-45645: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.19 #2154
• OCPBUGS-44786: add support for the LLC alignment cpumanager policy option #2136
• WRKLDS-1449: Update to Kubernetes v1.31.3 #2141
• OCPBUGS-44896: Enable format library for 4.18 #2139
• Full changelog

hypershift

• CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6617
• OCPBUGS-60100: feat: let ARO honour cp namespace annotation for default SC uids in 4.19 #6592
• CNTRLPLANE-1226: feat(konflux): Make CPO builds hermetic #6596
• CNTRLPLANE-1213: New API to support specifying cluster-autoscaler flags #6558
• OCPBUGS-57331: Set default security context on everything #6257
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6525
• OCPBUGS-58300: remove annotation is not working #6465
• CNTRLPLANE-1189: Global PullSecret daemonSet implementation #6507
• NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles #6493
• CNTRLPLANE-1034: sharedingress: Add support for kube-apiserver whitelist CIDRs #6502
• OCPBUGS-58683: fix(hcco): Don’t use a default OIDC client secret name when no secret name is provided #6398
• OCPBUGS-59674: Initial Changes to Support Self-managed Azure #6481
• OCPBUGS-59547: Remove code associated with Managed Identity v2 for ARO HCP for 4.19 #6459
• OCPBUGS-59493: Remove unused jq and rsync rpms #6457
• OCPBUGS-59101: Configure ClusterServiceLoadBalancerHea… #6409
• NO-JIRA: chore(deps): update konflux references #6383
• NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check #6392
• OCPBUGS-57660: [release-4.19] CORENET-6094: CNO: add FRR-k8s image #6374
• OCPBUGS-58335: Support proxy authentication when user/pass is included in URL #6370
• CNTRLPLANE-1044: chore(deps): update konflux references #6342
• ACM-21713: adding .git in .dockerignore to fix version info #6318
• CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6255
• CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6296
• OCPBUGS-57485: Don’t use /version for haproxy health checks #6292
• chore(deps): update konflux references #6189
• ACM-21734 Fixing Konflux EC violations #6303
• NO-JIRA: cpov1: set TerminationMessagePolicy on oas-trust-anchor-generator #6295
• OCPBUGS-57299: Reuse hosted cluster release and metadata providers #6250
• OCPBUGS-56930: cpov1: set terminationMessagePolicy to FallbackToLogsOnError for all HCP containers #6245
• ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6233
• OCPBUGS-56792: Fix CatalogSource image check when unauthorized #6198
• OCPBUGS-56910: util/version: Add Version420 #6215
• OCPBUGS-56910: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6212
• CNTRLPLANE-831: feat(konflux): add arm64 builds to cpo pipeline #6182
• OCPBUGS-56777: Disable PSA enforcement in 4.19 hosted cluster #6201
• OCPBUGS-56458: switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability #6170
• OCPBUGS-56562: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6178
• CNTRLPLANE-831: Red Had Konflux control-plane-operator-4-19 intial pipeline #6181
• CNTRLPLANE-916: Konflux build pipeline service account migration #6089
• CNTRLPLANE-915: chore(deps): update konflux references #6139
• OCPBUGS-55789: [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields #6121
• OCPBUGS-56036: add multi-arch build for MCE 2.9 #6145
• OCPBUGS-55693: Add support for registry root entry only in the IDMS/ICSP #6131
• OCPBUGS-55927: Fix Konflux enterprise contract violations #6126
• OCPBUGS-55749: Fix mce-2.9 konflux pipelines #6117
• Red Hat Konflux update hypershift-cli-mce-29 #6104
• HYPBLD-642: konflux build hcp cli #6072
• OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
• OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
• OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
• OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
• HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
• NO-JIRA: Add e2e flags to test Azure KMS #6076
• CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
• NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
• CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
• HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
• NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
• CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
• CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
• CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
• AUTOSCALE-127: fix e2e autonode drift test #6062
• CNTRLPLANE-112: Enable MIv3 for Ingress #6058
• NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
• OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
• AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
• NO-JIRA: Add cpo container sync to verify job #6051
• OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
• OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
• OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
• NO-JIRA: Add README.md to docs folder #6050
• NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
• OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
• NO-JIRA: Improve API docs for configuration.Image #6034
• Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
• OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
• OCPBUGS-54763: openstack/cli: only set port security when specified #6036
• NO-JIRA: Bump o/api version to 4.19 tag #6035
• OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
• OCPBUGS-54309: Drop isIP CEL check #6032
• AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
• CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
• STOR-2281: Remove snapshot webhook #6004
• OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
• OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
• NO-JIRA: Bump CAPZ to v1.19.2 #6018
• NO-JIRA: update konflux references #5987
• OCPBUGS-48540: Mcd proxy #6011
• AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
• OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
• NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
• OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
• OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
• OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
• ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
• NO-JIRA: Add OWNERS to kas-bootstrap #5991
• CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
• CNTRLPLANE-334: openshift/api dependency bumps #5971
• NO-JIRA: Enable ppc64le builds #5985
• OSASINFRA-3732: openstack: Sync CA cert to new key #5702
• chore(deps): update golang docker tag to v1.24 #5616
• OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
• NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
• OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
• NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
• OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
• OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
• NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
• NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
• OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
• CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
• NO-JIRA: Create token Secret for dev cluster explicitly #5523
• OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
• OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
• NO-JIRA: set default expriationDate tag in AWS if not set #5951
• NO-JIRA: chore: Remove Azure autorest dependency #5917
• CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
• NO-JIRA: Add version check for CAPI flag #5911
• ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
• NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
• CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
• NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
• NO-JIRA: Remove ppc64le from HO tekton files #5924
• CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
• OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
• CNTRLPLANE-350: add NodePool minor version compatibility check #5873
• NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
• ART-11792: update go mod dependency for konflux #5918
• CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
• NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
• CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
• NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
• OCPBUGS-46379: Kas bootstrap bin #5871
• CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
• ARO-15229: add e2e tests for image registry capability #5810
• CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
• OCPBUGS-50915: Disable capi machineset preflights #5653
• CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
• OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
• NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
• OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
• OCPBUGS-53462: Check for availability of individual catalog images #5881
• NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
• STOR-2281: Remove csi-snapshot-validation-webhook #5776
• CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
• CNTRLPLANE-348: Konflux tagged releases #5869
• OCPBUGS-53407: chore(deps): update konflux references #5846
• NO-JIRA: feat(builds): Add area labels and OWNERS #5872
• OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
• NO-JIRA: Add Azure scheduler doc to mkdocs #5865
• CNTRLPLANE-342: Add missing area for support #5864
• OCPBUGS-53050: Handle multiple mirror entries for source #5827
• OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
• NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
• Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
• OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
• CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
• METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
• OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
• CNTRLPLANE-325: rootless containerized builds #5835
• CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
• CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
• NO-JIRA: Bump msi-dataplane dependency #5796
• OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
• NO-JIRA: Update Konflux references #5799
• ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
• OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
• PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
• OCPBUGS-51364: fix oc patch command on doc #5807
• NO-JIRA: Fix-dependabot-bumps #5797
• OCPBUGS-52655: Add flag to set etcd storage size #5795
• CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
• NO-JIRA: Disable GitHub Actions #5812
• OCPBUGS-52821: stop using dev mode for loggers #5801
• HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
• OLS-1370: Add full aws permission list and point to it from “getting started” #5746
• NO-JIRA: CPOv2 token-minter abstraction #5769
• NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
• OCPBUGS-52323: Make managed-trust-bundle optional #5763
• CNV-57648: document how to configure descheduler #5779
• NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
• OTA-1405: Add the ClusterVersionOperator API #5569
• OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
• OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
• CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
• NO-JIRA: speed up image builds #5766
• NO-JIRA: go.mod updates from Konflux #5761
• OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
• OCPBUGS-52223: refactor aws identity health check into new controller #5751
• OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
• NO-JIRA: Remove issues-exit flag for golangci-lint #5762
• CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
• NO-JIRA: Add CPO container sync check to GitHub Actions #5753
• OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
• NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
• HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
• NO-JIRA: chore(deps): update konflux references #5527 #5747
• NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
• OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
• CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
• OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
• OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
• CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
• HOSTEDCP-2262: Karpenter openshift ec2class #5600
• NO-JIRA: chore(owners): Update IBM reviewers #5717
• CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
• NO-JIRA: doc: openstack: update go version #5716
• CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
• HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
• HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
• OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
• NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
• OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
• NO-JIRA: Reenable ibm network cel #5698
• NO-JIRA: ho: watch AWSEndpointServices #5674
• NO-JIRA: test/e2e: use test name for HC name #5665
• OSASINFRA-3719: openstack: ORC deployed out of tree #5584
• CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
• NO-JIRA: Update-precommit-docs #5678
• HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
• OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
• NO-JIRA: Add omitempty to CredentialsSecretName #5656
• OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
• HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
• CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
• CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
• NO-JIRA: Fix hc hcp cel inconsistency #5661
• NO-JIRA: add secretproviderclass to dump #5654
• OCPBUGS-50606: Fix kubeadmin login failure #5631
• NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
• NO-JIRA: update hypershift azure roles to use ids #5657
• CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
• NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
• CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
• HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
• OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
• OCPBUGS-50014: Restart HCP on stale serving certs #5601
• NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
• HOSTEDCP-2171: add e2e test for aro scheduler #5568
• NO-JIRA: Bump Golang to 1.23 #5466
• NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
• NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
• HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
• HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
• PODAUTO-318: Implement HCP karpenter deletion #5540
• NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
• NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
• PODAUTO-302: Relax cel rule for karpenter role to be required in an ec2NodeClass #5581
• NO-JIRA: Remove haproxy generation error for normal flow #5583
• OCPBUGS-49913: Honor proxy vars in the util insecure http client #5572
• CNTRLPLANE-221: specify region in AWS credentials for operator-roles #5571
• NO-JIRA: e2e: combine OpenStack advanced tests within one Nodepool #5579
• OCPBUGS-49609: Split binary builds #5499
• NO-JIRA: Apply additional labels to CollectProfilesCronJob #5580
• HOSTEDCP-2231: Remove cloud connection, Set Transit Gateway as default #5293
• CNTRLPLANE-209: Add shared-ingress docs #5564
• HOSTEDCP-2257: Vendor karpenter CRDs #5522
• ARO-14442: introduce capabilities api #5554
• NO-JIRA: add optional step for creating release image using cluster b… #5578
• CNTRLPLANE-109: Update Azure API for Phase 3 Managed Identity Work #5556
• NO-JIRA: add watch permission to SecretProviderClass in ARO #5565
• NO-JIRA: Update cpov2 docs #5560
• NO-JIRA: e2e: don’t skip mirrorconfigs on OSP #5441
• OCPBUGS-49791: Use /livez for kubernetes scheduler liveness probe #5546
• CNTRLPLANE-111: Move secretproviderclass.go to support folder #5559
• OCPBUGS-49838: Watch NodePools in HostedCluster controller #5553
• HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5549
• OCPBUGS-49724: remove passed in image matching desired image check fr… #5524
• OCPBUGS-48619: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5525
• HOSTEDCP-2040: Add TestCreateClusterCustomConfigV2 #5401
• OCPBUGS-49748: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5535
• OCPBUGS-49804: Revert “HOSTEDCP-2120: Enable EnsureCustomLabels e2e test” #5547
• HOSTEDCP-2259: CLI: enable secure proxy creation #5526
• CNTRLPLANE-172: cli: azure: allow assigning custom HCP roles #5541
• OCPBUGS-49686: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5505
• NO-JIRA: Bump github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30 in the azure-github-dependencies group #5518
• HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5511
• OCPBUGS-48688: Remove Credentials from the Azure API #5510
• HOSTEDCP-2249: Reconcile karpenter user-data secret programmatically instead of creating a mock nodePool #5439
• NO-JIRA: Bump the misc-dependencies group with 6 updates #5519
• MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #5508
• OCPBUGS-49611: Konnectivity: add agent readiness #4829
• NO-JIRA: cpov2: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5514
• HOSTEDCP-2226: Add ValidatingAdmissionPolicy for karpenter EC2NodeClass CRD #5395
• HOSTEDCP-2256: [CPO Refactor] Delete component and its resources when predicate changes to false #5509
• HOSTEDCP-2245: [CPO Refactor] Refactor cluster-node-tuning-operator #5473
• NO-JIRA: add assignServicePrincipal check before assignign roles to WI #5498
• HOSTEDCP-1706: feat: add a metric for cluster size override annotation #4825
• NO-JIRA: Add instructions for ccoctl and fix minor issues #5490
• OCPBUGS-48688: Add Tenant ID to Azure API & Remove Credentials from CPO #5495
• OCPBUGS-48519: fix overwriting PKI operator HCP conditions #5493
• HOSTEDCP-2169: Add aro scheduler #5417
• OCPBUGS-48532: Fix IsProgressing condition in HostedClusters #5487
• NO-JIRA: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5496
• CNTRLPLANE-187: Remove MachineIdentityID from Azure HyperShift API #5488
• OCPBUGS-49370: openstack: update CAPI provider deployment spec #5483
• NO-JIRA: Fix a few bugs in Azure Upstream Docs #5489
• NO-JIRA: chore(deps): update konflux references (main) #5476
• NO-JIRA: Update managed Azure/ARO HCP contrib and upstream documents #5474
• HOSTEDCP-2061: [CPO Refactor] Refactor cluster-network-operator #5460
• OCPBUGS-48626: openstack: add DNS option to CLI #5446
• NO-JIRA: Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in the misc-dependencies group #5472
• NO-JIRA: Sync v2 code #5467
• CNTRLPLANE-173: Assign known ARO roles for CP IDs for ARO HCP #5469
• NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.5.0 to 1.6.0 in the azure-github-dependencies group #5471
• PODAUTO-303: Re enable karpenter e2e #5462
• OCPBUGS-48688: Remove client secret references now Workload Identity is supported #5455
• OCPBUGS-48794: Adds contributor role over VNET for Cloud Provider #5468
• HOSTEDCP-2232: Destroy DHCP Server before PowerVS Cloud Instance deletion #5227
• NO-JIRA: [kubevirt] Skip KubeVirtAdvancedMultinetTest for v4.14 and below #5449
• NO-JIRA: Remove OpenStack workaround for Ingress Floating IP #5176
• OCPBUGS-48758: Revert #5404 “PODAUTO-303: Add the most basic e2e for autoNode via Karpenter” #5461
• HOSTEDCP-2176: Enable unused & ineffassign linters in golangci-lint #5418
• OCPBUGS-48708: correct aro azureFile config and permissions #5453
• NO-JIRA: add command for retrieving user account id for AKS dev env s… #5436
• PODAUTO-303: Add the most basic e2e for autoNode via Karpenter #5404
• NO-JIRA: Bump the misc-dependencies group with 8 updates #5450
• HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 4 #5361
• HOSTEDCP-2062: [CPO Refactor] Refactor kubevirt csi driver #5447
• NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity #5440
• HOSTEDCP-1971: HyperShift operator upgrade test for rollout validation #4999
• NO-JIRA: Update Konflux references #5423
• Revert “Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR”” #5422
• OCPBUGS-48510: Allow ARM64 arch deployment on None platform type #5403
• NO-JIRA: Fix dev docs for managed azure #5411
• NO-JIRA: Drop openstack create rejection validation #5410
• HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 3 #4587
• NO-JIRA: Add GOWORK=off to clients in Makefile #5421
• OCPBUGS-45511: Compare contents of user-ca-bundle-config.yaml to the correct configmap #5420
• NO-JIRA: doc/openstack: improve index layout #5412
• AUTH-482: set required-scc for openshift workloads #5310
• OCPBUGS-48506: Set ownership annotations for TLS artifacts #5355
• NO-JIRA: add information about checking HO and e2e are from main on latest release branch #5419
• CNTRLPLANE-129: Move Microsoft Repo to CI dir in e2e dockerfile #5416
• Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR” #5406
• NO-JIRA: chore(deps): update konflux references (main) #5383
• OCPBUGS-44960: (OSASINFRA-3643) bump k8s and dependencies #4927
• NO-JIRA: Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /hack/tools #5400
• NO-JIRA: Bump golang.org/x/net from 0.31.0 to 0.33.0 in /hack/tools #5399
• NO-JIRA: test/e2e: move pre-removal metrics validation out teardown path #5234
• NO-JIRA: Add make lint-fix to pre-commit hook #5387
• NO-JIRA: Enforce EnsurePSANotPrivileged for 4.19 and later #5362
• NO-JIRA: Update Create Azure HC document #5396
• OCPBUGS-48216: use rm -f in all CVO cmds for idempotency #5390
• NO-JIRA: Bump the golang-dependencies and github.com/Azure/azure-sdk-for-go/sdk/azcore #5373
• HOSTEDCP-2233: [CPO Refactor] Refactor cluster-storage-operator #5312
• NO-JIRA: docs/nit: fix missing spaces in md breaking rendered html #5392
• OSASINFRA-3670: doc/openstack: etcd on LVM #5391
• NO-JIRA: cmd: dump: include ValidatingAdmissionPolicies in guest cluster dump #5165
• HOSTEDCP-1542: Introduce e2e flags for Workload Identity #5363
• NO-JIRA: e2e: don’t check the KV’s LiveMigratable condition for <4.17 #5389
• OCPBUGS-48152: Fix mirror reference image name when ID is set #5353
• OSASINFRA-3681: improve the doc on OpenStack #5243
• Revert “OCPBUGS-45265: Use /livez/ping endpoint rather than /version” #5381
• NO-JIRA: test/e2e: improve VAP test assertions #5375
• OCPBUGS-45265: Use /livez/ping endpoint rather than /version #5211
• NO-JIRA: Reoncile karpenter aws creds before running the operator #5360
• NO-JIRA: Bump golang.org/x/crypto and golang.org/x/net #5357
• HOSTEDCP-2176: Introduce golangci-lint to make verify and only turn on gci linter #5322
• CNTRLPLANE-68: add flags for setting azure marketplace images in e2e #5356
• HOSTEDCP-2234: Karpenter auto machine approver #5349
• OCPBUGS-47715: fix disconnected via CLI #5341
• chore(deps): update dependency mkdocs-material to v9.5.49 #5247
• NO-JIRA: Move oauth kubeadminsecret hash annotation logic from HCCO to CPO #5286
• HOSTEDCP-2199: [CPO Refactor] Refactor cloud-credential-operator #5203
• NO-JIRA: Update Konflux references (main) #5325
• OCPBUGS-46354: fix(ho): Add all supported config schemas for NodePool NTO reconcile #5280
• NO-JIRA: Revert E2E test change which validates the CVO Image propagation #5323
• NO-JIRA: Fix oauth-v2 and kcm-v2 #5306
• CNTRLPLANE-26: Disable building HO for s390x platform on PR #5314
• OCPBUGS-46529: kubevirt, Don’t break on hostname NodePort.Address #5313
• CNTRLPLANE-25: Fix valid release image update issue #5316
• OCPBUGS-46483: Correctly Reconcile CSO CSI Secrets for Managed Azure Deployments #5311
• OCPBUGS-43083, OCPBUGS-44655: Fix IPv6 Disconnected HCP deployments #5168
• HOSTEDCP-2220: Autonode karpenter #5279
• CNTRLPLANE-10: Konflux build CPO only when needed #5287
• NO-JIRA: Only use public IPs for 4.16 and above #5304
• OSASINFRA-3685: openstack: tag CAPI resources with InfraID #5262
• STOR-2136: Give delete permissions to snapshot-operator role #5277
• NO-JIRA: chore(deps): update konflux references (main) #5288
• NO-JIRA: set diskStorageAccountType in aks e2e #5273
• CNTRLPLANE-9: Red Hat Konflux update control-plane-operator-main #5282
• OCPBUGS-44314: Consistently look up and dial cloud API hostnames #5281
• OCPBUGS-45595: Updating ose-hypershift-container image to be consistent with ART for 4.19 #5272
• NO-JIRA: test/e2e: detect rapidly updating deployments #5229
• OCPBUGS-45322: consolidating upgradingConfig/Version nodepool status update from CAPI controller to Conditions controller #5222
• OCPBUGS-46342: Allow ARM64 arch deployment on Agent platform #5276
• OCPBUGS-44438: Remove non-matching feature-gated CVO manifests from payload #5093
• NO-JIRA: Fix expected AWS HC conditions during e2e tests #5266
• NO-JIRA: Allow multiple yaml def in a file for pre-commit #5271
• HOSTEDCP-2203: Create e2e clusters with public IP instances only #5269
• NO-JIRA: Fix spelling mistakes from PR #5265 #5270
• HOSTEDCP-2215: Expand pre-commit hooks to check on commit and push #5245
• HOSTEDCP-2203: Add support for public only AWS clusters #5242
• NO-JIRA: contrib: update route53 zone cleaning utility #5265
• NO-JIRA: Fix pre-commit hook issues #5264
• HOSTEDCP-2193: documenting –managed-identities-file flag #5199
• NO-JIRA: Update Konflux References and Perform Migration #5260
• HOSTEDCP-2206: Improve Unit Test Runtime #5257
• OCPBUGS-42320: Prevent IgnitionServer from flooding the API server with patch requests #5220
• NO-JIRA: Remove SP creation/deletion in the HyperShift CLI #5240
• NO-JIRA: Relax networking cel validation for IBMCloud #5258
• NO-JIRA: openstack/e2e: allow to change AZ name #5138
• OCPBUGS-42338: Update KCM node monitor grace period #5166
• NO-JIRA: e2e: followup cleanup for OpenStack Manila #5221
• HOSTEDCP-2181: bump base images in dockerfiles to 4.19 #5195
• HOSTEDCP-1958: Integrate codespell in Makefile #4700
• OCPBUGS-44236: Use system trust bundle in CPO IDP https client #5241
• HOSTEDCP-2204: adding contributor role to nodepoolManagement SP #5244
• HOSTEDCP-2201: add DNS RG to contributor role assignments and add new flag for skipping role assignments #5230
• NO-JIRA: openstack/doc: add a requirement for Octavia #5223
• NO-JIRA: updating ocp release task notes #5239
• OCPBUGS-44967: Pass only the certificate name for CNO deployment #5216
• OCPBUGS-45182, OCPBUGS-45189: e2e/openstack: adjustments for missing manila apps & pods #5202
• OCPBUGS-42434: Enable Managed Identity w/ Certificates in HyperShift Control Plane Components #5160
• HOSTEDCP-2197: Fix TLS config documentation for disconnected #5212
• NO-JIRA: cpov2: revert oauth reconciliation #5217
• OCPBUGS-44968: Reconcile SecretProvider for CSO on ARO HCP #4904
• NO-JIRA: chore(deps): update konflux references (main) #5205
• NO-JIRA: chore(deps): update dependency mkdocs-material to v9.5.46 (main) #5206
• HOSTEDCP-2193: allow reuse of SP for e2e #5194
• OCPBUGS-44380: Reconcile proxy CA bundle into hosted cluster #5197
• HOSTEDCP-2075: Dns cel e2e #5171
• OCPBUGS-44934: Fix error message when kas is route and hostname is not set #5192
• NO-JIRA: CPO V2 cleanup #5188
• HOSTEDCP-2075: Nodeport address cel #5172
• OCPBUGS-44967: Reconcile SecretProvider for CNCC on ARO HCP #4903
• OCPBUGS-44910: openstack: don’t reconcile image registry config during bootstrap #5178
• OCPBUGS-44957: Use fleet manager configmaps to determine placeholder pod node antiaffinity #5191
• OCPBUGS-44698: Create AWS clients on every reconcile instead of at initialization #5179
• OCPBUGS-44964: Reconcile SecretProviderClass for Ingress on ARO HCP #4884
• OCPBUGS-44929: e2e: fix manila CSI operator #5186
• OCPBUGS-44326: Separate CPO containerfiles #5177
• HOSTEDCP-2181: update latest supported version for 4.19 branching #5146
• NO-JIRA: chore(deps): update konflux references (main) #5180
• NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v1.2.1 (main) #5185
• NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (main) #5181
• HOSTEDCP-2187: [CPO Refactor] Refactor cluster-policy-controller #5170
• Full changelog

ibm-cloud-controller-manager

• OCPCLOUD-2846: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.32 (f326c83) into master #76
• OCPBUGS-45494: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.19 #77
• Full changelog

ibm-vpc-block-csi-driver

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #80
• OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
• STOR-2249: Rebase to upstream 5.2.14 for OCP 4.19 #79
• OCPBUGS-45465: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.19 #78
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-55038: [IBM VPC] set offlineExpansion to false in e2e test manifest #143
• OCPBUGS-54482: Bump library-go #142
• STOR-2252: Bump all deps for 4.19 #141
• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
• STOR-2252: Bump all deps #137
• OCPBUGS-47121: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #136
• AUTH-482: set required-scc for openshift workloads #135
• OCPBUGS-45554: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.19 #134
• OCPBUGS-44978: bump openshift/api #132
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #115
• OCPCLOUD-2852: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.10.0 (0c35eac) into main #107
• NO-JIRA: Update manifests generator tooling #106
• OCPBUGS-50674: Fix for CVE-2024-45338 in golang.org/x/net/html in main #99
• OCPBUGS-45691: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.19 #96
• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.9.0 (eed3ac7) into main #95
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
• OCPCLOUD-2841: Update K8s to 1.32 #60
• OCPBUGS-45696: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.19 #59
• Full changelog

insights-operator

• feat: copy proxy envs from IO pod to gathering pods (#1103) #1103
• OCPBUGS-56781: Enhance insights-runtime-extractor errors (#1089) #1089
• OCPBUGS-56780: Report an error when the insights-runtime-extractor is not running (#1088) #1088
• feat: ensure the etc-entitlement-pki secret exists (#1087) #1087
• CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
• feat: remove the upgradeable condition (#1079) #1079
• CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
• chore: add BaiyangZhou to OWNERS file (#1080) #1080
• NO-JIRA: refactor gather commands (#1076) #1076
• NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
• fix: allow running enabled functions from disabled gatherer (#1077) #1077
• Fix bad IPv6 address (#1073) #1073
• OCPBUGS-35196: update the duration validation pattern according to the OpenShift API (#1072) #1072
• CCXDEV-12875: Enable Insight Operator entitlements for multi arch clusters (#1066) #1066
• CCXDEV-14824: Upgrade Golang to 1.23 (#1071) #1071
• OCPBUGS-48154: Add a liveness probe to the extractor container (#1067) #1067
• Add Ondrej user to OWNERS file (#1065) #1065
• Ignore previous status when disabling alerts (#1055) #1055
• bump up OpenShift versions (#1053) #1053
• OCPBUGS-45926: use joinHostPort to fix IPv6 (#1050) #1050
• minor test update (#1052) #1052
• avoid possible Go panic when searching existing conditions (#1046) #1046
• golanci-lint version update & corresponding fixes (#1045) #1045
• OCPBUGS-45047: Avoid to send the same error repeated N times (#1043) #1043
• Updating ose-insights-operator-container image to be consistent with ART for 4.19 (#1044) #1044
• sort the JSON schema validation errors (#1039) #1039
• set required-scc for dataGahtering jobs & pods (#1033) #1033
• OCPBUGS-45047: LokiStack gatherer (#1022) #1022
• OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1032) #1032
• NO-JIRA: Add conditional gatherer validation test cases (#1020) #1020
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• Enable FIPS #41
• New runtimes tests #40
• SB 3.4.3 test app and 3.1.4 app simplified #39
• plain-java runtime sample #38
• Update README #36
• Update instructions to run the extractor on a cluster #35
• OCPBUGS-45626: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.19 #34
• OCPBUGS-45512: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.19 #33
• Full changelog

ironic

• Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround #660
• OCPBUGS-55743: Extract files one-by-one in logwatch #656
• METAL-1327: Update pkgs ocp419 take2 #651
• NO-ISSUE: Update dependencies for OCP 4.19, part 1 #649
• NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
• METAL-1297: Update ironic-image to the latest commit hash #644
• METAL-1299: Do not use openstack packages #645
• OCPBUGS-51310: Fix runlogwatch script #641
• OCPBUGS-50613: Install python3-inotify pkg explicitly #638
• OCPBUGS-49829: Fix runlogwatch failure if LOG_DIR does not exist #635
• OCPBUGS-48737: Sync with upstream metal3 ironic-image 2025-01-30 #629
• METAL-1266: Switch master branch to main in check-requirements #628
• METAL-1253: Remove dependency from sushy package #621
• METAL-1251: Remove dependency from ironic-lib #619
• OCPBUGS-48172: Bump jinja2 to 3.1.5 #618
• OCPBUGS-45636: Sync including fix for bug #614
• NO-ISSUE: Sync with metal3 upstream 2024-12-16 #616
• OCPBUGS-45638: Updating ironic-container image to be consistent with ART for 4.19 #613
• Full changelog

ironic-agent

• OCPBUGS-56042: collect the entire journal from the host #188
• OCPBUGS-55315: Delay determining the hostname to put into ignition #182
• NO-ISSUE: Update dependencies for OCP 4.19 #181
• METAL-1299: Do not use openstack packages #177
• METAL-1297: Update commit hash of ironic-python-agent #176
• METAL-1266: Switch master branch to main in check-requirements #175
• OCPBUGS-45259: METAL-1251: Update commit hash of ironic-python-agent #174
• Updating ironic-agent-container image to be consistent with ART for 4.19 #173
• Full changelog

ironic-machine-os-downloader

• ART-13081: append .0 to go.mod version #102
• OCPBUGS-45522: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.19 #100
• Full changelog

ironic-static-ip-manager

• OCPBUGS-45715: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.19 #46
• Full changelog

keepalived-ipfailover

• OCPBUGS-45700: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 #205
• OCPBUGS-45831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 #204
• OCPBUGS-45405: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 #201
• NE-1908: Add instructions for keepalived-ipfailover image testing #198
• OCPBUGS-45452: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.19 #202
• NO-JIRA: egress: update OWNERS #203
• OCPBUGS-45342: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.19 #200
• Full changelog

kube-metrics-server

• OCPBUGS-45583: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.19 #39
• Full changelog

kube-rbac-proxy

• CNTRLPLANE-248: Merge upstream v0.19.0 release #116
• OCPBUGS-45765: Updating kube-rbac-proxy-container image to be consistent with ART for 4.19 #115
• AUTH-555: Merge upstream v0.18.2 release #114
• Full changelog

kube-state-metrics

• OCPBUGS-52192: [bot] Bump openshift/kube-state-metrics to v2.15.0 #119
• OCPBUGS-45519: Updating kube-state-metrics-container image to be consistent with ART for 4.19 #118
• Full changelog

kube-storage-version-migrator

• NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). #223
• Fix verify job with build-machinery bump #215
• ART-13081: append .0 to go.mod version #213
• OCPBUGS-45383: Updating ose-kube-storage-version-migrator-container i… #209
• Full changelog

kubevirt-csi-driver

• ”[release-4.19] OCPBUGS-58239: Implement volume expansion” #64
• NO-JIRA: Add awels as approver #59
• OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
• OCPBUGS-50562: Ensure volume stays attached through reboots #53
• Full changelog

machine-api-operator

• OCPBUGS-59386: Enabled 10 concurrent reconciles on GCP #1391
• OCPBUGS-56227: correct aws kms permissions #1371
• OCPBUGS-55715: Revert “Added skip for when config not multi nic” #1366
• OCPBUGS-55786: [release-4.19] Fixes machineset paused condition nil pointer #1368
• OCPBUGS-55706: fix: use patch for machine/machineset status #1367
• OCPBUGS-55424: Added skip for when config not multi nic #1358
• OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
• Revert “SPLAT-2180: Added conformance label” #1359
• OCPBUGS-55417: Resync CRDs #1357
• OCPBUGS-55083: Updates GCP CredentialsRequest #1353
• SPLAT-2180: Added conformance label #1354
• OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
• SPLAT-2051: implement e2e tests for vSphere multi network #1347
• SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
• OCPBUGS-52464: webhook to validate marketType field #1339
• SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
• SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
• OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
• OCPCLOUD-2780: Validate aws marketType webhook #1329
• OCPBUGS-44671, OCPBUGS-51373: Updates GCP credentials request #1335
• SPLAT-2000: Added vSphere provisioning mode to data disks #1328
• OCPBUGS-49413: add image/read permissions #1330
• OCPBUGS-51042: Drop oVirt support #1331
• OCPBUGS-49351: Added vSphere check for max networks #1327
• OCPCLOUD-2830: Update dependencies to K8s 1.32 #1325
• SPLAT-1800: vSphere host zonal missing operator feature #1323
• SPLAT-1811: Add vSphere multi disk support #1290
• OCPBUGS-43608: add webhook for fields that are not working #1320
• OCPBUGS-46433: Add cluster-reader to controlplanemachinesets resource #1316
• OCPBUGS-44130: Add Azure permissions based on linked actions #1309
• SPLAT-1800: Add support for vSphere host and vm group based zonal #1285
• AUTH-482: set required-scc for openshift workloads #1317
• SPLAT-1940: Refactored vsphere featuregate parameters #1315
• OCPBUGS-45480: Updating ose-machine-api-operator-container image to be consistent with ART for 4.19 #1310
• AUTH-482: set required-scc for openshift workloads #1308
• Full changelog

machine-config-operator

• OCPBUGS-60080: use channel to signal controller shutdown #5217
• OCPBUGS-59928, OPNET-681: Support migration to NMState #5208
• OCPBUGS-59899: Add workaround fix for static pod race #5204
• OCPBUGS-59978: ARO cert rotate fix #5210
• OCPBUGS-59720: TestMCNPoolNameCustom should clean up resources properly #5186
• OCPBUGS-56750: Support NODEIP_HINT in IPI deployments too #5082
• OCPBUGS-58894: Remove podman-etcd machine config source #5169
• OCPBUGS-59208: Backport QE ported test for OCL component readiness #5125
• OCPBUGS-58820: Add control-plane label for master nodes on legacy clusters #5168
• OCPBUGS-57327: Do not set cpu system reserve below the default value #5117
• OCPBUGS-57689: Ensure the build controller restarts on upgrade #5127
• OCPBUGS-57930: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5135
• OCPBUGS-57929: add MachineConfiguration to CO related objects #5132
• OCPBUGS-56623: Give keepalived container chroot cap #5074
• OCPBUGS-57064: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5105
• OCPBUGS-56899: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5094
• OCPBUGS-56829: Only update boot disks during GCP boot image updates #5088
• OCPBUGS-56445: Boot Image Controller should not degrade when golden configmap is slow to update #5063
• OCPBUGS-56632: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5076
• OCPBUGS-56035: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5039
• OCPBUGS-56261: Fix interrupt state to account for failure correctly #5055
• OCPBUGS-56180: Add hot loop detection in the boot image controller #5050
• OCPBUGS-56263: scope MCD node listers to current node #5058
• OCPBUGS-56121: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #5045
• OCPBUGS-56136: Compare the osImageURLs for OS validation check #5048
• OCPBUGS-56119: error from generateAndValidateRenderedMachineConfig function can be misleading #5044
• OCPBUGS-56038: OWNERS: update owners file with current MCO team members #5040
• OCPBUGS-55809: Use auto=start only for IPsec out connections #5035
• OCPBUGS-44757: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5031
• Revert “NO-ISSUE: debug podman on PIS” #5013
• OCPBUGS-44757: decrease leases for kubelet on azure #5010
• NO-ISSUE: debug podman on PIS #5003
• MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
• OCPBUGS-55388: MSBIC should not update windows machinesets #5009
• MCO-1645: API & client-go bumps for MCN V1 API updates #5011
• MCO-1519: Adapt MCO code to use V1 MCN API #4992
• OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
• OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
• NO-JIRA: Update Envtest assets to 1.32.1 #5002
• OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
• OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
• OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
• OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
• OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
• OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
• OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
• MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
• MCO-1615: MCN status update degraded #4977
• MCO-1509: Enable OCL for disconnected workflow #4971
• MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
• OCPEDGE-1690: add dual-replica templates #4938
• OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
• OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
• MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
• OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
• OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
• OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
• OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
• MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
• OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
• OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
• OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
• CORENET-5524: Modify regex for ipsec showstates command #4959
• OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
• OCPNODE-3020: Remove cgroupv1 references #4964
• MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
• OCPBUGS-38869: Update desired config in MCN on OCL update #4922
• OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
• MCO-1522: Adapt MCO to use PIS V1 API #4934
• OCPBUGS-54161: use the same success criteria for OCL e2e tests #4941
• MCO-1579: Bump ignition to 3.5 #4903
• NO-ISSUE: MCN changes for API validation #4949
• OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
• OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
• OCPBUGS-51130: In OCL. Cannot install extensions #4870
• OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
• OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
• “NO-ISSUE: ensure that client configs are not mutable” #4915
• MCO-1501: Add support for custom MCPs in MCN #4876
• OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
• OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
• OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
• OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
• RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
• MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
• MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
• NO-JIRA: Update the MCS iptables debug command in docs #4896
• OCPBUGS-43896: add revert logic to OCL path in MCD #4825
• MCO-1515: Kube bump to 1.32 #4797
• OPNET-629: Mark haproxy unhealthy if no healthy backends #4767
• OCPBUGS-44602: Set ownerReference for OCL build objects #4861
• OCPBUGS-41489: configure-ovs workaround for ovs-if-br-ex bug #4877
• OCPBUGS-48810: Ensure that build jobs are always reconciled #4811
• No-Issue: Remove OCL Extensions test #4868
• OCPEDGE-1493: Add 2no-ha extension support required by Two Node OpenShift #4843
• OCPBUGS-50849: add RHEL variant to IsEL() check #4856
• NO-ISSUE: increase WaitForPoolComplete() timeout #4873
• OCPBUGS-51009: OSUpdateStarted event should only be emitted on actual OS updates #4864
• OCPBUGS-47743: Update cluster-reader ClusterRole permissions #4823
• OCPBUGS-45459: Remove trailing period from Openstack provided hostnames #4778
• OCPBUGS-47629: /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4850
• OCPBUGS-49394: Fix SELinux failures running afterburn-hostname #4863
• OCPBUGS-50599: Enforce VIPs to be collocated at the same host #4844
• OCPBUGS-49347: Degraded machine-config CO due to ManagedBootImages update when upgrading an OCL cluster #4810
• OCPBUGS-33894: Avoid dumping Go struct in potentially user-facing reason annotation #4814
• OCPBUGS-44618: In OCL, MCPs are reporting Updating=false while the image is being built #4710
• OCPBUGS-49959: Panic in the MCC when using OCL v1 GA #4834
• NO-ISSUE: Add isabella-janssen to OWNERS as approver & reviewer #4846
• OCPBUGS-31778: Update format verbs for alert logs #4839
• OCPBUGS-50002: MCC complains about v1 MachineOSConfig in default featureset #4838
• MCO-1492: Add new runbook for SystemMemoryExceedsReservation to alert #4832
• OCPBUGS-43552: maxUnavailable value is not honored when disabling OCL #4817
• OCPBUGS-49731: Correct MachineConfig documentation on sysstat extension support #4828
• OCPEDGE-1585: Revert “OCPEDGE-1419 Add ksan-storage extension” #4821
• OCPBUGS-49436: Make resolv-prepender env file optional #4815
• NO-ISSUE: Remove etc-pki-entitlement cruft #4812
• OCPBUGS-48250: MCO CO degrades are stuck on until master pool updates complete #4791
• OCPBUGS-46072: create /run/nodeip-configuration before use #4798
• MCO-1437: MCO-1476: MCO-1477: MCO-1284: Adapt MCO to OCL v1 API #4756
• MGMT-19337: enable injection of custom kubelet labels via env var in base template #4794
• MCO-643: MCO-645: Reintroduce MCS CA rotation #4735
• OCPBUGS-34586: Auto-recover from MC with invalid extension #4763
• OCPBUGS-29067: GCP Custom-DNS: Update services that run on control plane nodes #4367
• OCPBUGS-48566: Enable nmstate-configuration on all platforms #4795
• MCO-466: Improve erroring where there is a bootstrap/in-cluster master config mismatch #4723
• OCPEDGE-1313: feat: added assets for arbiter node role #4675
• OCPEDGE-1419: Add ksan-storage extension #4792
• MGMT-19337: enable injection of custom kubelet labels via env var for master nodes #4746
• OCPBUGS-41489: Specify interface type when adding ovs-port #4761
• OCPBUGS-38809: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4554
• OCPBUGS-48195: use new buffer for decoding clusterOverridePolicyJSON #4780
• OCPBUGS-45928, OCPBUGS-46531: crio: drop crun subcgroup #4774
• MCO-1449: Add MCDPivotError runbook to prometheus rules #4771
• MCO-1482: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #4760
• MCO-81: Emit events to warn about failing drains #4726
• NO-ISSUE: Add AUTHFILE option to make image #4741
• OCPEDGE-1559: bump(ocp/api,ocp/client-go) #4772
• TRT-1926: Revert #4765 “crio: drop crun subcgroup” #4770
• OCPBUGS-33144: Add clarification to invalid maxUnavailable alert #4757
• OCPBUGS-38749: add timeout error to applyManifest retry list #4764
• OCPBUGS-45928, OCPBUGS-46531: crio: drop crun subcgroup #4765
• MCO-1470: Incorporates upstream devex helper changes for OCL testing #4753
• OCPBUGS-46052: machine-os-builder deployment missing openshift.io/required-scc annotation #4752
• MCO-1451: Merge “Zack’s Scripts” #4718
• MCO-1416: Update timeouts & improve debuggability of ocl e2e tests #4750
• MCO-113: Preserve previous boot MCD log #4731
• OCPBUGS-45496: Prevent undesired MOSBs from building #4739
• OCPBUGS-42636: Wait to render for other MC generating sub-controllers #4727
• OCPBUGS-45860: daemon: add nil check for annotation fetching #4740
• OCPBUGS-27477: Pausing Master MCP results in Alerts #4707
• MCO-1416: Increase timeouts in OCL e2e tests #4730
• OCPBUGS-45306: Remove trailing periods from AWS provided hostnames #4729
• OCPBUGS-39199: clusteroperator/machine-config blips Degraded=True during upgrade test #4706
• MCO-1416: Create OCL e2e Test Suite & Remove Unneeded Helper #4699
• OCPBUGS-44995: Update the storage.conf configuration file template #4681
• OCPBUGS-38749: add retry on error for apply functions #4698
• NO-ISSUE: Fix 3 typos #4685
• MCO-1165: rebuild annotation #4694
• Full changelog

machine-image-customization-controller

• OCPBUGS-44031: Verify tls while pulling down IPA #131
• OCPBUGS-45710: Use go version 1.23 and OCP 4.19 base image #133
• Full changelog

machine-os-images

• OCPBUGS-55934: Dummy change to force a rebuild for 4.19 #63
• NO-JIRA: Change to new host #54
• OCPBUGS-50910: Decompress pxe file only if it’s a valid compressed file #51
• OCPBUGS-44889: Allow external configuration of download host for production builds #46
• NO-ISSUE: Update OWNERS #49
• OCPBUGS-45474: Updating ose-machine-os-images-container image to be consistent with ART for 4.19 #48
• NO-ISSUE: Fix shellcheck #45
• Full changelog

metallb-frr

• OCPBUGS-55284: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #87
• Syncmetallb 04042025 #81
• Align to upstream #79
• Syncoperator03032025 #78
• OCPBUGS-45545: Updating ose-frr-container image to be consistent with ART for 4.19 #70
• Sync OWNERS with MetalLB #75
• Align upstream 13/1/25 #72
• Full changelog

monitoring-plugin

• OCPBUGS-60129: feat: add alerting rules tab to dev console #488
• OU-943: remove broken useEffect #484
• OU-943: Manual Cherry Pick #474
• OU-594: Manual cherry pick incidents tab 4 19 #479
• OU-863: [release-4.19] Manual cherry pick add disconnect option #482
• OU-939: Fix virt persepective new silence link #478
• OU-928: reset showgraph state when unmounting button #462
• OU-744: [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend #457
• OU-880: [release-4.19] Manual cherry pick ou 880 #458
• OU-842: [release-4.19] fix: override notistack dependency to avoid conflict #455
• OCPBUGS-56422: “Negative matcher” is checked by default on Create silence page #415
• NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes #411
• : NO-JIRA: bound table scroll and column alignment #409 #409
• NO-JIRA: feature: upgrade react router to v5 compat #406
• NO-JIRA: fix(incidents): performance improvements for incidents page #398
• OCPBUGS-48533: Reset variables when making orthongonal selections #394
• OU-765: Don’t break if cluster doesn’t exist #399
• OU-767: Allow filtering by cluster name #396
• OU-750: update the metrics typeahead to look pf-6 native #395
• OCPBUGS-54292: Show column headings on metrics page #397
• OU-760: Requests UX changes post PF-6 #390
• OU-723, OU-729: Add label typeahead #392
• OU-757: Show cluster column heading on acm silences page #393
• OU-703: fix states filter in aggregated row #389
• OU-752: Clear out old queries when loading queries from URL #391
• RHINENG-16773: fixed silence alerts data form not filled with alert details #384
• OU-702: re-add csv button for aggregated alert list #383
• OU-659: PF-6 Migration #380
• OU-678: fix: allow to set refresh interval to off #379
• OU-724: remove dependency on deleted image #375
• OU-660: Remove console CSS and Align with Patternfly components #362
• OCPBUGS-52592: Fix “Export as CSV” #369
• OU-700: don’t show metrics links in acm perspective #367
• COO-768: add plugin proxy to perses proxy path #365
• COO-759: update datasource whenerver the csrf token changes #363
• RHINENG-12634: incident utils typescript conversion #359
• CNV-55987: Aggregated alerts #348
• COO-684: add mui/material as is required as peer dependency #360
• OU-681: fix typo in the predefined metrics list #358
• OU-499: remove deprecated components #356
• NO-JIRA: fix virtualization persepective perses extension point #355
• OU-618: Various Perses Updates #353
• NO-JIRA: use ocp base images for ci #354
• NO-JIRA: add incidents header #351
• OU-618: Embed Perses Dashboards into Monitoring Plugin #350
• OU-643: fix filter dropdpdowns to match patterfly correct use, remove deprecated dropdown components #347
• rhineng-16008: add cutoff for alerts timestamps #349
• RHINENG-10537: incidents page remove longstanding filter #343
• RHINENG-10537: Voronoi container review branch #340
• RHINENG-10537: fix incidents page loading state issue #341
• NO-JIRA: Incidents page small fixes #336
• OU-649: fix net/http vulnerable dependency #332
• RHINENG-15594: fix tooltip in row details #334
• RHINENG-15501: Fixing incidents filter issues with severeties and long standing #333
• RHINENG-15582: Incidents dark theme support #331
• RHINENG-15284: sync alert chart to main filter #330
• RHINENG-15501: hotfix because filter requirement were updated #329
• OU-644: Finish Alerting Refactor #306
• OU-645: Fix virtualization perspective routes and routing #325
• NO-JIRA: Don’t attempt to access potentially undefined variable #326
• NO-JIRA: fixed function for incident chart colors #324
• RHINENG-15501: Improve incidents filter logic and sync #323
• RHINENG-15284: Sync alerts chart and incidents table with days filter #319
• OU-433: Split the Dashboard Page between perses and legacy #304
• RHINENG-15362: Sort the bars in the charts based on their first timestamp #322
• NO-JIRA: revert reset all filters button #321
• RHINENG-15190: fix gap in incident charts #316
• OCPBUGS-47535: use pf v5 variables and table component #307
• OU-630: Add Needed Virtualization Perspective Changes #317
• OCPBUGS-48142: Fix Dev Perspective Alert URL namespace #314
• Revert “OU-588: Move Incidents Tab to Alerting Page ” #312
• RHINENG-15114: incidents page fixed date style inconsistency #310
• RHINENG-15115: update hideshow graph button #311
• RHINENG-15096: incidents page reset filters fix #309
• OU-588: Move Incidents Tab to Alerting Page #303
• NO-JIRA: Remove duplicate parameter #296
• OCPBUGS-45896: Fix admin console alert detail graph #288
• OCPBUGS-46083: fix button spacing on silence form #300
• NO-JIRA: Run webpack with a different port #290
• OCPBUGS-45174: Fix bounds on bar chart #295
• OCPBUGS-45816: Fix inverted dropdown toggle #291
• OCPBUGS-45801: Allow editing the until field on the silence edit page #292
• OU-561: Use AlertsRulesDetailPage from monitoring-plugin #286
• OU-432: Merge Perses dashboards with current dashboards list #266
• NO-JIRA: tidy go dependencies #287
• OU-499: Port CONSOLE-4124, ODC-7655, CONSOLE-4127 to dynamic plugin #282
• OCPBUGS-45661: Updating monitoring-plugin-container image to be consistent with ART for 4.19 #284
• RHINENG-14555: Update for the filters and default state for the filters #285
• NO-JIRA: multiple components in tooltip for incidents #281
• RHINENG-14523: (fix) update expanded details #283
• RHINENG-14585: Remove pending alerts from processing and add another value to the unique key #280
• RHINENG-14677: fix filters for incidents #279
• OCPBUGS-35726: fix cert/key file reload #264
• NO-JIRA: fix incidents filter width #275
• NO-JIRA: Fix feature flagged DX #276
• RHINENG-14523: Fix expanded row won’t render without rule details + firing logic update #274
• NO-JIRA: Upgrade incidents dropdown #273
• RHINENG-14524: incidents charts update cursor and #270
• NO-JIRA: Remove extra copy that fails #269
• Full changelog

multus-admission-controller

• OCPBUGS-58849: Update the github.com/golang/glog module to v1.2.4 #100
• ART-13081: append .0 to go.mod version #95
• OCPBUGS-45601: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.19 #92
• Full changelog

multus-cni, multus-cni-microshift

• : OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining #268
• TRT-2057: Properly structure empty CNI result #267
• OCPBUGS-54153: Ds merge ³⁄₂₄ #264
• OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
• OCPBUGS-45037: Bring in getpodcontext (fix cache miss carry) #258
• Full changelog

multus-networkpolicy

• Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
• OCPBUGS-44354: Sync 20250204 (#66) #66
• Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#65) #65
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-59640: Prevent accidental IP deallocation in statefulsets #375
• OCPBUGS-54422: Ds merge ⁴⁄₃ #356
• OCPBUGS-53397: Upstream sync 20-03-2025 #353
• OCPBUGS-52415: replace entrypoint #349
• NP-1128: Ds merge 2/25/25 #346
• NP-1100: Add nodeslicecontroller to dockerfile #341
• OKD-232: fix entrypoint.sh for new SCOS builds #322
• NP-1110: Allow go vet to be skipped #327
• NP-1110: Remove build from make test-skip-static #326
• NP-1110: <Carry> Add test dockerfile #325
• NP-1111: replace ls line #323
• NP-1111: Commit for test logs <temp> #321
• <Carry> OCPBUGS-45854: Add test dockerfile #319
• NP-1108: <Carry> Add test dockerfile #318
• NP-1107: Ds merge 11/27/2024 #317
• Full changelog

must-gather

• MCO-1648: MCO-1649: Add machineconfignodes and pinnedimagesets to must-gather #487
• CNF-16640: Changes for FRR-K8s Deployed via CNO #479
• no-jira: Remove davemulford from collection-scripts/OWNERS file. #481
• : no-jira: Update Makefile and Add Testing Info #462
• NO-ISSUE: gather additional MCO debug artifacts #468
• OCPBUGS-44264: Collect all clustercsidriver resources #464
• OCPBUGS-45363: Update to use 4.19 image #466
• OCPBUGS-44857: Separate resources with comma to fix malformed inspect #465
• Full changelog

network-interface-bond-cni

• NO-JIRA:Add ci-operator yaml file #75
• OCPBUGS-57283: Bump github.com/containernetworking/plugins from to 1.7.1 #72
• OCPBUGS-45827: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.19 #66
• Full changelog

network-metrics-daemon

• OCPBUGS-58851: Bump github.com/golang/glog to v1.2.4 (#110) #110
• OCPBUGS-60172: Replace e2e test image (#119) #119
• Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.19 (#104) #104
• Full changelog

network-tools

• ART-13081: append .0 to go.mod version #146
• NO-JIRA: Fix JIRA queries #141
• NO-JIRA: Add Peng #138
• OCPBUGS-45318: change containerRuntime from runc to crun #136
• OCPBUGS-45757: Updating ose-network-tools-container image to be consistent with ART for 4.19 #135
• NO-JIRA: Add miheer and render dev names without “rhn-support-” prefix #134
• Full changelog

networking-console-plugin

• OCPBUGS-60137: Fix ingress details #261
• OCPBUGS-59841: Fix requiremenets with no value #255
• OCPBUGS-57266: Add fileupload translation #248
• OCPBUGS-57265: Fix pod context #247
• CNV-61827: fix styling issues #250
• CNV-61902: fetch description of terms for popovers #249
• CNV-57493: Validate if the namespace is configured for a primary UDN #237
• CNV-60065: fix cudn input name #233
• OCPBUGS-49395: adding translations #236
• Upload i18n translations scripts #229
• CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
• CNV-58647: update PatternFly Modal to new version #228
• CNV-58320: remove console classes which changed styling #227
• add adam to the approves #223
• CNV-56305: upgrade Network UI to PatternFly 6 #221
• CNV-58015: fix delete label row #224
• Upgrade dockerfile for node 18 and 4.19 #222
• CNV-56436: show ipam lifecycle correctly with new spec #218
• OCPBUGS-41964: No default path in the route creation form #216
• CNV-56236: fix cudn modal form titles #217
• OCPBUGS-42135: Update documentation links #214
• CNV-56336: fix ipam lifecycle with new spec #212
• CNV-56076: create cudn from empty state #210
• Fix nads with no label #206
• OCPBUGS-45803: Fix weight width #203
• CNV-55457: Remove project modal #202
• CNV-55234: do not show all namesapces in cudn namespace column #197
• CNV-55129: Disable udn button #178
• CNV-54828: fix udn create button #190
• OCPBUGS-48421: add CIRD subnmet description #183
• OCPBUGS-48440: show MTU and sort on list #181
• OCPBUGS-48677: fix nad misspelled #189
• CNV-55085: remove layer configuration #180
• CNV-55239: Cluster udn through matchlabel #179
• CNV-54825: do not allow deleting udns #191
• OCPBUGS-48676: replace edit with save #185
• OCPBUGS-48665: fix service name #184
• CNV-55131: remove the primary name to the udn creation form #177
• CNV-54827: fix select label on ClusterUserDefinedNetwork #173
• OCPBUGS-48206: fix path-to-regex CVE #174
• OCPBUGS-44823: hide udn navbar when udn is not installed #163
• CNV-54111: mark NAD managed by UDN #162
• OCPBUGS-48185: Bump nanoid from 3.3.7 to 3.3.8 #164
• OCPBUGS-48073: Bump dompurify from 2.4.9 to 2.5.8 #161
• OCPBUGS-48072: Bump cross-spawn from 7.0.3 to 7.0.6 #160
• OCPBUGS-46553: fix ports as number instead of strings #152
• OCPBUGS-46557: fix project displayName and description #154
• CNV-50554: fix create button position #153
• OCPBUGS-45050: UI crash accessing a Service in pending state #151
• CNV-46603: select projects with multitypeahead #150
• Updating networking-console-plugin-container image to be consistent with ART for 4.19 #148
• CNV-46603: search project by name and fix select height #142
• CNV-46603: Create project modal with ClusterUDN creation #146
• CNV-46603: Cluster UDN modal creation #145
• run kubevirt-plugin using start-console #147
• CNV-52127: remove t calls that are not within components #143
• CNV-46603: add CUDN kind #137
• Full changelog

nutanix-cloud-controller-manager

• OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
• OCPBUGS-45615: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.19 #41
• Full changelog

nutanix-machine-controllers

• OCPCLOUD-2842: Update dependencies to k8s 1.32 #90
• OCPBUGS-54317: fixing CVE-2025-22868 #97
• OCPBUGS-53245: Fix link-local addresses being added to machine #100
• OCPBUGS-50710: fixing CVE-2024-45338 #89
• OCPBUGS-45560: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.19 #87
• Full changelog

oauth-apiserver

• OCPBUGS-49845: Prevent storage layer retries for methods with side effects. #128
• Full changelog

oauth-proxy

• OCPBUGS-58836: 4.19 kube 1.32 #318
• OCPBUGS-58343: release 4.19 CVE fixes #326
• OCPBUGS-58276: fix e2e tests #323
• OCPBUGS-48333: Update dependencies to address CVE-2024-24786 #313
• no-jira: OWNERS: add Krzys (ibihim) and Ilias (liouk) as reviewers #282
• OCPBUGS-44319: Fix oauth-proxy e2e-component tests #289
• Full changelog

oauth-server

• OCPBUGS-57282: Updating oauth-server-container image to be consistent with ART for 4.19 #183
• Use newer build-machinery-go #178
• ART-13081: append .0 to go.mod version #176
• CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #169
• OCPBUGS-35294: Add French and Spanish localization for login screen #154
• Full changelog

oc-mirror

• OCPBUGS-57362: v2/mirror: retry in case of ContextDeadlineExceeded (#1199) #1199
• OCPBUGS-54622: cli/delete: fix workflow mode name output (#1222) #1222
• OCPBUGS-59799: Detect images from a Helm Chart with an aliased chart dependency (#1225) #1225
• OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1223) #1223
• OCPBUGS-58193: v2/archive: error d2m when no tar files found (#1200) (#1207) #1200
• OCPBUGS-58279: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1205) #1205
• OCPBUGS-58271: Fixes the tag when rebuilt catalog by digest only (#1203) #1203
• OCPBUGS-57387: v2/archive: fix sanitization of . (#1188) #1188
• OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1187) #1187
• upgrades distribution to v3.0.0 (#1194) #1194
• OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1163) #1163
• OCPBUGS-57451: deletes cosign tag based signatures (#1180) #1180
• adds code to handle signature errors in the archive pkg (#1177) #1177
• OCPBUGS-56486: v2/config: allow delete and mirror words (#1166) #1166
• OCPBUGS-56890: Bug fix for no release signature found (#1168) #1168
• OCPBUGS-57007: skips signature mirroring for rebuilt operator catalogs (#1171) #1171
• OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1170) #1170
• OCPBUGS-56185: [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) #1148
• disables the signature verification on operator catalog collection (#1157) #1157
• OCPBUGS-56433: v2/cli: always remove past archives before m2d (#1152) #1152
• OCPBUGS-56563: v2/archive: print unarchive progress (#1158) #1158
• changes the signature mirroring default to disabled (#1149) #1149
• OCPBUGS-55704: implements registries.d file as specified in containers/image docs (#1137) #1137
• OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
• OCPBUGS-54653: delete: continue on errors (#1127) #1127
• OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
• CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
• CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
• CLID-352: images: add integration tests image (#1124) #1124
• OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
• OCPBUGS-52471: Fix OOM at filtering catalogs (#1120) #1120
• OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
• OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
• OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
• OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
• OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
• no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
• v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
• OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
• CLID-325: adds cpu and memory profiling (#1100) #1100
• CLID-203, OCPBUGS-26771: fixes CVE-2024-0406 mholt/archiver: path traversal vulnerability (#1092) #1092
• Bump the pip group across 2 directories with 3 updates (#1054) #1054
• v2: update golangci-lint config (#1083) #1083
• OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1087) #1087
• v2/cli: always stop local registry and close registry.log (#1068) #1068
• OCPBUGS-44103: bump oc fork version (#1080) #1080
• OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1070) #1070
• OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1077) #1077
• v2: disable spinners when not running in a tty (#1049) #1049
• OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1072) #1072
• OCPBUGS-49991: fixes bundle related images being skipped (#1071) #1071
• NO-JIRA: only save graph data if it’s valid json (#1069) #1069
• OCPBUGS-49803: v2/cli: share common flag options (#1043) #1043
• OCPBUGS-49798: exposes the parallel-layers flag (#1063) #1063
• OCPBUGS-49730: fixes the infinite loop when no images to mirror (#1060) #1060
• no-jira: v2/local_stored_collector: fix missing log argument (#1061) #1061
• OCPBUGS-49723: v2/clusterresources: remove ClusterCatalog namespace (#1058) #1058
• CLID-300: Update catalog filtering doc (#1047) #1047
• CLID-306: upgrades dependencies (#1053) #1053
• CLID-306: upgrades dependencies (#1048) #1048
• CLID-303: disables the selected bundle feature (#1045) #1045
• CLID-301: add –cache-dir to delete command (#1041) #1041
• OCPBUGS-45059: fixes the delete when catalog mirrored with v1 from disk (oci://) (#1036) #1036
• CLID-301: add –cache-dir command line option (#1035) #1035
• OCPBUGS-45161: Generate ClusterCatalog resources for operator catalogs (#1034) #1034
• fixes CVEs upgrading go-git dependency (#1028) #1028
• OCPBUGS-47688: Fix ITMS and IDMS generated when mirror dest contains release namespace (#1002) #1002
• OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1016) #1016
• ocpbugs-44799: new concurrent worker using channels (#960) #960
• OWNERS: add myself to reviewers. (#1007) #1007
• OCPBUGS-44714: don’t clear cluster-resources dir on delete --generate (#1004) #1004
• OCPBUGS-47453: Use one of the newer sha256 keys to verify release signatures (#997) #997
• make: also fmt/vet the v2 module (#996) #996
• OCPBUGS-45215: cli: fix log-level values checking (#995) #995
• OCPBUGS-43489: Fix for deleting of local cache using –force-cache-de… (#988) #988
• OCPBUGS-45580: Fix Mirror2Disk not including the rebuilt catalog in the archive (#990) #990
• update ci file to the latest go version (#986) #986
• pull request template update (#987) #987
• OCPBUGS-44901: Align tag format for additionalImages and operators (#981) #981
• OCPBUGS-42849: Assign a static name to the release signature configmap (#979) #979
• OCPBUGS-43825: Fix graph image not deletable if mirrored by m2m (#982) #982
• Updating oc-mirror-plugin-container image to be consistent with ART for 4.19 (#980) #980
• OCPBUGS-44033: Failed to mirror ocp payload using digest (#978) #978
• OCPBUGS-44449: Fix batch info log for delete scenario (#967) #967
• OCPBUGS-43275: De-duplicate release images when several releases are chosen (#969) #969
• OCPBUGS-44448: Skip deletion of images with same source and different destination tag (#968) #968
• OCPBUGS-43731, OCPBUGS-44836: Ability to generate delete-images.yaml with v1 tags (#959) #959
• OCPBUGS-44818: Fix mirroring catalogs with full:true (#963) #963
• OCPBUGS-42862: oc-mirror fails to find the image-references (#966) #966
• OCPBUGS-44789: Fix mirroring OCI catalogs multiple times (#962) #962
• OCPBUGS-44033: Failed to mirror ocp payload using digest (#961) #961
• Full changelog

olm-catalogd

• NO-ISSUE: Synchronize From Upstream Repositories #322
• NO-ISSUE: Synchronize From Upstream Repositories #315
• NO-ISSUE: Synchronize From Upstream Repositories #312
• NO-ISSUE: Synchronize From Upstream Repositories #309
• NO-ISSUE: Synchronize From Upstream Repositories #308
• NO-ISSUE: Synchronize From Upstream Repositories #306
• NO-ISSUE: Synchronize From Upstream Repositories #305
• NO-ISSUE: Synchronize From Upstream Repositories #303
• NO-ISSUE: Synchronize From Upstream Repositories #300
• NO-ISSUE: Synchronize From Upstream Repositories #299
• NO-ISSUE: Synchronize From Upstream Repositories #298
• NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
• OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
• NO-ISSUE: Synchronize From Upstream Repositories #285
• NO-ISSUE: Synchronize From Upstream Repositories #282
• NO-ISSUE: Synchronize From Upstream Repositories #279
• NO-ISSUE: Synchronize From Upstream Repositories #278
• NO-ISSUE: Synchronize From Upstream Repositories #277
• NO-ISSUE: Synchronize From Upstream Repositories #276
• OPRUN-3722: Synchronize From Upstream Repositories #273
• NO-ISSUE: Synchronize From Upstream Repositories #271
• NO-ISSUE: Synchronize From Upstream Repositories #270
• NO-ISSUE: Synchronize From Upstream Repositories #266
• NO-ISSUE: Manual Synchronize from upstream #224
• NO-ISSUE: (Manual) Synchronize From Upstream Repositories #216
• NO-ISSUE: (Manual) Synchronize From Upstream Repositories #214
• NO-ISSUE: Synchronize From Upstream Repositories #212
• NO-ISSUE: Synchronize From Upstream Repositories #210
• NO-ISSUE: Synchronize From Upstream Repositories #209
• NO-ISSUE: Synchronize From Upstream Repositories #207
• NO-ISSUE: Synchronize From Upstream Repositories #205
• NO-ISSUE: Synchronize From Upstream Repositories #204
• NO-ISSUE: Synchronize From Upstream Repositories #203
• NO-ISSUE: Synchronize From Upstream Repositories #202
• NO-ISSUE: Synchronize From Upstream Repositories #199
• NO-ISSUE: Synchronize From Upstream Repositories #195
• NO-ISSUE: Synchronize From Upstream Repositories #193
• NO-ISSUE: Synchronize From Upstream Repositories #189
• NO-ISSUE: Synchronize From Upstream Repositories #190
• NO-ISSUE: Synchronize From Upstream Repositories #188
• NO-ISSUE: Synchronize From Upstream Repositories #187
• NO-ISSUE: Synchronize From Upstream Repositories #184
• NO-ISSUE: Synchronize From Upstream Repositories #183
• NO-ISSUE: Synchronize From Upstream Repositories #182
• NO-ISSUE: Synchronize From Upstream Repositories #181
• NO-ISSUE: Synchronize From Upstream Repositories #179
• NO-ISSUE: Synchronize From Upstream Repositories #178
• NO-ISSUE: Synchronize From Upstream Repositories #177
• NO-ISSUE: Synchronize From Upstream Repositories #176
• NO-ISSUE: Synchronize From Upstream Repositories #175
• NO-ISSUE: Synchronize From Upstream Repositories #174
• NO-ISSUE: Synchronize From Upstream Repositories #173
• NO-ISSUE: Synchronize From Upstream Repositories #172
• NO-ISSUE: Synchronize From Upstream Repositories #171
• NO-ISSUE: Synchronize From Upstream Repositories #170
• NO-ISSUE: Synchronize From Upstream Repositories #169
• NO-ISSUE: Synchronize From Upstream Repositories #168
• NO-ISSUE: Synchronize From Upstream Repositories #167
• NO-ISSUE: Synchronize From Upstream Repositories #165
• NO-ISSUE: Synchronize From Upstream Repositories #164
• NO-ISSUE: Synchronize From Upstream Repositories #163
• NO-ISSUE: Synchronize From Upstream Repositories #162
• NO-ISSUE: Synchronize From Upstream Repositories #161
• NO-ISSUE: Synchronize From Upstream Repositories #160
• NO-ISSUE: Synchronize From Upstream Repositories #158
• NO-ISSUE: Synchronize From Upstream Repositories #153
• NO-ISSUE: Synchronize From Upstream Repositories #150
• NO-ISSUE: Synchronize From Upstream Repositories #149
• NO-ISSUE: Synchronize From Upstream Repositories #147
• NO-ISSUE: Synchronize From Upstream Repositories #145
• NO-ISSUE: Synchronize From Upstream Repositories #144
• NO-ISSUE: Synchronize From Upstream Repositories #143
• NO-ISSUE: Synchronize From Upstream Repositories #141
• NO-ISSUE: Synchronize From Upstream Repositories #140
• NO-ISSUE: Synchronize From Upstream Repositories #139
• NO-ISSUE: Synchronize From Upstream Repositories #138
• NO-ISSUE: Synchronize From Upstream Repositories #137
• NO-ISSUE: Synchronize From Upstream Repositories #135
• NO-ISSUE: Synchronize From Upstream Repositories #133
• NO-ISSUE: Synchronize From Upstream Repositories #132
• NO-ISSUE: Synchronize From Upstream Repositories #131
• NO-ISSUE: Synchronize From Upstream Repositories #130
• NO-ISSUE: Synchronize From Upstream Repositories #129
• NO-ISSUE: Synchronize From Upstream Repositories #128
• NO-ISSUE: Synchronize From Upstream Repositories #127
• NO-ISSUE: Synchronize From Upstream Repositories #126
• NO-ISSUE: Synchronize From Upstream Repositories #125
• NO-ISSUE: Synchronize From Upstream Repositories #124
• NO-ISSUE: Synchronize From Upstream Repositories #123
• NO-ISSUE: Synchronize From Upstream Repositories #121
• NO-ISSUE: Synchronize From Upstream Repositories #119
• NO-ISSUE: Synchronize From Upstream Repositories #118
• NO-ISSUE: Synchronize From Upstream Repositories #117
• NO-ISSUE: Synchronize From Upstream Repositories #115
• OCPBUGS-36471: Synchronize From Upstream Repositories #114
• NO-ISSUE: Synchronize From Upstream Repositories #111
• NO-ISSUE: Synchronize From Upstream Repositories #110
• NO-ISSUE: Synchronize From Upstream Repositories #109
• NO-ISSUE: Synchronize From Upstream Repositories #108
• NO-ISSUE: Synchronize From Upstream Repositories #107
• NO-ISSUE: Synchronize From Upstream Repositories #106
• NO-ISSUE: Synchronize From Upstream Repositories #104
• NO-ISSUE: Synchronize From Upstream Repositories #103
• NO-ISSUE: Synchronize From Upstream Repositories #102
• NO-ISSUE: Synchronize From Upstream Repositories #101
• NO-ISSUE: Synchronize From Upstream Repositories #99
• OCPBUGS-31459: Synchronize From Upstream Repositories #97
• OPRUN-3268: Add pointer to tooling README for downstreaming info #94
• OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #89
• NO-ISSUE: Synchronize From Upstream Repositories #92
• NO-ISSUE: UPSTREAM: <carry>: update owners #91
• NO-ISSUE: Synchronize From Upstream Repositories #90
• NO-ISSUE: Synchronize From Upstream Repositories #88
• OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #86
• NO-ISSUE: Synchronize From Upstream Repositories #87
• NO-ISSUE: Synchronize From Upstream Repositories #84
• NO-ISSUE: Synchronize From Upstream Repositories #83
• NO-ISSUE: Synchronize From Upstream Repositories #82
• NO-ISSUE: Synchronize From Upstream Repositories #81
• NO-ISSUE: Synchronize From Upstream Repositories #80
• NO-ISSUE: Synchronize From Upstream Repositories #79
• NO-ISSUE: Synchronize From Upstream Repositories #78
• NO-ISSUE: Synchronize From Upstream Repositories #77
• NO-ISSUE: Synchronize From Upstream Repositories #76
• NO-ISSUE: Synchronize From Upstream Repositories #75
• NO-ISSUE: Synchronize From Upstream Repositories #74
• NO-ISSUE: Synchronize From Upstream Repositories #73
• NO-ISSUE: Synchronize From Upstream Repositories #72
• NO-ISSUE: Synchronize From Upstream Repositories #70
• NO-ISSUE: Synchronize From Upstream Repositories #67
• NO-ISSUE: Synchronize From Upstream Repositories #66
• NO-ISSUE: Synchronize From Upstream Repositories #65
• NO-ISSUE: Synchronize From Upstream Repositories #64
• NO-ISSUE: Synchronize From Upstream Repositories #63
• NO-ISSUE: Synchronize From Upstream Repositories #62
• NO-ISSUE: Synchronize From Upstream Repositories #61
• NO-ISSUE: Synchronize From Upstream Repositories #60
• NO-ISSUE: Synchronize From Upstream Repositories #59
• OCPBUGS-24795: Updating ose-olm-operator-controller-container image to be consistent with ART #51
• NO-ISSUE: Synchronize From Upstream Repositories #56
• NO-ISSUE: Synchronize From Upstream Repositories #55
• NO-ISSUE: Synchronize From Upstream Repositories #54
• NO-ISSUE: Synchronize From Upstream Repositories #53
• NO-ISSUE: Synchronize From Upstream Repositories #50
• NO-ISSUE: Synchronize From Upstream Repositories #49
• NO-ISSUE: Synchronize From Upstream Repositories #48
• NO-ISSUE: Synchronize From Upstream Repositories #47
• NO-ISSUE: Synchronize From Upstream Repositories #46
• NO-ISSUE: Synchronize From Upstream Repositories #41
• NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #44
• OPRUN-3081: UPSTREAM: <carry>: Drop commitchecker #37
• OPRUN-3075: Update to Upstream v0.7.0 #31
• OCPBUGS-20505: Bump golang.org/x/net to v0.17.0 #28
• OCPBUGS-19096: UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART #27
• Update to upstream v0.3.0 #25
• Add commitchecker #24
• UPSTREAM: <carry>: add manifests to image #23
• UPSTREAM: <carry>: add namespace management annotation #22
• UPSTREAM: 290: Remove Resource Limits (#290) #21
• UPSTREAM: <carry>: add scheduling preference/priorityClass annotations #20
• Update main to upstream commit 83d0403 #19
• UPSTREAM: <carry>: add USER to openshift dockerfile #18
• Updating ose-olm-operator-controller images to be consistent with ART #17
• UPSTREAM: <carry>: use image placeholders #16
• Update to upstream main commit 98b6a9e #15
• UPSTREAM: <carry>: conditionally rename manifests #13
• UPSTREAM: <carry>: align dockerfile and manifests for bin target #14
• UPSTREAM: <carry>: precision target manifest verification #12
• Update to upstream main commit 3d30ad0 #5
• UPSTREAM: <carry>: ci-operator #1
• Full changelog

olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #322
• NO-ISSUE: Synchronize From Upstream Repositories #315
• NO-ISSUE: Synchronize From Upstream Repositories #312
• NO-ISSUE: Synchronize From Upstream Repositories #309
• NO-ISSUE: Synchronize From Upstream Repositories #308
• NO-ISSUE: Synchronize From Upstream Repositories #306
• NO-ISSUE: Synchronize From Upstream Repositories #305
• NO-ISSUE: Synchronize From Upstream Repositories #303
• NO-ISSUE: Synchronize From Upstream Repositories #300
• NO-ISSUE: Synchronize From Upstream Repositories #299
• NO-ISSUE: Synchronize From Upstream Repositories #298
• NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
• OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
• NO-ISSUE: Synchronize From Upstream Repositories #285
• NO-ISSUE: Synchronize From Upstream Repositories #282
• NO-ISSUE: Synchronize From Upstream Repositories #279
• NO-ISSUE: Synchronize From Upstream Repositories #278
• NO-ISSUE: Synchronize From Upstream Repositories #277
• NO-ISSUE: Synchronize From Upstream Repositories #276
• OPRUN-3722: Synchronize From Upstream Repositories #273
• NO-ISSUE: Synchronize From Upstream Repositories #271
• NO-ISSUE: Synchronize From Upstream Repositories #270
• NO-ISSUE: Synchronize From Upstream Repositories #266
• NO-ISSUE: Manual Synchronize from upstream #224
• NO-ISSUE: (Manual) Synchronize From Upstream Repositories #216
• NO-ISSUE: (Manual) Synchronize From Upstream Repositories #214
• NO-ISSUE: Synchronize From Upstream Repositories #212
• NO-ISSUE: Synchronize From Upstream Repositories #210
• NO-ISSUE: Synchronize From Upstream Repositories #209
• NO-ISSUE: Synchronize From Upstream Repositories #207
• NO-ISSUE: Synchronize From Upstream Repositories #205
• NO-ISSUE: Synchronize From Upstream Repositories #204
• NO-ISSUE: Synchronize From Upstream Repositories #203
• NO-ISSUE: Synchronize From Upstream Repositories #202
• NO-ISSUE: Synchronize From Upstream Repositories #199
• NO-ISSUE: Synchronize From Upstream Repositories #195
• Full changelog

openshift-apiserver

• OCPBUGS-57206: Wire dry run option to Image API server operations #524
• OCPBUGS-56494: Fix image reference in TestImageStreamImportQuayIO #510
• OCPBUGS-44432: Skip blocked registry check for registries with mirrors #475
• OCPBUGS-49844: Prevent storage layer retries for methods with side effects. #495
• OCPBUGS-45861: validate image property isn’t nil before using #483
• OCPBUGS-45861: move on to the next digest/tag during failures #480
• OCPBUGS-45861: prevent panic when no image and error are set #478
• Full changelog

openshift-controller-manager

• OCPBUGS-57951: ignore error failing to find pull/push secrets #401
• OCPBUGS-57193: Set node-pullsecrets volume to read-only to protect image pull credentials #390
• OCPBUGS-55642: Empty proxy variables are causing issues during the build #376
• OCPBUGS-50507: Intermittent authentication issues when accessing OpenShift registry #365
• WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #366
• OCPBUGS-47527: Add team members to the OWNERS file #355
• Full changelog

openshift-state-metrics

• ART-13081: append .0 to go.mod version #122
• OCPBUGS-45624: Updating openshift-state-metrics-container image to be consistent with ART for 4.19 #119
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-57891: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #366
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #359
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #358
• OCPCLOUD-2857: Set infrastructureRef.Namespace in Cluster object #357
• OSASINFRA-3707: ⚠️ Manual sync from release-0.12 on main ⚠️ #352
• OSASINFRA-3722: Deploy manifests for CustomNoUpgrade feature set also #356
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #349
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #348
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #347
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #339
• OCPBUGS-45387: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.19 #345
• Full changelog

openstack-machine-api-provider

• OSASINFRA-3746: Consume CA cert from CCO secret #131
• NO-JIRA: Update golang.org/x/net to v0.33.0 #128
• NO-JIRA: Upgrade Gophercloud to v1.14.1 #129
• OCPBUGS-48288: Stop ignoring port.tags field #130
• OCPBUGS-45684: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.19 #127
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-59258: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1037
• OCPBUGS-58259: Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] #1030
• OCPBUGS-57352: reduce cache expiry frequency [release-4.19] #1019
• OCPBUGS-57279: [release-4.19]: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1015
• OCPBUGS-56034: fix(olm): improve error logging for missing olm.managed label (#3558) #999
• NO-ISSUE: Synchronize From Upstream Repositories #994
• OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
• OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
• NO-ISSUE: Synchronize From Upstream Repositories #986
• NO-ISSUE: Synchronize From Upstream Repositories #984
• NO-ISSUE: Synchronize From Upstream Repositories #966
• NO-ISSUE: Update DOWNSTREAM owners files #973
• OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
• NO-ISSUE: Synchronize From Upstream Repositories #964
• NO-ISSUE: Synchronize From Upstream Repositories #963
• NO-ISSUE: Synchronize From Upstream Repositories #962
• NO-ISSUE: Synchronize From Upstream Repositories #961
• NO-ISSUE: Synchronize From Upstream Repositories #952
• NO-ISSUE: Synchronize From Upstream Repositories #937
• OCPBUGS-48486: Fix concurrent namespace resolution #936
• NO-ISSUE: Manual Synchronize From Upstream Repositories #933
• NO-ISSUE: Synchronize From Upstream Repositories #928
• NO-ISSUE: Synchronize From Upstream Repositories #927
• NO-ISSUE: Synchronize From Upstream Repositories #919
• NO-ISSUE: Synchronize From Upstream Repositories #915
• NO-ISSUE: Remove m1kola from owners #914
• OCPBUGS-45420: Updating operator-registry-container image to be consistent with ART for 4.19 #909
• OCPBUGS-45396: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.19 #908
• OCPBUGS-42815: Synchronize From Upstream Repositories #910
• OCPBUGS-45490: Synchronize From Upstream Repositories #907
• OCPBUGS-45381: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.19 #906
• NO-ISSUE: Synchronize From Upstream Repositories #904
• NO-ISSUE: Synchronize From Upstream Repositories #903
• NO-ISSUE: Synchronize From Upstream Repositories #899
• Full changelog

operator-marketplace

• OPRUN-3835: Update to 4.19 community-operators catalog #621
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
• NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
• OPRUN-3621: Replace 4.18 image references with 4.19 #579
• NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
• OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
• NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
• NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
• NO-ISSUE: Add dependabot to help keep the project maintained #599
• OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
• NO-ISSUE: Upgrade controller-runtime from v0.17.2 to 0.20.2 and consequently k8s version from 1.29 to 1.32 #594
• OCPBUGS-49378: Upgrade golang.org/x/net (CVE-2024-45338) #583
• OCPBUGS-45566: Updating marketplace-operator-container image to be consistent with ART for 4.19 #580
• Full changelog

ovirt-csi-driver-operator

• NO-JIRA: Readme update #139
• OCPBUGS-45766: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.19 #138
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-28-2025] #2688
• OCPBUGS-48709, OCPBUGS-59530: DownStream Merge Sync from 4.20 [07-17-2025] #2675
• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-09-2025] #2660
• OCPBUGS-59106: DownStream Merge Sync from 4.20 [06-18-2025] #2642
• Full changelog

powervs-block-csi-driver

• MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
• MULTIARCH-5281: Rebase ibm-powervs-block-csi-driver with upstream #96
• OCPBUGS-45423: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.19 #93
• MULTIARCH-5191: Rebase with upstream k8s-sigs/ibm-powervs-block-csi-driver #95
• Full changelog

powervs-block-csi-driver-operator

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #83
• STOR-2252: Bump all deps #81
• OCPBUGS-46577: Provision for user-configured endpoints for IBMCLOUD_IAM_API_ENDPOINT, IBMCLOUD_IAM_API_ENDPOINT,etc #79
• OCPBUGS-45550: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.19 #80
• OCPBUGS-44978: bump openshift/api #77
• Full changelog

powervs-cloud-controller-manager

• No-Jira: Update packages in go.mod #85
• No-Jira: Manual rebase of upstream release 1.32 #82
• OCPBUGS-45728: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.19 #81
• Full changelog

powervs-machine-controllers

• OCPBUGS-54620: CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing #112
• OCPBUGS-53309: Update dependencies to k8s 1.32 #110
• OCPBUGS-51276: Fix for CVE-2024-45338 in golang.org/x/net/html in main #100
• OCPBUGS-49733: Uses VPC endpoint override in Disconnected case #99
• OCPBUGS-47764: Honors custom ResourceController endpoint URL in NewValidatedClient(), if provided #98
• OCPBUGS-47476: Overrides URL for ResourceController client if provided #97
• OCPBUGS-46471: Sets Authenticator.URL with IAM endpoint override if provided #95
• OCPBUGS-45732: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.19 #93
• MULTIARCH-5186: Update k8s and Openshift dependencies #94
• Full changelog

prom-label-proxy

• ART-13081: append .0 to go.mod version #382
• OCPBUGS-45713: Updating prom-label-proxy-container image to be consistent with ART for 4.19 #377
• Full changelog

prometheus

• MON-4199: chore: update to v3.2.1 #246
• OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
• MON-4104: Update to 3.0 #227
• OCPBUGS-48273: fix(main.go): avoid closing the query engine until it is guaranteed to no longer be in use #241
• OCPBUGS-45586: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.19 #238
• Full changelog

prometheus-alertmanager

• NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 #99
• MON-4155: Bump openshift/prometheus-alertmanager to v0.28.0 #98
• OCPBUGS-45623: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.19 #97
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4207: Bump openshift/prometheus-operator to v0.81.0 #329
• NO-JIRA: Bump openshift/prometheus-operator to v0.80.1 #325
• MON-4126: [bot] Bump openshift/prometheus-operator to v0.80.0 #324
• OCPBUGS-18656: Bump openshift/prometheus-operator to v0.79.2 #321
• OCPBUGS-45644: Updating prometheus-config-reloader-container image to be consistent with ART for 4.19 #319
• OCPBUGS-45736: Updating prometheus-operator-container image to be consistent with ART for 4.19 #320
• OCPBUGS-45453: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.19 #317
• NO-JIRA: [bot] Bump openshift/prometheus-operator to v0.78.2 #314
• Full changelog

prometheus-node-exporter

• MON-4204: Use slog for accelerators (and version bump) #164
• MGMT-19498: Add configmap support to the accelerator’s collector #155
• OCPBUGS-46498: adding new NVIDIA accelerators to monitor #161
• OCPBUGS-46498: updating monitored accelerator list #159
• OCPBUGS-45424: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.19 #157
• MGMT-19361: Adding new device for accelerators monitoring #156
• Full changelog

route-controller-manager

• OCPBUGS-29354: Added error event for failed ingress to route conversion #48
• OCPBUGS-45441: Updating ose-route-controller-manager-container image to be consistent with ART for 4.19 #52
• NO-JIRA: Updated OWNERS file to reflect current team #54
• NO-JIRA: Added HACKING.md file #51
• Full changelog

service-ca-operator

• OCPBUGS-55057: Don’t check featuregates on operand #263
• CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
• OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
• OCPBUGS-40772: Bump go to 1.22.0 #248
• Full changelog

telemeter

• ART-13081: append .0 to go.mod version #560
• OCPBUGS-50837: Drop nil metrics during elide transform and capture metric for same #556
• OCPBUGS-50837: Check nil metric in elide label #555
• SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
• OCPBUGS-48381: rename doc references to master branch to main #553
• OCPBUGS-45763: Updating telemeter-container image to be consistent with ART for 4.19 #552
• Full changelog

tests

• OCPBUGS-60092: feat(azure): skip metrics collection for ARO HCP hypershift #30051
• OCPBUGS-59398: Skip MCN’s node degrade test on 4.19 #29990
• OCPBUGS-59391: [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests #29989
• OCPBUGS-59226: bump watch count limits #29982
• OCPBUGS-57886: Bump 4.19 1.32.6 #29933
• OCPBUGS-58470: Update IPsec e2e test to validate NAT-T encapsulation option #29957
• OCPBUGS-57206: Backport pr 29834 to release-4.19 #29903
• OCPBUGS-58204: Fix MCN test on agent compact FIPS jobs #29943
• OCPBUGS-58053: [release-4.19] MCO-1768: Enable PIS testing on Metal #29936
• OCPBUGS-57436: Add MCO test suite to 4.19 #29918
• OCPBUGS-57930: Boot image controller should correctly handle marketplace boot images #29935
• OCPBUGS-57217: Stabilize custom MCP cleanup on MCN tests #29902
• OCPBUGS-57303: Fix failed tests of e2e-aws-ovn-tls-13 #29906
• OCPBUGS-57020: Skip tests modifying cluster/network.config when it is not permitted #29884
• OCPBUGS-57189: RouteExternalCertificate : Add fix for None platform type #29899
• OCPBUGS-56187: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29789
• OCPBUGS-56969, OCPBUGS-56970: Fix RouteExternalCertificate tests for few other on-prem jobs #29880
• OCPBUGS-56829: Only update boot disks during GCP boot image updates tests #29878
• OCPBUGS-56967: Do not set the MTU when using NetworkAttachementDefinition #29879
• OCPBUGS-56947: fix deployment rollout wait to wait for desired replicas #29877
• OCPBUGS-56886: Fix bearer token exposure in exit condition as well #29841
• OCPBUGS-56437: Update to kubernetes 1.32.5 #29875
• OCPBUGS-56796: Skip failing test [release-4.19] #29865
• OCPBUGS-56045: OLMv1: Update test bundles [release-4.19] #29836
• OCPBUGS-56662: Fix failed etcd test on arbiter ci run #29826
• OCPBUGS-56399: fix watch request counts #29799
• CORENET-5875, CORENET-5876, OCPBUGS-56000: Add EgressIP and L2 UDN route advertisements tests #29777
• OCPBUGS-55897: bump limits #29783
• OCPBUGS-55969: (olmv1 tests) Increase timeout for verifyAPIEndpoints #29770
• OCPBUGS-55897: bump limits #29767
• OCPBUGS-55265: Bump 1.32.4 #29707
• OKD-243: Skip GatewayAPIController tests for OKD #29749
• OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
• OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
• OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
• OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
• TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
• OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
• OCPBUGS-54869: bump limits #29722
• OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
• TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
• TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
• OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
• MCO-1646: API & client-go bumps for MCN V1 API updates #29717
• NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
• Revert “TRT-2049: check for any watch requests” #29719
• MCO-1519: Adapt MCN tests to use V1 API #29701
• OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
• TRT-2049: check for any watch requests #29674
• NO-ISSUE: Automated - Update synthetic test data #29677
• OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
• NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
• TRT-2043: look for high latency audit requests #29571
• OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
• OCPBUGS-54869: bump limits #29700
• OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
• OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
• OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
• OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
• OCPBUGS-55175: Add cleanup to MCN test #29695
• OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
• OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
• OCPBUGS-54869: bump limits #29688
• NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
• TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
• OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
• OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
• MCO-1636: skip PIS custom pool checks on SNO cluster #29673
• MCO-1520: Add MachineConfigNode e2e tests #29596
• OCPBUGS-54869: bump limits #29679
• OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
• SPLAT-2060: Registered Machine API tests extension #29579
• MCO-1523: PinnedImageSet v1alpha1 Testing #29599
• SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
• NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
• TRT-2049: Track Watch Counts via Audit Events #29628
• OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
• OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
• NO-ISSUE: Automated - Update synthetic test data #29600
• OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
• CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
• OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
• OCPBUGS-53249: feat: support platform type external #29623
• MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
• TRT-1854: add synthetic test to check for presence of “Skipped” annotations in OTE tests #29606
• OCPBUGS-53014: Bump to kubernetes 1.32.3 #29612
• NE-1968: add e2e tests for FeatureGate GatewayAPI #29597
• NO-ISSUE: Clean up MachineConfiguration fixture apply #29626
• NO-ISSUE: Wait for MachineConfiguration status to be upto date #29625
• TRT-2052: Fix broken intervals charts #29616
• NO-JIRA: Alert intervals should have the display flag for charting #29624
• OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
• CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
• SDN-5768: virt, udn: use l2bridge binding #29439
• OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
• CNTRLPLANE-5: Decode CBOR data in etcd test #29601
• MCO-1594: updates for ManagedBootImageStatus #29598
• SDN-4168: Fix IPsec tests for monitor failures #29437
• TRT-2026: validate that the binary extraction was successful via existence check #29595
• OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
• NO-ISSUE: Automated - Update synthetic test data #29570
• NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
• TRT-1575: Fail the test when an expected operator goes to degraded #29566
• OCPBUGS-52578: Use payload pullspec for image info test #29586
• OCPBUGS-51373: use non-fake boot image for patch #29574
• NO-JIRA: Support known namespaces for terminationMessagePolicy tests #29534
• Revert “OCPNODE-2596: Add SigstoreImageVerification e2e tests” #29572
• OCPNODE-2596: Add SigstoreImageVerification e2e tests #29530
• NO-ISSUE: Automated - Update synthetic test data #29559
• WRKLDS-1653: update pathological ScalingReplicaSet event exception #29569
• TRT-1874: rename master->main #29565
• OCPBUGS-50587: Rely on unstructured for update status instead of type conversion #29560
• OCPQE-28543: Check load balancer healthcheck port and path on aws #29544
• NO-JIRA: Allow overriding extension binary to local path #29557
• CNTRLPLANE-1: Update to Kubernetes v1.32.2 #29549
• OCPBUGS-26601: Re-enable AWS for router HTTP/2 test #29326
• TRT-1286: List images from external binaries #29450
• OCPBUGS-49600: Display etcd bootstrap event on timeline #29490
• NO-ISSUE: Automated - Update synthetic test data #29531
• Revert “NO-JIRA: use quay.io/openshift/origin-cli:latest directly” #29543
• CNTRLPLANE-1: Bump to latest downstream version of ginkgo #29538
• TRT-2006: Revert “NO-JIRA: Add test case for checking EgressFirewall DNS names in caps” #29540
• NO-JIRA: Add test case for checking EgressFirewall DNS names in caps #29414
• CNTRLPLANE-1: Update to Kubernetes v1.32.1 #29493
• MULTIARCH-5318: Add tests for ImageStreamImportMode feature gate #29524
• OCPBUGS-45893: Allows for backwards compatibility with upcoming network name change #29525
• NO-ISSUE: Automated - Update synthetic test data #29418
• SDN-4930: Increases timeouts for live migration #29517
• OCPBUGS-45153: address malformed configmap post-test #29333
• SDN-4930: Bump wait for UDN CR ready timeout #29509
• SDN-4930: increase probe initialDelaySeconds from 1 to 5 #29501
• SDN-4930: Bump UDN pod ready timeout #29510
• SDN-4930: Make CUDN ready timeout use constant #29511
• TRT-1575: Add a few more exception outside of upgraded window #29485
• OCPBUGS-44238: Add Readiness Probe to Router Status Tests #29395
• NO-JIRA: upkeep: add err check for failed cleanup step #29505
• TRT-1958: pass EXTENSION_ARTIFACT_DIR to binaries #29464
• SDN-4930: UDN: wait for moar openshift #29494
• OCPBUGS-48445: Ignore an error intentionally generated by a test case #28590
• SDN-4930: Fix live migration test detecting dualstack #29482
• OCPBUGS-43777: tests: extend kubeconfig tests #29335
• SDN-4930: UDN tests wait for SCC annotation on namespace #29479
• no-jira: add a monitor test to detect concurrent installer pod or static pod #29462
• OCPBUGS-26603: e2e: Fix IPv6 handling in router tests. #29224
• SDN-4930: Fix live migration tests #29477
• OCPBUGS-48053: auditLogAnalyzer: fix flake error message #29402
• NO-JIRA: managed services: add hcp crd to unstable list #29460
• SDN-4168: Fix for nmstate deployment related failures #29452
• OCPBUGS-48126: kubeapiserver auditloganalyzer: show resources updated too often #29397
• OCPBUGS-48340: skip OperatorHubSourceError metric checking when disableAllDefaultSources is true #29435
• Revert “Revert “TRT-1803: Wait for operators to become stable before test”” #29401
• NO-JIRA: use quay.io/openshift/origin-cli:latest directly #29466
• SDN-4930: Network segmentation add missing eventually #29468
• OCPBUGS-48320, SDN-4930: Bump KAPI server timeout to be 5seconds #29469
• OCPBUGS-48320, SDN-4930: Increase probe timeouts on UDN pod #29458
• OCPBUGS-48629: Use max time for netpol pods curl requests #29457
• OCPBUGS-48629: move initialization of OC to test instead of package level #29459
• OCPBUGS-45607: network, net-seg use different http port per network #29415
• SDN-4930: E2Es for net seg: increase server connect timeout to reduce flakes #29463
• OCPBUGS-42609: Updates UDN tests with required NS label #29417
• SDN-4930: virt, udn: read the primary UDN interface IPs from the vmi status (in an eventually block) #29429
• SDN-4930: Refactor and fix UDN/CUDN readiness checks #29454
• SDN-4930: Fix CUDN manifest to account for IPV6 singlestack #29451
• SDN-4930: Make UserDefinedNetwork status backwards compatible #29446
• OCPBUGS-48569, SDN-4930: ovn-k,net-seg: Use the right IP family according to env #29445
• SDN-4930: Fix pods cleanup in ClusterUserDefinedNetwork test #29448
• OCPBUGS-48569, SDN-4930: e2e,ovn-k,net-seg: Wait for UDN condition populate #29436
• OCPBUGS-48238, OCPBUGS-48449, OCPBUGS-48450: Set the poll timeout and poll interval in eventually directly for the tests #29428
• SDN-5473: OVN-K: Port e2e tests for CUDN functionality, connectivity and isolation #29274
• OCPBUGS-43777: apiserver: add tests to verify kube-apiserver is accessible via different endpoints #29339
• SDN-5579: virt, feat gates: the UDN CRD depends on the NetSeg feat gate #29407
• SDN-4930: Verify that a UDN pod can reach the kapi service in the default network #29253
• SDN-4930: networksegmentation, udn: Wait for NetworkCreated or NetworkReady condition #29381
• SDN-5017: Fix subnet check for assigned pod IPs #29394
• OCPBUGS-47529: Add team members to the OWNERS file for PR approvals #29384
• OCPBUGS-43478: generalize the RHEL8 and RHEL9 subscription_content.go test #29315
• OCPBUGS-39315: remove ingress operator exclusion #29093
• OCPBUGS-48076: external binary: in-line registry auth file fetching #29396
• OCPBUGS-47700: images: Fix layers test to work with manifestlisted imagestreams #29392
• OCPBUGS-47796: fix year for string compare #29398
• NO-ISSUE: Automated - Update synthetic test data #29332
• Revert “TRT-1803: Wait for operators to become stable before test” #29399
• OCPBUGS-44257: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29355
• SDN-5031: e2e,networking: add UDN open-default-ports annotation test. #29346
• SDN-4168: Optimize timing for IPsec tests #28797
• SDN-5567: virt: add GA placeholder test #29375
• SDN-5566: virt, udn: primary UDN requires the net seg FG #29374
• TRT-1803: Wait for operators to become stable before test #29367
• TRT-1575: Use catchall card for operator degraded exceptions for major operators #29354
• OCPBUGS-45756: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.19 #29349
• SDN-5568: only provision workloads when network creation has started #29348
• SDN-5017: Add UDN Network Policy e2e tests #29195
• STOR-2136: Remove CSI snapshot webhook tests #29383
• CNTRLPLANE-1: Update etcd test data for 1.32 release #29376
• STOR-2136: Remove CSI snapshot webhook conditions checks #29365
• CNTRLPLANE-1: Add incoming images k8s 1.32 #29362
• NO-JIRA: managed services: bump series limit #29369
• NO-ISSUE: Remove m1kola from owners #29368
• trt-1892: check for pod security audit violations #29320
• NE-1870: Fix the Network Ingress & DNS OWNERS files and add aliases to OWNERS_ALIASES #29247
• OCPBUGS-45994: managed services: allow KubeDaemonSetMisScheduled alert #29357
• OCPBUGS-45838: managed services: add more missing namespaces #29356
• OCPBUGS-42618: Replace RunHostCmd with Exec function to censor bearer token being ex… #29176
• OCPBUGS-42610: filter out pod events during vsphere snapshot options #29311
• OCPBUGS-45838: managed services: add missing namespaces to list #29351
• OCPBUGS-44970: Excluding loki prod-bearer-token container from excessive restarts test in SNO #29329
• OCPBUGS-44808: reenable OLMv1 test for maxOpenShiftversion #29328
• OCPBUGS-45363: Parse node logs also when encountered with standard html header #29340
• NO-JIRA: managed services: add known image check for gcp #29336
• TRT-1895: External binary caching and code clean-up #29300
• OCPBUGS-44961: Fix “Enforce the required-scc monitor test and validate usage of non-standard OCP SCCs” #29323
• TRT-1898: Revert “NO-JIRA: address malformed CMO configmap post-test” #29330
• NO-JIRA: add additional managed namespaces #29325
• NO-JIRA: watch CRDs #29308
• TRT-1761: Allow the test for kubelet DiskPressure to fail job runs #29318
• NO-JIRA: address malformed CMO configmap post-test #29309
• NO-ISSUE: Automated - Update synthetic test data #29317
• NO-JIRA: Revert “Enforce the required-scc monitor test and validate usage of non-standard OCP SCCs #29321
• Full changelog

thanos

• MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
• OCPBUGS-48730: Update golang.org/x/net to v0.33 #156
• MON-4117: Bump to v0.37.2 and use go1.23 #154
• Full changelog

vsphere-cloud-controller-manager

• OCPCLOUD-2838: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ed2b673) into master #75
• OCPBUGS-45406: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.19 #81
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-56962: Update manifests gen to remove reliance on admission registration v1beta1 #61
• NO-JIRA: Update manifests generator tooling #54
• OCPCLOUD-2853: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.12.0 (8c1c84c) into master #53
• OCPBUGS-45478: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.19 #52
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-55700: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #143
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
• OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
• OCPBUGS-46317, OCPBUGS-46331, OCPBUGS-47367, OCPBUGS-47437: bump golang.org/x/net to v0.33.0 #138
• OCPBUGS-45413: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.19 #136
• OCPBUGS-45402: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.19 #135
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-53059: Fix panic issues when LegacyConfig is nil #304
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #300
• STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
• STOR-2245: add manifest-topology.yaml for topology related feature and test #302
• OCPBUGS-44374: Bump library-go #301
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
• STOR-2252: Bump all deps #296
• OCPBUGS-43273: fix panic when vcenter address is incorrect #283
• STOR-2319: Remove code for CNS migration tool #286
• OCPBUGS-48103: Update master to main #281
• OCPBUGS-49406: Set reconcile-sync to 10 minute for ListVolume #284
• OCPBUGS-46574: Escape backslash in vCenter username #279
• OCPBUGS-46089: List only linux nodes #278
• OCPBUGS-45563: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.19 #275
• OCPBUGS-45563: Move SyncRemove to AbstractStorageClass #276
• Full changelog

vsphere-problem-detector

• OCPBUGS-56230: replace operator client #183
• OCPBUGS-52964: improve datastore check messages #181
• SPLAT-1801: Add support for host groups #175
• No-JIRA: Update owners #178
• STOR-2252: Bump all deps #177
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
• Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.19 #174
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.32.7-2.rhaos4.19.git71d5a61.el9
• kernel-5.14.0-570.32.1.el9_6
• openshift-kubelet-4.19.0-202508052241.p0.g138db52.assembly.stream.el9
• systemd-252-51.el9_6.1

Full list (568 packages)

• NetworkManager-1:1.52.0-5.el9_6
• NetworkManager-cloud-setup-1:1.52.0-5.el9_6
• NetworkManager-libnm-1:1.52.0-5.el9_6
• NetworkManager-ovs-1:1.52.0-5.el9_6
• NetworkManager-team-1:1.52.0-5.el9_6
• NetworkManager-tui-1:1.52.0-5.el9_6
• WALinuxAgent-udev-2.7.0.6-11.el9_6.1
• aardvark-dns-2:1.14.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9_6
• bind-license-32:9.16.23-31.el9_6
• bind-utils-32:9.16.23-31.el9_6
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.6-3.el9_6
• bootupd-0.2.27-4.el9_6
• bsdtar-3.5.3-5.el9_6
• bubblewrap-0.4.1-8.el9_5
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.1-2.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• conntrack-tools-1.4.7-4.el9_5
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-1.el9_6
• containernetworking-plugins-1:1.6.2-2.el9_6
• containers-common-2:1-117.el9_6
• coreos-installer-0.23.0-1.el9
• coreos-installer-bootinfra-0.23.0-1.el9
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.32.7-2.rhaos4.19.git71d5a61.el9
• cri-tools-1.32.0-2.el9
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.22-1.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_6.1
• cryptsetup-libs-2.7.2-3.el9_6.1
• curl-7.76.1-31.el9_6.1
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.1
• device-mapper-multipath-libs-0.8.7-35.el9_6.1
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-16.el9_4
• dosfstools-4.2-3.el9
• dracut-057-88.git20250311.el9_6
• dracut-network-057-88.git20250311.el9_6
• dracut-squash-057-88.git20250311.el9_6
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9_5
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.2
• glibc-2.34-168.el9_6.23
• glibc-common-2.34-168.el9_6.23
• glibc-gconv-extra-2.34-168.el9_6.23
• glibc-minimal-langpack-2.34-168.el9_6.23
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-104.el9_6
• grub2-efi-x64-1:2.06-104.el9_6
• grub2-pc-1:2.06-104.el9_6
• grub2-pc-modules-1:2.06-104.el9_6
• grub2-tools-1:2.06-104.el9_6
• grub2-tools-minimal-1:2.06-104.el9_6
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-4.rhaos4.19.el9
• ignition-grub-2.21.0-4.rhaos4.19.el9
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.1
• irqbalance-2:1.9.4-2.el9
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.2
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.32.1.el9_6
• kernel-core-5.14.0-570.32.1.el9_6
• kernel-modules-5.14.0-570.32.1.el9_6
• kernel-modules-core-5.14.0-570.32.1.el9_6
• kernel-modules-extra-5.14.0-570.32.1.el9_6
• kexec-tools-2.0.29-5.el9_6.2
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.1
• krb5-libs-1.21.1-8.el9_6
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-5.el9_6
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_5
• libcap-2.48-9.el9_2
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9_6.1
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-7.el9_6
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnetfilter_cthelper-1.0.0-22.el9
• libnetfilter_cttimeout-1.0.0-19.el9
• libnetfilter_queue-1.0.5-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-7.el9_6
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9_6.2
• libsss_idmap-2.9.6-4.el9_6.2
• libsss_nss_idmap-2.9.6-4.el9_6.2
• libsss_sudo-2.9.6-4.el9_6.2
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-7.el9_6
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-12.el9_6
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-13.el9_6
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250716-151.3.el9_6
• linux-firmware-whence-20250716-151.3.el9_6
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9_5
• microcode_ctl-4:20250211-1.20250512.1.el9_6
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9_6.2
• ncurses-base-6.2-10.20210508.el9_6.2
• ncurses-libs-6.2-10.20210508.el9_6.2
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.48-2.el9_6
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-6.el9_6
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.19.0-202506301438.p0.g298429b.assembly.stream.el9
• openshift-kubelet-4.19.0-202508052241.p0.g138db52.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.2.2-6.el9_5.1
• openssl-fips-provider-3.0.7-6.el9_5
• openssl-fips-provider-so-3.0.7-6.el9_5
• openssl-libs-1:3.2.2-6.el9_5.1
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.1-33.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.19.0-202506111541.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.19.0-202506111541.p0.gd8d3aeb.assembly.stream.el9
• ostree-2025.1-1.el9
• ostree-grub2-2025.1-1.el9
• ostree-libs-2025.1-1.el9
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-25.el9_6
• passt-0^20250217.ga1e48a0-9.el9_6
• passt-selinux-0^20250217.ga1e48a0-9.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-12.el9_6
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.1
• python3-3.9.21-2.el9_6.1
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.1
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-15.el9_6.7
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-1.el9
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-5.el9_6
• rpm-ostree-libs-2025.6-5.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.2.4-2.el9
• samba-client-libs-4.21.3-7.el9_6
• samba-common-4.21.3-7.el9_6
• samba-common-libs-4.21.3-7.el9_6
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6
• selinux-policy-targeted-38.1.53-5.el9_6
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15.8-4.el9_3
• skopeo-2:1.18.1-2.el9_6
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-8.el9_6
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.2
• sssd-ad-2.9.6-4.el9_6.2
• sssd-client-2.9.6-4.el9_6.2
• sssd-common-2.9.6-4.el9_6.2
• sssd-common-pac-2.9.6-4.el9_6.2
• sssd-ipa-2.9.6-4.el9_6.2
• sssd-krb5-2.9.6-4.el9_6.2
• sssd-krb5-common-2.9.6-4.el9_6.2
• sssd-ldap-2.9.6-4.el9_6.2
• sssd-nfs-idmap-2.9.6-4.el9_6.2
• sssd-proxy-2.9.6-4.el9_6.2
• stalld-1.19.8-2.el9_6
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.1
• systemd-252-51.el9_6.1
• systemd-journal-remote-252-51.el9_6.1
• systemd-libs-252-51.el9_6.1
• systemd-pam-252-51.el9_6.1
• systemd-rpm-macros-252-51.el9_6.1
• systemd-udev-252-51.el9_6.1
• tar-2:1.34-7.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9_6.1
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9_6
• virt-what-1.27-1.el9
• which-2.21-30.el9_6
• xfsprogs-6.4.0-5.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.46.0-33.el9_4 → 1:1.52.0-5.el9_6
• NetworkManager-cloud-setup 1:1.46.0-33.el9_4 → 1:1.52.0-5.el9_6
• NetworkManager-libnm 1:1.46.0-33.el9_4 → 1:1.52.0-5.el9_6
• NetworkManager-ovs 1:1.46.0-33.el9_4 → 1:1.52.0-5.el9_6
• NetworkManager-team 1:1.46.0-33.el9_4 → 1:1.52.0-5.el9_6
• NetworkManager-tui 1:1.46.0-33.el9_4 → 1:1.52.0-5.el9_6
• WALinuxAgent-udev 2.7.0.6-9.el9_2.1 → 2.7.0.6-11.el9_6.1
• aardvark-dns 2:1.10.0-3.el9_4 → 2:1.14.0-1.el9
• afterburn 5.5.1-2.el9 → 5.7.0-1.el9
• afterburn-dracut 5.5.1-2.el9 → 5.7.0-1.el9
• alternatives 1.24-1.el9_4.1 → 1.24-2.el9
• audit 3.1.2-2.el9 → 3.1.5-4.el9
• audit-libs 3.1.2-2.el9 → 3.1.5-4.el9
• authselect 1.2.6-2.el9 → 1.2.6-3.el9
• authselect-libs 1.2.6-2.el9 → 1.2.6-3.el9
• avahi-libs 0.8-20.el9 → 0.8-22.el9_6.1
• bind-libs 32:9.16.23-18.el9_4.9 → 32:9.16.23-31.el9_6
• bind-license 32:9.16.23-18.el9_4.9 → 32:9.16.23-31.el9_6
• bind-utils 32:9.16.23-18.el9_4.9 → 32:9.16.23-31.el9_6
• binutils 2.35.2-43.el9 → 2.35.2-63.el9
• binutils-gold 2.35.2-43.el9 → 2.35.2-63.el9
• bootc 0.1.14-1.el9_4 → 1.1.6-3.el9_6
• bootupd 0.2.18-1.el9 → 0.2.27-4.el9_6
• bsdtar 3.5.3-4.el9 → 3.5.3-5.el9_6
• bubblewrap 0.4.1-7.el9_4 → 0.4.1-8.el9_5
• bzip2 1.0.8-8.el9_4.1 → 1.0.8-10.el9_5
• bzip2-libs 1.0.8-8.el9_4.1 → 1.0.8-10.el9_5
• chrony 4.5-1.el9 → 4.6.1-1.el9
• cifs-utils 7.0-1.el9 → 7.1-2.el9
• clevis 18-112.el9 → 21-208.el9
• clevis-dracut 18-112.el9 → 21-208.el9
• clevis-luks 18-112.el9 → 21-208.el9
• clevis-systemd 18-112.el9 → 21-208.el9
• composefs 1.0.3-2.el9 → 1.0.8-1.el9
• composefs-libs 1.0.3-2.el9 → 1.0.8-1.el9
• conmon 3:2.1.12-8.rhaos4.18.el9 → 3:2.1.12-1.el9
• conntrack-tools 1.4.7-3.el9_4 → 1.4.7-4.el9_5
• container-selinux 4:2.235.0-2.rhaos4.18.el9 → 4:2.237.0-1.el9_6
• containernetworking-plugins 1:1.4.0-6.el9_4.1 → 1:1.6.2-2.el9_6
• containers-common 3:1-86.rhaos4.18.el9 → 2:1-117.el9_6
• coreos-installer 0.21.0-3.el9_4 → 0.23.0-1.el9
• coreos-installer-bootinfra 0.21.0-3.el9_4 → 0.23.0-1.el9
• coreutils 8.32-35.el9 → 8.32-39.el9
• coreutils-common 8.32-35.el9 → 8.32-39.el9
• cri-o 1.31.11-2.rhaos4.18.git65ec77a.el9 → 1.32.7-2.rhaos4.19.git71d5a61.el9
• cri-tools 1.31.1-4.el9 → 1.32.0-2.el9
• crun 1.23.1-1.rhaos4.18.el9 → 1.22-1.el9_6
• crypto-policies 20240202-1.git283706d.el9 → 20250128-1.git5269e22.el9
• crypto-policies-scripts 20240202-1.git283706d.el9 → 20250128-1.git5269e22.el9
• cryptsetup 2.6.0-3.el9 → 2.7.2-3.el9_6.1
• cryptsetup-libs 2.6.0-3.el9 → 2.7.2-3.el9_6.1
• curl 7.76.1-29.el9_4.2 → 7.76.1-31.el9_6.1
• device-mapper 9:1.02.197-2.el9 → 9:1.02.202-6.el9
• device-mapper-event 9:1.02.197-2.el9 → 9:1.02.202-6.el9
• device-mapper-event-libs 9:1.02.197-2.el9 → 9:1.02.202-6.el9
• device-mapper-libs 9:1.02.197-2.el9 → 9:1.02.202-6.el9
• device-mapper-multipath 0.8.7-27.el9_4.2 → 0.8.7-35.el9_6.1
• device-mapper-multipath-libs 0.8.7-27.el9_4.2 → 0.8.7-35.el9_6.1
• device-mapper-persistent-data 1.0.9-3.el9_4.1 → 1.1.0-1.el9
• dmidecode 1:3.5-3.el9 → 1:3.6-1.el9
• dnf 4.14.0-9.el9 → 4.14.0-25.el9
• dnf-data 4.14.0-9.el9 → 4.14.0-25.el9
• dracut 057-54.git20250423.el9_4.1 → 057-88.git20250311.el9_6
• dracut-network 057-54.git20250423.el9_4.1 → 057-88.git20250311.el9_6
• dracut-squash 057-54.git20250423.el9_4.1 → 057-88.git20250311.el9_6
• e2fsprogs 1.46.5-5.el9 → 1.46.5-7.el9
• e2fsprogs-libs 1.46.5-5.el9 → 1.46.5-7.el9
• elfutils-debuginfod-client 0.190-2.el9 → 0.192-6.el9_6
• elfutils-default-yama-scope 0.190-2.el9 → 0.192-6.el9_6
• elfutils-libelf 0.190-2.el9 → 0.192-6.el9_6
• elfutils-libs 0.190-2.el9 → 0.192-6.el9_6
• ethtool 2:6.2-1.el9 → 2:6.11-1.el9
• expat 2.5.0-2.el9_4.2 → 2.5.0-5.el9_6
• filesystem 3.16-2.el9 → 3.16-5.el9
• findutils 1:4.8.0-6.el9 → 1:4.8.0-7.el9
• firewalld-filesystem 1.3.4-1.el9 → 1.3.4-9.el9_5
• fuse 2.9.9-15.el9 → 2.9.9-17.el9
• fuse-common 3.10.2-8.el9 → 3.10.2-9.el9
• fuse-libs 2.9.9-15.el9 → 2.9.9-17.el9
• fuse-overlayfs 1.13-1.el9 → 1.14-1.el9
• fuse3 3.10.2-8.el9 → 3.10.2-9.el9
• fuse3-libs 3.10.2-8.el9 → 3.10.2-9.el9
• fwupd 1.9.13-2.el9 → 1.9.26-1.el9
• fwupd-plugin-flashrom 1.9.13-2.el9 → 1.9.26-1.el9
• gdbm-libs 1:1.19-4.el9 → 1:1.23-1.el9
• git-core 2.43.5-1.el9_4.2 → 2.47.3-1.el9_6
• glib2 2.68.4-14.el9_4.3 → 2.68.4-16.el9_6.2
• glibc 2.34-100.el9_4.12 → 2.34-168.el9_6.23
• glibc-common 2.34-100.el9_4.12 → 2.34-168.el9_6.23
• glibc-gconv-extra 2.34-100.el9_4.12 → 2.34-168.el9_6.23
• glibc-minimal-langpack 2.34-100.el9_4.12 → 2.34-168.el9_6.23
• gnutls 3.8.3-4.el9_4.2 → 3.8.3-6.el9
• grub2-common 1:2.06-86.el9_4.2 → 1:2.06-104.el9_6
• grub2-efi-x64 1:2.06-86.el9_4.2 → 1:2.06-104.el9_6
• grub2-pc 1:2.06-86.el9_4.2 → 1:2.06-104.el9_6
• grub2-pc-modules 1:2.06-86.el9_4.2 → 1:2.06-104.el9_6
• grub2-tools 1:2.06-86.el9_4.2 → 1:2.06-104.el9_6
• grub2-tools-minimal 1:2.06-86.el9_4.2 → 1:2.06-104.el9_6
• gssproxy 0.8.4-6.el9 → 0.8.4-7.el9
• hwdata 0.348-9.13.el9 → 0.348-9.18.el9
• ignition 2.18.0-8.rhaos4.18.el9 → 2.21.0-4.rhaos4.19.el9
• ima-evm-utils 1.4-4.el9 → 1.5-3.el9
• initscripts-service 10.11.6-1.el9 → 10.11.8-4.el9
• iproute 6.2.0-6.el9_4 → 6.11.0-1.el9
• iproute-tc 6.2.0-6.el9_4 → 6.11.0-1.el9
• iptables-libs 1.8.10-5.el9_4 → 1.8.10-11.el9_5
• iptables-nft 1.8.10-5.el9_4 → 1.8.10-11.el9_5
• iputils 20210202-9.el9_4.3 → 20210202-11.el9_6.1
• irqbalance 2:1.9.2-3.el9 → 2:1.9.4-2.el9
• jose 11-3.el9 → 14-1.el9
• jq 1.6-16.el9_4.1 → 1.6-17.el9_6.2
• kbd 2.4.0-9.el9 → 2.4.0-11.el9
• kbd-legacy 2.4.0-9.el9 → 2.4.0-11.el9
• kbd-misc 2.4.0-9.el9 → 2.4.0-11.el9
• kernel 5.14.0-427.81.1.el9_4 → 5.14.0-570.32.1.el9_6
• kernel-core 5.14.0-427.81.1.el9_4 → 5.14.0-570.32.1.el9_6
• kernel-modules 5.14.0-427.81.1.el9_4 → 5.14.0-570.32.1.el9_6
• kernel-modules-core 5.14.0-427.81.1.el9_4 → 5.14.0-570.32.1.el9_6
• kernel-modules-extra 5.14.0-427.81.1.el9_4 → 5.14.0-570.32.1.el9_6
• kexec-tools 2.0.27-8.el9_4.5 → 2.0.29-5.el9_6.2
• kmod 28-9.el9 → 28-10.el9
• kmod-libs 28-9.el9 → 28-10.el9
• kpartx 0.8.7-27.el9_4.2 → 0.8.7-35.el9_6.1
• krb5-libs 1.21.1-2.el9_4.1 → 1.21.1-8.el9_6
• less 590-4.el9_4 → 590-5.el9
• libarchive 3.5.3-4.el9 → 3.5.3-5.el9_6
• libblkid 2.37.4-18.el9 → 2.37.4-21.el9
• libbpf 2:1.3.0-2.el9 → 2:1.5.0-1.el9
• libbrotli 1.0.9-6.el9 → 1.0.9-7.el9_5
• libcom_err 1.46.5-5.el9 → 1.46.5-7.el9
• libcurl 7.76.1-29.el9_4.2 → 7.76.1-31.el9_6.1
• libdb 5.3.28-53.el9 → 5.3.28-57.el9_6
• libdnf 0.69.0-8.el9_4.1 → 0.69.0-13.el9
• libdnf-plugin-subscription-manager 1.29.40.1-1.el9_4 → 1.29.45.1-1.el9_6
• libdrm 2.4.117-1.el9 → 2.4.123-2.el9
• libeconf 0.4.1-3.el9_2 → 0.4.1-4.el9
• libev 4.33-5.el9 → 4.33-6.el9
• libfdisk 2.37.4-18.el9 → 2.37.4-21.el9
• libgcc 11.4.1-4.el9_4 → 11.5.0-5.el9_5
• libgcrypt 1.10.0-10.el9_4.1 → 1.10.0-11.el9
• libgomp 11.4.1-4.el9_4 → 11.5.0-5.el9_5
• libibverbs 48.0-1.el9 → 54.0-1.el9
• libicu 67.1-10.el9_4 → 67.1-10.el9_6
• libipa_hbac 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• libjose 11-3.el9 → 14-1.el9
• libksba 1.5.1-6.el9_1 → 1.5.1-7.el9
• libldb 2.8.0-2.el9_4 → 4.21.3-7.el9_6
• libmaxminddb 1.5.2-3.el9 → 1.5.2-4.el9
• libmount 2.37.4-18.el9 → 2.37.4-21.el9
• libndp 1.8-6.el9_4 → 1.9-1.el9
• libnet 1.2-6.el9 → 1.2-7.el9
• libnfnetlink 1.0.1-21.el9 → 1.0.1-23.el9_5
• libnfsidmap 1:2.5.4-26.el9_4.1 → 1:2.5.4-34.el9
• libnghttp2 1.43.0-5.el9_4.3 → 1.43.0-6.el9
• libnl3 3.9.0-1.el9 → 3.11.0-1.el9
• libnl3-cli 3.9.0-1.el9 → 3.11.0-1.el9
• libnvme 1.6-1.el9 → 1.11.1-1.el9
• libpciaccess 0.16-6.el9 → 0.16-7.el9
• librhsm 0.0.3-7.el9_3.1 → 0.0.3-9.el9
• libselinux 3.6-1.el9 → 3.6-3.el9
• libselinux-utils 3.6-1.el9 → 3.6-3.el9
• libsemanage 3.6-2.1.el9_4 → 3.6-5.el9_6
• libsepol 3.6-1.el9 → 3.6-2.el9
• libslirp 4.4.0-7.el9 → 4.4.0-8.el9
• libsmartcols 2.37.4-18.el9 → 2.37.4-21.el9
• libsmbclient 4.19.4-105.el9_4.3 → 4.21.3-7.el9_6
• libsolv 0.7.24-2.el9 → 0.7.24-3.el9
• libss 1.46.5-5.el9 → 1.46.5-7.el9
• libsss_certmap 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• libsss_idmap 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• libsss_nss_idmap 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• libsss_sudo 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• libstdc++ 11.4.1-4.el9_4 → 11.5.0-5.el9_5
• libtalloc 2.4.1-1.el9 → 2.4.2-1.el9
• libtasn1 4.16.0-8.el9_4.1 → 4.16.0-9.el9
• libtdb 1.4.9-1.el9 → 1.4.12-1.el9
• libtevent 0.16.0-1.el9 → 0.16.1-1.el9
• libtirpc 1.3.3-8.el9_4 → 1.3.3-9.el9
• libtool-ltdl 2.4.6-45.el9 → 2.4.6-46.el9
• libuser 0.63-13.el9 → 0.63-16.el9
• libuuid 2.37.4-18.el9 → 2.37.4-21.el9
• libwbclient 4.19.4-105.el9_4.3 → 4.21.3-7.el9_6
• libxml2 2.9.13-10.el9_4 → 2.9.13-12.el9_6
• libxslt 1.1.34-14.el9_4 → 1.1.34-13.el9_6
• libzstd 1.5.1-2.el9 → 1.5.5-1.el9
• linux-firmware 20250212-143.9.el9_4 → 20250716-151.3.el9_6
• linux-firmware-whence 20250212-143.9.el9_4 → 20250716-151.3.el9_6
• logrotate 3.18.0-8.el9 → 3.18.0-9.el9
• lvm2 9:2.03.23-2.el9 → 9:2.03.28-6.el9
• lvm2-libs 9:2.03.23-2.el9 → 9:2.03.28-6.el9
• mdadm 4.2-14.el9_4 → 4.3-4.el9_5
• microcode_ctl 4:20230808-2.20250512.1.el9_4 → 4:20250211-1.20250512.1.el9_6
• nano 5.6.1-5.el9 → 5.6.1-7.el9
• ncurses 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
• ncurses-base 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
• ncurses-libs 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
• net-tools 2.0-0.62.20160912git.el9 → 2.0-0.64.20160912git.el9
• netavark 2:1.10.3-1.el9 → 2:1.14.1-1.el9_6
• nettle 3.9.1-1.el9 → 3.10.1-1.el9
• nfs-utils 1:2.5.4-26.el9_4.1 → 1:2.5.4-34.el9
• nftables 1:1.0.9-1.el9 → 1:1.0.9-3.el9
• nmap-ncat 3:7.92-1.el9 → 3:7.92-3.el9
• nmstate 2.2.48-1.el9_4 → 2.2.48-2.el9_6
• numactl-libs 2.0.16-3.el9 → 2.0.19-1.el9
• nvme-cli 2.6-5.el9 → 2.11-6.el9_6
• oniguruma 6.9.6-1.el9.5 → 6.9.6-1.el9.6
• open-vm-tools 12.3.5-2.el9 → 12.5.0-1.el9
• openldap 2.6.6-3.el9 → 2.6.8-4.el9
• openshift-clients 4.18.0-202507080904.p0.g4fcb2d0.assembly.stream.el9 → 4.19.0-202506301438.p0.g298429b.assembly.stream.el9
• openshift-kubelet 4.18.0-202508052235.p0.g0c9395f.assembly.stream.el9 → 4.19.0-202508052241.p0.g138db52.assembly.stream.el9
• openssh 8.7p1-38.el9_4.5 → 8.7p1-45.el9
• openssh-clients 8.7p1-38.el9_4.5 → 8.7p1-45.el9
• openssh-server 8.7p1-38.el9_4.5 → 8.7p1-45.el9
• openssl 1:3.0.7-29.el9_4 → 1:3.2.2-6.el9_5.1
• openssl-fips-provider 3.0.7-2.el9 → 3.0.7-6.el9_5
• openssl-libs 1:3.0.7-29.el9_4 → 1:3.2.2-6.el9_5.1
• os-prober 1.77-12.el9_4 → 1.77-12.el9_5
• ose-aws-ecr-image-credential-provider 4.18.0-202507011252.p0.gc395190.assembly.stream.el9 → 4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.18.0-202507011252.p0.g9c24d76.assembly.stream.el9 → 4.19.0-202506111541.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.18.0-202507011252.p0.g6ea2356.assembly.stream.el9 → 4.19.0-202506111541.p0.gd8d3aeb.assembly.stream.el9
• ostree 2024.6-3.el9_4 → 2025.1-1.el9
• ostree-grub2 2024.6-3.el9_4 → 2025.1-1.el9
• ostree-libs 2024.6-3.el9_4 → 2025.1-1.el9
• p11-kit 0.25.3-2.el9 → 0.25.3-3.el9_5
• p11-kit-trust 0.25.3-2.el9 → 0.25.3-3.el9_5
• pam 1.5.1-24.el9_4 → 1.5.1-25.el9_6
• passt 0^20231204.gb86afe3-1.el9 → 0^20250217.ga1e48a0-9.el9_6
• passt-selinux 0^20231204.gb86afe3-1.el9 → 0^20250217.ga1e48a0-9.el9_6
• pciutils 3.7.0-5.el9 → 3.7.0-7.el9
• pciutils-libs 3.7.0-5.el9 → 3.7.0-7.el9
• pcre 8.44-3.el9.3 → 8.44-4.el9
• pcre2 10.40-5.el9 → 10.40-6.el9
• pcre2-syntax 10.40-5.el9 → 10.40-6.el9
• perl-AutoLoader 5.74-481.el9_4.1 → 5.74-481.1.el9_6
• perl-B 1.80-481.el9_4.1 → 1.80-481.1.el9_6
• perl-Class-Struct 0.66-481.el9_4.1 → 0.66-481.1.el9_6
• perl-Errno 1.30-481.el9_4.1 → 1.30-481.1.el9_6
• perl-Fcntl 1.13-481.el9_4.1 → 1.13-481.1.el9_6
• perl-File-Basename 2.85-481.el9_4.1 → 2.85-481.1.el9_6
• perl-File-stat 1.09-481.el9_4.1 → 1.09-481.1.el9_6
• perl-FileHandle 2.03-481.el9_4.1 → 2.03-481.1.el9_6
• perl-Getopt-Std 1.12-481.el9_4.1 → 1.12-481.1.el9_6
• perl-IO 1.43-481.el9_4.1 → 1.43-481.1.el9_6
• perl-IO-Socket-SSL 2.073-1.el9 → 2.073-2.el9
• perl-IPC-Open3 1.21-481.el9_4.1 → 1.21-481.1.el9_6
• perl-NDBM_File 1.15-481.el9_4.1 → 1.15-481.1.el9_6
• perl-Net-SSLeay 1.92-2.el9 → 1.94-1.el9
• perl-POSIX 1.94-481.el9_4.1 → 1.94-481.1.el9_6
• perl-Scalar-List-Utils 4:1.56-461.el9 → 4:1.56-462.el9
• perl-SelectSaver 1.02-481.el9_4.1 → 1.02-481.1.el9_6
• perl-Symbol 1.08-481.el9_4.1 → 1.08-481.1.el9_6
• perl-base 2.27-481.el9_4.1 → 2.27-481.1.el9_6
• perl-if 0.60.800-481.el9_4.1 → 0.60.800-481.1.el9_6
• perl-interpreter 4:5.32.1-481.el9_4.1 → 4:5.32.1-481.1.el9_6
• perl-libs 4:5.32.1-481.el9_4.1 → 4:5.32.1-481.1.el9_6
• perl-mro 1.23-481.el9_4.1 → 1.23-481.1.el9_6
• perl-overload 1.31-481.el9_4.1 → 1.31-481.1.el9_6
• perl-overloading 0.02-481.el9_4.1 → 0.02-481.1.el9_6
• perl-subs 1.03-481.el9_4.1 → 1.03-481.1.el9_6
• perl-vars 1.05-481.el9_4.1 → 1.05-481.1.el9_6
• pigz 2.5-4.el9 → 2.8-1.el9
• podman 5:5.2.2-10.rhaos4.18.el9 → 5:5.4.0-12.el9_6
• polkit 0.117-11.el9_4.1 → 0.117-13.el9
• polkit-libs 0.117-11.el9_4.1 → 0.117-13.el9
• python-unversioned-command 3.9.18-3.el9_4.8 → 3.9.21-2.el9_6.1
• python3 3.9.18-3.el9_4.8 → 3.9.21-2.el9_6.1
• python3-audit 3.1.2-2.el9 → 3.1.5-4.el9
• python3-cloud-what 1.29.40.1-1.el9_4 → 1.29.45.1-1.el9_6
• python3-dnf 4.14.0-9.el9 → 4.14.0-25.el9
• python3-dnf-plugins-core 4.3.0-13.el9 → 4.3.0-20.el9
• python3-hawkey 0.69.0-8.el9_4.1 → 0.69.0-13.el9
• python3-libdnf 0.69.0-8.el9_4.1 → 0.69.0-13.el9
• python3-libs 3.9.18-3.el9_4.8 → 3.9.21-2.el9_6.1
• python3-libselinux 3.6-1.el9 → 3.6-3.el9
• python3-libsemanage 3.6-2.1.el9_4 → 3.6-5.el9_6
• python3-pip-wheel 21.2.3-8.el9 → 21.3.1-1.el9
• python3-requests 2.25.1-8.el9 → 2.25.1-10.el9_6
• python3-rpm 4.16.1.3-29.el9 → 4.16.1.3-37.el9
• python3-setuptools 53.0.0-12.el9_4.2 → 53.0.0-13.el9_6.1
• python3-setuptools-wheel 53.0.0-12.el9_4.2 → 53.0.0-13.el9_6.1
• python3-subscription-manager-rhsm 1.29.40.1-1.el9_4 → 1.29.45.1-1.el9_6
• python3-systemd 234-18.el9 → 234-19.el9
• python3-urllib3 1.26.5-5.el9_4.1 → 1.26.5-6.el9
• qemu-guest-agent 17:8.2.0-11.el9_4.14 → 17:9.1.0-15.el9_6.7
• quota 1:4.06-6.el9 → 1:4.09-4.el9
• quota-nls 1:4.06-6.el9 → 1:4.09-4.el9
• rdma-core 48.0-1.el9 → 54.0-1.el9
• redhat-release 9.4-0.5.el9 → 9.6-0.1.el9
• redhat-release-eula 9.4-0.5.el9 → 9.6-0.1.el9
• rpm 4.16.1.3-29.el9 → 4.16.1.3-37.el9
• rpm-build-libs 4.16.1.3-29.el9 → 4.16.1.3-37.el9
• rpm-libs 4.16.1.3-29.el9 → 4.16.1.3-37.el9
• rpm-ostree 2024.3-6.el9_4 → 2025.6-5.el9_6
• rpm-ostree-libs 2024.3-6.el9_4 → 2025.6-5.el9_6
• rpm-plugin-selinux 4.16.1.3-29.el9 → 4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit 4.16.1.3-29.el9 → 4.16.1.3-37.el9
• rpm-sign-libs 4.16.1.3-29.el9 → 4.16.1.3-37.el9
• rsync 3.2.3-19.el9_4.1 → 3.2.5-3.el9
• runc 4:1.1.14-4.rhaos4.18.el9 → 4:1.2.4-2.el9
• samba-client-libs 4.19.4-105.el9_4.3 → 4.21.3-7.el9_6
• samba-common 4.19.4-105.el9_4.3 → 4.21.3-7.el9_6
• samba-common-libs 4.19.4-105.el9_4.3 → 4.21.3-7.el9_6
• selinux-policy 38.1.35-2.el9_4.4 → 38.1.53-5.el9_6
• selinux-policy-targeted 38.1.35-2.el9_4.4 → 38.1.53-5.el9_6
• sg3_utils 1.47-9.el9 → 1.47-10.el9
• sg3_utils-libs 1.47-9.el9 → 1.47-10.el9
• shadow-utils 2:4.9-8.el9_4.1 → 2:4.9-12.el9
• shadow-utils-subid 2:4.9-8.el9_4.1 → 2:4.9-12.el9
• skopeo 2:1.16.1-2.rhaos4.18.el9 → 2:1.18.1-2.el9_6
• slirp4netns 1.2.3-1.el9 → 1.3.2-1.el9
• socat 1.7.4.1-5.el9_4.3 → 1.7.4.1-6.el9_6.1
• sqlite-libs 3.34.1-7.el9_4.1 → 3.34.1-8.el9_6
• sssd 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-ad 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-client 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-common 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-common-pac 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-ipa 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-krb5 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-krb5-common 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-ldap 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-nfs-idmap 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• sssd-proxy 2.9.4-6.el9_4.3 → 2.9.6-4.el9_6.2
• stalld 1.19.1-2.el9 → 1.19.8-2.el9_6
• strace 5.18-2.el9 → 6.12-1.el9
• subscription-manager 1.29.40.1-1.el9_4 → 1.29.45.1-1.el9_6
• sudo 1.9.5p2-10.el9_4.1 → 1.9.5p2-10.el9_6.1
• systemd 252-32.el9_4.8 → 252-51.el9_6.1
• systemd-journal-remote 252-32.el9_4.8 → 252-51.el9_6.1
• systemd-libs 252-32.el9_4.8 → 252-51.el9_6.1
• systemd-pam 252-32.el9_4.8 → 252-51.el9_6.1
• systemd-rpm-macros 252-32.el9_4.8 → 252-51.el9_6.1
• systemd-udev 252-32.el9_4.8 → 252-51.el9_6.1
• tar 2:1.34-6.el9_4.1 → 2:1.34-7.el9
• toolbox 0.1.2-1.rhaos4.18.el9 → 0.1.2-1.rhaos4.19.el9
• tpm2-tools 5.2-3.el9 → 5.2-4.el9
• tpm2-tss 3.2.2-2.el9 → 3.2.3-1.el9
• unbound-libs 1.16.2-8.el9_4.2 → 1.16.2-19.el9_6.1
• usermode 1.114-4.el9 → 1.114-6.el9
• util-linux 2.37.4-18.el9 → 2.37.4-21.el9
• util-linux-core 2.37.4-18.el9 → 2.37.4-21.el9
• vim-minimal 2:8.2.2637-20.el9_1 → 2:8.2.2637-22.el9_6
• virt-what 1.25-5.el9 → 1.27-1.el9
• which 2.21-29.el9 → 2.21-30.el9_6
• xfsprogs 6.3.0-1.el9 → 6.4.0-5.el9
• xmlsec1 1.2.29-9.el9 → 1.2.29-13.el9
• xmlsec1-openssl 1.2.29-9.el9 → 1.2.29-13.el9
• yajl 2.1.0-22.el9 → 2.1.0-25.el9
• zstd 1.5.1-2.el9 → 1.5.5-1.el9

Added:

• dbus-tools 1:1.12.20-8.el9
• ignition-grub 2.21.0-4.rhaos4.19.el9
• openssl-fips-provider-so 3.0.7-6.el9_5
• python3-dnf-plugin-versionlock 4.3.0-20.el9

Extensions

Full list (162 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• corosync-3.1.9-2.el9_6.x86_64
• corosynclib-3.1.9-2.el9_6.x86_64
• cpp-11.5.0-5.el9_5.x86_64
• crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-2.el9.noarch
• elfutils-libelf-devel-0.192-6.el9_6.x86_64
• fence-agents-all-4.10.0-86.el9_6.7.x86_64
• fence-agents-amt-ws-4.10.0-86.el9_6.7.noarch
• fence-agents-apc-4.10.0-86.el9_6.7.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.7.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.7.noarch
• fence-agents-brocade-4.10.0-86.el9_6.7.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.7.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.7.noarch
• fence-agents-common-4.10.0-86.el9_6.7.noarch
• fence-agents-drac5-4.10.0-86.el9_6.7.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.7.noarch
• fence-agents-emerson-4.10.0-86.el9_6.7.noarch
• fence-agents-eps-4.10.0-86.el9_6.7.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.7.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.7.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.7.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.7.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.7.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.7.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.7.noarch
• fence-agents-kdump-4.10.0-86.el9_6.7.x86_64
• fence-agents-mpath-4.10.0-86.el9_6.7.noarch
• fence-agents-redfish-4.10.0-86.el9_6.7.x86_64
• fence-agents-rhevm-4.10.0-86.el9_6.7.noarch
• fence-agents-rsa-4.10.0-86.el9_6.7.noarch
• fence-agents-rsb-4.10.0-86.el9_6.7.noarch
• fence-agents-sbd-4.10.0-86.el9_6.7.noarch
• fence-agents-scsi-4.10.0-86.el9_6.7.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.7.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.7.noarch
• fence-agents-wti-4.10.0-86.el9_6.7.noarch
• fence-virt-4.10.0-86.el9_6.7.x86_64
• flex-2.6.4-9.el9.x86_64
• fmt-9.1.0-1.el9.x86_64
• gcc-11.5.0-5.el9_5.x86_64
• glibc-devel-2.34-168.el9_6.23.x86_64
• glibc-headers-2.34-168.el9_6.23.x86_64
• gnutls-dane-3.8.3-6.el9.x86_64
• gnutls-utils-3.8.3-6.el9.x86_64
• ipmitool-1.8.18-27.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
• kata-containers-3.17.0-3.rhaos4.19.el9.x86_64
• kernel-5.14.0-570.32.1.el9_6.x86_64
• kernel-core-5.14.0-570.32.1.el9_6.x86_64
• kernel-devel-5.14.0-570.32.1.el9_6.x86_64
• kernel-headers-5.14.0-570.32.1.el9_6.x86_64
• kernel-modules-5.14.0-570.32.1.el9_6.x86_64
• kernel-modules-extra-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-core-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-devel-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-kvm-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-modules-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-modules-core-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-modules-extra-5.14.0-570.32.1.el9_6.x86_64
• krb5-pkinit-1.21.1-8.el9_6.x86_64
• krb5-workstation-1.21.1-8.el9_6.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-8.el9_6.x86_64
• libknet1-1.28-1.el9.x86_64
• libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
• libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
• libknet1-compress-plugins-all-1.28-1.el9.x86_64
• libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
• libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
• libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
• libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
• libknet1-crypto-plugins-all-1.28-1.el9.x86_64
• libknet1-plugins-all-1.28-1.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libnozzle1-1.28-1.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-1.el9.x86_64
• libreswan-5.2-1.el9fdp.x86_64
• libwsman1-2.6.8-23.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lld-17.0.6-1.el9.x86_64
• lld-libs-17.0.6-1.el9.x86_64
• llvm-17.0.6-5.el9.x86_64
• llvm-libs-17.0.6-5.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• net-snmp-libs-1:5.9.1-17.el9.x86_64
• net-snmp-utils-1:5.9.1-17.el9.x86_64
• nspr-4.35.0-17.el9_2.x86_64
• nss-3.101.0-10.el9_2.x86_64
• nss-softokn-3.101.0-10.el9_2.x86_64
• nss-softokn-freebl-3.101.0-10.el9_2.x86_64
• nss-sysinit-3.101.0-10.el9_2.x86_64
• nss-tools-3.101.0-10.el9_2.x86_64
• nss-util-3.101.0-10.el9_2.x86_64
• openssl-devel-1:3.2.2-6.el9_5.1.x86_64
• openvswitch3.5-ipsec-3.5.1-33.el9fdp.x86_64
• openwsman-python3-2.6.8-23.el9.x86_64
• pacemaker-2.1.9-1.2.el9_6.x86_64
• pacemaker-cli-2.1.9-1.2.el9_6.x86_64
• pacemaker-cluster-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-schemas-2.1.9-1.2.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.x86_64
• pcp-libs-6.3.7-1.el9_6.x86_64
• pcs-0.11.9-2.el9_6.1.x86_64
• perl-TimeDate-1:2.33-6.el9.noarch
• pixman-0.40.0-6.el9_3.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-cffi-1.14.5-5.el9.x86_64
• python3-cryptography-36.0.1-4.el9.x86_64
• python3-lxml-4.6.5-3.el9.x86_64
• python3-openvswitch3.5-3.5.1-33.el9fdp.x86_64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.x86_64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.x86_64
• qemu-img-17:9.1.0-15.el9_6.7.x86_64
• qemu-kvm-common-17:9.1.0-15.el9_6.7.x86_64
• qemu-kvm-core-17:9.1.0-15.el9_6.7.x86_64
• redhat-logos-90.5-1.el9_6.1.x86_64
• resource-agents-4.10.0-71.el9_6.6.x86_64
• ruby-3.0.7-165.el9_5.x86_64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.x86_64
• rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.x86_64
• rubygem-json-2.5.1-165.el9_5.x86_64
• rubygem-psych-3.3.2-165.el9_5.x86_64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• spdlog-1.13.0-1.rhaos4.14.el9.x86_64
• sysstat-12.5.4-9.el9.x86_64
• telnet-1:0.17-85.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• virtiofsd-1.13.2-1.el9_6.x86_64
• wasmedge-0.14.0-2.rhaos4.19.el9.x86_64
• zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250807-0