4.12.98

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.98-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Pending (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-sdn-serial
- azure-ovn-upgrade-4.12-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.12-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.12-e2e-gcp-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-sdn-ipv4

Upgrades from:

Untested upgrades: 4.11.14, 4.11.15, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.32, 4.11.33, 4.11.34, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.52, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.6, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.7, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.12.74, 4.12.75, 4.12.76, 4.12.77, 4.12.78, 4.12.79, 4.12.8, 4.12.80, 4.12.82, 4.12.83, 4.12.84, 4.12.85, 4.12.86, 4.12.87, 4.12.88, 4.12.89, 4.12.9, 4.12.90, 4.12.91, 4.12.92, 4.12.93, 4.12.94

Upgrades to:

4.13.71 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.12.81

Created: 2026-09-11 13:23:02 +0000 UTC

Image Digest: sha256:0ba3b9ea13531f643027339fef1e1a1e04bd4d87f3387f25e6d7e3dfa64bad52

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202510081644-0 to 412.86.202609082051-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:646a94774bad3265fdfd8d1379e6985e65db72d0907fbde5f33d62cdd2c23c86
alibaba-cloud-csi-driver git 4d3b1125 sha256:cc7f7030460b9bd9332bf500d0a4ee7a5fa3ce9a71a06e01bdb8133ce15680a9
alibaba-disk-csi-driver-operator git 99bcda8d sha256:875a96c47f0ba81eb9d2af516aac3d35cfef0c82bd75f57797a506195f93d948
alibaba-machine-controllers git 871dac7e sha256:29b893d1a014dbc8eff4918b09f81c7d470b6e408e82daeef8441ac3c311c42b
apiserver-network-proxy git f56c606a sha256:0c53fad6d22c9613c3c7f4c7647aa8ce655ae3cbc587cd73c81590b964ce33c8
aws-cloud-controller-manager git f90fb443 sha256:88009560a6c991c1f12a1d3bb7e5dfab5d2b3f57b05a2aad623662f8373ce128
aws-ebs-csi-driver git bbab20f9 sha256:67d7861ec1f479fd9d9b44a58f21c72f5239511cc10e7d12621d7246707385a5
aws-pod-identity-webhook git 31917a5f sha256:a28820894ab8c5a6472f53222c3e43d0045dcc3b9180466dce7bb6d93e22714c
azure-cloud-controller-manager git 2193ccfa sha256:eeed00dfd3f92647147f147132dc3eb18770c32446ba5e8099a5a6a8c0025ea5
azure-cloud-node-manager git 2193ccfa sha256:9d2275e0a7f6c96e892995f97a9b10430ef230882d782ad2ba196a211e6e719e
azure-disk-csi-driver git eaff7399 sha256:b96bc75d58d1b3d1282ecc25c417c0bd08bb6f5f543ccc4acbd77de86a4835ea
azure-disk-csi-driver-operator git 988b8cc8 sha256:d3f97f5dcf4869d7dfb00cb13d2cbbbf91fad07941d73f4b969b547b5c900baf
azure-file-csi-driver git 15aade4d sha256:bc7bdc4adeb37ace2d6dbc9cb2b58d8a97bc701ad95f911af601659dec8fc2f0
baremetal-operator git 6817f4e2 sha256:3a767cb23117866a235547859a4c6e4badba176f1108729d40348613b7058380
baremetal-runtimecfg git 474ed48e sha256:01ce6fa9312e3509306fd2fad0206f64c756ebebf9862ae74652d96bc9ffb2d4
cli git d6912573 sha256:9b9a45363054cf5a2ff7a50b9ead52fb400dbe4341385c803be184e0eaaef5e7
cli-artifacts git d6912573 sha256:3a18edd1b34e1ca924cde0856be63662e253ad3db1518d4fbd18564f6315abdb
cloud-credential-operator git 5a4483cd sha256:49ea845ea26da23115d0361b2c76112617e3c2785ad2d958d59357a901edc1b3
cloud-network-config-controller git c086bed7 sha256:c8c155ee7e2a629d4c197542aa08f0d2c455cd2b1d78d0a035ddec8a7ac3aa9f
cluster-authentication-operator git 4f7f6b1a sha256:3fdcf2e3807e2b2516da12921c7029f39ad24eecfaac937990f1eb5490363d17
cluster-autoscaler git d16352d9 sha256:9306e1111b0bbdc7048144db71f27b7dc94b614a944466faec1f07ecf20bfbd7
cluster-autoscaler-operator git 29a6e57c sha256:d045e8a552b21c6cbefb41766c1231c06dd875c014db50c398b70124ec25d800
cluster-bootstrap git 138a1cf2 sha256:d2568b420c146aa57908c6d3cf2dd49c594e25cb9987e5f2dbe24ad34ced105e
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:ba03dfe5212830dd891b786742741bab150c5e7f46fd0d71fe8aae643278d3ae
cluster-config-operator git 92c3b102 sha256:ea4eb8667b67e6a63b839e7cfb58adb0cc12ecf42b96c590dd3222eba9373c74
cluster-control-plane-machine-set-operator git fb7f08a2 sha256:a8e6eac2cacd3ff1aa40e0146cc27bc32322b8eaf763dc7c32bb9d2a9aa9882d
cluster-csi-snapshot-controller-operator git f573eded sha256:180e4b026af4f79be06c7e45fa1f89d6621002b78cc016ddc5eff34bea70bac0
cluster-dns-operator git 09a1de9f sha256:27f0cfdefefc9100e150418e1f2bcdeb141562a654294eb0beb5e5a805e35dee
cluster-kube-cluster-api-operator git d50f7322 sha256:44c50953c5adb5355b6135596a004de44a16e31bbca18bbd323f3fc22801020d
cluster-kube-controller-manager-operator git c3c07beb sha256:b4cf101bc8c45ad5d1366645ddc3de32d26e13ec771e4937c330ea2ca7a4547f
cluster-machine-approver git 7b08a4de sha256:129b0ef4178416f824702f206cee06cb157569d1ce03ea5871980fd74a9d8f83
cluster-network-operator git 28db40f1 sha256:24d5c2216f003330718ffa66e0f7ff6243a7fbedcde598b9660ecf8db330b325
cluster-node-tuning-operator git 20966da9 sha256:3382a2c0125a927c3874bb7629655800a3b360a781ebef1e22bd3726c0f21c27
cluster-openshift-controller-manager-operator git ab963d8a sha256:95b07baf3fdaad2a46265e9ef8ab57304b6d34c372bbc5cb9d8f70989028a1fe
cluster-platform-operators-manager git c930dc74 sha256:37a087bfaa75b59623b60c811e49ba7c1e55d2a32105491be48bc427a0da8c38
cluster-policy-controller git cb8862b0 sha256:f8a140361d4aa690d789c438cb5fbbd9226d06d7900fa0f6f5666ae28600a004
cluster-update-keys git 2796e173 sha256:185db12a1272ca032a2367be862893a449181fa50b5bb157aa34a0d2c6a7c08d
cluster-version-operator git da2578c6 sha256:202e3eb5468d72de46ebf31669ae7246f4ec8785e1509e02bda47cea9933c94c
configmap-reloader git e4d9170e sha256:0731c1476d4683756fa0b0b0a92af8811796673acd2ffd4d1497a6dd942c98e2
container-networking-plugins git cd87d3d3 sha256:c2844dee2878e32050cfefcd8dfaefce52611a93938cc732f1a33ceaeeec930e
coredns git 95d00296 sha256:8db41bfea5cc4623961a1cef3aeea96f592113d26832510caec50e0cc54cbc19
csi-driver-shared-resource git d054948f sha256:243320766add42346911a3d759bd7037030ad1007d585e8f1a0715b662886e2d
csi-driver-shared-resource-operator git cc297702 sha256:36b15e596e09fa61ffb8b9e6075ce9c85f269f2a0b6a66bd4416d0f0614b8981
csi-driver-shared-resource-webhook git d054948f sha256:3259f9fed6b29b0f934f2bf84544d436492d15a1e487db3e46c36395fb12835e
csi-external-attacher git fac7b8fd sha256:94b6976b7d42d7115ad399a84ac0e0a2b92e7046bc8f7e5f67514a4696abd06e
csi-external-provisioner git 3aa7c527 sha256:2f3ae38e2e94260f54e52e723d30f1c466f83c37060e476338e9ea4b938350f6
csi-external-resizer git 5b066ba4 sha256:5877d46369cde8dac4931a683873e3ebfa21ac5a0b927a92f8dce1e1837fb31d
csi-external-snapshotter git 6fdb648f sha256:88a8cf4b59cf5190e02854028009ccfbf82df24b1cd7604cecfa84123904b60d
csi-livenessprobe git e6545e71 sha256:04aeacfa1b95ebdc057bc312fe7dcf7c92ff84402f92e32cdfc15db300ff221b
csi-node-driver-registrar git c316b896 sha256:cbe91131904acbb33b223ce3a35586accb0746086f5a7214845785df730305e5
csi-snapshot-controller git 6fdb648f sha256:e713e6615c7eddd92a8f93f4be836b930560dc04edfdcb85198390f91589ab38
csi-snapshot-validation-webhook git 6fdb648f sha256:2d3a365cabc912cf1d22e9382a8cca7560b92226fa0e55e780fb482229b944f7
deployer git d6912573 sha256:8346f02980046f7472c507477a3b6a6e2b394c0541351b60492e365c3f620ac2
docker-builder git e3554521 sha256:dfd465be0a666096ff1a583b7ecb6c3e9eabb2554c1351af806321f34e299bdc
docker-registry git e96baf4b sha256:0ccca078f0bce23086f8b6890f9d3dc05973a1c624483844a8126facd731cf2b
egress-router-cni git a92e4157 sha256:98495d552e4eb428c9848ee273953da970e5572881e6642ca3be00c844be4c64
etcd git bb82e891 sha256:dcf1947a457b95cb6b245dd913e071c080c464f93376e506f4cf71cd8030aa7c
gcp-cloud-controller-manager git 8a84952e sha256:be5c50bd1943e8169af53e984ac315c77fef7afa13e3fc02dc39909969303273
gcp-pd-csi-driver git 5dcfd675 sha256:c277f31fe8745a18efbc3f7aa0a2b1f315a6b43229a4f4536ab1a5394988e891
gcp-pd-csi-driver-operator git 30e97ba5 sha256:d658264b88093b9b7839b232c827a8429958b6bd62449fbce9cfd70046b4ad29
ibm-cloud-controller-manager git 8bd0ea8f sha256:a4753f76c3d22ee0130c355bb82d7dfb37bee1d2278fdad25574b059527fcb18
ibm-vpc-node-label-updater git 3cca5da2 sha256:c612c96515128052420fa95a8d301fcc665639c7be0bfe2ff7f4812ff4c2039f
insights-operator git 6b543885 sha256:f5c3367189401d4cda4a25be53db709fbea7e9f82a1a53eade7531d4c4da08a5
ironic-static-ip-manager git a8ade8fe sha256:ebb8689cff3673f1f3c6a758ce13a15a542f5243cc7ef29474943184dbb56abb
k8s-prometheus-adapter git 36c06694 sha256:f10347e45807456d238884ddd547dd4fcb06d5155fc0e61024f7b3a3c09f2596
keepalived-ipfailover git 7e8a0105 sha256:fb60f210f124ba2de09dc55be18541108db255bb884b1e8999cf387817c72325
kube-proxy git 5fe565c4 sha256:060f647b24daa4e8310a3b276c4847542fe38e306c12abd5848794f41a1f1274
kube-rbac-proxy git c69fae78 sha256:1942b0309b8978f20cdd55875a363b0c16a52646745db6deb0c47546343ad2af
kube-state-metrics git 748f7131 sha256:7277aa3e4ad806f535c0e2fb239919bde5572fd79d5ae2a8ab2bebdf1c42369b
kube-storage-version-migrator git 74ce8d51 sha256:2b0f2c4ccc6d140e548435870c61cfe443d74cd351282378c9864686b3a3bef1
kuryr-cni git 8fd2f8b0 sha256:e5236759f92b9b772b58dca17e1d29a344fb238a6fb35f6d4ef0439db8a23db8
kuryr-controller git 8fd2f8b0 sha256:2acb60ca1043ae97a4a0f0d63b31154c918f3d82ecdb858b65eb52074d467b96
libvirt-machine-controllers git a2882f7a sha256:3cca4a2615350bba95275fcf826fae0c59b62f4dcadcf2a3d93e332f02b18f17
machine-os-content sha256:52819115ed7650590b804e70def062789824362cc3319e5df336d368470cee5b
multus-admission-controller git 0a12d741 sha256:2044d8614b2b0fabfec0a7223f752e122cd93fd50ad6ff84a0cc93c6b1a5339d
multus-cni git 07d8af54 sha256:57ce9ae864199094d267fee1cbc04e0adda7281cdd771336a2a4b7e4bea50680
multus-networkpolicy git 644461f2 sha256:44088fbaa0bfd5f178e93174fc4cacda20bc2fff23d9fdea7ca0c2a852a85e87
multus-whereabouts-ipam-cni git 5993d022 sha256:5628cee4bb94e9a810a3ea64aed0c075a4eab894af6d415590adec01a0ecd45f
must-gather git a4db96b0 sha256:d244fc82ecfd04a2eea7486576b38ca0860214f1709cd1673e0f30aa5c7d9ab0
network-interface-bond-cni git 30386d6b sha256:38242f5a3cde2929c4f2c6a670f6605507bd167ca6f3c803d074d915102bde46
network-metrics-daemon git 98d9349d sha256:92c9fd28d9d4a6ef6bcc9944d37ec52d2be931fe70df01c71bc9d0dd7dfd69a3
network-tools git c76613c7 sha256:75a2eb41cfbeeb03ef5ffc8eee6d0659e9815fb40fd19c5f2c76d4b74602ad2e
oauth-apiserver git 1053f142 sha256:3cb18ce7f4bace9bee996b3bdda092839bae03dfacc6d6cefc18e1b8b6e23b75
oauth-server git 0c434f42 sha256:812c9b3088fb2b4ef04132d287fd0b1866973425735886d194472df87e5e0a42
oc-mirror git 072aeade sha256:da5db61bdc41fe4acf59c3ba42696ee10168368ddec431e3542ec304a747e608
olm-rukpak git bb06dd01 sha256:b93a90774133f93c86fd81010d6e7a43c23a45ea888380e659428ffce6475264
openshift-controller-manager git d32006c1 sha256:2c41a26869b37cff35d302dc03ced649fc5a8367657db23c4423ea9434053690
openshift-state-metrics git 3d5dc18d sha256:d3b147da9487f7b235828e218b04a08627f5417284447099db9c665c2ddee7ca
openstack-machine-api-provider git 05657663 sha256:0e69e96b15f51715d0184aee82f33d3ff89b4bf49eb08608e2da743e083025e9
openstack-machine-controllers git f13e381e sha256:4d3bc23d07a889d5d12325c327b4da40988a7c1f557e290a0f94f847955bd6a8
operator-marketplace git a3aeac97 sha256:7ee22e0273247d0f15d1057123d3253f1ce3900bcd22b0d85f16b17ae9259903
ovirt-csi-driver git 87ab3789 sha256:1d8a2cc49fee70cef23dc91726abc112b7c2b3a2ce8a09bb0d91930915a54443
ovirt-machine-controllers git 03e8cb50 sha256:30db410c748813f56466a8f6d07989e9fee57a0341a807d967195c53c1ddf72e
powervs-block-csi-driver git b78e8e78 sha256:cdcc0323606f684dfb77529d674003b29206ed173f96dab1ae75eccb3241c3ad
powervs-cloud-controller-manager git 4fb4334c sha256:1c5490e02c0dc8b39d7887a920709d93229dca87cb745ec1b017d29e05960d19
prom-label-proxy git b1907888 sha256:79b48b1ecdb887cea5aa48eda02c6b068f59a19983be45173a8d1bc0aa20f5c9
prometheus-config-reloader git d1e399d5 sha256:d04300cdc747de3d1e8e6d07a26ae3a84ac8ebb0050cdecbdf624934dabbf3de
prometheus-node-exporter git 99077a3c sha256:67b052d8093e16b36c72daade894a69aa6db3575d8c7ee9a8a6f926a759b5988
prometheus-operator git d1e399d5 sha256:c96f8d1d86ed18e94bd8a0e9de30bdc6a145aa351985e870522307c80e09d699
prometheus-operator-admission-webhook git d1e399d5 sha256:1c247dfdfea8b82b5ae9d9f61ecbd7c39c289ae236e91c1b6e3b06e7f137b4b8
rhel-coreos-8 sha256:64cdb521400d926f0b78e1265897d96845b3d4d56ea57c1617a4600231c7de8e
rhel-coreos-8-extensions sha256:9b66b1a993258000037f2207edde64ed85b6226864008d0eb3dd9fdbfe21360e
sdn git 5fe565c4 sha256:7600dee76916561f66ea2e9598ee88e14b3f7f76d0e81f0560dc28afe0307a0a
telemeter git c9592ded sha256:cd489291f81b3e3d628e863bcfb756ca6431d78be7ad61b609e3dabb21b405c4
tests git f638948e sha256:c579866ff125e1fdba31dab74c76df5b1343a6fccbd801ffa1176ddc399ae3fe
tools git d6912573 sha256:860e09fb49fc656b9de764580fe94790fe425f9fc9ae6ebd95c42784105ea00b

agent-installer-api-server

OCPBUGS-78114: [release-4.12] NO-JIRA: hermetic 4.12 #9956
OCPBUGS-67386: Bump logrus from 1.9.0 to 19.3 #8768
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-67388: Bump logrus v1.9.0 to v1.9.3 #1465
Full changelog

agent-installer-node-agent

OCPBUGS-67390: Bump logrus v1.9.0 to v1.9.3 #1287
Full changelog

aws-cluster-api-controllers

OCPBUGS-78231: [release-4.12] hermetic 4.12 #595
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67399: Updated logrus to v1.8.3 #315
Full changelog

aws-machine-controllers

OCPBUGS-78268: hermetic 4.12 #176
Full changelog

azure-cluster-api-controllers

OCPBUGS-78180: [release-4.12] Hermetic 4.12 #368
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67404: Bump github.com/sirupsen/logrus to v1.8.3 #116
Full changelog

azure-machine-controllers

OCPBUGS-78266: hermetic 4.12 #188
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-83750: Azure UPI ARM template: use storageAccountId #10511
OCPBUGS-78352: terraform/providers/google: Fixing inconsistencies with the service account creation #10385
OCPBUGS-66250: Replace terraform-provider-google with Openshift fork #10144
Full changelog

baremetal-machine-controllers

OCPBUGS-78103: [release-4.12] fix vendor/ for hermetic migration #247
Full changelog

cluster-baremetal-operator

OCPBUGS-77451: Bump github.com/go-errors/errors to v1.5.1 #566
Full changelog

cluster-capi-controllers

OCPBUGS-86891: update CI build root and Dockerfile tags w.r.t ART 4.12 streams #299
OCPBUGS-77976: fix vendor for hermetic #267
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #564
Full changelog

cluster-etcd-operator

OCPBUGS-67421: Update logrus to 1.9.3 to address CVE-2025-65637 #1550
Full changelog

cluster-image-registry-operator

OCPBUGS-67422: Bump logrus to 1.8.3 #1292
Full changelog

cluster-ingress-operator

OCPBUGS-86709: Add configuration override for X-SSL strip #1494
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: refactor: Updating go builder in the CI, Dockerfile and go.mod to be consistent with ART 4.12 #2175
OCPBUGS-67424: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.12.z] #2048
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #628
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: Reconciling the ART and CI go tool chain versions #173
OCPBUGS-67429: Bump github.com/sirupsen/logrus to v1.8.3 #143
Full changelog

cluster-monitoring-operator

OCPBUGS-76642: test: remove image registry e2e tests #2816
OCPBUGS-77403: test/e2e: improve prometheus remote-write test #2819
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76594: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #660
Full changelog

cluster-samples-operator

OCPBUGS-63521: references to github.com/sclorg/django-ex.git now also refer to the branch #663
Full changelog

cluster-storage-operator

OCPBUGS-67444: Bump logrus to v1.8.3 #657
Full changelog

console

OCPBUGS-120132: Fix JSON annotation parsing to prevent OperatorHub crash #17135
Fix for OCPBUGS-81593: CVE-2026-4800 #16570
OCPBUGS-88398, OCPBUGS-88416: Bump Axios to fix CVE-2026-44486. Requires a Patch of axios 0.33.0 types to be compatible with old version of TS #16793
OCPBUGS-79430: CVE-2026-29063 Bump immutable #16331
ART-18753: pin fsevents to latest #16482
NO-JIRA: enable multi-architecture yarn builds #16422
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.12 #12539
CONSOLE-5011: migrate to yarn berry #16084
NO-JIRA: Bump builder image to v29 #15988
OCPBUGS-74435: Bump lodash to latest #15973
OCPBUGS-44155: bump dompurify to latest #15595
Full changelog

console-operator

Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.12 #1137
OCPBUGS-77996: [release-4.12] NO-JIRA: update go mod dependency for konflux #1119
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79763: Apply code mitigations for CVE-2026-33186 #401
OCPBUGS-67448: CVE-2025-65637 #365
Full changelog

csi-driver-manila-operator

OCPBUGS-67449: Bump logrus #255
Full changelog

csi-driver-nfs

OCPBUGS-84927: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #186
Full changelog

driver-toolkit

OCPBUGS-63597: Remove realtime kernel from 4.12.z #176
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #278
OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #271
Full changelog

gcp-machine-controllers

OCPBUGS-83657: Address CVE-2026-33186 #174
OCPBUGS-78183: hermetic 4.12 #143
Full changelog

haproxy-router

OCPBUGS-86709: Strip X-SSL-* headers for plain HTTP #809
OCPBUGS-74943: Adding escapeHAProxySingleQuotes for sanitize [release-4.12] #784
OCPBUGS-78110: [release-4.12] hermetic 4.12 #744
Full changelog

hyperkube, pod

OCPBUGS-77661: Skip E2e: attach on previously attached volumes should work #2649
OCPBUGS-77469: hermetic 4.12 #2652
OCPBUGS-67374, OCPBUGS-67472: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.12] #2596
OCPBUGS-78226: UPSTREAM: 133262: Remove permafailing tests using an expired GCP project #2625
Full changelog

hypershift

OCPBUGS-77768: fix vendor for hermetic 4.12 #7823
Updating ose-hypershift-container image to be consistent with ART for 4.12 #6976
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79756: Bump google.golang.org/grpc to v1.79.3 #158
OCPBUGS-77214: [release-4.12] standardize build paths #128
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67476, OCPBUGS-67477: bump github.com/sirupsen/logrus to v1.8.3 #163
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67292: [release-4.12] Fix incomplete vendor/ #134
Full changelog

ibmcloud-machine-controllers

OCPBUGS-78276: hermetic 4.12 #79
Full changelog

ironic

OCPBUGS-69787: Bump eventlet version to 0.30.2-5 #767
Full changelog

ironic-agent

OCPBUGS-96903: Replace individual package removal with a single rpm -e loop #280
OCPBUGS-69778: adding eventlet 0.30.2-5 #236
Full changelog

ironic-machine-os-downloader

OCPBUGS-87168: CI Build root image tag and go version in go.mod sync with ART 4.12 #118
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95078: OWNERS: Update component to Cloud Compute / KubeVirt Provider #76
Full changelog

kubevirt-csi-driver

OCPBUGS-83660: Bump google.golang.org/grpc to v1.79.3 #110
Full changelog

machine-os-images

OCPBUGS-87882: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #106
Full changelog

multus-route-override-cni

OCPBUGS-78160: hermetic 4.12 #64
Full changelog

nutanix-machine-controllers

OCPBUGS-78158: hermetic 4.12 #132
Full changelog

openshift-apiserver

OCPBUGS-90518: Address CVE-2026-35469 #663
OCPBUGS-76481: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #614
OCPBUGS-79381: Fix image reference in TestImageStreamImportQuayIO #623
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67502: Bump logrus #191
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-86254: Drop github.com/distribution/distribution in go.mod #1312
Full changelog

ovirt-csi-driver-operator

OCPBUGS-67542: Bump github.com/sirupsen/logrus to v1.8.3 #148
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-84636: [release-4.12] Dockerfile: Unpin OVN and consume the latest from FDP #3075
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67511: Fix CVE-2025-65637 by bumping logrus to v1.8.3 #102
Full changelog

powervs-machine-controllers

OCPBUGS-78043: hermetic 4.12 #138
Full changelog

prometheus

OCPBUGS-88580: remote: validate snappy decoded length before allocation in read endpoint #356
OCPBUGS-86876: Bump google.golang.org/grpc #325
OCPBUGS-67512: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #291
Full changelog