4.18.46

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.46-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.16, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.49, 4.17.50, 4.17.51, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.34, 4.18.35, 4.18.36, 4.18.37, 4.18.38, 4.18.39, 4.18.4, 4.18.40, 4.18.41, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.33

Created: 2026-06-25 13:21:30 +0000 UTC

Image Digest: sha256:fba0d35fceb1c0a4b96bb9933102694f176a7cf95e2af83f6d35401901fefe79

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202602022246-0 to 418.94.202606221349-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:7377c82e57be40e34f8be121571eac9984c3ed512bf332cd0b0fc461ed901fdb
agent-installer-orchestrator git 81d6bc27 sha256:d9788fad92fc7c2fb736d0a39d92ca891aec7c6d982f8e92206358285438b579
apiserver-network-proxy git 2f62712d sha256:540afd6b2e659190f4e6af101277c5b23f6e980c284ea6130bd63e3415462dcc
aws-cloud-controller-manager git c3951906 sha256:779ad2bbee0154556253b33c0be6485e51a29ac064529ccfa66bf07fdb962d6c
aws-machine-controllers git 7b6bfc74 sha256:a9d37a91f79360ec2ff16846d779896158228354e552cc86c1430f28c2e7e558
aws-pod-identity-webhook git f54f9a19 sha256:41c8b9bc8afec0175d77058952fd471599c7fc4d54664225d92c7ab726286d4e
azure-kms-encryption-provider git c937080f sha256:a93a08f9248d01c523971991955ae474f9f0ae71a326326fa2b4fa9dddea1a7e
azure-machine-controllers git 2fdaa544 sha256:9dbe7d32aa2eb7ecac149cbf2c4bd114347df57dc975456e2a437d4d7a7bee81
azure-workload-identity-webhook git f60e4029 sha256:79cdc127fc2c04c324a33ad1b238c707933b873d7c1d22c4a7212f77a9f36370
baremetal-cluster-api-controllers git 80c3a063 sha256:aa8042600ecd8c5054fe37323615851fddc60d123a9e78bde837820e61c28d64
baremetal-machine-controllers git 1ede6c3f sha256:ec41c84f76aec7c57ab146969ea2fa7da79fa6299318f72a4f5bbff554aacd2e
baremetal-runtimecfg git 35341068 sha256:0f1bcc765299d531978155c8db3718ee10a5dc8f3881ca68765d7c038f76c9a9
cloud-network-config-controller git f892b915 sha256:44a38e2551ae590e483839aebe193239eb3c26f29058e90a0ccae5a6aed71e0d
cluster-autoscaler-operator git 474ad65c sha256:f12e8f6ac4e5ca523e3c8b5a7062781e7f92e88f9c490e4ed2169aa139593b6f
cluster-bootstrap git d1e01954 sha256:93954b76fa087c38b735342589ecc9f6156d41cd7f838dc8cd93e495fe71fb10
cluster-cloud-controller-manager-operator git 8abb0673 sha256:9a02ac4700a2d2b9e147915a4b4570943dbe1b3284d42e75c1ee8c123b12d534
cluster-config-api git 319dc2e4 sha256:21d9fd6a5e683bb1655810687db618b9ca41a9f7e0f3201be4b5271402d27db9
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:4facf96a57972c94c4fd852ecfa7cc9a6fe6d860e7300fd1b699af6052956dcf
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:1f25d691c140688883c93eab20a9a9d32040d1b9c98ecf4ea5d1ea5f7826f738
cluster-dns-operator git 7cafd0c7 sha256:49ca0aa3d4439fd1749f06ef558df8f593f24dd5174a389e30e09d41e927eb33
cluster-image-registry-operator git 1e3caa4b sha256:76865a6994558889bcaea2edab80555c17554906022361d6cd59a28eb8fed7a1
cluster-ingress-operator git 7ec6093b sha256:888392736550c3bf3f87f0949e2f32caee7261a368adc3006703e0f67ba4a0f8
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:465524668821578b46d210a2d8456d10a50961616c60907811c3511c2b1e35b4
cluster-machine-approver git 01d5fbbe sha256:aa28388aada0ab6a82b5571096bd1a3543dc9fea0425e989729d01d53c60a849
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:bd85ccaf70e1b69c9adece4e1f5150f1ba127f129fd20d2561f090ee1f167eed
cluster-openshift-controller-manager-operator git f1711cf3 sha256:cdbbc3d9c6e4ea0f8300884b2f1bf1c8a4bb71a085874f6821192a1ca04cdf26
cluster-policy-controller git 5fd85252 sha256:43dc548b9bc7e61755dc6b422657ff390d0dcfcea46255b6991bdf2e03ea6c91
cluster-samples-operator git bc725fd4 sha256:c7aeb6eaec8abe2c09a29490f15e3c80876ea8d446c4fe9e6c000e13cdbb98a2
cluster-update-keys git 8caab452 sha256:3504cf65bd40873d3803af91b1eddd52ce59f762776d6c4acc46ab843fdad01a
configmap-reloader git e2aaf00a sha256:5615691bf1db6bd1081262d9caeb5f471e515630f63a1d55eb0dd80edb0dc845
coredns git 8ca7f02b sha256:ef16d95437bf8e191831a509f45f0e4d6c1315b147bb9bfe0e1875379e9c0908
csi-external-resizer git a1423690 sha256:230363cd0a692db58df1cbac1b804bc421146ef091c52ee4a852c7ebe6c79539
csi-livenessprobe git 3a977844 sha256:92979052b1ff1ee76f41577f6dc627f709b9adf538d430c6330fb918eef7d817
csi-node-driver-registrar git ef93f0be sha256:e1232eb8a63d66b4bde20de4d391d747075f2c7b1197cf4d7f9c44a6abf1fcc4
driver-toolkit git 2e139edc sha256:233f997633a107a81135d658c855f9ee0b275f7783f9fc1b5f167d288130692c
egress-router-cni git 3193a756 sha256:a340b8f9322893fe1981452464526538b86628b291324c286ac6e35a67ff7cb9
etcd git b5a4f8d0 sha256:58991a25452b0e924bc91f73bf6a5a3eac3091e12401c8447cb8c8fdad638340
gcp-cloud-controller-manager git 6ea23561 sha256:e35e34ef298528cdecf9e91d7045042bd34a1fc3d81479bc5255d39acd880ef6
gcp-workload-identity-federation-webhook git f0a670c7 sha256:c58165847f34d3d5e4f5906a993b2d905f4cbdb84efb9457d5eb74c5d896335f
hyperkube git 91c24081 sha256:94ced2dc1ac2bf6e56592770107fe514a25c1710aa2bd2d31e7bd753c9c1fd26
ibm-cloud-controller-manager git a33026b1 sha256:cde73e56b7be424def7527669ff4e08e24cae4d7f2dd7cca673e8ac0a9b28d50
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:7a129fd46f9ef946b8fce096f3a8fbb67a8247e027711488c27a90dab206ef1d
ibmcloud-cluster-api-controllers git 4a0c35b0 sha256:012b3a8e4d7ac0c78cacb8135c68f9867dfb21064fca83e3e9268b088240ce92
ironic-agent git e5b49459 sha256:a80b4d5ca246d0cbb3d979b9093ec1e3259bfbce7fdab5fa3e62bd08a2ef5790
ironic-machine-os-downloader git 50ca44fd sha256:2bed365f9dbc6745c63ffb28d244599ab0f2d49dda0a13c82e898da9976e14b6
ironic-static-ip-manager git cfbae04f sha256:b75a59f22ae9dc5d7d6d0268f87cba0b9e35455cd3e58b7bcac147c96118d0f1
keepalived-ipfailover git 716eb0ef sha256:a6be016d18b87ca88e9b48364e59ad31e68ac929306cbe8e2525b73df9ba8426
kube-proxy git 91c24081 sha256:1b50dbb53958a8dc28cbd25e7718b69415a1f01a320e45f5e65039510f3a21d1
kube-rbac-proxy git 5a14ea9d sha256:c515bdbe204b73378374df7932d47eca95c67e443d35bbe86d5d9ac029f1d57f
kubevirt-cloud-controller-manager git 3f4542ec sha256:4b16aa0ff5e66c61754c509827b06572a3e1a6443a5c2da71cf34b5ca4d65f94
multus-admission-controller git 0d7ea6c7 sha256:64c3747b6172f8f8c9a6278ef40982c8595bc4367cc93a6a5c086c4f7836ae64
multus-networkpolicy git 3362bbc4 sha256:745dc7d0459226b9a41fb4ed5cf3c1eb8db1d743349d09a34b60ea344b5a8592
multus-route-override-cni git 391c1b03 sha256:f422fdfa2c9da6ce931206111fd89eade2a5a1cff8f66331ec01b8dab53b4bdf
multus-whereabouts-ipam-cni git 86191ded sha256:78b7f20a8cb483d3e8ee3dd8e37ae356a10c1c3ed68a2c8c4d698af1d27d781a
network-interface-bond-cni git e2de9255 sha256:bb91a99154dd964fc379ad7798ed3bbd1605def459f888d1f03222c2d756fbcd
network-metrics-daemon git 11e2dec9 sha256:59328d743e93720a1b1ba900aa675fa7ac6d7b202b218839c0015219b6e4a272
network-tools git 47b13549 sha256:56979af01a24f9e992579947a77fc467a0ee3e7af506045dd18dc3f6251bde24
nutanix-cloud-controller-manager git d9fe8f38 sha256:3d3ba700003c4db0e310f805e078418f119e70dbccca4e7fc61d25ada2b3294c
nutanix-machine-controllers git afe324bf sha256:7c8138d83d334d00d2bf6e0c3f00494db539790d67dfbf55da54657950bfcd68
oauth-apiserver git 1078b191 sha256:09d1bebb4dec5c35ef490502cad45ffa851fd281bd4fa88ec9f03a24a32c8d25
oauth-proxy git 9225edb9 sha256:fa9327b7d8cd583c681bdfa8aa7df07ed1244950a786324869a43d07076c7a4b
oc-mirror git 22a9fb87 sha256:f64a95bb41c0428e7390a3b76ce720dc5f6c99871c8a307ed7623c6f2ca027b9
olm-catalogd git 180aa92c sha256:dd380127a3d26b52f233dead1e0cbc437495d14c062ea0936a3286fa2cdb6110
openshift-controller-manager git 8ee74406 sha256:652efdbd37dc17154695c9cc3e2c7b15668f11195a9d88f73b7c09c5420b308f
openshift-state-metrics git 3cca6fee sha256:d85e5c4dcc2d3eb7d4fe233853a6656afe472d6780944360815fa7d7430c7cba
openstack-cluster-api-controllers git d5e6ff9f sha256:61e3a55b6c00b607c74884bf4a841b77dacaf6a6be0548ff80ac64a2597074c1
operator-marketplace git 34521c26 sha256:6f98512f5bf56992cbd6c931955f78ac6bc66d8c6a00d71b814dbfd95b85c98f
pod git 91c24081 sha256:b1e0c8dd40496de00da5e10fb58c02330f36642273e332917fbedc534969b71f
powervs-machine-controllers git 74e3ece7 sha256:8cbfdd7d09128ce2921e11716d87e8087191c27b1a9719cce3b3b21b47752dd8
prom-label-proxy git 35c11369 sha256:7b3e9d439c0f6aded4ed01f45a9f749d8077db3dd8dbb6f31df32320ee87b912
prometheus-alertmanager git 2e844270 sha256:106326033fb18fc536a49b792d5a9315e3a15dc1a24f76e00e81a627b664d959
prometheus-node-exporter git 92e17ff5 sha256:8d138bf4ae4ed4f6108c6a210a2b01bbb5af35314ad4582a081e29190d47a09e
rhel-coreos sha256:0f7001451f7b4ed72230d97373de63f9e2d971d96de9a7af966dd8427c8423ef
rhel-coreos-extensions sha256:b9d8c87f1964b079ef2f777ddc6a6a421d6f4d05f508404b75396e9798ecb32c
service-ca-operator git 30efb529 sha256:72c1f05ee220726ba8a6db69567ae0d63e21598e1f9953d813ef3ce13af07da0
thanos git f1599f65 sha256:713f56fa44fb65a29ddacf700452e2bf2373628ae9b20cc82c305f43f73e320c

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10019
OCPBUGS-74898: Retry incomplete cluster registration in ABI #8817
OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-77903: [release-4.18] update go mod dependency for konflux #589
Full changelog

aws-ebs-csi-driver

OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80308: Bump google.golang.org/grpc #542
OCPBUGS-79429: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 #531
OCPBUGS-78299: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #524
OCPBUGS-76582: Fix Cinder, Manila driver metrics #501
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-kms-encryption-provider

OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80210, OCPBUGS-80211, OCPBUGS-80350: Bump google.golang.org/grpc to v1.79.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
OCPBUGS-77905: [release-4.18] update go mod dependency for konflux #362
Full changelog

azure-disk-csi-driver

OCPBUGS-80213: Address CVE-2026-33186 #142
OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
Full changelog

azure-file-csi-driver

OCPBUGS-80216: Address CVE-2026-33186 #133
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-78550: fix wavelength zone name regex #10409
OCPBUGS-45579: PowerVS: Listen to machineNetwork #9277
OCPBUGS-73784: pkg/asset/manifests/azure: save cidr blocks #10217
OCPBUGS-76598: Increase agent-installer pre-network-manager timeout #10299
OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
Full changelog

baremetal-operator

OCPBUGS-76988: Unblock BMH direct deletion when detached annotation is present #461
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-83872: pkg/cli/admin/upgrade: Tighten force warnings #2165
Full changelog

cloud-credential-operator

OCPBUGS-74548: Resolve nil pointer exception in hasResourceTags #968
Full changelog

cluster-authentication-operator

OCPBUGS-75897: set appropriate rolling update settings #835
Full changelog

cluster-autoscaler

OCPBUGS-78699: allow clusterapi provider to skip paused resources #413
OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
Full changelog

cluster-baremetal-operator

OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
OCPBUGS-78708: Update kubebuilder tools to more latest version #579
Full changelog

cluster-capi-controllers

OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
Full changelog

cluster-capi-operator

OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-78776: [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index #1573
OCPBUGS-76284: Add priority field to prevent early shutdown #1545
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #622
OCPBUGS-76284: Add priority field to prevent early shutdown #612
Full changelog

cluster-monitoring-operator

OCPBUGS-86995: increase lookup interval #2944
OCPBUGS-77274: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2833
Full changelog

cluster-network-operator

OCPBUGS-85443: Remove duplicated openssl parameter #3006
OCPBUGS-84869: wait for patch port to apply drop garp flows #2988
OCPBUGS-84180: fix(hypershift): use net.JoinHostPort for URL construction #2977
OCPBUGS-77151: Add config override for openflow-probe #2965
OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
OCPBUGS-74154: whereabouts-config is a reserved name for user interaction. #2884
Full changelog

cluster-node-tuning-operator

OCPBUGS-82752: Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 #1544
OCPBUGS-75954: PPC: filter out namespaces dir #1465
Full changelog

cluster-olm-operator

OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

cluster-storage-operator

OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
Full changelog

cluster-version-operator

OCPBUGS-70182: Unify capitalization when comparing architectures for available updates #1327
Full changelog

console

OCPBUGS-79447: Bump immutable #16325
NO-JIRA: enable multi-architecture yarn builds #16421
CONSOLE-5011: migrate to yarn berry #16073
NO-JIRA: Bump builder image to v29 #15995
Full changelog

console-operator

OCPBUGS-77861: update go mod dependency for konflux #1113
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85672: CI Build root image tag sync with ART #236
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80309: Bump google.golang.org/grpc #387
Full changelog

csi-driver-nfs

OCPBUGS-80254: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #180
Full changelog

csi-external-attacher

OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
Full changelog

csi-external-provisioner

OCPBUGS-80256: Bump google.golang.org/grpc #130
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
Full changelog

docker-registry

OCPBUGS-68253: update logrus to v1.9.1 #464
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
OCPBUGS-78278: [release-4.18] update go mod dependency for konflux #265
Full changelog

gcp-machine-controllers

OCPBUGS-80293: Bump google.golang.org/grpc to v1.79.3 #165
Full changelog

gcp-pd-csi-driver

OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
Full changelog

haproxy-router

OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
Full changelog

hypershift

NO-JIRA: remove path filter from control-plane-operator pipelines #8665
OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
OCPBUGS-84180: fix(cno): use brackets only for IPv6 in server URL #8346
OCPBUGS-76532: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7699
OCPBUGS-77368: Fix ignition-server pod restarts #7878
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
OCPBUGS-77207: [release-4.18] standardize build paths #122
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81647: bump vpc go sdk #91
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #87
Full changelog

insights-operator

OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
OCPBUGS-76963: Extends the time for the extractor liveness probe #1234
OCPBUGS-76537: [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1239
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77789: remove dnf cache from the container images #69
Full changelog

ironic

OCPBUGS-76459: Bump pyasn1 to 0.5.1-4 #826
OCPBUGS-74407: Update sushy to include DGX B200 credentials fix #832
OCPBUGS-74115: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #795
Full changelog

kube-metrics-server

OCPBUGS-80190: Bump google.golang.org/grpc to v1.79.3 #64
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kube-storage-version-migrator

OCPBUGS-78273: fix /vendor for hermetic 4.18 #239
Full changelog

kubevirt-csi-driver

OCPBUGS-79362: Add annotation-based fallback for infra VM node ID resolution #86
Full changelog

libvirt-machine-controllers

OCPBUGS-77194: Fix incomplete vendor/ #300
Full changelog

machine-api-operator

OCPBUGS-78795: [release-4.18] : correct aws kms permissions #1478
OCPBUGS-78796: [release-4.18] Use resource group when generating default Azure image #1480
Full changelog

machine-config-operator

OCPBUGS-86845: Apply password only if changes exist #6113
OCPBUGS-86695: use –delete-if-present for karg removal #6102
OCPBUGS-86844: Fix ssh and password rollbacks #6096
OCPBUGS-86692: Fix re-cordon detection #6101
OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
OCPBUGS-86021: Fix units rollback if update failure #6052
OCPBUGS-79483: set default-timeout-stop to 200s globally #5805
OCPBUGS-62692: configure-ovs: work around a Cisco switch issue #5329
OCPBUGS-78056: Prevent unnecessary systemd unit disable #5758
OCPBUGS-74148: enable nodeip-configuration for platform external #5578
OCPBUGS-77777: reduce MCO image size #5738
OCPBUGS-77576: mcd_config_drift not working properly #5726
OCPBUGS-77421: Remove MCD liveness probe #5710
OCPBUGS-74644: After OCL is enabled few phases in MCN are not updating as expected #5605
OCPBUGS-77092: Machine-config controller should not log about non-existent pull-secret changes #5680
OCPBUGS-77041: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5671
OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
Full changelog

machine-image-customization-controller

OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
OCPBUGS-77888: Clean up dnf cache to reduce container image size #168
Full changelog

machine-os-images

OCPBUGS-87876: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #100
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
OU-1241: unset frontend timeout to use the backend configuration #905
OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
OU-993: adding cypress Dockerfiles #861
OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] #818
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85249: Fix server url in kubeconfig #298
NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
OCPBUGS-77853: hermetic 4.18 #276
Full changelog

must-gather

OCPBUGS-86019: Collect object size with the object count #547
Full changelog

networking-console-plugin

OCPBUGS-41880: Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled #433
OCPBUGS-41880: Retain namespace selection between network policies tabs #424
OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
[release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
OCPBUGS-81606: Fix CVE-2026-CVE-2026-4800 in lodash #401
OCPBUGS-79449: Bump immutable #390
Full changelog

oauth-server

OCPBUGS-81803: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #238
Full changelog

olm-operator-controller

OCPBUGS-87830: [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache #751
OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
Full changelog

openshift-apiserver

OCPBUGS-82769: Address CVE-2026-35469 #657
OCPBUGS-74234: Bump library-go for route path validation fix #603
Full changelog

openstack-machine-api-provider

OCPBUGS-69648: Don’t record event for every reconcile #143
OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
OCPBUGS-81473: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1273
OCPBUGS-77714: Remove the collect-profiles info from the microshift kustomization file #1245
OCPBUGS-76924: Remove the collect-profiles job #1231
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
OCPBUGS-77151, OCPBUGS-83567: Branch Sync release-4.19 to release-4.18 [04-16-2026] #3143
OCPBUGS-82148: Branch Sync release-4.19 to release-4.18 [04-05-2026] #3117
OCPBUGS-81479: node: fix serviceUpdateNotNeeded nil pointer comparison #3101
OCPBUGS-78015: Add pperiyasamy to OWNERS for release-4.18 #3045
OCPBUGS-77516: Clear stale conntrack UDP entries for nodePorts #3016
OCPBUGS-77083, OCPBUGS-77106: [release-4.18] combined backport PR for 2 escalations #2987
OCPBUGS-48710: Branch Sync release-4.19 to release-4.18 [02-04-2026] #2970
OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
Full changelog

powervs-block-csi-driver

OCPBUGS-80317: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #130
OCPBUGS-82774: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #124
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80318: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #111
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80319: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #99
Full changelog

prometheus

OCPBUGS-80320: Bump google.golang.org/grpc to v1.79.3 #308
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77298: backport upstream fix to reconcile resources with inconsistent status #370
OCPBUGS-77398: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #366
Full changelog