4.18.49

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.49-x86_64

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.36, 4.17.37, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.50, 4.17.51, 4.17.52, 4.18.10, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.35, 4.18.37, 4.18.38, 4.18.39, 4.18.4, 4.18.40, 4.18.41, 4.18.42, 4.18.43, 4.18.44, 4.18.45, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.36

Created: 2026-07-16 14:00:14 +0000 UTC

Image Digest: sha256:33b613b2301d908441b6888d4080665504b3d19d386e88175a2c3a2553fec698

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202603181125-0 to 418.94.202607152305-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:e4da9778d3f4ee6cce14b0f1be8abb2242c86c9b5a3efa2187cb335f09ada2d3
agent-installer-node-agent git 81c09fb7 sha256:b2ec5f2874f005a4994f650eb11e62c54bad921956f06216154d8838af256c60
agent-installer-orchestrator git 81d6bc27 sha256:f235690846a9f086e4c2ddd821c823ae6bf4cad5b4e875dd9694beee6ca75a53
agent-installer-utils git 63b87f06 sha256:ad1c225020c557e972545548632e1c4fc5c3b3a2b786ff611c4730db4d2388f2
apiserver-network-proxy git 2f62712d sha256:f552211e2d22a6bcc21e91bd5fcf4506f8ecff95cd3548531c12ce960ca9e46a
aws-cloud-controller-manager git c3951906 sha256:ba3b9be6e0a119b834b753a83bbfe220200c0127d0b9672f39f3b7340bc1cca3
aws-cluster-api-controllers git ed55fc2d sha256:a7c67da9e2751809454b0a8d6bcebe85a1cc8c698c1a1e372b7c7fba1d75ac1e
aws-machine-controllers git 7b6bfc74 sha256:1fbf196293ece229a3a774a36820691fe832754d3eaab8002ce84a7ef09efffc
aws-pod-identity-webhook git f54f9a19 sha256:97e3851fb53ffacac06cd07bd83f5d1f2e474144844c92c94c4c47d18189f542
azure-kms-encryption-provider git c937080f sha256:73147e8d44cac76cc1640c3598541889c03156a0300427514b407784c29a83a7
azure-machine-controllers git 2fdaa544 sha256:6a7e77fac1f9b53c53392dcaa4c7222211d1a6910ba9e2932e3095791867fbe9
azure-workload-identity-webhook git f60e4029 sha256:f3bc8b4bffa7e3a199f86f1f84f44a4e139229bf29597dd7a64282391d366514
baremetal-cluster-api-controllers git 80c3a063 sha256:31cbcce01ea6d39b8e29eec11650d36b1c41a84543c7bff5dbf95a6a215275af
baremetal-machine-controllers git 1ede6c3f sha256:ca3ba7000225860ebe8b29c535e8a7a1d31a5e167186c89e0a08791727eaa5a4
baremetal-runtimecfg git 35341068 sha256:94b42080167f58fbf71fabe3fe5cbe084a0761ff4534fa35d39d81cd2a595076
cloud-credential-operator git 363e98bd sha256:f8252294deed4874a94d68830b26208a439184355590640f671da2e6d2e2ed01
cloud-network-config-controller git f892b915 sha256:2b76cbe1a816ef1d4ea4b1a38e513f6a8756ceb18d03cd61636cd6bd43ded0e4
cluster-autoscaler-operator git 474ad65c sha256:82f15f4fef75a793e49245280280a4cee14fbb5b5ffbf09a91492541bc2a5065
cluster-bootstrap git d1e01954 sha256:68357dac33aa45b3666e96d131e7220bba5c30ae46c7c5c0e0ae05d7abc9403d
cluster-cloud-controller-manager-operator git 8abb0673 sha256:824388c68a994b65f975bd845daa1b6cf9f3905c783227c3f45542993d0586dd
cluster-config-operator git fe5e9286 sha256:b84f4ddd5ea869253f8e8db88b5aff323b383b3b64fea4149d7e53fb460bcf4d
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:2924582f2045ca0081307996da1133e5fa46746a6c6fedbe08f845fa7c4463c8
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:c39b5bd366e7ce7ce41f8338799c9bbf189876a6c727662428e6e715e37562d3
cluster-dns-operator git 7cafd0c7 sha256:7c85e0c33ac6a85c9c5938d4efd99b507a35d8e87612676c177624b6ab7efa7b
cluster-image-registry-operator git 1e3caa4b sha256:576e47249b2f66a1d769cac01bcebcbc99df7654a54b548a0783e86e69225ed8
cluster-kube-apiserver-operator git e9bc9090 sha256:c8ebb75cf4dd749806a166fe3c693fba6522e5c4a49786be75fe1c93618eb543
cluster-kube-controller-manager-operator git 6347fc81 sha256:55097bd1f7bf500ea6303d4391ced2a78ccfe290074d01797c2d0da0c9416fb6
cluster-kube-scheduler-operator git 4e99db62 sha256:dd6dab937ec1ceb37b80172e6d2dc6817635d477c71cb6dec9246edbff6e89a2
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:941f0dcaad4340e5a5a581c104ad45cd584e6a8e613f6c4f1531baffa05a40d9
cluster-machine-approver git 01d5fbbe sha256:4c20dc58fd2a2f23d2232eb11c9471dd983f9d7279e7ce65c676aac07d6d5852
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:5945e58b8ef71f1b6423663841060a4f376fe6b90ae7fca3893627cd43fe9792
cluster-openshift-controller-manager-operator git f1711cf3 sha256:c000d34571523e5f3da6e4b92ae8023e0c1e04d293d6bb2d31f9de8d60dd4462
cluster-samples-operator git bc725fd4 sha256:b56e03ee5b4a9ee101deab7f501c96bbf07315b418266a6653a70bd833b80a06
cluster-update-keys git 8caab452 sha256:ed4b19167d7ce7af7a6b76e23cf72a7d224801e292c3594249769366468e735f
cluster-version-operator git f72d7e2c sha256:4442070e39b8a15b8aec19580337a052b9f66f74a9e489763b25f44dd5b71db3
configmap-reloader git e2aaf00a sha256:9dc64db5c62009ccc031babff77b197f4beda7eb70868281961a8c29d82ecbc6
console-operator git 3f78ddd5 sha256:b7ec8160a256852d4bf7062f7e5c310de4ba3ba37af9d1cc02e9cf0eae54b993
coredns git 8ca7f02b sha256:a8e028ea163cd3cd26f6d00c3534fa8ca541da817d5c1ffadcb2f6da6c445497
csi-external-resizer git a1423690 sha256:15b419fc928380d8449dc63db989a190abfb531facb5706b0fb6e0e277849e79
csi-livenessprobe git 3a977844 sha256:71c2a41b9a5e01c16c000c76f855fd15af5fd08edadf241454ea2fbf81a107e2
csi-node-driver-registrar git ef93f0be sha256:9622eae9e0fb7e4c1c9ef030862d3529c27ad184c4dd3cc61f97ef527241ada0
docker-builder git 529c9688 sha256:da516d255f9d12fad8bd8188fe75a6e2ab2887396dcc1bbaf3f6a561fe565ff3
docker-registry git 5c367551 sha256:bac8f19da548100094d5f8730efa470908a79e52fb2862df871aa59c3998adcd
driver-toolkit git 2e139edc sha256:263f1af55504658b98e840215225b692d616c27e019cb0f5fd4cfbc7aa676ce9
egress-router-cni git 3193a756 sha256:278c8b50a15c129361faaf70693f52a6e3ed2bc4777dfbb4eed6b5d609db23c7
etcd git b5a4f8d0 sha256:aeaf0b05c7666659370fbfd757f7a228b954cd3e25f018218aeefad7ec0ace91
gcp-cloud-controller-manager git 6ea23561 sha256:16614518e62f229e44dc8df74d5f906787e0f7d754c053716e3d76ddb310e3f1
gcp-workload-identity-federation-webhook git f0a670c7 sha256:729edecfe59376da9f994b0174f59ebf76a7a4215e9a877cca2b54d138550ff3
hyperkube git 91c24081 sha256:49514b89279ca59b048f626abd96d2de4decfe97a020cc5047e5f0625f5de87b
ibm-cloud-controller-manager git a33026b1 sha256:568dfad7c2bddeedce3bc59ff43aecc42185baec399aaad4b10875bc8f26fcbf
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:803182b9db76bdc9080881dc7a79326df9f3f6aa4d1e2e27ce7809bc03581d18
ibmcloud-cluster-api-controllers git 4a0c35b0 sha256:824d552d66a62079973a3a690595df91abfa6a2b726ba305232964ab4b2e6eea
insights-runtime-exporter git 3d444833 sha256:c64db25d0ad6d06129477a7192b4f0dee31b5128c73a56e5de6a1016c6f6a768
insights-runtime-extractor git 3d444833 sha256:218bfc6e47281f5db752f50d50ff8d625a5bdbf0172bde7967acfadf9b8b69e0
ironic-machine-os-downloader git 50ca44fd sha256:222eedbb2eac1a0cee4154e2e6b0ebf906d78204a850cd10fe4d67dce55b9134
ironic-static-ip-manager git cfbae04f sha256:396080b342312fa7c1d1aad2d9f05de86ef6e9194043f9f39be824d437c84f5f
keepalived-ipfailover git 716eb0ef sha256:ff42c7d17cdf46bdfa32ed5c849556defef5618ca4f6b8f41810275a71bfb97a
kube-proxy git 91c24081 sha256:ef2a6b366fa7c999e8037fc3e738ef68d6cddb890808fffe12d4eb5e3613296d
kube-rbac-proxy git 5a14ea9d sha256:a360179f7718b28aaa99735e7faaac80e79bdcb9a8e269626b644d03c3398601
kube-state-metrics git 046193a8 sha256:2a0f99e1c4f9ffef107241d70bcfbde047df6cdf8ef74de82dc5cb737e63138b
kube-storage-version-migrator git 815b43b7 sha256:fc31e19e5b4b3d19f00c67c598de2efe36f6c9705beff7e9ea541f066d1e5e37
metallb-frr git 760c6639 sha256:0a2a7c3d09ec7291080152984145d46a5d8c71b7512d11a7808d308e041ec9aa
multus-admission-controller git 0d7ea6c7 sha256:d4b7c98dfc647d66ec5c4774f7ced325a6c84c58835419d67cfe81d7327a8304
multus-networkpolicy git 3362bbc4 sha256:f3c7ac9a51cea3fad549ddc131de7f1c8ff292c3c6c400394fcfe7bc17a94ec9
multus-route-override-cni git 391c1b03 sha256:1bb7a277c482b310a456bae3a6968a8883d126dbb813ed979d07f736804e4516
multus-whereabouts-ipam-cni git 86191ded sha256:efcc3379674280e5a8d81e6c98a118a29253fdbc696671386382df99a7e10974
network-interface-bond-cni git e2de9255 sha256:07f0a1f61a9083441c7c8dd838074c1449a55740e1a5207c43bac7f53558086f
network-metrics-daemon git 11e2dec9 sha256:d1639031bddf21ba676285b6a3570157fddeef18196ef3dd8f5d081f2be8b6d8
network-tools git 47b13549 sha256:a19c42a9f61ca6fd804f36f1a62b93017dca090c8bc94873cd6a9b5ce0a890c6
nutanix-cloud-controller-manager git d9fe8f38 sha256:d1d21e09d765cdc645b1cdfd7fd2ec409d27c844757794d9dd641855ebd1b168
nutanix-machine-controllers git afe324bf sha256:e88b4b8873f5952ae79951e847ed13eefed0a2d1a1166003604164ce0a4690c8
oauth-apiserver git 1078b191 sha256:27cfbcfd02063213f4cd6a52845628ba435f8b166bc83f52f867573b6ac73256
oauth-proxy git 9225edb9 sha256:1649a101d23018a706c98a96511264d4fc7c07eb39f306f67a0a7db841e49a6e
oc-mirror git 22a9fb87 sha256:c060b7b275e03ed14ebb195f22071796858232cd86dbaaadfe366a410d6e8f63
olm-catalogd git 180aa92c sha256:71178ab4d40b0536dbd9194617212ad57a1eeeb22965b69ed9824cdbb8afb1ad
openshift-controller-manager git 8ee74406 sha256:531df91469b0a6b74febe8dff2dce4c1d0004fc849668986d970baecc92a3757
openshift-state-metrics git 3cca6fee sha256:d08c5a1886b76bdd48e7745827553fddb353888909214e46b2a110dad352331d
openstack-cluster-api-controllers git d5e6ff9f sha256:d91044b0de4cdaae05db5d2e33b67fc0efcf7aaff7af86bc7e6ab1d51e7eaa3c
operator-marketplace git 34521c26 sha256:a949fd118a0be123ec771e9356cf8508e314a635fc905132af4a69686626f816
pod git 91c24081 sha256:ded393d601229d409ed30822e7e7d1f7d3b30d59f6ce9f9a2c61b2e42f5cf516
powervs-machine-controllers git 74e3ece7 sha256:07a1be47d9e57eb235a39455701b2d72280ce02f1f7ec064a5cd7fb6da737fdd
prom-label-proxy git 35c11369 sha256:5da62628ff6a7ac6ce9df85bc561e4d7b9dfe02a3db2c2fb515206224ee8ecb0
prometheus-alertmanager git 2e844270 sha256:23710ae4f5cbbd3517fecf4678a210d1545776b9137c7c216ea39dfb4c422c70
prometheus-config-reloader git 9bbce0b8 sha256:f2ad0544709242b670069170467d820767605f425784ffa1566f8c9a3dc77b73
prometheus-node-exporter git 92e17ff5 sha256:c7e5c234bff0ce12ab0b172a443fd6ae75c500f73ff70ec24651bb19baa7ad43
prometheus-operator git 9bbce0b8 sha256:78b6d21bdd5c39443a066a0d877be719a0876ab20e7c9656a6b2a0afe8091a53
prometheus-operator-admission-webhook git 9bbce0b8 sha256:6be24ce36e476fb99834162c99bd3fc7a316042f473473d2003d87118c410a65
rhel-coreos sha256:76f411bd3542f25b7ce8b015cf2c92dbdc08f6b84d0e621a8b194bf7fd37b7c4
rhel-coreos-extensions sha256:9904a03c26e161dee34cbbb1f906edc5d736843a1bce20ead96b27441c82eb13
service-ca-operator git 30efb529 sha256:44f774172575ff86967da8b4bb7e4c505321ddaba2acb4446a98a18e854ae641
tests git 43c51244 sha256:9f0ced7dc0e3f63ac54f9325032dd5b25fefc9ff2a26e6ca2a3d4b8c5711b3ff
vsphere-cloud-controller-manager git b4dbf34a sha256:2863e4e0bdcbf24155bfef1cdf0673936f9f1f884556d8326edbf3cb69f2ad1a

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10019
Full changelog

aws-ebs-csi-driver

OCPBUGS-82745: Address CVE-2026-35469 #327
OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80308: Bump google.golang.org/grpc #542
OCPBUGS-79429: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 #531
OCPBUGS-78299: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #524
Full changelog

aws-kms-encryption-provider

OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80210, OCPBUGS-80211, OCPBUGS-80350: Bump google.golang.org/grpc to v1.79.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
Full changelog

azure-disk-csi-driver

OCPBUGS-80213: Address CVE-2026-33186 #142
OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
Full changelog

azure-file-csi-driver

OCPBUGS-80216: Address CVE-2026-33186 #133
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-95616: azure: Add field in installconfig to disallow shared access key #10670
OCPBUGS-78550: fix wavelength zone name regex #10409
Full changelog

baremetal-operator

OCPBUGS-98321: Add BMH finalizer on PreprovisioningImage #509
OCPBUGS-59259: Fix HFC error handling in actionPreparing #502
OCPBUGS-87967: Fix preprovisioning network Secret lifecycle during BMH deletion #495
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-83872: pkg/cli/admin/upgrade: Tighten force warnings #2165
Full changelog

cluster-authentication-operator

OCPBUGS-75897: set appropriate rolling update settings #835
Full changelog

cluster-autoscaler

OCPBUGS-78699: allow clusterapi provider to skip paused resources #413
Full changelog

cluster-baremetal-operator

OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
OCPBUGS-78708: Update kubebuilder tools to more latest version #579
Full changelog

cluster-capi-controllers

OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
Full changelog

cluster-capi-operator

OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
Full changelog

cluster-config-api

OCPBUGS-98486: add new serviceAccountToken fs type #2927
Full changelog

cluster-etcd-operator

OCPBUGS-78776: [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index #1573
Full changelog

cluster-ingress-operator

OCPBUGS-86715: Add configuration override for X-SSL strip (#1477) #1477
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
Full changelog

cluster-monitoring-operator

OCPBUGS-86995: increase lookup interval #2944
Full changelog

cluster-network-operator

OCPBUGS-85443: Remove duplicated openssl parameter #3006
OCPBUGS-84869: wait for patch port to apply drop garp flows #2988
OCPBUGS-84180: fix(hypershift): use net.JoinHostPort for URL construction #2977
OCPBUGS-77151: Add config override for openflow-probe #2965
OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
Full changelog

cluster-node-tuning-operator

OCPBUGS-90575: Requeue PerformanceStatus update when status write fails #1552
OCPBUGS-82752: Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 #1544
Full changelog

cluster-olm-operator

OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

cluster-policy-controller

OCPBUGS-98486: Backport fs type service account token 4.18 #196
Full changelog

cluster-storage-operator

OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
Full changelog

console

OCPBUGS-77125: [release-4.18] CVE-2026-26996 Bump minimatch library #16344
OCPBUGS-79447: Bump immutable #16325
NO-JIRA: enable multi-architecture yarn builds #16421
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85672: CI Build root image tag sync with ART #236
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80309: Bump google.golang.org/grpc #387
Full changelog

csi-driver-nfs

OCPBUGS-80254: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #180
Full changelog

csi-external-attacher

OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
Full changelog

csi-external-provisioner

OCPBUGS-82755: Address CVE-2026-35469 #135
OCPBUGS-80256: Bump google.golang.org/grpc #130
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
Full changelog

gcp-machine-controllers

OCPBUGS-80293: Bump google.golang.org/grpc to v1.79.3 #165
Full changelog

gcp-pd-csi-driver

OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
Full changelog

haproxy-router

OCPBUGS-86715: Strip X-SSL-* headers for plain HTTP #800
OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
Full changelog

hypershift

OCPBUGS-62756: Restart HCP on stale serving certs #8245
OCPBUGS-89356: build(operator): drop hypershift-no-cgo from operator container images #8760
NO-JIRA: remove path filter from control-plane-operator pipelines #8665
OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
OCPBUGS-84180: fix(cno): use brackets only for IPv6 in server URL #8346
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81647: bump vpc go sdk #91
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #87
Full changelog

insights-operator

OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
OCPBUGS-76963: Extends the time for the extractor liveness probe #1234
Full changelog

ironic

OCPBUGS-76459: Bump pyasn1 to 0.5.1-4 #826
OCPBUGS-74407: Update sushy to include DGX B200 credentials fix #832
Full changelog

ironic-agent

OCPBUGS-95066: Replace individual package removal with a single rpm -e loop #286
OCPBUGS-95066: Replace dnf remove with rpm -e to prevent dependency removal #274
Full changelog

kube-metrics-server

OCPBUGS-80190: Bump google.golang.org/grpc to v1.79.3 #64
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95084: OWNERS: Update component to Cloud Compute / KubeVirt Provider #77
Full changelog

kubevirt-csi-driver

OCPBUGS-79362: Add annotation-based fallback for infra VM node ID resolution #86
Full changelog

libvirt-machine-controllers

OCPBUGS-77194: Fix incomplete vendor/ #300
Full changelog

machine-api-operator

OCPBUGS-78795: [release-4.18] : correct aws kms permissions #1478
Full changelog

machine-config-operator

OCPBUGS-98445: Remove sensitive ControllerConfig logging #6294
OCPBUGS-97588: Bootstrap MCS logging entire ignition #6268
OCPBUGS-86845: Apply password only if changes exist #6113
OCPBUGS-86695: use –delete-if-present for karg removal #6102
OCPBUGS-86844: Fix ssh and password rollbacks #6096
OCPBUGS-86692: Fix re-cordon detection #6101
OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
OCPBUGS-86021: Fix units rollback if update failure #6052
OCPBUGS-79483: set default-timeout-stop to 200s globally #5805
Full changelog

machine-image-customization-controller

OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
Full changelog

machine-os-images

OCPBUGS-87876: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #100
Full changelog

monitoring-plugin

OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
OU-1241: unset frontend timeout to use the backend configuration #905
OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
OU-993: adding cypress Dockerfiles #861
OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85249: Fix server url in kubeconfig #298
NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
Full changelog

must-gather

OCPBUGS-86019: Collect object size with the object count #547
Full changelog

networking-console-plugin

OCPBUGS-41880: Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled #433
OCPBUGS-41880: Retain namespace selection between network policies tabs #424
OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
[release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
OCPBUGS-81606: Fix CVE-2026-CVE-2026-4800 in lodash #401
OCPBUGS-79449: Bump immutable #390
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-server

OCPBUGS-81803: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #238
Full changelog

olm-operator-controller

OCPBUGS-87830: [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache #751
OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
Full changelog

openshift-apiserver

OCPBUGS-82769: Address CVE-2026-35469 #657
Full changelog

openstack-machine-api-provider

OCPBUGS-93867: Revendor CAPO #174
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
OCPBUGS-81473: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1273
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
OCPBUGS-77151, OCPBUGS-83567: Branch Sync release-4.19 to release-4.18 [04-16-2026] #3143
OCPBUGS-82148: Branch Sync release-4.19 to release-4.18 [04-05-2026] #3117
OCPBUGS-81479: node: fix serviceUpdateNotNeeded nil pointer comparison #3101
Full changelog

powervs-block-csi-driver

OCPBUGS-80317: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #130
OCPBUGS-82774: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #124
Full changelog