Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.60-x86_64

Qualifiers (status api): None

Tests:

• Blocking jobs
  • upgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade

    • Attempt 1 Failed
    • Attempt 2 Succeeded
  • upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
  • aws-ovn-single-node-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node

    • Attempt 1 Failed
    • Attempt 2 Succeeded
  • aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
  • azure-ovn-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade

    • Attempt 1 Failed
    • Attempt 2 Succeeded
  • driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
  • fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
  • gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.18 Failed (1 retry) periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance

    • Attempt 1 Failed
    • Attempt 2 Failed
  • metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
  • microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
  • microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

• 4.18.59 (changes) - S F S F S S F S
• 4.18.58 (changes) - Failed
• 4.18.57 (changes) - Success
• 4.18.48 (changes) - Failed
• 4.18.42 (changes) - Success
• 4.18.37 - Failed
• 4.18.3 (changes) - Failed
• 4.18.2 (changes) - Success
• 4.18.1 (changes) - Success
• 4.17.59 (changes) - S S S
• 4.17.58 (changes) - Success
• 4.17.57 (changes) - Success
• 4.17.47 (changes) - Success
• 4.17.29 (changes) - Failed
• 4.17.22 (changes) - Failed
• 4.17.13 (changes) - Failed
• 4.17.12 (changes) - Failed
• 4.17.11 (changes) - Failed

Upgrades to:

• 4.19.0-0.ci-2026-11-05-142220 (changes) - Pending

---

Loading changelog, this may take a while ...

Changes from 4.18.37

Created: 2026-11-05 05:35:29 +0000 UTC

Image Digest: sha256:d0253567dd0d96590d441b63c50cc410eb1ca8bd997116d4dc6717efa6527cdd

Components

• Kubectl 1.31.1
• Kubernetes 1.31.14
• Kubernetes Tests 1.31.12
• Red Hat Enterprise Linux CoreOS upgraded from 418.94.202603261158-0 to 418.94.202611030931-0 (diff)

Removed images

• ovirt-csi-driver
• ovirt-csi-driver-operator

Rebuilt images without code change

• agent-installer-utils git 63b87f06 sha256:0a554420bf16a91a58de520f11a7d230b1778e641bb97c239db6779f9c1febed
• apiserver-network-proxy git 2f62712d sha256:eacd26fad46427dedf2a8049cc73a1cc358f05ee5d025023b0fe0182b3757f75
• aws-cloud-controller-manager git c3951906 sha256:177966042b2df9ad720e729b39e778ea9f695d73992cb47a4573c945c324fa2f
• aws-machine-controllers git 7b6bfc74 sha256:1af8a0148124e8ffdb2804696718cec28ce5578276638a8ad3b7a9d536dd683e
• aws-pod-identity-webhook git f54f9a19 sha256:91fd48ce4d51acc146ae997ad499e4d74cecdf2136c87b0b654b3b0a8d7665ef
• baremetal-cluster-api-controllers git 80c3a063 sha256:37eb4a361b8fe1d7d68ce1f235c61606591c6015792a8e6ece022d1cee2f1d89
• baremetal-machine-controllers git 1ede6c3f sha256:dae1a0c07347a992f7c83eeb4eda48017c6a6059d23c3894b2cd8607a3fead9f
• cloud-network-config-controller git f892b915 sha256:546eaf1c0bed1808e5edc5b2f2bdeb329711e2f6a071b3b71a0cae3e9504418f
• cluster-autoscaler git 34730793 sha256:fd8753a447ab1e7baca81724bb5ef2581b4972d0b5fc007ac4635547952f48af
• cluster-bootstrap git d1e01954 sha256:4fdc4a82c7a55d85f989e63937c59a33d767e3209f6ed3d882b2a14090b64604
• cluster-config-operator git fe5e9286 sha256:3c3b53f201fa29f9463fb04d785f9bb7051e70d37310e48027d24c871bb7609d
• cluster-control-plane-machine-set-operator git d17bf3a1 sha256:bf2609e9f1d12c7b5dd96799bb5bdc93bb4c5b1467e2c61d93c5ec8fd59f884a
• cluster-image-registry-operator git 1e3caa4b sha256:191ab0e5a7993d29e7e9fd8b801d13bac44809cc94a70af4a0029c0f906b1e72
• cluster-kube-storage-version-migrator-operator git 59ba356f sha256:d5ce4fb9ddf85324aa0aae664700e363e465aeb3442c7c1911b1f2df9f34e6cb
• cluster-machine-approver git 01d5fbbe sha256:07c4407b8cd091721e488de2505151f376694e2922dd278b4f759d9dcb73e392
• cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:a8390df6931dae6ae0ab651b360ed2c7e7743e22bb1bc2e6a3aedc0aec18ea72
• cluster-openshift-controller-manager-operator git f1711cf3 sha256:6f13a185385ca7c318fd88df97cd4579b2dd519e22cf8a57d590d4ff347591b5
• cluster-update-keys git 8caab452 sha256:6844deccbf3156bf1a71fe597103dd43477b497721362fd8f8685ded1bd87df8
• configmap-reloader git e2aaf00a sha256:2847361b634b9e7db7dd7808f13e67af4860af54002da9212bed84c80dc2d8c6
• csi-node-driver-registrar git ef93f0be sha256:3bf1e8c4feabc6d0fda241802f01050afe948322750675d9acedca29554ea68f
• driver-toolkit git 2e139edc sha256:3d083dee6d7e07d466d2a86acc14567bf7cdbde6a78c357306bc471e42753825
• etcd git b5a4f8d0 sha256:3fd5814e01a661e4235482db7199fd67b01c700c8f9da554cdcd63657be04c1a
• gcp-cloud-controller-manager git 6ea23561 sha256:381e62e05672409fc38414aecad33fc51f1562c3fb3399de592e60c466bb6552
• insights-runtime-exporter git 3d444833 sha256:2e9fdf56e9bfa37b980a91b6ae7b33a0a45ae5b6c0ddcf0104306281cce886b8
• insights-runtime-extractor git 3d444833 sha256:a90711f5216e256c27a0023ea3d5d5dd3765712b942dad093a6fbff482c3c15f
• ironic-machine-os-downloader git 50ca44fd sha256:a3d8786ea9d1b8344d10498d3725a330f92d2275ca9f8bc1be79176da0a976c5
• ironic-static-ip-manager git cfbae04f sha256:7df378abcc5e0e27b94dec54f1aa6780dbf4c34bf820ecedcb6137ac57d28ce9
• keepalived-ipfailover git 716eb0ef sha256:ab1f5a751baadac984c4d4d13b7edbedf3acbc682a32a5a64d69f56ecd7044d1
• kube-storage-version-migrator git 815b43b7 sha256:85d9d03066f28f40a2e3bfed2d432bc09fb15b5d8a7ea5708e7e1c40415369f5
• libvirt-machine-controllers git 875b03bd sha256:9d12d4ab58a87f529f943ad7adeb8708f436f31770ee6c82e6280b837bcbfb88
• metallb-frr git 760c6639 sha256:08f462013020a13e57f014c54d0cf774641bf604d053ab7d17efdbf5d593a780
• multus-route-override-cni git 391c1b03 sha256:c2fa4ace580986852f6dc92bd1d194e6a749d62191475be7e3b861a099e73d3f
• multus-whereabouts-ipam-cni git 86191ded sha256:c2efae8d9edc3d7720787b81cda9f04bdf098f098786aaa3d91e4c09db3df451
• network-interface-bond-cni git e2de9255 sha256:9a3992359db920131386e64b191ac9ab1a3b7e71b3416c9be470d7ae06fef479
• network-tools git 47b13549 sha256:f7522ebe3f8f80c75cf2a3041c26dc678325af93d6574bb2a2d7ce3ab59af72d
• nutanix-machine-controllers git afe324bf sha256:c501b7146cd62ab46d91c435f7629e972bea09f84c63042d5262db1ff028deeb
• olm-catalogd git 180aa92c sha256:2f99f5d53ff8dd8d7e63709667b1587a09ecba436c71dc2c62a4d1e3d9f79507
• openstack-cluster-api-controllers git d5e6ff9f sha256:7a40db26292851a3a426b2c3eb92f953ed921191843c4d32ed56b0bad4e83e54
• operator-marketplace git 34521c26 sha256:18b179692f4c1d3a5b77ff4ade13c1fe824906bcfd2386434409dd9698359612
• powervs-machine-controllers git 74e3ece7 sha256:7577bed5ff482e8df14ea8b0bc02bb98c077768c91b7cd19c539f24d2612c4c1
• rhel-coreos sha256:63da6a5aea88f89765030e691345ddea3d85442178766cc61cffd37d3ddc3e1f
• rhel-coreos-extensions sha256:ad3a45c10fb1a52706e0fde3ea8c892c350c08f4f8fce471a4d7a12bd595fd94
• service-ca-operator git 30efb529 sha256:1d3afef5cb5ad00189db25df6eeed88b93da8c758260c8d221402c2e9b2a1a94

agent-installer-api-server

• OCPBUGS-89884: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 #10800
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-103348: Bump x/net to v0.35.0-sec.4 #2297
• Full changelog

agent-installer-node-agent

• OCPBUGS-103362: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #1618
• Full changelog

aws-cluster-api-controllers

• 🐛 OCPBUGS-134667: UPSTREAM: 6132: Persist ProviderID immediately after instance creation #668
• OCPBUGS-103372: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #652
• 🐛 OCPBUGS-123705: UPSTREAM: <carry>: Fix unit tests for OpenShift CI environment #642
• 🌱 OCPBUGS-123680: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #641
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-82745: Address CVE-2026-35469 #327
• OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
• OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-103431, OCPBUGS-103496, OCPBUGS-103518: Use patched x/net fork v0.35.0-sec.4 #632
• OCPBUGS-103360, OCPBUGS-103371: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #610
• OCPBUGS-80308: Bump google.golang.org/grpc #542
• Full changelog

aws-kms-encryption-provider

• OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-103373, OCPBUGS-103550: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #208
• OCPBUGS-80210, OCPBUGS-80211, OCPBUGS-80350: Bump google.golang.org/grpc to v1.79.3 #190
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-89899: Address CVE-2026-39829 #401
• OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
• Full changelog

azure-disk-csi-driver

• UPSTREAM: 3635: OCPBUGS-103367: Bump golang.org/x/net to v0.43.0-sec.4 #172
• OCPBUGS-114621: UPSTREAM: 3277: fix: allow . in Azure tags #179
• OCPBUGS-80213: Address CVE-2026-33186 #142
• OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
• Full changelog

azure-file-csi-driver

• OCPBUGS-103366: Bump golang.org/x/net to v0.35.0-sec.4 #158
• OCPBUGS-92789: Bump golang.org/x/crypto to v0.33.0-sec.3 #148
• OCPBUGS-80216: Address CVE-2026-33186 #133
• Full changelog

azure-kms-encryption-provider

• OCPBUGS-80185: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #46
• Full changelog

azure-machine-controllers

• OCPBUGS-103471: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #213
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-103390: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #63
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-134631: Update RHCOS-release-4.18 bootimage metadata to 418.94.202610242013-0 #11036
• NO-JIRA: data/manifests/bootkube/cvo-overrides: Default to eus-4.18 #11004
• OCPBUGS-103391, OCPBUGS-103464: Bump golang.org/x/net to v0.35.0-sec.4 #10970
• OCPBUGS-89882, OCPBUGS-89888, OCPBUGS-89919, OCPBUGS-92878: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.4 #10901
• OCPBUGS-121872: Update gcloud version to one that can be found #10857
• OCPBUGS-77052: Update RHCOS-release-4.18 bootimage metadata to 418.94.202608142238-0 #10795
• OCPBUGS-95616: azure: Add field in installconfig to disallow shared access key #10670
• Full changelog

baremetal-operator

• OCPBUGS-98321: Add BMH finalizer on PreprovisioningImage #509
• OCPBUGS-59259: Fix HFC error handling in actionPreparing #502
• OCPBUGS-87967: Fix preprovisioning network Secret lifecycle during BMH deletion #495
• Full changelog

baremetal-runtimecfg

• OCPBUGS-103376: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #408
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-78501: Makefile: Strip debugging symbols by default #2227
• OCPBUGS-103346, OCPBUGS-103383: Use patched x/net fork v0.35.0-sec.4 #2418
• OCPBUGS-91365, OCPBUGS-94688: Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 #2344
• OCPBUGS-109669: Fix pre-existing unit test failures on release-4.18 #2372
• OCPBUGS-83872: pkg/cli/admin/upgrade: Tighten force warnings #2165
• Full changelog

cloud-credential-operator

• OCPBUGS-103387: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #1100
• OCPBUGS-81887: Bump go-jose/go-jose/v4@v4.1.4 #1031
• OCPBUGS-80219: Fix CVE-2026-33186 using openshift-sustaining grpc-go fork #1041
• Full changelog

cluster-authentication-operator

• OCPBUGS-103378: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #988
• OCPBUGS-75897: set appropriate rolling update settings #835
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-103386: Bump x/net package in release-4.18 #388
• Full changelog

cluster-baremetal-operator

• OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
• Full changelog

cluster-capi-controllers

• OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
• Full changelog

cluster-capi-operator

• OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
• NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-103380: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #513
• Full changelog

cluster-config-api

• OCPBUGS-98486: add new serviceAccountToken fs type #2927
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-103405: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #293
• Full changelog

cluster-dns-operator

• OCPBUGS-103403: Use patched x/net fork v0.35.0-sec.4 #495
• Full changelog

cluster-etcd-operator

• OCPBUGS-103410: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #1695
• OCPBUGS-78776: [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index #1573
• Full changelog

cluster-ingress-operator

• OCPBUGS-103414: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1571
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-103402: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #2299
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-103404: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #961
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-103397: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #669
• Full changelog

cluster-monitoring-operator

• OCPBUGS-129140: don’t delete admin-owned Alertmanager secrets on destroy #3142
• NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #3116
• OCPBUGS-103412: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #3075
• OCPBUGS-105311: [release-4.18] wrap library-go resourceCache with mutex for thread safety #3041
• OCPBUGS-104540: Backport e2e stabilization 4.18 #3030
• OCPBUGS-100375: [release-4.18] fix: watch cluster wide proxy changes and apply changes accordingly #3024
• OCPBUGS-94081: ship collector:node_scrape_collector_success:avg to Telemetry #2992
• OCPBUGS-86995: increase lookup interval #2944
• Full changelog

cluster-network-operator

• OCPBUGS-100191: Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 #3096
• OCPBUGS-85443: Remove duplicated openssl parameter #3006
• OCPBUGS-84869: wait for patch port to apply drop garp flows #2988
• OCPBUGS-84180: fix(hypershift): use net.JoinHostPort for URL construction #2977
• OCPBUGS-77151: Add config override for openflow-probe #2965
• OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-69395: E2E add test to verify guaranteed pod is running after kubelet restart #1448
• OCPBUGS-90575: Requeue PerformanceStatus update when status write fails #1552
• OCPBUGS-82752: Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 #1544
• Full changelog

cluster-olm-operator

• OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
• Full changelog

cluster-policy-controller

• OCPBUGS-98486: Backport fs type service account token 4.18 #196
• Full changelog

cluster-samples-operator

• OCPBUGS-133349: Restrict samples operator access to the global pull-secret- #731 #731
• Full changelog

cluster-storage-operator

• OCPBUGS-103401: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #735
• OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
• OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
• Full changelog

cluster-version-operator

• OCPBUGS-103432: Bump golang.org/x/net to v0.35.0-sec.3 #1459
• Full changelog

console

• OCPBUGS-127158: [release:4.18] linkify-it: Denial of Service via crafted mailto: links #17381
• OCPBUGS-127183: Re-enable Knative Cypress e2e tests #16907
• OCPBUGS-113759: block GraphQL introspection over websocket #17130
• Fix for OCPBUGS-92075: CVE-2026-44990 #16717
• OCPBUGS-100515, OCPBUGS-101791: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17058
• OCPBUGS-98420: [release-4.18] CVE-2026-59869 bump js-yaml #17076
• OCPBUGS-81520: Console can only show user name instead of full name as the display name #16238
• OCPBUGS-86740, OCPBUGS-87085, OCPBUGS-97763: [release-4.18] bump package: protobufjs, fast-uri #16728
• OCPBUGS-100069: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16872
• OCPBUGS-91944: Prevent binary secret data corruption when editing #16673
• OCPBUGS-99487: Disable Knative e2e Cypress tests in CI #16803
• OCPBUGS-99648: Disable shipwright e2e tests to unblock CI #16818
• OCPBUGS-86453: [release-4.18] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16511
• Fix for OCPBUGS-81604: CVE-2026-4800 #16563
• OCPBUGS-84284: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16675
• OCPBUGS-77125: [release-4.18] CVE-2026-26996 Bump minimatch library #16344
• OCPBUGS-79447: Bump immutable #16325
• NO-JIRA: enable multi-architecture yarn builds #16421
• Full changelog

console-operator

• OCPBUGS-103424: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #1223
• OCPBUGS-98985: [4.18] Stabilize telemetry config to prevent continuous console pod rollouts #1190
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-85672: CI Build root image tag sync with ART #236
• Full changelog

coredns

• OCPBUGS-103421: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #205
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-103493, OCPBUGS-103494: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #422
• OCPBUGS-80309: Bump google.golang.org/grpc #387
• Full changelog

csi-driver-nfs

• OCPBUGS-82754: Bump github.com/moby/spdystream@v0.5.1 #194
• OCPBUGS-80254: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #180
• Full changelog

csi-external-attacher

• UPSTREAM: 110: OCPBUGS-103429: Bump golang.org/x/net to v0.35.0-sec.4 #115
• OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
• Full changelog

csi-external-provisioner

• OCPBUGS-92883: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.5 to address CVE-2026-46597 #163
• OCPBUGS-82755: Address CVE-2026-35469 #135
• OCPBUGS-80256: Bump google.golang.org/grpc #130
• Full changelog

csi-external-resizer

• OCPBUGS-103430: Bump golang.org/x/net to v0.35.0-sec.4 #213
• OCPBUGS-80257: Bump google.golang.org/grpc to v1.79.3 #203
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-127502: [release-4.18] OCPBUGS-127500: UPSTREAM: 1392: Fix VolumeSnapshotContent deletion #257
• OCPBUGS-103427, OCPBUGS-103428: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #228
• OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
• Full changelog

csi-livenessprobe

• OCPBUGS-103425: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #103
• Full changelog

docker-builder

• OCPBUGS-89907, OCPBUGS-90327, OCPBUGS-92414, OCPBUGS-92621, OCPBUGS-92892: Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 #549
• Full changelog

docker-registry

• OCPBUGS-103437: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #480
• Full changelog

egress-router-cni

• OCPBUGS-100191: Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 #109
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
• Full changelog

gcp-machine-controllers

• OCPBUGS-103482: Bump golang.org/x/net to v0.35.0-sec.3 #189
• OCPBUGS-80293: Bump google.golang.org/grpc to v1.79.3 #165
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-103438: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #145
• OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
• Full changelog

gcp-workload-identity-federation-webhook

• OCPBUGS-103450: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #26
• Full changelog

haproxy-router

• OCPBUGS-86726: Prevent SSRF via FQDN-typed EndpointSlices #821
• OCPBUGS-86715: Strip X-SSL-* headers for plain HTTP #800
• OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-82737, OCPBUGS-82761: Address CVE-2026-35469 #2689
• Full changelog

hypershift

• ACM-45149: Migrate Go builder for hypershift-cli, hypershift-release #10068
• OCPBUGS-131922: Router publish strategy related changes for IBM Cloud platform #10007
• fix(deps): OCPBUGS-76288: Update runc, selinux, and their transitive deps to fix CVE-2025-52881 #8289
• ACM-37663: Rebase hypershift operator runtime image to RHEL 9.8 ELS #9451
• ACM-38044: update Containerfile.cli base images to floating tags [release-4.18] #9044
• OCPBUGS-99142: fix(backport): konnectivity agent auth #9096
• OCPBUGS-62756: Restart HCP on stale serving certs #8245
• OCPBUGS-89356: build(operator): drop hypershift-no-cgo from operator container images #8760
• NO-JIRA: remove path filter from control-plane-operator pipelines #8665
• OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
• OCPBUGS-84180: fix(cno): use brackets only for IPv6 in server URL #8346
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-120695: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #114
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-103440: Use patched x/net fork v0.35.0-sec.4 #189
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-103453: Replace golang.org/x/net with openshift-sustaining/net #172
• OCPBUGS-115513: Fetch envtest assets from the controller-tools releases #183
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-103467: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 #104
• OCPBUGS-41223: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.18 #45
• NO-JIRA: vendor golint instead of relying on the CI build root #115
• OCPBUGS-81647: bump vpc go sdk #91
• Full changelog

insights-operator

• OCPBUGS-103459: Bump golang.org/x/net to v0.35.0-sec.3 #1355
• OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
• OCPBUGS-76963: Extends the time for the extractor liveness probe #1234
• Full changelog

ironic

• OCPBUGS-88475: Updating openstack-ironic commit that fixes CVE-2026-43003 #903
• OCPBUGS-105860: update ironic pin to include CVE-2026-54423 fix (release-4.18) #893
• OCPBUGS-100164: Update openstack-ironic commit hash for CVE-2026-44918 #888
• OCPBUGS-76459: Bump pyasn1 to 0.5.1-4 #826
• OCPBUGS-74407: Update sushy to include DGX B200 credentials fix #832
• Full changelog

ironic-agent

• OCPBUGS-99888: Correct ironic-python-agent pin to include the CVE-2026-66138 fix #314
• OCPBUGS-88475: Update openstack-ironic-python-agent commit hash that address CVE-2026-43003 #313
• OCPBUGS-99888: Bump ironic-python-agent pinned commit for CVE-2026-66138 #308
• OCPBUGS-95066: Replace individual package removal with a single rpm -e loop #286
• OCPBUGS-95066: Replace dnf remove with rpm -e to prevent dependency removal #274
• Full changelog

kube-metrics-server

• NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #81
• OCPBUGS-80190: Bump google.golang.org/grpc to v1.79.3 #64
• Full changelog

kube-rbac-proxy

• OCPBUGS-39450: Updating kube-rbac-proxy-container image to be consistent with ART for 4.18 #105
• Full changelog

kube-state-metrics

• OCPBUGS-103452: Use patched x/net fork v0.35.0-sec.4 #164
• NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #172
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-39554: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.18 #45
• OCPBUGS-95084: OWNERS: Update component to Cloud Compute / KubeVirt Provider #77
• Full changelog

kubevirt-csi-driver

• OCPBUGS-80191: Bump google.golang.org/grpc to v1.79.3 #101
• Full changelog

machine-api-operator

• OCPBUGS-103469: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #1545
• Full changelog

machine-config-operator

• OCPBUGS-103483: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #6507
• OCPBUGS-129117: Degraded MCP as generated-kubelet is generated with an old controller version #6624
• OCPBUGS-127017: Update message for MachineOSBuildFailed condition #6566
• OCPBUGS-122250: Add missing verb in MCC RBAC #6540
• OCPBUGS-105477: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6391
• OCPBUGS-94116: move cleanUpDuplicatedMC to avoid double reboot on first updated #6249
• OCPBUGS-91747: Verify extension packages are installed #6216
• OCPBUGS-98445: Remove sensitive ControllerConfig logging #6294
• OCPBUGS-97588: Bootstrap MCS logging entire ignition #6268
• OCPBUGS-86845: Apply password only if changes exist #6113
• OCPBUGS-86695: use –delete-if-present for karg removal #6102
• OCPBUGS-86844: Fix ssh and password rollbacks #6096
• OCPBUGS-86692: Fix re-cordon detection #6101
• OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
• OCPBUGS-86021: Fix units rollback if update failure #6052
• Full changelog

machine-image-customization-controller

• OCPBUGS-103463: Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #193
• OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
• Full changelog

machine-os-images

• OCPBUGS-87876: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #100
• Full changelog

monitoring-plugin

• OU-1589: [release-4.18] sanitize linkified URLs in alert annotations #1378
• NO-JIRA: [release-4.18] fix: reduce flakiness by assert charts existence and scroll into view before clicking #1365
• OU-1241: [release-4.18] feat: unset query timeouts so they are defined in the backend #1359
• OCPBUGS-103481: CVE-2026-33814-4-18 openshift4/ose-monitoring-plugin-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.18] #1217
• NO-JIRA: [release-4.18] Sanitize alert runbook URLs #1297
• OCPBUGS-98772: [release-4.18] replace outdated react-linkify dependency #1179
• OCPBUGS-74461: CVE-2025-13465 openshift4/ose-monitoring-plugin-rhel9: prototype pollution in _.unset and _.omit functions [openshift-4.18] #1141
• OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
• OU-1241: unset frontend timeout to use the backend configuration #905
• OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
• NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
• OU-993: adding cypress Dockerfiles #861
• OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
• Full changelog

multus-admission-controller

• OCPBUGS-103470: bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 #134
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-103476, OCPBUGS-103477: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #357
• OCPBUGS-85249: Fix server url in kubeconfig #298
• NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
• Full changelog

multus-networkpolicy

• OCPBUGS-103473: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #128
• Full changelog

must-gather

• OCPBUGS-86019: Collect object size with the object count #547
• Full changelog

network-metrics-daemon

• OCPBUGS-103472: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #153
• OCPBUGS-130596: fix golint not found on Go 1.22 CI builder #156
• Full changelog

networking-console-plugin

• OCPNETUI-168: Update Owners file #647
• OCPBUGS-98784: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #460
• OCPBUGS-99991: Updating networking-console-plugin-container image to be consistent with ART for 4.18 #454
• OCPBUGS-41880: Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled #433
• OCPBUGS-41880: Retain namespace selection between network policies tabs #424
• OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
• OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
• [release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
• OCPBUGS-81606: Fix CVE-2026-CVE-2026-4800 in lodash #401
• OCPBUGS-79449: Bump immutable #390
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-103479: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #77
• Full changelog

oauth-apiserver

• OCPBUGS-103486: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #224
• Full changelog

oauth-proxy

• OCPBUGS-112094: bugfix: rewrite open redirect strings to ‘/’ #384
• Full changelog

oauth-server

• OCPBUGS-103490: Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #281
• OCPBUGS-87072: bugfix: default to english when Accept-Language header contains more than 1000 underscores #272
• OCPBUGS-81803: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #238
• Full changelog

oc-mirror

• OCPBUGS-129488: v1 accept catalog root entries and relative symlink targets #1578
• Full changelog

olm-operator-controller

• OCPBUGS-103488: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #804
• OCPBUGS-100434: increase catalog HTTP client timeout from 10s to 5m #787
• OCPBUGS-87830: [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache #751
• OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
• Full changelog

openshift-apiserver

• OCPBUGS-82769: Address CVE-2026-35469 #657
• Full changelog

openshift-controller-manager

• OCPBUGS-103487: Use patched x/net fork v0.35.0-sec.4 #457
• Full changelog

openshift-state-metrics

• NO-ISSUE: synchronize OWNERS from main branch #153
• Full changelog

openstack-machine-api-provider

• OCPBUGS-93867: Revendor CAPO #174
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-103497, OCPBUGS-103502, OCPBUGS-103503: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1366
• OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-132721: Branch Sync release-4.20 to release-4.18 [10-16-2026] #3553
• OCPBUGS-129152: Branch Sync release-4.20 to release-4.18 [10-05-2026] #3511
• OCPBUGS-112810, OCPBUGS-113507: Branch Sync release-4.19 to release-4.18 [08-21-2026] #3410
• OCPBUGS-105851: Branch Sync release-4.19 to release-4.18 [08-11-2026] #3386
• OCPBUGS-82773: Bump github.com/moby/spdystream to v0.5.1 #3321
• OCPBUGS-98957: Branch Sync release-4.19 to release-4.18 [07-09-2026] #3290
• OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
• OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
• OCPBUGS-77151, OCPBUGS-83567: Branch Sync release-4.19 to release-4.18 [04-16-2026] #3143
• OCPBUGS-82148: Branch Sync release-4.19 to release-4.18 [04-05-2026] #3117
• OCPBUGS-81479: node: fix serviceUpdateNotNeeded nil pointer comparison #3101
• Full changelog

powervs-block-csi-driver

• OCPBUGS-80317: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #130
• OCPBUGS-82774: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #124
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-80318: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #111
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-80319: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #99
• Full changelog

prom-label-proxy

• NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #409
• Full changelog

prometheus

• NO-ISSUE: synchronize OWNERS from main branch #386
• OCPBUGS-93696: fix for CVE-2026-42151 #368
• OCPBUGS-88628: remote: validate snappy decoded length before allocation in read endpoint #346
• OCPBUGS-80320: Bump google.golang.org/grpc to v1.79.3 #308
• Full changelog

prometheus-alertmanager

• NO-JIRA: synchronize OWNERS with main #189
• OCPBUGS-103512: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #172
• OCPBUGS-98183: build(deps): hashicorp/memberlist to a forked version #165
• OCPBUGS-100355: Set testdata CA expiry to 20 years from issue date (#4112) #148
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-ISSUE: synchronize OWNERS from main branch #412
• OCPBUGS-103510, OCPBUGS-103513: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #397
• Full changelog

prometheus-node-exporter

• OCPBUGS-103506: Use patched x/net fork v0.35.0-sec.4 #196
• NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #202
• Full changelog

route-controller-manager

• OCPBUGS-103349: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #110
• OCPBUGS-80199: Bump google.golang.org/grpc to v1.79.3 #85
• Full changelog

telemeter

• OCPBUGS-80333: Bump google.golang.org/grpc to v1.79.3 #599
• OCPBUGS-81804: [release-4.18] Fix CVE-2026-34986 #596
• Full changelog

tests

• OCPBUGS-130856: stage the creation of test pods to minimize etcd impact #31740
• Full changelog

thanos

• OCPBUGS-80335: Bump google.golang.org/grpc to v1.79.3 #184
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-103524: Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.18 #135
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-80340: Bump google.golang.org/grpc to v1.79.3 #104
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-92888: Bump golang.org/x/crypto/ssh to v0.33.0-sec.3 #193
• OCPBUGS-80343: Bump google.golang.org/grpc to v1.79.3 #176
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-103531: Bump golang.org/x/net to v0.35.0-sec.3 #356
• OCPBUGS-81673: Fix password escaping #342
• Full changelog

vsphere-problem-detector

• OCPBUGS-129532: Fixed compute cluster permission logic for single fd with read-only custom resourcepool #245
• OCPBUGS-103545: Bump golang.org/x/net to v0.35.0-sec.4 #233
• OCPBUGS-81556: fix concurrent map writes #215
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.594.18.584.18.574.18.564.18.554.18.544.18.534.18.524.18.514.18.504.18.494.18.484.18.474.18.464.18.454.18.444.18.434.18.424.18.414.18.404.18.394.18.384.18.374.18.364.18.354.18.344.18.334.18.324.18.314.18.304.18.294.18.284.18.274.18.264.18.254.18.244.18.234.18.224.18.214.18.204.18.194.18.184.18.174.18.164.18.154.18.144.18.134.18.124.18.114.18.104.18.94.18.84.18.74.18.64.18.54.18.44.18.34.18.24.18.14.18.04.18.0-rc.104.18.0-rc.94.18.0-rc.84.18.0-rc.74.18.0-rc.64.18.0-rc.54.18.0-rc.44.18.0-rc.34.18.0-rc.24.18.0-rc.14.18.0-rc.04.17.594.17.584.17.574.17.564.17.554.17.544.17.534.17.524.17.514.17.504.17.494.17.484.17.474.17.464.17.454.17.444.17.434.17.424.17.414.17.404.17.394.17.384.17.374.17.364.17.354.17.344.17.334.17.324.17.314.17.304.17.294.17.284.17.274.17.264.17.254.17.244.17.234.17.224.17.214.17.204.17.194.17.184.17.174.17.164.17.154.17.144.17.134.17.124.17.114.17.104.17.94.17.84.17.74.17.64.17.54.17.44.17.34.17.24.17.14.17.04.17.0-rc.64.17.0-rc.54.17.0-rc.44.17.0-rc.34.17.0-rc.24.17.0-rc.14.17.0-rc.04.16.754.16.744.16.734.16.724.16.714.16.704.16.694.16.684.16.674.16.664.16.654.16.644.16.634.16.624.16.614.16.604.16.594.16.584.16.574.16.564.16.554.16.544.16.534.16.524.16.514.16.504.16.494.16.484.16.474.16.464.16.454.16.444.16.434.16.424.16.414.16.404.16.394.16.384.16.374.16.364.16.354.16.344.16.334.16.324.16.314.16.304.16.294.16.284.16.274.16.264.16.254.16.244.16.234.16.224.16.214.16.204.16.194.16.184.16.174.16.164.16.154.16.144.16.134.16.124.16.114.16.104.16.94.16.84.16.74.16.64.16.54.16.44.16.34.16.24.16.14.16.04.16.0-rc.94.16.0-rc.84.16.0-rc.74.16.0-rc.64.16.0-rc.54.16.0-rc.44.16.0-rc.34.16.0-rc.24.16.0-rc.14.16.0-rc.04.15.704.15.694.15.684.15.674.15.664.15.654.15.644.15.634.15.624.15.614.15.604.15.594.15.584.15.574.15.564.15.554.15.544.15.534.15.524.15.514.15.504.15.494.15.484.15.474.15.464.15.454.15.444.15.434.15.424.15.414.15.404.15.394.15.384.15.374.15.364.15.354.15.344.15.334.15.324.15.314.15.304.15.294.15.284.15.274.15.264.15.254.15.244.15.234.15.224.15.214.15.204.15.194.15.184.15.174.15.164.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.774.14.764.14.754.14.744.14.734.14.724.14.714.14.704.14.694.14.684.14.674.14.664.14.654.14.644.14.634.14.624.14.614.14.604.14.594.14.584.14.574.14.564.14.554.14.544.14.534.14.524.14.514.14.504.14.494.14.484.14.474.14.464.14.454.14.444.14.434.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.724.13.714.13.704.13.694.13.684.13.674.13.664.13.654.13.644.13.634.13.624.13.614.13.604.13.594.13.584.13.574.13.564.13.554.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.1024.12.1014.12.1004.12.994.12.984.12.974.12.964.12.954.12.944.12.934.12.924.12.914.12.904.12.894.12.884.12.874.12.864.12.854.12.844.12.834.12.824.12.814.12.804.12.794.12.784.12.774.12.764.12.754.12.744.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───5.2.0-0.ci-2026-09-03-102619───5.1.0-0.nightly-2026-11-05-1418205.1.0-0.nightly-2026-11-05-0258575.1.0-0.nightly-2026-11-04-1940595.1.0-0.nightly-2026-11-04-1247395.1.0-0.nightly-2026-11-04-0605535.1.0-0.nightly-2026-11-03-1605445.1.0-0.nightly-2026-11-03-0812285.1.0-0.nightly-2026-11-03-0154205.1.0-0.nightly-2026-11-02-1701465.1.0-0.nightly-2026-11-02-0807415.1.0-0.nightly-2026-11-01-0500085.1.0-0.nightly-2026-10-30-1808435.1.0-0.nightly-2026-10-30-0638345.1.0-0.nightly-2026-10-30-0238345.1.0-0.nightly-2026-10-29-2238345.1.0-0.nightly-2026-10-29-1506125.1.0-0.nightly-2026-10-29-0916305.1.0-0.nightly-2026-10-28-2125425.1.0-0.nightly-2026-10-28-1300165.1.0-0.nightly-2026-10-28-0630435.1.0-0.nightly-2026-10-27-1516415.1.0-0.nightly-2026-10-26-164535───5.1.0-0.ci-2026-11-05-1101445.1.0-0.ci-2026-11-05-0501445.1.0-0.ci-2026-11-04-2301445.1.0-0.ci-2026-11-04-1701445.1.0-0.ci-2026-11-04-1101445.1.0-0.ci-2026-11-04-0501375.1.0-0.ci-2026-11-03-2301375.1.0-0.ci-2026-11-03-1602455.1.0-0.ci-2026-11-03-1002455.1.0-0.ci-2026-11-03-0402455.1.0-0.ci-2026-11-02-220245───5.0.0-0.nightly-art23398-2026-09-15-115920───5.0.0-0.nightly-2026-11-05-1527515.0.0-0.nightly-2026-11-04-1814555.0.0-0.nightly-2026-11-04-1049455.0.0-0.nightly-2026-11-04-0343335.0.0-0.nightly-2026-11-03-1925575.0.0-0.nightly-2026-11-03-1235145.0.0-0.nightly-2026-11-03-0334205.0.0-0.nightly-2026-11-02-2016345.0.0-0.nightly-2026-11-02-1259305.0.0-0.nightly-2026-11-02-0723155.0.0-0.nightly-2026-11-02-0102155.0.0-0.nightly-2026-11-01-1926255.0.0-0.nightly-2026-11-01-1346575.0.0-0.nightly-2026-11-01-0807005.0.0-0.nightly-2026-11-01-0227165.0.0-0.nightly-2026-10-31-2049095.0.0-0.nightly-2026-10-31-1502265.0.0-0.nightly-2026-10-31-0842345.0.0-0.nightly-2026-10-31-0218385.0.0-0.nightly-2026-10-30-0236585.0.0-0.nightly-2026-10-29-1926325.0.0-0.nightly-2026-10-29-1238585.0.0-0.nightly-2026-10-29-0621235.0.0-0.nightly-2026-10-28-2236385.0.0-0.nightly-2026-10-28-0624125.0.0-0.nightly-2026-10-26-1916185.0.0-0.nightly-2026-06-06-100407───5.0.0-0.ci-quay-2026-05-14-0459275.0.0-0.ci-quay-2026-05-13-2259275.0.0-0.ci-quay-2026-05-13-1659265.0.0-0.ci-quay-2026-05-13-0836075.0.0-0.ci-quay-2026-05-13-023607───5.0.0-0.ci-2026-11-05-1316245.0.0-0.ci-2026-11-05-0716245.0.0-0.ci-2026-11-05-0116245.0.0-0.ci-2026-11-04-1916245.0.0-0.ci-2026-11-04-1259235.0.0-0.ci-2026-11-04-0659235.0.0-0.ci-2026-11-04-0059175.0.0-0.ci-2026-11-03-1859095.0.0-0.ci-2026-11-03-1258585.0.0-0.ci-2026-11-03-0658445.0.0-0.ci-2026-11-03-0058365.0.0-0.ci-2026-11-02-185836───4.23.0-0.nightly-2026-11-03-2244394.23.0-0.nightly-2026-11-02-2244394.23.0-0.nightly-2026-11-01-2244394.23.0-0.nightly-2026-10-31-2244394.23.0-0.nightly-2026-10-30-2244394.23.0-0.nightly-2026-10-29-2244394.23.0-0.nightly-2026-10-28-224439───4.23.0-0.ci-2026-11-05-0802464.23.0-0.ci-2026-11-04-0802464.23.0-0.ci-2026-11-03-0802464.23.0-0.ci-2026-11-02-0802464.23.0-0.ci-2026-11-01-080246───4.22.0-0.nightly-2026-11-05-0943504.22.0-0.nightly-2026-11-04-2006484.22.0-0.nightly-2026-11-04-1038194.22.0-0.nightly-2026-11-04-0041494.22.0-0.nightly-2026-11-03-1535164.22.0-0.nightly-2026-11-03-0735164.22.0-0.nightly-2026-11-02-2200534.22.0-0.nightly-2026-11-02-0213014.22.0-0.nightly-2026-10-31-2206434.22.0-0.nightly-2026-10-31-1406434.22.0-0.nightly-2026-10-28-1714174.22.0-0.nightly-2026-10-28-0725354.22.0-0.nightly-2026-10-27-1513304.22.0-0.nightly-2026-10-26-0825524.22.0-0.nightly-2026-10-25-2228424.22.0-0.nightly-2026-10-25-1248574.22.0-0.nightly-2026-10-25-0448574.22.0-0.nightly-2026-10-24-2038104.22.0-0.nightly-2026-10-24-0151284.22.0-0.nightly-2026-10-23-043311───4.22.0-0.ci-2026-11-05-0908464.22.0-0.ci-2026-11-04-2108464.22.0-0.ci-2026-11-04-0908464.22.0-0.ci-2026-11-03-2108464.22.0-0.ci-2026-11-03-090846───4.21.0-0.nightly-2026-11-05-1104374.21.0-0.nightly-2026-11-04-2304374.21.0-0.nightly-2026-11-02-0219304.21.0-0.nightly-2026-10-30-2318484.21.0-0.nightly-2026-10-30-1118484.21.0-0.nightly-2026-10-29-2318484.21.0-0.nightly-2026-10-29-1118484.21.0-0.nightly-2026-10-28-2318474.21.0-0.nightly-2026-10-28-1118474.21.0-0.nightly-2026-10-27-2318474.21.0-0.nightly-2026-10-27-1118474.21.0-0.nightly-2026-10-26-2318474.21.0-0.nightly-2026-10-26-1118474.21.0-0.nightly-2026-10-25-2318474.21.0-0.nightly-2026-10-25-0600344.21.0-0.nightly-2026-10-24-180034───4.21.0-0.ci-2026-11-05-1419344.21.0-0.ci-2026-11-05-0219344.21.0-0.ci-2026-11-04-1419344.21.0-0.ci-2026-11-04-0219344.21.0-0.ci-2026-11-03-1419344.21.0-0.ci-2026-11-03-0219344.21.0-0.ci-2026-11-02-1419344.21.0-0.ci-2026-11-02-021934───4.20.0-0.nightly-2026-11-04-2217454.20.0-0.nightly-2026-11-02-0228144.20.0-0.nightly-2026-10-30-1747214.20.0-0.nightly-2026-10-30-0547214.20.0-0.nightly-2026-10-29-1747214.20.0-0.nightly-2026-10-29-0547214.20.0-0.nightly-2026-10-28-1747214.20.0-0.nightly-2026-10-28-0547214.20.0-0.nightly-2026-10-27-1418424.20.0-0.nightly-2026-10-27-0218424.20.0-0.nightly-2026-10-26-1418424.20.0-0.nightly-2026-10-26-0218424.20.0-0.nightly-2026-10-25-1418424.20.0-0.nightly-2026-10-25-0218424.20.0-0.nightly-2025-05-26-181128───4.20.0-0.ci-2026-11-05-1016304.20.0-0.ci-2026-11-04-2216304.20.0-0.ci-2026-11-04-1016304.20.0-0.ci-2026-11-03-2216304.20.0-0.ci-2026-11-03-1016304.20.0-0.ci-2026-11-02-2216304.20.0-0.ci-2026-11-02-1016304.20.0-0.ci-2026-11-01-2216264.20.0-0.ci-2026-11-01-1016264.20.0-0.ci-2026-10-31-221618───4.19.0-0.nightly-2026-11-04-2122554.19.0-0.nightly-2026-11-02-0221484.19.0-0.nightly-2026-10-30-1616574.19.0-0.nightly-2026-10-30-0416574.19.0-0.nightly-2026-10-29-1616574.19.0-0.nightly-2026-10-29-0416574.19.0-0.nightly-2026-10-28-1616574.19.0-0.nightly-2026-10-28-0416574.19.0-0.nightly-2026-10-27-1228314.19.0-0.nightly-2026-10-27-0028314.19.0-0.nightly-2026-10-26-1228314.19.0-0.nightly-2026-10-25-002831───4.19.0-0.ci-2026-11-05-1422204.19.0-0.ci-2026-11-05-0222204.19.0-0.ci-2026-11-04-1422144.19.0-0.ci-2026-11-04-0222144.19.0-0.ci-2026-11-03-1422144.19.0-0.ci-2026-11-03-0222054.19.0-0.ci-2026-11-02-142205───4.18.0-0.nightly-2026-11-05-1223164.18.0-0.nightly-2026-11-05-0020214.18.0-0.nightly-2026-11-04-0632304.18.0-0.nightly-2026-11-03-1832304.18.0-0.nightly-2026-11-02-0333434.18.0-0.nightly-2026-10-31-0027244.18.0-0.nightly-2026-10-30-1227244.18.0-0.nightly-2026-10-30-0027244.18.0-0.nightly-2026-10-29-1227244.18.0-0.nightly-2026-10-29-0027244.18.0-0.nightly-2026-10-28-1227244.18.0-0.nightly-2026-10-25-1324024.18.0-0.nightly-2026-10-25-012402───4.18.0-0.ci-2026-11-05-0946344.18.0-0.ci-2026-11-04-2146204.18.0-0.ci-2026-11-04-0946204.18.0-0.ci-2026-11-03-2146204.18.0-0.ci-2026-11-03-0946174.18.0-0.ci-2026-11-02-214617───4.17.0-0.nightly-2026-11-02-2333584.17.0-0.nightly-2026-11-02-0346254.17.0-0.nightly-2026-10-31-2320024.17.0-0.nightly-2026-10-31-1120024.17.0-0.nightly-2026-10-30-2320024.17.0-0.nightly-2026-10-30-1120024.17.0-0.nightly-2026-10-29-232002───4.17.0-0.ci-2026-11-05-1051184.17.0-0.ci-2026-11-04-2251184.17.0-0.ci-2026-11-04-1051184.17.0-0.ci-2026-11-03-2251184.17.0-0.ci-2026-11-03-1051184.17.0-0.ci-2026-11-02-2251184.17.0-0.ci-2026-11-02-1051184.17.0-0.ci-2026-11-01-1037144.17.0-0.ci-2026-10-31-2219134.17.0-0.ci-2026-10-30-221913───4.16.0-0.nightly-2026-11-04-0252244.16.0-0.nightly-2026-11-02-1629564.16.0-0.nightly-2026-11-02-0429564.16.0-0.nightly-2026-11-01-1156234.16.0-0.nightly-2026-10-30-2317124.16.0-0.nightly-2026-10-30-0627354.16.0-0.nightly-2026-10-25-0756514.16.0-0.nightly-2026-10-07-0822264.16.0-0.nightly-2026-09-30-1956054.16.0-0.nightly-2026-09-29-195605───4.16.0-0.ci-2026-10-06-1112444.16.0-0.ci-2026-10-05-2312444.16.0-0.ci-2026-10-05-1112444.16.0-0.ci-2026-10-03-0446234.16.0-0.ci-2026-10-02-1646234.16.0-0.ci-2026-10-01-1756494.16.0-0.ci-2026-10-01-0556494.16.0-0.ci-2026-09-30-1756494.16.0-0.ci-2026-09-30-0556494.16.0-0.ci-2026-09-25-0215214.16.0-0.ci-2026-09-18-141521───4.15.0-0.nightly-2026-11-03-0811154.15.0-0.nightly-2026-11-02-1817484.15.0-0.nightly-2026-11-02-0617484.15.0-0.nightly-2026-10-31-2046284.15.0-0.nightly-2026-10-31-0839464.15.0-0.nightly-2026-10-18-2345114.15.0-0.nightly-2026-10-13-1312504.15.0-0.nightly-2026-09-15-1122454.15.0-0.nightly-2026-09-13-1016514.15.0-0.nightly-2026-09-10-155559───4.15.0-0.ci-2026-09-25-1022434.15.0-0.ci-2026-09-24-2220404.15.0-0.ci-2026-09-24-1020404.15.0-0.ci-2026-09-23-1058474.15.0-0.ci-2026-09-22-2128134.15.0-0.ci-2026-09-22-0629434.15.0-0.ci-2026-09-21-1415264.15.0-0.ci-2026-09-20-0021004.15.0-0.ci-2026-09-19-1221004.15.0-0.ci-2026-09-16-1519564.15.0-0.ci-2026-09-14-1943144.15.0-0.ci-2026-09-08-132244───4.14.0-0.nightly-2026-11-05-0551514.14.0-0.nightly-2026-11-04-1714164.14.0-0.nightly-2026-11-04-0413284.14.0-0.nightly-2026-11-02-1511134.14.0-0.nightly-2026-11-02-0311134.14.0-0.nightly-2026-10-29-1511134.14.0-0.nightly-2026-10-25-1810244.14.0-0.nightly-2026-10-20-0102144.14.0-0.nightly-2026-10-18-1302034.14.0-0.nightly-2026-10-17-123659───4.14.0-0.ci-2026-10-13-2102394.14.0-0.ci-2026-10-13-0902394.14.0-0.ci-2026-10-12-2032534.14.0-0.ci-2026-10-12-0832534.14.0-0.ci-2026-10-11-2032534.14.0-0.ci-2026-10-11-0832534.14.0-0.ci-2026-07-08-0224434.14.0-0.ci-2026-07-07-2024434.14.0-0.ci-2026-06-12-1055134.14.0-0.ci-2026-03-13-084544───4.13.0-0.nightly-2026-11-05-1447424.13.0-0.nightly-2026-11-05-0247424.13.0-0.nightly-2026-11-02-1649114.13.0-0.nightly-2026-11-02-0449114.13.0-0.nightly-2026-11-01-1649114.13.0-0.nightly-2026-11-01-0449114.13.0-0.nightly-2026-10-31-164911───4.13.0-0.ci-2026-11-05-1401594.13.0-0.ci-2026-11-05-0201594.13.0-0.ci-2026-11-04-1401594.13.0-0.ci-2026-11-03-2144224.13.0-0.ci-2026-11-03-0944224.13.0-0.ci-2026-11-02-2144224.13.0-0.ci-2026-11-02-0944224.13.0-0.ci-2026-11-01-0449084.13.0-0.ci-2026-10-31-1649084.13.0-0.ci-2026-10-31-044908───4.12.0-0.nightly-2026-11-05-0718214.12.0-0.nightly-2026-11-04-1918214.12.0-0.nightly-2026-10-26-1835084.12.0-0.nightly-2026-10-26-0452404.12.0-0.nightly-2026-10-25-1652404.12.0-0.nightly-2026-10-25-0452404.12.0-0.nightly-2026-10-21-165409───4.12.0-0.ci-2026-11-05-1016104.12.0-0.ci-2026-11-04-2216034.12.0-0.ci-2026-11-04-1016034.12.0-0.ci-2026-11-03-2216034.12.0-0.ci-2026-11-03-1015554.12.0-0.ci-2026-11-02-221553───4.11.0-0.nightly-2026-10-02-1648284.11.0-0.nightly-2025-08-30-0110584.11.0-0.nightly-2025-08-27-2007484.11.0-0.nightly-2025-08-26-2039164.11.0-0.nightly-2025-08-14-204255───4.11.0-0.ci-2026-08-29-0738584.11.0-0.ci-2026-08-27-1349594.11.0-0.ci-2026-08-27-0749594.11.0-0.ci-2026-08-20-0739094.11.0-0.ci-2026-06-15-1703314.11.0-0.ci-2025-11-26-0737454.11.0-0.ci-2025-09-22-2122234.11.0-0.ci-2025-09-22-1522234.11.0-0.ci-2025-09-12-170738───4.23.0-ec.24.23.0-ec.14.23.0-ec.0───5.0.15.0.05.0.0-rc.85.0.0-rc.75.0.0-rc.65.0.0-rc.55.0.0-rc.45.0.0-rc.35.0.0-rc.25.0.0-rc.15.0.0-rc.0───5.1.0-ec.15.1.0-ec.0

Source code for this page located on github