4.20.0-rc.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.20.0-rc.3-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (1 retries) release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed (2 retries) release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-serial
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-aws-ovn-techpreview-serial
- driver-toolkit Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.20-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance-serial
- rosa-classic-sts-conformance Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.20-e2e-rosa-sts-ovn

Upgrades from:

Untested upgrades: 4.19.10, 4.19.11, 4.19.3, 4.19.7, 4.19.8, 4.19.9

Loading changelog, this may take a while ...

Changes from 4.20.0-ec.4

Created: 2025-09-29 06:00:18 +0000 UTC

Image Digest: sha256:67f4c08fae09d7aff55552bbe72865d422397e07a3df47c90201b5d09beab004

Components

Kubectl upgraded from 1.32.1 to 1.33.3
Kubernetes upgraded from 1.32.6 to 1.33.5
Kubernetes Tests upgraded from 1.32.5 to 1.33.4
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250707-1 to 9.6.20250925-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSEFSDriverVolumeMetrics (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ChunkSizeMiB (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPLabelsTags (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HardwareSpeed (3 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsRuntimeExtractor (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OnClusterBuild (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PersistentIPsForVirtualization (18 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HighlyAvailableArbiter (8 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerification (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StoragePerformantSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UpgradeStatus (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MutatingAdmissionPolicy (3 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ImageVolume (7 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
DualReplica (5 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
SELinuxMount (17 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ExternalSnapshotMetadata (0 tests)			Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpointsInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
IrreconcilableMachineConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NoRegistryClusterOperations (0 tests)				Enabled (New)		Enabled (New)

New images

csi-external-snapshot-metadata git 693a8264 sha256:09fbce301367a75a395b91f5dcdad07a370de1fbee2364a2ecab8df28d607c27
volume-data-source-validator git 0e61642f sha256:76822788ef574b645a8f0681366fc192689b28a617e8100ee758351a48a95509

Rebuilt images without code change

aws-karpenter-provider-aws git b37141b0 sha256:1131fcfdec26956c87228a11b3846c23216bb29ac71644bdc6b1e0522ab78d29
aws-kms-encryption-provider git 088dcaf7 sha256:544d050791bfae94aa53db2c08d0d4df279a637f18cf22a1935621264e569f52
aws-pod-identity-webhook git a2ecb150 sha256:a3530e93262e5ebdb2eb087921b3c11eaec8157259d4440a37ae982c712e38f3
azure-cloud-controller-manager git d469d04e sha256:0b903b2b241685e829ea7ebcf417c28dea9109e1abeba11606362aabc6dde85e
azure-cloud-node-manager git d469d04e sha256:1b8c570069620a2fbbe3ea4475637e9de5612d9bc341fb835d0f4f24cec29d25
azure-kms-encryption-provider git ea0b9944 sha256:7d45164233e7acbb0e615048680f509b10d5a2da14520324ee3f334d8870a36b
azure-workload-identity-webhook git 88b18175 sha256:74a29d779b9699fbe392af886fb50b5399bb199552ebe1796c7acb0d82b1fd11
baremetal-cluster-api-controllers git f782ba74 sha256:79365818d22beece1f1a3f2cabd0a3c291f7b8a5e12eadf62cad7a5dce07b04b
baremetal-machine-controllers git fb678fec sha256:c3a9f0b5f11b0b4620db4e53c6f6629d56ef31afb2394bda0fe97afe1e03fc3a
cluster-bootstrap git 74abc555 sha256:b86dcb2bfea854158cd7d4b5577fb950696a2ef592de78d8f520337d9932746c
cluster-kube-cluster-api-operator git 3ec30377 sha256:7475d30b797b442e120df55b52d8d9f08e3f4cfd8d96398f2f1db027e8aafd1d
configmap-reloader git 2438d7c8 sha256:2f0b83835e981e01d6775dd3c42118ec69fcfd7b0147984ce0d9719bb96dbdf1
csi-driver-nfs git 1abaf844 sha256:29f7ae865993d9f302b386292ad02408e8c2e992a6068fe86b21cdd84772b0a3
docker-builder git ff595e4b sha256:8360d9d4044006d13176d7840fc66530a4ddb71a1db246ea36a7d06af520c92b
driver-toolkit git 9d55fd1a sha256:e90becf264c54e3d0518fa38fb07fe8ffdbbe9660a4759e52e3fc0002b5c3f06
gcp-workload-identity-federation-webhook git b36788ed sha256:4bed546db470982da3614646b658ca38aa634f62acee41470c480d065bd4cc1a
ironic-machine-os-downloader git 6c92e542 sha256:fa1b2b4680e3d7d44e402e8e1fa7c8d7c85574802eef980b1c166baaf4cfa503
ironic-static-ip-manager git fa5b8b8b sha256:369d39492a9a60491c0cd060f902a47f811c9bbf53fb9711079e5894aea0aa17
kube-metrics-server git cfa5ee9f sha256:09d18f80c176721e012643b4898f077a94f937a95a95e97ad7fe1d6d0a7f04b9
kube-state-metrics git a8c9a5f0 sha256:53d93c94dbdf9c240336772e46109ba82467020e6a17eeb3cd5ee8622c7e366e
kubevirt-cloud-controller-manager git 3f4542ec sha256:96a046aa1b04655d91a92e5a851245648d3c83773109362d8ee49a905b704624
kubevirt-csi-driver git 8b8dd30e sha256:f72d5dacffb5a061f82467ef3ffd1a91206684c70815060efbda218efd9dd7f1
libvirt-machine-controllers git a336f0b5 sha256:88f2a2d43e9621f058ad944fc8140cd433d7ac6273e8adbebf7c2f568a3ad41b
multus-cni git cf0f68ec sha256:c7c2c1c7feb93c79db3b05a6a16c079c5e1a4ee364c23f88370a0a4b4e443203
multus-cni-microshift git cf0f68ec sha256:f862e827e37fee6b190eca67cd67af3b0d8f1bfadff1cc386040e824073d89b9
multus-networkpolicy git 278ec20e sha256:ab475224d0598eae59470208d8172aa53dbbb5e510f9089ebda6329a977c9ba5
multus-route-override-cni git 391c1b03 sha256:8da1b080615f739e6725e758ea65c15a837a311b79f32df79d85e5f460b2b3f6
openshift-state-metrics git b04e2ef0 sha256:49ed7f60a89475c04eac3e169125b715aed0515091a384f06bcdcb48e4560942
openstack-cluster-api-controllers git 30944900 sha256:3bd341df108a2111ee29f059a2d8be0f06223af9dfc38a872a652ab8215ba3ae
openstack-resource-controller git bf0d2c88 sha256:ec5b3da88f12047bb8c201d207373c19c07cbd72bc1640c22ba0c9b46be305ca
ovirt-csi-driver git 1db726a9 sha256:c1d827e217de54b66d78c7033123271fd630577e29f75a3f526f2df164689244
ovirt-csi-driver-operator git 76db379d sha256:db6e00cd56f47527e2bcf372157ab64f391a7dbc21ec58b75b29f5aa0b7f037b
prometheus-node-exporter git 56f6158e sha256:a0fdf8e37058085d8efe813d244f9b8900bf3e05c9d9e83663d62d6678010219
telemeter git 4c6036ee sha256:fd8aa5e47d7d104e9db12009963556175580f41cb6be2feaf561a24a4b92d22b

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8020) #8020
MGMT-21278: Add metric to track Cluster/Host Monitoring cycle time (#7961) #7961
NO-ISSUE: Update Konflux references (#7964) #7964
ACM-21902: Merge system ca-bundle into spoke client (#7935) #7935
MGMT-19758: TNF clusters (#7867) #7867
MGMT-21395: Add monitoring label and Prometheus RBAC for supported OLM operators (#7949) #7949
NO-ISSUE: Update Konflux references (#7810) #7810
NO-ISSUE: [master] Bump OCP versions: 4.19 (#7948) #7948
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.16, 4.14 (#7941) #7941
MGMT-21274: Report duration of monitored hosts (#7933) #7933
NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#7939) #7939
NO-ISSUE: [master] Bump OCP versions: 4.12 (#7927) #7927
OCPBUGS-59393: Fix IsMachineCidrEqualsToCalculatedCidr validation to handle unnormalized IPv6 addresses (#7923) #7923
NO-ISSUE: support setting TNA_CLUSTERS_SUPPORT when deploying with assisted-test-infra (#7922) #7922
NO-ISSUE: Associate MetalLB operator with the Virtualization bundle (#7920) #7920
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7924) #7924
NO-ISSUE: [master] Bump OCP versions: 4.19 (#7921) #7921
MGMT-21063: Use mac address to configure dhcp on kargs (#7888) #7888
Set AIUI_CHAT_API_URL for podman deployment (#7911) #7911
MGMT-14822: Add MetalLB operator (#7824) #7824
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14 (#7917) #7917
ACM-22740: Approve CSRs for a host before marking as Done (#7903) #7903
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#7904) #7904
MGMT-20474: New route to provide a detailed list of features (#7862) #7862
NO-ISSUE: [master] Bump OCP versions: 4.19 (#7902) #7902
NO-ISSUE: Remove unused variables from cluster monitor loop (#7887) #7887
MGMT-21266: Report duration of monitored clusters (#7886) #7886
MGMT-21312: Index hosts by cluster id (#7891) #7891
MGMT-21287: Remove NHO dependency in SNR (#7889) #7889
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7881) #7881
MGMT-20726: Allow prefix for PVC and secret naming (#7746) #7746
MGMT-21252: Make l3_connected_addresses output deterministic (#7879) #7879
MGMT-20973: Cluster events - filtering deleted hosts ends with an error (#7854) #7854
MGMT-21253: RefreshSchedulableMastersForcedTrue lead to extra reads from DB (#7880) #7880
NO-ISSUE: [master] Bump OCP versions: 4.19 (#7875) #7875
NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7869) #7869
MGMT-20608: Add more operators to the virtualization bundle: COO, NUMA resources and OADP (#7828) #7828
NO-ISSUE: Set additionalTrustBundle boolean to false on ABI flow (#7868) #7868
Add documentation for the bmh cluster reference annotation (#7864) #7864
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.18, 4.16 (#7866) #7866
ACM-21309: Support ForceInsecurePolicy for overriding policy.json in discover ignition (#7807) #7807
NO-ISSUE: Update rpm lockfiles for acm (hermetic) builds (#7863) #7863
NO-ISSUE: [master] Bump OCP versions: 4.19 (#7858) #7858
OCPBUGS-59300: Bump glog to v1.2.5 (#7855) #7855
NO-ISSUE: [master] Bump OCP versions: 4.20 (#7853) #7853
Remove refs to shellcheck (#7847) #7847
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.12, 4.19, 4.17 (#7841) #7841
MGMT-20549: Add cluster validation for openshift-ai if cluster has no gpu (#7777) #7777
MGMT-20674: Openshift-ai is adding as dependencies all gpu vendor when there is no host (#7779) #7779
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1225) #1225
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.20 (#1144) #1144
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.20 (#1146) #1146
MGMT-21454: update Go to 1.24 and adapt unit-tests (#1220) #1220
NO-ISSUE: Update Konflux references (#1216) #1216
NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1213) #1213
NO-ISSUE: Update Konflux references (#1212) #1212
MGMT-20756: assisted installer naive string concatenation for partition finding (#1198) #1198
NO-ISSUE: Update Konflux references (#1202) #1202
NO-ISSUE: Update Konflux references (#1184) #1184
NO-ISSUE: Update Konflux references (#1177) #1177
Full changelog

agent-installer-node-agent

Update ghw package to v0.19.0 to resolve LVMs issue (#1093) #1093
NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1089) #1089
NO-ISSUE: Update Konflux references (#1078) #1078
MGMT-20141: collecting and uploading ironic-agent logs (#1028) #1028
NO-ISSUE: Update Konflux references (#1064) #1064
NO-ISSUE: Update Konflux references (#1043) #1043
OCPBUGS-59297: Bump glog to 1.25 (#1061) #1061
NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.24 (#1052) #1052
NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.23 (#1038) #1038
Full changelog

agent-installer-utils

OCPBUGS-60920: Update ISOBuilder OCP 4.19 Dev Preview Release notes #141
AGENT-1252: Add Dockerfile for OVE UI ISO #138
AGENT-1256: Fix hyperconverged and kube descheduler contents #140
AGENT-1256: Version the ISO builder configuration and script #128
AGENT-1254: Switch to agent-installer-ui image #132
AGENT-1205: Do not include agent-tui and related services #123
OCPBUGS-60019: Add ISOBuilder Release notes #135
AGENT-1270: use agent-preinstall-image-builder image for building the ISO #134
NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 #133
OCPBUGS-59724: add back NHR and FAR operators #130
OCPBUGS-59187: invalid default channel configuration for package “mtv… #124
Full changelog

apiserver-network-proxy

OCPBUGS-57685: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.20 #84
Full changelog

aws-cloud-controller-manager

OCPCLOUD-2928: Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main #106
OCPBUGS-57684: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.20 #110
Full changelog

aws-cluster-api-controllers

OCPBUGS-60943, OCPBUGS-61040, OCPBUGS-61044: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.0 (dcfaef0) into main #553
OCPCLOUD-2919: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:main (645f38e) into main #565
NO-JIRA: Update OWNERS #561
OCPBUGS-59243, OCPBUGS-59244: UPSTREAM: 5590: Bump golog v1.2.5 #557
Full changelog

aws-ebs-csi-driver

STOR-2402: Rebase to upstream v1.45.0 for OCP 4.20 #289
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2477: Correct efs single-zone storageclass #404
OCPBUGS-60655: Disable LUN stress test for azure-file #418
OCPBUGS-60464: Bump library-go to fix panic #417
STOR-2394: Bump all deps for 4.20 #408
STOR-2479: Add CredentialsRequest for the EFS node DaemonSet #389
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs #409
OCPBUGS-57395: Remove stale conditions #406
OCPBUGS-58254: Bump library-go #405
Full changelog

aws-machine-controllers

OCPCLOUD-2935: Bump k8s dependencies to 1.33; go 1.24 #136
NO-JIRA: Update OWNERS #135
Full changelog

azure-cluster-api-controllers

NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master #345
NO-JIRA: Update OWNERS #344
Full changelog

azure-disk-csi-driver

STOR-2405: Rebase to upstream v1.33.1 for OCP 4.20 #108
Full changelog

azure-file-csi-driver

STOR-2407: Rebase to upstream v1.33.3 for OCP 4.20 #99
Full changelog

azure-machine-controllers

OCPCLOUD-2932: Bump 1.33 #160
NO-JIRA: Update OWNERS #161
Full changelog

azure-service-operator

NO-JIRA: Update OWNERS #10
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-62297: Set default for PrivateDNSZone Project ID #9968
OCPBUGS-61528: Allow user to BYO private zone without specifying name #9936
OCPBUGS-61552: Shellcheck fix 4.20 #9938
CORS-4044, CORS-4045, CORS-4046, CORS-4047, CORS-4048, CORS-4049, CORS-4050, CORS-4051: Add private dns zone section to GCP install config #9792
OCPBUGS-60949: Update the RHCOS 4.20 bootimage metadata #9916
OCPBUGS-60687: PowerVS: Add lon04 support #9905
SPLAT-2463: Added ability to configure CoresPerSocket #9912
CORS-3652: RHCOS Stream Marketplace Images #9329
OCPBUGS-60634: Added logic to clean up potential leftover spbm entity configs #9894
OCPBUGS-60600: node-joner ignore error if SSH key was not found #9908
CORS-4061: migrate AWS SDK to v2 in quota/aws #9890
CORS-4056: migrate AWS SDK to v2 in asset/machines/aws #9889
OCPBUGS-57364: custom-dns: Set PrivateZone and PublicZone to nil in the DNS manifest #9886
OCPBUGS-55499: Misleading error when confidentialCompute: Enabled #9848
OCPBUGS-60162: reject installation into byo vpc/subnets owned by another cluster #9883
OCPBUGS-60545: Azure: change LB and pubic IP skus to Standard #9898
AGENT-1205: Update agent-installer-ui tar path #9896
OCPBUGS-59104: Set kernel dual-stack arg for all platforms #9865
OCPBUGS-51299: Add default values for validation to kms keys #9781
OCPBUGS-53473: Validate clusterNetwork hostPrefix #9594
no-jira: dev docs - add rr capi debugging #9887
OCPBUGS-60197: PowerVS: config variables not honored #9877
CORS-4078: centralize v2 aws client constructions #9882
OCPBUGS-50517: [Nuanix] installer should add the shared category to the preloaded rhcos image PC object #9450
MGMT-21212: Enable dual-stack clusters with image-based installations #9847
OCPBUGS-60284: Upgrading Cluster-API-Provider-Nutanix version from 1.5.4 to 1.7.0 #9869
OCPBUGS-60240: baremetal: always set external v6 URL on dualstack #9874
CORS-4177: clusterapi: use default envtest timeouts #9871
CORS-4067: Add support for single zone NAT gateway #9753
CORS-4178: handle deleting AWS egress-only internet gateway #9873
OCPEDGE-1997: bump(ocp/api): pull in HighlyAvailableArbiter promotion #9870
AGENT-1205: Extract agent-tui during boot for interactive workflow #9828
SPLAT-2355: Added vSphere support for disk setup #9863
CORS-4083, CORS-4084, CORS-4085: Add Azure custom-dns support in Tech Preview #9861
OCPBUGS-59542: Generated Nutanix MachineSets for Autoscaling with Failure Domains #9864
no-jira: OWNERS: add splat team as approvers #9862
CORS-3992: skip dns zone validation with custom DNS #9859
no-jira: Bump openshift/api to get renamed Featuregates #9854
OCPEDGE-1994: bump(ocp/api): pull in updated DualReplica #9849
SPLAT-2295: Setup additional disks via machine configs #9706
OCPBUGS-59630: Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 #9844
no-jira: images: bump images to go 1.24 #9850
CORS-3916, CORS-3920: Use gcp custom endpoints in the installer #9535
OCPBUGS-59430: Fail install config validation when base domain is invalid #9840
OCPBUGS-59678: PowerVS Support VPC and TG ids #9818
OCPBUGS-57732: Catch gcp destroy cases where the operation is nil #9823
OCPBUGS-57527: Add descriptions back to the aws survey #9816
MGMT-20992: feat: update determineTopologies function #9815
OCPBUGS-59220: Refine check for supported SNO platforms to include IBMCloud #9836
no-jira: Revert “Merge pull request #9736 from barbacbd/CORS-4058” #9837
OKD-241: Use CentOS Stream 10 bootimages #9817
CORS-4062: Migrate endpoints in pkg/types/aws/platform.go to sdk v2 #9759
OCPBUGS-57202: pkg/asset/tls: extend ShortCertRotation certs validity to 2 hours #9820
CORS-4058: Remove AWS SDK V1 from destroy/aws #9736
CORS-4053: Migrate AWS SDK to v2 in cluster/aws #9762
CORS-4054: Migrate from SDK v1 to v2 in installconfig #9760
OCPBUGS-58352: Increase timeout on gcp wait for operation #9825
Full changelog

baremetal-operator

METAL-1380: Sync july 24 #427
METAL-1238: Add annotation to install metal3 CRDs in hypershift hosted clusters #426
OCPBUGS-57472: merge from upstream #424
OCPBUGS-54634: Merge upstream #419
Full changelog

baremetal-runtimecfg

CORS-4175: Extend in-cluster DNS support to Azure #366
no-jira: Bump openshift/api version to bring updates to AzurePlatformStatus #367
NO-ISSUE: Update OWNERS #353
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-59951: must-gather: Fix usage checker for custom commands #2068
OCPBUGS-60989: pkg/cli/admin/release/info: Mention elided first-parent, non-merge commits #2086
OCPBUGS-60877: pkg/cli/admin/inspectalerts: Pass through –certificate-authority, etc. #2083
NO-JIRA: Remove mentioning about IRC channel in README #2082
OTA-1601: Better the Updating Cluster Operators table #2077
OCPBUGS-58393: oc login: Preserve ExecProvider on oc login -u #2075
OCPBUGS-60281: Fix panic in oc describe templateinstance when Secret is nil #2073
OTA-1560: pkg/cli/admin/upgrade: Promote ‘recommend’ to general availability #2076
NO-JIRA: Update containers/image and docker versions #2067
OTA-1600: pkg/cli/admin/upgrade/recommend: Don’t error on unaccepted issues when the feature gate is off #2069
CNTRLPLANE-1054: Update k8s dependencies to 1.33 with bumping the other dependencies #2058
OCPBUGS-50992: Help with must-gather scheduling through suggesting preferance of nodes #2060
Revert “WRKLDS-1713: Remove schema1” #2059
OTA-1575: pkg/cli/admin/upgrade/recommend: “accepted … via ConditionalUpdateRisk” #2040
CORENET-5412: adm, inspect, ns: Collect UserDefinedNetwork CRs #2011
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

OCPBUGS-61586: set cloud-credential-operator as default-container #916
OCPBUGS-61225: ccoctl: aws to use proper issuer url on subsequent runs #912
NO-JIRA: docs: update sts migration to cause less service interruption #903
NO-JIRA: Add a badge in the repo’s README file to auto-refresh the wiki weekly. #898
OCPBUGS-34993: ccoctl azure dnszone-resource-group-name now optional #897
OCPBUGS-59889: Add retry logic for Azure federated identity credential creation #878
CCO-641: update dependencies #887
NO-JIRA: Drop lleshchi from OWNERS #889
OCPBUGS-43783: openstack: Set annotation even when credentials mode is unset #873
OCPBUGS-59402: github.com/golang/glog v1.2.5 #888
CCO-682: Update to k8s v0.33.2 #885
OCPBUGS-59511: add read only filesystem #884
Full changelog

cloud-network-config-controller

CORENET-5958: Rebase k8s to 1.33 #176
NO-JIRA: Update OWNERS #177
OCPBUGS-57778: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.20 #175
Full changelog

cluster-authentication-operator

NO-JIRA: Bump library go rm co dep #782
OCPBUGS-59909: Don’t cache server errors when checking for password grant support #781
CNTRLPLANE-5: Wire a feature-gates config observer for oauth-apiserver. #773
AUTH-543: OIDC/OAuth resource configuration #740
AUTH-543, OCPBUGS-57808: (deps): Bump to Go 1.24 and k8s 1.33 #775
Full changelog

cluster-autoscaler

AUTOSCALE-242, AUTOSCALE-244: 1.33.0 upstream rebase #365
OCPBUGS-54231: revert openshift replica fix #369
Full changelog

cluster-autoscaler-operator

AUTOSCALE-244: Allow cluster-operator service account to patch machinesets/scale subresource #352
AUTOSCALE-244: Prepare for 4.20 and fix missing volumeattachments rbac #351
AUTOSCALE-125: newPodScaleUpDelay field for CA #349
Full changelog

cluster-baremetal-operator

METAL-1546: Set privileged to true for ironic-proxy container so it works with ironic-image custom directories #502
METAL-1508: Change deprecated pointer to ptr #495
OCPBUGS-53392: Remove webhookport (9447) as HostPort #496
METAL-1238: Enable CBO to run on hosted clusters #494
Full changelog

cluster-capi-controllers

NO-JIRA: Update OWNERS #244
Full changelog

cluster-capi-operator

OCPBUGS-61770: Fix conversion of Machines without MachineSet #362
OCPBUGS-61044: Finish bumping CAPA to v2.9.0 #350
OCPCLOUD-2871: Machine conversion for the delete-machine annotation and unit tests #347
OCPCLOUD-2711: Implement VAP to prevent usage of unsupported AWSMachineSpec fields #333
NO-JIRA: lint: Replace tenv with usetesting #346
OSASINFRA-3690, OSASINFRA-3691: Add OpenStack CAPI-MAPI translation layer #188
NO-JIRA: Improve ergonomics of running tests #342
OCPBUGS-57195: Fix infra machine template deletion #326
OCPCLOUD-2992: migration e2e for creating machine with authoritativeAPI ClusterAPI #320
OCPCLOUD-2566: Adds MAPI Machine VAP and test suites #321
OCPCLOUD-2916: Bump to CAPI v1.10, k8s v1.33, go 1.24 #341
NO-JIRA: Get openshift/api directory from packages #339
OCPCLOUD-2979: ingress network policy for metrics #325
OCPCLOUD-2992: migration e2e for creating machinesets #330
NO-JIRA: Update OWNERS #335
OCPBUGS-56805, OCPBUGS-58880: fix: clusteroperator: do not update status.relatedobjects if only order changed #331
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-59251: Default cloud.conf if no configmap is found #404
OCPBUGS-53300: Adds service for cloud-controller-manager #399
OCPCLOUD-2940: Update dependencies for Kubernetes 1.33 #396
OCPBUGS-53300: Update service selector to match deployment label #398
NO-JIRA: Update OWNERS #397
OCPBUGS-57613: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.20 #392
OCPCLOUD-2978: add deny all network policy #395
Full changelog

cluster-config-api

OCPBUGS-61977: Add ‘AGE’ print column to MachineConfigNode object #2497
OCPBUGS-56778: Disable PSA for 4.20 #2475
OCPBUGS-60901: Add default value for MachineHealthCheck’s maxUnhealthy to the description #2462
AGENT-1262: set NoRegistryClusterOperations as techPreviewNoUpgrade #2432
machineconfiguration/OWNERS: Drop me #2446
OTA-923: Promote ClusterVersionOperatorConfiguration to TechPreview #2457
OCPNODE-3121: Graduate ImageVolume to GA #2453
STOR-2549: Move StoragePerformantSecurityPolicy GA #2456
OTA-1580: Promote UpgradeStatus to Default #2418
CORS-4184: Add STS IAMCredentials and OAuth Service for GCP Endpoint Overrides #2444
OWNERS: update approvers/reviewers #2455
OCPBUGS-58212 Remove InsightsRuntimeExtractor Feature gate #2419
OCPNODE-3187: Promote SigstoreVerificatoin to Default #2340
OCPBUGS-55665: Remove featuregate ChunkSizeMib #2438
Fix feature promotion check single node variant name #2445
OCPBUGS-54287: MachineOSConfig name should match MachineConfigPool #2399
MCO-1744: Add knobs to allow irreconcilable changes #2433
Update KAL to support new guidance on required and optional fields #2440
Remove OnClusterBuild fg #2437
CNTRLPLANE-368: improve OIDC field validations for Authentication resources #2409
STOR-2481: Promote SELinuxMount feature gate #2426
Add new ImageBuildDegraded status option for MCO #2439
OCPEDGE-1945: feat: promote HighlyAvailableArbiter feature to default #2401
OCPNODE-3006: add back SigstoreImageVerification to techPreview #2406
MCO-1759: Add NonReconcilableMC Feature Gate #2429
Update crd-schema.json to release 1.33 branch #2436
Update KAL to include omitzero functionality on optional fields #2431
OCPNODE-3372: Update defaultRuntime doc to show options and set default to crun #2370
CORS-4155: Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS #2404
SPLAT-2346: Moving VSphereMultiDisk FeatureGate to GA #2428
features: add installer replacement feature gates #2423
Remove “techpreview” filter on verify job #2422
Update KAL to latest #2420
OCPNODE-3006: Add clusterimgepolicy/imagepolicy to payload #2384
AGENT-1262: add NoRegistryClusterOperations feature gate #2417
OCPBUGS-55661: Remove HardwareSpeed featuregate #2416
OCPNODE-3121: Make FeatureGateImageVolume TechPreview #2403
OCPEDGE-1875: feat: promote tnf from devpreview to techpreview #2413
OCPBUGS-55668: ipam, virt: remove the PersistentIPsForVirt FG #2309
OCPBUGS-59574: Revert #2398 “Revert \“Revert \“CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload\”\“” #2414
STOR-2462: Add ExternalSnapshotMetadata FeatureGate #2381
Revert “Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload”” #2398
CONSOLE-4665: Disable serving of old v1alpha1 CRD version #2411
Fix kubebuilder tools/envtest index for v1.33.2 (add v prefix) #2410
makefile: bump-publish-kubebuilder-tools to 1.33.2 #2408
envtest-releases: add 1.33.2 to index #2407
Monitoring API: Add AlertmanagerMainConfig #2148
OAPE-232/OCPBUGS-55653: Remove GCPLabelsTags featuregate #2372
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2252
Disable schema checker overlap with KAL #2397
OCPBUGS-55674: remove AWSEFSDriverVolumeMetrics featuregate #2395
Register v1 (cluster)imagepolicy #2394
Update KAL and GolangCI-Lint to v2 #2321
Enable MutatingAdmissionPolicy in Dev/TechPreview #2385
Full changelog

cluster-config-operator

CNTRLPLANE-1311: set up openshift-tests-extension of cluster-config-operator and add a sanity test #448
OCPEDGE-1970: bump(ocp/api): pull in HighlyAvailableArbiter promotion #446
OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-52448: Remove gathering of failure domains from machine sets #356
OCPBUGS-59919: Prevent activation of CPMS with deletionTimestamp #364
OCPBUGS-59919: Fix authoritativeAPI recreate loop #365
OCPCLOUD-2937: Bump k8s dependencies to 1.33; go 1.24 #360
NO-JIRA: Update OWNERS #361
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-62258: add all-egress label to deployments on HCP and IBM #244
CNTRLPLANE-385: enable readonly root filesystem #242
OCPBUGS-60242: Use protobuf when connecting to kube client #217
STOR-2465: Add ExternalSnapshotMetadata CRD #239
STOR-2394: Bump all deps for 4.20 #240
Full changelog

cluster-dns-operator

OCPBUGS-59781: Read only root filesystem #445
OCPBUGS-59781: Read only root filesystem #439
NO-JIRA: Add rikatz to OWNERS #442
OCPBUGS-57704: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.20 #438
Full changelog

cluster-etcd-operator

OCPBUGS-60941: add individual context to the health check #1474
OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1471
OCPBUGS-60522: Set terminationMessagePolicy to FallbackToLogsOnError on TNF job pods #1468
OCPBUGS-60547: Revert “Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace” #1469
NO-JIRA: Add more unit tests for JobController #1459
OCPEDGE-1998: TNF: Use pcmk_delay_base on 1st fence device to prevent fencing races #1463
OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1464
NO-JIRA: hack/generate.sh provides helpful errors when missing tools #1465
NO-JIRA: create dedicated cluster-wide informer #1457
ETCD-590: start to refactor the probe injection #1456
OCPBUGS-57859: Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 #1452
NO-JIRA: Migrate bindata to go:embed #1445
OCPBUGS-44570: add missing informer syncs #1449
NO-JIRA: Update owners file #1451
OCPBUGS-50488: add missing ports to svc and pod spec #1444
OCPBUGS-55404: fix ordering on bootstrap IP selection #1443
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-59734: fix(azure): resolve credential caching issues around UAMI support #1238
OSASINFRA-3756: Add support for token-based authentication in clouds.yaml configuration file #1221
OCPBUGS-58424: mount /etc/pki/ca-trust/extracted/pem/ as empty dir #1239
Full changelog

cluster-ingress-operator

OCPBUGS-53432: deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready #1267
OCPBUGS-59139: Increase assertExpectedDNSRecords timeouts #1271
NE-2066: Set degraded=true when OSSM 3 can’t be installed #1268
OCPBUGS-60620: e2e: Deflake tests by using ReplicaSet for test workload #1262
OCPBUGS-54966: Improve detection of missing DNSRecord for Gateway #1212
OCPBUGS-60302: e2e - Reduce flakiness in testGatewayAPIResourcesProtection #1265
NE-2096: Bump to OSSM 3.1.0 and Istio 1.26.2 #1257
NO-JIRA: Add rikatz to OWNERS #1259
OCPBUGS-59894: Update GatewayAPI test to check if deployment has 1 or more pod #1250
NE-2108: docs - correct Istio version format in ossm-overrides.md #1253
NE-2108: Add OSSM channel and version override annotations #1246
NE-2104: desiredIstio: Enable GIE if InferencePool found #1245
OCPBUGS-59839: desiredIstio: Delete trustBundleName #1243
NE-2022: Bump to OSSM 3.0.1 and Istio 1.24.4 #1227
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-55670: revert dev cert rotation #1906
Revert “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1907
OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry #1870
CNTRLPLANE-1248: Add README to test extension #1904
OCPBUGS-60628: certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set #1900
CNTRLPLANE-1248: Standardized scaffolding for tests extension #1899
RFE-4153: enabled readonly filesystem #1864
Revert “Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again”” #1891
CNTRLPLANE-1248: set up openshift-tests-extension and add a sanity test #1892
OCPBUGS-55217: Optimistically update Kube Server and Client CA bundles #1812
OCPBUGS-59527: certrotationcontroller: extend node-system-admin-signer lifetime #1872
OCPBUGS-59626: operator: don’t react to events all namespaces #1874
OCPNODE-2559: SCC: add nested-podman and restricted-v3 #1847
NO-JIRA: Add negative tests of GOAWAY-chance #1882
OCPBUGS-44842: Set not-before/not-after annotations #1873
OCPBUGS-50489: Add missing service ports to apiserver service #1875
OCPBUGS-58232: Don’t wait for 2 etcd members when the cluster is TNF installed with assisted-installer #1866
OCPBUGS-43521: Set goaway chance to 0.001 #1863
NO-JIRA: Update the deprecated API usage alerts for 1.33. #1871
Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again” #1869
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #1849
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-55217: Throttle resourcesynccontroller on pairs with dual writers. #882
OCPBUGS-61323: CNTRLPLANE-1275:Fixing arch issue #870
CNTRLPLANE-1275: Add JUnit reporter configuration and README for OTE #863
CNTRLPLANE-1275: set up openshift-tests-extension and add a sanity test #859
OCPBUGS-60473: Optimistically update Kube Server and Client CA bundles #854
RFE-4154: Remove readOnlyRootFilesystem from KCM container #856
NO-JIRA: targetconfigcontroller: set description for csr-controller-ca #851
OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
CNTRLPLANE-371: Update Kubernetes to v1.33.2 #840
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-61544: add readonlyRootFilesystem #576
OCPSTRAT-2001: Add readOnlyRootFilesystem to kube-scheduler-operator #568
OCPSTRAT-2001: Add readonlyRootFilesystem #564
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #562
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-61325: CNTRLPLANE-1306:Fixing arch issue #131
CNTRLPLANE-1306: set up openshift-tests-extension and add a sanity test #126
Full changelog

cluster-machine-approver

NO-JIRA: Fix some lints and nits #273
OCPCLOUD-2939: Bump k8s 1.33 #272
NO-JIRA: Update OWNERS #274
OCPBUGS-57610: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.20 #271
Full changelog

cluster-monitoring-operator

OCPBUGS-61680: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2667
OCPBUGS-61207: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2661
OCPBUGS-61166: Revert “MON-4343: Cleanup deprecate pa config” #2659
OCPBUGS-60948: Add selinux_warning_controller_selinux_volume_conflict to telemetry #2653
MON-4343: Cleanup deprecate pa config #2651
NO-JIRA: [bot] Synchronize versions of the downstream components #2654
NO-JIRA: chore: drop check for AlertmanagerV1 #2650
OCPBUGS-56158: Bump prometheus-operator to v0.85.0 #2652
OCPBUGS-34568, OCPBUGS-35095, OCPBUGS-60689, OCPBUGS-60691, OCPBUGS-60692: non-HA alert cases #2630
OCPBUGS-58475: Enforce secure TLS settings in CMO server #2647
NO-JIRA: [bot] Synchronize versions of the downstream components #2642
MON-4312: Adding new accelerator to the accelerator configmap #2636
MON-4318: Add debug image manifest to CMO #2623
OCPBUGS-60221: remove managed_cluster from reserved external labels #2641
NO-JIRA: Use label matchers for Rules API in prom-label-proxy #2640
NO-JIRA: [bot] Synchronize versions of the downstream components #2639
NO-JIRA: [bot] Synchronize versions of the downstream components #2620
MON-4299: chore(thanos): replace CLI args that will disappear in future versions #2626
OCPBUGS-58475: Enforce secure TLS settings in CMO #2618
OCPBUGS-57215: operator: increase wait time till degraded to max 4 times 5m #2624
MON-4255: Bump prometheus-operator dependencies to v0.84.0 #2619
MON-4255: Bump prometheus-operator to v0.83 #2614
OCPBUGS-57561: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.20 #2611
MON-4288: set up openshift-tests-extension and add a sanity test #2616
MON-4282: Multi-tenant support for KSM’s CRS #2595
NO-JIRA: [bot] Synchronize versions of the downstream components #2615
OCPBUGS-58427: pkg/manifests: don’t reset annotations for metrics client CA #2612
Full changelog

cluster-network-operator

OCPBUGS-61370: Set maxUnavailable 10% on MultiNetworkPolicy DS #2793
CORENET-6306: Set RunAsUser for network-node-identity #2780
OCPBUGS-57815: Updating cluster-network-operator-container image to be consistent with ART for 4.20 #2728
CORENET-6092, CORENET-6130, CORENET-6261: Implement PreconfiguredUDNAddresses API changes #2743
MGMT-21485: Enable dpu-host mode that matches DPF requirements #2778
CORENET-6276: Use priorityClass from HostedControlPlane for OVN and NNI #2769
CORENET-6290: Restrict access to mounted secrets in ovnkube-control-plane #2774
OCPBUGS-55962: Allow overriding OVN-Kubernetes configuration #2752
OCPBUGS-60264: Fix multus webhook match condition for spec changes #2772
MGMT-20706: fix DPU host mode support for OVN templates #2740
CORENET-6279: ovn-k, virt: update IPAMClaim CRD #2770
CORENET-6247: Set runAsUser for ovnkube-control-plane #2757
CORENET-5957: Rebase k8s to 1.33 #2723
NO-JIRA: Update CNO reviewers/approvers #2756
CORENET-6228: Allow network-node-identity to be enabled for IBMCloud PlatformType #2755
NO-JIRA: remove PersistentIPsForVirt FG #2759
CORENET-6127: ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled #2734
OCPBUGS-59134, OCPBUGS-59135: Annotate whereabouts-controller #2749
NO-JIRA: deprecate exportloopref #2750
CORENET-5881: Reconfigure NBDB for route advertisements in LGW #2735
OCPBUGS-58448: fg, virt: remove FeatureGatePersistentIPsForVirtualization #2737
OCPBUGS-58155: CNO must skip watching IngressController if Ingress capability is disabled in HyperShift #2731
Full changelog

cluster-node-tuning-operator

OCPBUGS-62023: release-4.20: e2e: set of fixes/changes to ovs pinning testing #1394
OCPBUGS-62017: E2E: llc: Create testing namespace before Runtime tests #1393
And 18 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

OPRUN-4034: Handle CustomNoUpgrade better #134
OCPBUGS-58992: Bump helm to v3.18.4 #132
OPRUN-4026: Add support for all NoUpgrades #131
OCPSTRAT-2075: add missing tmp mounting to fix write to read only fil… #129
OPRUN-3999: Validate feature-gate arguments #128
OPRUN-3970: Add support for experimental manifests #127
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-1257: Add README to test extension #624
CNTRLPLANE-1257: set up openshift-tests-extension and add a sanity test #623
: NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-61607: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #396
CNTRLPLANE-926: Add readonlyRootFilesystem #392
CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
Full changelog

cluster-policy-controller

OCPBUGS-62053: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #168
CNTRLPLANE-1054: rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164
Full changelog

cluster-samples-operator

OCPBUGS-60665: Periodic sync of supported OCP samples #646
OCPBUGS-60606: Periodic sync of OKD samples - Return to Open Liberty 25.0.0.3 to fix failing tests #649
OCPBUGS-59325: Periodic sync of OKD samples #630
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 #644
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 - update Dockerfile.okd #645
OCPBUGS-59324: Periodic sync of supported OCP samples #631
Full changelog

cluster-storage-operator

OCPBUGS-62175: add all-egress label to deployments on HCP and IBM #622
OCPBUGS-61249: Fix logging e2e also faster cleanup #613
OCPBUGS-60948: Rename the SELinuxMount metric to :count #609
STOR-1064: add volume-data-source-validator controller #592
STOR-2576: Collect overall SELinux warning controller metrics #608
STOR-2463: add csi-external-snapshot-metadata to image-references #606
STOR-2549: Remove TP label from VAP files #607
STOR-2330: Add labels to subscribe ibm-powervs-block CSI driver operator to NPs #600
STOR-2370: Add e2e storage performant policy #593
STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver operator to NPs #599
OCPBUGS-60064: hypershift: add app label to csdriveroperators running in HCP #603
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver operators to NPs #601
STOR-2330: Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy #602
STOR-2394: Bump all deps for 4.20 #598
STOR-2330: Add labels to subscribe vSphere CSI driver operator to NPs #597
STOR-2340: Add Network Policies and subscriptions for CSO and VPD (redux) #596
Full changelog

cluster-update-keys

Revert “OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation” #83
OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation #82
OCPNODE-3006: OCPBUGS-59860: OpenShift verification uses v1 CRD #74
NO-ISSUE: OWNERS: Add Mrunal, remove folks who are no longer active in OpenShift-core #77
OCPNODE-3006: Drop openshift policy to DevPreviewNoUpgrade for ClusterImagePolicy to v1 #76
Full changelog

cluster-version-operator

OCPBUGS-57585: CVO protects /metrics with authorization #1215
OTA-1480: Add readonlyRootFilesystem #1208
NO-JIRA: Generate junitfile for unit tests #1217
OTA-1578: Disable ResourceReconciliationIssues condition #1216
Full changelog

console

OCPBUGS-62196: Add Missing Periods to Error Messages and update try again button link #15537
OCPBUGS-62015: Help dropdown should be closed automatically after tour model opened #15519
OCPBUGS-61990: Change default tab size from 4 to 2 #15515
OCPBUGS-61671: i18n upload/download routine task for OCP version 4.20 #15485
OCPBUGS-61777: Fix improper DescriptionList refactor #15499
OCPBUGS-61327: Correct the ordering of Catalog categories to be alphabetized #15468
OCPBUGS-61226: fix typo in update approval strategy label #15458
OCPBUGS-60756: delete pvc action item is placed in the middle of action list #15447
CONSOLE-4597: Migrate enzyme “tests/components/graphs” unit tests to React Testing Library #15397
OCPBUGS-52165, OCPBUGS-60753: Fix issues with Raw/Download in resource logs page #15436
NO-JIRA: Remove Lucifergene from Code Reviewers List #15449
CONSOLE-4607: Drop createModalLauncher from knative-plugin and use useOverlay hook instead #15349
ODC-7803: Adjust MAX_UPLOAD_SIZE formula #15428
OCPBUGS-56091: fix log line overlap when Wrap lines is enabled #15426
CONSOLE-4661: Fix double scrollbar #15427
CONSOLE-4235: Update Xterm.js CSS #15425
CONSOLE-4647: Refactor removeVolume action to use RemoveVolumeModal hook launcher #15230
CONSOLE-4661: Align LogViewer toolbar with CodeEditor toolbar #15414
ODC-7802: Add e2e for custom icon flow #15416
CONSOLE-4689: Replace deprecated “withHandlePromise” with “usePromiseHandler” in console #15346
CONSOLE-4235: Bump xterm to 5.5.0 #15408
CONSOLE-4500: Segment Analytics integration code cleanup #15288
CONSOLE-4630: React.SFC -> FCC #15421
CONSOLE-4609: Refactor toggleCloudShellExpanded #15365
ODC-7808: Migrate enzyme “packages/knative-plugin” unit tests to React Testing Library #15390
CONSOLE-4688: Remove maxMenuHeight from ConsoleSelect #15415
CONSOLE-4631: Run ‘react’ namespace import codemod #15412
CONSOLE-4692: Enable SNC to true in access-modes, admission-webhook-warnings, cluster-configuration #15401
CONSOLE-4686: Refactor subscription.tsx menuActions to accept actions… #15395
OCPBUGS-59862: Only show a link to OperatorHub if the logged in user has access to view OperatorHub #15340
OCPBUGS-59204: Alignment of / and : within imagestream tag selection form fields #15399
NO-JIRA: Update CHANGELOG for latest 4.20 prerelease plugin SDK package publish #15407
OCPBUGS-45297: Refactor DroppableEditYAML #15386
CONSOLE-4680: Refactor bindings.jsx menuActions to accept actions fro… #15372
ODC-7806: Migrate enzyme “packages/dev-console” unit tests to React Testing Library #15335
CONSOLE-4609: Refactor testHook to RTL, add useWarningModal #15389
ODC-7810: Migrate enzyme “packages/topology” unit tests to React Testing Library #15293
OCPBUGS-60373: QuickStarts Link buttons to other quickstarts are duplicate #15387
CONSOLE-4713: Refactor PodConnect and Terminal to TypeScript #15377
OCPBUGS-60010: Fix i18n string for event stream (again) #15384
OCPBUGS-56155: Click ‘View operator details’ in Plugin available popover will close the modal #15316
OCPBUGS-60130: Remove ancient X-XSS-Protection header #15360
OCPBUGS-59382: OpenShift Console’s “Start Job” action overrides configured “backoffLimit” to “6” #15357
CONSOLE-4600: Migrate Enzyme “tests/components/factory and modals” unit tests to RTL #15281
OCPBUGS-60151: Update Guided tour -> Guided Tour in help menus #15363
CONSOLE-4617: follow-on fix for DetailsItem popover #15361
OCPBUGS-59001: Bump helm version #15282
CONSOLE-4688: Dropdown -> ConsoleSelect #15284
CONSOLE-4616: add additionalPrinterColumns to CustomResource list page #15350
OCPBUGS-44972: Make sure CSP violations are only reported to telemetry once per day per browser #14778
CONSOLE-4703: Remove routes component in console #15343
OCPBUGS-60056: update timestamp unit test to be more stable #15356
ODC-7811: enzyme -> RTL: webterminal-plugin #15352
CONSOLE-4617: add additionalPrinterColumns to CustomResource details page #15336
OCPBUGS-60010: Fix i18n string for event stream #15351
CONSOLE-4705: Convert some files to TypeScript #15348
CONSOLE-4688: Use PF instead of noSelection Dropdown #15342
OCPBUGS-59563: Resolving API Version Conflicts in Tekton Pipeline Runs #15307
OCPBUGS-59215: switch to dev perspective for /dev-monitoring #15268
OCPBUGS-59725: Refactor RegistryPollIntervalModal #15337
OCPBUGS-55946: Move ACM perspective back to perspective selector. #15310
CONSOLE-4704: Update ThemeContext type #15339
OCPBUGS-57481: fix: Fix negative CPU util graphs #15332
OCPBUGS-58469: Fix hot reload in GlobalConfigPage component #15287
OCPBUGS-59196: fix runtime exception in CreateYAMLInner #15341
CONSOLE-4699: Update dynamic demo plugin e2e tests #15319
CONSOLE-4608: Drop createModalLauncher from helm-plugin and use useOverlay hook instead #15303
ODC-7802: Remove custom Drawer and Tabs from web-terminal #15077
ODC-7620: Use PF isLoading in CreateProjectModal #15318
OCPBUGS-57466: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15314
OCPBUGS-56248: Improve Console plugin API doc gen script #15167
OCPBUGS-56466: The warning msg ‘CPU and memory resource requests must be set’ still shows up after deployment has resource requests set. #15117
CONSOLE-4669: Refactor Alertmanager forms to only use PatternFly comp… #15275
OCPBUGS-59771: Move alertmanager settings route #15325
NO-JIRA: Update README.md by adding removing co-disabled styling #15323
CONSOLE-4700: Address tech debt in TogglePlay and ButtonBar #15308
OCPBUGS-57654: Updating openshift-enterprise-console-container image to be consistent with ART for 4.20 #15186
ODC-7803: Add custom icons in import flow #15242
OCPBUGS-59231: PipelinesList: increase width of ns column #15311
OCPBUGS-59550: add data-test attrs to console plugins table #15302
OCPBUGS-58858: Update model flags when plugins load #15296
CONSOLE-4633, CONSOLE-4672, CONSOLE-4682: Refactor JobActionFactory, ReplicationControllerFactory and remove global menuActions for job.tsx #15279
CONSOLE-4491: Deanonymize Developer Sandbox users #15201
CONSOLE-4499, CONSOLE-4654, CONSOLE-4656, CONSOLE-4657: Implement some CodeEditor RFEs #15254
CONSOLE-4623: Add support for optional Console plugin dependencies #15183
CONSOLE-4634: Refactor DeploymentActionFactory to hook form. #15209
OCPBUGS-59195: Clicking on container dropdown button has no response when pod log is in fullscreen. #15278
CONSOLE-4663: Replace Bootstrap .has-feedback with custom rule #15264
CONSOLE-4659: Replace Bootstrap Responsive utilities with PatternFly … #15261
ODC-7807: Migrate enzyme test to react testing library for helm-plugin #15244
OCPBUGS-59277: update guided tour selector for Software catalog #15277
CONSOLE-4655: Replace Bootstrap List group with PatternFly List #15259
CONSOLE-4653: Allow custom icons in template annotation #15248
ODC-6775: Jest 21 -> 22 #14939
OCPBUGS-32157: Always show edit-yaml header if defined #15274
OCPBUGS-55340: Not able to launch terminal window from OCP web console due to console plugin conflicts #15255
CONSOLE-4578: OpenShift ConsoleCONSOLE-4578 Move “Installed Operators” from “Operators” to “Ecosystem” nav section #15187
OCPBUGS-57715: Fix Made - Clicking Cancel on YAML Creation now redirects to Secrets Page #15253
OCPBUGS-59163: Show possible enum values in ExploreTypeSidebar #15265
CONSOLE-4662: remove screenfull #15262
CONSOLE-4658: Replace Bootstrap Small text with PatternFly Extra Smal… #15256
CONSOLE-4619: Fix ExternalLinkWithCopy visual regression #15266
ODC-7794: Add event-source, channel, and broker form page automation in CI #15226
ODC-7779: Tests to enable the developer perspective through UI #15179
CONSOLE-4619: _blank removal followup #15251
OCPBUGS-43792: Make assumption about allowedDynamicPluginNames array order explicit #15249
OCPBUGS-52835: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15252
CONSOLE-4642: replace Bootstrap radio with PatternFly equivalent #15217
OCPBUGS-56803: Deleted objects remain in favorites and cause 404 errors #15193
OCPBUGS-58334: hide Namespace column in MachineSets list when project… #15247
And 18 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-61230: pluginOrder field should only contain available plugins #1040
OCPBUGS-58094: Consolidate telemetry values oscilation #1034
CONSOLE-4665: Vendor ConsolePluginCRD v1alpha1 changes #1018
OCPBUGS-60219: make console operator responsible for creating oauth client #1032
OCPBUGS-57854: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 #996
OCPBUGS-57736: bump github.com/openshift/client-go #1030
OCPBUGS-45300: Wire synced OIDC Auth CM to Console #1024
OCPBUGS-45300: Fetch synced CM for the CertificateAuthority issuer #1017
OCPBUGS-59099: Bump docs version #1015
OCPBUGS-58434: Console-operator should report plugin services as relatedObjects #1012
NO-JIRA: Remove ocs-install-tour #1003
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-59568: stop installing rpms that are already in the base image #206
Full changelog

coredns

OCPBUGS-57652: Updating coredns-container image to be consistent with ART for 4.20 #136
NO-JIRA: Add rikatz to OWNERS #147
OCPBUGS-60008: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #146
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OSPRH-18263: UPSTREAM: 2915 [manila-csi-plugin] Support muilple share rules #349
OCPBUGS-59650: Rebase main onto release-1.33 #334
OCPBUGS-58497: CARRY: don’t ignore json files #337
Full changelog

csi-external-attacher

STOR-2392: Rebase to upstream v4.9.0 for OCP 4.20 #86
Full changelog

csi-external-provisioner

STOR-2392: Rebase to upstream v5.3.0 for OCP 4.20 #115
Full changelog

csi-external-resizer

OCPBUGS-61546: Requeue PVC over PV creation #172
STOR-2392: Rebase to upstream v1.14.0 for OCP 4.20 #171
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2392: Rebase to upstream v8.3.0 for OCP 4.20 #181
OCPBUGS-55689: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #180
Full changelog

csi-livenessprobe

STOR-2392: Rebase to upstream v2.16.0 for OCP 4.20 #75
Full changelog

csi-node-driver-registrar

STOR-2392: Rebase to upstream v2.14.0 for OCP 4.20 #82
Full changelog

docker-registry

OCPBUGS-61638: update OWNERS #449
OSASINFRA-3756: Bump docker-distribution to support v3token authentication for swift #439
Full changelog

egress-router-cni

CORENET-6300: Port egress-router CNI plugin from iptables to nftables #90
Full changelog

etcd

OCPBUGS-60874: Revert “OCPBUGS-52181: Ensure cluster id changes during force-new-cluster” #339
OCPBUGS-57675: Updating ose-etcd-container image to be consistent with ART for 4.20 #334
Full changelog

gcp-cloud-controller-manager

OCPBUGS-60772: Reuse instance groups #86
NO-JIRA: UPSTREAM: 894: Adding SyncMutex to nodeipam unit tests #88
OCPCLOUD-2926: Merge https://github.com/kubernetes/cloud-provider-gcp:master (c0af057) into main #77
NO-JIRA: Update OWNERS #83
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Update OWNERS #246
Full changelog

gcp-machine-controllers

OCPCLOUD-2931: Update Kubernetes deps to v1.33 #123
NO-JIRA: Update OWNERS #127
OCPBUGS-59376: Add max-concurrent-reconciles flag to machine actuator #124
Full changelog

gcp-pd-csi-driver

STOR-2396: Rebase to upstream v1.20.0 for OCP 4.20 #79
Full changelog

gcp-pd-csi-driver-operator

STOR-2394: Bump all deps for 4.20 #147
Full changelog

haproxy-router

OCPBUGS-61558: Revert Prevent startup failures due to name resolution” #674
NO-JIRA: Add rikatz to OWNERS #665
OCPBUGS-55506: Prevent startup failures due to name resolution #656
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-61555: Bump 1.33.5 #2461
OCPBUGS-61753: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2469
OCPBUGS-61720: Do not remove PVC ClaimRef to fix flaky VAC test #2463
OCPBUGS-61197: UPSTREAM: 133425: Fix SELinux label comparison #2445
OCPBUGS-61347: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2450
OCPBUGS-61333: Unrevert bump to v1.33.4 #2449
OCPBUGS-60851: UPSTREAM: <carry>: Revert “Bump 1.33.4” #2425
NO-JIRA: UPSTREAM: <carry>: Filter featuregates by FeatureGate label instead of using OffByDefault label #2398
OCPBUGS-60507: Bump 1.33.4 #2416
STOR-2530: Storage performant security policy (update audit labels) #2409
STOR-1064: improve CRD handling in VolumePopulator test #2419
OCPBUGS-59641: cleanup: fetch individual PodResourceInfo from allocated resource state #2410
NO-JIRA: add rphillips as downstream kubelet approver #2414
UPSTREAM: <drop>: OKD-276: Fix InPlacePodVerticalScaling tests #2407
CNTRLPLANE-5: UPSTREAM: 132960: Configure JSON content type for generic webhook RESTClient. #2362
OCPBUGS-52169: Workload partitioning of static init containers #2224
OCPBUGS-59756: Fix IntOrString cost estimation when schema has a MaxLength constraint #2375
OCPBUGS-46422: Disable ServiceCIDR tests #2382
CNTRLPLANE-940: Add CEL expression compile validation for Authentication admission #2353
STOR-2370: Storage performant security policy #2344
OCPBUGS-59603: Restore “Bump external snapshotter for vgs tests” #2392
OCPBUGS-59533: Rebase v1.33.3 to master/4.20 #2369
OCPBUGS-57666: Adjust durations for PodLifecycleSleepAction e2e tests #2363
STOR-2481: UPSTREAM: <carry>: Skip SELinux test with Feature:SELinuxMountReadWriteteOncePodOnly #2389
OCPBUGS-60047: disable slow and flaky tests rather than labeling them #2390
OCPBUGS-56785: UPSTREAM: 132028: podresources: list: use active pods #2361
NO-JIRA: UPSTREAM: <drop>: Revert “Bump external snapshotter for vgs tests” #2387
OCPBUGS-59603: Bump the external-snapshotter for vgs tests #2373
TRT-2068: Skip specific LoadBalancer test for “none” platform #2383
TRT-2068: Reintroduce non-suite annotation removal #2331
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2314
Full changelog

hypershift

OCPBUGS-62182: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6887
OCPBUGS-62005: Enable VolumeAttributesClass runtime config #6868
OCPBUGS-62006: fix(ignition-server): Don’t delete user-managed cert secrets #6869
OCPBUGS-61863: ci: Use the common MCE konflux pipeline #6847
OCPBUGS-61066: fix: propagate AWSLoadBalancerTargetNodesAnnotation to HCP #6772
OCPBUGS-61575: fix(kas): Set correct container port in postStart handler, 2 #6854
OCPBUGS-61565: [release-4.20] fix(proxy): ensure URLs have scheme before proxy resolution #6791
OCPBUGS-61746: fix(oauth): oauth-openshift deployment should be HA #6828
OCPBUGS-56778: fix(kas): Disable PSA enforcement in 4.20 #6830
CNTRLPLANE-1397: feat(konflux): tag MCE HO images with latest #6784
OCPBUGS-61670: fix(control-plane): remove resource limits from kube-controller-manager #6804
OCPBUGS-61667: resolve MIRRORED_RELEASE_IMAGE flapping #6803
OCPBUGS-61321: rename CCM deployments to align with 4.19 #6768
OCPBUGS-61322: fix: cleanup old PKI operator deployment during upgrades #6769
OCPBUGS-61066: fix(cpo/ingress): do not set aws-load-balancer-subnets on private router Service #6732
chore(deps): update konflux references #6725
CNTRLPLANE-1236: feat(aws): support EC2 CapacityReservationPreference in NodePool #6694
OCPBUGS-60152: test/e2e: enable EnsureAppLabel check for 4.19 #6697
CNTRLPLANE-202: feat(sharedingress): add infrastructure node scheduling preferences #6709
CNTRLPLANE-1361: fix(infra/azure): make role assignment creation idempotent and robust #6722
NO-JIRA: docs(rules): expand Jira item creation guidelines and epic details #6705
chore(deps): update konflux references #6669
NO-JIRA: fix(contrib): Make setup_aks_mi.sh executable #6708
OCPBUGS-60891: set default goaway-chance to 0.001 #6696
OCPBUGS-60649: add availibility-prober to all capi-providers #6695
STOR-1064: fix(cpo): add missing image to env replacement #6691
OCPBUGS-60907: Update Azure overrides to include HC deletion time bug fix #6698
CNTRLPLANE-935: e2e test for new Azure metrics #6315
OSASINFRA-3675: Add credentials to openshift-manila-csi-driver namespace for Hypershift #6683
STOR-1064: add validator image to CSO manifest #6686
OCPBUGS-59194: fix(registry): delete ValidatingAdmissionPolicy and binding during HCP deletion for ARO cleanup #6616
OCPBUGS-60653: test(e2e): Workaround for external oidc tests to bypass the teardown … #6684
CNTRLPLANE-1209: exposing IPv4OVNKubernetesConfig for hcp’s ClusterNetworking #6554
NO-JIRA: Update-overrides for ARO HCP Fixes #6685
NO-JIRA: docs(cursor): add Jira creation rule for CNTRLPLANE/OCPBUGS with components and story template #6680
NO-JIRA: fix(doc): remove note about mandatory annotation in BM deployment #6682
OCPBUGS-60651: fix mce 2.10 Konflux EC violation #6676
OCPBUGS-60602: Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming #6673
OCPBUGS-56914: fix: Do not admit OAuth route by private router unless it has external DNS #6218
OCPBUGS-56430: fix: Add recovery monitoring stack fixes #6642
CNTRLPLANE-1271: HyperShift Operator CPO override for Azure. versions 4.19.6 - 4.19.9 #6662
CNTRLPLANE-1270: Fix ProjectDevelopmentStreamTemplates #6661
OCPBUGS-60381: feat(validations): add wildcard support to DNS SAN conflict detection #6643
CNTRLPLANE-1251, CNTRLPLANE-1255: Introduce ProjectDevelopmentStreams #6632
OCPBUGS-57450: fix: routes are not used in case of IBM Cloud #6622
NO-JIRA: docs(agents): add AGENTS.md and centralize assistant guidance #6634
NO-JIRA: feat(rules): Add cursor rules for PR and Code review #6633
OCPBUGS-60399: wrap EnsureKubeAPIDNSNameCustomCert and EnsureGlobalPullSecret in their own test #6536
OCPBUGS-59880: add HostedCluster config requirements for DR #6522
NO-JIRA: feat(docs): Add new videos section in the documentation #6635
CNTRLPLANE-946: test(e2e): Add e2e test for ExternalOIDCWithUIDAndExtra feature set #6631
CNTRLPLANE-996: feat(e2e): Use ROSAManagedPolicies by default #6534
CNTRLPLANE-1234: update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1754467841 #6608
OCPBUGS-57336: fix(hostedcluster): remove additionalTrustBundle from hcp when removed from HostedCluster #6605
CNTRLPLANE-993: feat(CPOv2): Monitor operands rollout status #6492
NO-JIRA: Update ingress-and-dns.md - update Metallb install link #6619
OCPBUGS-60187: chore: Split shared proxy acls #6621
NO-JIRA: Fix typo causing ‘make verify’ to fail #6620
CNTRLPLANE-995: Fix incorrect usage of util.UpdateObject #6615
CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6614
OCPBUGS-60190: chore: Improve security context uid allocation to reuse released uids #6612
NO-JIRA: docs: Document workloadContext #6589
CNTRLPLANE-204: feat: Add Shared Ingress Config Generator #6555
NO-JIRA: chore: Add cursor rule statements for unit tests #6611
NO-JIRA: test(e2e): add new test for external OIDC #6419
OCPBUGS-57626: order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES #6607
NO-JIRA: docs: enhance commit message formatting and gitlint configuration #6613
CNTRLPLANE-995: Fix Default SG day2 tags feature being triggered without changes #6603
CNTRLPLANE-1190: Support control plane overrides by platform #6523
OCPBUGS-60064: fix(OCPBUGS-60064): add missing app label to some components #6591
CNTRLPLANE-1186: update github.com/golang/groupcache digest to 2c02b82 #6389
CNTRLPLANE-1228: Update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1753853351 #6541
OCPBUGS-58061: Always compress and encode payload in token secret for inplace upgrades #6352
CNTRLPLANE-1225: feat(konflux): Use hermetic builds for CPO #6595
CNTRLPLANE-1197: Add EnsureGlobalPullSecret to be executed in 4.19 test suite #6508
OCPBUGS-59194: fix(OCPBUGS-59194): Allow HCCO to set registry managementState to Removed #6593
NO-JIRA: feat(azure): Add deletion scripts and cleanup documentation for managed Azure clusters #6560
OCPBUGS-59886: Add selinux-warning-controller to KCM #6550
CNTRLPLANE-1116: build(gitlint): add gitlint to verify target #6559
CORENET-6229: Use networking.advertiseAddress for CNO apiserver override for IBMCloud PlatformType #6553
OCPBUGS-59736: Add support for generating a SC UID per namespace if SCC are not avalable #6520
CNTRLPLANE-263: Remove all AzureManaged* CRDs #6518
CNTRLPLANE-262: Support print operator version in CLI #5821
CNTRLPLANE-1198, CNTRLPLANE-1199: Bump AllowedCIDRBlocks limit #6556
NO-JIRA: refactor(azure): extract AKS managed identity setup into separate script #6488
CNTRLPLANE-1116: Fix CI git commits for run-gitlint #6519
OCPBUGS-59959: Set explicit FSGroup and RunAsUser for etcd when there’s no SCC #6548
NO-JIRA: add CLAUDE.md with comprehensive development guidance #6549
CNTRLPLANE-1191: add sa-token-issuer-private-key-path flag to create cluster aws #6526
CNTRLPLANE-1184: update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 #6343
OCPBUGS-59927: Fix MCE 2.10 konflux EC violations #6531
MGMT-20948: Enable Multus Disabling for NetworkType=Other #6358
NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete #6538
NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure #6537
CNTRLPLANE-777: Create an Arm64 NodePool e2e Test for ARO HCP #6509
CNTRLPLANE-996: feat(cli): Add support for using ROSA managed policies #6467
CNTRLPLANE-204: feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes #6447
MGMT-20826: Add CLI validation to ensure Console is disabled when Ingress is disabled #6479
NO-JIRA: feat(cmd/dump): add CronJobs to dump #6494
OCPBUGS-53265: Use the image reference for the cache in the image metadata provider #6155
OCPBUGS-59835: MCE 2.10 konflux #6524
OCPBUGS-57336: Delete unused AdditionalTrustBundle from CP namespace #6504
Fix OCPBUGS-54720: HCP payload doesn’t respect multiple #6486
OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6375
OCPBUGS-43824: Help fix flaky NTO tests #6480
feat(shared-ingress): Fix Konflux hermetic build config #6503
CNTRLPLANE-1116: add gitlint support for conventional commit enforcement #6462
NO-JIRA: feat(contrib): add kubelet config daemonset #6495
NO-JIRA: Fix a typo in the documentation #6501
NO-JIRA: increase the pod limit per node in AKS cluster #6487
NO-JIRA: Add new doc from HCP OADP Plugin #6299
OCPBUGS-59759: fix(konflux): Add missing backslash for dot escaping #6491
NO-JIRA: test: replace context.Background/TODO with t.Context in unit tests #6475
NO-JIRA: Dummy change to shared-ingress Containerfile to trigger a build #6478
NO-JIRA: test: remove CPOv2 annotation from upgrade test #6485
OCPBUGS-57316: hypershift version in CLI returns panics for Server Version when HyperShift operator is deployed #6473
CNTRLPLANE-980: chore(contrib): add ansible playbook for setting up external OIDC #6294
NO-JIRA: test/e2e: skip kubevirt pods when checking labels, tolerations, and term msg policy #6476
NO-JIRA: test/e2e: add TerminationMessagePolicyFallbackToLogsOnError check to 4.19 #6291
CNTRLPLANE-735: Document steps to configure Microsoft backup extension in AKS #6456
NO-JIRA: chore(deps): update konflux references #6267
OCPBUGS-59232: fix(test): resolve Azure DNS race condition in EnsureCustomAdminKubeconfigReachesTheKAS #6461
MGMT-20826: Enable disabling of Ingress capability #6319
NO-JIRA: unique clusterrole per hosted cluster for kubevirt CSI #6321
CNTRLPLANE-952: New API to support specifying cluster-autoscaler flags #6236
CNTRLPLANE-993: Skip azure 4.19 cp upgrade for now to let the 4.20 suite be covered. #6416
CNTRLPLANE-204: feat(shared-ingress): Add socat tool to container image #6458
OCPBUGS-43824: fix(test): reduce API call frequency to prevent rate limiting in NTO machineconfig test #6453
OCPBUGS-58299: remove annotation is not working #6420
MGMT-20793: Enable Disabling NodeTuning Capability #6356
CNTRLPLANE-800: Remove code associated with Managed Identity v2 for ARO HCP #6105
NO-JIRA: Update Created Azure Hosted Cluster on AKS doc #6451
OCPBUGS-57742: Updating ose-hypershift-container image to be consistent with ART for 4.20 #6307
CNTRLPLANE-1113: Add renovate configuration #6452
CNTRLPLANE-201: migrate to konflux-built image for shared ingress #6381
Revert “OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API” #6445
OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API #6353
OCPBUGS-58837: Override CPO image to apply KAS certificate hotfix #6402
NO-JIRA: konflux: manually update task bundles #6418
CNTRLPLANE-995: Support day2 tags changes for AWS default Security Group #6320
NO-JIRA: Exit miv3 script early if cp file exists #6417
NO-JIRA: Fix up contrib scripts for aro like env #6395
MGMT-20771: Enable disabling of Console capability #6183
OCPBUGS-57790: add custom kube-apiserver DNS name to shared ingress #6338
OCPBUGS-58387: Add karpenter to skip api-server deps #6379
OCPBUGS-58149: fix(hcco): Don’t fail for public OIDC clients with no client secret #6367
NO-JIRA: Ensure that capi-provider deployment does not have outdated labels #6335
OCPBUGS-57957: Increase MaxItems for Mirrors and ImageContentSources #6325
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

NO-JIRA: Update OWNERS #83
Full changelog

ibm-vpc-block-csi-driver

STOR-2393: Rebase to upstream v5.2.16 for OCP 4.20 #102
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver controller and node pods to NPs #148
STOR-2394: Bump all deps for 4.20 #147
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: Update OWNERS #117
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-2930: Bump k8s 1.33 #67
NO-JIRA: Update OWNERS #68
OCPBUGS-57837: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.20 #65
Full changelog

insights-operator

OCPBUGS-61844: Run missing make update (#1143) #1143
Revert “Rerun make update after read-only filesystem securitycontext added. (#1122)” (#1129) #1122
Rerun make update after read-only filesystem securitycontext added. (#1122) #1122
OCPBUGS-60611: virt launcher logs gatherer (#1110) #1110
fix: incorrect anonymization of domains (#1111) #1111
feat: add permissions to gather clusterrole (#1106) #1106
feat: Allow on-demand gathering during initial periodic run (#1109) #1109
RFE-4152: Add missing readonlyRootFilesystem (#1104) #1104
CCXDEV-15041: update on-demand gathering docs (#1097) #1097
CCXDEV-15045: update code to use v1alpha2 api version (#1093) #1093
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Liborfuka ocp420 new tests #51
Sidecar containers test case #44
test: Fix JBoss EAP 8.0 version #50
Full changelog

ironic

OKD-290: (OKD4.20) Fix ironic-image errors and metal3 pod crashes on CentOS9 #696
OCPBUGS-61461: revert the switch to local RPC #690
OCPBUGS-61257: set [json_rpc]port unconditionally #686
OCPBUGS-60455: Change default json-rpc port to avoid conflict with knmstate #682
METAL-1368: Bring in fixes implementing servicing abort. #683
METAL-1461: Add IPE and Gunicorn packages #680
METAL-1503: Upstream sync 20250728 #673
METAL-1419: Update ironic project hashes #677
METAL-1461: update config to allow Ironic to work with ironic-prometheus-exporter #674
METAL-1379: Bump ironic to include NIC Firmware Updates #672
METAL-1414: Use Python 3.12 to build and run ironic #658
OCPBUGS-55298: Bump ironic to unresponsive bmc commit #670
METAL-1496: Force download and install from source #669
METAL-1496: Revert “OCPBUGS-55298: Bump ironic to latest” #668
OCPBUGS-55298: Bump ironic to latest #667
OCPBUGS-56755, OCPBUGS-57454: Bump sushy and ironic commit #666
Full changelog

ironic-agent

OCPBUGS-45385: Ignore USB network devices #195
METAL-1419: Update ironic projects hashes #193
METAL-1414: Use python3.12 to build and run ironic-agent #191
METAL-1496: Force download and install from source #192
Full changelog

keepalived-ipfailover

OCPBUGS-57842: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.20 #211
OCPBUGS-57831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.20 #210
OCPBUGS-57624: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.20 #209
Full changelog

kube-rbac-proxy

OCPBUGS-57550: Updating kube-rbac-proxy-container image to be consistent with ART for 4.20 #122
Full changelog

kube-storage-version-migrator

OCPBUGS-57556: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 #222
OCPBUGS-38523: Reduce the page size on list requests to the Kube API server #211
NO-JIRA: Add DOWNSTREAM_OWNERS. #219
Full changelog

machine-api-operator

OCPBUGS-61853: Fixed multi nic e2e to wait for node removal after machineset tests #1418
OCPBUGS-61853: Adjusted machine e2e tests to wait for nodes to clean up #1416
OCPBUGS-61314: bump openshift/api #1410
OCPBUGS-60145: Added [Serial] to serial e2e tests #1404
fix for OCPBUGS-55135: userDataSecret.name should be a Required value on AWS #1399
SPLAT-2381: Fixed e2e test to generate machines with cluster name prefix #1398
OCPCLOUD-2980: add ingress/egress network policy v2 #1396
Revert “OCPCLOUD-2980: add ingress/egress network policy” #1395
OCPCLOUD-2980: add ingress/egress network policy #1387
OCPCLOUD-2941: Bump k8s dependencies to 1.33; go 1.24 #1393
OCPBUGS-59376: Enabled 10 concurrent reconciles on GCP #1390
OCPBUGS-58429: Fixed test logic to wait for machines ready and clean up #1388
Full changelog

machine-config-operator

OCPBUGS-62080: Add mcd_local_unsupported_packages recording rule #5297
OCPBUGS-61882: Add nil/null checks to image registry secret decode #5292
OCPBUGS-62073: Improve MCN CRD clean-up script #5296
OCPBUGS-61516: Machine-config controller should actively manage cordon while draining #5281
OCPBUGS-61824: Override NMState service definition #5286
OCPBUGS-61232: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5273
OCPBUGS-61016: Fix wait failure on MCO pods #5270
OPNET-683: Automatically copy over configs applied by MCO #5162
MCO-1743: Irreconcilable validations reporting #5254
MCO-1536: Add new ImageBuildDegraded status option to MCP #5251
OCPBUGS-57979: Update Kubelet Config MachineConfig upon FeatureGate update #5228
OCPBUGS-60559: Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match #5249
OCPBUGS-60526: Remove escape chars when installing extensions in OCL Containerfile #5247
NO-JIRA: clean up node cluster dashboard #4612
OCPEDGE-1733: feat: consolidate arbiter template files #5232
OCPBUGS-59723: Reintroduce cronjob that deletes MCN v1alpha1 CRD #5238
OCPBUGS-60287: Remove OnClusterBuild FG #5241
NO-ISSUE: Revert “OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters” #5237
OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters #5215
MCO-1810: Support kernelType in OCL #5172
OCPBUGS-60119: Invalid architecture value found in annotation during 4.19 update #5222
MCO-1777: Run build as an init container for OCL #5200
MCO-1811: add MachineConfigControllerPoolAlert runbook to alert #5214
TRT-2232: Revert #5148 “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5213
OCPNODE-3522: Generate deterministic order namespacedPolicyJSON #5196
OCPNODE-3466: Remove containernetworking-plugins directory from crio.conf #5173
NO-ISSUE: Balance runtime of e2e-gcp-op shards #5203
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5148
MCO-1773: Pick up openshift/kubernetes 1.33 rebase updates #5182
OCPBUGS-59780: ARO clusters cannot scale on upgrade to 4.19 #5195
OCPBUGS-58443: In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state #5191
OCPBUGS-57484, OPNET-681: Support migration to NMState #5064
OCPNODE-3006: Migrate ClusterImagePolicy/ImagePolicy to v1 #5143
OCPBUGS-43406: Add workaround fix for static pod race #5185
MCO-1813: Simplify boot image reconciliation with Go generics #5183
NO-ISSUE: Split gcp-op into two tests #5197
MCO-1815: vSphere bootimage update reconciliation should handle bootimage name diverging #5187
OCPBUGS-58191: fixes image registry secret handling #5171
OCPBUGS-55971: Enable debug logging for nodeip-configuration #5043
OCPBUGS-59776: Revert “OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN” #5190
OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN #5121
OCPBUGS-59672: TestMCNPoolNameCustom should clean up resources properly #5184
OCPBUGS-58238: Image Mode creates new MOSBs when osbuilder is drained and it results in degraded MCPs #5161
OCPBUGS-59367: Set our test suite as global #5179
OCPBUGS-56115: Understand and eliminate noisy logs for MCN #5136
OCPBUGS-57024: use channel to signal controller shutdown #5104
NO-ISSUE: Add emy to baremetal-reviewers #5164
MCO-1739: Tell origin our suite is disruptive and set timeout #5167
MCO-1307: Add support for VSphere for BootImage Update #4677
OCPBUGS-44290: Fix when machines are considered Degraded in MCP status based on MCN NodeDegraded condition #5110
Full changelog

machine-image-customization-controller

METAL-1509: Add support for multi arch image files #144
METAL-1484: Support using a block device as the base ISO #143
Full changelog

machine-os-images

METAL-1509: Add aarch64 images #65
Full changelog

metallb-frr

OCPBUGS-57696: Updating ose-frr-container image to be consistent with ART for 4.20 #101
Full changelog

monitoring-plugin

OBSINTA-796: Refactor Cypress Commands Structure #518
NO-JIRA: Test config interactive setup #510
OBSINTA-776: Incident detection tests #509
OU-781: fix links in incidents table #511
OU-769: implement a custom tooltip for incidents #513
OU-675: Update UIPlugins to golang 1.24 #512
OU-932: automation - metrics #503
NO-JIRA: README.md update #507
NO-JIRA: test: Fix operator sidebar navigation #505
OU-692: Update montioring-plugin to NodeJS v22 #506
OU-849: upgrade jsx pre-procesor to “react-jsx” #502
NO-JIRA: update to expect NodeJS v22+ #504
OU-848: Dependency update of dynamic plugin sdk and typescript #499
OU-960: data-test injection on source code and UI automation refactoring #500
OCPBUGS-60198: fix legend height to avoid scroll overlap #494
NO-JIRA: improve consistency in tab string #497
OU-963: add translation string test #492
NO-JIRA: update the i18n #491
NO-JIRA: refactor incidents to add typescript #475
OCPBUGS-55455: feat: add alerting rules tab to dev console #487
NO-JIRA: automation failed in the periodic job #486
OU-944: automation refactoring #485
OU-863: feat: add disconnected to line chart #477
OU-388: add units selector to the metrics page #480
OU-939: Fix virt persepective new silence link #472
OU-594: [Incidents] UI is not embedded in the Alerting section #465
OU-503: regression automation testing for monitoring alerting #471
OU-930: use non-legacy store for accurate hideGraphs value #473
NO-JIRA: Update README.md with how to development with local perses instance #442
OU-721: reset showgraph state when unmounting button #459
Full changelog

multus-admission-controller

OCPBUGS-57749: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.20 #98
OCPBUGS-59304: Update the github.com/golang/glog module to v1.2.4 #99
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-58405: Ds merge 7/15/25 #372
Full changelog

must-gather

CORENET-5412: network: Gather OVN-Kubernetes CUDN CRs #486
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

network-interface-bond-cni

OCPBUGS-60846: upstream sync 01092025 #90
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.20 (#107) #107
create .snyk file to skip vendor folder (#108) #108
OCPBUGS-59612: Bump github.com/golang/glog to v1.2.4 (#109) #109
no-jira: Replace e2e test image (#118) #118
Full changelog

network-tools

NO-JIRA: Bug backlog tooling: add arg for listing stale bugs (>4 months) #158
NO-JIRA: add tooling to reduce bug backlog toil for viewing bz comment updates #157
NO-JIRA:Remove Tim from members list #153
OCPBUGS-57894: Updating ose-network-tools-container image to be consistent with ART for 4.20 #150
NO-JIRA:Update OWNERS file #152
Full changelog

networking-console-plugin

CNV-52160: VLAN fields #268
CNV-52160: add awareness checkbox #267
CNV-52160: edit project mapping #266
CNV-52160: Creation form #257
CNV-52160: Vmnetwork details page #263
NO-JIRA: fix(i18n): use right namespace #262
OCPBUGS-60122: Fix ingress details #258
CNV-52160: add vm network list #256
OCPBUGS-49652: Fix requiremenets with no value #254
CNV-63471: Replace Bootstrap Grid CSS with PatternFly Grid and Table #253
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-59794: Adding nil checks to avoid Panic #47
OCPCLOUD-2924: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (109de6e) into main #44
OCPBUGS-57759: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.20 #45
Full changelog

nutanix-machine-controllers

OCPCLOUD-2929: Align dependencies with k8s 1.33 and Go 1.24 for 4.20 #120
NO-JIRA: Update OWNERS #118
Full changelog

oauth-apiserver

OCPBUGS-61753: Bump openshift/kubernetes-apiserver. #147
CNTRLPLANE-1305: Update openshift/oauth-apiserver to latest Kubernetes 1.33 version #139
CNTRLPLANE-1259: Add README to test extension #141
CNTRLPLANE-1259: Update Jira component name to oauth-apiserver #140
OCPBUGS-57611: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.20 #137
CNTRLPLANE-1259: set up openshift-tests-extension and add a sanity test #138
CNTRLPLANE-5: Accept client-go feature gates and unrecognized feature gates via –feature-gates. #136
NO-JIRA: Bump to Kubernetes v1.32 #135
Full changelog

oauth-proxy

CNTRLPLANE-1313: Update openshift/oauth-proxy to latest Kubernetes 1.33 version #330
Full changelog

oauth-server

OCPBUGS-58267: Fix mixup with Spanish and French locale variable names #188
OCPBUGS-57719: Updating oauth-server-container image to be consistent with ART for 4.20 #190
Full changelog

oc-mirror

OCPBUGS-62024: changes the warning message of 4.21 (#1270) #1270
Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1265) #1265
ocpbugs-60999: fix issue when using full true in m2m (#1260) #1260
OCPBUGS-61386: fixes permissions on rebuilt catalog (#1258) #1258
fixes parser issue in the dependabot yaml (#1251) #1251
Bump helm.sh/helm/v3 in /v2 in the oc-mirror-v2 group (#1248) #1248
Bump the oc-mirror-v2 group in /v2 with 5 updates (#1245) #1245
Bump the oc-mirror-v2 group in /v2 with 2 updates (#1243) #1243
CLID-389: v2: validate access to destination registry (#1201) #1201
reduces the dependabot config interval (#1242) #1242
Bump the oc-mirror-v2 group across 1 directory with 5 updates (#1241) #1241
Bump github.com/docker/docker in /v2 in the go_modules group (#1239) #1239
clid-415: adds a warn message to v1 (#1238) #1238
Bump the oc-mirror-v2 group in /v2 with 17 updates (#1232) #1232
OCPBUGS-59949: fixes the result output showing the wrong total (#1236) #1236
prevents panic when helm chart is nil (#1233) #1233
OCPBUGS-59646: revert #1220 and print a warning instead (#1228) #1228
updates dependabot config (#1231) #1231
OCPBUGS-55114: v2/operator: support manifest lists with one arch (#1140) #1140
NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) #1165
adds build-machinery-go as a tool dependency (#1226) #1226
OCPBUGS-59714: Detect images from a Helm Chart with an aliased chart dependency (#1038) #1038
OCPBUGS-52562: Ensure release collection does not include duplicates (#1218) #1218
OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1219) #1219
OCPBUGS-54622: cli/delete: fix workflow mode name output (#1214) #1214
OCPBUGS-59646: cmd: unpack v2 to $HOME instead of /tmp (#1220) #1220
OCPBUGS-58956: bump helm for CVE fix (#1213) #1213
OCPBUGS-56398: Bug fix not to overwrite log files (#1208) #1208
OCPBUGS-58467: Add range check for –parallel-images and –parallel-l… (#1211) #1211
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-61705: Revert “Handle service-ca cert availability/rotation” #474
OCPBUGS-61563: [OTE] Update webhook ote tests to use latest webhook-operator #469
NO-ISSUE: Synchronize From Upstream Repositories #453
NO-ISSUE: Synchronize From Upstream Repositories #449
NO-ISSUE: Synchronize From Upstream Repositories #444
NO-ISSUE: Synchronize From Upstream Repositories #435
NO-ISSUE: Synchronize From Upstream Repositories #431
NO-ISSUE: Synchronize From Upstream Repositories #421
NO-ISSUE: Synchronize From Upstream Repositories #411
OPRUN-4017: Synchronize From Upstream Repositories #408
NO-ISSUE: Synchronize From Upstream Repositories #405
And 38 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-61753: Bump openshift/kubernetes-apiserver. #557
OCPBUGS-61494: ensure cache invalidation after a time #553
CNTRLPLANE-1304: Update openshift/openshift-apiserver to latest Kubernetes 1.33 version #539
CNTRLPLANE-1258: Add README to test extension #540
OCPBUGS-47773: Bump library-go to fix route validation #535
OCPBUGS-57858: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.20 #538
CNTRLPLANE-1258: set up openshift-tests-extension and add a sanity test #536
OCPBUGS-59262: Revert “Drop support for image manifest schema 1” #533
Full changelog

openshift-controller-manager

OCPBUGS-61900: Fix Dockerfile.rhel: Add OTE binary build and packaging for release-4.20 #420
OCPBUGS-61790: CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #418
OCPBUGS-55650: Drop BuildCSIVolumes feature gate logic (Build CSI Volumes in OpenShift Builds is GA since 4.14) #407
CNTRLPLANE-1054: Update k8s dependencies to 1.33.2 #405
Full changelog

openstack-machine-api-provider

OSASINFRA-3690: Bump machine-api-operator #136
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-61362: [4.20] e2e stability fixes #1077
NO-JIRA: Remove deleted yamls #1032
NO-ISSUE: Update OWNERS to reflect current team makeup #1057
NO-ISSUE: Synchronize From Upstream Repositories #1055
NO-ISSUE: Enable readonlyRootFilesystem by default #1043
NO-ISSUE: Synchronize From Upstream Repositories #1046
NO-ISSUE: Synchronize From Upstream Repositories #1045
NO-ISSUE: Synchronize From Upstream Repositories #1044
NO-ISSUE: Synchronize From Upstream Repositories #1041
NO-ISSUE: Synchronize From Upstream Repositories #1039
NO-ISSUE: Synchronize From Upstream Repositories #1038
NO-ISSUE: Synchronize From Upstream Repositories #1035
Full changelog

operator-marketplace

OCPBUGS-61200: Add NetworkPolicy for hypershift #660
OCPBUGS-59566, OCPBUGS-59570: Move Network Policy manifests #652
OCPBUGS-60060: (fix) Update the operator-ibm-cloud-managed with the same configuration applied to operator manually #649
OPRUN-3888, OPRUN-3889: Upgrade catalog images from 4.19 to 4.20 #650
OPRUN-3981: Upgrade Go from 1.23 to 1.24.3 and k8s deps to 1.33 for release 4.20 #647
OPRUN-3981: Update dockerfile to use go 1.24 and OCP image 4.20 #645
OPRUN-3902: Add static NetworkPolicy for marketplace-operator #644
NO-ISSUE: Add readonlyRootFilesystem #634
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-61239: Skip node-encap-ips annotation in DPU host mode #2763
OCPBUGS-61778: Adding ovndb-raft-functions.sh to ovnk image #2760
OCPBUGS-60844: DownStream Merge [08-25-2025] #2734
NO-JIRA: DownStream Merge [08-21-2025] #2730
OCPBUGS-55962: DownStream Merge [08-20-2025] #2729
OCPBUGS-38735, OCPBUGS-53028, OCPBUGS-56506: DownStream Merge [08-16-2025] #2724
OCPBUGS-57883: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.20 #2644
Revert “TRT-2243: Revert “OCPBUGS-56202: DownStream Merge [07-25-2025]”” #2715
OCPBUGS-57882: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.20 #2643
TRT-2243: Revert “OCPBUGS-56202: DownStream Merge [07-25-2025]” #2706
NO-JIRA: Bump OVN to 25.03 #2701
OCPBUGS-56202: DownStream Merge [07-25-2025] #2693
OCPBUGS-59248: DownStream Merge [07-17-2025] #2676
OCPBUGS-57578: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.20 #2640
OCPBUGS-49824, OCPBUGS-57179: DownStream Merge [07-09-2025] #2659
NO-JIRA: Update OWNERS file: Add Patryk/Martin as approvers #2665
OCPBUGS-55914, OCPBUGS-57433: DownStream Merge [06-18-2025] #2639
Full changelog

powervs-block-csi-driver

MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #106
MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #105
no-jira: Add Kishen V as a reviewer #101
MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream for go toolchain issue with ose builds #100
OCPBUGS-57598: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.20 #98
MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #99
Full changelog

powervs-block-csi-driver-operator

CNTRLPLANE-1290: enable readOnlyRootFilesystem #87
STOR-2394: Bump all deps for 4.20 #85
Full changelog

powervs-cloud-controller-manager

No-Jira: Bump golang and Update oauth2 package in go.mod #87
Full changelog

powervs-machine-controllers

OCPCLOUD-3027: Bump k8s 1.33 #121
NO-JIRA: Bump machine-api-operator to pull in authoritativeAPI fix #120
Full changelog

prom-label-proxy

NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.0 #384
Full changelog

prometheus

OCPBUGS-61207: chore: compute highestTimestamp at queryManager level #264
MON-4300: update prometheus to 3.5 #260
OCPBUGS-39089: Clarify prometheus pod NFS warning message #243
Full changelog

prometheus-alertmanager

OCPBUGS-59400: Include go-verify-deps expected files in gitignore #106
OCPBUGS-57770: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.20 #103
OCPBUGS-57770: fix: inconsistency vendored dir due to Konflux migration #105
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-56158: Bump openshift/prometheus-operator to v0.85.0 #338
NO-JIRA: [bot] Bump openshift/prometheus-operator to v0.84.1 #337
MON-4255: Bump openshift/prometheus-operator to v0.84.0 #333
Full changelog

rhel-coreos, rhel-coreos-extensions

Merge #1854
NO-JIRA: Add PeaceRebel (Bipin) to approvers list #1812
COS-3418: add kola-denylist for skipping kola tests #1836
NO-JIRA: Add Johan-Liebert1 (Pragyan Poudyal) to owners #1766
Full changelog

route-controller-manager

OCPBUGS-59575: Update all dependencies #63
OCPBUGS-57616: Updating ose-route-controller-manager-container image to be consistent with ART for 4.20 #62
Full changelog

service-ca-operator

OCPBUGS-61966: don’t hotloop on secret creation errors #275
CNTRLPLANE-1260: Add README to test extension #272
CNTRLPLANE-1260: set up openshift-tests-extension and add a sanity test #270
NO-JIRA: Update Owners #269
OCPBUGS-57703: Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 #268
Full changelog

tests

OCPBUGS-62231: network test isolation and reduced parallelization to protect cpu #30300
Revert “[release-4.20] OCPBUGS-62140:OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream” #30303
OCPBUGS-62140: OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream #30299
OCPBUGS-61757: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30260
OCPBUGS-62075: Temporarily remove commatrix documentation test for rework #30287
OCPBUGS-62007: oidc: improve rollout wait times #30284
CNF-18661: Update vendor with communication matrix bug fixes on 4.20 #30271
OCPBUGS-61734: Restore retries for flaky port foward test #30266
OCPBUGS-61540: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30263
OCPBUGS-61744: update machines scale test #30258
OCPBUGS-61732: [release-4.20] CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30251
OCPBUGS-61731: [release-4.20] CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30250
OCPBUGS-61600: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30245
OCPBUGS-61540: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30237
OCPBUGS-61478: Add flaky kubectl logs test to the retry list to clean signal for release #30231
OCPBUGS-61333: Bump to latest openshift/kubernetes (v1.33.4) #30228
OCPBUGS-61286: Mark etcd net overload logging test as a flake #30214
CNTRLPLANE-1306: Enable OTE for cluster-kube-storage-version-migrator-operator #30213
CNTRLPLANE-945: [release-4.20] CNTRLPLANE-945: improve logging, add startup probe to Keycloak Deployment #30204
OCPBUGS-60656: OCPBUGS-60883: Fix PinnedImageSet test instability & update flow for tests using custom MCPs #30136
CNTRLPLANE-1257: Enable OTE for apiserver Operators and servers #30120
OCPBUGS-57496: Account for system:hosted-cluster-config service account in HyperShift #30075
TRT-2260: Create High CPU intervals for nodes #30152
trt-2257: annotate zstd as sig-builds #30190
CORENET-6232: add PreconfiguredUDNAddresses FG tests #30010
TRT-2268: Add support for OTE test lifecycles #30166
OCPBUGS-60842: fix: add exception for csi snapshot controller on two node #30153
OCPBUGS-56691: Pass volume-percentage to 100 in must-gather executions #30182
OPRUN-4089: Remove OLMv1 Tests remaning since all is migrated to OTE/operator-controller repo #30173
trt-2257: separate builds tests #30171
NO-JIRA: test/extended: update auth-related test OWNERS #30149
CNTRLPLANE-945: oidc/keycloak: make keycloak client use environment proxy for HTTP requests #30148
NO-JIRA: Stop setting feature gate conditional #30146
CNTRLPLANE-945: monitor: auditloganalyzer: skip watch channels processing when cluster stability is explicitly marked as Disruptive #30174
OPRUN-4056: [OLMv1] Remove Preflight checks since those were migrated to OTE #30074
SREP-1622: Fix endpoint admission test namespace creation for ROSA #30134
OCPNODE-3004: Run ImageVolume tests in all clusters. #30122
OCPBUGS-52968: Drop the etcd should not log excessive took too long messages test #30143
OCPBUGS-57477: Allow three long term flaky k8s tests to retry #30140
OCPBUGS-60550: Increase curl timeout from 3s to 5s for egress firewall DNS rule test #30133
OCPBUGS-60454: Update the Control Plane Machine name pattern to support the master’s names used on OpenStack #30125
NO-JIRA: Stop ignoring the targets from openshift-cluster-version #30111
OTA-1581: Skip UpgradeStatus test on HyperShift #30132
STOR-1064: OCPBUGS-59256: bump kubernetes version to fix provisioning e2e test #30126
OCPBUGS-52968: Expand and rate limit tests watching for etcd logging anomalies #30013
Revert “TRT-2197: use fixed seed for test ordering” #30127
NO-JIRA: fix: update arbiter test #30112
OCPBUGS-59526: TLS registry update #30116
OCPBUGS-57032: upgrade.go: wait some time after node upgrade #29960
OCPBUGS-60530: Fix panics in inclusterapi disruption during ROSA jobs #30129
MCO-1656: Component Readiness for vSphere Bootimage Update #29741
CNTRLPLANE-945: suites/external-oidc: explicitly mark cluster stability as disruptive #30128
OCPBUGS-60375: Use ubi9 as latest imagestream for perl #30117
OCPBUGS-60530: Log full stack traces for panics in monitortest cleanup #30118
OCPBUGS-60562: SigstoreImageVerification:update waitForMCP different config name #30115
OCPEDGE-1755: Add TNF E2E tests for ungraceful node shutdown #29986
OCPBUGS-60238: images/tests: Remove rteval #30077
NO-JIRA: Ensure Platform Prometheus targets are protected #30014
OCPBUGS-60375: Fix perl hotdeploy test #30114
OTA-1580: Further tests for oc adm upgrade status #30109
NO-JIRA: Add compat_otp package with openshift-tests-private (OTP) util implementation #30081
OCPBUGS-60375: Remove Perl 5.32 on UBI8 #30092
CNTRLPLANE-945: oidc: configure an oidc client secret for the console to consume #30094
NO-JIRA: [TNF] add Two Node Fencing exception to accept less than two etcd endpoints #30058
OCPBUGS-58037: increase timeout of image extract test #30068
OCPNODE-3520: UserNamespaces: Increase build timeout duration #30071
OPRUN-4055: [OLMv1] Remove olmv1.go tests since those has been executed by OTE #30072
TRT-2226: Exclude ephemeral cni-sysctl-allowlist-ds from maxUnavailable/maxSurge check #30095
CNTRLPLANE-945: OIDC/enable skipped tests #30087
CNTRLPLANE-1248: Enable OTE for cluster-kube-apiserver Operator #30078
STOR-2370: Add openshift-test tags for CSO #30042
OCPEDGE-1969: add recovery tests for TNA #30022
CNTRLPLANE-945: oidc: fix test issues #30040
OTA-1580: Monitortest framework test for oc adm upgrade status #30031
OCPBUGS-59603: Fix vgs tests #30008
OCPBUGS-57032: Add wait.Poll retry logic to checkUpgradeability with 30s timeout #30062
OCPNODE-3004: ImageVolume: Increase timeout duration #30070
OTA-1559: test/extended/cli/admin: Add ‘oc adm upgrade recommend’ smoke test #29831
NO-JIRA: Export GetIPFamilyForCluster #30065
NO-JIRA: Allow only including / excluding specific extension images #29980
NO-JIRA: Update extended/networking OWNERS #30026
NO-JIRA: Update image mirroring instructions to avoid using external binary #30060
TRT-2197: use fixed seed for test ordering #29997
NO-JIRA: Get enabled featuregates from metrics endpoint #29952
CORENET-6203: Enable test for LGW L2 #30009
OPRUN-3964: [olmv1] - Remove test [sig-olmv1][OCPFeatureGate:NewOLM] OLMv1 CRDs should be installed migrated to operator-controller repository/OTE #30036
OCPBUGS-56506: Don’t check for remote node subnet BGP routes #30029
OCPNODE-3004: Increase the time to wait until the pod becomes ImagePullBackOff #30030
OCPBUGS-59218: feat(azure): skip metrics collection for ARO HCP hypershift #30006
NO-JIRA: Revert “OCPBUGS-55238: spyglass: hide disruption events for localhost” #30034
TRT-2224: Fix edge case where failures are not counted #30039
TRT-2163: incluster disruption images #30007
OCPNODE-3004: Accept ErrImagePull for non-existent image volume test. #30027
OCPNODE-3454: OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy #29973
CNTRLPLANE-945: Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features #29917
OCPNODE-3004: Add ImageVolume e2e tests #30015
OCPBUGS-59750: Move the legacy container failures #30017
OPRUN-3768: Add OLMv1 Single/OwnNamespace tests #29998
OCPBUGS-55238: spyglass: hide disruption events for localhost #29710
API-1802: chart template: show cert rotation events #29279
NO-ISSUE: Automated - Update synthetic test data #29802
OTA-1580: Add basic test for oc adm upgrade status CLI #29954
NO-JIRA: Skip cert collection tests on hypershift #28937
OCPBUGS-59555: Add ubi10 images to image-ecosystem #30001
OPRUN-3965: Enable OTE for Operator Controller (OLMv1) #29949
NO-JIRA: fix: nil pointer reference in pod count #30002
NO-JIRA: oc idle: Increase timeout of endpointslice status check #29994
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #29709
MULTIARCH-5390: Reapply “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29967
Revert “Revert “Revert “trt-2163: return error”“” #30000
OCPEDGE-1983: [TNF] Fix test suite filtering to include Disrupted tagged tests #29996
OCPBUGS-59203: OCPBUGS-57524: Improve MCN test stability #29981
OCPBUGS-59159: Adjust DNS success rate to 98.0% for SNO upgrade test. #29978
MON-4288: register CMO tests extension #29974
OCPBUGS-58354: disruptioninclusterapiserver: bump timeout to 10 mins #29970
Revert “Revert “trt-2163: return error”” #29964
OCPBUGS-59372: revert: remove openshift/two-node suite from tna tests #29991
Revert “CNF-17748: Add a comparing between static entry test” #29993
NO-JIRA: Improve performance of run-resourcewatch #29955
NO-JIRA: OWNERS_ALIASES: Update OTA members / team lead #29953
MON-4287: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #29975
MCO-1739: Add MCO’s OTE tests to origin #29922
MCO-1797: Fix transient errors while checking status of PIS #29962
OCPBUGS-59157: Ensure CSI tests are defined before OTE initialization #29979
OCPBUGS-58895: bump watch count limits #29972
OCPBUGS-58449: replace Php 8.1 ubi9 with Php 8.2 ubi9 in origin #29963
TRT-2097: Fix a few things in suite selection #29971
TRT-2097, TRT-2098: Migrate origin to use OTE, and implement extension-derived suites #29888
NO-JIRA: test/extended/operators: skip wildcard certificate #29956
Revert “trt-2163: return error” #29959
Full changelog

thanos

MON-4299: update to 0.39.2 #163
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #96
OCPCLOUD-2933: Rebase onto main #95
OCPBUGS-57574: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.20 #92
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61647: Fix unit tests #68
NO-JIRA: Update OWNERS #63
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

STOR-2404: Rebase to upstream v3.5.0 for OCP 4.20 #147
Full changelog

vsphere-csi-driver-operator

STOR-2394: Bump all deps for 4.20 #308
STOR-2330: Add labels to subscribe vSphere CSI driver controller and webhook to NPs #307
Full changelog

vsphere-problem-detector

STOR-2394: Bump all deps for 4.20 #187
OCPBUGS-59319: Check for number of FailureDomain-s in GetVCenter() #186
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.33.4-4.rhaos4.20.gitc8e7df2.el9
kernel-5.14.0-570.49.1.el9_6
openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
systemd-252-51.el9_6.2

Full list (564 packages)

NetworkManager-1:1.52.0-7.el9_6
NetworkManager-cloud-setup-1:1.52.0-7.el9_6
NetworkManager-libnm-1:1.52.0-7.el9_6
NetworkManager-ovs-1:1.52.0-7.el9_6
NetworkManager-team-1:1.52.0-7.el9_6
NetworkManager-tui-1:1.52.0-7.el9_6
WALinuxAgent-udev-2.7.0.6-11.el9_6.1
aardvark-dns-2:1.14.0-1.el9
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.7.0-1.el9
afterburn-dracut-5.7.0-1.el9
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-4.el9
audit-libs-3.1.5-4.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9_6.1
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-31.el9_6
bind-license-32:9.16.23-31.el9_6
bind-utils-32:9.16.23-31.el9_6
binutils-2.35.2-63.el9
binutils-gold-2.35.2-63.el9
bootc-1.1.6-3.el9_6
bootupd-0.2.27-4.el9_6
bsdtar-3.5.3-6.el9_6
bubblewrap-0.4.1-8.el9_5
bzip2-1.0.8-10.el9_5
bzip2-libs-1.0.8-10.el9_5
c-ares-1.19.1-2.el9_4
ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.1-2.el9
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.12-1.el9
conmon-rs-0.6.6-0.rhaos4.18.el9.1
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-2.el9_6
containernetworking-plugins-1:1.6.2-2.el9_6
containers-common-2:1-117.el9_6
coreos-installer-0.24.0-3.el9_6
coreos-installer-bootinfra-0.24.0-3.el9_6
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.33.4-4.rhaos4.20.gitc8e7df2.el9
cri-tools-1.33.0-1.el9
criu-3.19-1.el9
criu-libs-3.19-1.el9
crun-1.23.1-2.el9_6
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9_6.1
cryptsetup-libs-2.7.2-3.el9_6.1
curl-7.76.1-31.el9_6.1
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-35.el9_6.1
device-mapper-multipath-libs-0.8.7-35.el9_6.1
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-1.el9
dnf-4.14.0-25.el9
dnf-data-4.14.0-25.el9
dnsmasq-2.85-17.el9_6
dosfstools-4.2-3.el9
dracut-057-88.git20250311.el9_6
dracut-network-057-88.git20250311.el9_6
dracut-squash-057-88.git20250311.el9_6
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.192-6.el9_6
elfutils-default-yama-scope-0.192-6.el9_6
elfutils-libelf-0.192-6.el9_6
elfutils-libs-0.192-6.el9_6
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9_6
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-9.el9_5
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.14-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-1.9.26-1.el9
fwupd-plugin-flashrom-1.9.26-1.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.47.3-1.el9_6
glib2-2.68.4-16.el9_6.2
glibc-2.34-168.el9_6.23
glibc-common-2.34-168.el9_6.23
glibc-gconv-extra-2.34-168.el9_6.23
glibc-minimal-langpack-2.34-168.el9_6.23
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9
gnutls-3.8.3-6.el9_6.2
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-104.el9_6
grub2-efi-x64-1:2.06-104.el9_6
grub2-pc-1:2.06-104.el9_6
grub2-pc-modules-1:2.06-104.el9_6
grub2-tools-1:2.06-104.el9_6
grub2-tools-minimal-1:2.06-104.el9_6
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-4.rhaos4.19.el9
ignition-grub-2.21.0-4.rhaos4.19.el9
ima-evm-utils-1.5-3.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-11.el9_6.1
irqbalance-2:1.9.4-2.el9_6.2
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9_6.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-570.49.1.el9_6
kernel-core-5.14.0-570.49.1.el9_6
kernel-modules-5.14.0-570.49.1.el9_6
kernel-modules-core-5.14.0-570.49.1.el9_6
kernel-modules-extra-5.14.0-570.49.1.el9_6
kexec-tools-2.0.29-5.el9_6.2
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-35.el9_6.1
krb5-libs-1.21.1-8.el9_6
less-590-5.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-6.el9_6
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9_5
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-31.el9_6.1
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-13.el9
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
libdrm-2.4.123-2.el9
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-21.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9_5
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-5.el9_5
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-54.0-1.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9_6.2
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.21.3-14.el9_6
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-34.el9
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.11.1-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-2.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9
libsmbclient-4.21.3-14.el9_6
libsolv-0.7.24-3.el9
libss-1.46.5-7.el9
libssh-0.10.4-13.el9
libssh-config-0.10.4-13.el9
libsss_certmap-2.9.6-4.el9_6.2
libsss_idmap-2.9.6-4.el9_6.2
libsss_nss_idmap-2.9.6-4.el9_6.2
libsss_sudo-2.9.6-4.el9_6.2
libstdc++-11.5.0-5.el9_5
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-14.el9_6
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-12.el9_6
libxmlb-0.3.10-1.el9
libxslt-1.1.34-13.el9_6
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20250812-151.4.el9_6
linux-firmware-whence-20250812-151.4.el9_6
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-4.el9_5
microcode_ctl-4:20250211-1.20250512.1.el9_6
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9_6.2
ncurses-base-6.2-10.20210508.el9_6.2
ncurses-libs-6.2-10.20210508.el9_6.2
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.1-1.el9_6
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-34.el9
nftables-1:1.0.9-3.el9
nmap-ncat-3:7.92-3.el9
nmstate-2.2.48-2.el9_6
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.19-1.el9
nvme-cli-2.11-6.el9_6
oniguruma-6.9.6-1.el9.6
open-vm-tools-12.5.0-1.el9
openldap-2.6.8-4.el9
openshift-clients-4.20.0-202509051528.p2.ga434281.assembly.stream.el9
openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
openssh-8.7p1-45.el9
openssh-clients-8.7p1-45.el9
openssh-server-8.7p1-45.el9
openssl-1:3.2.2-6.el9_5.1
openssl-fips-provider-3.0.7-6.el9_5
openssl-fips-provider-so-3.0.7-6.el9_5
openssl-libs-1:3.2.2-6.el9_5.1
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.1-33.el9fdp
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.20.0-202509051528.p2.gd469d04.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.20.0-202509051528.p2.gf940e72.assembly.stream.el9
ostree-2025.2-2.el9_6
ostree-grub2-2025.2-2.el9_6
ostree-libs-2025.2-2.el9_6
p11-kit-0.25.3-3.el9_5
p11-kit-trust-0.25.3-3.el9_5
pam-1.5.1-26.el9_6
passt-0^20250217.ga1e48a0-10.el9_6
passt-selinux-0^20250217.ga1e48a0-10.el9_6
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.1.el9_6
perl-B-1.80-481.1.el9_6
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.1.el9_6
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.1.el9_6
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.1.el9_6
perl-File-Basename-2.85-481.1.el9_6
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.1.el9_6
perl-FileHandle-2.03-481.1.el9_6
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.1.el9_6
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.1.el9_6
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.1.el9_6
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.1.el9_6
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.1.el9_6
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.1.el9_6
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.1.el9_6
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.1.el9_6
perl-constant-1.33-461.el9
perl-if-0.60.800-481.1.el9_6
perl-interpreter-4:5.32.1-481.1.el9_6
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.1.el9_6
perl-mro-1.23-481.1.el9_6
perl-overload-1.31-481.1.el9_6
perl-overloading-0.02-481.1.el9_6
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.1.el9_6
perl-vars-1.05-481.1.el9_6
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-13.el9_6
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9_6.2
python3-3.9.21-2.el9_6.2
python3-audit-3.1.5-4.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.45.1-1.el9_6
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-25.el9
python3-dnf-plugin-versionlock-4.3.0-20.el9
python3-dnf-plugins-core-4.3.0-20.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-13.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-13.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9_6.2
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-2.1.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-13.el9_6.1
python3-setuptools-wheel-53.0.0-13.el9_6.1
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9
qemu-guest-agent-17:9.1.0-15.el9_6.9
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-54.0-1.el9
readline-8.1-4.el9
redhat-release-9.6-0.1.el9
redhat-release-eula-9.6-0.1.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.6-5.el9_6
rpm-ostree-libs-2025.6-5.el9_6
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9
runc-4:1.2.4-2.el9
samba-client-libs-4.21.3-14.el9_6
samba-common-4.21.3-14.el9_6
samba-common-libs-4.21.3-14.el9_6
sed-4.8-9.el9
selinux-policy-38.1.53-5.el9_6
selinux-policy-targeted-38.1.53-5.el9_6
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
shim-x64-15.8-4.el9_3
skopeo-2:1.18.1-2.el9_6
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9_6.1
sqlite-libs-3.34.1-8.el9_6
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9_6.2
sssd-ad-2.9.6-4.el9_6.2
sssd-client-2.9.6-4.el9_6.2
sssd-common-2.9.6-4.el9_6.2
sssd-common-pac-2.9.6-4.el9_6.2
sssd-ipa-2.9.6-4.el9_6.2
sssd-krb5-2.9.6-4.el9_6.2
sssd-krb5-common-2.9.6-4.el9_6.2
sssd-ldap-2.9.6-4.el9_6.2
sssd-nfs-idmap-2.9.6-4.el9_6.2
sssd-proxy-2.9.6-4.el9_6.2
stalld-1.20.4-1.el9_6
strace-6.12-1.el9
subscription-manager-1.29.45.1-1.el9_6
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_6.2
systemd-252-51.el9_6.2
systemd-journal-remote-252-51.el9_6.2
systemd-libs-252-51.el9_6.2
systemd-pam-252-51.el9_6.2
systemd-rpm-macros-252-51.el9_6.2
systemd-udev-252-51.el9_6.2
tar-2:1.34-7.el9
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.19.el9
tpm2-tools-5.2-4.el9
tpm2-tss-3.2.3-1.el9
tzdata-2025b-1.el9
unbound-libs-1.16.2-19.el9_6.1
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9
util-linux-core-2.37.4-21.el9
vim-minimal-2:8.2.2637-22.el9_6
virt-what-1.27-1.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-5.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

NetworkManager 1:1.52.0-4.el9_6 → 1:1.52.0-7.el9_6
NetworkManager-cloud-setup 1:1.52.0-4.el9_6 → 1:1.52.0-7.el9_6
NetworkManager-libnm 1:1.52.0-4.el9_6 → 1:1.52.0-7.el9_6
NetworkManager-ovs 1:1.52.0-4.el9_6 → 1:1.52.0-7.el9_6
NetworkManager-team 1:1.52.0-4.el9_6 → 1:1.52.0-7.el9_6
NetworkManager-tui 1:1.52.0-4.el9_6 → 1:1.52.0-7.el9_6
WALinuxAgent-udev 2.7.0.6-11.el9 → 2.7.0.6-11.el9_6.1
avahi-libs 0.8-22.el9_6 → 0.8-22.el9_6.1
bind-libs 32:9.16.23-29.el9_6 → 32:9.16.23-31.el9_6
bind-license 32:9.16.23-29.el9_6 → 32:9.16.23-31.el9_6
bind-utils 32:9.16.23-29.el9_6 → 32:9.16.23-31.el9_6
bootupd 0.2.27-3.el9 → 0.2.27-4.el9_6
bsdtar 3.5.3-5.el9_6 → 3.5.3-6.el9_6
container-selinux 4:2.237.0-1.el9_6 → 4:2.237.0-2.el9_6
coreos-installer 0.23.0-1.el9 → 0.24.0-3.el9_6
coreos-installer-bootinfra 0.23.0-1.el9 → 0.24.0-3.el9_6
cri-o 1.33.2-4.rhaos4.20.gitcb609a5.el9 → 1.33.4-4.rhaos4.20.gitc8e7df2.el9
crun 1.21-1.el9_6 → 1.23.1-2.el9_6
cryptsetup 2.7.2-3.el9_5 → 2.7.2-3.el9_6.1
cryptsetup-libs 2.7.2-3.el9_5 → 2.7.2-3.el9_6.1
curl 7.76.1-31.el9 → 7.76.1-31.el9_6.1
dnsmasq 2.85-16.el9_4 → 2.85-17.el9_6
git-core 2.47.1-2.el9_6 → 2.47.3-1.el9_6
glib2 2.68.4-16.el9 → 2.68.4-16.el9_6.2
glibc 2.34-168.el9_6.20 → 2.34-168.el9_6.23
glibc-common 2.34-168.el9_6.20 → 2.34-168.el9_6.23
glibc-gconv-extra 2.34-168.el9_6.20 → 2.34-168.el9_6.23
glibc-minimal-langpack 2.34-168.el9_6.20 → 2.34-168.el9_6.23
gnutls 3.8.3-6.el9 → 3.8.3-6.el9_6.2
irqbalance 2:1.9.4-2.el9 → 2:1.9.4-2.el9_6.2
jq 1.6-17.el9 → 1.6-17.el9_6.2
kernel 5.14.0-570.26.1.el9_6 → 5.14.0-570.49.1.el9_6
kernel-core 5.14.0-570.26.1.el9_6 → 5.14.0-570.49.1.el9_6
kernel-modules 5.14.0-570.26.1.el9_6 → 5.14.0-570.49.1.el9_6
kernel-modules-core 5.14.0-570.26.1.el9_6 → 5.14.0-570.49.1.el9_6
kernel-modules-extra 5.14.0-570.26.1.el9_6 → 5.14.0-570.49.1.el9_6
kexec-tools 2.0.29-5.el9 → 2.0.29-5.el9_6.2
libarchive 3.5.3-5.el9_6 → 3.5.3-6.el9_6
libcurl 7.76.1-31.el9 → 7.76.1-31.el9_6.1
libicu 67.1-9.el9 → 67.1-10.el9_6
libldb 4.21.3-5.el9_6 → 4.21.3-14.el9_6
libsmbclient 4.21.3-5.el9_6 → 4.21.3-14.el9_6
libwbclient 4.21.3-5.el9_6 → 4.21.3-14.el9_6
libxml2 2.9.13-9.el9_6 → 2.9.13-12.el9_6
linux-firmware 20250513-151.1.el9_6 → 20250812-151.4.el9_6
linux-firmware-whence 20250513-151.1.el9_6 → 20250812-151.4.el9_6
ncurses 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-base 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-libs 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
nmstate 2.2.45-1.el9_6 → 2.2.48-2.el9_6
nvme-cli 2.11-5.el9 → 2.11-6.el9_6
openshift-clients 4.20.0-202507031044.p0.gf0e1051.assembly.stream.el9 → 4.20.0-202509051528.p2.ga434281.assembly.stream.el9
openshift-kubelet 4.20.0-202507032145.p0.ge52b13b.assembly.stream.el9 → 4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
openvswitch3.5 3.5.0-19.el9fdp → 3.5.1-33.el9fdp
ose-aws-ecr-image-credential-provider 4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9 → 4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.20.0-202507042143.p0.gd469d04.assembly.stream.el9 → 4.20.0-202509051528.p2.gd469d04.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.20.0-202506181842.p0.gaabc000.assembly.stream.el9 → 4.20.0-202509051528.p2.gf940e72.assembly.stream.el9
ostree 2025.1-1.el9 → 2025.2-2.el9_6
ostree-grub2 2025.1-1.el9 → 2025.2-2.el9_6
ostree-libs 2025.1-1.el9 → 2025.2-2.el9_6
pam 1.5.1-25.el9_6 → 1.5.1-26.el9_6
passt 0^20250217.ga1e48a0-9.el9_6 → 0^20250217.ga1e48a0-10.el9_6
passt-selinux 0^20250217.ga1e48a0-9.el9_6 → 0^20250217.ga1e48a0-10.el9_6
perl-AutoLoader 5.74-481.el9 → 5.74-481.1.el9_6
perl-B 1.80-481.el9 → 1.80-481.1.el9_6
perl-Class-Struct 0.66-481.el9 → 0.66-481.1.el9_6
perl-Errno 1.30-481.el9 → 1.30-481.1.el9_6
perl-Fcntl 1.13-481.el9 → 1.13-481.1.el9_6
perl-File-Basename 2.85-481.el9 → 2.85-481.1.el9_6
perl-File-stat 1.09-481.el9 → 1.09-481.1.el9_6
perl-FileHandle 2.03-481.el9 → 2.03-481.1.el9_6
perl-Getopt-Std 1.12-481.el9 → 1.12-481.1.el9_6
perl-IO 1.43-481.el9 → 1.43-481.1.el9_6
perl-IPC-Open3 1.21-481.el9 → 1.21-481.1.el9_6
perl-NDBM_File 1.15-481.el9 → 1.15-481.1.el9_6
perl-POSIX 1.94-481.el9 → 1.94-481.1.el9_6
perl-SelectSaver 1.02-481.el9 → 1.02-481.1.el9_6
perl-Symbol 1.08-481.el9 → 1.08-481.1.el9_6
perl-base 2.27-481.el9 → 2.27-481.1.el9_6
perl-if 0.60.800-481.el9 → 0.60.800-481.1.el9_6
perl-interpreter 4:5.32.1-481.el9 → 4:5.32.1-481.1.el9_6
perl-libs 4:5.32.1-481.el9 → 4:5.32.1-481.1.el9_6
perl-mro 1.23-481.el9 → 1.23-481.1.el9_6
perl-overload 1.31-481.el9 → 1.31-481.1.el9_6
perl-overloading 0.02-481.el9 → 0.02-481.1.el9_6
perl-subs 1.03-481.el9 → 1.03-481.1.el9_6
perl-vars 1.05-481.el9 → 1.05-481.1.el9_6
podman 5:5.4.0-10.el9_6 → 5:5.4.0-13.el9_6
python-unversioned-command 3.9.21-2.el9_6.1 → 3.9.21-2.el9_6.2
python3 3.9.21-2.el9_6.1 → 3.9.21-2.el9_6.2
python3-libs 3.9.21-2.el9_6.1 → 3.9.21-2.el9_6.2
python3-requests 2.25.1-9.el9 → 2.25.1-10.el9_6
qemu-guest-agent 17:9.1.0-15.el9_6.4 → 17:9.1.0-15.el9_6.9
samba-client-libs 4.21.3-5.el9_6 → 4.21.3-14.el9_6
samba-common 4.21.3-5.el9_6 → 4.21.3-14.el9_6
samba-common-libs 4.21.3-5.el9_6 → 4.21.3-14.el9_6
sqlite-libs 3.34.1-7.el9_3 → 3.34.1-8.el9_6
stalld 1.19.6-1.el9 → 1.20.4-1.el9_6
sudo 1.9.5p2-10.el9_6.1 → 1.9.5p2-10.el9_6.2
systemd 252-51.el9_6.1 → 252-51.el9_6.2
systemd-journal-remote 252-51.el9_6.1 → 252-51.el9_6.2
systemd-libs 252-51.el9_6.1 → 252-51.el9_6.2
systemd-pam 252-51.el9_6.1 → 252-51.el9_6.2
systemd-rpm-macros 252-51.el9_6.1 → 252-51.el9_6.2
systemd-udev 252-51.el9_6.1 → 252-51.el9_6.2
unbound-libs 1.16.2-18.el9_6 → 1.16.2-19.el9_6.1
which 2.21-29.el9 → 2.21-30.el9_6

Removed:

conntrack-tools 1.4.7-4.el9_5
libnetfilter_cthelper 1.0.0-22.el9
libnetfilter_cttimeout 1.0.0-19.el9
libnetfilter_queue 1.0.5-1.el9

Extensions

Full list (162 packages)

NetworkManager-libreswan-1.2.24-1.el9.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-10.el9.x86_64
corosync-3.1.9-2.el9_6.x86_64
corosynclib-3.1.9-2.el9_6.x86_64
cpp-11.5.0-5.el9_5.x86_64
crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
daxctl-libs-78-2.el9.x86_64
edk2-ovmf-20241117-2.el9.noarch
elfutils-libelf-devel-0.192-6.el9_6.x86_64
fence-agents-all-4.10.0-86.el9_6.9.x86_64
fence-agents-amt-ws-4.10.0-86.el9_6.9.noarch
fence-agents-apc-4.10.0-86.el9_6.9.noarch
fence-agents-apc-snmp-4.10.0-86.el9_6.9.noarch
fence-agents-bladecenter-4.10.0-86.el9_6.9.noarch
fence-agents-brocade-4.10.0-86.el9_6.9.noarch
fence-agents-cisco-mds-4.10.0-86.el9_6.9.noarch
fence-agents-cisco-ucs-4.10.0-86.el9_6.9.noarch
fence-agents-common-4.10.0-86.el9_6.9.noarch
fence-agents-drac5-4.10.0-86.el9_6.9.noarch
fence-agents-eaton-snmp-4.10.0-86.el9_6.9.noarch
fence-agents-emerson-4.10.0-86.el9_6.9.noarch
fence-agents-eps-4.10.0-86.el9_6.9.noarch
fence-agents-heuristics-ping-4.10.0-86.el9_6.9.noarch
fence-agents-hpblade-4.10.0-86.el9_6.9.noarch
fence-agents-ibmblade-4.10.0-86.el9_6.9.noarch
fence-agents-ifmib-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-moonshot-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-mp-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-ssh-4.10.0-86.el9_6.9.noarch
fence-agents-ilo2-4.10.0-86.el9_6.9.noarch
fence-agents-intelmodular-4.10.0-86.el9_6.9.noarch
fence-agents-ipdu-4.10.0-86.el9_6.9.noarch
fence-agents-ipmilan-4.10.0-86.el9_6.9.noarch
fence-agents-kdump-4.10.0-86.el9_6.9.x86_64
fence-agents-mpath-4.10.0-86.el9_6.9.noarch
fence-agents-redfish-4.10.0-86.el9_6.9.x86_64
fence-agents-rhevm-4.10.0-86.el9_6.9.noarch
fence-agents-rsa-4.10.0-86.el9_6.9.noarch
fence-agents-rsb-4.10.0-86.el9_6.9.noarch
fence-agents-sbd-4.10.0-86.el9_6.9.noarch
fence-agents-scsi-4.10.0-86.el9_6.9.noarch
fence-agents-vmware-rest-4.10.0-86.el9_6.9.noarch
fence-agents-vmware-soap-4.10.0-86.el9_6.9.noarch
fence-agents-wti-4.10.0-86.el9_6.9.noarch
fence-virt-4.10.0-86.el9_6.9.x86_64
flex-2.6.4-9.el9.x86_64
fmt-9.1.0-1.el9.x86_64
gcc-11.5.0-5.el9_5.x86_64
glibc-devel-2.34-168.el9_6.23.x86_64
glibc-headers-2.34-168.el9_6.23.x86_64
gnutls-dane-3.8.3-6.el9_6.2.x86_64
gnutls-utils-3.8.3-6.el9_6.2.x86_64
ipmitool-1.8.18-27.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
kata-containers-3.17.0-4.rhaos4.20.el9.x86_64
kernel-5.14.0-570.49.1.el9_6.x86_64
kernel-core-5.14.0-570.49.1.el9_6.x86_64
kernel-devel-5.14.0-570.49.1.el9_6.x86_64
kernel-headers-5.14.0-570.49.1.el9_6.x86_64
kernel-modules-5.14.0-570.49.1.el9_6.x86_64
kernel-modules-extra-5.14.0-570.49.1.el9_6.x86_64
kernel-rt-core-5.14.0-570.49.1.el9_6.x86_64
kernel-rt-devel-5.14.0-570.49.1.el9_6.x86_64
kernel-rt-kvm-5.14.0-570.49.1.el9_6.x86_64
kernel-rt-modules-5.14.0-570.49.1.el9_6.x86_64
kernel-rt-modules-core-5.14.0-570.49.1.el9_6.x86_64
kernel-rt-modules-extra-5.14.0-570.49.1.el9_6.x86_64
krb5-pkinit-1.21.1-8.el9_6.x86_64
krb5-workstation-1.21.1-8.el9_6.x86_64
ldns-1.7.1-12.el9.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-8.el9_6.x86_64
libknet1-1.28-1.el9.x86_64
libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
libknet1-compress-plugins-all-1.28-1.el9.x86_64
libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
libknet1-crypto-plugins-all-1.28-1.el9.x86_64
libknet1-plugins-all-1.28-1.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libnozzle1-1.28-1.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-12.el9.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-54.0-1.el9.x86_64
libreswan-5.2-1.el9fdp.x86_64
libwsman1-2.6.8-23.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lld-17.0.6-1.el9.x86_64
lld-libs-17.0.6-1.el9.x86_64
llvm-17.0.6-5.el9.x86_64
llvm-libs-17.0.6-5.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-78-2.el9.x86_64
net-snmp-libs-1:5.9.1-17.el9.x86_64
net-snmp-utils-1:5.9.1-17.el9.x86_64
nspr-4.36.0-4.el9_4.x86_64
nss-3.112.0-4.el9_4.x86_64
nss-softokn-3.112.0-4.el9_4.x86_64
nss-softokn-freebl-3.112.0-4.el9_4.x86_64
nss-sysinit-3.112.0-4.el9_4.x86_64
nss-tools-3.112.0-4.el9_4.x86_64
nss-util-3.112.0-4.el9_4.x86_64
openssl-devel-1:3.2.2-6.el9_5.1.x86_64
openvswitch3.5-ipsec-3.5.1-33.el9fdp.x86_64
openwsman-python3-2.6.8-23.el9.x86_64
pacemaker-2.1.9-1.2.el9_6.x86_64
pacemaker-cli-2.1.9-1.2.el9_6.x86_64
pacemaker-cluster-libs-2.1.9-1.2.el9_6.x86_64
pacemaker-libs-2.1.9-1.2.el9_6.x86_64
pacemaker-schemas-2.1.9-1.2.el9_6.noarch
pcp-conf-6.3.7-1.el9_6.x86_64
pcp-libs-6.3.7-1.el9_6.x86_64
pcs-0.11.9-2.el9_6.1.x86_64
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.x86_64
protobuf-3.14.0-16.el9.x86_64
python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-5.el9_6.x86_64
python3-lxml-4.6.5-3.el9.x86_64
python3-openvswitch3.5-3.5.1-33.el9fdp.x86_64
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.x86_64
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.4.2-2.el9_6.2.x86_64
qemu-img-17:9.1.0-15.el9_6.9.x86_64
qemu-kvm-common-17:9.1.0-15.el9_6.9.x86_64
qemu-kvm-core-17:9.1.0-15.el9_6.9.x86_64
redhat-logos-90.5-1.el9_6.1.x86_64
resource-agents-4.10.0-71.el9_6.6.x86_64
ruby-3.0.7-165.el9_5.x86_64
ruby-default-gems-3.0.7-165.el9_5.noarch
ruby-libs-3.0.7-165.el9_5.x86_64
rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
rubygem-bundler-2.2.33-165.el9_5.noarch
rubygem-io-console-0.5.7-165.el9_5.x86_64
rubygem-json-2.5.1-165.el9_5.x86_64
rubygem-psych-3.3.2-165.el9_5.x86_64
rubygem-rdoc-6.3.4.1-165.el9_5.noarch
rubygem-rexml-3.2.5-165.el9_5.noarch
rubygems-3.2.33-165.el9_5.noarch
sbd-1.5.2-1.el9.x86_64
seabios-bin-1.16.3-4.el9.noarch
seavgabios-bin-1.16.3-4.el9.noarch
spdlog-1.13.0-1.rhaos4.14.el9.x86_64
sysstat-12.5.4-9.el9.x86_64
telnet-1:0.17-85.el9.x86_64
usbguard-1.0.0-16.el9.x86_64
usbguard-selinux-1.0.0-16.el9.noarch
virtiofsd-1.13.2-1.el9_6.x86_64
wasmedge-0.14.0-2.rhaos4.20.el9.x86_64
zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250925-0

View changelog in Markdown or change previous release:

Source code for this page located on github