Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.20.24-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  • upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
• Informing jobs
  • aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-ovn-serial-1of2
  • aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-ovn-serial-2of2
  • aws-ovn-single-node-upgrade-4.20-micro Succeeded periodic-ci-openshift-release-main-ci-4.20-e2e-aws-upgrade-ovn-single-node
  • aws-ovn-upgrade-4.20-micro-fips Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-ovn-upgrade-fips
  • azure-ovn-upgrade-4.20-micro Succeeded periodic-ci-openshift-release-main-ci-4.20-e2e-azure-ovn-upgrade
  • driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-driver-toolkit
  • fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.20-fips-payload-scan
  • gcp-ovn-rt-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-main-ci-4.20-upgrade-from-stable-4.19-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.20 Succeeded periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-metal-ipi-ovn-bm
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-metal-ipi-ovn-ipv6
  • microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance
  • microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

• 4.20.23 (changes) - S S S S S
• 4.20.22 (changes) - Failed
• 4.20.21 (changes) - Success
• 4.20.19 (changes) - Success
• 4.20.4 - Success
• 4.20.3 (changes) - Success
• 4.20.2 (changes) - Success
• 4.20.1 (changes) - Success
• 4.20.0 (changes) - Failed
• 4.19.32 (changes) - Success Success
• 4.19.31 (changes) - Failed
• 4.19.30 (changes) - Success
• 4.19.28 (changes) - Success
• 4.19.26 (changes) - Failed
• 4.19.21 (changes) - Success
• 4.19.17 (changes) - Success
• 4.19.16 (changes) - Failed
• 4.19.15 (changes) - Failed
• 4.19.0-0.nightly-2026-05-28-194849 (changes) - Success

Upgrades to:

• 4.21.18 (changes) - Failed

---

Loading changelog, this may take a while ...

Changes from 4.20.4

Created: 2026-05-29 09:58:47 +0000 UTC

Image Digest: sha256:27c93d3b308e9c3694dd7e448d71f61e4e3c033ad8905031736bd1912c1f41fc

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.5 to 1.33.12
• Kubernetes Tests 1.33.4
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20251110-1 to 9.6.20260521-1

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PreconfiguredUDNAddresses (10 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (9 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Removed images

• libvirt-machine-controllers

Rebuilt images without code change

• apiserver-network-proxy git 11b24a2c sha256:6b141d140c7748ba4977375e02e05df770181f67046eacfddbed06b8504fb130
• aws-cloud-controller-manager git bb88da16 sha256:bc51331633e7dac36208a4d920e73e46860346e9eb2e751d7bb7e8e1c98a2515
• aws-cluster-api-controllers git 300439ea sha256:572b2ab8a0a74cc773c0ff48342932031eab6c2981f8c6f93c614b56048bd6c1
• aws-karpenter-provider-aws git b37141b0 sha256:0a3df673b88932dca4e45598f4c2045119e68d3c1f2e7a223c05dec94cf06bd9
• azure-cloud-controller-manager git d469d04e sha256:9f7bf302d74e013a273585be3a8e4651554f4b81449fae8bb05e17d450fe9e0c
• azure-cloud-node-manager git d469d04e sha256:380068d41e38109f7e3eab997ace654c182aa53b8ed492b689bb9a275d1ad7f5
• azure-workload-identity-webhook git 88b18175 sha256:7a83ca67e2ebaacc395ebc92cc2b5923a7cd85b5d891c8a05191b4ee2c69c9d2
• baremetal-cluster-api-controllers git f782ba74 sha256:55d5dff57ac7c9f02682f4f8ed90447dd1d4d4ec96d7fc16bcd7c44a497dfe16
• baremetal-machine-controllers git fb678fec sha256:bd6588f89826373fcfa72bfd8103134ca57800fd1ce3eabda0744bdc0e841f94
• cluster-autoscaler-operator git 147e5a7f sha256:1b04c0c43ef82e9a0f3795f0d6ac369a4b7c2dc5eeb804763cf0b8f34dd37b18
• cluster-bootstrap git 74abc555 sha256:b5dfa24d9c50730f1001482ba094bbdc27a2f8743b1a26ad84ed2d2de6f1d8ef
• cluster-cloud-controller-manager-operator git 276696cc sha256:c4ff88fee719e69bce39d72eef15c1f857fecd2a2af993acf154eb39c1162d21
• cluster-config-operator git 657754e2 sha256:d3f7420b6f4efaa81514ea797d0b1aa400a9dbc9e298d95c24c0c31a4b615f34
• cluster-control-plane-machine-set-operator git 0bbafe24 sha256:63b1ea764604a7c936fb277b8eea1b4b9a11e5a165574ac68911a1cd132ff9ff
• cluster-dns-operator git 82578923 sha256:7e541267fb8e594723dea9a964aab69851fd6e28af4be47d3e93395a8bd3a10b
• cluster-image-registry-operator git b04c7c12 sha256:3581a20473f823993f70b33b1dff825ffe5ef5a66039be0c51683d22b6176806
• cluster-kube-controller-manager-operator git 438c9dba sha256:91aade1f843f2f30d1d639f1583c01d271d32aee454377e4236c7bec1c959bc5
• cluster-kube-storage-version-migrator-operator git 5adc1429 sha256:8a693438634dab8b295f35cef5598a8a1509e23e7db39662ab2f3b5379915603
• cluster-machine-approver git b3c82b2e sha256:ff85822764e1394fde1a5dbb3f8e03be1b80ab52ca0d8510ca726b8aa3b93940
• cluster-openshift-apiserver-operator git 9cfa5679 sha256:2aea701e06319cc9203b88035b6cd7169e727387d4c7d465ef52926a43e69e46
• cluster-openshift-controller-manager-operator git aa455c04 sha256:31406f054e496ecf6865fa320ba226da36c5afb71e634f813e2871cc38e81e83
• cluster-policy-controller git 47c78310 sha256:c61ed2024a2dbed04d2eceb9be1b190012079c23f03820dd7e17f0f5bea34e43
• cluster-samples-operator git b343f70f sha256:f445b4b9f5fd84cf93c03889c22aff37853752f2d74c2dcd0bb1c77f3178174f
• cluster-update-keys git c40e7b9b sha256:6b155fa3b2953a933222e72d5ccb210632995e661f994eec367ea7b221fa3f8e
• configmap-reloader git 2438d7c8 sha256:e497012454f69312801422fb23a9fa5292012567b7f555c663ec695a1c74334f
• container-networking-plugins git 184a9601 sha256:f6e941367a9b9aab665c763f0c6125289c9fb342726a375d4c5dcf2c024f13d5
• containernetworking-plugins-microshift git 184a9601 sha256:5c4367e4bc30d65605f90e96de0c936b1a8605b8fa28ecc9af52ded82cb48bfe
• coredns git 6f39336e sha256:a7d22aac42a08b55da47dcfb53a27fa770850dd1466445ef3f4822c843b61c1f
• csi-external-resizer git c674bea9 sha256:52a2b9b68b89dd33d8e2b3d4cab96fe369e19fc39247d1d82f540fcc4578c0c0
• csi-external-snapshot-metadata git 693a8264 sha256:92b5b11bef8f1ab72457af9d62a1effa43a23e01e6a26294aed75944a718f1fd
• csi-livenessprobe git 1d6d6b27 sha256:717201def51a39f4b2f4dfe77fedbd4a7bcb0a2dfc2f177fc985b76065a65d4c
• csi-node-driver-registrar git 6ce4713c sha256:39a336136b6ad51d0524f1a53ebfb2f6564ca9a9f90184c77eeaedaa07383d26
• egress-router-cni git 5e0f8d1b sha256:f2d9b02cc24fd2d3fa3760d4bd2b2583178e0c6553726a7eb83f377abc70ff55
• gcp-machine-controllers git 01515888 sha256:75202f0a73711f4e8f1d1618495f42ebbcf3e4e977a6ff9d02d2c67d146261b8
• gcp-pd-csi-driver-operator git e0ad050a sha256:0fca7a8971b03faa9503589578dfaf6b8d035c5b2de54f8c47fc8fe1fe09e4fb
• gcp-workload-identity-federation-webhook git b36788ed sha256:f7f2b3512cc8f43677bd02d9f9ed3848c16a0d06dadc9686dc73f21c7d9de582
• ibm-cloud-controller-manager git 36ab30f9 sha256:392624359f6aad40f526c2dd138160887c7c66edcdd2be155ef57deadaef16a3
• ibm-vpc-block-csi-driver-operator git 21f405cc sha256:9ab3729e632cc4543f764989ee4ea84d5e8115f15c7a3fe120dca3671f09fc56
• ibmcloud-cluster-api-controllers git 8b6396a4 sha256:a2ddeb75f767bcd0b8a75497be1eb9ecbc277cdfd3bf0ab1db518533eeed5d46
• ironic-machine-os-downloader git 6c92e542 sha256:e93b1727c4eed8c54df72361e7b5c92e55752eab9b2b1d16b91f3fa55ca69ae0
• ironic-static-ip-manager git fa5b8b8b sha256:23f31e0b463f23df5f4a52f489bcd5de8a159c9094b271289c2e0969199fd807
• kube-rbac-proxy git b9134351 sha256:281a4f96defc7aa220db5af8ea7f3a4ab914e4b932e6edea4c2b02d95fbc5672
• kube-storage-version-migrator git 0f8a4eb8 sha256:56656b25dded7c8a79c1a0f17083881b998c2494138b888f6883e75bb6fdc77e
• multus-admission-controller git fc73c803 sha256:faf3f6e46249d2b292e9d5ad8aeba19e5fed3611ff66b2c36850889a8c789534
• multus-route-override-cni git 391c1b03 sha256:359d8ac75c7f991e7f99ebebb9d5ddafb8a0103e7e60e48f442fb5b7c2b2204d
• multus-whereabouts-ipam-cni git 43c89591 sha256:7fd647c6ea03eaaa474d9b8d327b9d22ee3522dea65e3926c4893f9eaf90438e
• network-interface-bond-cni git dd3c4d0b sha256:f9417ac3d4c9ad52deee403dfcc39a351824b64ba6ff0653e3ae3276327012c4
• network-metrics-daemon git b81340a9 sha256:28a1f4bdf8dc8f869277ac45b446bd77fb1f2831a422e266a45141ff80fefe81
• network-tools git 26d09174 sha256:3e1545cfef59de2c98aabc7803bd25708395c88330007735714b100f1ed6c82a
• nutanix-cloud-controller-manager git b575ef15 sha256:7a3442164fc6cdd199c60fd3f951d4ac4b9b79440177e84ca40d3540f70db5ba
• nutanix-machine-controllers git 3200ddef sha256:bec7a880f5639c59498b08193ce32b0061f1b073b0257ca7de3ba27fec52fdfa
• openshift-controller-manager git d9e543dd sha256:bc70fe192afb7a3518f0bb676f91af7b55d66f4c39e076f66c8d499b805ba6e5
• openshift-state-metrics git b04e2ef0 sha256:736fc91748649d23d2617ae1503588426c6e654072a78800b405916174f13559
• openstack-resource-controller git bf0d2c88 sha256:7964e293e0cb1d60de15bfe3892330a0205462d39d3bb6cad0ad3e27306544fb
• ovirt-csi-driver git 1db726a9 sha256:ce2263955fa69985b744c27595c061d9196046acdd1351e757e5fcd32dc9ed6f
• powervs-cloud-controller-manager git 2424e8dd sha256:2914dc25bacf57f386642a5e8fc5bec6fc522992fa274416157f01309a12bf3a
• powervs-machine-controllers git f011b3c7 sha256:776e0515884a2ce668432ec139d2aaf1bdef188c8d6ac09d96977246f1505a81
• prometheus-alertmanager git 419f2843 sha256:6b35aff2712fc4439757ded0696adc65c8536dcf12f658cb9e9d81a7d52bc841
• prometheus-node-exporter git fa749d65 sha256:31f29e1e603682bf764291974eec6998453d131995af840954622c2a154193fd
• service-ca-operator git 37e0c317 sha256:e53adf5aca87bb4840b588939a8c73ba3a35b28374c6c882b8f10ef5c069e3f4
• thanos git c0951032 sha256:bc192cb3203d66e1dbbb5e4ecdb6f0c747de26ebfc428aeadbbaa03e31616da6
• volume-data-source-validator git 0e61642f sha256:6a41dfcee939bd9e4f938e726f6288c24859d1d7341959130186cb11cb1d9a05
• vsphere-cloud-controller-manager git b93eb64f sha256:fbf47ab6eeda6bf2b8be429e6e82d8133c9d88a5b6b272faf3499c59e7ea45e5

agent-installer-api-server

• OCPBUGS-81880: Mark raw FC/iSCSI multipath members as ineligible #10149
• OCPBUGS-81880: Prefer multipath disk in ABI disk selection #10111
• OCPBUGS-70300: Prevent race in agent-installer kubeconfig generation #8707
• OCPBUGS-65901: Retry incomplete cluster registration in ABI #8429
• OCPBUGS-57606: Updating ose-agent-installer-api-server-container image to be consist… #8399
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-81641: fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2070
• Full changelog

agent-installer-node-agent

• OCPBUGS-57718: Update golang images to 1.24 for OpenShift 4.20 #1194
• Full changelog

agent-installer-ui

• OCPBUGS-85542: Bump msw pkg version to 2.13.5 (#3730) #3730
• OCPBUGS-84606, OCPBUGS-84829, OCPBUGS-84992, OCPBUGS-85008, OCPBUGS-85010, OCPBUGS-85038: Bump axios to ^1.15.1 (#3691) #3691
• Update OWNERS file (#3657) #3657
• Bump happy-dom from 20.0.2 to 20.8.9 (#3526) #3526
• OCPBUGS-77793: bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3582) #3582
• OCPBUGS-77794: upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3546) #3546
• OCPBUGS-83301: bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3584) #3584
• Updating assisted-installer-ui-container image to be consistent with ART for 4.20 (#3458) #3458
• Add support for release branches in PR workflow (#3529) #3529
• remove external platforms field from below sea level UI (#3318) #3318
• Adding TechPreview Budge for Assisted installer and agent (#3296) #3296
• Full changelog

agent-installer-utils

• OCPBUGS-77238: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #224
• OCPBUGS-75868: Increase Konflux build pipeline memory #247
• OCPBUGS-68324: bump github.com/sirupsen/logrus to v1.9.3 #235
• OCPBUGS-69834: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c #208
• OCPBUGS-69830: Update Konflux references #207
• OCPBUGS-67306: Update Konflux release version to 4.20.8 #212
• OCPBUGS-66431: Add Konflux PipelineRun params required by release pipeline #206
• OCPBUGS-66425: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 13cf619 #186
• OCPBUGS-66422: Update Konflux references #185
• OCPBUGS-66406: Update Konflux release version to 4.20.6 #204
• OCPBUGS-65715: Update 4.20 version to 4.20.4 #196
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-80562: Bump google.golang.org/grpc to v1.79.3 #311
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-80667: Bump google.golang.org/grpc to v1.79.3 #540
• OCPBUGS-74918: adds the csi-external-resizer to the image-references #529
• OCPBUGS-72563: deploy prometheus role and binding on hypershift guest #491
• OCPBUGS-65895: allow all-egress for efs operator #473
• OCPBUGS-65686: Bump gophercloud #470
• Full changelog

aws-kms-encryption-provider

• OCPBUGS-80537: Bump google.golang.org/grpc to v1.79.3 #41
• OCPBUGS-78426: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.20 #34
• Full changelog

aws-machine-controllers

• OCPBUGS-72570: Fix reconciler consistency checks in Update and Exists #164
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-74169: Fix GOTOOLCHAIN env var #212
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-80568: Bump google.golang.org/grpc to v1.79.3 #384
• Full changelog

azure-disk-csi-driver

• OCPBUGS-80569: Bump google.golang.org/grpc to v1.79.3 #140
• OCPBUGS-85054: Fix dangling detaches 420 #145
• OCPBUGS-78034: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #128
• Full changelog

azure-file-csi-driver

• OCPBUGS-80572: Bump google.golang.org/grpc to v1.79.3 #128
• Full changelog

azure-kms-encryption-provider

• OCPBUGS-78423: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.20 #28
• Full changelog

azure-machine-controllers

• OCPBUGS-65708: Set updateDomainCount to one when faultDomainCount is one #173
• Full changelog

azure-service-operator

• OCPBUGS-80539: Bump google.golang.org/grpc to v1.79.3 #29
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-79001: [release 4.20] - Allow all instance types in the install config for GCP #10503
• OCPBUGS-78694: [release-4.20]: openstack: Disable LoadBalancer in cloud config when Octavia is unavailable #10401
• OCPBUGS-79665: Use correct Project ID with GCP Shared VPC #10436
• OCPBUGS-80884: [release-4.20] Add c8g* to tested_instance_types_aarch64 #10437
• OCPBUGS-77896: Increase size of /var/ostreecontainer mount #10365
• OCPBUGS-78091: fix wavelength zone name regex #10373
• OCPBUGS-77050: Update the RHCOS 4.20 bootimage metadata to 9.6.20260217-1 #10358
• OCPBUGS-74674: [release-4.20] GCP: skip AI zones #10273
• OCPBUGS-74551: add support for NVIDIA H100 and H200 enabled machine series #10263
• OCPBUGS-66356: Update the RHCOS 4.20 bootimage metadata to 9.6.20260112-0 #10247
• OCPBUGS-73681: pkg/asset/manifests/azure: save cidr blocks #10208
• OCPBUGS-73785: ensure deterministic zone ordering for control plane machines #10219
• OCPBUGS-71212: Increase agent-installer pre-network-manager timeout #10199
• OCPBUGS-65767: Add StandardFXmdsv2Family to azure tested instance type list #10104
• OCPBUGS-66231: Use separate tmpfs for ostree checkout on live ISO #10140
• OCPBUGS-65763: continue to update 02_storage.json using new property storageAccountId #10103
• OCPBUGS-66257: CORS-4249: bump ARO marketplace images #10142
• OCPBUGS-66207, OCPBUGS-66208: Fix console info for interactive agent installer #10136
• Revert “OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511…” #10093
• OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511… #10084
• OCPBUGS-64924: Azure UPI ARM template: use storageAccountId #10069
• OCPBUGS-64595: Remove pending items on gcp no-op #10056
• Full changelog

baremetal-operator

• OCPBUGS-78745: OCPBUGS-78836: PR2774 and PR2793 backports [release-4.20] #470
• Bug OCPBUGS-76546: BMO fails to start servicing despite updates to HFC spec #460
• OCPBUGS-74987: Abort inspection/cleaning before powering off during deletion #453
• OCPBUGS-74084: Require PreprovisioningImage for deprovisioning when cleaning is enabled #446
• OCPBUGS-63538: Create a PreprovisioningImage for servicing if needed #435
• OCPBUGS-69667: Change architecture default to match controller #440
• Full changelog

baremetal-runtimecfg

• OCPBUGS-72567: Fix TNA and TNF dummy ip for ipv6 #379
• OCPBUGS-77170: Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go #384
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-81946: Bump go-jose/go-jose/v4 to v4.1.4 #2274
• OCPBUGS-77170: Install subscription-manager in required images #2209
• OCPBUGS-77495: Makefile: Strip debugging symbols by default #2212
• OCPBUGS-77145: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2207
• OCPBUGS-74969: Fix unit test failure by updating ruby version to 3.3 #2194
• OCPBUGS-74965: Clear defaultNodeSelector to run on any node #2193
• OCPBUGS-66241: Fall back to simpler behavior, if setsid,ps,pkill are not installed #2158
• OCPBUGS-65481: pkg/cli/admin/upgrade: Tighten force warnings #2140
• OCPBUGS-65523: fix(must-gather): do not set node affinity if nodename is set #2142
• Full changelog

cloud-credential-operator

• OCPBUGS-79368: google.golang.org/grpc v1.79.3 #994
• OCPBUGS-78200: Fix infrastructure resource name filtering in watch predicate #989
• OCPBUGS-74546: Resolve nil pointer exception in hasResourceTags #970
• OCPBUGS-65798: ccoctl azure: retry custom role creation on consistency errors #948
• OCPBUGS-63690: ccoctl: use pagination when listing resources in aws #941
• Full changelog

cloud-network-config-controller

• OCPBUGS-64742: Fix capacity calculation #188
• Full changelog

cluster-authentication-operator

• OCPBUGS-81502: Do not return error when an IdP returns 500 during a grant check #866
• OCPBUGS-66315: externaloidc: return errors when node statuses cannot be used to determine oidc state #814
• OCPBUGS-61896: set appropriate rolling update settings #792
• Full changelog

cluster-autoscaler

• OCPBUGS-78690: allow clusterapi provider to skip paused resources #411
• OCPBUGS-77506: Pick upstream commits to Fix VPA recommender concurrent access panic #407
• OCPBUGS-63675: update node info processors to include unschedulable nodes #391
• OCPBUGS-63495: refactor cloud provider options #387
• Full changelog

cluster-baremetal-operator

• OCPBUGS-84376: Fix ironic-proxy service routing for port 6385 #593
• OCPBUGS-81643: Allow ProvisioningCIDR for unmanaged network #585
• OCPBUGS-76340: Explicitly set the ReadOnlyRootFilesystem flag to false #555
• OCPBUGS-77488: Fix NO_PROXY matching for URLs with trailing dots #567
• OCPBUGS-77074: Update kubebuilder tools to more latest version #559
• OCPBUGS-75933: Explicitly set ReadOnlyRootFilesystem to false for machine-os-images so that SCC don’t end up enforcing it to true #552
• OCPBUGS-73916: Fix DNS resolution for metal3 service endpoints by adding trailing dots #548
• OCPBUGS-71203: Mount /etc/pki/ca-trust to machine-os-images & Enable runtime extraction of aarch64 images #543
• Full changelog

cluster-capi-controllers

• OCPBUGS-80577: Bump google.golang.org/grpc to v1.79.3 #289
• OCPBUGS-78375: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #268
• Full changelog

cluster-capi-operator

• NO-JIRA: Allow sustaining engineering to self serve dependency updates #556
• OCPBUGS-80581: Bump google.golang.org/grpc to v1.79.3 #545
• Full changelog

cluster-config-api

• CORENET-6431: network, virt: Graduate PreconfiguredUDNAddresses feature gate #2546
• OCPBUGS-66204: Introduce ClosedClientConnectionPolicy to IngressController API #2609
• OCPBUGS-66135: Add HTTPKeepAliveTimeout to IngressController API #2607
• OCPBUGS-64843: payload-command: remove authentication CR from hypershift payload #2573
• OCPBUGS-64940: Promote BYO OIDC features #2515
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-83507: Fix PDB unhealthyPodEvictionPolicy field name #273
• Full changelog

cluster-etcd-operator

• OCPBUGS-85412: fix(tnf): align Pacemaker kubelet and etcd retry pacing #1616
• OCPBUGS-77313: Wait for revision stability before removing etcd members #1571
• OCPBUGS-78047: Prefer to remove members where they have another healthy machine in the same failure domain index #1564
• OCPBUGS-74624: Add priority field to prevent early shutdown #1508
• OCPBUGS-63677: Backport 1504 1514 release.420 #1516
• Full changelog

cluster-ingress-operator

• OCPBUGS-85130: Add PrometheusRule for Gateway API gathering #1436
• OCPBUGS-84132: set trustBundleName in Istio global values #1420
• NO-JIRA: Add new NID team members to OWNERS #1317
• OCPBUGS-66135: Implement HTTPKeepAliveTimeout tuning option #1312
• OCPBUGS-66204: Implement ClosedClientConnectionPolicy field #1314
• OCPBUGS-65664: IngressOperator not exposing some metrics for degraded… #1305
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-85564: [4.20] operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization #2152
• OCPBUGS-83856: Allow setting the oauthMetadata when auth type is None #2117
• OCPBUGS-79419: : Always set service-account-jwks-uri to LB URL even with custom issuer #2078
• OCPBUGS-77005: scc: restricted-v3: Fix runAsUser range #1948
• OCPBUGS-74229: SCC: allow image volume type for all SCCs #2006
• OCPBUGS-65679: enable resource v1beta2 api if DynamicResourceAllocation is enabled #1929
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-80588: Bump google.golang.org/grpc to v1.79.3 #75
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-83738: add /var/run/kubernetes as emptyDir #642
• CNTRLPLANE-2843: chore: update OWNERS #620
• OCPBUGS-74337: Add OPERATOR_IMAGE_VERSION to recovery container #604
• OCPBUGS-74624: Add priority field to prevent early shutdown #586
• Full changelog

cluster-monitoring-operator

• OCPBUGS-85130: Enable Gateway API telemetry metrics #2920
• OCPBUGS-74490: Include kube_pod_labels in minimal profile #2844
• OCPBUGS-77272: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2835
• OCPBUGS-74623: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2805
• OCPBUGS-67166: Add the collection of MTV migration metrics #2772
• Full changelog

cluster-network-operator

• OCPBUGS-84176: Handle zero-worker HyperShift clusters in daemonset rollout [4.20 backport] #2973
• OCPBUGS-83821: wait for patch port to apply drop garp flows #2966
• OCPBUGS-77148: Add config override for openflow-probe #2918
• OCPBUGS-76349: Remove duplicated openssl parameter #2901
• CORENET-6311, OCPBUGS-74139: Skip running _stackmanager for libreswan 5.3+ #2872
• OCPBUGS-73365: fix(hypershift): use net.JoinHostPort for URL construction #2876
• OCPBUGS-66253: Add kubevirt platform to dual-stack supported platforms #2860
• OCPBUGS-66412: Fix whereabouts-token-watcher DaemonSet improvements #2850
• OCPBUGS-66164: [release-4.20] CORENET-6465: Remove unneeded logging config from managed ovn-kubernetes #2838
• OCPBUGS-66162: [release-4.20] CORENET-6488: Preserve custom resource requests on ovn-control-plane pods #2835
• OCPBUGS-46422: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [4.20] #2827
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-66364: Add support for lscpu_check TuneD built-in #1443
• OCPBUGS-85372: e2e: Add irqbalance StartLimitBurst >= 100 #1513
• OCPBUGS-78247: workloadhints: use IsVM to skip BM-only tests #1482
• OCPBUGS-70349: Remove CgroupModeV1 reference from the code #1437
• OCPBUGS-62721: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1404
• OCPBUGS-63751: PPC: ghw: filter out namespaces dir #1421
• OCPBUGS-64832: e2e:hugepages: changing tests to use hugepages-allocator tool #1427
• OCPBUGS-64588: e2e:llc: skip test when no BM worker is found #1422
• Full changelog

cluster-olm-operator

• OCPBUGS-80596: Bump google.golang.org/grpc to v1.79.3 #198
• Full changelog

cluster-storage-operator

• OCPBUGS-86121: add Azure Disk CSI driver SA name to CredentialsRequest #702
• OCPBUGS-79532: volume-data-source-validator should run on master nodes #688
• OCPBUGS-75912: add vsphere permissions for checking if users is authorized to see metrics #663
• OCPBUGS-70343: volume-data-source-validator must use IfNotPresent image pull policy #653
• Full changelog

cluster-version-operator

• OCPBUGS-79463: Implement mTLS authentication and authorization for CVO metrics endpoint #1374
• OCPBUGS-74177: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1303
• OCPBUGS-64828: lib/resourcemerge: Add support for hostUsers flag #1259
• OCPBUGS-70180: [release-4.20] OCPBUGS-70180: Unify capitalization when comparing architectures for available updates #1281
• Full changelog

console

• OCPBUGS-77127: [release-4.20] CVE-2026-26996 Bump minimatch library #16272
• NO-JIRA: enable multi-architecture yarn builds #16418
• OCPBUGS-83819: Fix false positive scheduler degradation caused by user workloads #16308
• OCPBUGS-85042: Remove PII from events #16402
• OCPBUGS-81575: Add robots.txt policy to console #16243
• OCPBUGS-78439: Backport OCPBUGS-61536: vsphere settings #16141
• OCPBUGS-83495: remove dev to admin links as dev monitoring views are enabled #16173
• OCPBUGS-82012: Fix VolumeSnapshot and VolumeSnapshotContent tables sorting #16261
• OCPBUGS-77037: Fix QueryBrowser import to use SDK path to avoid circular dependency #16222
• OCPBUGS-83573: Performance improvements + AsyncComponent refactor #16300
• OCPBUGS-83420: Fix resource log dropdown TypeError #16282
• OCPBUGS-81678: Fix useOperatorCatalogCategories hook. #16251
• OCPBUGS-81322: Migrate InstallPlan components table to PatternFly Table #16217
• OCPBUGS-81439: Fix TypeError in OLS code import to console #16221
• OCPBUGS-81495, OCPBUGS-81496: OLM prompts for GCP Workload Identity parameters during Kiali Operato… #16231
• OCPBUGS-78295: Fix editing secrets with mixed text and binary data #16132
• OCPBUGS-78366: Clean up old session cookies to prevent accumulation #16136
• OCPBUGS-78839, OCPBUGS-79465, OCPBUGS-79466: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #16192
• OCPBUGS-76951: “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) #16029
• OCPBUGS-77951: Fix infinite recursion in project access form #16117
• CONSOLE-5011: migrate to yarn berry #16070
• OCPBUGS-76543: Use Actions button instead of kebab menu on Subscription details page #16018
• OCPBUGS-75880: Fix referenceFor parameter in SubscriptionDetailsPage #15987
• OCPBUGS-74696: Bump lodash to latest #15963
• OCPBUGS-74158: Do not resolve disabled catalog type extensions #15931
• OCPBUGS-72417: make cloudCredentials optional so operators load when … #15901
• OCPBUGS-67225: Remove unwanted semicolon from Serverless Channel and Broker list #15834
• OCPBUGS-69917: There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations #15869
• OCPBUGS-73775: make cloudCredentials optional so operators load when … #15918
• OCPBUGS-69732: Fix Helm chart installation with CA/TLS certificates #15862
• OCPBUGS-70332: Visiting Group Detail Page > RoleBindings will show error #15887
• OCPBUGS-67136: Spread operand details across 2 col #15858
• OCPBUGS-66427: Update client initialization in checkPackageManifestHandler #15822
• OCPBUGS-67221: Disallowed Pipelines-plugin Pipelines navigation section #15833
• OCPBUGS-66248: The number of Quick Starts item is wrong #15797
• OCPBUGS-66206: Sync YAML editor modal settings #15787
• OCPBUGS-65900: Fix unnecessary rerenders with pod-connect #15758
• OCPBUGS-61785: Add validation and type guards on healthHandler calls to prevent errors #15500
• OCPBUGS-65793: OpenShift Console can only show user name instead of full name as the display name #15743
• OCPBUGS-65949: Add SDK-webpack 4.20 changelogs #15768
• NO-JIRA: Add SDK 4.20 changelogs #15765
• OCPBUGS-65761: Preserve query string in perspective switch + remove dev console folks from reviewers #15740
• OCPBUGS-64861, OCPBUGS-64863: Upgrade Helm to 3.18.5 #15705
• OCPBUGS-64702: Lack Chinese/Japanese/Korean translations for ‘On/Off’ switch button on editor setting modal of yaml page. #15683
• OCPBUGS-63125: use tenancy path for project scoped status card #15608
• OCPBUGS-61330: fix namespace path generation for non-namespaced resources #15498
• OCPBUGS-62953: Automatically redirect all-namespaces catalog to default namespace #15640
• Full changelog

console-operator

• OCPBUGS-84254: Redeploy console pods upon cert rotation #1142
• OCPBUGS-77771: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #1122
• OCPBUGS-76267: Fix PDB blocking node drains during cluster upgrades + update donwloads deployment #1105
• OCPBUGS-69960: Reset StorageVersionMigrationDegraded condition #1085
• OCPBUGS-69654: Update path for browsing catalogs and operators in quickstarts. #1083
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-74890: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.33 into release-4.20 #368
• OCPBUGS-64811: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.33 into release-4.20 #355
• Full changelog

csi-driver-nfs

• OCPBUGS-80610: CVE-2026-33186: bump google.golang.org/grpc v1.79.3 #177
• Full changelog

csi-external-attacher

• OCPBUGS-80611: Bump google.golang.org/grpc to v1.79.3 #103
• Full changelog

csi-external-provisioner

• OCPBUGS-80612: Bump google.golang.org/grpc to v1.79.3 #128
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-80615, OCPBUGS-80618: Bump google.golang.org/grpc to v1.79.3 #209
• Full changelog

docker-builder

• OCPBUGS-66991: bump buildah to 1.39.7 to fix CVE-2025-52881 #496
• OCPBUGS-64857: BuildConfig inline Dockerfile fails with heredoc syntax #483
• Full changelog

docker-registry

• OCPBUGS-68327: update logrus to v1.9.1 #462
• Full changelog

driver-toolkit

• OCPBUGS-78783: Support ubi minimal base image #187
• Full changelog

etcd

• OCPBUGS-70151: 4.20 rebase 3.5.26 #358
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-83720: Fix OSD ILB bug #109
• OCPBUGS-77152: Fix ose gcp cloud controller manager hermetic #97
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-80628: Bump google.golang.org/grpc to v1.79.3 #288
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-80632: Bump google.golang.org/grpc to v1.79.3 in release 4.20 #103
• Full changelog

haproxy-router

• OCPBUGS-78435: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #750
• OCPBUGS-78432: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #749
• OCPBUGS-79529: Lower verbosity for parseIPList empty list logging #753
• OCPBUGS-66204: Add option abortonclose to HAProxy configuration template #695
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-85501: Bump Kubernetes v1.33.12 to release-4.20 #2666
• “OCPBUGS-83609: Bump to k8s v1.33.11” #2648
• OCPBUGS-78993: Bump v1.33.10 to release-4.20 #2643
• NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS #2638
• OCPBUGS-77476: Rebase v1.33.9 to release-4.20 #2614
• OCPBUGS-76517: Bump 1.33.8 #2595
• OCPBUGS-74977: UPSTREAM: 136595: raise kubelet CSI init backoff to cover ~140s DNS delays #2581
• OCPBUGS-61843: UPSTREAM: 131850: cpumanager: uncorecache alignment for odd integer cpus #2498
• OCPBUGS-65551: Bump 1.33.6 #2518
• OCPBUGS-46422: Remove patch/update from ServiceCIDR API conformance test #2466
• Full changelog

hypershift

• OCPBUGS-83711: fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8271
• OCPBUGS-85622: fix CVE-2026-33186 by updating grpc-go #8517
• OCPBUGS-77109: Add UserAgent telemetry to CPO Azure SDK clients #8374
• OCPBUGS-83663: fix(cpo): reconcile ClusterIP private router service for ARO HCP #8140
• OCPBUGS-82069: OCPBUGS-81670: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8177
• OCPBUGS-78474: Fix deadlock when changing release image during initial provisioning #7953
• OCPBUGS-81746: Honor AWS AMI override in NodePool token generation #8183
• OCPBUGS-80950: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8083
• OCPBUGS-78979: fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #8023
• CNTRLPLANE-3008: Azure web identity webhook 4.20 #7998
• OCPBUGS-78741: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7976
• CNTRLPLANE-2814: feat(aro): Swift support #7885
• OCPBUGS-76992: fix kubevirt, use 100.66.0.0/16 for join subnet #7733
• OCPBUGS-78305: Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7890
• OCPBUGS-76324: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7660
• OCPBUGS-77366: Fix ignition-server pod restarts #7842
• OCPBUGS-75931: [release-4.20] fix(cpo): Correct route labeling logic for HCP router infrastructure #7642
• OCPBUGS-74105: Fix CVE-2025-58183 #7546
• CNTRLPLANE-2680: Add support for setting max expiration duration for KAS service account tokens #7707
• OCPBUGS-74775: feat(cpo): check components are available before setting HostedCluster available #7616
• OCPBUGS-72409: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7421
• OCPBUGS-73365: fix(cno): use brackets only for IPv6 in server URL #7461
• OCPBUGS-72405: Fix Konflux EC voilation, update deprecated base … #7444
• OCPBUGS-66409: test: Fix control plane components rollout failure when NetworkType is not OVNKubernetes #7337
• CNTRLPLANE-2205: fix(hcco): allow for ARN reuse across components #7383
• OCPBUGS-69378: test: remove network-dependent unit tests for image metadata #7391
• OCPBUGS-66397: fix(kas): apply LoadBalancerSourceRanges only for LoadBalancer service type #7336
• NO-JIRA: Update expected digest for busybox:latest in TestGetDigest #7350
• CNTRLPLANE-1710: feat(globalps): security enhancements on GlobalPullSecret feature #7234
• OCPBUGS-65576: add hypershift-no-cgo to the latest operator conta… #7229
• CORENET-6484: Restart ovnkube-control-plane pods when restart-date annotation is set #7190
• OCPBUGS-63509: fix(ingress): add LoadBalancerSourceRanges support for external router service #7098
• OCPBUGS-64848: feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift #7204
• OCPBUGS-61774: fix(capi-provider): use single replica deployment for aws and azure #6834
• CNTRLPLANE-1908: control-plane-operator-4-20 Konflux pipelines #7216
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-80638: Bump google.golang.org/grpc to v1.79.3 #141
• OCPBUGS-77205: [release-4.20] standardize build paths #120
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-81317: bump vpc go sdk #89
• NO-JIRA: Modernize test infrastructure to align with other MAPI providers #85
• Full changelog

insights-operator

• OCPBUGS-86235: [release-4.20] Add OpenTelemetry CR Gatherer #1293
• OCPBUGS-82970: kubeletconfig gathere #1270
• OCPBUGS-80641: Bump google.golang.org/grpc to v1.79.3 (Revamp #1261) #1267
• OCPBUGS-76961: Extends the time for the extractor liveness probe #1231
• OCPBUGS-74902: set Progressing condition on cluster update #1219
• OCPBUGS-75114: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1222
• OCPBUGS-64107: [release-4.20] Patch for GO-2025-4014 #1215
• OCPBUGS-66062: Add filtering to add other possible pod status to QEMU gatherer #1185
• OCPBUGS-64800: QEMU logs are not gathered if there are pending status virt-launcher pods #1174
• OCPBUGS-65660: [bugfix] The archive’s records may include files whose names are out of bounds #1177
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• OCPBUGS-77566: remove dnf cache from the container images #66
• Full changelog

ironic

• OCPBUGS-84854: Bump pyasn to 0.5.1-5 #824
• OCPBUGS-82299: Bump sushy hash to include Supermicro ARS-111GL-NHR fix #841
• OCPBUGS-74405: Update sushy to include DGX B200 credentials fix #820
• OCPBUGS-74117: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #792
• OCPBUGS-77264: fix for minimal builds #800
• OCPBUGS-76539: Update ironic hash for 4.20 with heartbeat inspection fix #788
• Bug OCPBUGS-76547: Bump 4.20 ironic-image to include firmware update fixes #787
• OCPBUGS-69786: Bump eventlet version #756
• METAL-1695: OKD: install Ironic from the OpenShift fork #740
• OKD-304: Fix python dependencies for OKD #731
• OCPBUGS-64850: Handle HTTP 400 and 409 race condition in Redfish power operations #720
• Full changelog

ironic-agent

• OCPBUGS-77264: fixes for minimal builds #244
• OCPBUGS-69777: Bump eventlet version #228
• OCPBUGS-66934: Filter out more USB network devices #221
• OCPBUGS-66084, OKD-295: Fix broken OKD ironic-agent-image #216
• OCPBUGS-65519: Include Test advertised ip reachability before assigning it #212
• Full changelog

keepalived-ipfailover

• OCPBUGS-78076: openshift-enterprise-base: remove subscription-manager, dbus, systemd #227
• Full changelog

kube-metrics-server

• OCPBUGS-80542: Bump google.golang.org/grpc to v1.79.3 #62
• Full changelog

kube-state-metrics

• OCPBUGS-80646: Bump google.golang.org/grpc to v1.79.3 #139
• OCPBUGS-72589: fix: only close existing channels #128
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-74100: [4.20] sync upstream 2026-01-27 #62
• Full changelog

kubevirt-csi-driver

• OCPBUGS-79064: Add annotation-based fallback for infra VM node ID resolution #84
• OCPBUGS-78371: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.20 #78
• Full changelog

machine-api-operator

• OCPBUGS-83394: Remove cluster-api-provider-libvirt references #1487
• OCPBUGS-78424: [release-4.20] Use resource group when generating default Azure image #1475
• Full changelog

machine-config-operator

• OCPBUGS-86134: use --delete-if-present for karg removal #6063
• OCPBUGS-86313: Apply password only if changes exist #6075
• OCPBUGS-86032: Add terminationMessagePolicy to build pod containers #6057
• OCPBUGS-85078: Fix ssh and password rollbacks #6002
• OCPBUGS-85336: Fix units rollback if update failure #6022
• OCPBUGS-85069: Fix encapsulated IGN version #6001
• OCPBUGS-84962: Update AMI Whitelist #5991
• OCPBUGS-84890: improve JSON unmarshalling for secret decoding #5916
• OCPBUGS-84151: Allow enablement of systemd units with existing files #5873
• OCPBUGS-83867: Update AMI Whitelist #5866
• OCPBUGS-83393: Use HA leader election defaults for MCO on SNO #5848
• OCPBUGS-80947: Skip boot image updates until cluster is stable #5812
• OCPBUGS-79370: Re-order logger setting to eliminate race condition #5791
• [release 4.20] OCPBUGS-77252: Calculate machine counts in MCP status from node properties #5692
• OCPBUGS-79577: Update AMI Whitelist #5806
• OCPBUGS-79371: set default-timeout-stop to 200s globally #5792
• OCPBUGS-78049: install/0000_80_machine-config_04_kube_rbac_proxy_config: Consistent terminal newline #5753
• OCPBUGS-77883: Fix failure domain matching during vsphere boot image updates #5745
• OCPBUGS-77950: Update AMI Whitelist #5748
• OCPBUGS-77665: Update AMI Whitelist #5731
• OCPBUGS-77064: reduce MCO image size #5673
• OCPBUGS-77472: Clean up vsphere login error logging #5715
• OCPBUGS-77369: Remove MCD liveness probe #5707
• OCPBUGS-77181: mcd_config_drift not working properly #5684
• OCPBUGS-76921: Prevent unnecessary systemd unit disable #5664
• OCPBUGS-77008: Machine-config controller should not log about non-existent pull-secret changes #5668
• OCPBUGS-74433: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5649
• OCPBUGS-76339: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5631
• OCPBUGS-76361: Update AMI script and list #5641
• OCPBUGS-74146: enable nodeip-configuration for platform external #5580
• OCPBUGS-74298: Fix up bootstrap-e2e #5590
• OCPBUGS-73884: pkg/controller/container-runtime-config: admin_ack handling for 4.20-to-4.21 OCI mirror requirement #5558
• OCPBUGS-73776: Fix timeout during configMap cleanup #5557
• OCPBUGS-74081: Enable existing units without content #5565
• OCPBUGS-66260: Set -fin timeouts in HAProxy config #5459
• OCPBUGS-70201: ctrcfg: set increase ulimits when upgrading from 4.20 to 4.21 #5516
• OCPBUGS-69706: Fix keepalived SIGTERM handling #5507
• OCPBUGS-70322: Skip boot image updates if arch annotation is not found #5525
• OCPBUGS-70349: Remove the dead code of setting the operator status for cgroupv1 based clusters #5446
• OCPBUGS-69666: Remove log exposing kubeconfig #5505
• OCPBUGS-69444: MCP is not correctly degraded when a pivotError happens #5503
• OCPBUGS-65545, OCPBUGS-67007: cherry pick to few fixes that needed for missing services and configuration #5480
• OCPBUGS-67137: Fix cleanup in TestInstallRPMAndCheckMCDMetrics to decrease risk of test failures due to interference #5478
• OKD-294: Migrate runtime from runc to crun on an upgrade for OKD #5467
• OCPBUGS-65898: fixes systemd unit creation for empty units #5437
• OCPBUGS-64822: block upgrades for conflict non-default ClusterImagePolicy resources #5414
• OCPBUGS-65777: Enforce OCP 4.20 and earlier cluster to have AutoSizingReserved disabled by default #5387
• OCPBUGS-65781: Remove –mount directives #5425
• OCPBUGS-65556: [release-4.20] Backport: Add delays to reduce TestOSBuildController failures #5396
• OCPBUGS-64822: remove check for conflicting ClusterImagePolicy in syncUpgradeableStatus #5413
• OCPBUGS-65509: e2e gcp ocl PR backport #5407
• OCPBUGS-64822: Implement upgrade blocking for conflicting ClusterImagePolicy named “openshift” #5397
• Full changelog

machine-image-customization-controller

• OCPBUGS-81296: Return error when network data Secret lacks nmstate key #172
• OCPBUGS-77496: Clean up dnf cache to reduce container image size #165
• Full changelog

machine-os-images

• OCPBUGS-85480: Force rebuild for OCP 4.20 #86
• OCPBUGS-71203: Backport multi arch fixes #77
• Full changelog

metallb-frr

• OCPBUGS-65516: [release-4.20] Dockerfile: unpin FRR rpm #111
• Full changelog

monitoring-plugin

• OCPBUGS-79456: immutable bump: fix for CVE-2026-29063 [4.20] #951
• OU-1371: reset queries when namespace changes in dev perspective #945
• OU-1369: prevent namespace and project desync #941
• OCPBUGS-83495: [release-4.20] feat: re enable dev console views #855
• OCPBUGS-83302: [release-4.20] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #888
• OCPBUGS-82440: fix: re encode params when redirecting from graph to query-browser #872
• OCPBUGS-77406: bump koa #866
• OCPBUGS-78359: fix for CVE-2025-69873 #846
• OCPBUGS-78425: Updating monitoring-plugin-container image to be consistent with ART for 4.20 #843
• OU-1062: [release-4.20] feat: mark alert menu active for incidents tab #826
• OCPBUGS-76581: [release-4.20] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via proto Key in mergeConfig #796
• NO-JIRA: [release-4.20] e2e-monitoring fixing loop on legacy dashboard #830
• NO-JIRA: [release-4.20] simplify dockerfile by removing cachito dependencies #807
• revert #780 #792
• OCPBUGS-76581: [release-4.20] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via proto Key in mergeConfig [openshift-4.20] #780
• OCPBUGS-76613: [release-4.20] fix: update vulnerable dependencies #766
• OCPBUGS-73842: fix: update qs vulnerable dependency #733
• NO-JIRA: [release-4.20] fix: remove unnecessary package.lock #732
• OU-1146: remove random multiplication #704
• OU-1135: [release-4.20] monitoring testing backport #700
• OCPBUGS-69725: [release-4.20] fix: upgrade node-forge vulnerable dependency #701
• OU-1130: Merge main to release 4.20 #683
• OCPBUGS-66389: Time range and Refresh interval dropdown button lack of unique identifier #668
• OCPBUGS-66240: configure max TLS version only when specified #664
• OCPBUGS-65947: add missing conversion units #654
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-73737: Fix server url in kubeconfig #273
• OCPBUGS-73888: update ci-operator.yaml #274
• Full changelog

multus-networkpolicy

• OCPBUGS-77548: Clean up dnf cache #102
• Full changelog

must-gather

• OCPBUGS-85488: Collect object size with the object count #545
• Full changelog

networking-console-plugin

• OCPBUGS-81615: Fix CVE-2026-CVE-2026-4800 in lodash #399
• OCPBUGS-83386: Fix CVE-2026-34043 in serialize-javascript #394
• OCPBUGS-84124: Migrate to npm #387
• OCPBUGS-77226: Fix NAD creation using default namespace instead of selected one #350
• CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #342
• CNV-76277: Fix name generator with unprofessional names #317
• CNV-72230: fix networking links #308
• OCPBUGS-66335: fix flickerying in synced editor #304
• CNV-72771: fix null error #300
• CNV-71965: replacing the broken link to VirtualMachine network docs #298
• Full changelog

oauth-apiserver

• NO-JIRA: (chore): update OWNERS file #168
• Full changelog

oauth-proxy

• OCPBUGS-74132: test/e2e - do not use ambiguous container image short names #345
• Full changelog

oauth-server

• OCPBUGS-77500: groupmapper: avoid mutating original group users slice when removing user #214
• OCPBUGS-68330: go.mod: bump logrus from v1.9.0 to v1.9.3 to fix CVE-2025-65637 #209
• Full changelog

oc-mirror

• OCPBUGS-84064: Remove status field from CatalogSource, ClusterCatalog… #1392
• OCPBUGS-85204: update integration test Dockerfile #1393
• OCPBUGS-77416: Fix registriesd “unknown userid” failure for arbitrary UIDs #1360
• OCPBUGS-76630: Fix reg config detection for explicit false values #1350
• OCPBUGS-76949: fix conversion issue for catalog #1353
• OCPBUGS-75007: [release-4.20] fix duplicated channel bug in filtered catalogs #1347
• OCPBUGS-64647: fix: return only requested version #1306
• OCPBUGS-65787: Remove empty status field from generated IDMS/ITMS files #1313
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-80662, OCPBUGS-80663: Bump google.golang.org/grpc to v1.79.3 #727
• OCPBUGS-81956, OCPBUGS-81957: Bump github.com/go-jose/go-jose/v4@4.1.1 to 4.1.4 #719
• Full changelog

openshift-apiserver

• OCPBUGS-65848: Add ValidatingAdmissionPolicy and check for omissions next time. #577
• OCPBUGS-61982: pkg/image: conditionally parse raw image manifest #559
• OCPBUGS-65814: update pkg/image/OWNERS #575
• Full changelog

openstack-cluster-api-controllers

• UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.20 #392
• OCPBUGS-64814: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.20 #381
• OCPBUGS-64814: Fix verify step #389
• Full changelog

openstack-machine-api-provider

• OCPBUGS-69645: Don’t record event for every reconcile #145
• OCPBUGS-76790: Fix make test #157
• OCPBUGS-74226: Revendor CAPO #148
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-80670, OCPBUGS-80671, OCPBUGS-80672: Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.20] #1293
• OCPBUGS-81958, OCPBUGS-81959, OCPBUGS-81960: Bump github.com/go-jose/go-jose/v4 to v4.1.4 #1295
• OCPBUGS-79681: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1267
• OCPBUGS-81292: add jiazha to approvers #1269
• OCPBUGS-77958: Update NetworkPolicy egress for HyperShift custom API ports #1253
• OCPBUGS-77230: Remove the collect-profiles info from the microshift kustomization file #1236
• OCPBUGS-76335: Remove the collect-profiles job #1223
• OCPBUGS-62014: rorfs for cacheless lacks write access to /tmp/ to generate cache #1170
• Full changelog

operator-marketplace

• OCPBUGS-77582: Update NetworkPolicy egress to support HyperShift custom API ports #730
• OCPBUGS-73876: Update default catalog polling interval to 4h (240m) #708
• OCPBUGS-65680: enforce client side auth requirement for metrics endpoint #688
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-68331: Bump github.com/sirupsen/logrus to v1.9.3 #145
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-81484: CUDN: cleanup NADs in terminating namespaces without pods #3102
• OCPBUGS-74395: kubevirt, Use pod network subnet gateway IP for DHCP router option #3070
• OCPBUGS-82115: egressip: Skip bridge configuration for secondary network IPs #3120
• OCPBUGS-84054: [release 4.20] virt: fix SyncVirtualMachines deleting UDN DHCP options during startup #3152
• OCPBUGS-78777: Fix NAD Controller syncAll for networkID upgrade from node->NAD #3093
• OCPBUGS-81477: node: fix serviceUpdateNotNeeded nil pointer comparison #3099
• OCPBUGS-79537: EgressFirewall: Use exponential backoff to refresh IP addresses for DNS names #3088
• OCPBUGS-77148: Minimize ACLs by combining ipBlocks into single ACL #2981
• OCPBUGS-77357: Clear stale conntrack UDP entries for nodePorts #3012
• OCPBUGS-77081, OCPBUGS-77094: [release-4.20] combined backport PR for 2 escalations #2985
• OCPBUGS-73788: Fix service flows for BGP on IPV6 #2934
• OCPBUGS-74268: release-4.20 fix(localnet, ipamless): Prevent LSP deletion on sync #2941
• OCPBUGS-66049: Fix conntrack reconciliation to use service port instead of endpoint port #2874
• OCPBUGS-64836: back-port IP & MAC conflict detection #2827
• OCPBUGS-65514: [4.20] status manager: remove managedFields for deleted zone upon zone deletion #2855
• OCPBUGS-65951: [release-4.20]: Fix linter issues, add missing cheryy-pick bits of #2844 #2866
• OCPBUGS-65618: [release-4.20] OCP4: 4.18.22 EgressIP Failover does not succeed - extended downtime and no reassignment between egress-capable peers #2865
• OCPBUGS-65605: add lint target to run golanci natively #2856
• OCPBUGS-64697: [release-4.20] Referencing pod named ports within a service results in bad DNAT rules containing tcp/0 target port #2844
• OCPBUGS-63686: Fix stale EIP assignments during failover and controller restart #2835
• Full changelog

powervs-block-csi-driver

• OCPBUGS-80675: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #128
• OCPBUGS-82873: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #122
• OCPBUGS-75818: Mitigate CVE-2025-61726 by bumping golang to 1.24.13 #113
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-80676: Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 #108
• OCPBUGS-75820: Mitigate CVE-2025-61726 by bumping golang to 1.24.13 #105
• Full changelog

prom-label-proxy

• OCPBUGS-84068: update to v0.12.1 #393
• Full changelog

prometheus

• OCPBUGS-86251: fix: TLS client cert rotation when no CA is configured #315
• OCPBUGS-78582: [release-4.20] chore(kubernetes): deduplicate warning logs from the API #299
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-77296: backport upstream fix to reconcile resources with inconsistent status #367
• OCPBUGS-77190: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #362
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1920
• OCPBUGS-82524: post-process: Remove workaround for openvswitch additional group #1928
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

route-controller-manager

• OCPBUGS-80554: Bump google.golang.org/grpc to v1.79.3 #83
• OCPBUGS-76957: filter ingress namespace on UnmanagedRoutes metric #74
• Full changelog

telemeter

• OCPBUGS-80691: Bump google.golang.org/grpc to v1.79.3 #590
• OCPBUGS-81814: [release-1.20] Fix CVE-2026-34986 #594
• Full changelog

tests

• : OCPBUGS-77313: Add test for CPMS OnDelete strategy with full master replacement #30882
• OCPBUGS-78193: Exclude disruption during NoExecuteTaintManager serial tests #30858
• OCPBUGS-83447: Fix PinnedImages test to respect node taints #30970
• : run resource request/limit check early #30888
• OCPBUGS-78025: Skip oauth test for external control plane topology #30848
• OCPBUGS-78084: Update optimized builds test to use rpm -qa instead of dnf #30861
• OCPBUGS-78084: Allow test to tolerate running on minimal images #30853
• OCPBUGS-77824: add the missing namespace from managed openshift #30837
• OCPBUGS-77776: Update MCN tests to better handle condition transitions through the “Unknown” state #30829
• OCPBUGS-72395: Unrevert TLS tests with fixes #30668
• OCPBUGS-72412, OCPBUGS-72413: only run Netpol two at a time #30666
• OCPBUGS-69686: BeforeEach was indirectly called in DetermineReleasePayloadImage #30620
• OCPBUGS-66072: [release-4.20] net(virt) remove virtctl if not correctly retrieved #30538
• OCPBUGS-64836: back-port IP & MAC conflict detection e2e tests #30414
• OCPBUGS-66963: Fix MachineConfigNode test in two-node fencing clusters #30540
• OCPBUGS-66365: update watch request limits for marketplace-operator #30569
• OCPBUGS-66979: Revert “OCPNODE-3912: Add a test for NodeSizing default change to OCP 4.20” #30582
• OCPNODE-3912: Add a test for NodeSizing default change to OCP 4.20 #30467
• OCPBUGS-64777: [release-4.20] Add e2e tests for storage network policy #30468
• OCPBUGS-46422: Add test that the ServiceCIDR API is blocked [4.20] #30434
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-80698: Bump google.golang.org/grpc to v1.79.3 #109
• OCPBUGS-78436: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #92
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-80701: Bump google.golang.org/grpc to v1.79.3 #174
• Full changelog

vsphere-csi-driver-operator

• ”[release-4.20] OCPBUGS-84891: Fix escaping password” #340
• Full changelog

vsphere-problem-detector

• OCPBUGS-74901: fix concurrent map writes #208
• OCPBUGS-65795: Fixed logic for vSphere compute cluster permission #197
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release: 4.20.234.20.224.20.214.20.204.20.194.20.184.20.174.20.164.20.154.20.144.20.134.20.124.20.114.20.104.20.94.20.84.20.64.20.54.20.44.20.34.20.24.20.14.20.04.20.0-rc.34.20.0-rc.24.20.0-rc.14.20.0-rc.04.19.324.19.314.19.304.19.294.19.284.19.274.19.264.19.254.19.244.19.234.19.224.19.214.19.204.19.194.19.184.19.174.19.164.19.154.19.144.19.134.19.124.19.114.19.104.19.94.19.84.19.74.19.64.19.54.19.44.19.34.19.24.19.14.19.04.19.0-rc.54.19.0-rc.44.19.0-rc.34.19.0-rc.24.19.0-rc.14.19.0-rc.04.18.434.18.424.18.414.18.404.18.394.18.384.18.374.18.364.18.354.18.344.18.334.18.324.18.314.18.304.18.294.18.284.18.274.18.264.18.254.18.244.18.234.18.224.18.214.18.204.18.194.18.184.18.174.18.164.18.154.18.144.18.134.18.124.18.114.18.104.18.94.18.84.18.74.18.64.18.54.18.44.18.34.18.24.18.14.18.04.18.0-rc.104.18.0-rc.94.18.0-rc.84.18.0-rc.74.18.0-rc.64.18.0-rc.54.18.0-rc.44.18.0-rc.34.18.0-rc.24.18.0-rc.14.18.0-rc.04.17.544.17.534.17.524.17.514.17.504.17.494.17.484.17.474.17.464.17.454.17.444.17.434.17.424.17.414.17.404.17.394.17.384.17.374.17.364.17.354.17.344.17.334.17.324.17.314.17.304.17.294.17.284.17.274.17.264.17.254.17.244.17.234.17.224.17.214.17.204.17.194.17.184.17.174.17.164.17.154.17.144.17.134.17.124.17.114.17.104.17.94.17.84.17.74.17.64.17.54.17.44.17.34.17.24.17.14.17.04.17.0-rc.64.17.0-rc.54.17.0-rc.44.17.0-rc.34.17.0-rc.24.17.0-rc.14.17.0-rc.04.16.634.16.624.16.614.16.604.16.594.16.584.16.574.16.564.16.554.16.544.16.534.16.524.16.514.16.504.16.494.16.484.16.474.16.464.16.454.16.444.16.434.16.424.16.414.16.404.16.394.16.384.16.374.16.364.16.354.16.344.16.334.16.324.16.314.16.304.16.294.16.284.16.274.16.264.16.254.16.244.16.234.16.224.16.214.16.204.16.194.16.184.16.174.16.164.16.154.16.144.16.134.16.124.16.114.16.104.16.94.16.84.16.74.16.64.16.54.16.44.16.34.16.24.16.14.16.04.16.0-rc.94.16.0-rc.84.16.0-rc.74.16.0-rc.64.16.0-rc.54.16.0-rc.44.16.0-rc.34.16.0-rc.24.16.0-rc.14.16.0-rc.04.15.644.15.634.15.624.15.614.15.604.15.594.15.584.15.574.15.564.15.554.15.544.15.534.15.524.15.514.15.504.15.494.15.484.15.474.15.464.15.454.15.444.15.434.15.424.15.414.15.404.15.394.15.384.15.374.15.364.15.354.15.344.15.334.15.324.15.314.15.304.15.294.15.284.15.274.15.264.15.254.15.244.15.234.15.224.15.214.15.204.15.194.15.184.15.174.15.164.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.664.14.654.14.644.14.634.14.624.14.614.14.604.14.594.14.584.14.574.14.564.14.554.14.544.14.534.14.524.14.514.14.504.14.494.14.484.14.474.14.464.14.454.14.444.14.434.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.674.13.664.13.654.13.644.13.634.13.624.13.614.13.604.13.594.13.584.13.574.13.564.13.554.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.914.12.904.12.894.12.884.12.874.12.864.12.854.12.844.12.834.12.824.12.814.12.804.12.794.12.784.12.774.12.764.12.754.12.744.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───5.0.0-0.nightly-2026-05-29-1942335.0.0-0.nightly-2026-05-29-1228485.0.0-0.nightly-2026-05-29-0649065.0.0-0.nightly-2026-05-28-2233545.0.0-0.nightly-2026-05-28-1600245.0.0-0.nightly-2026-05-28-1002095.0.0-0.nightly-2026-05-28-0236405.0.0-0.nightly-2026-05-27-2055435.0.0-0.nightly-2026-05-27-1344095.0.0-0.nightly-2026-05-27-0556075.0.0-0.nightly-2026-05-26-2346365.0.0-0.nightly-2026-05-26-1747045.0.0-0.nightly-2026-05-26-1120085.0.0-0.nightly-2026-05-26-0507195.0.0-0.nightly-2026-05-25-2118525.0.0-0.nightly-2026-05-25-1359475.0.0-0.nightly-2026-05-25-0745055.0.0-0.nightly-2026-05-25-0103425.0.0-0.nightly-2026-05-24-1915495.0.0-0.nightly-2026-05-24-1335105.0.0-0.nightly-2026-05-24-0739385.0.0-0.nightly-2026-05-24-0156445.0.0-0.nightly-2026-05-23-1939285.0.0-0.nightly-2026-05-23-1329115.0.0-0.nightly-2026-05-23-0424145.0.0-0.nightly-2026-05-22-2238125.0.0-0.nightly-2026-05-22-1645335.0.0-0.nightly-2026-05-22-1008275.0.0-0.nightly-2026-05-22-0410095.0.0-0.nightly-2026-05-21-2228285.0.0-0.nightly-2026-05-20-0435165.0.0-0.nightly-2026-05-19-2224375.0.0-0.nightly-2026-05-19-1529005.0.0-0.nightly-2026-05-18-1946385.0.0-0.nightly-2026-05-18-1355165.0.0-0.nightly-2026-05-18-010848───5.0.0-0.ci-quay-2026-05-14-0459275.0.0-0.ci-quay-2026-05-13-2259275.0.0-0.ci-quay-2026-05-13-1659265.0.0-0.ci-quay-2026-05-13-0836075.0.0-0.ci-quay-2026-05-13-023607───5.0.0-0.ci-2026-05-29-1834445.0.0-0.ci-2026-05-29-1234445.0.0-0.ci-2026-05-29-0634445.0.0-0.ci-2026-05-29-0034445.0.0-0.ci-2026-05-28-1834445.0.0-0.ci-2026-05-28-1234435.0.0-0.ci-2026-05-28-0634435.0.0-0.ci-2026-05-28-0034435.0.0-0.ci-2026-05-27-1834435.0.0-0.ci-2026-05-27-1234435.0.0-0.ci-2026-05-27-0634435.0.0-0.ci-2026-05-27-003443───4.23.0-0.nightly-2026-05-29-1304414.23.0-0.nightly-2026-05-29-0009334.23.0-0.nightly-2026-05-28-1219354.23.0-0.nightly-2026-05-28-0021524.23.0-0.nightly-2026-05-27-1555084.23.0-0.nightly-2026-05-27-1024534.23.0-0.nightly-2026-05-26-1845034.23.0-0.nightly-2026-05-25-1316054.23.0-0.nightly-2026-05-25-0725414.23.0-0.nightly-2026-05-24-1853004.23.0-0.nightly-2026-05-23-1457154.23.0-0.nightly-2026-05-23-0405254.23.0-0.nightly-2026-05-22-1301204.23.0-0.nightly-2026-05-22-0637524.23.0-0.nightly-2026-05-21-2155134.23.0-0.nightly-2026-05-21-0631434.23.0-0.nightly-2026-05-20-1703434.23.0-0.nightly-2026-05-20-0357374.23.0-0.nightly-2026-05-19-1847124.23.0-0.nightly-2026-05-19-0817514.23.0-0.nightly-2026-05-18-2122254.23.0-0.nightly-2026-05-18-0734294.23.0-0.nightly-2026-05-17-1855244.23.0-0.nightly-2026-05-17-1110264.23.0-0.nightly-2026-05-17-0458304.23.0-0.nightly-2026-05-16-1656004.23.0-0.nightly-2026-05-16-003309───4.23.0-0.ci-2026-05-29-2340264.23.0-0.ci-2026-05-29-1234564.23.0-0.ci-2026-05-29-0127264.23.0-0.ci-2026-05-28-1556454.23.0-0.ci-2026-05-28-0956454.23.0-0.ci-2026-05-28-0049184.23.0-0.ci-2026-05-27-1613194.23.0-0.ci-2026-05-27-064307───4.22.0-0.nightly-2026-05-28-1115104.22.0-0.nightly-2026-05-27-0414274.22.0-0.nightly-2026-05-26-2019294.22.0-0.nightly-2026-05-26-1409474.22.0-0.nightly-2026-05-26-0729474.22.0-0.nightly-2026-05-26-0138164.22.0-0.nightly-2026-05-25-2000094.22.0-0.nightly-2026-05-25-1409244.22.0-0.nightly-2026-05-25-0833514.22.0-0.nightly-2026-05-25-0147494.22.0-0.nightly-2026-05-24-1832034.22.0-0.nightly-2026-05-24-1027184.22.0-0.nightly-2026-05-24-0425094.22.0-0.nightly-2026-05-23-2115494.22.0-0.nightly-2026-05-23-1231574.22.0-0.nightly-2026-05-23-0449594.22.0-0.nightly-2026-05-22-2254434.22.0-0.nightly-2026-05-22-1454154.22.0-0.nightly-2026-05-22-0912074.22.0-0.nightly-2026-05-22-0325474.22.0-0.nightly-2026-05-21-2052504.22.0-0.nightly-2026-05-21-1441294.22.0-0.nightly-2026-05-21-0351314.22.0-0.nightly-2026-05-20-1807394.22.0-0.nightly-2026-05-20-0825264.22.0-0.nightly-2026-05-20-0208254.22.0-0.nightly-2026-05-19-1822274.22.0-0.nightly-2026-05-19-1133384.22.0-0.nightly-2026-05-19-0521514.22.0-0.nightly-2026-05-18-130120───4.22.0-0.ci-2026-05-29-1931384.22.0-0.ci-2026-05-29-1331384.22.0-0.ci-2026-05-29-0731384.22.0-0.ci-2026-05-29-0131384.22.0-0.ci-2026-05-28-1931384.22.0-0.ci-2026-05-28-1331384.22.0-0.ci-2026-05-28-0713244.22.0-0.ci-2026-05-27-2051444.22.0-0.ci-2026-05-27-1451444.22.0-0.ci-2026-05-26-145008───4.21.0-0.nightly-2026-05-29-0022424.21.0-0.nightly-2026-05-28-1648244.21.0-0.nightly-2026-05-28-1102484.21.0-0.nightly-2026-05-28-0331434.21.0-0.nightly-2026-05-27-1940244.21.0-0.nightly-2026-05-27-0938204.21.0-0.nightly-2026-05-27-0042304.21.0-0.nightly-2026-05-26-0009064.21.0-0.nightly-2026-05-25-0743314.21.0-0.nightly-2026-05-24-1634444.21.0-0.nightly-2026-05-24-0204024.21.0-0.nightly-2026-05-23-1651084.21.0-0.nightly-2026-05-22-2325394.21.0-0.nightly-2026-05-22-0553274.21.0-0.nightly-2026-05-21-2030054.21.0-0.nightly-2026-05-20-1344564.21.0-0.nightly-2026-05-20-0248014.21.0-0.nightly-2026-05-19-1011434.21.0-0.nightly-2026-05-18-174015───4.21.0-0.ci-2026-05-29-2038104.21.0-0.ci-2026-05-29-1141294.21.0-0.ci-2026-05-28-2255044.21.0-0.ci-2026-05-28-1512094.21.0-0.ci-2026-05-28-0608574.21.0-0.ci-2026-05-27-2106444.21.0-0.ci-2026-05-27-150644───4.20.0-0.nightly-2026-05-29-0137084.20.0-0.nightly-2026-05-28-1606274.20.0-0.nightly-2026-05-28-0633504.20.0-0.nightly-2026-05-27-1838094.20.0-0.nightly-2026-05-27-1355334.20.0-0.nightly-2026-05-27-0458024.20.0-0.nightly-2026-05-26-2002274.20.0-0.nightly-2026-05-26-1035164.20.0-0.nightly-2026-05-26-0223464.20.0-0.nightly-2026-05-25-2051374.20.0-0.nightly-2026-05-25-1148284.20.0-0.nightly-2026-05-25-0327304.20.0-0.nightly-2026-05-24-1920444.20.0-0.nightly-2026-05-24-0635084.20.0-0.nightly-2026-05-23-2156524.20.0-0.nightly-2026-05-23-1727254.20.0-0.nightly-2026-05-23-1210594.20.0-0.nightly-2026-05-23-0706584.20.0-0.nightly-2026-05-22-2207154.20.0-0.nightly-2026-05-22-1400534.20.0-0.nightly-2026-05-22-0336594.20.0-0.nightly-2026-05-21-1830354.20.0-0.nightly-2026-05-21-0140124.20.0-0.nightly-2026-05-20-0727224.20.0-0.nightly-2026-05-20-0252084.20.0-0.nightly-2026-05-19-1847064.20.0-0.nightly-2026-05-19-1048294.20.0-0.nightly-2025-05-26-181128───4.20.0-0.ci-2026-05-29-1835194.20.0-0.ci-2026-05-29-1139534.20.0-0.ci-2026-05-28-2215334.20.0-0.ci-2026-05-28-1615334.20.0-0.ci-2026-05-28-1015334.20.0-0.ci-2026-05-28-0123094.20.0-0.ci-2026-05-27-1622524.20.0-0.ci-2026-05-26-153001───4.19.0-0.nightly-2026-05-28-1948494.19.0-0.nightly-2026-05-28-1158094.19.0-0.nightly-2026-05-28-0540394.19.0-0.nightly-2026-05-27-2232324.19.0-0.nightly-2026-05-27-1715114.19.0-0.nightly-2026-05-27-0825434.19.0-0.nightly-2026-05-27-0405554.19.0-0.nightly-2026-05-26-2225204.19.0-0.nightly-2026-05-26-1350064.19.0-0.nightly-2026-05-26-0936014.19.0-0.nightly-2026-05-26-0055424.19.0-0.nightly-2026-05-25-1822124.19.0-0.nightly-2026-05-25-1115294.19.0-0.nightly-2026-05-25-0538394.19.0-0.nightly-2026-05-24-0554034.19.0-0.nightly-2026-05-23-1157294.19.0-0.nightly-2026-05-23-0302164.19.0-0.nightly-2026-05-22-1647384.19.0-0.nightly-2026-05-22-0904244.19.0-0.nightly-2026-05-21-0702284.19.0-0.nightly-2026-05-20-1822174.19.0-0.nightly-2026-05-19-0614494.19.0-0.nightly-2026-05-18-224121───4.19.0-0.ci-2026-05-29-1822004.19.0-0.ci-2026-05-29-1222004.19.0-0.ci-2026-05-28-2202274.19.0-0.ci-2026-05-28-1602274.19.0-0.ci-2026-05-28-1002274.19.0-0.ci-2026-05-28-0402274.19.0-0.ci-2026-05-27-185036───4.18.0-0.nightly-2026-05-28-1302194.18.0-0.nightly-2026-05-28-0752114.18.0-0.nightly-2026-05-28-0139164.18.0-0.nightly-2026-05-27-1828414.18.0-0.nightly-2026-05-27-1213384.18.0-0.nightly-2026-05-27-0435204.18.0-0.nightly-2026-05-26-1717044.18.0-0.nightly-2026-05-26-1303004.18.0-0.nightly-2026-05-26-0443274.18.0-0.nightly-2026-05-25-2348254.18.0-0.nightly-2026-05-25-1948204.18.0-0.nightly-2026-05-25-1548204.18.0-0.nightly-2026-05-25-1039334.18.0-0.nightly-2026-05-25-0425464.18.0-0.nightly-2026-05-24-2129044.18.0-0.nightly-2026-05-24-1330354.18.0-0.nightly-2026-05-23-1841514.18.0-0.nightly-2026-05-23-0959394.18.0-0.nightly-2026-05-23-0557004.18.0-0.nightly-2026-05-22-1722334.18.0-0.nightly-2026-05-22-0903584.18.0-0.nightly-2026-05-22-0440564.18.0-0.nightly-2026-05-20-2206374.18.0-0.nightly-2026-05-20-0138174.18.0-0.nightly-2026-05-19-1540414.18.0-0.nightly-2026-05-19-1131174.18.0-0.nightly-2026-05-19-0726344.18.0-0.nightly-2026-05-19-0325034.18.0-0.nightly-2026-05-18-2319574.18.0-0.nightly-2026-05-18-152102───4.18.0-0.ci-2026-05-29-1900084.18.0-0.ci-2026-05-29-1135574.18.0-0.ci-2026-05-28-1839084.18.0-0.ci-2026-05-28-1227204.18.0-0.ci-2026-05-27-2225054.18.0-0.ci-2026-05-27-1625054.18.0-0.ci-2026-05-26-1728334.18.0-0.ci-2026-05-26-0942314.18.0-0.ci-2026-05-25-155523───4.17.0-0.nightly-2026-05-29-1523374.17.0-0.nightly-2026-05-29-1042584.17.0-0.nightly-2026-05-27-1949524.17.0-0.nightly-2026-05-27-1151134.17.0-0.nightly-2026-05-27-0415224.17.0-0.nightly-2026-05-26-1825564.17.0-0.nightly-2026-05-26-0344574.17.0-0.nightly-2026-05-25-1149394.17.0-0.nightly-2026-05-24-1146354.17.0-0.nightly-2026-05-23-2002084.17.0-0.nightly-2026-05-23-1146474.17.0-0.nightly-2026-05-23-0534374.17.0-0.nightly-2026-05-22-2130374.17.0-0.nightly-2026-05-22-1730374.17.0-0.nightly-2026-05-22-1058344.17.0-0.nightly-2026-05-21-2308464.17.0-0.nightly-2026-05-21-1058584.17.0-0.nightly-2026-05-20-0043184.17.0-0.nightly-2026-05-19-1932244.17.0-0.nightly-2026-05-19-034207───4.17.0-0.ci-2026-05-29-2324044.17.0-0.ci-2026-05-29-1724044.17.0-0.ci-2026-05-29-1043024.17.0-0.ci-2026-05-28-2104504.17.0-0.ci-2026-05-28-1504504.17.0-0.ci-2026-05-27-1853254.17.0-0.ci-2026-05-25-2216034.17.0-0.ci-2026-05-25-1408294.17.0-0.ci-2026-05-23-1832004.17.0-0.ci-2026-05-23-1039044.17.0-0.ci-2026-05-22-105839───4.16.0-0.nightly-2026-05-28-1525224.16.0-0.nightly-2026-05-28-0524414.16.0-0.nightly-2026-05-27-2308564.16.0-0.nightly-2026-05-27-1657124.16.0-0.nightly-2026-05-27-0819384.16.0-0.nightly-2026-05-26-1246574.16.0-0.nightly-2026-05-26-0454204.16.0-0.nightly-2026-05-25-2017054.16.0-0.nightly-2026-05-24-2039064.16.0-0.nightly-2026-05-23-2049514.16.0-0.nightly-2026-05-21-1355354.16.0-0.nightly-2026-05-20-2058554.16.0-0.nightly-2026-05-20-1125474.16.0-0.nightly-2026-05-18-203055───4.16.0-0.ci-2026-05-29-1916354.16.0-0.ci-2026-05-29-1100504.16.0-0.ci-2026-05-28-2251544.16.0-0.ci-2026-05-28-1504484.16.0-0.ci-2026-05-28-0056224.16.0-0.ci-2026-05-27-1856224.16.0-0.ci-2026-05-26-1106164.16.0-0.ci-2026-05-25-2139124.16.0-0.ci-2026-05-25-0816284.16.0-0.ci-2026-05-23-1923044.16.0-0.ci-2026-05-23-121055───4.15.0-0.nightly-2026-05-29-1519004.15.0-0.nightly-2026-05-29-0013174.15.0-0.nightly-2026-05-28-1258354.15.0-0.nightly-2026-05-28-0546414.15.0-0.nightly-2026-05-27-1700264.15.0-0.nightly-2026-05-26-0943534.15.0-0.nightly-2026-05-25-2138164.15.0-0.nightly-2026-05-23-134338───4.15.0-0.ci-2026-05-29-1820474.15.0-0.ci-2026-05-29-1217534.15.0-0.ci-2026-05-28-2105024.15.0-0.ci-2026-05-28-1505024.15.0-0.ci-2026-05-28-0831564.15.0-0.ci-2026-05-21-1818054.15.0-0.ci-2026-05-16-1841474.15.0-0.ci-2026-05-16-0808034.15.0-0.ci-2026-05-12-0314434.15.0-0.ci-2026-05-07-183540───4.14.0-0.nightly-2026-05-28-1232314.14.0-0.nightly-2026-05-28-0821084.14.0-0.nightly-2026-05-27-2220144.14.0-0.nightly-2026-05-25-1532284.14.0-0.nightly-2026-05-25-064148───4.14.0-0.ci-2026-05-29-1907274.14.0-0.ci-2026-05-29-1228224.14.0-0.ci-2026-05-29-0351514.14.0-0.ci-2026-05-28-1504544.14.0-0.ci-2026-05-27-2348524.14.0-0.ci-2026-05-27-1748524.14.0-0.ci-2026-03-13-0845444.14.0-0.ci-2026-03-09-0901194.14.0-0.ci-2026-03-07-1946594.14.0-0.ci-2026-03-07-0913514.14.0-0.ci-2026-03-04-212137───4.13.0-0.nightly-2026-05-29-2309004.13.0-0.nightly-2026-05-29-1321564.13.0-0.nightly-2026-05-27-1538444.13.0-0.nightly-2026-05-27-0929314.13.0-0.nightly-2026-05-26-1632524.13.0-0.nightly-2026-05-26-071708───4.13.0-0.ci-2026-05-29-1220444.13.0-0.ci-2026-05-28-2105004.13.0-0.ci-2026-05-28-1505004.13.0-0.ci-2026-05-27-1917564.13.0-0.ci-2026-05-26-1849254.13.0-0.ci-2026-05-26-0717084.13.0-0.ci-2026-05-25-0808414.13.0-0.ci-2026-05-24-1359424.13.0-0.ci-2026-05-24-071411───4.12.0-0.nightly-2026-05-29-2249304.12.0-0.nightly-2026-05-29-1303554.12.0-0.nightly-2026-05-28-0640064.12.0-0.nightly-2026-05-27-2302114.12.0-0.nightly-2026-05-27-1414134.12.0-0.nightly-2026-05-26-1858504.12.0-0.nightly-2026-05-26-071145───4.12.0-0.ci-2026-05-29-0008074.12.0-0.ci-2026-05-28-1334494.12.0-0.ci-2026-05-28-0321434.12.0-0.ci-2026-05-27-1532504.12.0-0.ci-2026-05-27-0932504.12.0-0.ci-2026-05-27-0332504.12.0-0.ci-2026-05-26-2132504.12.0-0.ci-2026-05-26-1532504.12.0-0.ci-2026-05-26-0932504.12.0-0.ci-2026-05-25-2351304.12.0-0.ci-2026-05-25-1253354.12.0-0.ci-2026-05-25-065335───4.11.0-0.nightly-2025-08-30-0110584.11.0-0.nightly-2025-08-27-2007484.11.0-0.nightly-2025-08-26-2039164.11.0-0.nightly-2025-08-21-0105404.11.0-0.nightly-2025-08-14-204255───4.11.0-0.ci-2026-02-05-1836444.11.0-0.ci-2026-02-03-1141494.11.0-0.ci-2026-02-03-0506094.11.0-0.ci-2026-02-02-2306094.11.0-0.ci-2026-01-30-1622184.11.0-0.ci-2025-11-26-0737454.11.0-0.ci-2025-09-22-2122234.11.0-0.ci-2025-09-22-1522234.11.0-0.ci-2025-09-12-1707384.11.0-0.ci-2025-09-05-032851───4.22.0-ec.54.22.0-ec.44.22.0-ec.34.22.0-ec.24.22.0-ec.14.22.0-ec.0───5.0.0-ec.25.0.0-ec.15.0.0-ec.0

Source code for this page located on github