5.0.0-ec.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:5.0.0-ec.3-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-dev-preview-5-e2e-aws-ovn-upgrade
- upgrade-minor Pending periodic-ci-openshift-release-main-dev-preview-5-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-serial-2of2
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview-serial-1of3
- aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview-serial-2of3
- aws-ovn-techpreview-serial-3of3 Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview-serial-3of3
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-5.0-fips-payload-scan
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Loading changelog, this may take a while ...

Changes from 5.0.0-ec.0

Created: 2026-06-12 13:10:47 +0000 UTC

Image Digest: sha256:b5ad6b4bb5efbd9b9d88bd42182e85388742b4441a2ff4301c4f5aa8176d5d29

Components

Kubectl upgraded from 1.34.1 to 1.35.2
Kubernetes upgraded from 1.35.2 to 1.35.3
Kubernetes Tests upgraded from 1.34.1 to 1.35.1
Red Hat Enterprise Linux CoreOS upgraded from 9.8.20260314-0 to 10.2.20260521-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ConsolePluginContentSecurityPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DRAPartitionableDevices (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HighlyAvailableArbiter (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
KMSEncryptionProvider (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
UserNamespacesPodSecurityStandards (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
UserNamespacesSupport (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
DualReplica (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
EVPN (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
EventTTL (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
GatewayAPIWithoutOLM (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
MutatingAdmissionPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
VSphereHostVMGroupZonal (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
NewOLMOwnSingleNamespace (0 tests)	Disabled	Disabled (Changed)	Disabled	Enabled	Disabled	Disabled (Changed)	Disabled	Enabled
ConfidentialCluster (0 tests)			Enabled (New)	Enabled (New)
MutableTopology (0 tests)				Enabled (New)
NetworkObservabilityInstall (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
NewOLMConfigAPI (0 tests)				Enabled (New)				Enabled (New)
NoOverlayMode (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
OLMLifecycleAndCompatibility (0 tests)				Enabled (New)				Enabled (New)
TLSAdherence (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
TLSGroupPreferences (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
VSphereMultiVCenterDay2 (0 tests)			Enabled (New)	Enabled (New)

New images

aws-node-termination-handler git e4ff2aae sha256:a95bb8906b9cf1a3026e047a4dc64c37302957068f9ff6817c5adf37c2c3b9bb

Removed images

cluster-kube-cluster-api-operator

Rebuilt images without code change

aws-karpenter-provider-aws git f0be9c72 sha256:37639ca24f231ad9e19a37db4f0816aeeadaa890a22f66774673155983953023
aws-pod-identity-webhook git 82088287 sha256:e089b66504705e36489d5b2d3ef8efcdc0c83148353c82d8519eadaf526481b1
cluster-update-keys git 3b5c59cc sha256:e71e38d4e6a42c2f05d7707c8828bdfbd566e62609d7c0cad120c838610b806f
configmap-reloader git 94e41c4c sha256:cd92fe9b3ceac8518c7611af0364ceef65c8e6cb7564a0f7d481fe434a03de30
csi-external-attacher git 98b1f4ac sha256:5d02fc6f03646dd04044132ec61e2955e177e47a62ef70968106fdde051ee51f
csi-external-resizer git 4e74a4aa sha256:85a22e8ee60a190de3a259d449810135e067c12d16af2f042c730cfaee8523ab
csi-external-snapshot-metadata git 76523185 sha256:43357a55afac865e2dd7655441963f464f294520fac0a06e543021bc36fa010d
csi-livenessprobe git 4d5e959a sha256:a26e1c193607787c136af6e183bbe810bda8e74762e18675c067860994f64244
csi-node-driver-registrar git cf174b30 sha256:9183a1a1c51c99a82f7aff98c5be09e047e35108b94253f81e2b7056aa9bbe76
gcp-workload-identity-federation-webhook git d7675f31 sha256:83103d96320ec8e0d619dd4aee7bd03a5c3ae042b3b2ae25953a14193aa3ae42
ironic-machine-os-downloader git 9953d2b7 sha256:748d0824a48328d7179dcdeea7ba71081aa5787f447e3fdf56f6cab333a97d40
ironic-static-ip-manager git a379d09f sha256:5600190a72577f90b2a21514a24828c10bae802da9a52749f60b0f71f5e9cdfa
kube-metrics-server git 38c16c46 sha256:af68ac68e816af2f7899f05b8f69d7133f3b466bfce79f21a67034d6fc2865a3
kube-storage-version-migrator git 72835e43 sha256:673d3ed71d1266b2a802d9f1c565e0af0c3b945aa270bca6de5516f549c53ae2
kubevirt-cloud-controller-manager git 76dd5a6f sha256:1779e2e7da891eacb4f2f6930b7a3ef27b5ec3fbdb5a63a953f23e50439adc6e
multus-route-override-cni git 08af4127 sha256:42a6b1a776688687cfbb8da32b20614143967a8c435ccde81be44d5a811c3bb4
multus-whereabouts-ipam-cni git d691040e sha256:b654e2ad86dafbfca7ce09a8c89715e79fee5795155324cfbf49e0807784a7fa
network-metrics-daemon git 5b233ea1 sha256:f6bfa7b3923faca81957a82c9bc1a1d765ec2884b80a7530115aae54f8bbb813
openshift-state-metrics git e71e0996 sha256:6f093aa1d2284a84a0745ed3cc397b7c19eba69ba022ca7d15f0a2bf32663bdb
volume-data-source-validator git 8e176cec sha256:fca70775354f9ee1aa2c8bc186a64b1ff95e0cbff06854d1e66dee1abac098d1

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.18, 4.22, 4.20, 4.13 #10436
MGMT-22787: Add enhancement doc to limit inventory size #10410
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.21 #10427
MGMT-24397: Add OCP test version builder & PoC #10321
MGMT-23738: Flaky test: “Move Agent to another infraenv” fails with Kubernetes conflict error #10319
NO-ISSUE: [master] Bump OCP versions: 4.16 #10423
MGMT-19732: Add ntp_sources field for exclusive NTP configuration #10408
MGMT-22370: Add exponential backoff to agent image pull #10337
MGMT-24243: Add option for a delay when applying static network config on minimal ISO #10373
NO-ISSUE: [master] Bump OCP versions: 4.19, 4.22 #10402
NO-ISSUE: add Assisted-by commit trailer convention to CLAUDE.md #10400
NO-ISSUE: [master] Bump OCP versions: 4.21, 5.0 #10392
MGMT-21836: Allow external platform with non-standard HA control plane #10286
MGMT-23230: Add MachineConfig for AMD GPU kernel module blacklist #9920
MGMT-24457: Add MI350P PCI device IDs to NFD NodeFeatureRule #10388
MGMT-24393: Assisted Service IPv6 checks fails comparative #10340
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.18 #10383
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22 #10348
NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 #10354
NO-ISSUE: Fix resource leak and inconsistency in manifest download #10322
MGMT-21834: deprecate supported-platforms endpoint #10122
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19, 4.18, 4.21, 4.20, 4.16 #10342
NO-ISSUE: fix typo: ‘occured’ -> ‘occurred’ in main.go error wraps #10316
NO-ISSUE: increase the timout waiting for assisted-image-service #10327
MGMT-20634: Revert mac-identifier and global DNS workarounds as RHEL-91250 and RHEL-72440 resolved #10318
ACM-33836: CVE-2026-35469 bump github.com/moby/spdystream #10314
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.13, 4.16, 4.17 #10296
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19 #10287
MGMT-19930: upgrade PostgreSQL stack to pgx v5 and ocm-sdk-go v0.1.499 #10230
NO-ISSUE: [master] Bump OCP versions: 4.21 #10284
MGMT-24236: Exclude post-installation hosts from pending-user-action timeout #10266
MGMT-24138: Order network by bootstrap host #10257
NO-ISSUE: Remove unused RegisterAddHostsOCPCluster functions #10265
NO-ISSUE: [master] Bump OCP versions: 4.16, 5.0, 4.22 #10272
MGMT-24119: Correct the namespace to install Loki Operator as “openshift-operators-redhat” instead of “openshift-loki” #10209
MGMT-23755: Validate & trim MCS certificates when adding to ignition override #10262
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.19 #10263
MGMT-23680: CVE-2026-32285 Bump github.com/buger/jsonparser to v1.1.2 #10240
NO-ISSUE: Update operator bundle channel to backplane-5.0 #10215
MGMT-24115: allow empty image checksum/url in getChecksumAndURL #10246
MGMT-23971: Add a timeout for installing-pending-user-action #10202
NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #10237
MGMT-23802: Fix manifest format in log bundles #10121
MGMT-23861: Fix oci detection for day2 clusters #10231
NO-ISSUE: [master] Bump OCP versions: 4.22 #10220
ACM-33186: Revert Renovate configuration for Hive updates #10203
MGMT-23553: Automate events table bloat cleanup #10140
MGMT-23665: fixing CVE-2026-33186 #10173
NO-ISSUE: Allow restoring soft deleted hosts #10185
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22, 4.18 #10201
NO-ISSUE: Bump go modules and linters #10181
MGMT-23861: Revert MGMT-22385 for oci iscsi day2 #10170
ACM-32996: Missing nil check in BMACReconciler causes controller panic #10164
MGMT-23920: 4.22 SNO doesn’t support 4 cpu cores node #10153
NO-ISSUE: add shay23bra to owners #10163
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.19 #10162
NO-ISSUE: Remove urlAuth from credentials endpoint #10161
MCO-2223: Add osImageStream install-config overrides #10156
NO-ISSUE: [master] Bump OCP versions: 4.21 #10152
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.18, 4.20 #10146
OCPBUGS-79576: Mark raw FC/iSCSI multipath members as ineligible #10142
OCPBUGS-83401: Fix IRI patcher feature check #10141
MGMT-23227: Skip host operator validation for day2 clusters #10029
ACM-32735: Add better API docs to CRDs #10124
MGMT-23548: Ensure tests w/ gomock controllers call Finish() #10024
MGMT-22849: Remove the nmconnection that the openshift-installer writes for the bootstrap. #10086
NO-ISSUE: Detect missing PostgreSQL client in development #10119
NO-ISSUE: Add assisted-service-writing-unit-tests agent skill #10123
MGMT-23451: Lower SNO vCPU min to 4 instead of 8 for assisted for OCP 4.22 and above #10040
MGMT-23141: Cluster creation returns SQL error rather than API error #10113
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 #10120
MGMT-23340: upgrade assisted-service postgresql from 13 to 15 #10096
NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock #10082
OCPBUGS-79576: Prefer multipath disk in ABI disk selection #10091
NO-ISSUE: BMAC: replace per-step Update calls with deferred Patch #10095
MGMT-22517: Change amd gpu operator namespace to openshift-amd-gpu #10007
MGMT-23228: Update NFD config for AMD Instinct GPU detection #9918
MGMT-23599: implement cluster and host validations for Kube API mode #10044
MGMT-23253: Reconcile stuck day2 agent status by checking spoke cluster #10087
NO-ISSUE: clarify error when interface in bond missing #10022
MGMT-23060: Make InfraEnv CpuArchitecture immutable after creation #9999
MGMT-23625: Remove pinned image version for nfd operator #10045
MGMT-23231: Replace AcceleratorProfile with HardwareProfile #9919
MGMT-23674: Remove controller-runtime dependency from api module #10071
MGMT-23650: Disable image policy in assisted service operator deployment #10070
MGMT-23300: Add missing permission for host reclaim pod #9934
MGMT-22939: Fix cache key to get mustgather image #9940
OCPBUGS-79470: Fix multi-document YAML parsing for NMStateConfig #10053
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.19, 4.21, 4.22 #10054
AGENT-1426: Add localhost mirror only when missing in IRI patcher #10028
MGMT-23446: TNA none platform on 4.19 (block for 4.21 and lower) #10013
MGMT-23045: toggle metal3 integration #9933
OCPBUGS-78989: Gate customDeploy on PreprovisioningImage having correct ISO #10032
MGMT-23339: Add url to release image comparison for Kube API versions #10030
MGMT-23550: Add feature usage for new CNI types #10027
NO-ISSUE: add skipper skill #10014
MGMT-23432: add third parties CNI support to KUBE API mode #10015
NO-ISSUE: [master] Bump OCP versions: 4.21 #10023
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Refresh RPM lockfiles #2160
MGMT-23784: CVE-2026-34986 Bump github.com/go-jose/go-jose/v3 to v3.0.5 using replace directive #2121
NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #2119
ACM-33186: Revert Renovate configuration for Hive updates #2107
NO-ISSUE: upgrade go.opentelemetry.io/otel/sdk to … #2097
MGMT-23789: CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #2081
NO-ISSUE: Refresh RPM lockfiles #2069
MGMT-23545: Mount pull secret token as a file #2053
MGMT-23191: Ensure MCO configs are present before rebooting the bootstrap node #2039
MGMT-23664: CVE-2026-33186 Bump google.golang.org/grpc to v1.79.3 through indirect dependency conversion #2058
OCPBUGS-70213: fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2056
Full changelog

agent-installer-node-agent

NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 #1461
NO-ISSUE: Upgrade linter #1453
NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #1431
ACM-31642: fix CVE-2026-33186 #1417
OCPBUGS-63472: add –copy-network when manual network config is detected #1374
MGMT-23790: CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #1404
NO-ISSUE: Refactor flag Parsing to avoid multiple calls #1401
NO-ISSUE: Refresh RPM lockfiles #1389
MGMT-23300: Ensure /boot dir has enough space during reclaim #1316
MGMT-23517: Bump go modules #1373
Full changelog

agent-installer-ui

OCPBUGS-72598: Custom manifests are broken in local assisted UI (#3766) #3766
OCPBUGS-85310: Static ip prefill for ove below the sea (#3733) #3733
MGMT-24099: UI redirects to Custom Manifest page before host discovery when cluster is OCI platform (#3739) #3739
chore(deps): update konflux references (#3762) #3762
MGMT-24304: On disconnected environment no Openshift version is set by default on standalone cluster details page and no version is shown in the dropdown till Show all available are shown (#3723) #3723
Bump tmp from 0.2.5 to 0.2.6 (#3760) #3760
chore(deps): update testing packages (#3742) #3742
Revert “OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) …” (#3757) #3757
Fix disk encryption parsing for cluster details (#3737) #3737
Reset search field on ‘Clear all filters’ (#3736) #3736
MGMT-24444: Apply sentence case to networking management type labels … (#3747) #3747
Operators section should not be displayed on review and installation progress pages when no operators are selected (#3745) #3745
Remove Arbiter button (#3744) #3744
chore(deps): update typescript (#3743) #3743
chore(deps): update konflux references (#3741) #3741
Update Konflux Quay image address (#3740) #3740
Bump ws from 8.18.3 to 8.20.1 (#3726) #3726
fix monted pull secret parsing (#3692) #3692
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778675823 (#3720) #3720
chore(deps): update dependency qs to ^6.15.2 (#3719) #3719
chore(deps): update konflux references (#3718) #3718
chore(deps): update dependency dpdm to v4 (#3555) #3555
Implement useAgents hook for the CIM wizard (#3711) #3711
Ugrade axios to 1.15.2 (#3710) #3710
chore(deps): update dependency qs to ^6.15.1 (#3678) #3678
chore(deps): update dependency eslint to ^8.57.1 (#3677) #3677
chore(deps): update konflux references (#3707) #3707
chore(deps): update dependency redux to ^4.2.1 (#3708) #3708
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778171507 (#3709) #3709
Bump fast-uri from 3.1.0 to 3.1.2 (#3706) #3706
OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled “Next” button during background validation (#3687) #3687
MGMT-23490: Refactor Troubleshooting Web Console (#3688) #3688
Bump basic-ftp from 5.3.0 to 5.3.1 (#3698) #3698
Bump ip-address from 7.1.0 to 10.1.1 (#3689) #3689
Read from aipVIPs and ingressVIPs in getClusterProperties function (#3661) #3661
Memoize the wizard footer on CIM Review step (#3686) #3686
MGMT-19002: [nmstate] UI form view missing autoconf field for ipv6 (#3681) #3681
Add custom-manifests-requirements-satisfied to soft validations on networking wizard step (#3682) #3682
OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3672) #3672
MGMT-21857: [UI] - Missing “No Matching Clusters” Message (#3667) #3667
Hide internally generated custom manifests on the Cluster Review page (#3646) #3646
chore(deps): update konflux references (#3675) #3675
MGMT-23950: [Staging] [UI] - Cluster name missing in page header for draft clusters (#3669) #3669
chore(deps): update dependency @reduxjs/toolkit to ^1.9.7 (#3647) #3647
chore(deps): update dependency axios to ^1.15.2 (#3648) #3648
MGMT-24152: UI allows editing pull secret in draft cluster (#3662) #3662
Remove 2 node arbiter option from the control plane dropdown option (#3644) #3644
Bump postcss from 8.5.6 to 8.5.10 (#3641) #3641
Update OWNERS file (#3643) #3643
chore(deps): update konflux references (#3640) #3640
chore(config): migrate config renovate.json (#3639) #3639
MGMT-23800: Upgrade Vite (#3589) #3589
chore(deps): update dependency msw to v2.13.5 (#3587) #3587
chore(deps): update dependency @vitejs/plugin-react-swc to v4 (#3553) #3553
chore(deps): update dependency happy-dom to v20.9.0 (#3591) #3591
Add renovate.json (#3637) #3637
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1776962329 (#3588) #3588
chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3.1.0 (#3577) #3577
chore(deps): update dependency @types/uuid to v11 (#3544) #3544
chore(deps): update yarn to v3.8.7 (#3495) #3495
Add cursor rules for imports (#3595) #3595
NO-ISSUE: Cursor rules for comments and variables (#3592) #3592
Add CLAUDE.md (#3632) #3632
Bump uuid from 8.3.2 to 14.0.0 (#3629) #3629
Bump follow-redirects from 1.15.11 to 1.16.0 (#3586) #3586
ACM-30344: ACM Console should support ClusterImageSets with by-digest pullspecs (#3609) #3609
Allow to install SNO topology (#3578) #3578
Support third party CNI in CIM (#3600) #3600
Fix Cisco Intersight editing (#3523) #3523
Pull secret appears editable in draft cluster but changes are not applied (#3597) #3597
fix operators list in ABI below the sea (#3590) #3590
MGMT-23913: Missing breadcrumbs in on-prem Assisted Installer (#3598) #3598
Update build-tools (#3593) #3593
Upgrade lodash to 4.18.1 (#3566) #3566
Bump basic-ftp from 5.2.1 to 5.3.0 (#3594) #3594
OCPBUGS-83428: bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3585) #3585
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.1 (#3568) #3568
chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.58 (#3570) #3570
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.4 (#3569) #3569
MGMT-23090: Support single stack IPv6 (#3414) #3414
NO-ISSUE: Remove orphan files (#3460) #3460
MGMT-23328: remove breadcrumbs for OCM and use logo as a link (#3510) #3510
NO-ISSUE: Update translation files to match new i18next format (#3567) #3567
chore(deps): update dependency rimraf to v6 (#3564) #3564
chore(deps): update konflux references (#3562) #3562
chore(deps): update konflux references (#3561) #3561
chore(deps): update module golang.org/x/sys to v0.43.0 (#3492) #3492
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775724628 (#3560) #3560
chore(deps): update dependency qs to v6.15.1 (#3559) #3559
chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3 (#3539) #3539
chore(deps): update dependency msw to v2 (#3557) #3557
chore(deps): update dependency concurrently to v9 (#3554) #3554
chore(deps): update dependency @openapitools/openapi-generator-cli to v2.31.1 (#3534) #3534
chore(deps): update dependency typescript to v5.9.3 (#3489) #3489
chore(deps): update dependency @types/node to v24 (#3543) #3543
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775651161 (#3548) #3548
chore(deps): update dependency i18next-parser to v9 (#3556) #3556
Bump basic-ftp from 5.2.0 to 5.2.1 (#3552) #3552
chore(deps): update dependency axios to v1.15.0 (#3551) #3551
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.0 (#3550) #3550
MGMT-23313: long text breaks table layout (#3545) #3545
Bump vite from 5.4.21 to 6.4.2 (#3547) #3547
chore(deps): update dependency eslint-plugin-import to v2.32.0 (#3475) #3475
fix(deps): update dependency monaco-editor to v0.55.1 (#3505) #3505
fix(deps): update dependency cypress to v13.17.0 (#3500) #3500
fix(deps): update dependency react-monaco-editor to v0.59.0 (#3537) #3537
chore(deps): update dependency dpdm to v3.15.1 (#3473) #3473
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.3 (#3471) #3471
chore(deps): update dependency axios to v1.14.0 (#3536) #3536
chore(deps): update dependency @types/eslint to v9 (#3541) #3541
Updating assisted-installer-ui-container image to be consistent with ART for 4.22 (#3340) #3340
chore(deps): update lodash monorepo to v4.18.1 (#3538) #3538
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775042950 (#3533) #3533
chore(deps): update dependency eslint-plugin-react to v7.37.5 (#3476) #3476
Bump @xmldom/xmldom from 0.8.10 to 0.8.12 (#3532) #3532
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774968108 (#3531) #3531
Upgrade @openshift-console/dynamic-plugin/sdk (#3522) #3522
Update translation files (#3524) #3524
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774618347 (#3519) #3519
Add support for release branches in PR workflow (#3527) #3527
chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.57 (#3407) #3407
Add feature branch to pull request workflow (#3520) #3520
NO-ISSUE: Add cursor rules (#3515) #3515
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.7-1774499506 (#3494) #3494
fix(deps): update module github.com/sirupsen/logrus to v1.9.4 (#3441) #3441
Revert abi abov the sea new flow (#3517) #3517
Bump happy-dom from 20.0.2 to 20.8.9 (#3516) #3516
chore(deps): update dependency swr to v2.4.1 (#3486) #3486
Bump node-forge from 1.3.3 to 1.4.0 (#3513) #3513
chore(deps): update konflux references (#3514) #3514
Bump picomatch from 2.3.1 to 2.3.2 (#3507) #3507
Bump brace-expansion from 1.1.11 to 1.1.13 (#3512) #3512
add pull secret auto populate logic to ABI local UI (#3508) #3508
chore(deps): update dependency tslib to v2.8.1 (#3487) #3487
populate default values in local ui from infraEnv (#3502) #3502
MGMT-23648: Removing the manifests using the toggle (#3498) #3498
Add cursor rules for generated files (#3497) #3497
chore(deps): update konflux references (#3472) #3472
chore(deps): update dependency start-server-and-test to v2.1.5 (#3484) #3484
Set customManifestsUpdated when users remove a manifest (#3482) #3482
Red Hat Konflux update assisted-ui-chatbot-saas-main (#3478) #3478
MGMT-23515: Use Network type support level (#3465) #3465
Red Hat Konflux purge assisted-installer-chatbot-main (#3477) #3477
fix(deps): update dependency @patternfly/react-core to v6.4.1 (#3438) #3438
chore(deps): update dependency nodemon to v3.1.14 (#3435) #3435
chore(deps): update dependency @vitejs/plugin-react-swc to v3.11.0 (#3444) #3444
chore(deps): update dependency @openapitools/openapi-generator-cli to v2.30.2 (#3442) #3442
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.1.1 (#3470) #3470
fix(deps): update dependency @patternfly/react-code-editor to v6.4.1 (#3437) #3437
fix(deps): update dependency @patternfly/react-table to v6.4.1 (#3440) #3440
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.7.54 (#3406) #3406
chore(deps): update dependency @sentry/browser to v7.120.4 (#3443) #3443
chore(deps): update dependency eslint to v8.57.1 (#3432) #3432
chore(deps): update dependency axios to v1.13.6 (#3431) #3431
chore(deps): update dependency @types/node to v18.19.130 (#3429) #3429
chore(deps): update dependency @types/lodash to v4.17.24 (#3428) #3428
Bump ajv from 6.12.6 to 6.14.0 (#3411) #3411
chore(deps): update dependency prettier to v2.8.8 (#3436) #3436
chore(deps): update dependency msw to v1.3.5 (#3434) #3434
chore(deps): update dependency eslint-config-prettier to v8.10.2 (#3433) #3433
chore(deps): update dependency @types/react-redux to v7.1.34 (#3430) #3430
chore(deps): update dependency @types/eslint to v8.56.12 (#3427) #3427
chore(deps): update dependency @tsconfig/recommended to v1.0.13 (#3426) #3426
Bump flatted from 3.3.1 to 3.4.2 (#3469) #3469
fix validations for NTP and Proxy in above sea level ABI flow (#3464) #3464
Add identifiers and checked state attribute to custom manifests switch (#3466) #3466
MGMT-23516: Left navigation menu is cut off (#3463) #3463
UI doesnt save the data filled by the user (#3452) #3452
fix ISO file name (#3462) #3462
Tech Preview badge should appear at the end of the line (#3461) #3461
AGENT-1136: Add USER_AUTH_TOKEN support to disconnected UI proxy (#3454) #3454
Bump rollup from 4.50.1 to 4.59.0 (#3421) #3421
Bump immutable from 3.8.2 to 3.8.3 (#3451) #3451
Full changelog

agent-installer-utils

OCPBUGS-86036: Filter out link-local IPv6 addresses #305
OCPBUGS-85524: update konflux references #286
AGENT-1476: Configure CI integration and add Prow e2e test to Konflux #245
AGENT-1193: Add mirror-path and registry-cert support for OVE ISO builder #218
OCPBUGS-83575: Remove Konflux cert-preflight test #290
NO-JIRA: Add 4.23 appliance-config #289
NO-JIRA: Add 5.0 appliance-config.yaml for iso_builder #288
OCPBUGS-82537: update konflux references #274
NO-JIRA: enable xtrace in build-ove-image.sh for debugging #281
OCPBUGS-81585: Update operator versions #280
NO-JIRA: Pass environment through to podman #279
AGENT-1429: Pass OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY #278
Full changelog

apiserver-network-proxy

CNTRLPLANE-3380: Merge https://github.com/kubernetes-sigs/apiserver-network-proxy:master (588e629) into main #109
CNTRLPLANE-3380: Update OWNERS with HyperShift core team #107
CNTRLPLANE-3359: Rebase to v0.34.0 for OCP 4.23 #102
Full changelog

aws-cloud-controller-manager

OCPBUGS-85643: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #154
NO-JIRA: Update OWNERS #145
OCPCLOUD-3215: Add support for dual networking stack services #135
Full changelog

aws-cluster-api-controllers

OCPBUGS-85567: Bump github.com/go-jose/go-jose/v4 to 4.1.4 #607
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #605
OCPCLOUD-3359: Add TLS substitutions #598
NO-JIRA: Update manifests generator #604
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.11.1 (eaa4c99) into main #602
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.11.0 (815a1b0) into main #600
NO-JIRA: Update OWNERS #599
Full changelog

aws-ebs-csi-driver

NO-ISSUE: UPSTREAM: 2911: CVE-2026-33186: bump google.golang.org/grpc v1.80.0 #315
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-42363: Re-enable Azure Disk load test #558
OCPBUGS-86023: Add memory limits to SMB CSI sidecar containers #557
OCPBUGS-85457: Add init container for Manila node daemonset #552
OCPBUGS-84052: Mount writable /tmp in SMB CSI driver #545
OSASINFRA-3675: Rework authentication in Manila CSI Driver Operator #373
OCPBUGS-80930: Add VolumeAttributesClass e2e test manifests for Azure disk #538
OCPBUGS-78291: Allow azure-disk sidecars to read VolumeAttributeClasses #525
STOR-2762: Bump all deps for 4.22 #526
OCPBUGS-77674: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #516
OCPBUGS-77553: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #513
OCPBUGS-77612: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #514
Full changelog

aws-kms-encryption-provider

CNTRLPLANE-3380: Update OWNERS with HyperShift core team #45
Full changelog

aws-machine-controllers

OCPBUGS-83873: Changed timeout for node ready logic in OTE #185
SPLAT-2715: Fixed broken test and simplified some logic #182
NO-JIRA: Update OWNERS #183
SPLAT-2627: Created OTE Tests for dedicated hosts #174
SPLAT-2700: Added shared tags for BYO DH #181
OCPCLOUD-3283: K8s 1.35 bump #179
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-85641, OCPBUGS-85642: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #184
NO-JIRA: Update OWNERS #174
OCPCLOUD-3281: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (314ccf1) into main #155
Full changelog

azure-cluster-api-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #387
OCPCLOUD-3359: Add TLS substitutions #379
NO-JIRA: Update manifests generator #382
OCPBUGS-84694: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.1 (dbeb413) into main #380
NO-JIRA: Update OWNERS #376
OCPCLOUD-3294: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.0 (ac446a1) into main #371
Full changelog

azure-disk-csi-driver

OCPBUGS-78197: check for node name in waitForDiskManagedByTobeRemoved #144
UPSTREAM: 3569: OCPBUGS-83733: Bump grpc to v1.79.3 #135
Full changelog

azure-file-csi-driver

UPSTREAM: 3023: OCPBUGS-83329: Bump grpc to v1.79.3 #124
Full changelog

azure-kms-encryption-provider

CNTRLPLANE-3380: Merge https://github.com/Azure/kubernetes-kms:master (126fb87) into main #42
CNTRLPLANE-3380: Add rebasebot-compatible commit prefixes #41
CNTRLPLANE-3380: Update OWNERS with HyperShift core team #35
CNTRLPLANE-3204: feat: add workload identity support to Azure KMS plugin #33
CNTRLPLANE-3358: Sync with upstream Azure/kubernetes-kms #32
Full changelog

azure-machine-controllers

PIXAA-7: Leverage SpotRebalanceRecommendation for instance termination when available #196
OCPBUGS-85416: Don’t permanently fail Machines after provisioning #193
NO-JIRA: Update OWNERS #190
OCPCLOUD-3280: Bump k8s 1.35 #189
Full changelog

azure-service-operator

OCPBUGS-83613: Bump grpc package for CVE fix #21
OCPBUGS-69898: Updating ose-azure-service-operator-container image to be consistent with ART for 4.22 #16
NO-JIRA: UPSTREAM: <carry>: add openshift/e2e-tests.sh #22
NO-JIRA: Update OWNERS #20
Full changelog

azure-workload-identity-webhook

OCPBUGS-84709: github.com/go-jose/go-jose/v4 v4.1.4 #46
CCO-785: add flag to configure TLS cipher suites #44
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-86476: Adopt existing Metal3 Remediation CRDs on upgrade #82
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #79
OCPCLOUD-3359: Add TLS substitutions #74
NO-JIRA: Update manifests generator #75
Full changelog

baremetal-installer, installer, installer-artifacts

fix: OCPBUGS-86012: reset associatedVCenter in failure domain validation loop #10559
OCPBUGS-87169: CVE-2026-34986: Bump go-jose/v4 to 4.1.4 #10596
MCO-2296: Remove OSImageStreams v1 replace #10592
MCO-2296: OSImageStreams v1 promotion #10566
no-jira: remove reference to altinfra #10585
no-jira: improve AI agent readiness with guidelines and AGENTS.md #10474
OCPBUGS-85352: aws: fix Route 53 resource leak during cluster destroy in China regions #10544
MCO-2200: Add day-0 dual streams support for ABI install flow #10481
no-jira: logging: log invoked openshift-install command #10490
NO-ISSUE: Use types.OSImageStreamValues for validation #10576
CORS-4495: Populate RHCOS10 Marketplace Stream #10556
MCO-2181: Set OSImageStream default in install-config #10570
OCPBUGS-84656: Update RHCOS-release-4.22 bootimage metadata to 10.2.20260423-0 / 9.8.20260428-0 #10524
no-jira: PowerVS: Remove unrequired logging #10552
CORS-4005: refactor worker manifest serialization #10407
OCPEDGE-2115: types: support MAC address as alternative identifier for fencing credential #10513
METAL-1731: baremetal: Add coreos.openshift.io/stream label to BMH and hostSelector #10502
OCPBUGS-78126: baremetal: fix gather bootstrap failing with provisioningNetwork Disabled #10395
SPLAT-2452: Add SetSecurityGroups IAM permission to master nodes for BYO SG support for AWS NLBs #10512
MCO-2164: use machine-config-osimagestream to avoid hard-coding image tag names #10416
no-jira: images: bump UPI image dependencies to 4.22 #10538
MCO-2200: refactored node-joiner to use embedded rhcos data #10537
OCPBUGS-79536: Removing AWS security group OVNDB ports as they are no longer used #10441
OCPBUGS-85232: PowerVS: Add port 80 security group rule #10541
no-jira: tests: verify AWS instance type minimum cpu and mem requirement tests #10536
NO-JIRA: pkg/types/nutanix: warn about unused context #10430
SPLAT-2710: Added vSphere day 2 support #10529
OCPBUGS-67159: openstack: Reserve addresses for load balancer #10375
OCPBUGS-77760: verify FIPS mode after installation completes #10348
OCPBUGS-84873: Fix to agent integration test finding agent-tui files #10530
OCPBUGS-84335: vSphere - Missing unit tests to cover polarion workitems #10516
OCPBUGS-84548: add unit tests for Nutanix to replace polarion workitems #10520
no-jira: update to Google Cloud SDK 563.0.0 #10460
MULTIARCH-5824: PowerVS: Fix supported system types retrieval for PowerVS regions #10268
CORS-3933: Add a retry backoff for checking storage in progress #10463
SPLAT-2719: vsphere - remove HostGroup zonal feature gate checks #10497
OCPEDGE-2255: baremetal: reject SNO installation on baremetal platform #10420
OCPBUGS-78932: Improved DHCP network deletion reliability by proactively cleaning up attached network interfaces before retrying deletion #10325
OCPBUGS-83327: PowerVS: update CAPI to v0.12.2 #10488
OCPBUGS-83335: dont save CAPI secrets #10498
AGENT-1417: Add kind verification in InternalReleaseImage check #10332
MULTIARCH-5854: implements retry-after logic to limit failures #10421
OCPBUGS-78151: Add provisioningNetworkGateway field to install-config #10387
OCPBUGS-77965: Update RHCOS-release-4.22 bootimage metadata to 10.2.20260405-0 / 9.8.20260403-0 #10482
OCPBUGS-77917: PowerVS: Use short regions and provide a default resource group in survey #10369
CORS-3900: Add IPv6 frontend IP configurations for dual-stack #10328
MCO-2135: Label Machines, MachineSets, and ControlPaneMachineSets with OSStream labels #10426
OCPBUGS-81509: fix ASO CRD duplication #10451
OCPBUGS-76468: PowerVS:: SSH key must be RSA #10289
no-jira: PowerVS: add mjturek and hamzy to approvers list #10483
OCPEDGE-2072: bump(ocp/api): pull in latest for DualReplica promotion #10471
OCPBUGS-77830: skip redirect when validating endpoint accessibility #10360
OCPBUGS-81622: Collect bootstrap service records in agent-gather #10457
AGENT-1448: Add IRI registry authentication support #10389
OCPBUGS-81635: AWS: Increase cluster bootstrap timeout with userProvisioned DNS #10459
CORS-4373: Remove checks for AzureClusterHostedDNSInstall featuregate #10455
CORS-4316: Update the Installer GCP UPI documentation. #10235
OCPBUGS-81309: Fix vSphere with static IPs on TPNU #10442
OCPBUGS-79542: Mount pullsecret manifest to UI container #10411
OCPBUGS-81470: Restart sshd after applying node-image to bootstrap #10452
OCPBUGS-37587: Sign blob container using user delegated creds #9851
SPLAT-2622: Bump govmomi to v0.53.0 #10431
OCPBUGS-78935: Fix bootstrap VM on non-x86 platforms #10419
CORS-4352: aws: validations to ensure install-config is valid for dualstack install #10380
OCPBUGS-74528: upkeep: remove tna feature gate #10403
NO-JIRA: Add Ella, Daniel to openstack-reviewers #10434
CORS-4324: Update default release image to 4.22 #10429
OCPBUGS-78589: baremetal: add serial console logging for bootstrap VM #10400
CORS-4359: feature gate install into EU Sovereign Cloud #10412
OCPBUGS-59514: redacted install config for baremetal #9972
AGENT-1461: Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition #10393
AGENT-1471: Fix race condition: wait for agent-register-infraenv before showing UI URL #10422
MCO-2116: Generate OSImageStream manifest #10357
AGENT-1136, AGENT-1229: Add auth to unconfigured-ignition #10381
SPLAT-2172: AWS dedicate host support #10079
MCO-2133: Select bootimages based on OSImageStream #10321
CORS-4336: Support for AWS European Sovereign Cloud #10303
OCPBUGS-74390: Allow all instance types in the install config for GCP #10271
no-jira: fix SC2328 shellcheck errors #10413
AGENT-1458: Don’t auto-calculate RendezvousIP in unconfigured-ignition #10405
CORS-4358: aws: add ICMPv6 ingress rule for dual-stack clusters #10408
CORS-4235: Machine Management API Field & Feature Gate #10402
no-jira: bump golangci-lint to v2.10.1 for Go 1.25 support #10397
OCPBUGS-57603: Disallow cross subscription encryption sets #10335
Full changelog

baremetal-machine-controllers

OCPBUGS-87380: Updating baremetal-machine-controller-container image to be consistent with ART for 5.0 #256
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream #483
OCPBUGS-66071: Fix PPI for ACM #456
OCPBUGS-64617: Merge upstream #473
Full changelog

baremetal-runtimecfg

NO-ISSUE: Bump go to fix security vulnerabilities #389
OPNET-709: Migrate from iptables to nftables #387
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-87198: Fix windows builds of oc rpm #2281
NO-JIRA: Switch container dependencies to Podman monorepo #2277
NO-JIRA: Bump go-jose dependency #2269
NO-JIRA: Making oc cli case blocking #2260
OCPBUGS-62799: Add required-scc annotation to node-joiner pod #2230
OTA-1817: Adding unit tests for the extend recommended alerts #2262
OCPBUGS-78768: Skip filter validation for RFC2307 group query when groupUIDAttribute is “dn” #2259
RFE-3594: Add group membership info #2255
NO-JIRA: claude: Change learn-* agents into skills #2257
NO-JIRA: claude: Improve AGENTS.md and add agents for storing project knowledge #2251
NO-JIRA: claude: Split tester agent away from code-reviewer #2250
OCPBUGS-77845: Fix extraction of gated manifests using –install-config #2249
NO-ISSUE: recover the context in upgrade #2248
NO-JIRA: claude: Turn pr-review skill into code-reviewer agent #2245
OCPBUGS-59311: must-gather: Handle signals properly #2237
OTA-1548: set up accepted risks #2170
MCO-1961: Allow multiple machine-os versions #2157
Revert “TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35”” #2241
TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35” #2236
TRT-2585: pkg/cli/admin/release/extract: Support zero-output extraction #2233
OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

OCPBUGS-82165: Add retry logic for concurrent IAM policy changes in GCP #1014
OCPBUGS-58181: Fix nil pointer dereference in ensureRolesAssignedToManagedIdentity #987
CCO-683: Remove go-autorest dependency for Azure Stack Cloud configuration #1024
CCO-845: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1019
CCO-770: Docs: consolidate and simplify short-term token workflows #986
CCO-711: docs: improve the filter when getting the capi pod #1016
OCPBUGS-84712: github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 #1021
OCPBUGS-84043: go.opentelemetry.io/otel v1.43.0 #1011
OCPBUGS-84044: github.com/go-jose/go-jose/v4 v4.1.4 #1012
OCPBUGS-83449: test-ext: hypershift skip CCO metrics endpoint validation #1010
CCO-738, CCO-739, CCO-740: Overhaul status logic to correctly match spec #1008
CCO-787: use apiserver tls config #965
CCO-824: feat(gcp): add key-storage-method flag for workload identity providers #1004
CCO-779: e2e for removing kube-rbac-proxy container (CCO-779) #991
OCPBUGS-81584: Skip CCO health check test for PowerVS platform #1006
OCPBUGS-81328: tests-ext: Fix MicroShift gating in CCO tests #1005
Revert #978: CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating #1007
CORS-4361: aws: add aws-eusc partition support for OIDC S3 buckets #995
CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating #978
OCPBUGS-79360: google.golang.org/grpc v1.79.3 #992
CCO-788: Remove kube-rbac-proxy container from metrics #983
OCPBUGS-74627: Fix infrastructure resource name filtering in watch predicate #985
Full changelog

cloud-network-config-controller

OCPBUGS-74496: Add UserAgent to Azure SDK client telemetry options #208
Full changelog

cluster-authentication-operator

CNTRLPLANE-3226: switch to real Vault KMS plugin in CI #909
CNTRLPLANE-3226: bump library-go to get KMS plugin credentials #903
NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed #908
NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e #907
CNTRLPLANE-3364: remove the old go lib std tests #906
NO-JIRA: bump latest library-go changes #904
NO-JIRA: remove old mock plugin deployment #902
CNTRLPLANE-3236: support deploying Vault mock KMS plugin #899
CNTRLPLANE-3431: restart operator upon config change #897
NO-JIRA: Bump auth with latest library-go changes #900
CNTRLPLANE-3210: Refactor externaloidc controller to support different configuration generation logic #893
CNTRLPLANE-3364: add the kms suite and migrate the kms tests of auth-o to ote #895
CNTRLPLANE-3237: Bump library-go and sync plugin changes #896
CNTRLPLANE-3237: Bump library-go and sync encryption tests with APIServerEncryption struct change #894
CNTRLPLANE-3431: enable tls config injection #892
NO-JIRA: Bump latest library-go changes #890
OCPBUGS-69977: Fix OAuth page showing OKD branding instead of OpenShift #887
OCPBUGS-84951: Fix terminationMessagePolicy on network policy e2e test pods #882
NO-JIRA: Update library-go for latest changes #873
CNTRLPLANE-2523: deploy oauth-apiserver in new OIDC mode when authentication type is OIDC #858
NO-JIRA: Add control-plane-approvers to OWNERS #871
CNTRLPLANE-2625: Add Auth network policy e2e cases #831
OCPBUGS-78403: Do not return error when an IdP returns 500 during a grant check #856
Revert “CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework” #857
CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework #839
NO-JIRA: OWNERS: add everettraven as reviewer/approver add ibihim as approver #842
CNTRLPLANE-2610: Create network policies for AUTH components #825
CNTRLPLANE-2990: Update CAO to no longer write to the Authentication.spec.webhookTokenAuthenticator field #854
CNTRLPLANE-2996: dependencies: k8s 1.35 rebase #853
CNTRLPLANE-2552: Add support for CEL expression claim mappings for username and groups #850
Full changelog

cluster-autoscaler

OCPBUGS-84130: UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references #418
NO-JIRA: ignore tool and hack files in .snyk scans #416
OCPBUGS-78152: allow clusterapi provider to skip paused resources #409
Full changelog

cluster-autoscaler-operator

OCPBUGS-52155: Add machinesets to cluster operator related objects #369
AUTOSCALE-660: add enforce node group min size flag #374
OCPBUGS-65578: report Progressing=True on version upgrade #366
AUTOSCALE-560: Add support for using centralized cluster TLS profile for webhook service #367
OCPBUGS-78797: update rbac to include DRA-related resources #365
Full changelog

cluster-baremetal-operator

OCPBUGS-84934: Add watcher for both TLS Adherence policy and profile changes #597
OCPBUGS-85824: Fix empty IRONIC_BASE_URL #603
OCPBUGS-85496: Fix webhook to validate the actual admission request object #601
OCPBUGS-82526: Fix webhook server not starting due to missing WithValidator #587
OCPBUGS-82531: Bind the plain HTTP 8080 metrics port to localhost #586
OCPBUGS-83612: Fix image-cache to use HTTPS for metal3-state downloads #592
OCPBUGS-78151: Add provisioningNetworkGateway field to CBO #575
METAL-1715: Enforce 1-year validity and 30-day auto-rotation for Ironic TLS certs #570
METAL-1780: Gate TLS profile enforcement on APIServer tlsAdherence field #582
METAL-1720: Add IRONIC_ROOTFS_URL env var for multi-arch rootfs override #583
METAL-1716: Handle IPv6/dual-stack addresses in certificate SANs #573
NO-ISSUE: Update envtest version #580
METAL-1720: Add DEPLOY_KERNEL env var for image-customization-controller #581
METAL-1734: Add support for centralized tls #572
METAL-1714: Populate complete SANs in Ironic TLS certificate #569
OCPBUGS-69399: Allow ProvisioningCIDR for unmanaged network #553
Full changelog

cluster-bootstrap

OCPBUGS-73886: Fix typo in logs #125
NO-JIRA: Add control-plane-approvers to OWNERS #127
OCPBUGS-69694: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.22 #124
Full changelog

cluster-capi-controllers

OCPBUGS-53005: Remove references to master branch #235
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #292
OCPCLOUD-3359: Add TLS substitutions #290
NO-JIRA: Update manifests generator #287
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.7 (b5fa593) into master #286
OCPCLOUD-3419: Adopt IPAM CRDs on upgrade #274
OCPBUGS-83513: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.5 (efc7142) into master #275
NO-JIRA: Update OWNERS #278
NO-JIRA: IPAM CRDs: Use negated feature-gate: -ClusterAPIMachineManagement instead of feature-set: Default #273
OCPCLOUD-3291: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.4 (8c01d2f5) into master #255
OCPCLOUD-3320: Fix continuous reconciliation of cluster-api manifests #269
Full changelog

cluster-capi-operator

NO-JIRA: build: add podman support to container image targets #580
NO-JIRA: Fix flake in infracluster test #578
NO-JIRA: fix shell compatibility in Makefile #572
OCPBUGS-85530: Fix failure to start on arm64 #571
NO-JIRA: Remove stale TODO comment for HostPlacement conversion #569
NO-JIRA: Allow sustaining engineering to self serve dependency updates #553
OCPBUGS-84815: fix: scope webhook to capi namespace, remove unused webhook endpoints #543
OCPCLOUD-2664: Update operatorstatus to write correct sub-Conditions #552
OCPCLOUD-3429: Mount provider images with image volumes #527
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #544
OCPBUGS-84673: fix: remove retired Microsoft.ClassicStorage permission #547
NO-JIRA: bump controller-runtime-common to latest main #540
NO-JIRA: Updates gemini powered skills / agents #542
NO-JIRA: manifests-gen: set scc annotation in providers Deployments spec #524
NO-JIRA: Adds deep review skill #541
NO-JIRA: fix: re-enable setting/diffing httpProtocolIpv6, CAPA now supports it #537
NO-JIRA: fix: conversion: handle HTTPProtocolIPv6, temporarily disable its diffing #531
OCPBUGS-84378: Refactor e2e newAWSMachineTemplate to use mapi2capi #532
OCPBUGS-84340: Fix e2e flake when workers are in us-west-2b #529
NO-JIRA: fix: tolerate not-found upon infra machine deletion #528
NO-JIRA: Update e2e diagnostics #488
OCPCLOUD-3345, OCPCLOUD-3359: Add support for TLS envsubst substitution #519
OCPBUGS-83601: Bump grpc package for CVE fix #523
NO-JIRA: Fix crdcompatibility flakes after webhook creation #525
NO-JIRA: Update OWNERS #522
NO-JIRA: Optimize envtest CRD loading by specifying necessary files explicitly #520
OCPCLOUD-3319: Remove capiinstaller controller #507
OCPCLOUD-3419: Add adopt-existing annotation #514
NO-JIRA: Fix flake in object pruning envtests #516
OCPBUGS-80922: Add CVO proxy injection annotation to capi-operator Deployment #518
OCPBUGS-81683: fix: remove Microsoft.Resourcehealth/healthevent permission #515
NO-JIRA: Add ClusterAPI singleton to related objects #508
OCPCLOUD-3365, OCPCLOUD-3384: Implement admission action Warn and ensure validations not active when not configured #492
OCPCLOUD-3321, OSASINFRA-3980: Add openstack-resource-controller image to images.json #506
OCPCLOUD-3319: Create installer controller #494
NO-JIRA: Fix 2 failures in ci jobs #485
SPLAT-2167: Added dedicated host support for AWS #374
OCPCLOUD-3319: Convert ReconcileResult to use a builder pattern #501
OCPCLOUD-3319: Simplify RelatedObjects on the cluster-api ClusterOperator #497
NO-JIRA: Common provider manifest fixtures #498
NO-JIRA: Drop unused replace manifests-gen #504
OCPBUGS-77188: Fix CRD Requirement deployment on SNO #502
NO-JIRA: Move ProviderMetadata into manifests-gen #503
NO-JIRA: Fix malformed VAP #499
NO-JIRA: Instruct agents more forcefully to run tests with make unit #496
OCPCLOUD-3319: Bump controller-runtime to v0.23 #495
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-86303: e2e/ote-ccm-aws: enhance tests to run hybrid in hypershift HC #464
NO-JIRA: update owners for CCM-AWS OTE path for SPLAT teeam #468
OCPBUGS-42837: Do not set Degraded=True on transient errors #436
OCPBUGS-86299: e2e/ccm-aws-ote: support to dual-stack IPv6 primary #466
OCPBUGS-85414: fix ote ccm aws e2e resiliency on HCP #462
OCPCLOUD-3436: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #457
SPLAT-2651: Added support to manage kube-cloud-config for vSphere in openshift-config-managed #442
NO-JIRA: fix: add pod annotation: openshift.io/required-scc: hostaccess #450
NO-JIRA: bump controller-runtime-common to latest main #456
SPLAT-2562: Refactored OTE and added new 3CMO OTE binary #446
OCPBUGS-83399: e2e/ote/ccm-aws fix hairpin traffic on NLB and CLB in EUSC #449
NO-JIRA: Update OWNERS #448
NO-JIRA: fix: report all degraded controller conditions instead of first only#444 #444
OCPCLOUD-3348: Honor TLSAdherence #440
SPLAT-2672: e2e/ote/ccm-aws: moving OTE binary from CCM-AWS #437
OCPBUGS-78118: Add delete permission for Azure load balancers in credentials request #438
OCPCLOUD-3287: Update to k8s 1.35.1 dependencies #439
Full changelog

cluster-config-api

OCPEDGE-2410: feat: add mutable topology featuregate #2872
Add KubeletConfigAccepted const in ‘machineconfiguration/v1/types.go’ #2853
MON-4029: Add KubeStateMetricsConfig to ClusterMonitoring API #2778
MCO-2296: Promote OSImageStreams to v1 #2854
MON-4565: Add enableUserAlertmanagerConfig to ClusterMonitoring API #2855
Update getLatestReleases to ignore non OCP releases #2868
NE-2334: Implement enhancement in OpenShift API to support for TLS curves in TLSProfile #2583
Revert “Merge pull request #2693 from jcmoraisjr/OCPBUGS-74511-remove… #2862
CNTRLPLANE-2521: feat: configv1/authentication: add fields for sourcing claims from external sources #2827
MON-4578: Add new fields to ThanosQuerierConfig #2835
CNTRLPLANE-3361: make transitMount required #2847
MON-4579: Remove NodeSelector and Tolerations from NodeExporterConfig #2837
CORENET-6714: Enable Network Observability on Day 0 #2752
OCPBUGS-74511: remove RouteExternalCertificate feature gate #2693
CNTRLPLANE-3361: update vault kms plugin validation #2836
OCPSTRAT-3036: Promote MutatingAdmissionPolicy feature to Default #2832
OPRUN-4590: Add OLMLifecycleAndCompatibility feature gate #2824
CNTRLPLANE-3237: Rename KMSConfig Struct to KMSPluginConfig #2833
SRVKP-11558: remove deprecated k8s.io/api packages removed in v0.36.0 #2834
CORENET-6861: Promote EVPN Feature Gate #2799
Revert “OCPBUGS-83492: Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling” #2823
MON-4561: API: Add softirqs node-exporter collector to ClusterMonitoring CRD #2825
Clarify cluster operator Progressing condition #2829
OCPNODE-4498: features: drop DRAPartitionableDevices awareness #2828
OCPBUGS-43353: Add pattern validation for registry entries in image config #2787
SPLAT-2649: Added vSphere Day 2 logic to CRDs #2784
OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #2683
CNTRLPLANE-2711: add vault kms plug configuration api #2805
OCPBUGS-74525: OCPBUGS-74526: Remove UserNamespacesPodSecurityStandards and UserNamespacesSupport #2762
OCPBUGS-82584: Add labelSelector to MachineSet status for scale subresource #2807
OCPBUGS-83754: fix(config/v1): define constants for authentication types as typed constants #2814
OCPBUGS-83492: Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling #2806
MON-4037: Add MonitoringPluginConfig to ClusterMonitoring API #2768
fix: small typos in comments in types.go #2804
OCPBUGS-82292: extend supported values for MCN IRI image status field #2800
MON-4036: Add NodeExporterConfig to ClusterMonitoring API #2744
OCPCLOUD-3359: Add component names, manifestSubstitutions, and observedGeneration to CAPI revisions #2786
MON-4035: Add ThanosQuerierConfig to ClusterMonitoring API #2769
NE-2520: Promote GatewayAPIWithoutOLM to GA #2772
OCPEDGE-2197: Promote TNF (Dual Replica) to default #2723
OCPBUGS-81627: Load ClusterResourceQuota CRD before CVO manifests #2796
OCPEDGE-2492: feat: promote pacemaker to v1 in prep for tnf #2792
Update verify-feature-promotion HTML output to sort entries and fix overflow #2793
Include candidate tier in default sippy queries for feature promotion #2789
CNTRLPLANE-2796: promote the event-ttl feature #2722
OCPBUGS-74533: Remove GCPClusterHostedDNSInstall featuregate #2776
NO-ISSUE: Fixes KubeletConfig API doc, adds tests and kubebuilder validation #2651
CORS-4365: Promote AzureClusterHostedDNSInstall to default #2774
Add ConfidentialCluster feature gate #2779
SPLAT-2664: Added new feature gate VSphereMultiVCenterDay2 #2783
CNTRLPLANE-3115: Add envtest releases for 4.15 and 4.16 #2785
CNTRLPLANE-2777: add TypeMeta to GenericControllerConfig #2780
tools: codegen: increase sippy request timeout for feature promotion verification #2782
MON-4036: Add TelemeterClientConfig to ClusterMonitoring API #2755
Allow JobTier=candidate in featuregate-test-analyzer with warning #2781
SPLAT-2320: vsphere vm-host zonal ga #2731
NE-2512: operator/ingress: Add configurationManagement option #2757
CORS-4337: allow AWS Europe Sovereign Cloud partition #2708
AGENT-1473: add InternalReleaseImageDegraded state type for MachineConfigNodeStatus Conditions field #2777
CNTRLPLANE-3010: Add API-side validation to enforce prefixPolicy is not set when username expression is used #2771
OCPBUGS-74528: upkeep: HighlyAvailableArbiter has been GA for 2 releases #2759
Improve feature-gated CEL validation merge semantics #2770
OPRUN-4513: Move OLMv1 Single/Own Namespace support back to TP #2766
CORENET-6390: API changes and feature gate for OVN-Kubernetes no-overlay mode #2537
OPRUN-4466: Add NewOLMConfigAPI feature gate #2756
Add TLS adherence feature gate #2680
TRT-2518: Add variant OS and JobTier to promotion check #2763
MCO-2142: Avoid OSImageStream defaultStream unset #2764
Full changelog

cluster-config-operator

CNTRLPLANE-3423: feat: have CVO inject the centralized TLS configuration into the operator’s config #491
SPLAT-2747: Updated kube cloud config controller to react to feature gate updates #489
SPLAT-2717: Migrate vSphere sync of kube-cloud-config to 3CMO #481
CNTRLPLANE-1544: manifests: Use restricted-v3 scc for deployment #451
OCPEDGE-2071: bump(ocp/api): pull in latest for DualReplica promotion #480
OCPBUGS-74528: bump: ocp/api ocp/libray-go #475
API-1646: Add config-operator workload and namespaces network policies #463
OCPSTRAT-2876: Teach config operator to filter feature gate manifests by major version inclusion #459
Full changelog

cluster-control-plane-machine-set-operator

NO-JIRA: bump controller-runtime-common to latest main #403
NO-JIRA: Update OWNERS #399
OCPCLOUD-3349: Honor TLS adherence, allow TLS overrides via flags #398
OCPCLOUD-3284: Bump to k8s 1.35 and associated deps. #397
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-82535: Fix PDB unhealthyPodEvictionPolicy field name #271
STOR-2762: Bump all deps for 4.22 #270
Full changelog

cluster-dns-operator

OCPBUGS-77532: Fix premature node schedulability marking in taint checking #470
OCPBUGS-78085: Fix dual-stack service update by preserving IP families #467
NE-2500: Added network policies for DNS #468
Full changelog

cluster-etcd-operator

OCPBUGS-77345: validate snapshot before destructive operations in cluster-restore-tnf.sh #1626
OCPEDGE-2116: feat: support MAC-address based fencing credentials lookup #1600
OCPBUGS-83332: fix cluster-restore-tnf.sh for FQDN hostnames #1622
NO-JIRA: Fixed spelling in files and file names #1624
OCPEDGE-2604, OCPEDGE-2605: feat: add update-fencing-credentials.sh script for TNF fencing credentials rotation #1611
CNTRLPLANE-3392: Migrating etcd otp cases to ote #1612
NO-JIRA: Replace bash env var validator with go implementation #1606
NO-JIRA: separate grpc from http server #1598
NO-JIRA: fix CI failure #1599
NO-JIRA: Refactor render test validation #1597
NO-JIRA: Add control-plane-approvers to OWNERS #1594
NO-JIRA: Apply go fix changes #1589
NO-JIRA: Remove unused lib/resourcemerge package #1590
OCPEDGE-2495: upkeep: bump ocp/api ocp/client-go #1591
OCPBUGS-81340: pacemaker CronJob: tune history limit and Job TTL #1581
OCPEDGE-2495: feat: update pacemaker in preparation for DualReplica promotion #1587
OCPBUGS-81341: fix: add correct annotations to stop update events #1580
CNTRLPLANE-2621: Restart operator when TLS config changes #1556
OCPBUGS-80959: fix(tnf): align Pacemaker kubelet and etcd retry pacing #1578
CNTRLPLANE-2668: Migrating go standard etcd cases to ote #1575
NO-JIRA: add Lance as a reviewer #1576
OCPBUGS-78956: Disable member cache for quorum checker in TNF #1568
OCPBUGS-65626: upgrade library-go to latest changes #1566
OCPBUGS-78930: add tnf jobs to network policy exceptions #1574
ETCD-557: Add e2e Network policy test cases #1543
Revert “OCPBUGS-77947: fix(tnf): do not block on stable revision after external etcd transition” #1572
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-73768: bugfix: podtemplatespec: update topology spread constraints #1347
NO-JIRA: fix flaky TestGlobalTLSCopy unit test #1341
OCPBUGS-84725: Fix stale config cache causing incorrect deployment #1329
OCPBUGS-63691: replace node-ca shell script with go implementation #1325
IR-486: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1326
NO-JIRA: Add control-plane-approvers to OWNERS #1324
OCPBUGS-83282: Allow longer window before going Degraded #1318
CNTRLPLANE-2660: e2e testing automation: Image Registry network policy #1320
OCPBUGS-66225: ImageConfigController: add inertia before ImageConfigC… #1319
CNTRLPLANE-3184: Create network policies for image-registry components #1301
OCPBUGS-81750: Use deterministic S3 bucket naming to prevent orphaned buckets #1317
OCPBUGS-66225: ImageConfigController: wait for ClusterVersion informe… #1316
OCPBUGS-66225: fix degraded blip on stale config caches #1304
OCPBUGS-66225: migrate to go 1.25 #1305
IR-350: make metrics server tls configuration file-based #1297
Full changelog

cluster-ingress-operator

OCPBUGS-36723: Add missing include annotations to IBM Cloud and PowerVS ingress CredentialsRequests #1457
NE-2723: Migrate to aws-sdk-go-v2 #1445
OCPBUGS-85679: Improve e2e tests reliability #1434
OCPBUGS-85676: Harden CRD permission RBAC in operator ClusterRole #1454
OCPBUGS-74497: Add UserAgent to Azure SDK client telemetry options #1400
OCPBUGS-85690: Add referencegrants and backendtlspolicies to Gateway API RBAC #1453
OCPBUGS-84491: Set terminationMessagePolicy on gateway proxy containers #1428
OCPBUGS-83923: Update grpc-go and x/net #1447
NE-2662: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1431
OCPBUGS-80966: Fix malformed PEM bundle when tls.crt lacks trailing newline #1405
OCPBUGS-84773: Allow host network connections to the ingress canary #1430
OCPBUGS-81442: TestUnsupportedConfigOverride: Ignore featuregate and defaults #1408
OCPBUGS-84551: isFIPSEnabled: Check FIPS_ENABLED env. var. first #1427
OCPBUGS-54702: change default timeout tunnel if using AWS NLB #1349
OCPBUGS-81192: Fix race condition in internal-to-external LB migration test #1407
NE-2390: Adding AGENTS.md file #1341
OCPBUGS-25739: Fix PDB MaxUnavailable for 2-replica ingress controllers #1380
OCPBUGS-81550: AWS, Azure and GCP ClusterHostedDNS: Add Ingress LB IPs to Infra CR after masters up #1411
OCPBUGS-76609: Do not take over OSSM subscription #1398
NE-2332: Implement ROUTER_CURVES environment variable #1409
OCPBUGS-3917: filter non-FIPS TLS 1.3 ciphers from ROUTER_CIPHERSUITES on FIPS clusters #1401
NE-2501: Add network policies for ingress resources #1392
OCPBUGS-79376: Bump to OSSM 3.3.1 and Istio v1.28.5 #1406
OCPBUGS-78541: Move TestIngressControllerCustomEndpoints to run last #1388
OCPBUGS-79467: Change default log level from DEBUG to INFO #1402
NE-2519: Move Sail Library to official release branch #1404
NE-2523: Implement configurationManagement API #1385
OCPBUGS-79667: Use feature-gate annotation for Sail Library RBAC #1393
NE-2396: gatewayclass: Enable Horizontal Pod Autoscaling #1326
CORS-4335: Add support for AWS European Sovereign Cloud #1360
NE-2421: Support dual-stack IngressController on AWS #1376
OCPBUGS-62237: Apply APIServer TLS security profile to canary daemonset #1386
OCPBUGS-78523: gatewayapi_controller: Replace sync.Once with retry for GatewayClass field indexer setup #1382
OCPBUGS-62627: cluster operator ingress reported Progressing=True wit… #1299
OCPBUGS-62238: configure tls profile for router metrics #1378
NE-2285: Bump to OSSM 3.3.0 and Istio v1.28.4 #1396
OCPBUGS-77457: Respect proxy configuration on gwapi provisioning #1383
NE-2471: Replace OLM-based Istio install with Sail Library #1354
NE-2501: Add RBAC to allow operator to manage network policies #1389
OCPBUGS-78555: Increase Gateway E2E timeout to 5 minutes #1390
NE-2131: tests-extension: Append suite names to OTE test specs to preserve original test names #1387
NE-2418: Add e2e test for haproxy_max_connections metric #1361
Full changelog

cluster-kube-apiserver-operator

CNTRLPLANE-3226: switch to real Vault KMS plugin in CI #2180
CNTRLPLANE-3226: bump library-go to get KMS plugin credentials #2169
NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed #2177
NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e #2176
NO-JIRA: Bump latest libray-go changes #2173
NO-JIRA: remove old mock plugin deployment #2168
NO-JIRA: kms: use DefaultFakeVaultEncryptionProvider to ensure AppRole secret setup #2167
OCPBUGS-86057: render: fall back to Authentication CR #2166
CNTRLPLANE-3236: support deploying Vault mock KMS plugin #2146
NO-JIRA: Add KMS dummy case #2161
NO-JIRA: Bump latest library-go changes #2160
CNTRLPLANE-3238: Add New kms suite #2156
CNTRLPLANE-3237: Bump library-go and sync plugin changes #2155
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2220 #2150
OCPSTRAT-3036: Temporarily extend MutatingAdmissionPolicy runtime-config range to <1.37.0 #2148
CNTRLPLANE-3347: Migrate testKMSEncryptionOnOff to ote #2127
OCPBUGS-78016: Use SkipInClusterAuthenticationLookup in check-endpoints #2113
NO-JIRA: Removal of unuse suites #2132
OCPBUGS-76588: operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization #2062
CNTRLPLANE-3327: Migrate TestEncryptionTypeAESCBC to OTE #2122
NO-JIRA: Add control-plane-approvers to OWNERS #2110
CNTRLPLANE-3326: Remove unstable TestBoundTokenOperatorSecretDeletion #2123
NO-JIRA: Update library-go changes #2107
OCPBUGS-79663: Allow setting the oauthMetadata when auth type is None #2105
CNTRLPLANE-3228: Implement 5.0 EUS schedule in KAS-O #2101
CNTRLPLANE-2991: Do not configure KAS with Structured Authentication when authentication type is OIDC #2075
CNTRLPLANE-2935: Enable configurable PKI for managed certificate rotation #2051
CNTRLPLANE-2698: add network policies for apiserver operator and operands #2029
OCPBUGS-23366: bindata/bootkube: Remove configmap-csr-controller-ca.yaml #2076
OCPBUGS-76952: scc: fix uid{Min,Max}Range for nested-container #2053
NO-JIRA:Fix TestBoundTokenOperatorSecretDeletion stability and monitor failures #2080
CNTRLPLANE-2622: Restart operator when TLS config changes #2059
CORS-4363: set bindAddress/bindNetwork for dual-stack clusters #2079
CNTRLPLANE-2992: Update CKASO to use a default webhook authenticator secret when authentication type is not None #2074
OCPBUGS-65626: update library-go to latest #2026
CNTRLPLANE-2223: Migrate TestBoundTokenSignerController to ginkgo #2067
CNTRLPLANE-2622: config tls on check-endpoints container #2058
Full changelog

cluster-kube-controller-manager-operator

CNTRLPLANE-3349: Migrate KCM-O cases to ote #935
CNTRLPLANE-3107: e2e testing automation Create network network policy test cases #924
NO-JIRA: Add control-plane-approvers to OWNERS #926
CNTRLPLANE-3211: enable configurable PKI for managed certificate rotation #925
OCPBUGS-23366: bindata: Import configmap-csr-controller-ca.yaml from KAS-O #918
CNTRLPLANE-2623: Restart operator when TLS config changes #915
OCPBUGS-65626: update library-go to latest #905
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-scheduler-operator

WRKLDS-1126: e2e network policy tests #637
NO-JIRA: Add control-plane-approvers to OWNERS #639
OCPBUGS-82503: add /var/run/kubernetes as emptyDir #638
CNTRLPLANE-3219: vendor: bump library-go, api, client-go for configurable PKI #636
CNTRLPLANE-2756: Add operator and operand network policies #629
CNTRLPLANE-2810: Restart operator when TLS config changes #617
OCPBUGS-65626: update library go to latest #610
MON-4504: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #614
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-65984: add PodDisruptionBudget for migrator deployment #172
OCPBUGS-62629: update library-go for deployment controller updates #159
NO-JIRA: Add control-plane-approvers to OWNERS #158
OCPBUGS-51091: schedule migrator pods on control-plane nodes #157
CNTRLPLANE-3055: Migrate go standard casee to ote #156
CNTRLPLANE-2706: add network policy e2e tests for operator and operand #151
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-machine-approver

NO-JIRA: fix: use feature-gate annotation for CAPI manifests #304
NO-JIRA: fix: add pod annotation: openshift.io/required-scc: restricted-v2 #297
NO-JIRA: bump controller-runtime-common to latest main #302
NO-JIRA: Deploy cluster-machine-approver without host networking #301
NO-JIRA: Migrate away from deprecated ioutil #284
OCPCLOUD-3347: tls: use centralized TLS profile (unrevert) #292
NO-JIRA: Update OWNERS #296
Full changelog

cluster-monitoring-operator

NO-ISSUE: Update golangci-lint version #2941
OCPBUGS-86989: increase lookup interval #2943
MON-4583: adding NVIDIA H200 GPU device to accelerators configmap #2942
MON-4555: migrate federate tests to e2e suite #2902
NO-ISSUE: improve logging for doc example tests #2936
MON-4526: manifests: merge ThanosQuerierConfig from ClusterMonitoring CRD #2924
NO-JIRA: [bot] Synchronize versions of the downstream components #2937
Update jsonnet dependencies #2927
NO-ISSUE: manifests: remove unused NewConfigMapList method #2935
OCPBUGS-86352: jsonnet: exclude ReplicationController from catch-all … #2932
NO-ISSUE: chore: remove unused function #2934
MON-4525: manifests: merge TelemeterClientConfig from ClusterMonitoring CRD #2928
MON-4566: chore: add telemetry_report tool to help with telemetry change review #2885
MON-4529: manifests: merge PrometheusOperatorAdmissionWebhookConfig from ClusterMonitoring CRD #2923
OCPBUGS-85709: fix: use numeric ports in NetworkPolicies and add enforcement e2e test #2925
NO-JIRA: [bot] Synchronize versions of the downstream components #2921
OCPBUGS-83284: validate more CMO configmap fields #2877
MON-4524: MetricsServerConfig resources merge #2907
NO-JIRA: [bot] Synchronize versions of the downstream components #2918
MON-4528: merge monitoringPluginConfig #2908
NO-JIRA: [bot] Synchronize versions of the downstream components #2893
MON-4520: follow up AlertManagerConfig and PrometheusOp PR changes #2900
TRT-2649: Revert “MON-4558: enable zoneinfo node-exporter collector via config” #2910
NO-ISSUE: chore(e2e): verify Prometheus Mantine UI is served on port 9090 and refactor ForwardPort helpers #2905
NO-ISSUE: Update AGENTS.md #2899
MON-4563: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #2892
MON-4558: enable zoneinfo node-exporter collector via config #2886
TRT-2644: Revert “MON-4517: Minimal and telemetry CP monitors” #2901
NO-ISSUE: [bot] Update jsonnet dependencies #2894
MON-4492: ClusterMonitoring alertmanagerConfig logic #2889
MON-4517: Minimal and telemetry CP monitors #2814
MON-4560: enable softirqs node-exporter collector via config #2887
NO-JIRA: refactor config merging #2890
OCPBUGS-54806: Add telemetry for user-defined networks #2596
CNTRLPLANE-3217: Enable configurable PKI for GRPC TLS certificates #2882
NO-ISSUE: [bot] Update jsonnet dependencies #2878
MON-4115: expose label metrics for jobs and cronjobs #2553
MON-4480: set minimum TLS version for Thanos ruler #2862
MON-4442: Add AGENTS.md to CMO #2761
NO-JIRA: [bot] Synchronize versions of the downstream components #2884
MON-4493: add MetricsServerConfig support to ClusterMonitoring CRD #2809
MON-4543, OPNET-765: Add kubernetes-nmstate telemetry metrics to allowlist #2855
OCPBUGS-74645: delay alert dispatch in Alertmanager #2848
OCPBUGS-81554: CVE-2026-33186 - bump google.golang.org/grpc to v1.79.3 #2872
NO-ISSUE: exclude hack/tools/vendor from shellcheck #2873
NO-JIRA: [bot] Synchronize versions of the downstream components #2865
OCPBUGS-81159: reject invalid collection profile in webhook #2860
NO-ISSUE: [bot] Update jsonnet dependencies #2861
MON-4481, MON-4482: set minimum TLS version for Thanos sidecars #2859
NO-JIRA: update jsonnet dependencies #2858
OCPBUGS-78976: configure repair policy to ‘evict’ #2856
MON-4542: update Prometheus operator CRDS to v0.90.0 #2854
NO-JIRA: update github.com/openshift/library-go #2852
NO-JIRA: change ClusterRolefailed to ClusterRole failed #2853
NO-JIRA: [bot] Synchronize versions of the downstream components #2857
NO-JIRA: [bot] Synchronize versions of the downstream components #2851
NO-JIRA: add unit tests for admission webhook’s TLS configuration #2850
MON-4479: use TLS profile to configure CMO server #2841
Full changelog

cluster-network-operator

OCPBUGS-66159: Add openshift.io/node-selector annotation to openshift-network-console namespace #2848
CORENET-7154: Fix debounce timer for OperatorConfig level being incorrectly cleared #3011
NO-JIRA: Remove –enable-interconnect flag from OVN-K manifests #3008
OCPBUGS-83863: Remove version-specific CNI binary copy logic #2967
OCPBUGS-84519: Add terminationMessagePolicy to missing ovn-kubernetes containers #3004
NVIDIA-596: Enable dpu healthcheck #2941
TRT-2657: Revert “add remaining CNO NetworkPolicies” (#2959) #2999
OCPBUGS-83800: add remaining CNO NetworkPolicies #2959
NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating #2944
OCPBUGS-83406, OCPBUGS-83407: fix issue for managed mode of no-overlay #2960
OCPBUGS-53187: Update self-referencing URLs from master to main #2984
GCP-430: Wire GCP WIF credentials for CNCC in HyperShift HCP mode #2915
OCPBUGS-65631: Use dedicated service accounts for multus pods #2961
NO-JIRA: cleanup unused code and refactor for allowlist controller #2846
CORS-4332: Add GCP to the allowed platforms for dual stack #2894
OCPBUGS-82973: Frrk8s tls manifests #2963
KONFLUX-11591: Fix ovn-acl-logging CrashLoopBackOff due to startup race condition #2923
CORENET-6572: only report Progressing for active network rollouts #2937
CORENET-6543: Align VTEP CRD additionalPrinterColumns with upstream #2957
CNF-21001: multus: MultiNetworkPolicy nftables #2883
CORENET-6816: Add NetworkPolicies for CNO and its operands #2892
CORENET-6933: Update VTEPs/CUDN APIs #2952
OCPBUGS-78974: Fix ManagementState being reset on operator restart #2942
CORENET-6613: ClusterNetworkConnect DevPreview FG #2880
no-jira: Update OWNERS_ALIASES to include myself + “taanyas” and “marty-power” #2908
CORENET-6813: Add config override for allow-icmp-network-policy #2920
CORENET-6100: Add support for no-overlay mode #2844
CORENET-6561: CNO Rebase k8s to 1.35.0 #2887
OCPBUGS-78731: Revert “NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating” #2938
OCPBUGS-77015: wait for patch port to apply drop garp flows #2910
OCPBUGS-70016: Updating cluster-network-operator-container image to be consistent with ART for 4.22 #2863
Full changelog

cluster-node-tuning-operator

OCPBUGS-87132: E2E: Remove ovs-vswitchd from platform services #1526
OCPBUGS-86803: e2e: Remove unnecessary len(numa) < 2 skip gates #1528
NO-JIRA: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 #1527
OCPBUGS-86480: E2E: Refactor OVS affinity tests into shared helpers and add new workload-partitioning and control-plane reboot test cases. #1509
OCPBUGS-83865: Revert stalld backend to sched_debug #1515
NO-JIRA: E2E: remove obsolete ContainerRuntimeConfig runtime-switch test #1510
OCPBUGS-80952: perf: latency: compute memory resources dynamically #1517
OCPBUGS-62277: Requeue PerformanceStatus update when status write fails #1495
NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary #1512
TRT-2659: Revert #1499 “NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary” #1511
NO-JIRA: e2e: fix tuned deferred tests on Hypershift #1494
NO-JIRA: test/extended: scope oc process to NTO namespace #1508
NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary #1499
OCPBUGS-84938: e2e: Add irqbalance StartLimitBurst >= 100 config test #1493
NO-JIRA: Bump ghw dependency #1492
NO-JIRA: E2E: move dra resource test to reboot tests directory #1486
PSAP-2185: Support centralized TLS security profile configuration #1483
CNF-18941: e2e: PP: cover ExecCPUAffinity support in tests #1432
Full changelog

cluster-olm-operator

OPRUN-4640: Update to golang 1.26.3 and openshift-4.23 builders #211
OPRUN-4627: override catalog tag to 4.x when RELEASE_VERSION is 4.x and catalogd.yaml pins v5.0 #210
OPRUN-4599: dynamically resolve catalog image tag from OCP release version #203
OCPBUGS-62517: Scale to replicas=2 and enable PDB on HighlyAvailable topology #202
OPRUN-4521: handle OCP 4.²³⁄₅.0 upgrade boundary #184
OCPBUGS-77899: Fix wait logic to handle NewOLM enabled on Default Feature #193
NO-ISSUE: remove no-op os.Remove call in TestRenderHelmTemplate #192
OCPBUGS-77899: Wait for operator-controller resources before verifyig #181
OPRUN-4518: Rename ClusterExtensionRevision to ClusterObjectSet #191
NO-ISSUE: Add fgiudici as reviewer #190
NO-ISSUE: return semver conversion errors #183
OCPBUGS-81188: Update grpc and other dependencies #182
OPRUN-4502: Use FratureGateNewOLMConfigAPI from openshift/api #180
OPRUN-4502: Add feature-gate for DeploymentConfig #176
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-3226: switch to real Vault KMS plugin in CI #704
CNTRLPLANE-3226: bump library-go to get KMS plugin credentials #699
CNTRLPLANE-3364: remove old go std tests #703
NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed #702
NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e #701
NO-JIRA: bump latest library-go changes #700
NO-jIRA: Remove old mock plugin deployment #698
NO-JIRA: kms: use DefaultFakeVaultEncryptionProvider to ensure AppRole secre setup #697
CNTRLPLANE-3236: support deploying Vault mock KMS plugin #693
NO-JIRA: Bump latest library-go changes #692
CNTRLPLANE-3364: add the kms suite and migrate the kms tests of oas-o to ote #690
CNTRLPLANE-3237: Bump library-go and sync encryption tests with APIServerEncryption struct change #689
NO-JIRA: Bump latest library-go changes #688
API-1768: e2e network policy tests #675
NO-JIRA: Add control-plane-approvers to OWNERS #677
NO-JIRA: Update library-go for latest changes #678
CNTRLPLANE-2619: Restart operator when TLS config changes #662
CNTRLPLANE-2450: bump(k8s.io): 1.35.2 #669
CNTRLPLANE-2619: make checkendpoints use apiserver config #657
NO-JIRA: OWNERS: remove engineers who have left Red Hat #646
NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch #667
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-2907: e2e network policy tests #428
NO-JIRA: Add control-plane-approvers to OWNERS #427
OCPBUGS-81472: Prevent possibility of running controllers against empty informer caches #426
CNTRLPLANE-2620: Restart operator when TLS config changes #412
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-policy-controller

NO-JIRA: Add control-plane-approvers to OWNERS #179
Full changelog

cluster-samples-operator

CNF-23044: Migrate away from deprecated ioutil #668
CNTRLPLANE-3176: implements operator tls config compliance #684
Full changelog

cluster-storage-operator

NO-JIRA: Add initial Agent Guide #682
STOR-2770: Mount metrics certs of azure-disk and azure-file CSI driver operator for Hypershift #686
STOR-2762: Bump all deps for 4.22 #684
OCPBUGS-74232: volume-data-source-validator should run on master nodes #659
OCPBUGS-78291: Allow azure-disk operator to read VolumeAttributeClasses #683
Full changelog

cluster-version-operator

NO-JIRA: chore: exclude e2e tests from make test unconditionally #1321
OTA-1836: Honor the centralized TLS configuration #1338
NO-JIRA: refactor: simplify redundant error checking conditions #1320
OTA-1966: Install namespace/openshift-lightspeed only when TechPreview is enabled #1394
OTA-1966: Manage proposals #1382
OTA-1935: pkg: Use risk.Source framework to feed Upgradeable #1368
OTA-1967: Take official CRDs from the OpenShift Lightspeed operator #1387
MON-4477: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #1305
OTA-1966: Init the Proprosal Lifecycle Controller #1381
NO-JIRA: OpenShiftUpdateRiskMightApply: bump pending to 15m from 10m #1372
OTA-1836: chore(deps): Bump general OpenShift dependencies #1377
OTA-1979: Revert “lightspeed: Add a new image holding Lightspeed skills” #1378
NO-JIRA: how-to: troubleshoot bootstrap CVO #1369
OTA-1965: Add Lightspeed CustomResourceDefinitions #1380
NO-ISSUE: Fix TestOperator_upgradeableSync #1373
OTA-1962: lightspeed: Add a new image holding Lightspeed skills #1376
OTA-1813: Extend alert risk e2e #1371
OTA-1933: pkg/risk: Refactor alerts into a generic update-risk interface #1367
NO-JIRA: All CVO manifests in payload should be included #1337
OTA-1813: Drop a local label on alert-risk e2e #1363
NO-ISSUE: Add CodeRabbit config with review rules from PR analysis #1360
NO-JIRA: use scrape class which is more succinct #1365
CNTRLPLANE-2777: feat(resource builder): allow to inject tls configuration into annotated config maps #1322
OTA-1813: Populate risks from alerts #1329
OCPBUGS-78997: Do not discard ListOptions in waitForPodCompletion. #1361
OCPBUGS-65621: add dedicated service account to crb, cvo and version pod #1266
NO-JIRA: Add test migration guide for openshift-tests-private to CVO #1336
NO-JIRA: Try not to block by informing #1356
OCPSTRAT-2876: Allow inclusion/exclusion of manifests based on the OCP major version #1282
TRT-2581: Revert “NO-ISSUE: OTA-1605 Automate OCP-42543” #1353
NO-ISSUE: OTA-1605 Automate OCP-42543 #1309
Full changelog

console

CONSOLE-5242: Remove shipwright-plugin Cypress integration tests #16553
CONSOLE-4946: Add Configuration tab to Node view #16124
NO-JIRA: Improve cypress-migration skill #16550
OCPBUGS-82506, OCPBUGS-82507: Re-enable OLM Cypress tests disabled for createRoot #16531
OCPBUGS-86564: Use stable username hash for user-settings ConfigMap names #16512
OCPBUGS-86875: Always use RHUI icons #16528
OCPBUGS-86755: use a clip path instead of overlapping triangles #16520
CONSOLE-5037: Add knip-based dead code detection in CI #16523
CONSOLE-5284: Put new node inventory items behind tech-preview #16414
CONSOLE-5307: Remove dead code 2: electric boogaloo #16513
NO-JIRA: Update Console 4.23 plugin SDK CHANGELOG #16516
CONSOLE-5091: Add bulk selection and schedulable actions to Nodes page #16203
CONSOLE-5296: Add non-scalable image warning when scaling workloads #16436
OCPBUGS-82508, OCPBUGS-82509: Fix and re-enable operator e2e tests disabled for createRoot #16517
OCPBUGS-86614: prep for 4.22 GA SDK publish #16507
CONSOLE-5308: Centralize ResizeObserver polyfill in Jest setup for unit tests #16506
CONSOLE-5286: Block snapshot tests via ESLint and migrate existing tests to explicit assertions #16427
CONSOLE-5307: Remove unused exports and dead code #16502
NO-JIRA: Update plugin SDK core package CHANGELOG #16496
NO-JIRA: Capitalize “Basic” in secret dropdown label #16490
OCPBUGS-83767: Helm upgrade — preserve release values when changing chart version #16364
OCPBUGS-86491: Fix macOS Option key in pod terminal #16492
CONSOLE-5293: Update Dockerfile.downloads for 4.22 and add RHEL ⁸⁄₉ oc binaries #16455
CONSOLE-5298: enable http2 on the backend #16471
CONSOLE-5253: Extend Unit Tests: Console-App - Core Navigation & Orchestration #16452
OCPBUGS-86488: Bump to PatternFly 6.5.1 #16491
CONSOLE-5244: Migrate webterminal-plugin Cypress tests to Playwright #16461
CONSOLE-5110: update to PatternFly 6.5.0 #16172
OCPBUGS-82512: Fix knative e2e test failures caused by createRoot timing #16289
CONSOLE-5300: Parallelize context detection to reduce initial load time #16477
HELM-703: Add authentication for Helm chart URLs #16360
CONSOLE-5194: Audit and fix Claude Code skills for accuracy #16316
OCPBUGS-84876: Remove DataViewToolbar wrapper from bottom pagination #16479
NO-JIRA: Add eslint-plugin-no-barrel-files #16476
OCPBUGS-84214: Fix Shipwright detail pages crashing with React error #310 #16474
CONSOLE-5197: Improve Playwright artifact collection and add safety checks #16463
OCPBUGS-71878: Show empty state instead of 403 error for users without projects #16464
OCPBUGS-82505: Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption #16285
NO-JIRA: Update Console plugin SDK CHANGELOG files #16465
CONSOLE-5280: Migrate cluster-settings Cypress tests to Playwright #16444
OCPBUGS-81521: Adapt dashboard Prometheus polling interval based on query response time #16441
CONSOLE-5245: Install and configure eslint-plugin-playwright for e2e directory #16433
CONSOLE-5197: Collect Playwright test artifacts for Prow CI #16453
OCPBUGS-85649: bump gRPC-Go package #16442
OCPBUGS-82513: Enable Topology e2e tests #16273
CONSOLE-5200: add qa-verify skill for automated PR visual verification #16429
OCPBUGS-84669: Fix ProjectLink to update active namespace in Redux #16430
CONSOLE-5212: Fix ESM compatibility for Playwright e2e tests #16445
OCPBUGS-79521: Restore list page text and row filter functionality #16440
OCPBUGS-59404: Allow VolumeSnapshot restore when parent PVC is deleted #16447
OCPBUGS-83569: [main] CVE-2026-26996 Bump minimatch library #16301
CONSOLE-5211: Add Cypress-to-Playwright migration skills and context #16315
CONSOLE-5229: Enable RTL ESLint rules in Knative tests by removing file-level no-container / no-node-access suppressions #16405
CONSOLE-5197: Add Playwright E2E test infrastructure for Prow/CI #16374
CONSOLE-5034: Migrate tile-view-page and value-from-pair to TypeScript #16412
OCPBUGS-85242: Add Suspense boundary to LazyRoutePage for plugin routes #16409
OCPBUGS-77952: Fix devfile sample import by adding fallback for parent resolution failures #16149
OCPBUGS-70273: Prevent binary secret data corruption when editing #16053
OCPBUGS-65950: Update template whenever settings are updated #16143
CONSOLE-5212: Migrate Playwright setup to project dependencies #16408
CONSOLE-5285: remove corepack dep for build-(frontend/demos), bump yarn #16426
OCPBUGS-81518: Increase Resource Dropdown visible items cap to 250. #16398
CONSOLE-5273: Expose useToast in the SDK #16400
OCPBUGS-59353: Fix authentication redirect loop on repeated 401 responses #15814
CONSOLE-5015: Migrate NameValueEditor to TypeScript and PatternFly drag-drop #16406
NO-JIRA: Add approvers and reviewers to helm-plugin OWNERS #16361
OCPBUGS-85043: Remove @console imports from SDK dist #16399
OCPBUGS-77931: Loosen default img-src CSP #16388
OCPBUGS-84324: Update outdated documentation links and references #16362
CONSOLE-5212: Set up Playwright e2e test infrastructure #16320
OCPBUGS-84844: VSphere plugin changes broke i18n translations - missing strings in locales/en/ #16384
OCPBUGS-80940: Fix SDK publish workflow for Yarn Berry #16392
HELM-613: Reject basic auth over non-HTTPS for Helm chart repositories #16317
OCPBUGS-81519: Fix Search page state mutation and unnecessary component remounts #16266
OCPBUGS-84876: Add bottom pagination to ConsoleDataView for mobile responsiveness #16391
OCPBUGS-84856: Fix ESLint Testing Library plugin PR review feedback #16387
OCPBUGS-82140: Remove PII from events #16365
NO-JIRA: Align Dockerfile.dev with multi-arch Dockerfile structure #16390
OCPBUGS-79363: Move xterm to its own chunk #16370
NO-JIRA: zsh compatibility for microcopy-review #16389
NO-JIRA: Add fsgreco to frontend reviewers #16381
CONSOLE-5184: Enable ESLint Plugins for React Testing Library #16270
OCPBUGS-84710: Fix ConsoleDataView filter order: Name and Label should appear first #16375
OCPBUGS-84227: i18n upload/download routine task - version 4.22 #16318
OCPBUGS-84230: [release-4.22] - Re-enable cluster-settings/update-modal.cy.ts e2e test disabled for createRoot adoption #16319
OCPBUGS-81522: Reduce dashboard re-renders by memoizing cards and stabilizing prop references #16367
CONSOLE-5203: Remove old QE team from our repos #16312
OCPBUGS-81518: Fix ResourceListDropdown performance on large clusters #16252
OCPBUGS-79067: Fix crash when switching language to English #16366
NO-JIRA: Remove broken entrypoints and unused packages #16357
OCPBUGS-82511: re-enable helm-release.feature #16274
CONSOLE-5227: Upgrade ESLint from v6 to v8 and @typescript-eslint to v8 #16353
OCPBUGS-84338: Update resolveDynamicModuleMaps to skip unavailable packages #16340
OCPBUGS-84320: Use popover token in QS modal #16339
OCPBUGS-84296: fix Helm list page redirect after upgrade/rollback #16336
NO-JIRA: prepare for 4.22-prerelease.3 sdk publish #16338
CONSOLE-5144, OCPBUGS-81319, OCPBUGS-83823: 4.22 SDK fixes #15655
OCPBUGS-83812: Fix race conditions in OLM descriptors Cypress test #16304
OCPBUGS-83816: Fix race conditions in create-namespace Cypress tests #16306
NO-JIRA: enable multi-architecture yarn builds #16228
OCPBUGS-83813: Fix race conditions in debug pod Cypress tests #16305
OCPBUGS-81668: Fix User Preferences responsive breakpoints bug #16279
OCPBUGS-77864: Add gRPC probe support to container details view #16245
CONSOLE-5176: Refactor RTL Tests from fireEvent to userEvent #16294
OCPBUGS-82504: Re-enable cluster-settings/update-modal.cy.ts e2e test disabled for createRoot adoption #16283
NO-JIRA: Replace deprecated io/ioutil pkg #15902
OCPBUGS-81630: Fix unnecessary error on Node Terminal tab #16263
OCPBUGS-78365: Fix create visual connector in Topology #16241
OCPBUGS-83532: Add empty state visibility check to CRD test #16303
CONSOLE-5204: Merge PR templates #16287
OCPBUGS-82510: Fix web-terminal-adminuser e2e tests broken by createRoot #16284
OCPBUGS-83446: Fix Cypress test timeouts by using correct timeout option #16280
OCPBUGS-83532: Fix race condition in CRD Cypress test #16288
NO-JIRA: enable Cypress Cloud in CI #16277
CONSOLE-4809: Extend RTL Test Coverage for Components Migrated from Enzyme #16249
CONSOLE-4512, OCPBUGS-82473: Switch from legacy render to createRoot #16202
OCPBUGS-77113: remove dev to admin links as dev monitoring views are enabled #16163
NO-JIRA: Update Dockerfile.dev to use latest base images #16264
CONSOLE-5065: Refactor dynamic module import transform code #16224
OCPBUGS-76556: fix Developer Sandbox telemetry #16020
NO-JIRA: Add stefanonardo to frontend reviewers#16267 #16267
OCPBUGS-78904: Mark notification drawer title for translation #16229
CONSOLE-3955: Migrate LogSnippet to PatternFly component #16190
OCPBUGS-81654: Filter out isActionCell prop to fix React warning #16247
CONSOLE-5152: bump cypress to latest #16244
OCPBUGS-81744: Convert cluster update status integration test to unit test #16260
OCPBUGS-81506: Add missing i18n translations for Pagination component #16233
CNV-62016: add description to ResourceQuota page title #16086
OCPBUGS-80989: Skip to fetch resource if model not found and load the other resources in list-page #16230
CONSOLE-5110: Assorted fixes and improvements #16250
OCPBUGS-79355: Fix and enable OLM Package E2E tests disabled during the public/ directory useK8sWatchResource refactoring #16220
OCPBUGS-74156: Prevent pod log search from shifting page layout #16223
Revert “OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching” #16218
OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #16013
CONSOLE-5151: Replace showdown with marked #16239
CONSOLE-5094: cypress test improvements #16046
OCPBUGS-81331: Storage > VolumeSnapshots and VAC throws error #16219
CONSOLE-4447: Additional modals switched to use ModalFooterWithAlerts for consistency #16171
OCPBUGS-80939: Add robots.txt policy to console #16205
OCPBUGS-79315: fix analyze.sh/react-icons treeshake #16188
CONSOLE-5015: Remove drag-and-drop from TextColumnField #16204
CONSOLE-5065: Update list of PatternFly packages that support dynamic modules #16182
NO-ISSUE: frontend/packages/console-dynamic-plugin-sdk/README: 4.22 doesn’t support PatternFly 5 #16206
OCPBUGS-62700: Fix VolumeSnapshot table sorting #16200
OCPBUGS-79581: Fix Deprecated Operator Warnings E2E tests Skipped in the Firehose Public Folder PR #16197
OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching #16193
OCPBUGS-79678: Align the search input so that its next to the select menu toggle #16198
OCPBUGS-78584: Preserve query params in CatalogRedirect #16165
OCPBUGS-79525: Fix null reference error in subscription action menu #16196
OCPBUGS-72526: Impersonating user loads extra pages that user not authorized to view #16088
OCPBUGS-79000: Fix perspective switcher icon suspending the whole app #16183
CONSOLE-5015: Refactor pinned nav to react-drag-drop #16146
CONSOLE-5031: Remove Firehose Component and Fix and Cleanup Impacted Types #16096
CONSOLE-4983: Add Groups to node details #15981
NO-JIRA: prep for 4.22.0-prerelease.2 SDK publish #16201
OCPBUGS-74140: Prevent Chinese characters from rendering as unicode escape sequences in alert messages #16156
OCPBUGS-77814: Add E2E tests for VolumeAttributesClass UI #16085
CONSOLE-5073: Update redux-related packages to latest #16087
OCPBUGS-78543: Hide filter category selector when only one filter exists #16153
CONSOLE-5015: Replace react-dnd with PF MultipleFileUpload in topology #16179
CONSOLE-5134: Update to Go 1.25, K8s 1.35, and Helm 3.20 #16147
CONSOLE-5135: add deprecation warning for react-router-dom #16178
OCPBUGS-79462: Skip flaky Data Grid operator E2E tests #16191
CONSOLE-5027: Refactor public/ Directory Components to useK8sWatchResource(s) #15954
OCPBUGS-63391: Replace DataViewTextFilter with existing custom TextFilter #16151
OCPBUGS-73803: Fix incorrect OLMv1 documentation URL #16052
OCPBUGS-74346: Fix useOperatorCatalogCategories hook. #16093
OCPBUGS-78534: Make E2E test create helper idempotent and improve test cleanup #16148
OCPBUGS-66147: Make folder field optional for vsphere #16142
OCPBUGS-77912: Fix TypeError in OLS code import to console #16119
OCPBUGS-44612: Remove useUserPreferenceCompatibility and withUserPreferenceCompatibility #16076
CONSOLE-5073: Bump i18next to latest #16150
CONSOLE-4447: Update SecretFormWrapper modal to use ModalFooterWithAlerts #16167
RFE-7965: add basic auth support for helm repositories #15624
CONSOLE-5094: Add pesudo CSP violation detection to Cypress #16048
NO-JIRA: Update demo plugin README #16166
CONSOLE-5093: Remove support for deprecated extensions #16043
CONSOLE-4447: Remove deprecated modal components and CSS #16126
CONSOLE-5018: Refactor UNSAFE_ class components to FC #16062
CONSOLE-5129: Theme context cleanup #16155
OCPBUGS-78390: Reset pagination page when changing namespace #16138
OCPBUGS-78253: Fix InstallPlan > Components layout issue #16127
CONSOLE-4447: Migrate @console/shared modals to PatternFly v6 Modal components #16079
NO-JIRA: Remove cursor context #16106
CONSOLE-5087: Refactor console-shared-package from Firehose to useK8sWatchResource #16077
CONSOLE-4447: Migrate modal hooks from useModal to useOverlay #16061
CONSOLE-5114: Clean up React Router imports and dependencies #16139
OCPBUGS-78499: Fix curly quote in operator-hub-community-provider-modal #16145
NO-JIRA: Update PageHeading types #16095
NO-JIRA: Add a progress bar when building #16099
CONSOLE-4447: Migrate knative-plugin modals to PatternFly 6 #16065
OCPBUGS-78404: Fix flaky secret integration tests #16140
CONSOLE-4447: Migrate core modals to PatternFly 6 Modal components (part 2) #16123
And 23 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

CONSOLE-5298: Auto-generate throwaway TLS cert for HTTP/2 support #1170
NO-JIRA: feat: have CVO inject the centralized TLS configuration into the operator’s config #1167
OCPBUGS-74872: Sort plugin list to make them deterministic #1107
OCPBUGS-86117: Add unit and e2e test coverage for cert rotation redeployment #1160
OCPBUGS-85650: bump gRPC-Go package #1156
MON-4510: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #1106
OCPBUGS-85060: feat: use 2 replicas for console on tnf #1151
CONSOLE-5204: Add PR template #1141
OCPBUGS-79068: Fix HelmChartRepository YAML format #1129
CONSOLE-5138: Enable readOnlyRootFilesystem for console and download pod #1123
OCPBUGS-78477: Bump API to support ExternalOIDCWithUpstreamParity new API fields #1125
OCPBUGS-63502: Redeploy console pods upon cert rotation #1093
OCPBUGS-65622: add controller for downloads service account deletion logic #1111
Sync Dockerfile.ocp image #1127
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85826: rebase to pick up dependency updates #237
Full changelog

coredns

OCPBUGS-83943: Bump gRPC to v1.79.3 to resolve CVE-2026-33186 #183
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

UPSTREAM-SYNC: Sync main with latest upstream (release-1.36) #393
UPSTREAM-SYNC: Sync main with latest upstream (release-1.35) #370
OCPBUGS-77578: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #374
OCPBUGS-77755: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #376
OCPBUGS-77592: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #375
Full changelog

csi-driver-nfs

NO-JIRA: CVE-2026-35469: Bump github.com/moby/spdystream@v0.5.1 #189
UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #179
UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #175
UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #170
Full changelog

csi-external-provisioner

NO-JIRA: OCPBUGS-82033: Bump google.golang.org/grpc to 1.79.3 #124
Full changelog

csi-external-snapshotter, csi-snapshot-controller

NO-JIRA: Bump google.golang.org/grpc to v1.79.3 #215
OCPBUGS-77492: UPSTREAM: 1392: Fix VolumeSnapshotContent deletion #207
Full changelog

docker-builder

OCPBUGS-77610: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 #503
OKD-322: Update Dockerfile to work on CentOS/RHEL 10 #500
Full changelog

docker-registry

OCPBUGS-84680: pin cloud.google.com/go/storage to v1.30.1 to fix blob deletion #469
CNTRLPLANE-3073: bump kubernetes to v1.35 #467
Full changelog

driver-toolkit

OCPBUGS-69851: Adding support for payload multiple-stream. #180
Full changelog

egress-router-cni

OCPBUGS-83286: Fix swallowed errors in cmdAdd/cmdDel causing empty CNI result #95
NO-JIRA: Update OWNERs file #96
Full changelog

etcd

OCPBUGS-85258: 5.0 rebase 3.6.11 #375
OCPBUGS-82495: 5.0/4.23 rebase 3.6.10 #368
Full changelog

gcp-cloud-controller-manager

OCPBUGS-85551, OCPBUGS-85552: Upgrade spdystream and grpc to fix CVEs #115
NO-JIRA: Remove custom vendor scripts in favour of standard tooling #111
NO-JIRA: Update OWNERS #105
OCPBUGS-78471: Fix OSD ILB bug #103
OCPCLOUD-3274: Merge https://github.com/kubernetes/cloud-provider-gcp:master (378730f) into main #99
Full changelog

gcp-cluster-api-controllers

OCPBUGS-53005: Remove references to master branch #297
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into master #295
OCPBUGS-85101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into master #273
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #292
OCPCLOUD-3359: Add TLS substitutions #284
NO-JIRA: Update manifests generator #285
OCPBUGS-77684: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 #272
NO-JIRA: Update OWNERS #280
Full changelog

gcp-machine-controllers

NO-JIRA: Update OWNERS #157
OCPBUGS-81576: Bump gRPC-Go package for CVE fix #155
OCPCLOUD-3279: Rebase to Kube 1.35 for Machine API Provider GCP #145
Full changelog

gcp-pd-csi-driver

UPSTREAM: 2297: OCPBUGS-83423: Bump google.golang.org/grpc to v1.79.3 #121
STOR-2751: Rebase to upstream v1.24.1 for OCP 4.22 #98
Full changelog

gcp-pd-csi-driver-operator

NO-JIRA: Bump google.golang.org/grpc to v1.79.3 to address CVE-2026-33186 #182
STOR-2798: Update image-snapshot CSI manifest to use operator provided imageVolumeSnapshotClass #179
STOR-2798: Add test e2e manifest and VolumeSnapshotClass for image volumeSnapshotClass CSI tests #178
STOR-2762: Bump all deps for 4.22 #175
Full changelog

haproxy-router

OCPBUGS-87208: Adding escapeHAProxySingleQuotes for sanitize #785
NE-2572: use add/del haproxy api calls #763
OCPBUGS-86168: Bump google.golang.org/grpc to v1.79.3 #777
Reapply “OCPBUGS-55506: Prevent startup failures due to name resolution” #677
OCPBUGS-77263: create self-signed crt if failing to read default #740
OCPBUGS-62267: fix forwarded header for IPv6 on IPv4 stack #713
OCPBUGS-49738: fix handling of host conflict #736
NE-2332: Add support for TLS curves in HAProxy configuration #755
TRT-2597: Revert “NE-2333: Add support for configurable SSL curves in HAProxy configuration” #754
NE-2333: Add support for configurable SSL curves in HAProxy configuration #678
OCPBUGS-77773: fix backend server health check if DCM is enabled #747
OCPBUGS-62238: configure TLS profile for metrics endpoint #748
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-85410: Fix performance related issues when selinux metrics are emitted #2668
OCPBUGS-86229: apiserver: cache etcd storage monitors to avoid recreating clients on each metrics scrape #2674
OCPBUGS-74511: remove RouteExternalCertificate feature gate #2585
OCPBUGS-77243: test: skip private registry test #2621
OCPBUGS-78044: Improve WatchList test robustness #2622
CNTRLPLANE-2553: Update the KAS admission plugin for fields to be compilable at admission time #2627
OCPBUGS-83502: devicemanager: constrain topology hints to device NUMA nodes #2645
OCPBUGS-78576: Update the csi-driver-host-path version to 1.17.1 #2641
OCPBUGS-81740: UPSTREAM: 138259: Filter out unschedulable nodes in kubectl describe test #2640
OCPBUGS-78990: Bump 1.35.3 to master #2633
OCPBUGS-78986: UPSTREAM: 137926: KEP-961: demote maxUnavailable feature in statefulset to off by default #2632
NO-JIRA: UPSTREAM: <carry>: Register OpenShift cloud providers in k8s-tests-ext #2635
OCPBUGS-78504: unflake HPAConfigurableTolerance test #2631
UPSTREAM: <carry>: OCPBUGS-39360: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters #2603
NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS #2630
Full changelog

hypershift

OCPBUGS-87217: fix: add CPU partitioning workload annotation to control-plane-metrics-forwarder #8686
CNTRLPLANE-3599: Remove controller-runtime v0.19.7 pin for k8s 1.36 bump #8683
CNTRLPLANE-3550: Add missing v2 test suites to Azure self-managed test matrix #8658
NO-JIRA: chore(deps): weekly dependabot consolidation #8634
NO-JIRA: test(e2e/v2): sweep AGENTS.md conformance violations #8659
OCPBUGS-87018: Revert conditional deletion of openshift-ingress NetworkPolicy #8662
NO-JIRA: move CONTRIBUTING.md to repo root and update CI guidance #8329
CNTRLPLANE-3548: Add v2 e2e test framework documentation #8641
OCPBUGS-86008: Gate Route watch on management cluster capability #8484
Revert “OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile” #8652
OCPBUGS-77268: reconcile HCP when pull secret is unavailable #8352
GCP-298: Add GCP e2e v2 test artifacts directory structure documentation #8446
CNTRLPLANE-2207: Upgrade to CAPI 1.11 #8594
NO-JIRA: chore(ci): enforce v2 e2e AGENTS.md standards via CodeRabbit #8660
CNTRLPLANE-1357: add KMSv2 secret encryption e2e v2 test for Self Managed Azure #8653
CNTRLPLANE-3167: Auto-detect credential type for HCPEtcdBackup #8368
NO-JIRA: Fix Azure private/topology CEL validation rules #8490
GCP-688: Port remaining v1 TestCreateCluster gaps to v2 e2e #8590
NO-JIRA: feat(skills): add validate-pr-override-images skill #8616
OCPSTRAT-1677: Add Spot instances documentation #8485
OCPBUGS-43444: Allow kubevirt-csi storageclass default to be changed by user #8597
CNTRLPLANE-3510: Enable additional golangci-lint linters #8567
OCPBUGS-86306: Stop controllers fighting over HCP status #8562
CNTRLPLANE-3535: Add codecov carryforward flags to stabilize project coverage checks #8642
OCPSTRAT-1677: fix(cpo): increase NTH default workers from 10 to 20 #8500
NO-JIRA: feat(ci): add skopeo and gh CLI to ARC runner image #8627
OCPBUGS-85584: Fix stale api.openshift.com labels on HostedControlPlane #8507
NO-JIRA: ci(runner): update base image to actions-runner v2.334.0 #8643
CNTRLPLANE-3533: Add Dockerfiles to codecov ignore list #8640
OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile #8638
NO-JIRA: ci(deps): bump google-github-actions/auth from 2.1.13 to 3.0.0 #8630
NO-JIRA: ci(deps): bump actions/checkout from 4.3.1 to 6.0.2 #8631
NO-JIRA: Fix HCCO deployment location in AGENTS.md #8635
CNTRLPLANE-3534: ci: add –allowedTools to address-review-comments workflow #8639
OCPBUGS-86238: add CPO overrides for ARO swift-nic resource limits #8610
OCPBUGS-81544: requeue when AutoNodeEnabled is progressing #8497
NO-JIRA: add address-review-comments workflow #8621
NO-JIRA: De-duplicate Azure self-managed documentation #8566
CNTRLPLANE-3531: Remove EFS-backed Go build cache from CI runners #8637
CNTRLPLANE-3329: Rebuild runner image on gocacheprog and pipeline changes #8633
CNTRLPLANE-3329: Fix gocacheprog cache corruption with atomic writes #8624
NO-JIRA: fix(karpenter): start node cleanup when CAPI Cluster is deleted #8589
OCPBUGS-85151: Re-enable serviceaccount-pull-secrets controller when registry managementState changes from Removed #8522
OCPBUGS-85243: Set aws-load-balancer-scheme on public HCP router service #8458
OCPBUGS-38898: fix kubeadmin password hash reconciliation to compare password against stored hash #8358
OCPBUGS-84303: fix(api): add IPv6 OVN join subnet config to prevent dual-stack routing collision #8421
NO-JIRA: clone ai-helpers into workspace for plugin file access #8620
NO-JIRA: bump claude max-turns to 50 in WIF test #8619
NO-JIRA: test ai-sbom plugin and verify plugin loading #8614
CNTRLPLANE-3329: Use GOCACHEPROG for zero-copy EFS build cache #8576
NO-JIRA: replace container image with workflow-step plugin setup #8611
NO-JIRA: use ai-helpers container image for Claude WIF test #8609
NO-JIRA: fix Claude WIF test workflow HOME for ARC runners #8600
NO-JIRA: fix Claude WIF test workflow for ARC runners #8598
NO-JIRA: test Claude Code WIF auth in GitHub Actions #8588
OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar #8569
OCPBUGS-65730: add –tls-cipher-suites to oauth-apiserver deployment #8554
OCPBUGS-85351: Revert “fix(azure): prevent externalDNSDomain from shadowing cluster apps domain” #8585
OCPBUGS-84955: bootstrap serving certs at hypershift operator startup #8545
ci(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 #8574
CNTRLPLANE-3040: add regression tests for CAS pause/unpause replica clamping #8262
NO-JIRA: chore(deps): weekly dependabot consolidation #8578
GCP-688: Port v1 E2E validations to envtest, unit tests, and v2 Ginkgo specs #8511
NO-JIRA: fix(e2e): lower pull secret in-place propagation test gate to 4.22 #8553
OCPBUGS-86075: docs(nodepool): fixing incomplete stuck node drain documentation in section Scaling To Zero #8544
CNTRLPLANE-3222: Port v1 lifecycle tests to v2 Ginkgo framework #8527
AUTOSCALE-692: remove default debug log level from karpenter container #8561
OCPBUGS-86310: Handle CA bundle aggregation delay by requeuing revocation #8563
CNTRLPLANE-3329: Use fuse-overlayfs for build cache instead of full copy #8568
NO-JIRA: fix(e2e): use public multi-arch image for ARM64 karpenter test #8532
OCPBUGS-86238: set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8552
OCPBUGS-85351: fix(azure): prevent externalDNSDomain from shadowing cluster apps domain #8480
CNTRLPLANE-3371: Fix AllowedCIDRs e2e test for Route-based KAS #8469
NO-JIRA: build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /hack/tools #8547
NO-JIRA: Update Konflux Tekton task bundles #8557
NO-JIRA: chore(deps): weekly dependabot consolidation #8464
CNTRLPLANE-3070: Support KMS on self-managed Azure without affecting ARO HCP #8088
OCPBUGS-59142: fix ValidReleaseImage condition message to show minor version #8519
NO-JIRA: Add onboarding guide for new HCP team members #8132
OCPBUGS-85011: fix(cpo): use check-first pattern for EBS CSI operator serving cert #8418
CNTRLPLANE-3329: Extend EFS-backed build cache to lint, verify, and envtest workflows #8495
NO-JIRA: ci(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 #8524
OCPBUGS-85763: Fix metrics-proxy deployment failure due to dots in volume names #8530
GCP-636: feat(gcp): support for managing GCP OIDC discovery documents #8413
OCPBUGS-84307: Clarify –base-domain flag default behavior #8381
AUTOSCALE-681: various karpenter and karpenterupgrade test fixes #8510
CNTRLPLANE-3329: Replace actions/cache with EFS-backed build cache in unit tests #8494
OCPBUGS-85577: Update external-dns image from 1.1.0-3 to 1.2.1 #8506
OCPBUGS-77827: fix(api): add missing has() guards to servingCerts CEL validation rule #8331
CNTRLPLANE-3380: docs: add aws-node-termination-handler to repositories list #8514
OCPBUGS-85580: Fix webhook TLS failure after service-ca to self-managed cert migration #8504
build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /hack/tools #8481
OCPBUGS-85344: Add version gates for 4.22 backward compatibility in e2e tests #8466
AUTOSCALE-681: remove TechPreviewNoUpgrade gate from karpenter upgrade test #8498
CNTRLPLANE-3329: Mount EFS-backed Go build cache PV on ARC runner pods #8493
NO-JIRA: docs: add repositories page listing team-owned repos #8505
CNTRLPLANE-3329: Add nightly CronJob to warm EFS-backed Go build cache #8496
CNTRLPLANE-3324: Restore non-obvious comments after gocyclo refactor #8487
AUTOSCALE-558: Expose KubeletConfig on OpenShiftEC2Nodeclass as structured fields + preserveunknown/overflow #8192
NO-JIRA: Fix docs deploy preview by replacing gh CLI with curl #8488
CNTRLPLANE-2946: Move AWS NLB annotation inside LoadBalancer strategy block #7993
OCPBUGS-78539: re-add crash toleration for dns-operator during upgrades #8483
CNTRLPLANE-3384: Remove unconditional low-quality log messages from controllers #8428
OCPBUGS-84971: Gate AWSDefaultSecurityGroupDeleted condition to AWS platform #8415
CNTRLPLANE-3324: Enable gocyclo linter and reduce cyclomatic complexity #8309
NO-JIRA: fix(karpenter): resolve HCP karpenter finalizer when AutoNode is disabled #8404
OCPBUGS-62177: verify cert revocation against all KAS pods #8263
NO-JIRA: Document CEL over webhooks policy for AI agents #8478
NO-JIRA: docs(kubevirt): add how-to for configuring VMs with JSON patches #8473
CNTRLPLANE-1741: Migrate gomaxprocs-webhook pipelines to use common-operator-build #7122
NO-JIRA: docs: update api-sme agent and api/AGENTS.md conventions #8477
OCPBUGS-81686: fix(authentication): use v2 auth validation for CEL and expression support. #8246
OCPBUGS-85084: fix(ci): use explicit lease in dependabot commit fix push #8476
OCPBUGS-75887: fix(inplaceupgrader): include node name in degraded upgrade error message #8244
NO-JIRA: fix(e2e): prevent agent unbinding and node reboots during backup/restore #8356
NO-JIRA: Update GHA docs for reusable workflow pattern #8453
GCP-413: add image registry v2 e2e tests for hosted clusters #8412
NO-JIRA: docs: make CLAUDE.md a symlink to AGENTS.md across the repo #8444
CNTRLPLANE-2778: feat(tooling): overhaul pr-report skill and Python script #7754
ACM-33601: use the latest ubi9 nginx image #8432
GCP-414: add image registry operational guide #8455
OCPBUGS-84528: clarify pull secret in-place update behavior and add CP watches #8327
OCPBUGS-84955: Add render-sensitive flag to hypershift install render #8436
OCPBUGS-84857: bump go builder and ubi images #8437
GCP-410: fix(gcp): add registry SA WIF binding for image registry GCS access #8445
CNTRLPLANE-3381: CPO: Surface cloud resource deletion timeout as a status condition #8426
OCPBUGS-85084: fix(ci): rewrite dependabot commit messages to pass gitlint #8435
NO-JIRA: docs: detail release branch e2e config steps in branch-process guide #8441
CNTRLPLANE-3222: Migrate self-managed Azure e2e tests to v2 Ginkgo framework #8204
GCP-412: add envtest cases for GCP imageRegistry CEL validation #8411
CNTRLPLANE-2939: Coordinate CRD lifecycle with Cluster CAPI Operator #7996
OCPBUGS-77040: Add AWS ISO domains to konnectivity IsCloudAPI #8251
OCPBUGS-83328: fix skipProxyForKAS to use standard NO_PROXY matching #8254
OCPBUGS-84969: fix(e2e): wait for Karpenter node cleanup in parallel tests to prevent vCPU flake #8414
CNTRLPLANE-3343: Extract support/k8sutil package from support/util #8396
TRT-2653: Revert #8357 “OCPBUGS-84572: fix(cpo): generate EBS CSI driver operator serving cert in CPO” #8417
NO-JIRA: chore(deps): weekly dependabot consolidation #8410
NO-JIRA: Skip TestKarpenter for releases < 4.22 #8409
CNTRLPLANE-3351: e2e: add opt-in CPU resource request overrides for control plane components #8385
OCPBUGS-84509: Add AWS LB Controller cross-zone load balancing annotation #8344
OCPBUGS-84572: fix(cpo): generate EBS CSI driver operator serving cert in CPO #8357
OCPBUGS-81631: fix(metrics): remove noisy vCPU log for non-AWS platforms #8169
NO-JIRA: Extend timeout for CRD removal during integration tests #8366
NO-JIRA: chore(deps): weekly dependabot consolidation #8395
OCPBUGS-83868: prevent IAM resource leaks during cluster destroy #8303
GCP-635: feat(gcp): make JWKS file optional when OIDC issuer URL is provided #8339
OCPBUGS-83757: Remove network dependencies from unit tests #8277
ci(deps): bump actions/setup-go from 5.6.0 to 6.4.0 #8393
OCPBUGS-84508: Fix NLB name parsing for EKS Auto Mode hostnames #8343
AUTOSCALE-615: include Karpenter node vCPUs in billing metric #8265
CNTRLPLANE-3352: Convert GHA callers to use reusable workflows @main #8387
CNTRLPLANE-3342: Extract support/netutil package from support/util #8360
CNTRLPLANE-3352: Add reusable GHA workflow definitions #8386
GCP-410: feat(gcp): add HCCO credential propagation for GCP image registry #7896
OCPBUGS-84551: fix(ingress): set FIPS_ENABLED env var on ingress operator #8375
CNTRLPLANE-3307: add unit tests for Azure Private Link Service controllers #8285
CNTRLPLANE-3160: Drop AutoNodeKarpenter feature gate and promote EC2NodeClass to v1 #8166
NO-JIRA: Improve commit and PR guidance in AGENTS.md #8373
OCPBUGS-83790: change Azure workload identity webhook FailurePolicy from Fail to Ignore #8288
NO-JIRA: chore(deps): weekly dependabot consolidation #8334
NO-JIRA: Add API dependency import restriction tool #8364
SPLAT-2587: aws/ccm: introduce configuration to CCM managed Security Groups for NLB #7460
NO-JIRA: add –max-depth flag to nav order verification #8372
NO-JIRA: Do not import external dependencies into API packages #8355
CNTRLPLANE-3340: Extract support/podspec package from support/util #8354
OCPBUGS-84251: fix(azure): detect and replace stale role assignments on cluster re-creation #8322
OCPBUGS-84236: Guard Infrastructure CR lookup in AWSEndpointServiceReconciler #8315
fix: OCPBUGS-78575: create virt-launcher NetworkPolicy on external infra cluster #8056
CNTRLPLANE-3330: ci: improve unit test speed with sharding and parallelism #8330
CNTRLPLANE-3313: add Etcd Snapshot Backup (Tech Preview) DR documentation #8299
CNTRLPLANE-2834: add e2e test for etcd snapshot backup method on AWS #8231
docs: NO-JIRA: clarify serialization tag behaviour in api/AGENTS.md #8328
OCPBUGS-84248: Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #8320
NO-JIRA: ci(deps): bump GitHub Actions dependencies #8333
OCPBUGS-77529: clean stale mock files before make generate function #8237
OCPBUGS-79471: fix(test): reduce e2e autorepair flakes from unhealthy node conditions #8278
NO-JIRA: docs: clarify that control plane downgrades are not supported #8314
CNTRLPLANE-2204: improve AllNodesHealthy and AllMachinesReady conditions #8247
GCP-431: feat: Add CNCC support for GCP WIF in HyperShift #7824
OCPBUGS-83410: fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8238
Revert “OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters” #8301
NO-JIRA: docs: add jira:ready-to-solve to agentic SDLC workflow #8304
OCPBUGS-83397: Fix concurrent CRD reconciliation race #8266
NO-JIRA: MCE 5.0 branch cut #8290
OCPBUGS-83751: add missing RBAC for webhook configurations #8276
OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters #8273
NO-JIRA: chore: pass COMMIT_HASH build arg to support git worktrees #8279
OCPBUGS-78539: revert temporary crash toleration for dns-operator #7994
CNTRLPLANE-3296: fix: auto-create python venv in Makefile for verify targets #8269
OCPSTRAT-2499: docs(e2e): add AI agent guidance for v2 test framework #8207
AUTOSCALE-490: increase autonode test coverage #7979
OCPBUGS-83604: fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8264
NO-JIRA: fix(test): set 1h time limit on e2e capacity reservations #8208
NO-JIRA: docs(agents): add CRD API machinery fundamentals and envtest docs #8236
OCPBUGS-83585: Wait for CRD removal in GenerateCRDInstallTest to fix flaky envtest #8261
NO-JIRA: drop redundant api_ux_validation e2e test #8210
CNTRLPLANE-3255: enable CodeRabbit reviews on draft PRs #8250
CNTRLPLANE-635: Enable nilness and unparam checks in golangci-lint #8258
AUTOSCALE-590: karpenter version logging verification #8058
CNTRLPLANE-3259: Add sdminonne, clebs, and Nirshal to core-reviewers #8252
ci(claude): add konflux-build command for manual non-expiring builds #7964
NO-JIRA: fix(e2e): handle uint64 underflow in karpenter version computation for 5.x #8227
CNTRLPLANE-3174: Add unit tests for v2 CPO controller packages #8215
OCPBUGS-83538: fix(metrics-proxy): resolve ports from pods instead of deployments #8221
CNTRLPLANE-3260: fix(ci): split docs-preview into build+deploy to eliminate pwn request #8256
CNTRLPLANE-3203: Add autoscaling documentation for self-managed Azure #8239
NO-JIRA: add ENVTEST_JOBS knob for parallel envtest execution #8243
CNTRLPLANE-3260: ci: harden GitHub Actions workflows #8253
CNTRLPLANE-3214: add envtest suites for HCPEtcdBackup CRD validation #8199
CNTRLPLANE-3254: Sort how-to guides alphabetically and add CI enforcement #8248
OCPBUGS-67228: fix(shared-ingress): bump haproxy to 3.0.5-4.el10_1.1 #7370
CNTRLPLANE-3065: docs: add Agentic Software Development Life Cycle page #8235
OCPCLOUD-3347: feat(machine-approver): add TLS configuration options to deployment manifests #8019
OCPBUGS-83389: fix(supportedversion): normalize OCP 5.x versions for skew and release validation #8225
SREP-4438: refactor(karpenter): tidy Cincinnati version resolution #8206
NO-JIRA: revert: remove .git/ from .dockerignore #8201
CNTRLPLANE-3197: add release-4.22 branch to renovate configuration #8196
CNTRLPLANE-3197: update builder images from 4.22 to 4.23 #8194
CNTRLPLANE-3216: Add codecov.yml validation to make verify #8202
GCP-368: add GCP CCM v2 e2e tests #7840
CNTRLPLANE-3233: ci(gha): add release-4.22 branch to GitHub Actions workflows #8217
CNTRLPLANE-3197: update latest supported version from 4.22 to 4.23 #8193
CNTRLPLANE-3174: Add unit tests for CPO controller packages #8184
CNTRLPLANE-3215: fix envtest GHA workflow path filters for CRD test suites #8200
CNTRLPLANE-2078: add unit tests for AWS Route53 and IAM #8079
OCPBUGS-82301: fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 #8195
NO-JIRA: control-plane-pki-operator: fix Event emission logic, format #8190
OCPBUGS-82192: fix(webhookcerts): handle upgrade from service-ca managed certs #8189
OCPBUGS-82159: fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads #8182
CNTRLPLANE-2511: refactor(cpo): move OAuth internal LB annotation into ReconcileService #8185
CNTRLPLANE-2511: Support OAuth LoadBalancer with Azure Private Link Service #8149
OCPBUGS-81644: fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology #8151
OCPBUGS-33097: Remove deprecated OVNSbDb service type from default strategy mappings #8164
CNTRLPLANE-3174: test: Add unit tests for product-cli, token-minter, and sync-fg-configmap #8178
CNTRLPLANE-3050: feat(ci): use Konflux-built image for GitHub Actions runners #8092
CNTRLPLANE-2841: test(e2e): add metrics-forwarder e2e test verifying data-plane scraping #8147
CNTRLPLANE-3037: Create separate assets package specifically for CRD management #8150
GCP-462: Add GCP hosted cluster documentation #8027
NO-JIRA: docs(ci): add sync-community-fork token rotation guide #8173
CNTRLPLANE-2841: feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics #8146
NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup #8137
NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list #8171
CNTRLPLANE-2511: Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure #8148
NO-JIRA: chore(ci): add client/ to codecov ignore list #8167
NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests #8144
OCPBUGS-74960: prevent resource leak on deletion and handle DependencyViolation #7868
NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override #8155
CNTRLPLANE-3042: Parallelize make verify targets for faster local development #8051
NO-JIRA: ci: fix codecov ignore patterns for docs and nested files #8156
OCPBUGS-81270: fix(external-dns): mitigate Azure DNS API throttling #8098
NO-JIRA: ci: ignore non-Go files in codecov coverage analysis #8154
OCPBUGS-67240: Ignition generalize image download errors #7673
NO-JIRA: fix(Makefile): auto-detect upstream remote for lint #8152
OCPBUGS-79539: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8072
AUTOSCALE-582: wire CRD sync and CEL adjustments into karpenter-api target #8119
CNTRLPLANE-3111: docs: add service publishing strategies reference documentation #8107
NO-JIRA: ci: make docs deploy preview non-blocking #8145
Revert “CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics” #8141
NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check #8128
OCPBUGS-50003: add ConfigMap fallback and EC2 error caching for vCPU metrics resolution #6723
CNTRLPLANE-2172: feat(azure): add private endpoint access topology for self-managed HostedClusters #7821
CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics #7790
CNTRLPLANE-2797: hypershift-operator webhooks port 9443 respect cluster TLS security profile #8078
OCPBUGS-50603: Create dedicated identity for KAS bootstrap container #6827
Revert “NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout” #8138
NO-JIRA: ci: improve CI efficiency and codecov configuration #8113
NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test #8131
OCPBUGS-81162: fix(cpo): skip router LB services for ARO HCP #8087
NO-JIRA: ci: enable paths filter on envtest workflows #8125
NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout #8124
NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop #8127
NO-JIRA: chore(docs-agg): remove document count from aggregated file #8126
NO-JIRA: ci: separate envtest from unit tests in CI workflow #8120
OCPBUGS-80926: consolidate disaster-recovery prerequisites into dedicated page #8080
CNTRLPLANE-3116: fix(ci): drop pip cache from docs-preview workflow #8116
NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity #8117
OCPBUGS-78763: fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time #7981
CNTRLPLANE-3037: Introduce envtest for integration tests alternative #8089
CNTRLPLANE-3116: ci(docs): migrate docs-preview job to GitHub Actions #8109
CNTRLPLANE-244: fix(ci): configure Codecov PR comments and add unit tests #8085
NO-JIRA: chore(deps): weekly dependabot consolidation #8077
OCPBUGS-78931: add KubeVirt-specific backup settings #8022
OCPBUGS-81284: fix(release): allow multiple machine-os component versions #8101
NO-JIRA: fix(aws): load credentials from –aws-creds file using SDK v2 #8095
NO-JIRA: chore(ci): update hypershift-ci-2 manifests #8062
CNTRLPLANE-2678: Adapt etcd-backup command and add HO namespace manifests #8040
CNTRLPLANE-2551: Hypershift integration for API Auth Config changes #7774
GCP-447: inject token-minter as native sidecar init container #7965
AUTOSCALE-538, AUTOSCALE-539: Add Autonode status node counts + enabled condition to HostedCluster API #7794
CNTRLPLANE-244: ci: add Codecov integration to unit test workflow #8060
CNTRLPLANE-3050: Pre-build lint tools and fix Konflux pipeline triggers #8052
CNTRLPLANE-2838: feat(CPO): add metrics-proxy control plane component #7752
CNTRLPLANE-2787: Introduce BASE_DOMAIN env var for E2E test configuration #7930
CNTRLPLANE-2786: Extend controller architecture diagram with consumes relationship #8029
IR-350: add tls security profile configuration for the image registry operator #8011
AUTOSCALE-571: fix(karpenter): don’t associate public IP addresses for the default OpenshiftEC2NodeClass #7853
NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP < 4.21 in backup/restore tests #8067
CNTRLPLANE-2076: remove v2 import aliases left from SDK migration #8063
AUTOSCALE-559: PrivateLink plumbing for karpenter ec2nodeclass subnets #7791
STOR-2770: Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller #7970
CNTRLPLANE-2678: Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup #8010
NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure #8074
CNTRLPLANE-2172: feat(api): add Azure private endpoint access and PrivateLinkService CRD #8055
OCPSTRAT-2831: chore(owners): add cblecker to core-reviewers and core-approvers #8018
OCPBUGS-79428: Add recipe for ACM/MCE HyperShift Operator overrides #8057
CNTRLPLANE-2076: complete SDK v1 removal and post-migration cleanup #8038
CNTRLPLANE-2049: update GCP validation error expectations in TestOnCreateAPIUX #8037
CNTRLPLANE-3046: feat(ci): add monitoring and alerting for ARC runners #8044
CNTRLPLANE-3049: split verify checks into individual GitHub Actions workflows #8049
OCPBUGS-79352: fix(oapi): force WatchList feature gate to disabled for openshift-apiserver #8035
OCPBUGS-79071: Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections #8030
CNTRLPLANE-3041: Override ARO/HCP 4.20 CPO with Azure Pod Identity backport #8025
CNTRLPLANE-3054: Apply init task 0.3 migration to fix broken Konflux pipelines #8053
OCPBUGS-70301: force-remove karpenter finalizer when guest KAS is down #7939
CNTRLPLANE-3047: fix(ci): use community fork token for checkout credential helper #8050
CNTRLPLANE-2788: validate memory quantity in KubeVirt nodepool create #7884
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions #8048
CNTRLPLANE-3048: refactor gh-actions-runner pipelines and improve CEL triggers #8045
OCPBUGS-79369: Add Konflux archived PipelineRun skill and update task discovery #8043
CNTRLPLANE-3047: add workflow to sync hypershift-community fork #8042
NO-JIRA: chore(claude): add restructure-commits plugin command #7927
CNTRLPLANE-2986: feat(ci): Add self-hosted GitHub Actions runners for HyperShift #7980
NO-JIRA: fix(ci): pass –upgrade-versions to konflux task update skill #8036
CNTRLPLANE-2998: Migrate SQS to AWS SDK v2 #8015
NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection #7971
OCPBUGS-78996: fix(test): create SQS queue dynamically in spot termination handler e2e test #8007
CNTRLPLANE-2049: fix(api): audit and improve GCP API validation rules #8003
CNTRLPLANE-2081: Migrate RAM and ARN to AWS SDK v2 #7986
OCPBUGS-78778: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001
NO-JIRA: Disable parent ownership for api subdir #8009
NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget #8004
OCPBUGS-78544: Update base images to address multiple CVEs flagged by MSFT security scans #7983
OCPBUGS-78705: Bootstrap CVO manifests should be filtered based on feature-set annotation #7984
NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types #8002
NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e #7919
CNTRLPLANE-2925: add NodePool.Status.NodesInfo for node version distribution #7917
OCPSTRAT-2336: Adjust karpenter API to OpenShift conventions #7952
OCPBUGS-78539: chore(e2e): add temporary crash toleration for dns-operator #7978
CNTRLPLANE-2172: fix(e2e): register Azure private platform e2e flags #7977
NO-JIRA: chore(owners): require api-approvers approval for api/ changes #7972
Update Kube API Linter config for new APIs #7982
NO-JIRA: add .gitattributes to collapse generated files in PR diffs #7918
CNTRLPLANE-2910: feat(cpo): add Azure workload identity webhook as KAS sidecar #7867
CNTRLPLANE-2077: refactor(cleanzones): migrate AWS SDK from v1 to v2 #7960
CNTRLPLANE-2219: feat(aws): migrate ec2 to AWS SDK v2 #7871
GCP-440: Fix GCP boot image discovery from CoreOS stream metadata #7881
And 17 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

OCPBUGS-83587: bump google.golang.org grpc v1.79.3 #106
NO-JIRA: Update OWNERS #95
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: Bump gRPC library to v1.79.3 and replace golang.org/x/net/context with context #149
Full changelog

ibm-vpc-block-csi-driver-operator

NO-ISSUE: Bump google.golang.org/grpc to v1.79.3 #172
STOR-2762: Bump all deps for 4.22 #168
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #160
OCPCLOUD-3359: Add TLS substitutions #158
NO-JIRA: Update manifests generator #159
NO-JIRA: Update OWNERS #156
Full changelog

ibmcloud-machine-controllers

NO-JIRA: Update OWNERS #93
OCPCLOUD-3278: Rebase to Kube 1.35 for Machine API Provider IBM #83
OCPBUGS-77729: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #80
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #82
Full changelog

insights-operator

CCXDEV-15790: extractor controller #1280
OCPBUGS-85710: add trusted-ca-bundle to gatherin job #1289
CCXDEV-16348: tls metrics #1275
OCPBUGS-77351: fix: add terminationMessagePolicy to runtime extractor containers #1286
NO-JIRA: remove BaiyangZhou from OWNERS #1273
OCPBUGS-85201: Bump google.golang.org/grpc to v1.79.3 #1288
NO-JIRA: Update golang version #1277
NO-JIRA: add write-test claude skill #1274
CCXDEV-15561: Improve test coverage 4 #1226
CCXDEV-15964: fetch TLS profiles from API server #1257
CCXDEV-15963: kubeletconfig gatherer #1247
NO-JIRA: generate gatherer docs #1256
CCXDEV-16094: add config option to disable runtime extractor #1248
CCXDEV-16006: add permission for opentelemetrycollectors #1252
OCPBUGS-78115: Fix string accessor error #1253
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Update OWNERS to remove ‘tremes’ #67
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #821
OCPBUGS-83618: Bump sushy to latest #838
NO-ISSUE: Fix update requirements workflow #842
NO-ISSUE: Document how to use gerrit change hash for testing #839
OKD-362: Add watchdog to python-requirements.okd #837
OCPBUGS-82540: Bump pyasn1 to 0.5.1-5 #822
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #818
METAL-1758: Merge upstream 2026 03 16 #814
METAL-1735: Add TLS cipher suite and curves related options to ironic for centralized tls support #810
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #816
METAL-1771: Remove heredoc syntax for hermetic builds compatibility #815
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #812
OCPBUGS-77528: Fix interface detection when MAC/IP matches multiple interfaces #807
METAL-1726: Multi-stage wheel-builder for OCP builds #786
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #808
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #806
METAL-1749: Uplift setuptools to remove python-wheel deps #804
METAL-1748: Drop genisoimage in favor of xorriso #803
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #805
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #801
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #799
OCPBUGS-76935: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #790
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #793
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #789
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #784
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #783
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #773
ART-14497: Fix ART builds with -minimal #779
NO-ISSUE: Bump openstacksdk version to 4.9.0 #776
OCPBUGS-74579: fix for minimal builds #772
OCPBUGS-74427: Bump eventlet version to latest bugfix #770
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #768
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #762
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #255
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #254
NO-ISSUE: Remove openstack repo workaround #249
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #253
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #248
METAL-1779: Add podman package for bootc deploy #247
NO-ISSUE: Fix update requirements workflow #252
NO-ISSUE: Document how to use gerrit change hash for testing #250
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #246
METAL-1749: Uplift setuptools to remove python-wheel deps #245
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #243
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #242
OCPBUGS-74579: fixes for minimal builds #240
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #238
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #237
Full changelog

keepalived-ipfailover

OCPBUGS-86911: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 5.0 #236
OCPSTRAT-3113: Set DEFAULT:PQ crypto-policies to RHEL9 base image #230
Revert “OCPBUGS-84344: yum.conf: omit docs, weak deps” #234
OCPBUGS-84344: yum.conf: omit docs, weak deps #231
Full changelog

kube-rbac-proxy

CNTRLPLANE-2932: Merge upstream v0.21.1 #133
Full changelog

kube-state-metrics

OCPBUGS-85098: [bot] Bump openshift/kube-state-metrics to v2.19.0 #141
Full changelog

kubevirt-csi-driver

CNV-82343: Add annotation-based fallback for infra VM node ID resolution (#170) #80
Full changelog

machine-api-operator

OCPBUGS-85416: Enable actuators to set terminal failure on Exists and Update #1499
SPLAT-2745: Changed vSphere cloud config to be read from openshift-config-managed #1495
OCPBUGS-82584: Populate status label selector for scale subresource. #1490
NO-JIRA: machine-api-termination-handler: add scc annotation, terminationMessage: FallbackToLogsOnError #1494
NO-JIRA: bump controller-runtime-common to latest main #1493
NO-JIRA: fix: importing nutanix test to in the binary #1491
NO-JIRA: Update OWNERS #1486
OCPCLOUD-3346: tls: use centralized TLS #1456
MON-4497: metrics: migrate Prometheus SD from Endpoints to EndpointSlices #1457
SPLAT-2680: Changed DHA to require hostAffinity=host #1484
OCPCLOUD-3282, OCPCLOUD-3288: Bump to k8s 1.35 dependencies #1474
NO-JIRA: fix flaky TestReconcile/machine_with_node_likely_to_go_unhealthy#1483 #1483
SPLAT-2680: Fixed MAO to not allow dedicated host configurations for control plane nodes #1477
Full changelog

machine-config-operator

AGENT-1531: Remove localhost.localdomain workaround for MCN IRI image field #6146
Fixes OCPBUGS-77140: increase LRU cache and prefetch timeout for PinnedImageSet #6046
OCPBUGS-87014: Remove skopeo-install script #6141
OCPBUGS-86965: make test 69755 more stable #6127
OCPBUGS-86554: Wait for operators after removing master machine #6091
OCPBUGS-85427: Remove trailing newline (\n) characters in klog message strings #6112
MCO-2211: MCO-2210: MCO-2234 MCO-Migrate MCO tests from openshift-tests-private #5902
OCPBUGS-86890: fix: update arbiter crio config #6120
MCO-2296: Remove OSImageStreams v1 replace #6133
MCO-2296: OSImageStreams v1 promotion #6076
AGENT-1526: disable htpasswd auth on IRI registry, keep read-only #6109
NO-ISSUE: Add -L flag to curl to follow redirects automatically #6121
OCPBUGS-86041: update IsSNO helper function to correctly access the cluster’s topology #6110
OCPBUGS-83619: Add version guard for OSStream rendering #6111
NO-ISSUE: Lower IRI deletion log verbosity #6119
OCPBUGS-86179: Update ImageModeStatusReporting MCP machine count tests to be resilient on SNO topology #6089
OCPBUGS-86800: Update AMI Whitelist #6108
OCPBUGS-86671: Fix InternalReleaseImage URL transform #6100
AGENT-1488: Aggregate IRI status from MachineConfigNodes #5841
OCPBUGS-63750: fix Go build tag behavior #5494
OCPBUGS-86474: Tests using realtime kernel should not be limited to a… #6084
OCPBUGS-86332: remove tests using base images older than 4.13 #6077
NO-ISSUE: Update TC-88366 to check osImageStream status after update completes #6078
AGENT-1491: reclaim disk space from the node when IRI resource is deleted #5988
OCPBUGS-86035: Adapt test ‘54922 - daemon: add check before updating kerne… #6056
AGENT-1517: fix iri deletion test #6070
OCPBUGS-83987: Fix CVE-2026-33186 #6065
OCPBUGS-84814: Skip chrony-wait on first node join #5990
MCO-2273: MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite #6024
AGENT-1517: disable iri-registry service on IRI delete #6041
OCPBUGS-85237: Manually uncordoned nodes are not automatically re-cordoned #6028
OCPBUGS-15157: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6000
OCPBUGS-65645: Verify extension packages are installed #6010
OCPBUGS-79502: Enable AutoSizingReserved for Hypershift workers #5847
NO-JIRA: daemon: expand os image presence check #6005
MCO-2212: MCO-2213: Migrate mco_observability and mco_daemon test-suite #5875
OCPBUGS-63650: configure-ovs: copy lldp mode to br-ex port #5698
OCPBUGS-85498: BareMetal skew e2e fails patching provisioning CR after CBO webhook fix #6031
OCPBUGS-85497: only check password hash in /etc/shadow #6030
NO-JIRA: Add fix for ossImagestream status #6018
MCO-2025: OCP-88366 and add OCP-88814 for osImageStream with osImageURL #6014
OCPBUGS-83830: Apply password only if changes exist #5889
AGENT-1514: Add ML-KEM verification test for IRI registry #6003
OCPBUGS-84516: Add terminationMessagePolicy to build pod containers #5993
OCPBUGS-85117: Fix 2 flakes happening in the ocl test suite #6004
OCPBUGS-84842: Bootloader update attempt should be conditional #5907
OCPBUGS-75894: use --delete-if-present for karg removal #5914
OCPBUGS-84661: Fix wrong early exit during kubelet MCs regeneration #5898
AGENT-1443: IRI Add certificate regeneration to MCS cert rotation controller #5721
OCPBUGS-84691: prom rules: add alert for nodes using runc #5874
MCO-1908, MCO-2213: Migrate MCD related MCO test-cases #5843
OCPBUGS-84867: Fix OCL test to handle temporarily empty current-machine-os-build annotation #5913
OCPBUGS-84832: daemon: don’t pull/extract extensions for all OS updates #5905
OCPBUGS-84852: Update AMI Whitelist #5910
OCPBUGS-84150: MachineOSConfig “build was not found” error #5878
OCPBUGS-84699: Custom pool booting must handle matchExpressions in nodeSelector #5899
OCPBUGS-84565: Fix CVE-2026-34986 #5890
OCPBUGS-83871: Support bootloader update #5868
OCPBUGS-84332: Fix ssh and password rollbacks #5884
MCO-2222: /automate-test skill for generating e2e tests from specifications #5864
OCPBUGS-84652: Include RootCA in the temporal CC #5896
OCPBUGS-83492: Auto-append :ref suffix to additionalLayerStores in storage.conf #5888
OCPBUGS-83826: deploy-from-self when skopeo < 1.22.2 #5867
OCPBUGS-84490: Bump image build timeout for status reporting test #5886
MCO-2201: Improve /migrate-tests skill: default labels and ordering verification #5879
OCPBUGS-83859: Fix encapsulated IGN version #5872
MCO-1494: Remove monolithic e2e-ocl test suite #5880
AGENT-1449: Add IRI registry authentication support to MCO #5765
OCPBUGS-84218: Fix units rollback if update failure #5876
OCPBUGS-79425: improve JSON unmarshalling for secret decoding #5813
OCPBUGS-83401: add RootCA cert to the sysContextBuilder certs #5861
OCPBUGS-82500: ClusterHostedDNS on AWS/Azure/GCP: Modify Corefile template to better handle empty record types #5844
MCO-2201: Add Claude /migrate-tests command for MCO test migration #5837
MCO-1908: Migrate Kernel related MCO test-cases #5827
OCPBUGS-83539: Update AMI Whitelist #5851
OCPBUGS-78524: Allow enablement of systemd units with existing files #5846
OCPBUGS-82974: Make IRI registry read-only via environment variable #5845
OCPBUGS-81572: order corosync after OVS configuration on TNF clusters #5834
OCPBUGS-83517: Revert ovs increase CPU priority for Open vSwitch Forwarding Unit #5849
OCPBUGS-63152: Fail wait-for-node-ip if primary IP(s) disappear #5350
MCO-2135: Add test for OSStream labeling of Machines, MachineSets, and ControlPaneMachineSets #5814
AGENT-1307: add MCD IRI manager #5807
MCO-2202: separate duplicate PinnedImageSet validation into OCP-88562 #5839
MCO-2163: adds machine-config-osimagestream installer helper #5770
OCPBUGS-69936: ovs: increase CPU priority for Open vSwitch Forwarding Unit #5797
MCO-1972: Removes OSImageURLConfig from the build controller #5424
Reapply “MCO-2120: Rework OS Image Stream label classification” #5767
OCPBUGS-68336: When adding new nodes, MCD executes commands after setting the nodes’ state as Done #5832
AGENT-1416: Add default NodeDisruptionPolicy for IRI #5683
NO-ISSUE: Fix order of cleanup to further avoid race #5826
MCO-2183: migrated configdrift, kubeletconfig, containerruntimeconfig… #5818
OCPBUGS-78154: Use HA leader election defaults for MCO on SNO #5764
OCPBUGS-78498: Update skew error message with doc links #5825
MCO-2168: Deleting a PinnedImageSet does not affect images pinned by another PinnedImageSet #5786
NO-ISSUE: In extended tests, disable Skew when disabling the bootimag… #5811
MCO-2171: Move long running boot image tests to MCO’s disruptive suites #5808
NO-ISSUE: Fix MCN Applied condition checks for TP and non-TP clusters #5796
OCPBUGS-80970: MCS fallback to latest v3 #5816
AGENT-1366: Report InternalReleaseImageController errors in IRI status #5803
OCPBUGS-62619: Add etcd size limit validation for rendered MachineConfigs #5729
MCO-2155: Add stream detection to some more boot image tests #5799
MCO-2167: Migrate alert test cases from the private repository #5781
OCPBUGS-78500: Skew enforcement should dynamically handle baremetal clusters #5768
OCPBUGS-79088: OCPBUGS-79357: Skip boot image updates until cluster is stable #5789
OCPBUGS-79361: Update AMI Whitelist #5788
NO-ISSUE: Update AMI collection script for installer changes #5790
OCPBUGS-75200: set default-timeout-stop to 200s globally #5782
MCO-2155: Add stream detection to boot image tests #5784
NO-ISSUE: Revert “extract oc binary from base OS image after build” #5785
OCPBUGS-66104: Fine tune CoreDNS pod configuration to improve performance #5695
MCO-2117: Allow default OSImageStream overrides #5714
OCPBUGS-78595: Fix log substring matching for disruptive test suite jobs #5769
OCPBUGS-74223: Re-order logger setting to eliminate race condition #5691
MCO-2146: do not use OSImageStream in Hypershift #5750
NO-ISSUE: always build golangci-lint from vendor #5772
OCPNODE-3201: Default Enablement of system-reserved-compressible in OpenShift #5408
OCPNODE-3880: Add criocredentialproviderconfig event handler #5487
OCPNODE-4074: Add additional storage configuration support for CRI-O #5666
NO-ISSUE: Increase timeout + interval for OCL test cleanup #5732
MCO-2151: Add stream detection to the boot image controller #5752
NO-ISSUE: Allow setting kubeletconfig log level to zero #5757
OCPBUGS-57473: extract oc binary instead of pulling OS image #5313
OCPBUGS-78107: Disable sandboxed-containers in arm64 10 #5754
Full changelog

machine-image-customization-controller

METAL-1730: Add stream selection for multi-version support #175
METAL-1720: Add kernel file support for multi-architecture PXE boot #170
Full changelog

machine-os-images

METAL-1730: Add stream symlinks for multi-stream support #83
OCPBUGS-85476: Force rebuild for OCP 5.0 #87
METAL-1786: Include RHEL10 in image #82
METAL-1729: Add dual CoreOS version support for RHCOS 9 and 10 #81
Full changelog

metallb-frr

OCPBUGS-85711: Sync 2026-05-27 #132
Bump to frr 10 #127
OCPBUGS-82973: Sync 25-3-2026 #128
Full changelog

monitoring-plugin

OBSINTA-1358: add operator-sdk to Cypress test runner image #966
OU-1399: pass ISO string to Timestamp component for valid date rendering #968
OU-1275: remove byte order mark from dashboard text #960
COO-1776: fix: throw error for unsupported dashboard level datasources #948
OU-1269: Update monitoring-console-plugin for 4.22 #923
OU-1281: show disabled project bar while loading #936
OU-1351: prevent namespace and project desync #933
OU-1315: reset queries when namespace changes in dev perspective #932
OU-1348: fix: panel actions index so they are visible on click #928
OU-1347: fix: avoid throwing error to fallback to global datasource #920
OU-1203: upgrade perses dependencies #914
NO-JIRA: Revert “NO-JIRA: Bump to 4.22.0-prerelease.3 SDK” #915
NO-JIRA: Bump to 4.22.0-prerelease.3 SDK #903
OU-1323: Refactor dashboards state to prevent desync #912
OU-1341: pass label values to the filter #913
OU-1091: swap monitoring-plugin to use DataView #911
NO-JIRA: update perses and fix vulnerable dependencies #900
TRACING-6030: add RouterProvider to support links in Panels #891
OU-1217: perses customizable dashboards with perses global datasources for tempo and loki #877
OU-1307: don’t fight console to setActiveNamespace #880
NO-JIRA: re-enable get CSRF token #876
OU-1264: mcpToolUI basic implementation for OpenShift Lightpseed + obs-mcp + Perses #797
NO-JIRA: breaking changes follow up #875
OU-1175: OCP 4.22 Breaking Changes #863
OCPBUGS-81567: fix: re encode params when redirecting from graph to query-browser #869
OU-1184: lint enabled against cypress files and changes post coo #862
NO-JIRA: automation testing fix on podImage #868
NO-JIRA: exclude @xfail tests from CI incident commands #865
OBSINTA-1002: consolidate COO 1.4.0 test case documentation #793
NO-JIRA: podImage fix automation testing to remove extra click #864
OBSINTA-993: Tests for incident detection coo 1.4.0 changes #857
OCPBUGS-77113: feat: re enable dev console views #831
NO-JIRA: Incident Detection Tests Stabilization #854
NO-JIRA: switch to core platform page before test case run #837
NO-JIRA: Refactor cypress setup and operator commands #788
Full changelog

multus-admission-controller

OCPBUGS-85053: Bump Go version to 1.25.0 for ML-KEM/PQC support #115
Full changelog

multus-cni, multus-cni-microshift

CORENET-6886: downstream sync to kube 1.35 and go to 1.25 #281
OKD-322: Update Dockerfile to work on CentOS/RHEL 10 #275
Full changelog

multus-networkpolicy

OCPBUGS-87264: Updating ose-multus-networkpolicy-container image to be consistent with ART for 5.0 #117
CNF-21001: Remove iptables compatibility commits #108
Full changelog

must-gather

no-jira: collect OS Image Stream resource #533
CNV-41714: Add a collector for basic virt related data #539
no-jira: chore: address the linting issues in the scripts #525
MG-246: remove redundant oc inspect command and unused resources #537
MG-241: Adding support for skipping rotated logs #536
no-jira: build(make): default podman flags for ART DNF wrapper #535
no-jira: docs: add proposal for e2e #526
RFE-8344: Add Node Feature Discovery Operator collection script #508
RFE-8932: Included object size with the object count #527
Full changelog

network-interface-bond-cni

NO-JIRA: Sync upstream k8snetworkplumbingwg/master (2026-05-19) #117
NO-JIRA: Openshift Only - update owners file #111
NO-JIRA: Fix diverged git histories via upstream merge #108
Full changelog

network-tools

NO-JIRA: Add new member #179
NO-ISSUE: Add myself back to the bug script #177
NO-JIRA: Add mattedallo, marty-power, taanyas as reviewers #172
NO-JIRA: Refresh list of team members #176
NO-JIRA: Updates to handle changes after migrating to Atlasian cloud #174
NO-JIRA: Image slimming #154
Full changelog

networking-console-plugin

OCPBUGS-81271: Trim subnet input in UDN creation form #425
OCPBUGS-54248: Fix empty state Create button links #423
CNV-61064: [UDN] Add condition column to the list page #421
Align PatternFly dependencies with resolutions in Console main branch #420
CONSOLE-5218: Add project documentation and rewrite README #417
CNV-74110: new translations #404
Update dependencies for upcoming Console 4.22 release #371
OCPBUGS-83638: CVE dependency remediation #379
Bump lodash from 4.17.23 to 4.18.1 #366
OCPBUGS-70285: Upgrade cypress to v15 to fix CVEs #345
Full changelog

nutanix-cloud-controller-manager

NO-JIRA: Update OWNERS #61
OCPCLOUD-3272: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (9c374cb) into main #54
Full changelog

nutanix-machine-controllers

NO-JIRA: Update OWNERS #136
OCPCLOUD-3277: Bump k8s 1.35 #134
Full changelog

oauth-apiserver

CNTRLPLANE-2518: Add support for sourcing external claims from a source that requires client credential authentication #197
CNTRLPLANE-2516: feat: externaloidc: add support for externally sourcing claims #195
CNTRLPLANE-2516: Add local configuration API for external oidc mode #194
NO-JIRA: Add control-plane-approvers to OWNERS #192
CNTRLPLANE-3226: chore: sync with openshift repositories #189
CNTRLPLANE-2989: feat: add external-oidc subcommand to oauth-apiserver #181
CNTRLPLANE-2260: cmd: wire up OTE ginkgo suite for tokenreviews #163
Full changelog

oauth-proxy

OCPBUGS-69836: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 #341
Full changelog

oauth-server

NO-JIRA: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #232
CNTRLPLANE-3226: chore: sync with openshift repositories #221
Full changelog

oc-mirror

CLID-621: simplify test catalog building #1420
CLID-655: Add test for incremental mirroring using archives by date #1416
CLID-625, CLID-626: Tests for –parallel-images and –parallel-layers flags #1415
CLID-647: Add testing docs and skills #1422
OCPBUGS-86264: Upgrade go-jose to v4.1.4 to fix CVE-2026-34986 #1414
CLID-579: Validate BlockedImage regex #1401
OCPBUGS-64640: remove environment setup output #1384
CLID-623: Encapsulate unit test data into tests/unit #1407
CLID-479: OTE migration #1375
NO-JIRA: Update README.md for Enclave Support link #1404
CLID-612: Move integration tests within oc-mirror #1400
CLID-592: pkg/cli: add unit tests for environment setup #1391
CLID-532: Separate Image struct into AdditionalImage, BlockedImage, SampleImage #1372
OCPBUGS-62603: Fix printing collection messages with 0 collection items #1385
OCPBUGS-61136: Only print catalog rebuild message if there are catalo… #1386
CLID-524: additionalImages collector error handling #1343
CLID-535: api: use OCI definitions from opencontainers spec #1341
CLID-547: v2: add list releases command #1373
CLID-540: v2: add list operators command #1370
NO-JIRA: Group dependabot updates by package origin #1336
no-jira: lint: Remove golangci-lint v1 config. #1374
OCPBUGS-77146: Remove status field from CatalogSource, ClusterCatalog… #1369
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4637: Update dockerfiles to use golang-1.26-release-4.23 builders #746
NO-ISSUE: Synchronize From Upstream Repositories #741
OPRUN-4571: add OLMv1 topology-based deployment scaling e2e test #737
OPRUN-4625: Synchronize from Upstream Repositories #738
OPRUN-4617: Update readme Default Catalog Tests #739
OPRUN-4607: Remove test-experimenal-e2e #732
NO-ISSUE: Synchronize From Upstream Repositories #733
NO-ISSUE: Synchronize From Upstream Repositories #730
OPRUN-4608: UPSTREAM: <carry>: Delete openshift/registry.Dockerfile #729
NO-ISSUE: Synchronize From Upstream Repositories #726
OPRUN-4607: Fix flags passed to test-experimental-e2e #723
OCPBUGS-85508: Synchronize From Upstream Repositories #725
NO-ISSUE: Synchronize From Upstream Repositories #724
NO-ISSUE: Synchronize From Upstream Repositories #722
OCPBUGS-62517: Set replicas=1, PDB, and pod anti-affinity for HA topology #709
OCPBUGS-84943: fix(test): drop blocking namespace-deletion wait between both-watch-modes scenarios #712
OCPBUGS-62517: Synchronize from Upstream Repositories #710
NO-ISSUE: UPSTREAM: <carry>: remove dead e2e registry push job and related variables #711
OPRUN-4587: Make OTE local output easier to read #704
NO-ISSUE: Synchronize From Upstream Repositories #707
NO-ISSUE: Synchronize From Upstream Repositories #706
NO-ISSUE: Synchronize From Upstream Repositories #701
OPRUN-4574: UPSTREAM: <carry>: Disable upstream TLSProfile tests #702
OPRUN-4577: OTE: Simplify by remove option to configure tests to run outside of OCP #703
OPRUN-4572: Expand OTE docs with more comprehensive details #697
OCPBUGS-77972, OCPBUGS-81452: Synchronize From Upstream Repositories #696
OPRUN-4546: Fix boxcutter finalizer ResourceNames in preflight test #695
NO-ISSUE: Synchronize From Upstream Repositories #694
NO-ISSUE: Synchronize From Upstream Repositories #693
OCPQE-31553: Test empty affinity erasure and cleanup #689
NO-ISSUE: Synchronize From Upstream Repositories #692
OPRUN-4518: Remove skip for incompatible operator check after rename of CER #690
OCPBUGS-60693, OCPBUGS-60958: Synchronize From Upstream Repositories #691
OPRUN-4426: add ocp-87557 #635
OCPQE-31553: update preflight permission case #686
NO-ISSUE: Add fgiudici as reviewer #681
OCPBUGS-78211, OCPBUGS-78455: Synchronize From Upstream Repositories #682
NO-ISSUE: Add long-duration test script and documents #664
OCPBUGS-81194: Update grpc in default-catalog-consistency tests #679
OCPBUGS-78092, OCPBUGS-78311: Synchronize From Upstream Repositories #677
OPRUN-4063: verify volume/volumeMount override #678
OCPBUGS-78999: Update quay-operator bundle version in OTE to fix missing arch #673
OCPQE-31636: enhance QE cases #666
OCPBUGS-76380: Synchronize From Upstream Repositories #676
OPRUN-4228: Add boxcutter tests #672
OPRUN-4468: Add OTE tests for OLMv1 DeploymentConfig support #662
OCPBUGS-78787: Synchronize from upstream #670
OCPBUGS-65634: UPSTREAM: <carry>: add service account to curl job #653
OPRUN-4063: deployment config cases #654
OCPQE-31265: update OCP-75441 to support multi-arch #668
OPRUN-4509: Synchronize From Upstream Repositories #669
NO-ISSUE: Synchronize From Upstream Repositories #667
NO-ISSUE: Synchronize From Upstream Repositories #665
Full changelog

openshift-apiserver

OCPBUGS-84534: fix concurrent map race in project authorization cache #642
NO-ISSUE: bump github.com/moby/spdystream v0.5.0 to v0.5.1 to fix CVE-2026-35469 #650
OCPBUGS-38120: Ensure Project delete requests are passed through admission #632
NO-JIRA: Add control-plane-approvers to OWNERS #630
OCPBUGS-74511: remove RouteExternalCertificate feature gate #604
CNTRLPLANE-3226: Sync with openshift apiserver 4.22 kubernetes 1.34.1 #629
Full changelog

openshift-controller-manager

CNF-23051: Migrate away from deprecated ioutil #422
NO-JIRA: Add control-plane-approvers to OWNERS #438
Full changelog

openstack-cluster-api-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #416
OCPCLOUD-3359: Add TLS substitutions #408
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into main #390
NO-JIRA: Update manifests generator #411
OCPBUGS-77542: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 #399
Full changelog

openstack-machine-api-provider

OCPBUGS-77724: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #161
Full changelog

openstack-resource-controller

UPSTREAM-SYNC: Sync main with latest upstream (release-2.0) #36
UPSTREAM-SYNC:Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #20
OCPCLOUD-3321, OSASINFRA-3980: Update to image-based manifests #30
NO-JIRA: Update OWNERS_ALIASES #28
OCPBUGS-77719: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #26
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #1313
NO-ISSUE: Synchronize From Upstream Repositories #1311
NO-ISSUE: Synchronize From Upstream Repositories #1308
NO-ISSUE: Synchronize From Upstream Repositories #1307
NO-ISSUE: Synchronize From Upstream Repositories #1306
NO-ISSUE: Synchronize From Upstream Repositories #1299
OPRUN-4610: Revert lifecycle server changes #1300
OCPBUGS-54790: Fix packageserver PDB annotation for HyperShift #1297
OPRUN-4588: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1280
NO-ISSUE: Synchronize From Upstream Repositories #1298
OPRUN-4601: use resource-based RBAC for lifecycle-server auth #1290
OCPBUGS-84642: Synchronize From Upstream Repositories #1291
OPRUN-4597: Fix lifecycle-server readiness probe to allow empty index #1288
OPRUN-4541, OPRUN-4544: add lifecycle-server for serving FBC catalog lifecycle metadata #1284
NO-ISSUE: Synchronize From Upstream Repositories #1286
NO-ISSUE: Synchronize From Upstream Repositories #1282
NO-ISSUE: Synchronize From Upstream Repositories #1279
OCPBUGS-77984: test(olm): skip ppc64le/s390x for tests using single-arch images #1276
NO-ISSUE: Synchronize From Upstream Repositories #1278
NO-ISSUE: Synchronize From Upstream Repositories #1277
NO-ISSUE: retry transient registry errors in opm QE #1272
NO-ISSUE: Synchronize From Upstream Repositories #1275
NO-ISSUE: Synchronize From Upstream Repositories #1274
NO-ISSUE: Add pedjak and fgiudici as reviewers #1271
NO-ISSUE: Synchronize From Upstream Repositories #1268
: NO-ISSUE: Migrate away from deprecated ioutil #1160
OCPBUGS-79397: Fix SA restore resourceVersion conflict error #1264
OCPBUGS-77179: Synchronize From Upstream Repositories #1260
NO-ISSUE: remove etcd dependency from failing cases #1241
OCPQE-31468: verify images command log pollution #1262
OCPBUGS-78557: Re-Apply Fix admin context race condition in parallel tests #1259
OPRUN-4415: automate OCP-87188: Central TLS Profile Consistency #1207
TRT-2580: Revert “OCPBUGS-78557: Fix admin context race condition in parallel tests” #1258
OCPQE-31804: Fix admin context race condition in parallel tests #1256
Full changelog

operator-marketplace

OPRUN-4642: Update to golang-1.26-release-4.23 #757
OPRUN-4628: restrict dynamic version selection for default catalogsources to only apply to v5.0->v4.y #754
OPRUN-4598: dynamically resolve catalog image tag from OCP release version #750
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 #751
NO-ISSUE: Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 #752
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 #747
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 #746
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates #741
NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.41.0 to 0.42.0 #740
NO-ISSUE: Bump github.com/operator-framework/api from 0.41.0 to 0.42.0 #738
NO-ISSUE: Add fgiudici as reviewer #739
NO-ISSUE: Bump the k8s-dependencies group with 3 updates #737
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

NO-JIRA: Sync informing EVPN E2Es with upstream naming #3220
OCPBUGS-81326, OCPBUGS-84917: DownStream Merge [05-19-2026] #3195
NO-JIRA: Revert “OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image” #3192
NO-JIRA: DownStream Merge [05-07-2026] #3177
TRT-2652: Allow OTE info and list tests commands to work without KUBECONFIG #3170
NO-JIRA: DownStream Merge [04-30-2026] #3169
NO-JIRA: DownStream Merge [04-27-2026] #3159
NO-JIRA: OTE: run EVPN external traffic tests which use random subnet for VTEP #3148
OCPBUGS-84037: OTE: tolerate missing OpenShift CRDs on MicroShift #3150
CORENET-6537: OTE: Add external container support to infra provider #2975
NO-JIRA: openshift tests: demote to informing #3131
NO-JIRA: DownStream Merge [2026-04-09] #3126
NO-JIRA: DownStream Merge [04-02-2026] #3114
NO-JIRA: Disable informing tests for the time being #3118
OCPBUGS-77510: DownStream Merge [03-24-2026] #3084
OCPBUGS-77819: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 #3036
OCPBUGS-77795: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 #3039
NO-JIRA: DownStream Merge [02-27-2026] #3011
Full changelog

powervs-block-csi-driver

MULTIARCH-6066: Rebase branch with upstream #126
Full changelog

powervs-block-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #104
Full changelog

powervs-cloud-controller-manager

OCPBUGS-83391: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into main #83
No-Jira: Update go.opentelemetry.io/otel and google.golang.org/grpc #94
Full changelog

powervs-machine-controllers

OCPCLOUD-3271: Update dependencies for OpenShift 4.22 release #140
NO-JIRA: Add damdo to approvers list in OWNERS file #141
OCPBUGS-77745: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #139
Full changelog

prom-label-proxy

NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.13.0 #394
Full changelog

prometheus

NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3 #318
NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3 #317
OCPBUGS-62118: fix TLS client cert rotation when no CA is configured #312
NO-JIRA: Upgrade Prometheus to 3.11.2 #305
OCPBUGS-65568: chore(kubernetes): deduplicate warning logs from the API #296
Full changelog

prometheus-alertmanager

NO-ISSUE: remove ui/app/dist/.build_stamp #133
NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.32.1 #132
NO-ISSUE: Bump openshift/prometheus-alertmanager to v0.32.0 #129
NO-ISSUE: update OWNERS #130
NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.31.1 #127
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.91.0 #380
NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.90.1 #378
MON-4542: bump v0.90.0 #377
Full changelog

prometheus-node-exporter

OCPBUGS-83863: Strip debug symbols from Go binaries #180
NO-JIRA: [bot] Bump openshift/node_exporter to v1.11.1 #177
Full changelog

rhel-coreos, rhel-coreos-extensions

NO-JIRA: Revert “OCPBUGS-77244: 9.8: override runc package to pull in newer fixes” #1925
OCPBUGS-64841: post-process: Remove workaround for openvswitch additional group #1918
OCPBUGS-77244: 9.8: override runc package to pull in newer fixes #1923
Full changelog

rhel-coreos-10, rhel-coreos-10-extensions

NO-JIRA: Revert “OCPBUGS-77244: 9.8: override runc package to pull in newer fixes” #1925
OCPBUGS-64841: post-process: Remove workaround for openvswitch additional group #1918
OCPBUGS-77244: 9.8: override runc package to pull in newer fixes #1923
NO-JIRA: extensions: Add rhel-9.8-server-ose-4.22 #1910
NO-JIRA: tests: add openshift tag #1906
COS-3912: denylist: drop rhcos.network.init-interfaces-test #1900
NO-JIRA: OWNERS: Add angelcerveraroldan #1883
NO-JIRA: Rename extensions/Dockerfile to Containerfile #1896
NO-JIRA: packages-openshift: Fix repo versions #1895
NO-JIRA: extensions: add a label for extensions image discovery #1894
COS-3900: Start using rhel-10.2 #1892
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
No-JIRA: move the OKD SIG repo to 4.22 #1890
NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
OCPNODE-4010: package: add ose-crio-credential-provider #1879
OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

route-controller-manager

OCPBUGS-39598: Remove all duplicate ingress IP addresses in clearPersistedAllocation #91
OCPBUGS-83892: Update grpc-go and x/net #88
Full changelog

service-ca-operator

CNTRLPLANE-2894: e2e network policy test cases #338
NO-JIRA: Add control-plane-approvers to OWNERS #345
NO-JIRA: controller/servingcerts: Align log verbosity #323
OCPBUGS-82110: fix service-ca-controller CrashLoop on MicroShift #344
CNTRLPLANE-2845: add service-ca operator and workload network policies #324
CNTRLPLANE-2947: Enable configurable PKI for signing CA and serving certificates #327
NO-JIRA: migrate from go-bindata to embed #326
NO-JIRA: OWNERS: remove vrutkovs and add sanchezl #318
NO-JIRA:Update e2e test owners #339
NO-JIRA: Add CLAUDE.md #333
CNTRLPLANE-3038: test/e2e: migrate validatingwebhook-ca-bundle-injection to OTE serial suite #336
CNTRLPLANE-3035: test/e2e: migrate mutatingwebhook-ca-bundle-injection to OTE serial suite #335
CNTRLPLANE-3034: test/e2e: migrate crd-ca-bundle-injection to OTE serial suite #334
CNTRLPLANE-3033: test/e2e: migrate apiservice-ca-bundle-injection to OTE serial suite #332
CNTRLPLANE-3015: test/e2e: restore operator config after forced rotation #331
CNTRLPLANE-3009: test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite #330
CNTRLPLANE-3000: test/e2e: migrate time-based-ca-rotation test for OTE compatibility #308
Full changelog

telemeter

OCPBUGS-85082: update google.golang.org/grpc #601
NO-ISSUE: add .coderabbit.yaml #603
NO-ISSUE: bump golangci-lint to v2.11.3 #602
NO-ISSUE: update OWNERS #604
OCPBUGS-84383: fix(deps): bump go-jose/v3 to v3.0.5 for JWE unwrap DoS #588
Full changelog

tests

OCPBUGS-85486: Add client retry to critical monitor test setup to avoid transient et… #31249
NO-JIRA: upkeep: add exception for expected disruption during tnf upgrade #31206
OCPEDGE-2436: Add is_standalone learner check test for two-node etcd disruption suite #30950
OCPBUGS-86044: Use generated names in oc adm policy SCC test #31221
NO-ISSUE: Automated - Update synthetic test data #31233
OCPBUGS-86473: Consolidate audit log must-gather tests to reduce parallel downloads and master node CPU pressure #31200
MCO-2296: Remove OSImageStreams v1 replace #31256
TRT-2617: Fix CPU metrics monitor node role lookup #31252
MCO-2296: OSImageStreams v1 promotion #31211
NO-JIRA: Clarify why Envoy pods have no CPU or memory limit #31145
TRT-2673: Filter NoExecuteTaintManager disruption from backend-disruption.json #31248
OCPBUGS-86221: update authentication operator conditions to no longer expect WellKnownReadyProgressing #31236
NO-JIRA: Remove fixed bugs on CO conditions (2) - 2nd try #31207
AGENT-1527: Fix comparison of InternalReleaseImage to mirror #31250
Revert “CLID-589: add oc-mirror to extensionBinaries” #31238
OCPBUGS-86017: Extend image-registry single replica exception to s390x architecture #31190
OCPBUGS-82501: Fix AWS DualStack CI jobs consistently encounter 2 EgressFirewall Test Failures #31147
OCPBUGS-84519: Remove openshift-ovn-kubernetes terminationMessagePolicy exemption #31159
NO-ISSUE: Restrict test retries to an allowlist of test names #31222
OCPBUGS-86611: Wait for namespace initialization before creating pod #31225
CNTRLPLANE-3238: pathological events: bump KMS ScalingReplicaSet threshold to 120 #31209
NO-JIRA: Skip CO condition tests on SNO #30775
CLID-589: add oc-mirror to extensionBinaries #31006
OCPBUGS-59500: pathologicalevents: fix HPA FailedGetResourceMetric allowlist #31213
OCPBUGS-86225: fix PDB AlwaysAllow test failure on IPv6-primary dualstack clusters #31196
CNTRLPLANE-3428: tls: add cluster-authentication-operator and operands to tested compo… #31208
NO-ISSUE: Automated - Update synthetic test data #31192
OCPBUGS-86328: if rhcos9-10 in the job name,update jobname test #31198
OCPNODE-4535: Automate OCP-44820 change container registry config #31182
OCPBUGS-85363: Fixed flakiness of oc set image E2E tests #31191
OCPNODE-4125: fix imagepolicy image config testcase #31185
CNTRLPLANE-3428: tls fix HyperShift guest-side CO wait and Custom profile handling #31194
TRT-2669: Revert #31112 “NO-JIRA: Remove fixed bugs on CO conditions (2)” #31201
AGENT-1517: refactored the logic to filter IRI related MachineConfigs #31179
OPRUN-4569: test: remove OLMv1 OTE exceptions; scope OLMv0 exceptions to SNO #31172
NO-JIRA: Remove fixed bugs on CO conditions (2) #31112
OCPBUGS-85378: Fix OCP E2E test - Object count when exceed openshift.io/image-tags will ban to create new image references in the project #31155
NO-ISSUE: Automated - Update synthetic test data #31181
NO-JIRA: Fix flaky storage-admin e2e test #31180
CNTRLPLANE-3428: tls: introduce narrow target types and migrate test functions #31160
Revert “OCPBUGS-85363: Fixed flakiness of oc set image E2E tests” #31188
OCPBUGS-85370: Raise OpenStack operator watch limits #31154
OCPBUGS-85363: Fixed flakiness of oc set image E2E tests #31152
OCPBUGS-85058: monitortests: allow etcd CO blips during TNF jobs on two-node upgrades #31138
OCPBUGS-85486: stage the creation of test pods to minimize etcd impact #31164
OCPNODE-4505: Automation creation of OCP-57401 #31142
OCPBUGS-83623: fix: add distruption tolerance for DualReplica (two-node) topology #31127
OCPBUGS-85531: Fixed flakiness in OCP E2E tests - oc debug image stream #31168
Revert “OPRUN-4569: test: remove OTE exceptions for OLM” #31171
OCPNODE-4108: add E2E tests for upstream dra-example-driver #31064
OPRUN-4569: test: remove OTE exceptions for OLM #31150
OCPEDGE-2386: Add tnf_etcd_disruption test with 5 new etcd resilience tests. #30880
NO-JIRA: Improve graceful shutdown LB test output with more details of late requests #31158
OCPNODE-4047: Implement kubelet TLS 1.3 via KubeletConfig on workers #31016
NO-ISSUE: Automated - Update synthetic test data #31146
CNTRLPLANE-3374: remove multus exception from monitor test #31130
CNTRLPLANE-3428: tls: extract annotation and ConfigMap update helpers #31156
OCPBUGS-83580: Skip dev fuse test on runc runtime #31140
OCPBUGS-84516: remove openshift-machine-config-operator exemption from terminationMessagePolicy monitor #31120
CNTRLPLANE-3387: Update list of pending namespaces in the required-scc monitor test #31135
NO-ISSUE: improve error reporting in cpumetriccollector #31132
no-jira: tls: deduplicate ConfigMap helpers into standalone functions #31136
OCPBUGS-84500: Verify dynamic revision bump for etcd during kernel crash #30915
OCPNODE-3983: Add e2e tests for KubeletEnsureSecretPulledImages feature gate #31102
OCPNODE-4381: Migrate OCP-38271 from openshift-tests-private #30960
OCPBUGS-85087: Allow OVN-Kubernetes CIDROverlap pathological events #31131
NO-JIRA: Increase pathological event thresholds for API server rollout scenarios #31122
CNTRLPLANE-2554: Add ExternalOIDCWithUpstreamParity e2e tests #31028
: no-jira: tls: extract injectTLSAnnotation constant #31125
OCPSTRAT-3036: Update etcd test data for k8s 1.36 release #31113
OCPNODE-4043: Fix NVIDIA DRA driver helm repo configuration #31104
TRT-2644: Run CP tests everywhere #31094
NO-JIRA: Remove fixed bugs on CO conditions #31081
OCPBUGS-84831: Optimize NetworkPolicy reconciliation test to reduce timeout #31114
NO-ISSUE: Automated - Update synthetic test data #31109
OCPBUGS-84809: Disable particular CSI tests if CSI driver is removed #31107
NO-JIRA: check jobname for upgrade #31106
OCPBUGS-84520: remove openshift-catalogd exemption from terminationMessagePolicy monitor #31100
OCPNODE-2994: Add ArtifactVolume tests and register artifact image #31017
NO-ISSUE: add QSEs as approvers #31087
SPLAT-2562: Added 3CMO OTE binary to extensionBinary list #31004
OCPCLOUD-3429: Ignore excessive image volume events from CAPI operator #31093
TRT-2622: copy OTE attrs to junit properties #31052
OCPBUGS-83580: Skip dev fuse test on runc runtime #31044
SREP-4676: add exception for managed cluster namespaces #31082
OCPBUGS-84257: fix openshift/network/third-party suite selecting zero tests #31084
TRT-2084: comment bugs filed for terminationMessage exemptions #31079
OCPBUGS-84504: retry transient kubeconfig read failures in GetClientConfig #31080
TRT-2565: Add simple benchmark for risk analysis HTTP requests #30965
NO-JIRA: Fix ListImages JSON parsing when extension binaries emit log lines #31009
OCPBUGS-84255: Fix project name error during wait #31062
NO-JIRA: Skip network policy cases on microshift and hypershift #31075
OCPBUGS-79544: test: add monitortest to detect pods stuck in Pending state #31045
OCPBUGS-79544: Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 #31013
NO-ISSUE: Automated - Update synthetic test data #31063
OCPBUGS-82072, OCPBUGS-82077: fix: skip unused tests for two node #30998
OCPBUGS-82144: Remove EnsureMemberRemoved from graceful shutdown test #30981
OCPEDGE-2381: Validate no WAL corruption when both nodes shutdown gracefully #30925
SPLAT-2562: Added VVCDO OTE binary to extensionBinary list #31014
NO-JIRA: harden watch loop to prevent thread exhaustion #30956
OCPBUGS-84244: cache kube client instance #30997
OCPBUGS-83281: Fix Gateway cleanup in parallel e2e test workers #31023
OCPBUGS-84237: skip on BM which has insufficient host #31002
OCPBUGS-83405: remove unnecessary exceptions from monitoring test #30924
NO-ISSUE: baremetal: update OWNERS #31055
OTA-1977: Skip test case updateLifecycle if the worker pool is paused #31040
OCPBUGS-82160: Skip image-registry operator tests for Libvirt platform in upgrade jobs. #31001
OCPEDGE-2284: Rename two_node directory to edge_topologies #30623
OCPBUGS-83402: Bump oc request-timeout to deflake tests #31008
OCPBUGS-82304: Add sleep to give cvo time to reconcile #30988
OCPBUGS-63307: Move imagepolicy test to disruptive long-running suite #31043
NO-JIRA: OVNK BGP: allow max unavailability for NNCPs on VRF-Lite test case #31037
OCPBUGS-83801: skip serial and disruptive cases from suite #31042
TRT-2635: coderabbit: enable request changes workflow #31047
TRT-2084: terminationmessagepolicy: correctly fail on violations #30993
OCPBUGS-84036: CNTRLPLANE-2751:Adding e2e network policy cases for config-operator #30995
OCPEDGE-2510: fix(two-node): bump node replacement timeouts for new node installer pods #31005
OCPBUGS-81476: Fix timeout in PinnedImages GC test #30962
OCPBUGS-63307: honor firstTimestamp annotation value #31021
no-jira: test/monitoring: increase load balancer readiness and curl connection timeout #30994
NO-JIRA: Fix UpgradeTargetPayloadImagePullSpec #31025
OCPSTRAT-3082: TLS propagation test #30801
NO-JIRA: OVNK BGP: improve debug and increase NNCP timeout for VRF-Lite test case #31022
OCPBUGS-83286: Fix case-sensitive error matching in Whereabouts IP allocation test #31012
OCPBUGS-83267: Use upgrades.Skippable for Gateway API upgrade test skip logic #31000
OCPEDGE-2381: Add test to verify for backup container exists when etcd crashes #30922
STOR-2807: Add e2e test to verify CSI driver operators use service CA signed certificates #30980
OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30982
OCPBUGS-78997: Revert “NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m” #30919
OCPBUGS-82557: DCM tests need to be backward compatible #30999
OCPBUGS-77948, OCPBUGS-77949, OCPBUGS-78298, OCPEDGE-2443: TNF node replacement test updates #30846
NO-JIRA: Update OWNERS #30996
OCPBUGS-82046: Revert “remove some duplicate ovnk test cases” #30975
OCPBUGS-78090: Avoid copy of the oc binary, to support heterogeneous environments #30992
OCPBUGS-81340: fix pacemaker CronJob duplicate-event namespace #30985
OCPEDGE-2491: Log pcs status and etcd member list after every recovery #30949
NE-2561: Add Gateway API OLM to NO-OLM migration upgrade test #30897
OCPBUGS-81716: Add retry logic for transient network errors in restartKubeletOnNode #30966
CORENET-6168: Add ovn tests extension #30560
OCPBUGS-81640: test/ccm: upgrade ccm healthz test to use aws sdk v2 #30954
TRT-2084: terminationmessagepolicy: relax for 5.0 #30979
OCPBUGS-81340: openshift-tests: allow duplicate pacemaker status collector CronJob events #30953
OCPBUGS-81737: Dynamically find worker-generated-kubelet MC name to support different platforms #30967
OCPBUGS-81742: Add exception for the newly added kas-bootstrap-container #30963
OCPNODE-4224: Migrating test case OCP-70987 from OTP to origin #30948
OCPBUGS-82039: Fix DCM ingress tests to support IPv6-only clusters #30972
OCPBUGS-81685: OVNK BGP: fix curl arguments not properly tokenized #30961
OCPBUGS-81751: Fix GatewayClass update conflict in markTestDone #30964
NO-JIRA: Ignore extra fields #30939
NO-JIRA: fix CUDN status condition tests for new TransportAccepted condition #30958
NE-2529: add new dcm e2e tests #30926
OCPBUGS-81629: Skip NoRegistryClusterInstall feature tests if InternalReleaseImage resource was not present #30955
NO-JIRA: feat: update etcd/certrotation suite to disruptive #30947
OCPCLOUD-3215: test/ccm: add support for verifying NLB health check configuration #30952
NE-2520: Enable Gateway API tests on vSphere and baremetal #30946
SPLAT-2672: e2e/ote/ccm-aws: moving binary to cccmo #30864
OCPNODE-3725: Add System compressible test #30935
OCPCLOUD-3215: Detect IPv6 clusters and apply correct policy #30938
OCPNODE-4179: Migrating test case OCP-80983 from openshift-tests-private to origin #30899
OCPSTRAT-886: Support dual-stack LB in service disruption monitor #30936
OCPBUGS-78978: Workaround packet sniffer timeouts in BGP tests #30912
OTA-1813: Allow for alerts to fire from an e2e test #30929
AGENT-1428: Add e2e extended tests for NoRegistryClusterInstall #30941
SPLAT-2627: Added MAPA OTE entry #30808
OCPSTRAT-2728: Rebase 1.35 #30866
OCPNODE-4043: Add DRA e2e tests to run on NVIDIA GPU #30758
NE-2422: Skip Gateway API tests on dual-stack clusters #30942
NE-2131: register CIO tests extension and remove tests migrated to CIO #30911
MCO-2171: remove MCO bootimage tests from origin #30933
OCPBUGS-78617: Fix PinnedImages test should respect node taints #30913
NO-ISSUE: Make MCN degrade test stable across TechPreview and non-TechPreview #30943
TRT-2573: Show non-blocking failure message in JUnit failure output #30921
NE-2422: Add dual-stack ingress e2e tests for AWSDualStackInstall featuregate #30904
OCPNODE-4031: Add criocredentialprovider tests #30821
OCPNODE-3720: Test for AutoNodeSizing #30789
NE-2422: Fix router e2e tests for dual-stack AWS clusters #30934
STOR-2505: Add storage binaries check #30698
OCPBUGS-78940: Treat groups as existent if they were found but discovery is stale #30923
NO-JIRA: Reverting case OOM score adjustment #30932
OCPEDGE-2447: IsMicroShiftCluster: return error instead of calling Skip from container node #30914
NE-2501: Allow prometheus test pods to access Ingress Operator metrics port #30928
NO-JIRA: remove extra character #30920
OCPEDGE-2447: increase precondition cluster health timeout to 10m #30893
OCPNODE-3751: Add automated tests for kubelet LimitedSwap drop-in configuration for CNV #30795
MCO-2155: add osstream exclusion for mco bootimage tests #30918
TRT-2539: Fix output capture in ginkgo RunSpec to capture stdout/stderr #30769
NE-2498: add new DCM e2e tests #30741
NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m #30917
TRT-2506: Add OS version info to ClusterData #30827
NE-2292: Tests for gatewayAPIWithoutOLM featuregate graduation #30905
OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30867
NO-JIRA: remove test exception for Insights operator #30849
NE-2292: Skip OLM tests when GatewayAPIWithoutOLM enabled #30896
NO-JIRA: Remove TNF node replacement test #30901
OCPBUGS-78384: changed http to https for three places to reduce test false positives and false negatives #30872
CNTRLPLANE-2999: Revert PR #30746: TLS 1.3 test causing instability in 4.22 #30895
NO-JIRA: Add a singleton instance for list of nodes #30830
OCPNODE-3932: Add automated tests for non-CNV swap configuration #30807
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-81494: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation #179
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #119
NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-vsphere:release-1.35 (93af0f7) into main #113
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-53005: Remove references to master branch #111
OCPBUGS-83600: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into master #107
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #106
OCPCLOUD-3359: Add TLS substitutions #99
NO-JIRA: Update manifests generator #100
NO-JIRA: Update OWNERS #96
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

NO-ISSUE: Bump spdystream to v0.5.1 #181
OCPBUGS-81525: Bump google.golang.org/grpc to 1.79.3 #170
Full changelog

vsphere-csi-driver-operator

SPLAT-2562: Created OTE extension with tests for hybrid env #335
STOR-2762: Bump all deps for 4.22 #334
STOR-2882: add feature gate for checking platform type is vsphere #331
Full changelog

vsphere-problem-detector

OCPBUGS-79057: Fixed compute cluster permission logic for single fd with read-only custom resourcepool #220
OCPBUGS-56274: add datacenter consistency check #212
STOR-2762: Bump all deps for 4.22 #214
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS 9.8 (`rhel-coreos`)

Package List

cri-o-1.35.3-13.rhaos4.22.git5a749ba.el9
kernel-5.14.0-687.13.1.el9_8
openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
systemd-252-67.el9_8.2

Full list (570 packages)

NetworkManager-1:1.54.3-3.el9_8
NetworkManager-cloud-setup-1:1.54.3-3.el9_8
NetworkManager-libnm-1:1.54.3-3.el9_8
NetworkManager-ovs-1:1.54.3-3.el9_8
NetworkManager-team-1:1.54.3-3.el9_8
NetworkManager-tui-1:1.54.3-3.el9_8
WALinuxAgent-udev-2.14.0.1-4.el9
aardvark-dns-2:1.17.0-1.el9
acl-2.3.1-4.el9
adcli-0.9.3.1-3.el9
adcli-selinux-0.9.3.1-3.el9
afterburn-5.10.0-1.el9
afterburn-dracut-5.10.0-1.el9
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-8.el9
audit-libs-3.1.5-8.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-23.el9
azure-vm-utils-0.7.0-1.el9
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-40.el9_8.1
bind-license-32:9.16.23-40.el9_8.1
bind-utils-32:9.16.23-40.el9_8.1
binutils-2.35.2-72.el9
binutils-gold-2.35.2-72.el9
bootc-1.13.0-1.el9
bootupd-0.2.31-1.el9
bsdtar-3.5.3-9.el9_7
bubblewrap-0.6.3-1.el9
bzip2-1.0.8-11.el9
bzip2-libs-1.0.8-11.el9
c-ares-1.19.1-2.el9_4
ca-certificates-2025.2.80_v9.0.305-91.el9
checkpolicy-3.6-1.el9
chrony-4.8-1.el9
cifs-utils-7.5-1.el9_7
clevis-21-209.el9
clevis-dracut-21-209.el9
clevis-luks-21-209.el9
clevis-systemd-21-209.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.2.1-1.el9
conmon-rs-0.6.6-0.rhaos4.18.el9.1
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.245.0-1.el9
containernetworking-plugins-1:1.9.0-2.el9
containers-common-5:5.8-1.el9
coreos-installer-0.26.0-1.el9_8
coreos-installer-bootinfra-0.26.0-1.el9_8
coreutils-8.32-40.el9
coreutils-common-8.32-40.el9
cpio-2.13-16.el9
cracklib-2.9.6-28.el9
cracklib-dicts-2.9.6-28.el9
cri-o-1.35.3-13.rhaos4.22.git5a749ba.el9
cri-tools-1.35.0-2.el9
criu-3.19-3.el9
criu-libs-3.19-3.el9
crun-1.27-1.el9_8
crypto-policies-20260224-1.gitea0f072.el9_8
crypto-policies-scripts-20260224-1.gitea0f072.el9_8
cryptsetup-2.8.1-3.el9
cryptsetup-libs-2.8.1-3.el9
curl-7.76.1-40.el9
cyrus-sasl-gssapi-2.1.27-22.el9
cyrus-sasl-lib-2.1.27-22.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.207-4.el9_8.1
device-mapper-event-9:1.02.207-4.el9_8.1
device-mapper-event-libs-9:1.02.207-4.el9_8.1
device-mapper-libs-9:1.02.207-4.el9_8.1
device-mapper-multipath-0.8.7-45.el9
device-mapper-multipath-libs-0.8.7-45.el9
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-2.el9
dnf-4.14.0-34.el9_8
dnf-data-4.14.0-34.el9_8
dnsmasq-2.85-18.el9_8.1
dosfstools-4.2-3.el9
dracut-057-110.git20260130.el9
dracut-network-057-110.git20260130.el9
dracut-squash-057-110.git20260130.el9
e2fsprogs-1.46.5-8.el9
e2fsprogs-libs-1.46.5-8.el9
efi-filesystem-6-4.el9
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.194-1.el9
elfutils-default-yama-scope-0.194-1.el9
elfutils-libelf-0.194-1.el9
elfutils-libs-0.194-1.el9
ethtool-2:6.15-2.el9
expat-2.5.0-6.el9_8.1
fcoe-utils-1.0.34-0.git14ef0d2.el9
file-5.39-17.el9
file-libs-5.39-17.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-18.el9_7
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.16-1.el9_7
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-2.0.19-2.el9_8
fwupd-plugin-flashrom-2.0.19-2.el9_8
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.52.0-1.el9
glib2-2.68.4-19.el9_8.1
glibc-2.34-270.el9_8
glibc-common-2.34-270.el9_8
glibc-gconv-extra-2.34-270.el9_8
glibc-minimal-langpack-2.34-270.el9_8
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-5.el9_7
gnutls-3.8.10-4.el9_8
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-126.el9_8
grub2-efi-x64-1:2.06-126.el9_8
grub2-pc-1:2.06-126.el9_8
grub2-pc-modules-1:2.06-126.el9_8
grub2-tools-1:2.06-126.el9_8
grub2-tools-minimal-1:2.06-126.el9_8
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.22.el9
ignition-2.26.0-1.el9_8
ignition-grub-2.26.0-1.el9_8
ima-evm-utils-1.6.2-2.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.17.0-2.el9
iproute-tc-6.17.0-2.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-15.el9_7
irqbalance-2:1.9.4-5.el9
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el9
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-19.el9_8.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-687.13.1.el9_8
kernel-core-5.14.0-687.13.1.el9_8
kernel-modules-5.14.0-687.13.1.el9_8
kernel-modules-core-5.14.0-687.13.1.el9_8
kernel-modules-extra-5.14.0-687.13.1.el9_8
kexec-tools-2.0.29-17.el9
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-11.el9
kmod-libs-28-11.el9
kpartx-0.8.7-45.el9
krb5-libs-1.21.1-10.el9_8
less-590-6.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-9.el9_7
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-25.el9
libbpf-2:1.5.0-3.el9
libbrotli-1.0.9-9.el9_7
libcap-2.48-10.el9_8.1
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-8.el9
libcomps-0.1.18-1.el9
libconfig-1.7.2-9.el9
libcurl-7.76.1-40.el9
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-18.el9
libdnf-plugin-subscription-manager-1.29.50-1.el9
libdrm-2.4.128-1.el9
libeconf-0.4.1-7.el9_8
libedit-3.1-39.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-25.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-14.el9
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-14.el9
libgpg-error-1.42-5.el9
libibverbs-61.0-2.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.8-4.el9_8
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.23.5-8.el9_8
libluksmeta-10-1.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-25.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-42.el9_8
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9_8.1
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.16.1-3.el9_8
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.19.0-1.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-3.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-25.el9
libsmbclient-4.23.5-8.el9_8
libsolv-0.7.24-5.el9_8
libss-1.46.5-8.el9
libssh-0.10.4-18.el9
libssh-config-0.10.4-18.el9
libsss_certmap-2.9.8-4.el9_8
libsss_idmap-2.9.8-4.el9_8
libsss_nss_idmap-2.9.8-4.el9_8
libsss_sudo-2.9.8-4.el9_8
libstdc++-11.5.0-14.el9
libtalloc-2.4.3-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.14-1.el9
libteam-1.31-16.el9_1
libtevent-0.17.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.12-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-17.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-25.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.23.5-8.el9_8
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-14.el9_7
libxmlb-0.3.24-1.el9
libxslt-1.1.34-14.el9_7.1
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20260411-155.5.el9_7
linux-firmware-whence-20260411-155.5.el9_7
lldpad-1.1.1-4.gitf1dd9eb.el9
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-12.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-10-1.el9
lvm2-9:2.03.33-4.el9_8.1
lvm2-libs-9:2.03.33-4.el9_8.1
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.4-4.el9_7
microcode_ctl-4:20260210-1.el9_8
mokutil-2:0.7.2-4.el9
mpfr-4.1.0-10.el9
nano-5.6.1-7.el9
ncurses-6.2-12.20210508.el9
ncurses-base-6.2-12.20210508.el9
ncurses-libs-6.2-12.20210508.el9
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.17.2-1.el9
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-42.el9_8
nftables-1:1.0.9-7.el9_8
nmap-ncat-3:7.92-5.el9
nmstate-2.2.60-1.el9_8
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-2.0.19-3.el9
numactl-libs-2.0.19-3.el9
numad-0.5-37.20150602git.el9
nvme-cli-2.16-1.el9
oniguruma-6.9.6-1.el9.6
open-vm-tools-13.0.10-1.el9
openldap-2.6.8-4.el9
openshift-clients-4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
openssh-9.9p1-7.el9_8
openssh-clients-9.9p1-7.el9_8
openssh-server-9.9p1-7.el9_8
openssl-1:3.5.5-3.el9_8
openssl-fips-provider-3.0.7-8.el9
openssl-fips-provider-so-3.0.7-8.el9
openssl-libs-1:3.5.5-3.el9_8
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.2-72.el9fdp
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
ostree-2025.7-1.el9
ostree-grub2-2025.7-1.el9
ostree-libs-2025.7-1.el9
p11-kit-0.26.2-1.el9
p11-kit-trust-0.26.2-1.el9
pam-1.5.1-28.el9
passt-0^20251210.gd04c480-4.el9_8
passt-selinux-0^20251210.gd04c480-4.el9_8
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.1.el9_6
perl-B-1.80-481.1.el9_6
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.1.el9_6
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.1.el9_6
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.1.el9_6
perl-File-Basename-2.85-481.1.el9_6
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.1.el9_6
perl-FileHandle-2.03-481.1.el9_6
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.1.el9_6
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.1.el9_6
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.1.el9_6
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.1.el9_6
perl-Net-SSLeay-1.94-3.el9
perl-POSIX-1.94-481.1.el9_6
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.1.el9_6
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.1.el9_6
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.1.el9_6
perl-constant-1.33-461.el9
perl-if-0.60.800-481.1.el9_6
perl-interpreter-4:5.32.1-481.1.el9_6
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.1.el9_6
perl-mro-1.23-481.1.el9_6
perl-overload-1.31-481.1.el9_6
perl-overloading-0.02-481.1.el9_6
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.1.el9_6
perl-vars-1.05-481.1.el9_6
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-6:5.8.2-1.el9_8
policycoreutils-3.6-5.el9
policycoreutils-python-utils-3.6-5.el9
polkit-0.117-14.el9
polkit-libs-0.117-14.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.25-7.el9_8
python3-3.9.25-7.el9_8
python3-audit-3.1.5-8.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.50-1.el9
python3-dateutil-1:2.9.0.post0-1.el9_7
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-34.el9_8
python3-dnf-plugin-versionlock-4.3.0-26.el9
python3-dnf-plugins-core-4.3.0-26.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-18.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-18.el9
python3-librepo-1.19.0-1.el9
python3-libs-3.9.25-7.el9_8
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-2.el9_8
python3-policycoreutils-3.6-5.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-40.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-15.el9
python3-setuptools-wheel-53.0.0-15.el9
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.50-1.el9
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9_7.1
qemu-guest-agent-17:10.1.0-17.el9_8
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-61.0-2.el9
readline-8.1-4.el9
redhat-release-9.8-1.0.el9
redhat-release-eula-9.8-1.0.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-40.el9
rpm-build-libs-4.16.1.3-40.el9
rpm-libs-4.16.1.3-40.el9
rpm-ostree-2026.1-6.el9_8
rpm-ostree-libs-2026.1-6.el9_8
rpm-plugin-selinux-4.16.1.3-40.el9
rpm-plugin-systemd-inhibit-4.16.1.3-40.el9
rpm-sign-libs-4.16.1.3-40.el9
rsync-3.2.5-7.el9_8
runc-4:1.4.2-1.el9_8
samba-client-libs-4.23.5-8.el9_8
samba-common-4.23.5-8.el9_8
samba-common-libs-4.23.5-8.el9_8
sed-4.8-10.el9
selinux-policy-38.1.75-2.el9_8
selinux-policy-targeted-38.1.75-2.el9_8
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-16.el9
shadow-utils-subid-2:4.9-16.el9
shared-mime-info-2.1-5.el9
shim-x64-16.1-7.el9
skopeo-2:1.22.2-1.el9_8
slang-2.3.2-11.el9
slirp4netns-1.3.3-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-8.el9
sqlite-libs-3.34.1-10.el9_8
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.8-4.el9_8
sssd-ad-2.9.8-4.el9_8
sssd-client-2.9.8-4.el9_8
sssd-common-2.9.8-4.el9_8
sssd-common-pac-2.9.8-4.el9_8
sssd-ipa-2.9.8-4.el9_8
sssd-krb5-2.9.8-4.el9_8
sssd-krb5-common-2.9.8-4.el9_8
sssd-ldap-2.9.8-4.el9_8
sssd-nfs-idmap-2.9.8-4.el9_8
sssd-proxy-2.9.8-4.el9_8
stalld-1.26.3-1.el9
strace-6.12-1.el9
subscription-manager-1.29.50-1.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.17p2-3.el9_8
systemd-252-67.el9_8.2
systemd-journal-remote-252-67.el9_8.2
systemd-libs-252-67.el9_8.2
systemd-pam-252-67.el9_8.2
systemd-rpm-macros-252-67.el9_8.2
systemd-udev-252-67.el9_8.2
tar-2:1.34-11.el9
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.22.el9
tpm2-tools-5.2-7.el9
tpm2-tss-3.2.3-1.el9
tzdata-2026b-1.el9
unbound-libs-1.24.2-2.el9
usermode-1.114-7.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-25.el9
util-linux-core-2.37.4-25.el9
vim-minimal-2:8.2.2637-26.el9_8.5
virt-what-1.27-2.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-7.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-1.1.2-1.el9
zstd-1.5.5-1.el9

Changed:

NetworkManager 1:1.54.3-2.el9 → 1:1.54.3-3.el9_8
NetworkManager-cloud-setup 1:1.54.3-2.el9 → 1:1.54.3-3.el9_8
NetworkManager-libnm 1:1.54.3-2.el9 → 1:1.54.3-3.el9_8
NetworkManager-ovs 1:1.54.3-2.el9 → 1:1.54.3-3.el9_8
NetworkManager-team 1:1.54.3-2.el9 → 1:1.54.3-3.el9_8
NetworkManager-tui 1:1.54.3-2.el9 → 1:1.54.3-3.el9_8
bind-libs 32:9.16.23-40.el9 → 32:9.16.23-40.el9_8.1
bind-license 32:9.16.23-40.el9 → 32:9.16.23-40.el9_8.1
bind-utils 32:9.16.23-40.el9 → 32:9.16.23-40.el9_8.1
bsdtar 3.5.3-6.el9_6 → 3.5.3-9.el9_7
cifs-utils 7.5-1.el9 → 7.5-1.el9_7
coreos-installer 0.25.0-2.el9 → 0.26.0-1.el9_8
coreos-installer-bootinfra 0.25.0-2.el9 → 0.26.0-1.el9_8
cri-o 1.35.1-4.rhaos4.22.gitf998e4a.el9 → 1.35.3-13.rhaos4.22.git5a749ba.el9
crun 1.26-1.el9 → 1.27-1.el9_8
device-mapper 9:1.02.207-4.el9 → 9:1.02.207-4.el9_8.1
device-mapper-event 9:1.02.207-4.el9 → 9:1.02.207-4.el9_8.1
device-mapper-event-libs 9:1.02.207-4.el9 → 9:1.02.207-4.el9_8.1
device-mapper-libs 9:1.02.207-4.el9 → 9:1.02.207-4.el9_8.1
dnf 4.14.0-33.el9 → 4.14.0-34.el9_8
dnf-data 4.14.0-33.el9 → 4.14.0-34.el9_8
dnsmasq 2.85-18.el9 → 2.85-18.el9_8.1
expat 2.5.0-6.el9 → 2.5.0-6.el9_8.1
fuse-overlayfs 1.16-1.el9 → 1.16-1.el9_7
glib2 2.68.4-19.el9 → 2.68.4-19.el9_8.1
glibc 2.34-256.el9 → 2.34-270.el9_8
glibc-common 2.34-256.el9 → 2.34-270.el9_8
glibc-gconv-extra 2.34-256.el9 → 2.34-270.el9_8
glibc-minimal-langpack 2.34-256.el9 → 2.34-270.el9_8
gnutls 3.8.10-3.el9 → 3.8.10-4.el9_8
ignition 2.25.1-1.el9 → 2.26.0-1.el9_8
ignition-grub 2.25.1-1.el9 → 2.26.0-1.el9_8
jq 1.6-19.el9 → 1.6-19.el9_8.2
kernel 5.14.0-687.2.1.el9_8 → 5.14.0-687.13.1.el9_8
kernel-core 5.14.0-687.2.1.el9_8 → 5.14.0-687.13.1.el9_8
kernel-modules 5.14.0-687.2.1.el9_8 → 5.14.0-687.13.1.el9_8
kernel-modules-core 5.14.0-687.2.1.el9_8 → 5.14.0-687.13.1.el9_8
kernel-modules-extra 5.14.0-687.2.1.el9_8 → 5.14.0-687.13.1.el9_8
krb5-libs 1.21.1-9.el9_7 → 1.21.1-10.el9_8
libarchive 3.5.3-6.el9_6 → 3.5.3-9.el9_7
libcap 2.48-10.el9 → 2.48-10.el9_8.1
libeconf 0.4.1-5.el9 → 0.4.1-7.el9_8
libipa_hbac 2.9.8-1.el9 → 2.9.8-4.el9_8
libldb 4.23.5-6.el9 → 4.23.5-8.el9_8
libnghttp2 1.43.0-6.el9 → 1.43.0-6.el9_8.1
libsmbclient 4.23.5-6.el9 → 4.23.5-8.el9_8
libsolv 0.7.24-4.el9 → 0.7.24-5.el9_8
libsss_certmap 2.9.8-1.el9 → 2.9.8-4.el9_8
libsss_idmap 2.9.8-1.el9 → 2.9.8-4.el9_8
libsss_nss_idmap 2.9.8-1.el9 → 2.9.8-4.el9_8
libsss_sudo 2.9.8-1.el9 → 2.9.8-4.el9_8
libwbclient 4.23.5-6.el9 → 4.23.5-8.el9_8
libxslt 1.1.34-13.el9_6 → 1.1.34-14.el9_7.1
linux-firmware 20260130-160.el9 → 20260411-155.5.el9_7
linux-firmware-whence 20260130-160.el9 → 20260411-155.5.el9_7
lvm2 9:2.03.33-4.el9 → 9:2.03.33-4.el9_8.1
lvm2-libs 9:2.03.33-4.el9 → 9:2.03.33-4.el9_8.1
mdadm 4.4-3.el9 → 4.4-4.el9_7
nftables 1:1.0.9-6.el9_7 → 1:1.0.9-7.el9_8
nmstate 2.2.58-1.el9 → 2.2.60-1.el9_8
openshift-clients 4.22.0-202603152014.p2.g4ead568.assembly.stream.el9 → 4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
openshift-kubelet 4.22.0-202603130350.p2.g2034d92.assembly.stream.el9 → 4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
openssh 9.9p1-4.el9_8 → 9.9p1-7.el9_8
openssh-clients 9.9p1-4.el9_8 → 9.9p1-7.el9_8
openssh-server 9.9p1-4.el9_8 → 9.9p1-7.el9_8
openssl 1:3.5.5-1.el9 → 1:3.5.5-3.el9_8
openssl-libs 1:3.5.5-1.el9 → 1:3.5.5-3.el9_8
ose-aws-ecr-image-credential-provider 4.22.0-202603092136.p2.g33c8f09.assembly.stream.el9 → 4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.22.0-202602261640.p2.g8584b9a.assembly.stream.el9 → 4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.22.0-202603041118.p2.gc87eef5.assembly.stream.el9 → 4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
passt 0^20251210.gd04c480-3.el9 → 0^20251210.gd04c480-4.el9_8
passt-selinux 0^20251210.gd04c480-3.el9 → 0^20251210.gd04c480-4.el9_8
podman 6:5.8.0-1.el9 → 6:5.8.2-1.el9_8
python-unversioned-command 3.9.25-5.el9_8 → 3.9.25-7.el9_8
python3 3.9.25-5.el9_8 → 3.9.25-7.el9_8
python3-dnf 4.14.0-33.el9 → 4.14.0-34.el9_8
python3-libs 3.9.25-5.el9_8 → 3.9.25-7.el9_8
python3-pip-wheel 21.3.1-1.el9 → 21.3.1-2.el9_8
qemu-guest-agent 17:10.1.0-15.el9 → 17:10.1.0-17.el9_8
redhat-release 9.8-0.7.el9 → 9.8-1.0.el9
redhat-release-eula 9.8-0.7.el9 → 9.8-1.0.el9
rpm-ostree 2026.1-3.el9 → 2026.1-6.el9_8
rpm-ostree-libs 2026.1-3.el9 → 2026.1-6.el9_8
rsync 3.2.5-4.el9 → 3.2.5-7.el9_8
runc 4:1.4.0-2.el9 → 4:1.4.2-1.el9_8
samba-client-libs 4.23.5-6.el9 → 4.23.5-8.el9_8
samba-common 4.23.5-6.el9 → 4.23.5-8.el9_8
samba-common-libs 4.23.5-6.el9 → 4.23.5-8.el9_8
skopeo 2:1.22.0-2.el9 → 2:1.22.2-1.el9_8
sqlite-libs 3.34.1-9.el9_7 → 3.34.1-10.el9_8
sssd 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-ad 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-client 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-common 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-common-pac 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-ipa 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-krb5 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-krb5-common 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-ldap 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-nfs-idmap 2.9.8-1.el9 → 2.9.8-4.el9_8
sssd-proxy 2.9.8-1.el9 → 2.9.8-4.el9_8
sudo 1.9.17p2-2.el9 → 1.9.17p2-3.el9_8
systemd 252-67.el9 → 252-67.el9_8.2
systemd-journal-remote 252-67.el9 → 252-67.el9_8.2
systemd-libs 252-67.el9 → 252-67.el9_8.2
systemd-pam 252-67.el9 → 252-67.el9_8.2
systemd-rpm-macros 252-67.el9 → 252-67.el9_8.2
systemd-udev 252-67.el9 → 252-67.el9_8.2
tzdata 2025c-1.el9 → 2026b-1.el9
vim-minimal 2:8.2.2637-25.el9 → 2:8.2.2637-26.el9_8.5
which 2.21-30.el9 → 2.21-30.el9_6

Added:

numactl 2.0.19-3.el9

Extensions

Full list (153 packages)

NetworkManager-libreswan-1.2.30-1.el9.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-12.el9_8.x86_64
corosync-3.1.10-1.el9_8.1.x86_64
corosynclib-3.1.10-1.el9_8.1.x86_64
cpp-11.5.0-14.el9.x86_64
daxctl-libs-82-1.el9.x86_64
edk2-ovmf-20241117-8.el9.noarch
elfutils-libelf-devel-0.194-1.el9.x86_64
fence-agents-all-4.10.0-110.el9_8.2.x86_64
fence-agents-amt-ws-4.10.0-110.el9_8.2.noarch
fence-agents-apc-4.10.0-110.el9_8.2.noarch
fence-agents-apc-snmp-4.10.0-110.el9_8.2.noarch
fence-agents-bladecenter-4.10.0-110.el9_8.2.noarch
fence-agents-brocade-4.10.0-110.el9_8.2.noarch
fence-agents-cisco-mds-4.10.0-110.el9_8.2.noarch
fence-agents-cisco-ucs-4.10.0-110.el9_8.2.noarch
fence-agents-common-4.10.0-110.el9_8.2.noarch
fence-agents-drac5-4.10.0-110.el9_8.2.noarch
fence-agents-eaton-snmp-4.10.0-110.el9_8.2.noarch
fence-agents-emerson-4.10.0-110.el9_8.2.noarch
fence-agents-eps-4.10.0-110.el9_8.2.noarch
fence-agents-heuristics-ping-4.10.0-110.el9_8.2.noarch
fence-agents-hpblade-4.10.0-110.el9_8.2.noarch
fence-agents-ibmblade-4.10.0-110.el9_8.2.noarch
fence-agents-ifmib-4.10.0-110.el9_8.2.noarch
fence-agents-ilo-moonshot-4.10.0-110.el9_8.2.noarch
fence-agents-ilo-mp-4.10.0-110.el9_8.2.noarch
fence-agents-ilo-ssh-4.10.0-110.el9_8.2.noarch
fence-agents-ilo2-4.10.0-110.el9_8.2.noarch
fence-agents-intelmodular-4.10.0-110.el9_8.2.noarch
fence-agents-ipdu-4.10.0-110.el9_8.2.noarch
fence-agents-ipmilan-4.10.0-110.el9_8.2.noarch
fence-agents-kdump-4.10.0-110.el9_8.2.x86_64
fence-agents-mpath-4.10.0-110.el9_8.2.noarch
fence-agents-redfish-4.10.0-110.el9_8.2.x86_64
fence-agents-rhevm-4.10.0-110.el9_8.2.noarch
fence-agents-rsa-4.10.0-110.el9_8.2.noarch
fence-agents-rsb-4.10.0-110.el9_8.2.noarch
fence-agents-sbd-4.10.0-110.el9_8.2.noarch
fence-agents-scsi-4.10.0-110.el9_8.2.noarch
fence-agents-vmware-rest-4.10.0-110.el9_8.2.noarch
fence-agents-vmware-soap-4.10.0-110.el9_8.2.noarch
fence-agents-wti-4.10.0-110.el9_8.2.noarch
fence-virt-4.10.0-110.el9_8.2.x86_64
flex-2.6.4-9.el9.x86_64
gcc-11.5.0-14.el9.x86_64
glibc-devel-2.34-270.el9_8.x86_64
glibc-headers-2.34-270.el9_8.x86_64
gnutls-dane-3.8.10-4.el9_8.x86_64
gnutls-utils-3.8.10-4.el9_8.x86_64
ipmitool-1.8.18-27.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
kata-containers-3.25.0-5.rhaos4.21.el9.x86_64
kernel-5.14.0-687.13.1.el9_8.x86_64
kernel-core-5.14.0-687.13.1.el9_8.x86_64
kernel-devel-5.14.0-687.13.1.el9_8.x86_64
kernel-headers-5.14.0-687.13.1.el9_8.x86_64
kernel-modules-5.14.0-687.13.1.el9_8.x86_64
kernel-modules-extra-5.14.0-687.13.1.el9_8.x86_64
kernel-rt-core-5.14.0-687.13.1.el9_8.x86_64
kernel-rt-devel-5.14.0-687.13.1.el9_8.x86_64
kernel-rt-modules-5.14.0-687.13.1.el9_8.x86_64
kernel-rt-modules-core-5.14.0-687.13.1.el9_8.x86_64
kernel-rt-modules-extra-5.14.0-687.13.1.el9_8.x86_64
krb5-pkinit-1.21.1-10.el9_8.x86_64
krb5-workstation-1.21.1-10.el9_8.x86_64
ldns-1.7.1-12.el9.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-10.el9_8.x86_64
libknet1-1.28-1.el9.x86_64
libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
libknet1-compress-plugins-all-1.28-1.el9.x86_64
libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
libknet1-crypto-plugins-all-1.28-1.el9.x86_64
libknet1-plugins-all-1.28-1.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libnozzle1-1.28-1.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-15.el9_8.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-61.0-2.el9.x86_64
libreswan-5.3-5.el9fdp.x86_64
libwsman1-2.8.1-2.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-82-1.el9.x86_64
net-snmp-libs-1:5.9.1-21.el9.x86_64
net-snmp-utils-1:5.9.1-21.el9.x86_64
nspr-4.36.0-8.el9_4.x86_64
nss-3.112.0-8.el9_4.x86_64
nss-softokn-3.112.0-8.el9_4.x86_64
nss-softokn-freebl-3.112.0-8.el9_4.x86_64
nss-sysinit-3.112.0-8.el9_4.x86_64
nss-tools-3.112.0-8.el9_4.x86_64
nss-util-3.112.0-8.el9_4.x86_64
openssl-devel-1:3.5.5-3.el9_8.x86_64
openvswitch3.5-ipsec-3.5.2-72.el9fdp.x86_64
openwsman-python3-2.8.1-2.el9.x86_64
pacemaker-2.1.10-2.el9.x86_64
pacemaker-cli-2.1.10-2.el9.x86_64
pacemaker-cluster-libs-2.1.10-2.el9.x86_64
pacemaker-libs-2.1.10-2.el9.x86_64
pacemaker-schemas-2.1.10-2.el9.noarch
pcp-conf-6.3.7-8.el9_8.x86_64
pcp-libs-6.3.7-8.el9_8.x86_64
pcs-0.11.11-2.el9_8.1.x86_64
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.x86_64
protobuf-3.14.0-17.el9_7.x86_64
python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-5.el9_6.x86_64
python3-lxml-4.6.5-3.el9.x86_64
python3-openvswitch3.5-3.5.2-72.el9fdp.x86_64
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.x86_64
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.5.5-1.el9_8.x86_64
qemu-img-17:10.1.0-17.el9_8.x86_64
qemu-kvm-common-17:10.1.0-17.el9_8.x86_64
qemu-kvm-core-17:10.1.0-17.el9_8.x86_64
redhat-logos-90.6-1.el9.x86_64
resource-agents-4.10.0-111.el9_8.1.x86_64
ruby-3.0.7-166.el9_7.x86_64
ruby-default-gems-3.0.7-166.el9_7.noarch
ruby-libs-3.0.7-166.el9_7.x86_64
rubygem-bigdecimal-3.0.0-166.el9_7.x86_64
rubygem-bundler-2.2.33-166.el9_7.noarch
rubygem-io-console-0.5.7-166.el9_7.x86_64
rubygem-json-2.5.1-166.el9_7.x86_64
rubygem-psych-3.3.2-166.el9_7.x86_64
rubygem-rdoc-6.3.4.1-166.el9_7.noarch
rubygem-rexml-3.2.5-166.el9_7.noarch
rubygems-3.2.33-166.el9_7.noarch
sbd-1.5.2-1.el9.x86_64
seabios-bin-1.16.3-5.el9.noarch
seavgabios-bin-1.16.3-5.el9.noarch
sysstat-12.5.4-11.el9.x86_64
telnet-1:0.17-85.el9.x86_64
usbguard-1.1.4-2.el9.x86_64
usbguard-selinux-1.1.4-2.el9.noarch
virtiofsd-1.13.3-1.el9.x86_64
zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS 10.2 (`rhel-coreos-10`)

Package List

cri-o-1.35.2-5.rhaos4.22.git35f6dd7.el10
kernel-6.12.0-211.7.1.el10_2
openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el10
systemd-257-23.el10

Full list (489 packages)

NetworkManager-1:1.56.0-1.el10
NetworkManager-cloud-setup-1:1.56.0-1.el10
NetworkManager-libnm-1:1.56.0-1.el10
NetworkManager-ovs-1:1.56.0-1.el10
NetworkManager-tui-1:1.56.0-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.0-1.el10
acl-2.3.2-4.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260130-22.el10
amd-ucode-firmware-20260130-22.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-2.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-15.el10_2.1
bind-license-32:9.18.33-15.el10_2.1
bind-utils-32:9.18.33-15.el10_2.1
bootc-1.13.0-1.el10
bootupd-0.2.32-1.el10
bsdtar-3.7.7-8.el10_1
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10_1
catatonit-5:0.2.1-1.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.5-1.el10
clevis-21-9.el10
clevis-dracut-21-9.el10
clevis-luks-21-9.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-21-9.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-2.el10
conmon-rs-0.6.6-0.rhaos4.18.el10.1
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.246.0-1.el10
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10_2
coreos-installer-bootinfra-0.26.0-1.el10_2
coreutils-9.5-7.el10
coreutils-common-9.5-7.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.35.2-5.rhaos4.22.git35f6dd7.el10
cri-tools-1.35.0-2.el10
criu-4.2-1.el10
criu-libs-4.2-1.el10
crun-1.26-1.el10
crypto-policies-20260216-1.git0e54016.el10
crypto-policies-scripts-20260216-1.git0e54016.el10
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10
cyrus-sasl-gssapi-2.1.28-29.el10
cyrus-sasl-lib-2.1.28-29.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-18.el10
device-mapper-multipath-libs-0.9.9-18.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-21.el10
dnf-data-4.20.0-21.el10
dnsmasq-2.90-5.el10
dosfstools-4.2-12.el10
dracut-107-4.el10
dracut-network-107-4.el10
dracut-squash-107-4.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-2.el10_2
elfutils-libelf-0.194-2.el10_2
elfutils-libs-0.194-2.el10_2
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-9.el10
file-libs-5.45-9.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.0-1.el10_1
flatpak-session-helper-1.16.0-9.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-4.1.el10_2
gawk-5.3.0-6.el10
gdbm-1:1.23-12.el10_0
gdbm-libs-1:1.23-12.el10_0
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-12.el10
glibc-2.39-113.el10
glibc-common-2.39-113.el10
glibc-gconv-extra-2.39-113.el10
glibc-minimal-langpack-2.39-113.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10_1
gnutls-3.8.10-3.el10_1
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-46.el10_2
grub2-efi-x64-1:2.12-46.el10_2
grub2-pc-1:2.12-46.el10_2
grub2-pc-modules-1:2.12-46.el10_2
grub2-tools-1:2.12-46.el10_2
grub2-tools-minimal-1:2.12-46.el10_2
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-2.el10_2
ignition-grub-2.26.0-2.el10_2
ima-evm-utils-1.6.2-4.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260130-22.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-12.el10_1
iptables-nft-1.8.11-12.el10_1
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-211.7.1.el10_2
kernel-core-6.12.0-211.7.1.el10_2
kernel-modules-6.12.0-211.7.1.el10_2
kernel-modules-core-6.12.0-211.7.1.el10_2
kernel-modules-extra-6.12.0-211.7.1.el10_2
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-18.el10
krb5-libs-1.21.3-9.el10_1
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-8.el10_1
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-18.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10_1.1
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-4.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-14.el10
libdnf-plugin-subscription-manager-1.30.12-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-18.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-5.el10
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-61.0-1.el10
libicu-74.2-5.el10_0
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-105.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-18.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-5.el10_2
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-3.el10_2.1
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10_2
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
librhsm-0.0.3-16.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-1.el10
libselinux-utils-3.10-1.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-18.el10
libsmbclient-4.23.5-105.el10
libsolv-0.7.33-2.el10
libss-1.47.1-5.el10
libsss_certmap-2.12.0-1.el10
libsss_idmap-2.12.0-1.el10
libsss_nss_idmap-2.12.0-1.el10
libsss_sudo-2.12.0-1.el10
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.29-3.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-18.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-105.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10_0
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260130-22.el10
linux-firmware-whence-20260130-22.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10_1
ncurses-libs-6.4-15.20240127.el10_1
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-5.el10_2
nftables-1:1.1.5-3.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.58-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260130-22.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.10-1.el10
openshift-clients-4.22.0-202605222252.p2.g062bc54.assembly.stream.el10
openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el10
openssh-9.9p1-22.el10_2
openssh-clients-9.9p1-22.el10_2
openssh-server-9.9p1-22.el10_2
openssl-1:3.5.5-1.el10
openssl-fips-provider-3.0.7-8.el10
openssl-fips-provider-so-3.0.7-8.el10
openssl-libs-1:3.5.5-1.el10
openvswitch-selinux-extra-policy-1.0-39.el10fdp
openvswitch3.5-3.5.2-63.el10fdp
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el10
ose-azure-acr-image-credential-provider-4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el10
ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-4.22.0-202605192117.p2.gea31ab8.assembly.stream.el10
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.2-1.el10
p11-kit-trust-0.26.2-1.el10
pam-1.6.1-9.el10
pam-libs-1.6.1-9.el10
passt-0^20251210.gd04c480-3.el10
passt-selinux-0^20251210.gd04c480-3.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.0-2.el10
podman-sequoia-0.4.0~pqc.2-1.el10
policycoreutils-3.10-1.el10
policycoreutils-python-utils-3.10-1.el10
polkit-125-4.el10
polkit-libs-125-4.el10
popt-1.19-8.el10
procps-ng-4.0.4-11.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.12-5.el10_2
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.12-1.el10
python3-dateutil-1:2.9.0.post0-1.el10_0
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-21.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-file-magic-5.45-9.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-14.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-14.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.12-5.el10_2
python3-libselinux-3.10-1.el10
python3-libsemanage-3.10-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.10-1.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10_0
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-setuptools-69.0.3-12.el10_0
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.12-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-2.el10_1.1
qemu-guest-agent-18:10.1.0-16.el10_2
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-61.0-1.el10
readline-8.2-11.el10
redhat-release-10.2-17.el10
redhat-release-eula-10.2-17.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.1-2.el10
rpm-ostree-libs-2026.1-2.el10
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.1.1-2.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.4.1-2.el10_1.2
samba-client-libs-4.23.5-105.el10
samba-common-4.23.5-105.el10
samba-common-libs-4.23.5-105.el10
sed-4.9-5.el10
selinux-policy-42.1.18-4.el10_2
selinux-policy-targeted-42.1.18-4.el10_2
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-4.el10
skopeo-2:1.22.0-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sos-4.10.2-2.el10_2
sqlite-libs-3.46.1-5.el10_1
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-1.el10
sssd-ad-2.12.0-1.el10
sssd-client-2.12.0-1.el10
sssd-common-2.12.0-1.el10
sssd-common-pac-2.12.0-1.el10
sssd-ipa-2.12.0-1.el10
sssd-krb5-2.12.0-1.el10
sssd-krb5-common-2.12.0-1.el10
sssd-ldap-2.12.0-1.el10
sssd-nfs-idmap-2.12.0-1.el10
sssd-proxy-2.12.0-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.12-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-2.p2.el10
systemd-257-23.el10
systemd-journal-remote-257-23.el10
systemd-libs-257-23.el10
systemd-pam-257-23.el10
systemd-udev-257-23.el10
tar-2:1.35-11.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-1.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026a-1.el10
unbound-anchor-1.24.2-7.el10_2.1
unbound-libs-1.24.2-7.el10_2.1
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-18.el10
util-linux-core-2.40.2-18.el10
vim-data-2:9.1.083-9.el10_2.1
vim-minimal-2:9.1.083-9.el10_2.1
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10_0
xz-libs-1:5.6.2-4.el10_0
zlib-ng-compat-2.2.3-3.el10_1
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.54.0-2.el10_1 → 1:1.56.0-1.el10
NetworkManager-cloud-setup 1:1.54.0-2.el10_1 → 1:1.56.0-1.el10
NetworkManager-libnm 1:1.54.0-2.el10_1 → 1:1.56.0-1.el10
NetworkManager-ovs 1:1.54.0-2.el10_1 → 1:1.56.0-1.el10
NetworkManager-tui 1:1.54.0-2.el10_1 → 1:1.56.0-1.el10
WALinuxAgent-udev 2.13.1.1-2.el10_1.1 → 2.14.0.1-3.el10
aardvark-dns 2:1.16.0-2.el10 → 2:1.17.0-1.el10
afterburn 5.9.0-1.el10 → 5.10.0-1.el10
afterburn-dracut 5.9.0-1.el10 → 5.10.0-1.el10
amd-gpu-firmware 20251111-19.1.el10_1 → 20260130-22.el10
amd-ucode-firmware 20251111-19.1.el10_1 → 20260130-22.el10
audit 4.0.3-4.el10 → 4.0.3-5.el10
audit-libs 4.0.3-4.el10 → 4.0.3-5.el10
audit-rules 4.0.3-4.el10 → 4.0.3-5.el10
authselect 1.5.0-8.el10 → 1.5.2-1.el10
authselect-libs 1.5.0-8.el10 → 1.5.2-1.el10
azure-vm-utils 0.5.2-2.el10 → 0.7.0-1.el10
bind-libs 32:9.18.33-10.el10_1.2 → 32:9.18.33-15.el10_2.1
bind-license 32:9.18.33-10.el10_1.2 → 32:9.18.33-15.el10_2.1
bind-utils 32:9.18.33-10.el10_1.2 → 32:9.18.33-15.el10_2.1
bootc 1.8.0-2.el10_1 → 1.13.0-1.el10
bootupd 0.2.31-1.el10_1 → 0.2.32-1.el10
bsdtar 3.7.7-4.el10_0 → 3.7.7-8.el10_1
c-ares 1.25.0-6.el10 → 1.34.6-1.el10
checkpolicy 3.9-1.el10 → 3.10-1.el10
chrony 4.6.1-2.el10 → 4.8-2.el10
cifs-utils 7.2-1.el10 → 7.5-1.el10
clevis 21-8.el10 → 21-9.el10
clevis-dracut 21-8.el10 → 21-9.el10
clevis-luks 21-8.el10 → 21-9.el10
clevis-pin-tpm2 0.5.3-8.el10 → 0.5.3-9.el10
clevis-systemd 21-8.el10 → 21-9.el10
conmon 3:2.1.13-1.el10 → 3:2.2.1-2.el10
conmon-rs 0.6.6-0.rhaos4.18.el9.1 → 0.6.6-0.rhaos4.18.el10.1
container-selinux 4:2.240.0-1.el10 → 4:2.246.0-1.el10
containers-common 5:0.64.0-5.el10_1 → 6:5.8-2.el10
containers-common-extra 5:0.64.0-5.el10_1 → 6:5.8-2.el10
coreos-installer 0.24.0-5.el10_1 → 0.26.0-1.el10_2
coreos-installer-bootinfra 0.24.0-5.el10_1 → 0.26.0-1.el10_2
coreutils 9.5-6.el10 → 9.5-7.el10
coreutils-common 9.5-6.el10 → 9.5-7.el10
cri-o 1.34.4-2.rhaos4.21.git70713d8.el9 → 1.35.2-5.rhaos4.22.git35f6dd7.el10
cri-tools 1.34.0-3.el9 → 1.35.0-2.el10
criu 4.1-1.el10 → 4.2-1.el10
criu-libs 4.1-1.el10 → 4.2-1.el10
crun 1.23.1-1.el10_0 → 1.26-1.el10
crypto-policies 20250905-2.gitc7eb7b2.el10_1 → 20260216-1.git0e54016.el10
crypto-policies-scripts 20250905-2.gitc7eb7b2.el10_1 → 20260216-1.git0e54016.el10
cryptsetup 2.7.5-2.el10 → 2.8.1-2.el10
cryptsetup-libs 2.7.5-2.el10 → 2.8.1-2.el10
curl 8.12.1-2.el10 → 8.12.1-4.el10
device-mapper 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-event 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-event-libs 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-libs 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-multipath 0.9.9-12.el10_1.1 → 0.9.9-18.el10
device-mapper-multipath-libs 0.9.9-12.el10_1.1 → 0.9.9-18.el10
device-mapper-persistent-data 1.1.0-2.el10 → 1.3.0-1.el10
dmidecode 1:3.6-3.el10 → 1:3.6-5.el10
dnf 4.20.0-18.el10 → 4.20.0-21.el10
dnf-data 4.20.0-18.el10 → 4.20.0-21.el10
dnsmasq 2.90-4.el10 → 2.90-5.el10
dracut 107-3.el10 → 107-4.el10
dracut-network 107-3.el10 → 107-4.el10
dracut-squash 107-3.el10 → 107-4.el10
e2fsprogs 1.47.1-4.el10 → 1.47.1-5.el10
e2fsprogs-libs 1.47.1-4.el10 → 1.47.1-5.el10
elfutils-default-yama-scope 0.193-1.el10 → 0.194-2.el10_2
elfutils-libelf 0.193-1.el10 → 0.194-2.el10_2
elfutils-libs 0.193-1.el10 → 0.194-2.el10_2
expat 2.7.1-1.el10_1.3 → 2.7.3-1.el10
file 5.45-8.el10 → 5.45-9.el10
file-libs 5.45-8.el10 → 5.45-9.el10
firewalld-filesystem 2.3.1-1.el10_0 → 2.4.0-1.el10_1
flatpak-session-helper 1.16.0-6.el10 → 1.16.0-9.el10
fwupd 1.9.31-1.el10 → 2.0.19-4.1.el10_2
git-core 2.47.3-1.el10_0 → 2.52.0-1.el10
glib2 2.80.4-10.el10_1.12 → 2.80.4-12.el10
glibc 2.39-58.el10_1.2 → 2.39-113.el10
glibc-common 2.39-58.el10_1.2 → 2.39-113.el10
glibc-gconv-extra 2.39-58.el10_1.2 → 2.39-113.el10
glibc-minimal-langpack 2.39-58.el10_1.2 → 2.39-113.el10
gnupg2 2.4.5-3.el10_1 → 2.4.5-4.el10_1
gnutls 3.8.10-2.el10 → 3.8.10-3.el10_1
grub2-common 1:2.12-29.el10_1 → 1:2.12-46.el10_2
grub2-efi-x64 1:2.12-29.el10_1 → 1:2.12-46.el10_2
grub2-pc 1:2.12-29.el10_1 → 1:2.12-46.el10_2
grub2-pc-modules 1:2.12-29.el10_1 → 1:2.12-46.el10_2
grub2-tools 1:2.12-29.el10_1 → 1:2.12-46.el10_2
grub2-tools-minimal 1:2.12-29.el10_1 → 1:2.12-46.el10_2
hwdata 0.379-10.6.el10 → 0.379-10.8.el10
ignition 2.22.0-3.el10_1 → 2.26.0-2.el10_2
ignition-grub 2.22.0-3.el10_1 → 2.26.0-2.el10_2
ima-evm-utils 1.6.2-3.el10 → 1.6.2-4.el10
intel-gpu-firmware 20251111-19.1.el10_1 → 20260130-22.el10
iproute 6.14.0-2.el10 → 6.17.0-2.el10
iproute-tc 6.14.0-2.el10 → 6.17.0-2.el10
iptables-libs 1.8.11-11.el10 → 1.8.11-12.el10_1
iptables-nft 1.8.11-11.el10 → 1.8.11-12.el10_1
iputils 20240905-4.el10 → 20240905-5.el10
irqbalance 2:1.9.4-5.el10 → 2:1.9.4-6.el10
kdump-utils 1.0.54-7.el10 → 1.0.58-15.el10
kernel 6.12.0-124.28.1.el10_1 → 6.12.0-211.7.1.el10_2
kernel-core 6.12.0-124.28.1.el10_1 → 6.12.0-211.7.1.el10_2
kernel-modules 6.12.0-124.28.1.el10_1 → 6.12.0-211.7.1.el10_2
kernel-modules-core 6.12.0-124.28.1.el10_1 → 6.12.0-211.7.1.el10_2
kernel-modules-extra 6.12.0-124.28.1.el10_1 → 6.12.0-211.7.1.el10_2
kexec-tools 2.0.31-1.el10 → 2.0.32-3.el10
kmod 31-12.el10 → 31-13.el10
kmod-libs 31-12.el10 → 31-13.el10
kpartx 0.9.9-12.el10_1.1 → 0.9.9-18.el10
krb5-libs 1.21.3-8.el10_0 → 1.21.3-9.el10_1
libarchive 3.7.7-4.el10_0 → 3.7.7-8.el10_1
libblkid 2.40.2-13.el10 → 2.40.2-18.el10
libbpf 2:1.6.0-3.el10 → 2:1.7.0-1.el10
libcap 2.69-7.el10 → 2.69-7.el10_1.1
libcom_err 1.47.1-4.el10 → 1.47.1-5.el10
libcurl-minimal 8.12.1-2.el10 → 8.12.1-4.el10
libdnf 0.73.1-12.el10 → 0.73.1-14.el10
libdnf-plugin-subscription-manager 1.30.10.1-1.el10_1 → 1.30.12-1.el10
libdrm 2.4.123-1.el10 → 2.4.128-1.el10
libev 4.33-14.el10 → 4.33-15.el10
libfdisk 2.40.2-13.el10 → 2.40.2-18.el10
libgcc 14.3.1-2.1.el10 → 14.3.1-4.4.el10
libgomp 14.3.1-2.1.el10 → 14.3.1-4.4.el10
libibverbs 57.0-2.el10 → 61.0-1.el10
libipa_hbac 2.11.1-2.el10_1.1 → 2.12.0-1.el10
libldb 4.22.4-106.el10_1 → 4.23.5-105.el10
libluksmeta 9-26.el10 → 10-1.el10
libmount 2.40.2-13.el10 → 2.40.2-18.el10
libnfsidmap 1:2.8.3-0.el10 → 1:2.8.3-5.el10_2
libnftnl 1.2.8-4.el10_1 → 1.3.0-3.el10
libnghttp2 1.64.0-2.el10 → 1.68.0-3.el10_2.1
libnvme 1.13-1.el10 → 1.16.1-3.el10_2
librepo 1.18.0-6.el10_1 → 1.19.0-1.el10
libselinux 3.9-1.el10 → 3.10-1.el10
libselinux-utils 3.9-1.el10 → 3.10-1.el10
libsemanage 3.9-1.el10 → 3.10-1.el10
libsepol 3.9-1.el10 → 3.10-1.el10
libsmartcols 2.40.2-13.el10 → 2.40.2-18.el10
libsmbclient 4.22.4-106.el10_1 → 4.23.5-105.el10
libsolv 0.7.29-8.el10 → 0.7.33-2.el10
libss 1.47.1-4.el10 → 1.47.1-5.el10
libsss_certmap 2.11.1-2.el10_1.1 → 2.12.0-1.el10
libsss_idmap 2.11.1-2.el10_1.1 → 2.12.0-1.el10
libsss_nss_idmap 2.11.1-2.el10_1.1 → 2.12.0-1.el10
libsss_sudo 2.11.1-2.el10_1.1 → 2.12.0-1.el10
libstdc++ 14.3.1-2.1.el10 → 14.3.1-4.4.el10
libtdb 1.4.13-100.el10 → 1.4.14-100.el10
libtevent 0.16.2-100.el10 → 0.17.1-100.el10
liburing 2.5-5.el10 → 2.12-1.el10
libusb1 1.0.28-1.el10 → 1.0.29-3.el10
libuuid 2.40.2-13.el10 → 2.40.2-18.el10
libuv 1:1.51.0-1.el10_0 → 1:1.51.0-1.el10
libwbclient 4.22.4-106.el10_1 → 4.23.5-105.el10
libxml2 2.12.5-9.el10_0 → 2.12.5-10.el10
libxmlb 0.3.15-7.el10 → 0.3.24-1.el10
linux-firmware 20251111-19.1.el10_1 → 20260130-22.el10
linux-firmware-whence 20251111-19.1.el10_1 → 20260130-22.el10
logrotate 3.22.0-4.el10 → 3.22.0-5.el10
luksmeta 9-26.el10 → 10-1.el10
lvm2 10:2.03.32-3.el10 → 10:2.03.36-2.el10
lvm2-libs 10:2.03.32-3.el10 → 10:2.03.36-2.el10
makedumpfile 1.7.7-2.el10 → 1.7.8-1.el10
mdadm 4.4-2.el10 → 4.4-3.el10
microcode_ctl 4:20250812-1.20251111.1.el10_1 → 4:20260210-1.el10
mokutil 2:0.7.2-1.el10 → 2:0.7.2-4.el10
mpfr 4.2.1-5.el10 → 4.2.1-8.el10
ncurses-base 6.4-14.20240127.el10 → 6.4-15.20240127.el10_1
ncurses-libs 6.4-14.20240127.el10 → 6.4-15.20240127.el10_1
netavark 2:1.16.0-1.el10 → 2:1.17.2-1.el10
nfs-utils 1:2.8.3-0.el10 → 1:2.8.3-5.el10_2
nftables 1:1.1.1-6.el10_1 → 1:1.1.5-3.el10
nmap-ncat 4:7.92-3.el10 → 4:7.92-5.el10
nmstate 2.2.54-1.el10_1 → 2.2.58-1.el10
nss-altfiles 2.23.0-5.el10 → 2.23.0-6.el10
numactl-libs 2.0.19-2.el10 → 2.0.19-3.el10
nvidia-gpu-firmware 20251111-19.1.el10_1 → 20260130-22.el10
nvme-cli 2.13-2.el10 → 2.16-2.el10
open-vm-tools 13.0.0-1.el10_1.2 → 13.0.10-1.el10
openldap 2.6.9-1.el10 → 2.6.10-1.el10
openshift-clients 4.21.0-202601170322.p2.g19a2243.assembly.stream.el9 → 4.22.0-202605222252.p2.g062bc54.assembly.stream.el10
openshift-kubelet 4.21.0-202601200721.p2.g4d58ab3.assembly.stream.el9 → 4.22.0-202606041959.p2.g7250fd5.assembly.stream.el10
openssh 9.9p1-12.el10_1 → 9.9p1-22.el10_2
openssh-clients 9.9p1-12.el10_1 → 9.9p1-22.el10_2
openssh-server 9.9p1-12.el10_1 → 9.9p1-22.el10_2
openssl 1:3.5.1-5.el10_1 → 1:3.5.5-1.el10
openssl-libs 1:3.5.1-5.el10_1 → 1:3.5.5-1.el10
openvswitch-selinux-extra-policy 1.0-39.el9fdp → 1.0-39.el10fdp
openvswitch3.5 3.5.2-51.el9fdp → 3.5.2-63.el10fdp
ose-aws-ecr-image-credential-provider 4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9 → 4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el10
ose-azure-acr-image-credential-provider 4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9 → 4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el10
ose-crio-credential-provider 4.21.0-202601151825.p2.g41ac31f.assembly.stream.el9 → 4.22.0-202602261640.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 4.21.0-202601070814.p2.g8732386.assembly.stream.el9 → 4.22.0-202605192117.p2.gea31ab8.assembly.stream.el10
ostree 2025.6-1.el10_1 → 2025.7-1.el10
ostree-grub2 2025.6-1.el10_1 → 2025.7-1.el10
ostree-libs 2025.6-1.el10_1 → 2025.7-1.el10
p11-kit 0.25.5-7.el10 → 0.26.2-1.el10
p11-kit-trust 0.25.5-7.el10 → 0.26.2-1.el10
pam 1.6.1-8.el10 → 1.6.1-9.el10
pam-libs 1.6.1-8.el10 → 1.6.1-9.el10
passt 0^20250512.g8ec1341-4.el10_1 → 0^20251210.gd04c480-3.el10
passt-selinux 0^20250512.g8ec1341-4.el10_1 → 0^20251210.gd04c480-3.el10
podman 7:5.6.0-11.el10_1 → 7:5.8.0-2.el10
policycoreutils 3.9-1.el10 → 3.10-1.el10
policycoreutils-python-utils 3.9-1.el10 → 3.10-1.el10
procps-ng 4.0.4-8.el10 → 4.0.4-11.el10
python3 3.12.12-1.el10_1 → 3.12.12-5.el10_2
python3-audit 4.0.3-4.el10 → 4.0.3-5.el10
python3-cloud-what 1.30.10.1-1.el10_1 → 1.30.12-1.el10
python3-dnf 4.20.0-18.el10 → 4.20.0-21.el10
python3-dnf-plugin-versionlock 4.7.0-9.el10 → 4.7.0-10.el10
python3-dnf-plugins-core 4.7.0-9.el10 → 4.7.0-10.el10
python3-hawkey 0.73.1-12.el10 → 0.73.1-14.el10
python3-libdnf 0.73.1-12.el10 → 0.73.1-14.el10
python3-librepo 1.18.0-6.el10_1 → 1.19.0-1.el10
python3-libs 3.12.12-1.el10_1 → 3.12.12-5.el10_2
python3-libselinux 3.9-1.el10 → 3.10-1.el10
python3-libsemanage 3.9-1.el10 → 3.10-1.el10
python3-policycoreutils 3.9-1.el10 → 3.10-1.el10
python3-rpm 4.19.1.1-20.el10 → 4.19.1.1-23.el10
python3-setools 4.5.1-5.el10 → 4.6.0-3.el10
python3-subscription-manager-rhsm 1.30.10.1-1.el10_1 → 1.30.12-1.el10
qemu-guest-agent 18:10.0.0-14.el10_1 → 18:10.1.0-16.el10_2
quota 1:4.09-9.el10 → 1:4.09-10.el10
quota-nls 1:4.09-9.el10 → 1:4.09-10.el10
rdma-core 57.0-2.el10 → 61.0-1.el10
redhat-release 10.1-18.el10 → 10.2-17.el10
redhat-release-eula 10.1-18.el10 → 10.2-17.el10
rpm 4.19.1.1-20.el10 → 4.19.1.1-23.el10
rpm-build-libs 4.19.1.1-20.el10 → 4.19.1.1-23.el10
rpm-libs 4.19.1.1-20.el10 → 4.19.1.1-23.el10
rpm-ostree 2025.11-1.el10_1 → 2026.1-2.el10
rpm-ostree-libs 2025.11-1.el10_1 → 2026.1-2.el10
rpm-plugin-selinux 4.19.1.1-20.el10 → 4.19.1.1-23.el10
rpm-sequoia 1.9.0.3-1.el10_1 → 1.10.1.1-2.el10
rpm-sign-libs 4.19.1.1-20.el10 → 4.19.1.1-23.el10
rsync 3.4.1-2.el10 → 3.4.1-2.el10_1.2
samba-client-libs 4.22.4-106.el10_1 → 4.23.5-105.el10
samba-common 4.22.4-106.el10_1 → 4.23.5-105.el10
samba-common-libs 4.22.4-106.el10_1 → 4.23.5-105.el10
sed 4.9-3.el10 → 4.9-5.el10
selinux-policy 42.1.7-1.el10 → 42.1.18-4.el10_2
selinux-policy-targeted 42.1.7-1.el10 → 42.1.18-4.el10_2
shadow-utils 2:4.15.0-8.el10 → 2:4.15.0-11.el10
shadow-utils-subid 2:4.15.0-8.el10 → 2:4.15.0-11.el10
shim-x64 16.1-2.el10_1 → 16.1-4.el10
skopeo 2:1.20.0-2.el10_1 → 2:1.22.0-2.el10
sssd 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-ad 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-client 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-common 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-common-pac 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-ipa 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-krb5 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-krb5-common 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-ldap 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-nfs-idmap 2.11.1-2.el10_1.1 → 2.12.0-1.el10
sssd-proxy 2.11.1-2.el10_1.1 → 2.12.0-1.el10
stalld 1.20.4-1.el10 → 1.26.3-1.el10
strace 6.12-2.el10 → 6.12-3.el10
subscription-manager 1.30.10.1-1.el10_1 → 1.30.12-1.el10
sudo 1.9.15-9.p5.el10 → 1.9.17-2.p2.el10
systemd 257-13.el10 → 257-23.el10
systemd-journal-remote 257-13.el10 → 257-23.el10
systemd-libs 257-13.el10 → 257-23.el10
systemd-pam 257-13.el10 → 257-23.el10
systemd-udev 257-13.el10 → 257-23.el10
tar 2:1.35-9.el10_1 → 2:1.35-11.el10
toolbox 0.2-2.el10 → 0.3-1.el10
tpm2-tools 5.7-4.el10 → 5.7-5.el10
tpm2-tss 4.1.3-5.el10 → 4.1.3-6.el10
tpm2-tss-fapi 4.1.3-5.el10 → 4.1.3-6.el10
tzdata 2025c-1.el10 → 2026a-1.el10
unbound-anchor 1.20.0-15.el10_1 → 1.24.2-7.el10_2.1
unbound-libs 1.20.0-15.el10_1 → 1.24.2-7.el10_2.1
util-linux 2.40.2-13.el10 → 2.40.2-18.el10
util-linux-core 2.40.2-13.el10 → 2.40.2-18.el10
vim-data 2:9.1.083-6.el10_1 → 2:9.1.083-9.el10_2.1
vim-minimal 2:9.1.083-6.el10_1 → 2:9.1.083-9.el10_2.1
which 2.21-44.el10_0 → 2.21-44.el10
xfsprogs 6.11.0-2.el10 → 6.16.0-1.el10
zlib-ng-compat 2.2.3-2.el10 → 2.2.3-3.el10_1

Removed:

kernel-modules-extra-matched 6.12.0-124.28.1.el10_1
libgudev 238-7.el10
libgusb 0.4.9-4.el10
runc 4:1.2.9-2.rhaos4.21.el9

Added:

fcoe-utils 1.0.34-11.gitb233050.el10
libconfig 1.7.3-10.el10
lldpad 1.1.1-4.gitf1dd9eb.el10
numactl 2.0.19-3.el10
numad 0.5-50.20251104git.el10
podman-sequoia 0.4.0~pqc.2-1.el10
python3-file-magic 5.45-9.el10
python3-packaging 24.2-2.el10
python3-pexpect 4.9.0-6.el10
python3-ptyprocess 0.7.0-9.el10
python3-pyyaml 6.0.1-19.el10
sos 4.10.2-2.el10_2

Extensions

Full list (213 packages)

NetworkManager-libreswan-1.2.30-1.el10.x86_64
bc-1.07.1-23.el10.x86_64
binutils-2.41-63.el10.x86_64
binutils-gold-2.41-63.el10.x86_64
bison-3.8.2-9.el10.x86_64
capstone-5.0.1-8.el10_2.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
corosync-3.1.10-1.el10_2.1.x86_64
corosynclib-3.1.10-1.el10_2.1.x86_64
cpp-14.3.1-4.4.el10.x86_64
edk2-ovmf-20251114-5.el10_2.noarch
elfutils-debuginfod-client-0.194-2.el10_2.x86_64
elfutils-libelf-devel-0.194-2.el10_2.x86_64
fence-agents-all-4.16.0-21.el10_2.1.x86_64
fence-agents-amt-ws-4.16.0-21.el10_2.1.noarch
fence-agents-apc-4.16.0-21.el10_2.1.noarch
fence-agents-apc-snmp-4.16.0-21.el10_2.1.noarch
fence-agents-bladecenter-4.16.0-21.el10_2.1.noarch
fence-agents-brocade-4.16.0-21.el10_2.1.noarch
fence-agents-cisco-mds-4.16.0-21.el10_2.1.noarch
fence-agents-cisco-ucs-4.16.0-21.el10_2.1.noarch
fence-agents-common-4.16.0-21.el10_2.1.x86_64
fence-agents-drac5-4.16.0-21.el10_2.1.noarch
fence-agents-eaton-snmp-4.16.0-21.el10_2.1.noarch
fence-agents-emerson-4.16.0-21.el10_2.1.noarch
fence-agents-eps-4.16.0-21.el10_2.1.noarch
fence-agents-heuristics-ping-4.16.0-21.el10_2.1.noarch
fence-agents-hpblade-4.16.0-21.el10_2.1.noarch
fence-agents-ibmblade-4.16.0-21.el10_2.1.noarch
fence-agents-ifmib-4.16.0-21.el10_2.1.noarch
fence-agents-ilo-moonshot-4.16.0-21.el10_2.1.noarch
fence-agents-ilo-mp-4.16.0-21.el10_2.1.noarch
fence-agents-ilo-ssh-4.16.0-21.el10_2.1.noarch
fence-agents-ilo2-4.16.0-21.el10_2.1.noarch
fence-agents-intelmodular-4.16.0-21.el10_2.1.noarch
fence-agents-ipdu-4.16.0-21.el10_2.1.noarch
fence-agents-ipmilan-4.16.0-21.el10_2.1.noarch
fence-agents-kdump-4.16.0-21.el10_2.1.x86_64
fence-agents-mpath-4.16.0-21.el10_2.1.noarch
fence-agents-redfish-4.16.0-21.el10_2.1.x86_64
fence-agents-rhevm-4.16.0-21.el10_2.1.noarch
fence-agents-rsa-4.16.0-21.el10_2.1.noarch
fence-agents-rsb-4.16.0-21.el10_2.1.noarch
fence-agents-sbd-4.16.0-21.el10_2.1.noarch
fence-agents-scsi-4.16.0-21.el10_2.1.noarch
fence-agents-vmware-rest-4.16.0-21.el10_2.1.noarch
fence-agents-vmware-soap-4.16.0-21.el10_2.1.noarch
fence-agents-wti-4.16.0-21.el10_2.1.noarch
fence-virt-4.16.0-21.el10_2.1.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.4.el10.x86_64
glibc-devel-2.39-113.el10.x86_64
gnutls-dane-3.8.10-3.el10_1.x86_64
gnutls-utils-3.8.10-3.el10_1.x86_64
groff-base-1.23.0-10.el10.x86_64
ipmitool-1.8.19-10.el10_1.x86_64
ipxe-roms-qemu-20240119-5.gitde8a0821.el10.noarch
kata-containers-3.25.0-5.rhaos4.21.el9.x86_64
kernel-6.12.0-211.7.1.el10_2.x86_64
kernel-core-6.12.0-211.7.1.el10_2.x86_64
kernel-devel-6.12.0-211.7.1.el10_2.x86_64
kernel-headers-6.12.0-211.7.1.el10_2.x86_64
kernel-modules-6.12.0-211.7.1.el10_2.x86_64
kernel-modules-extra-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-core-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-devel-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-modules-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-modules-core-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-modules-extra-6.12.0-211.7.1.el10_2.x86_64
krb5-pkinit-1.21.3-9.el10_1.x86_64
krb5-workstation-1.21.3-9.el10_1.x86_64
ldns-1.8.3-18.el10.x86_64
libfdt-1.7.0-12.el10.x86_64
libkadm5-1.21.3-9.el10_1.x86_64
libknet1-1.30-1.el10.x86_64
libknet1-compress-bzip2-plugin-1.30-1.el10.x86_64
libknet1-compress-lz4-plugin-1.30-1.el10.x86_64
libknet1-compress-lzma-plugin-1.30-1.el10.x86_64
libknet1-compress-lzo2-plugin-1.30-1.el10.x86_64
libknet1-compress-plugins-all-1.30-1.el10.x86_64
libknet1-compress-zlib-plugin-1.30-1.el10.x86_64
libknet1-compress-zstd-plugin-1.30-1.el10.x86_64
libknet1-crypto-nss-plugin-1.30-1.el10.x86_64
libknet1-crypto-openssl-plugin-1.30-1.el10.x86_64
libknet1-crypto-plugins-all-1.30-1.el10.x86_64
libknet1-plugins-all-1.30-1.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libnozzle1-1.30-1.el10.x86_64
libpng-2:1.6.40-11.el10_2.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3-8.el10_2.x86_64
libreswan-minimal-5.3-8.el10_2.x86_64
libslirp-4.7.0-10.el10.x86_64
libwsman1-2.8.1-3.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10_1.x86_64
net-snmp-libs-1:5.9.4-19.el10.x86_64
net-snmp-utils-1:5.9.4-19.el10.x86_64
nspr-4.36.0-8.el10_0.x86_64
nss-3.112.0-8.el10_0.x86_64
nss-softokn-3.112.0-8.el10_0.x86_64
nss-softokn-freebl-3.112.0-8.el10_0.x86_64
nss-sysinit-3.112.0-8.el10_0.x86_64
nss-tools-3.112.0-8.el10_0.x86_64
nss-util-3.112.0-8.el10_0.x86_64
openssl-devel-1:3.5.5-1.el10.x86_64
openvswitch3.5-ipsec-3.5.2-63.el10fdp.x86_64
openwsman-python3-2.8.1-3.el10.x86_64
pacemaker-3.0.1-5.el10.x86_64
pacemaker-cli-3.0.1-5.el10.x86_64
pacemaker-cluster-libs-3.0.1-5.el10.x86_64
pacemaker-libs-3.0.1-5.el10.x86_64
pacemaker-schemas-3.0.1-5.el10.noarch
pcp-conf-7.0.3-3.el10.x86_64
pcp-libs-7.0.3-3.el10.x86_64
pcs-0.12.2-3.el10_2.1.x86_64
perl-AutoLoader-5.74-512.2.el10_0.noarch
perl-B-1.89-512.2.el10_0.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-512.2.el10_0.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-512.2.el10_0.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-512.2.el10_0.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-512.2.el10_0.x86_64
perl-File-Basename-2.86-512.2.el10_0.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-512.2.el10_0.noarch
perl-FileHandle-2.05-512.2.el10_0.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-512.2.el10_0.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-512.2.el10_0.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-512.2.el10_0.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-512.2.el10_0.x86_64
perl-Net-SSLeay-1.94-8.el10.x86_64
perl-POSIX-2.20-512.2.el10_0.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-512.2.el10_0.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-512.2.el10_0.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-TimeDate-1:2.33-16.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-512.2.el10_0.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-512.2.el10_0.noarch
perl-interpreter-4:5.40.2-512.2.el10_0.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-512.2.el10_0.x86_64
perl-locale-1.12-512.2.el10_0.noarch
perl-mro-1.29-512.2.el10_0.x86_64
perl-overload-1.37-512.2.el10_0.noarch
perl-overloading-0.02-512.2.el10_0.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-512.2.el10_0.noarch
pixman-0.43.4-2.el10.x86_64
protobuf-3.19.6-15.el10_1.x86_64
python3-cffi-1.16.0-7.el10.x86_64
python3-cryptography-43.0.0-4.el10.x86_64
python3-lxml-5.2.1-4.el10.x86_64
python3-openvswitch3.5-3.5.2-63.el10fdp.x86_64
python3-ply-3.11-25.el10.noarch
python3-pycparser-2.20-16.el10.noarch
python3-pyparsing-3.1.1-7.el10.noarch
python3-tornado-6.5.5-1.el10_2.x86_64
qemu-img-18:10.1.0-16.el10_2.x86_64
qemu-kvm-common-18:10.1.0-16.el10_2.x86_64
qemu-kvm-core-18:10.1.0-16.el10_2.x86_64
resource-agents-4.16.0-53.el10_2.3.x86_64
ruby-3.3.10-12.el10_1.x86_64
ruby-default-gems-3.3.10-12.el10_1.noarch
ruby-libs-3.3.10-12.el10_1.x86_64
rubygem-bigdecimal-3.1.5-12.el10_1.x86_64
rubygem-bundler-2.5.22-12.el10_1.noarch
rubygem-io-console-0.7.1-12.el10_1.x86_64
rubygem-json-2.7.2-12.el10_1.x86_64
rubygem-psych-5.1.2-12.el10_1.x86_64
rubygem-rdoc-6.6.3.1-12.el10_1.noarch
rubygem-rexml-3.4.4-12.el10_1.noarch
rubygems-3.5.22-12.el10_1.noarch
sbd-1.5.2-1.el10.5.x86_64
seabios-bin-1.17.0-1.el10.noarch
seavgabios-bin-1.17.0-1.el10.noarch
sysstat-12.7.6-4.el10.x86_64
telnet-1:0.17-94.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
virtiofsd-1.13.3-1.el10.x86_64
zlib-ng-compat-devel-2.2.3-3.el10_1.x86_64

Red Hat Enterprise Linux CoreOS base layer: 10.2.20260521-0

GCP-440: Fix GCP boot image discovery from CoreOS base layer: stream metadata #7881

METAL-1729: Add dual CoreOS base layer: version support for RHCOS 9 and 10 #81

View changelog in Markdown or change previous release:

Source code for this page located on github