# 4.13.72

Created: 2026-10-07 10:52:00 +0000 UTC

Image Digest: `sha256:c889dfb978becf40cea36fa5517cd6540944d49cba22aa4783aa1083b93e2470`


## Changes from 4.13.50

### Components

* Kubernetes 1.26.15
* Red Hat Enterprise Linux CoreOS upgraded from 413.92.202408270922-0 to 413.92.202609302032-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [e41e11cc](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/e41e11ccf25fa74e4cfb4ace124f35cffc0191a7) `sha256:53f0da136a9496f96b29f2fc096385b56181789de07d82c1d4dcb19412810dcc`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [6384f904](https://github.com/openshift/alibaba-cloud-csi-driver/commit/6384f904d041b761670532ac183271b8110707f2) `sha256:770a7088247664851ab576ad1b79daa33572be305fa6c37e4b1d52faff99cba7`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [7e415973](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/7e415973dda671d82ae58d0107af274ff053db5c) `sha256:58e701c38286db4e5f71259268135f46a2ecba0f95f16839c208cc6d78655071`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [4c0f96a6](https://github.com/openshift/cluster-api-provider-alibaba/commit/4c0f96a692dee91100d7085c05a68f3efb7e281d) `sha256:c9f186a8664420433a808c24acd021f22bb2c09ecfbe88b4edba163d04b9fbb7`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [95c03b7b](https://github.com/openshift/cloud-provider-aws/commit/95c03b7b838f7c78efe8957b50c50a22cd625be7) `sha256:9604e70f9b4ccb3dfd092da6c7ad63ffa433f185528cbf070d8313b55b11c01a`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [8205d51c](https://github.com/openshift/aws-ebs-csi-driver/commit/8205d51c798f8fea91eb6c1702fb63e7d6c17005) `sha256:b6613d99a75e252695f4a6bc1849c8a35318a90660b46ab0199e9f75472afb79`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [e1a57b5e](https://github.com/openshift/machine-api-provider-aws/commit/e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37) `sha256:9be92361ebbef988ba2435d86354617e8a11cd8729620205b5d0c65e3f97ed10`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [ae01a272](https://github.com/openshift/aws-pod-identity-webhook/commit/ae01a272aff73b1390ee4c3934cc2382370a1660) `sha256:23966e08aad69de32de754972c13125d5f1bdb359c8420c52b21779f5018ee90`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [bf9bd022](https://github.com/openshift/cloud-provider-azure/commit/bf9bd02236e13c426d58c9828685dd6c598ff15f) `sha256:a9e68afebab92cffff56f591af45a53efc5575eabe19ee3ca6a5e395b3c32999`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [bf9bd022](https://github.com/openshift/cloud-provider-azure/commit/bf9bd02236e13c426d58c9828685dd6c598ff15f) `sha256:5421bb2032d751071e7f6bdc0800ae6aa4a5d24ad6ae07d26201bbe97370821f`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [b6d3fbcb](https://github.com/openshift/azure-disk-csi-driver/commit/b6d3fbcbf312f03247092323a88a43873b693f22) `sha256:63a46f2a2ffa74069e82f0579acb8b313355a977df1863e2c2328038ba848c6e`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [8534d756](https://github.com/openshift/azure-disk-csi-driver-operator/commit/8534d7563e209e12eec38a2027cd1d9efd530071) `sha256:e1978fb1329a3df67a1f763ccf448b37b0d01f8c81a4746fac39c221cbacdcf9`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [1280cf54](https://github.com/openshift/baremetal-runtimecfg/commit/1280cf541c220af73b9886379dad2dfa4921f73b) `sha256:cd3861e7d868752209a225299a2fd7852ef67f466de18f0dbca438ce9e3192c5`
* [cli](https://github.com/openshift/oc) git [d192e901](https://github.com/openshift/oc/commit/d192e901ece237d9ae1580d73e78f423ec2ef322) `sha256:d656c09216748eaacfa70595b217c6fca86d7b6cd355003185b9db3dd7b6fc3c`
* [cli-artifacts](https://github.com/openshift/oc) git [d192e901](https://github.com/openshift/oc/commit/d192e901ece237d9ae1580d73e78f423ec2ef322) `sha256:c73749529648127e25227a810f5d644c9518c0cf3c74121d7fec7058f26d7101`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [d377281c](https://github.com/openshift/cloud-network-config-controller/commit/d377281c10ab68ea3faf4775f015c1651004b0ff) `sha256:75d72aede5593d547ac0f66d01fd3556ffe24e535335557075526c6768a12c6e`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [1801056c](https://github.com/openshift/cluster-authentication-operator/commit/1801056c175da7d1e8d5507fa4558564740c7f4d) `sha256:dc9fcbb11883ef61e5acddc1d085e26bba4a12ab0a6a60aba5d8cf04d7626141`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [ee908b6b](https://github.com/openshift/cluster-bootstrap/commit/ee908b6bb91dee3e61aface46d53a00b4e9288a2) `sha256:3a7e3d62a2e110f843a62db02acac2034417c21d89a40342a0b1f3bab7ceae94`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [38f638f0](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/38f638f020ff1e34d33fd44c42b0351912a74486) `sha256:763fc5d5699d38c6aa28cfbcdd9d76e4679de22046a64278791b3c7fc3ea8000`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [a6d56530](https://github.com/openshift/cluster-config-operator/commit/a6d56530c7156bef726005d640c3ded3565104ec) `sha256:531b08920b34cd19d8e5ecd16bf1e77752096c539e93c48081598efb9c532316`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [c068540d](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/c068540d9976ba0fd272e2848de9b0d31a2b7a17) `sha256:4c0dcfd8f46c74c3c704e256ff2fb758724f016dc43664ef5a6a1f0a865eee7d`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [18c076b1](https://github.com/openshift/cluster-api-operator/commit/18c076b1b56e06086fc3e4ea89d6922cca2d6b4a) `sha256:4e28b5abfb80ab21f21aed6e80404cdd08bb25b0a3f95881def050027785a67f`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [dac71136](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/dac7113696160d1170d9b3773afa4a4b7cb2099b) `sha256:bc46af22e08f05e92055e8792f6d8089d81e3f86e0f63c98a6c1b420be1c3490`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [25fe7b4b](https://github.com/openshift/cluster-machine-approver/commit/25fe7b4bd96baba2eef8c0c22521fdc8c08f981d) `sha256:cd8c9855c4bf3c110944e39fec833141ec77d7b3dec00faaa636278bbc5b33e8`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [312c5f24](https://github.com/openshift/platform-operators/commit/312c5f24b5711a764350de899b83443a87296983) `sha256:e8e289bb1b244d938bd3244c71bc0bf6006a102d71b28838200cf20d4cd727f3`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [3b0d0755](https://github.com/openshift/cluster-policy-controller/commit/3b0d075530fdbfdacdfe574151a3313f5231459c) `sha256:f2032e249192ebb82ada184400e3701aa83689cd7780b83d84e1a5600504c889`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [9adad592](https://github.com/openshift/configmap-reload/commit/9adad592e7d9bd5a723add16488e68365a64977f) `sha256:66cb3a2059351787b4ec501b4775d4b4fd31ce04ae03d2db71402fa667b83ccd`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [bc169d2d](https://github.com/openshift/csi-driver-shared-resource-operator/commit/bc169d2d8d1cd128770d2202c6cc00e5328e4e73) `sha256:e24f0165038ebd1b60b7f519e48e0ee84e0ac1dd5fae813ea6e6110793534fde`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [d9290843](https://github.com/openshift/csi-external-attacher/commit/d92908438817984fc47558fdaa03805d8c3b256c) `sha256:45253406dad2276d370a1cf836a4ce01a511c6babc38f797bebef3234eea3c96`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [0bf126b7](https://github.com/openshift/csi-external-provisioner/commit/0bf126b77a721ddaa4706fcb41f8b7be8d292492) `sha256:7210609b35f7e1e6a1a294e6c4c41ef81e0b224deecd6743bbedfc03afc8d633`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [e8036caf](https://github.com/openshift/csi-external-resizer/commit/e8036caff2482648a18c1ac776cf9d2474569d10) `sha256:bfafcb90ec4455acd822be37328a828abc6a6ba8e692a815450ec3132fc58fdb`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [c8a7a097](https://github.com/openshift/csi-external-snapshotter/commit/c8a7a097f68b37ad06a87a4b5c480daeab45be85) `sha256:d3a632edae3418e5c6f1ccab22dcbfff4b5de84fea8d26711c23d64bf8d2d55a`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3587db51](https://github.com/openshift/csi-livenessprobe/commit/3587db51b8a672a2d3be2ac48ea107e474f33402) `sha256:e533c8697cd8b3dff0e9db80b355cafabfa9490618b6eaec0d39f53f0d1f0be7`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9ea90f34](https://github.com/openshift/csi-node-driver-registrar/commit/9ea90f34485500a525fcaad3d79ee82a41402d47) `sha256:5d9873071710f5c60c15034ce741b56658b0fbd3ba7cce97601dde567e3fc40f`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [c8a7a097](https://github.com/openshift/csi-external-snapshotter/commit/c8a7a097f68b37ad06a87a4b5c480daeab45be85) `sha256:fdcdc80a140966093f1b97fdf32ea4f4d36090d04b5a80f4ee5f1b9d3a445f8c`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [c8a7a097](https://github.com/openshift/csi-external-snapshotter/commit/c8a7a097f68b37ad06a87a4b5c480daeab45be85) `sha256:afbd1d8f6f6693e898d7aca723f6d1ba4ab08922f7015a92ab896414aaf13a74`
* [deployer](https://github.com/openshift/oc) git [d192e901](https://github.com/openshift/oc/commit/d192e901ece237d9ae1580d73e78f423ec2ef322) `sha256:5e085f1db60d55ee8c2d1af6354e639751e2785cb0b4e6540ed34ea592a44b34`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:96e4faa0b713f7b04bbf7adac1e3eff3d1ba0a8d75877bb08a5cbda7f797f950`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [dfe03737](https://github.com/openshift/egress-router-cni/commit/dfe03737f1562e81aa09101e4a48f039245bd339) `sha256:79889ad0acb3db2d278c37068e02c7e1636ead92a1bbadb15b6040104225d0a4`
* [etcd](https://github.com/openshift/etcd) git [a6b7ad43](https://github.com/openshift/etcd/commit/a6b7ad436ea8139436c6e9a456fdacd09ec7f054) `sha256:9c527cc69cb3d88c790315a2bf2144449fdf08a5cf8c35835cbddea94cbda663`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [507fea98](https://github.com/openshift/cloud-provider-gcp/commit/507fea9800dc63da95ce551d2fb03219d0b0597a) `sha256:c3838377febfc1da9d8a975ab75ce610b41132982d62e541237b7ee0440f7dc5`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [81e60746](https://github.com/openshift/gcp-pd-csi-driver/commit/81e6074605854246cdab8425a7289ad83169571a) `sha256:77aa3c42075cea0ab9fc2f4e24bc51a21c8675172ab359520f62272b6a8b40ee`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [08c561b8](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/08c561b8292b4a5de3d5bc553a3e463b1f93ec0c) `sha256:bc143d224447e13d1868de4d1dcd3557214304ce010ad3ded6171d9b8c96ebb0`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [b5bcaf9c](https://github.com/openshift/cloud-provider-ibm/commit/b5bcaf9caa96561a32ec5e7b79ca41e173ecfe25) `sha256:c8cd8f4c8eb07dcdf382d735303e0416abe1bbbaf5633df2cac80d751e7f2411`
* [insights-operator](https://github.com/openshift/insights-operator) git [162554e1](https://github.com/openshift/insights-operator/commit/162554e15ece3653649c9a61567d332a462f079a) `sha256:a77dac6b703ca0acfd496243abdad69bf21b40d7046b4735571132b11f39e583`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [4536724a](https://github.com/openshift/ironic-static-ip-manager/commit/4536724a8644fda91a74b23901ba1789eaff7179) `sha256:a5c82bf65dcbce06b0575ce8df6b6a6cf2f5df30b909390c343e0be7766cd253`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [0fce7c7c](https://github.com/openshift/k8s-prometheus-adapter/commit/0fce7c7c97d56ba0a0ae4c6a2ba32e559b8a03d7) `sha256:81d3b752930e80e8c6b1eb49e4bf8df63f82175a85c467e837503fd5c6fd6bff`
* [keepalived-ipfailover](https://github.com/openshift/images) git [1a14e5c9](https://github.com/openshift/images/commit/1a14e5c9896976b43767ab325a6fe35527a514a5) `sha256:61de665b57c5437a0c915ab54786704e74c1c853b921eb1e98dab01672aa999a`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:1a5b03875157d01fd18afdb4ff3f226d81bdfa7cd22c45f0cd8d538bf9822045`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:07b0c7be23eb676b0daae239febb469dfcc5fa7245599a209ba9be40da977ead`
* machine-os-content `sha256:3217a9d3655f1b611bd8b2ffb2d6a169627581a46fcc7faf6ad1a56c9125b4d3`
* [multus-cni](https://github.com/openshift/multus-cni) git [12897bd1](https://github.com/openshift/multus-cni/commit/12897bd18a928b8d0ea22fca0c05cee480285752) `sha256:f9bd83fcca991164b127010d2f2bdd4ef7bb540916574a24eb631f685c306c07`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [7176ab75](https://github.com/openshift/multus-networkpolicy/commit/7176ab75edaf6328bb1da06ba55378815271d218) `sha256:99e4590f2ededc9654257eadce45d3114ec39c5e3a7d788c1c0375d4ce8a6e55`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [ca3bbec5](https://github.com/openshift/route-override-cni/commit/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3) `sha256:72e82cf90f3958b5107fae743753b0e7ebf967b12fe4888c46c7732b8d3b425f`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9f8d13c7](https://github.com/openshift/whereabouts-cni/commit/9f8d13c74cfe33562c520a77b1a7dbf2e1bd1ef9) `sha256:b50d2815f8fa01f37f3c14e0edf51a5d6dd7e9074af4a4bd288e70d63812a563`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [84bda2af](https://github.com/openshift/bond-cni/commit/84bda2afb2ab260253b77d5d282df773cc6b3438) `sha256:39d22a0d74b9358fc4254dbafbd32b0c7d23d226af22c8a574cb72a465656dd9`
* [network-tools](https://github.com/openshift/network-tools) git [073feda1](https://github.com/openshift/network-tools/commit/073feda14fbd894c4238d693afa38a06392f2360) `sha256:359e2c4a5e247ef57d6a27f481f4b31412e96093f5204501d53bc062c4f5a8a0`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [6a597164](https://github.com/openshift/oauth-apiserver/commit/6a5971643b971170d28b96f676225b344c4cff3c) `sha256:024c623846194aded5fd28023905d666d0cc82e36ec7f2f4645a531db1e5459b`
* [oauth-server](https://github.com/openshift/oauth-server) git [eb54be28](https://github.com/openshift/oauth-server/commit/eb54be281d8f215a6eaa6e10ed1b303c7d064bac) `sha256:c5fd5b05f5f33519cc2c61530d17c10e1dc1ed72f2dd5833c093094fc230fdc4`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [7dde3cd3](https://github.com/openshift/operator-framework-rukpak/commit/7dde3cd3e7a7dbbc9b5d134cc4f69f1503ed0a68) `sha256:9799b7a2f212c8bf669be8ef5f881874221e082fdda41ace2152edb82c0126e7`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [22d89b3f](https://github.com/openshift/cluster-api-provider-ovirt/commit/22d89b3fd9e2e395a62f71092487d26c8940052e) `sha256:fcf675e97dfe9da9dfb595b571d221e59a773008918cd04b6f366f6ba34e31a1`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [16fa5555](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/16fa55557367097b075093d2549e0205558c7527) `sha256:9ad95314433e943b5ee3615dc284a506ad0b7f1e3dec06c3587e83ae4d7aab17`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:b250ba6886480245f505b536818edbd98ce61b87aa2d6f5c292fb742a4250708`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:2aabdcd901f0923ba69a8a6b23c9c29c5f658befb78ce2ab75454911fa08dab3`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:7f1d94b7db2e6ef855e0014a60a2431205f3023defa3e58c4d7d49250cc2d49e`
* rhel-coreos `sha256:afd4eec8b91706f5a43aa7c948b4f89fa3238675b3b308eda92d730871b1fd89`
* rhel-coreos-extensions `sha256:6209810122199118ef493b5d9d8fe086817868485efcf0ed9841619bfbf7f86a`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [dba00dc5](https://github.com/openshift/service-ca-operator/commit/dba00dc5b1874904542bed87f49974bf64be168a) `sha256:0d08c68acd1384516a0748ce65f1bc5ccba28f53bd887ae155a3f1ff03d23cff`
* [tools](https://github.com/openshift/oc) git [d192e901](https://github.com/openshift/oc/commit/d192e901ece237d9ae1580d73e78f423ec2ef322) `sha256:df12a1bb8f3383ea988ce2aded70508532ecbe9e37f30afe1d897da2cc7a6ca3`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/c8c68cac0611ba7df7b34e900a666f64c2dec887)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Bump Go 1.18 to 1.20 and regenerate code [#10043](https://github.com/openshift/assisted-service/pull/10043)
* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Use archived dnf repositories for CentOS Stream 8 [#10017](https://github.com/openshift/assisted-service/pull/10017)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/933363bea8435d5a5fbdaebf166ac4f31c1f3321...c8c68cac0611ba7df7b34e900a666f64c2dec887)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/46c4e76ac9a7af1002a06f8bc8302c956e6893e2)

* [OCPBUGS-59114](https://issues.redhat.com/browse/OCPBUGS-59114): CVE-2024-45339: Bump glog pkg to version 1.2.4 (#1195) [#1195](https://github.com/openshift/assisted-installer/pull/1195)
* [OCPBUGS-53717](https://issues.redhat.com/browse/OCPBUGS-53717): Bump jwt to 4.5.2 in release-4.13 (#1094) [#1094](https://github.com/openshift/assisted-installer/pull/1094)
* Bump golang.org/x/net to 0.33.0 (#1015) [#1015](https://github.com/openshift/assisted-installer/pull/1015)
* [OCPBUGS-13612](https://issues.redhat.com/browse/OCPBUGS-13612): Update version go-http-metrics/gin (#935) [#935](https://github.com/openshift/assisted-installer/pull/935)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/492b912ecb2e9f34204f3cb615de2960ded2574f...46c4e76ac9a7af1002a06f8bc8302c956e6893e2)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/b44abe1a520ed0ff2e293622c44af520e230db04)

* [OCPBUGS-102304](https://issues.redhat.com/browse/OCPBUGS-102304): CVE-2026-33814 - replace golang.org/x/net with openshift-sustaining fork v0.35.0-sec.3 [#1628](https://github.com/openshift/assisted-installer-agent/pull/1628)
* [OCPBUGS-67568](https://issues.redhat.com/browse/OCPBUGS-67568): Bump logrus v1.9.0 to v1.9.3 [#1280](https://github.com/openshift/assisted-installer-agent/pull/1280)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/6ee27bc3b9e57763c16d795b355afb890256ff32...b44abe1a520ed0ff2e293622c44af520e230db04)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f56c606ae15041b0c981e654ab577d2b0a3a0a8f)

* [OCPBUGS-38066](https://issues.redhat.com/browse/OCPBUGS-38066): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#61](https://github.com/openshift/apiserver-network-proxy/pull/61)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/a3c0e6b7016017e26603f9990bce2891374f3ca1...f56c606ae15041b0c981e654ab577d2b0a3a0a8f)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/85a6abbea5b82b750fe12e6089588ed4c1243082)

* [OCPBUGS-78230](https://issues.redhat.com/browse/OCPBUGS-78230): [release-4.13] hermetic 4.13 [#594](https://github.com/openshift/cluster-api-provider-aws/pull/594)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/27360a3967ed742a9eb1b0c2ed539d99ec6b9424...85a6abbea5b82b750fe12e6089588ed4c1243082)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/cc2d716073f4e9df06326c1a343b5ee189a56c4b)

* [OCPBUGS-67575](https://issues.redhat.com/browse/OCPBUGS-67575): Updated logrus to v1.8.3 [#314](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/314)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/8f05d9cd9f35c40ab0929577a9650a02c88a2be0...cc2d716073f4e9df06326c1a343b5ee189a56c4b)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/913fbb0f9a5d8c09737f4deb2a8445629403e2d0)

* [OCPBUGS-78179](https://issues.redhat.com/browse/OCPBUGS-78179): [release-4.13] Hermetic 4.13 [#367](https://github.com/openshift/cluster-api-provider-azure/pull/367)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/3f757a8f2ada44c7124f5d0205feb29b0fff1977...913fbb0f9a5d8c09737f4deb2a8445629403e2d0)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/057a032ffc92227f1c5146e3413cb317140e3c00)

* [OCPBUGS-102318](https://issues.redhat.com/browse/OCPBUGS-102318): Bump golang.org/x/net to v0.35.0-sec.4 [#163](https://github.com/openshift/azure-file-csi-driver/pull/163)
* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): bump mount-utils to treat ENODEV error as corrupted mount [#81](https://github.com/openshift/azure-file-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/33d52ecd52b09ba3ab431ce2e2850262a88c2282...057a032ffc92227f1c5146e3413cb317140e3c00)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/247aeae8c7fc836d6b7173dc8d07859df5c2ba38)

* [OCPBUGS-67580](https://issues.redhat.com/browse/OCPBUGS-67580): Bump github.com/sirupsen/logrus to v1.8.3 [#115](https://github.com/openshift/azure-file-csi-driver-operator/pull/115)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/70e0530255150e513061730f7624c9c235ee7c38...247aeae8c7fc836d6b7173dc8d07859df5c2ba38)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/dcdd193c28b1ae9d124a639bf7e806b70275b416)

* [OCPBUGS-78265](https://issues.redhat.com/browse/OCPBUGS-78265): hermetic 4.13 [#187](https://github.com/openshift/machine-api-provider-azure/pull/187)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/62f6e0f3091262a84e1d6240e2086f35635b5b5b...dcdd193c28b1ae9d124a639bf7e806b70275b416)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b3d2f7b8834666c220b88f7aee46ec9160274bcc)

* [OCPBUGS-81578](https://issues.redhat.com/browse/OCPBUGS-81578): Azure UPI ARM template: use storageAccountId [#10454](https://github.com/openshift/installer/pull/10454)
* [OCPBUGS-76931](https://issues.redhat.com/browse/OCPBUGS-76931): terraform/provider/google: Fixing inconsistencies with the service account creation [#10384](https://github.com/openshift/installer/pull/10384)
* [OCPBUGS-66232](https://issues.redhat.com/browse/OCPBUGS-66232): Replace terraform-provider-google with Openshift fork [#10141](https://github.com/openshift/installer/pull/10141)
* [OCPBUGS-62848](https://issues.redhat.com/browse/OCPBUGS-62848): Release 4.13 bump terraform provider azurerm [#10006](https://github.com/openshift/installer/pull/10006)
* [OCPBUGS-55034](https://issues.redhat.com/browse/OCPBUGS-55034): IBMCloud: Move to IBM TF openshift fork [#9668](https://github.com/openshift/installer/pull/9668)
* [OCPBUGS-39217](https://issues.redhat.com/browse/OCPBUGS-39217): Add yq v4 to ci image [#8922](https://github.com/openshift/installer/pull/8922)
* [Full changelog](https://github.com/openshift/installer/compare/1b2041c96e8a7bf0d5f9eef9ae1d9d752f94eee2...b3d2f7b8834666c220b88f7aee46ec9160274bcc)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/ec65cd2e98d30b9449d45eccdb2b17d030d83bdc)

* [OCPBUGS-78102](https://issues.redhat.com/browse/OCPBUGS-78102): [release-4.13] fix vendor/ for hermetic migration [#246](https://github.com/openshift/cluster-api-provider-baremetal/pull/246)
* [OCPBUGS-46640](https://issues.redhat.com/browse/OCPBUGS-46640): Bump x/net 0.33.0 [#229](https://github.com/openshift/cluster-api-provider-baremetal/pull/229)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/336497557b48d67635a7be2bf26ae6a885a67560...ec65cd2e98d30b9449d45eccdb2b17d030d83bdc)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3f56e498ce77b472070c804fca0522eb234ed99f)

* [OCPBUGS-53334](https://issues.redhat.com/browse/OCPBUGS-53334): BMO can expose any secret via BMCEventSubscription CRD 4.13 [#411](https://github.com/openshift/baremetal-operator/pull/411)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/f6db335c7a6fe564a6ef56a98b71e230e685fc6f...3f56e498ce77b472070c804fca0522eb234ed99f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/134ade41c3293d81d0966e4d4644d18f0e7368e6)

* [OCPBUGS-53419](https://issues.redhat.com/browse/OCPBUGS-53419): github.com/golang/glog v1.2.4 [#846](https://github.com/openshift/cloud-credential-operator/pull/846)
* [OCPBUGS-51546](https://issues.redhat.com/browse/OCPBUGS-51546): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#831](https://github.com/openshift/cloud-credential-operator/pull/831)
* [OCPBUGS-43340](https://issues.redhat.com/browse/OCPBUGS-43340): Update github.com/sirupsen/logrus v1.8.3 [#770](https://github.com/openshift/cloud-credential-operator/pull/770)
* [OCPBUGS-37834](https://issues.redhat.com/browse/OCPBUGS-37834): Resolve SNYK errors in security job. [#743](https://github.com/openshift/cloud-credential-operator/pull/743)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/9c18962f71acb53b52c5b107e30289efa1c3f081...134ade41c3293d81d0966e4d4644d18f0e7368e6)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/3ce55c7137713427df9f9fe163b1cb9c775290b6)

* [OCPBUGS-45151](https://issues.redhat.com/browse/OCPBUGS-45151): [release-4.13] VPA: Update OWNERS file [#328](https://github.com/openshift/kubernetes-autoscaler/pull/328)
* [OCPBUGS-40929](https://issues.redhat.com/browse/OCPBUGS-40929): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#317](https://github.com/openshift/kubernetes-autoscaler/pull/317)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/58863488752844a93847eeda891f5827c543176e...3ce55c7137713427df9f9fe163b1cb9c775290b6)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/3601b8843f2819d45f3c2ac329acadac625e15a3)

* [OCPBUGS-102315](https://issues.redhat.com/browse/OCPBUGS-102315): Bump x/net package in release-4.13 [#393](https://github.com/openshift/cluster-autoscaler-operator/pull/393)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/0007e9081f1d7aecd652c0843815be4844f67453...3601b8843f2819d45f3c2ac329acadac625e15a3)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e62fbc906e9ebe245c220e912415d3dbbe2322cd)

* [OCPBUGS-77450](https://issues.redhat.com/browse/OCPBUGS-77450): Bump github.com/go-errors/errors to v1.5.1 [#565](https://github.com/openshift/cluster-baremetal-operator/pull/565)
* [OCPBUGS-31993](https://issues.redhat.com/browse/OCPBUGS-31993): bump x/net to 0.23.0 [#439](https://github.com/openshift/cluster-baremetal-operator/pull/439)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b5eb7b6c7b85dd8ef51fe138ec7e6b5392391c11...e62fbc906e9ebe245c220e912415d3dbbe2322cd)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/15159b38390ee3911f2c01c1903dff2d10cdf9ba)

* [OCPBUGS-77975](https://issues.redhat.com/browse/OCPBUGS-77975): fix vendor for hermetic [#266](https://github.com/openshift/cluster-api/pull/266)
* [Full changelog](https://github.com/openshift/cluster-api/compare/12f767b2bd5de1a2641962f5d86d8564333afc65...15159b38390ee3911f2c01c1903dff2d10cdf9ba)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/35f47274e9ed0a2a7332c2b95aa50c33fb182300)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#563](https://github.com/openshift/cluster-capi-operator/pull/563)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b247793dd364f280ad097f5266b4164740e43a44...35f47274e9ed0a2a7332c2b95aa50c33fb182300)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c5fb62818751e8372d1febd631d9671d83f62962)

* [OCPBUGS-48259](https://issues.redhat.com/browse/OCPBUGS-48259): Add unreadyNodeGracePeriod for allowing brief node hiccups [#342](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/342)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/c9d5fa380a02478dd6d07df9461f7202b42de066...c5fb62818751e8372d1febd631d9671d83f62962)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/65a8fdac5800978f535260997def3e58245f814b)

* [OCPBUGS-52501](https://issues.redhat.com/browse/OCPBUGS-52501): [release-4.13] Add runbook_url for CoreDNSErrorsHigh [#434](https://github.com/openshift/cluster-dns-operator/pull/434)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/461047ef545f66b383352eb8931af18c5a637586...65a8fdac5800978f535260997def3e58245f814b)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/19e43e8d9e904076f69dc2cd71220fee69f502ac)

* [OCPBUGS-67597](https://issues.redhat.com/browse/OCPBUGS-67597): Update logrus to 1.9.3 to address CVE-2025-65637 [#1549](https://github.com/openshift/cluster-etcd-operator/pull/1549)
* [OCPBUGS-53509](https://issues.redhat.com/browse/OCPBUGS-53509): fix CVE-2025-30204 [#1415](https://github.com/openshift/cluster-etcd-operator/pull/1415)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2b384ac0d231264e3d8278725bc0a65a5f6bff7b...19e43e8d9e904076f69dc2cd71220fee69f502ac)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c3ad421ea822cb625321ea3a2a8e589f0d053fe2)

* [OCPBUGS-67598](https://issues.redhat.com/browse/OCPBUGS-67598): Bump logrus to 1.8.3 [#1291](https://github.com/openshift/cluster-image-registry-operator/pull/1291)
* [OCPBUGS-53869](https://issues.redhat.com/browse/OCPBUGS-53869): Bump github.com/golang-jwt/jwt [#1235](https://github.com/openshift/cluster-image-registry-operator/pull/1235)
* [OCPBUGS-51602](https://issues.redhat.com/browse/OCPBUGS-51602): bump golang.org/x/oauth2 [#1222](https://github.com/openshift/cluster-image-registry-operator/pull/1222)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/19ee668b5c3f9037e1353ca9e5e3e0ca924ae31e...c3ad421ea822cb625321ea3a2a8e589f0d053fe2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ad1fa40619711f4730c9d6f7c60aa942c1d0632a)

* [OCPBUGS-86710](https://issues.redhat.com/browse/OCPBUGS-86710): Add configuration override for X-SSL strip [#1493](https://github.com/openshift/cluster-ingress-operator/pull/1493)
* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add alert for RFC 7230 violation in Transfer-Encoding headers [#1161](https://github.com/openshift/cluster-ingress-operator/pull/1161)
* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add e2e test for duplicate Transfer-Encoding headers [#1150](https://github.com/openshift/cluster-ingress-operator/pull/1150)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fbcab4f6e099eb6a306d9fc5f83d0b2d7e0150f3...ad1fa40619711f4730c9d6f7c60aa942c1d0632a)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/c0d6807816ddb7adcda71e8b1fbe72ee12e7a97a)

* [OCPBUGS-67602](https://issues.redhat.com/browse/OCPBUGS-67602): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.13.z] [#2047](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2047)
* [OCPBUGS-50850](https://issues.redhat.com/browse/OCPBUGS-50850): Increase waitForFallbackDegradedConditionTimeout [#1809](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1809)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/1448124e32fe47d95c6ae3f6e275599a65498ee5...c0d6807816ddb7adcda71e8b1fbe72ee12e7a97a)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/74c941a79efaf8a9401adde2174f3bdd9260ca94)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#627](https://github.com/openshift/cluster-kube-scheduler-operator/pull/627)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/2e7c269b358223b89632b35840e6a91cdc7bb9aa...74c941a79efaf8a9401adde2174f3bdd9260ca94)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/a580054caf85de76e8d764d1c989f4ca9464e919)

* [OCPBUGS-67607](https://issues.redhat.com/browse/OCPBUGS-67607): Bump github.com/sirupsen/logrus to v1.8.3 [#142](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/142)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/721de5d64083b17c22f6b784bb2c78af39d7b3b0...a580054caf85de76e8d764d1c989f4ca9464e919)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3db0621d9a2c9a3583954a13f15427a9a6e50e73)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.13] [#3111](https://github.com/openshift/cluster-monitoring-operator/pull/3111)
* [OCPBUGS-76488](https://issues.redhat.com/browse/OCPBUGS-76488): test: remove image registry e2e tests [#2813](https://github.com/openshift/cluster-monitoring-operator/pull/2813)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/3aa76870066af1d0266ab39201856ba711fd08d7...3db0621d9a2c9a3583954a13f15427a9a6e50e73)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bc45a4d1dad2656dbf44f5143679f8795ebf3986)

* [OCPBUGS-78106](https://issues.redhat.com/browse/OCPBUGS-78106): fix vendor for hermetic 4.13 [#2914](https://github.com/openshift/cluster-network-operator/pull/2914)
* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): manifests/02-cncc-credentials: Set skipServiceCheck for GCP [#2547](https://github.com/openshift/cluster-network-operator/pull/2547)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/489f2531addd8c99db1ce7ee4b602c1561a127ac...bc45a4d1dad2656dbf44f5143679f8795ebf3986)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/978a6c56e163f119f757d7116fa99d6b05f7d7f5)

* E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) [#1069](https://github.com/openshift/cluster-node-tuning-operator/pull/1069)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3ed7876da85cb49e3a424a3e87bc42927514cfec...978a6c56e163f119f757d7116fa99d6b05f7d7f5)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/f43d414da365c1bbe99f7bf2d4e7532d4c3bf5b2)

* [OCPBUGS-76595](https://issues.redhat.com/browse/OCPBUGS-76595): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.13] [#659](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/659)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9abb220ac11f370f323f2c248d3ee377394c88b8...f43d414da365c1bbe99f7bf2d4e7532d4c3bf5b2)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/6e7e7835519d30ea22e4c4954039bab21de19c80)

* [OCPBUGS-38455](https://issues.redhat.com/browse/OCPBUGS-38455): Update opentelemetry to mitigate CVE [#365](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/365)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d2818fb5a41defcf3af577fa4cb0a247700ce44a...6e7e7835519d30ea22e4c4954039bab21de19c80)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/b3496c0c8eb3b44086413fea2d6d0f28080db637)

* [OCPBUGS-63520](https://issues.redhat.com/browse/OCPBUGS-63520): references to github.com/sclorg/django-ex.git now also refer to the branch [#662](https://github.com/openshift/cluster-samples-operator/pull/662)
* [OCPBUGS-54812](https://issues.redhat.com/browse/OCPBUGS-54812): add rhdmalone to owners [#628](https://github.com/openshift/cluster-samples-operator/pull/628)
* [OCPBUGS-49663](https://issues.redhat.com/browse/OCPBUGS-49663): add shannon and aroyoredhat as owners [#599](https://github.com/openshift/cluster-samples-operator/pull/599)
* [OCPBUGS-21198](https://issues.redhat.com/browse/OCPBUGS-21198): update k8s.io/apiserver version [#589](https://github.com/openshift/cluster-samples-operator/pull/589)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bcc08e9609e9c39d212857efd27d67753c64d91e...b3496c0c8eb3b44086413fea2d6d0f28080db637)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/98cde3b2e47b0982c9e4ab9ec34930b0021beed3)

* [OCPBUGS-67622](https://issues.redhat.com/browse/OCPBUGS-67622): Bump logrus to v1.8.3 [#656](https://github.com/openshift/cluster-storage-operator/pull/656)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b38c26ae676c9e775f901a04c072848fd8726b90...98cde3b2e47b0982c9e4ab9ec34930b0021beed3)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/7033b4836e4c79a2237c66f31986396d98ac270b)

* NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.13 [#78](https://github.com/openshift/cluster-update-keys/pull/78)
* [OCPBUGS-43886](https://issues.redhat.com/browse/OCPBUGS-43886): keys: Update Red Hat keys to use SHA256 signatures [#67](https://github.com/openshift/cluster-update-keys/pull/67)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd...7033b4836e4c79a2237c66f31986396d98ac270b)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8b3acaebb7de946e86d20bfdf637e7caaaeb1fb3)

* [OCPBUGS-45332](https://issues.redhat.com/browse/OCPBUGS-45332): deps: bump golang.org/x/net to 0.31.0 [#1121](https://github.com/openshift/cluster-version-operator/pull/1121)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/24517b23286b636f50390f9167b41b84da8514cf...8b3acaebb7de946e86d20bfdf637e7caaaeb1fb3)


### [console](https://github.com/openshift/console/tree/00b97ad515afcf491668e9e35550d2dbb5616b3c)

* [OCPBUGS-77115](https://issues.redhat.com/browse/OCPBUGS-77115): [release-4.13] CVE-2026-26996 Bump minimatch library [#16488](https://github.com/openshift/console/pull/16488)
* [OCPBUGS-98418](https://issues.redhat.com/browse/OCPBUGS-98418): CVE-2026-59869 [#16755](https://github.com/openshift/console/pull/16755)
* [OCPBUGS-92691](https://issues.redhat.com/browse/OCPBUGS-92691): CVE-2026-46597 openshift4/ose-console: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.13.z] [#16977](https://github.com/openshift/console/pull/16977)
* Fix for OCPBUGS-92068: CVE-2026-44990 [#16722](https://github.com/openshift/console/pull/16722)
* [OCPBUGS-100521](https://issues.redhat.com/browse/OCPBUGS-100521), [OCPBUGS-101797](https://issues.redhat.com/browse/OCPBUGS-101797): Bump postcss to fix CVE-2026-45623, CVE-2026-69153 [#17112](https://github.com/openshift/console/pull/17112)
* [OCPBUGS-112511](https://issues.redhat.com/browse/OCPBUGS-112511): Fix JSON annotation parsing to prevent OperatorHub crash [#17069](https://github.com/openshift/console/pull/17069)
* [OCPBUGS-87988](https://issues.redhat.com/browse/OCPBUGS-87988): [release-4.13] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16596](https://github.com/openshift/console/pull/16596)
* Fix for OCPBUGS-81594: CVE-2026-4800 [#16569](https://github.com/openshift/console/pull/16569)
* [OCPBUGS-88410](https://issues.redhat.com/browse/OCPBUGS-88410), [OCPBUGS-88442](https://issues.redhat.com/browse/OCPBUGS-88442): CVE-2026-44486 openshift4/ose-console: Axios: Information disclosure of proxy credentials via HTTP redirects [#16779](https://github.com/openshift/console/pull/16779)
* [OCPBUGS-88375](https://issues.redhat.com/browse/OCPBUGS-88375), [OCPBUGS-88384](https://issues.redhat.com/browse/OCPBUGS-88384), [OCPBUGS-88391](https://issues.redhat.com/browse/OCPBUGS-88391), [OCPBUGS-88404](https://issues.redhat.com/browse/OCPBUGS-88404), [OCPBUGS-88410](https://issues.redhat.com/browse/OCPBUGS-88410), [OCPBUGS-88414](https://issues.redhat.com/browse/OCPBUGS-88414), [OCPBUGS-88442](https://issues.redhat.com/browse/OCPBUGS-88442): CVE-2026-44495 [#16622](https://github.com/openshift/console/pull/16622)
* [OCPBUGS-79432](https://issues.redhat.com/browse/OCPBUGS-79432): CVE-2026-29063 Bump immutable [#16330](https://github.com/openshift/console/pull/16330)
* [ART-18919](https://issues.redhat.com/browse/ART-18919): pin fsevents to latest [#16481](https://github.com/openshift/console/pull/16481)
* NO-JIRA: enable multi-architecture yarn builds [#16423](https://github.com/openshift/console/pull/16423)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16083](https://github.com/openshift/console/pull/16083)
* NO-JIRA: Bump builder image to v29 [#15989](https://github.com/openshift/console/pull/15989)
* [OCPBUGS-74437](https://issues.redhat.com/browse/OCPBUGS-74437): Bump lodash to latest [#15972](https://github.com/openshift/console/pull/15972)
* [OCPBUGS-44160](https://issues.redhat.com/browse/OCPBUGS-44160): bump dompurify to latest [#15594](https://github.com/openshift/console/pull/15594)
* [OCPBUGS-57100](https://issues.redhat.com/browse/OCPBUGS-57100): Add all files to `vendor` regardless of gitignore [#15136](https://github.com/openshift/console/pull/15136)
* [OCPBUGS-54892](https://issues.redhat.com/browse/OCPBUGS-54892): Show Observe section without PROMETHEUS and MONITORING flags [#14960](https://github.com/openshift/console/pull/14960)
* [OCPBUGS-45292](https://issues.redhat.com/browse/OCPBUGS-45292): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14573](https://github.com/openshift/console/pull/14573)
* [OCPBUGS-44356](https://issues.redhat.com/browse/OCPBUGS-44356): Application creation fail when manually entering input scaling value in local setup [#14509](https://github.com/openshift/console/pull/14509)
* [OCPBUGS-45197](https://issues.redhat.com/browse/OCPBUGS-45197): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#14552](https://github.com/openshift/console/pull/14552)
* [OCPBUGS-44585](https://issues.redhat.com/browse/OCPBUGS-44585): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14497](https://github.com/openshift/console/pull/14497)
* [OCPBUGS-36557](https://issues.redhat.com/browse/OCPBUGS-36557): Increase login flow state paramater length/entropy [#14483](https://github.com/openshift/console/pull/14483)
* [OCPBUGS-42951](https://issues.redhat.com/browse/OCPBUGS-42951): The filepath including leading slash makes error during parsing devfile using Gitlab [#14383](https://github.com/openshift/console/pull/14383)
* [OCPBUGS-41594](https://issues.redhat.com/browse/OCPBUGS-41594): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14263](https://github.com/openshift/console/pull/14263)
* [Full changelog](https://github.com/openshift/console/compare/62a2dbc83ea25e153c2c2836039d6fc0b37fd360...00b97ad515afcf491668e9e35550d2dbb5616b3c)


### [console-operator](https://github.com/openshift/console-operator/tree/4056ea6e34adfac540eaef4ca04fbd18518dc0ca)

* [OCPBUGS-77995](https://issues.redhat.com/browse/OCPBUGS-77995): [release-4.13] NO-JIRA: update go mod dependency for konflux [#1118](https://github.com/openshift/console-operator/pull/1118)
* [Full changelog](https://github.com/openshift/console-operator/compare/cb4657d2d8cc94b611bc9b1f4260f2776c30c0f0...4056ea6e34adfac540eaef4ca04fbd18518dc0ca)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/3086cf651514b87cc891b3dfbb65a645bd0b100e)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Fix Hermeto build issues [#197](https://github.com/openshift/containernetworking-plugins/pull/197)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/614ca3c35e1847f38f0f427c04a064cd31ac5002...3086cf651514b87cc891b3dfbb65a645bd0b100e)


### [coredns](https://github.com/openshift/coredns/tree/d3037cb9c6c13078d0ea2a7c6e7a4b6c21b29362)

* [OCPBUGS-60804](https://issues.redhat.com/browse/OCPBUGS-60804): Bump github.com/golang/glog to v1.2.4 [#150](https://github.com/openshift/coredns/pull/150)
* [Full changelog](https://github.com/openshift/coredns/compare/e70f09779b20b28f85884c7b665f72f28694db00...d3037cb9c6c13078d0ea2a7c6e7a4b6c21b29362)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/25aa5f367399500e5634d86158e227ebad1936fe)

* [OCPBUGS-79799](https://issues.redhat.com/browse/OCPBUGS-79799): Apply code mitigations for CVE-2026-33186 [#400](https://github.com/openshift/cloud-provider-openstack/pull/400)
* [OCPBUGS-67628](https://issues.redhat.com/browse/OCPBUGS-67628): fix CVE-2025-65637 [#364](https://github.com/openshift/cloud-provider-openstack/pull/364)
* [OCPBUGS-58888](https://issues.redhat.com/browse/OCPBUGS-58888): CARRY: don't ignore json files [#344](https://github.com/openshift/cloud-provider-openstack/pull/344)
* [OCPBUGS-52414](https://issues.redhat.com/browse/OCPBUGS-52414): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 [#313](https://github.com/openshift/cloud-provider-openstack/pull/313)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c3b7d2f5d7b6be7353edffd811fcd55e8bf0af32...25aa5f367399500e5634d86158e227ebad1936fe)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/67883f057e0db4d591e350734c06cd9421adcd47)

* [OCPBUGS-67629](https://issues.redhat.com/browse/OCPBUGS-67629): Bump logrus [#254](https://github.com/openshift/csi-driver-manila-operator/pull/254)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/596a53c8fb79eddf85bad8deb504536adf228128...67883f057e0db4d591e350734c06cd9421adcd47)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/61772d79c8c6b41c4bd0c8f972a20357cf427850)

* [OCPBUGS-84928](https://issues.redhat.com/browse/OCPBUGS-84928): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#185](https://github.com/openshift/csi-driver-nfs/pull/185)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/2b914c2161722ebf11f9275fa29e00a0b1306da1...61772d79c8c6b41c4bd0c8f972a20357cf427850)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/dd1b83cdebb614073d3b30112f85f8b88e67af4b)

* [OCPBUGS-102349](https://issues.redhat.com/browse/OCPBUGS-102349): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#530](https://github.com/openshift/csi-driver-shared-resource/pull/530)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/01bbb23b627835354f6177b4b44cfc50bd6d9a2e...dd1b83cdebb614073d3b30112f85f8b88e67af4b)


### [docker-builder](https://github.com/openshift/builder/tree/b379980d6f626dc45a91f0a715bc94e75fb4b309)

* [OCPBUGS-43295](https://issues.redhat.com/browse/OCPBUGS-43295): Buildah dependency bump to 1.29.5 [#460](https://github.com/openshift/builder/pull/460)
* [OCPBUGS-43191](https://issues.redhat.com/browse/OCPBUGS-43191): runc library bump to 1.1.12 [#439](https://github.com/openshift/builder/pull/439)
* [OCPBUGS-48836](https://issues.redhat.com/browse/OCPBUGS-48836): skipping some unit tests to avoid failures as they are duplicate [#434](https://github.com/openshift/builder/pull/434)
* [OCPBUGS-48655](https://issues.redhat.com/browse/OCPBUGS-48655): Add new team members to the OWNERS file [#431](https://github.com/openshift/builder/pull/431)
* [Full changelog](https://github.com/openshift/builder/compare/2c7e99da0bef2d6f6d0c3bed15202ea333126f8d...b379980d6f626dc45a91f0a715bc94e75fb4b309)


### [docker-registry](https://github.com/openshift/image-registry/tree/d00c2694d7ccfe28536fad6ac9b9dd3967d01107)

* [OCPBUGS-53653](https://issues.redhat.com/browse/OCPBUGS-53653): bump jwt and oauth dependencies [#436](https://github.com/openshift/image-registry/pull/436)
* [Full changelog](https://github.com/openshift/image-registry/compare/47a15ac8b7233bb1de44c1364bbd787de2edaaf0...d00c2694d7ccfe28536fad6ac9b9dd3967d01107)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/47ec07a8b42dd7b40f354b395affeb3e16133b5e)

* [OCPBUGS-78283](https://issues.redhat.com/browse/OCPBUGS-78283): [release-4.13] hermetic migration 4.13 [#279](https://github.com/openshift/cluster-api-provider-gcp/pull/279)
* [OCPBUGS-78283](https://issues.redhat.com/browse/OCPBUGS-78283): [release-4.13] hermetic migration 4.13 [#270](https://github.com/openshift/cluster-api-provider-gcp/pull/270)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/b8a2772574aacf16a998ff7c7ba24000eff60d07...47ec07a8b42dd7b40f354b395affeb3e16133b5e)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/590dca51f05872704fb897c7f8d2965ce9dfb100)

* [OCPBUGS-102404](https://issues.redhat.com/browse/OCPBUGS-102404): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#195](https://github.com/openshift/machine-api-provider-gcp/pull/195)
* [OCPBUGS-79795](https://issues.redhat.com/browse/OCPBUGS-79795): Address CVE-2026-33186 [#173](https://github.com/openshift/machine-api-provider-gcp/pull/173)
* [OCPBUGS-78182](https://issues.redhat.com/browse/OCPBUGS-78182): hermetic 4.13 [#142](https://github.com/openshift/machine-api-provider-gcp/pull/142)
* [OCPBUGS-56916](https://issues.redhat.com/browse/OCPBUGS-56916): Disable shielded VMs for non-UEFI disks [#120](https://github.com/openshift/machine-api-provider-gcp/pull/120)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/e53a397d838137a37895fe668cba4857a82e7da2...590dca51f05872704fb897c7f8d2965ce9dfb100)


### [haproxy-router](https://github.com/openshift/router/tree/85bc0d9ce7d4f6caabfdb17fcc917e04ae628f56)

* [OCPBUGS-86710](https://issues.redhat.com/browse/OCPBUGS-86710): Strip X-SSL-* headers for plain HTTP [#808](https://github.com/openshift/router/pull/808)
* [OCPBUGS-74945](https://issues.redhat.com/browse/OCPBUGS-74945): Adding escapeHAProxySingleQuotes for sanitize [release-4.13] [#783](https://github.com/openshift/router/pull/783)
* [OCPBUGS-78109](https://issues.redhat.com/browse/OCPBUGS-78109): [release-4.13] hermetic 4.13 [#743](https://github.com/openshift/router/pull/743)
* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): add duplicate_te_header_total metric [#626](https://github.com/openshift/router/pull/626)
* [Full changelog](https://github.com/openshift/router/compare/2012a1d877513c55f7b785daa5aeec3b34b9516f...85bc0d9ce7d4f6caabfdb17fcc917e04ae628f56)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/bbc7c0c199f92a78a858a36e78998abea5f36bef)

* [OCPBUGS-77660](https://issues.redhat.com/browse/OCPBUGS-77660): Skip E2e: attach on previously attached volumes should work [#2606](https://github.com/openshift/kubernetes/pull/2606)
* [OCPBUGS-67556](https://issues.redhat.com/browse/OCPBUGS-67556), [OCPBUGS-67652](https://issues.redhat.com/browse/OCPBUGS-67652): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.13] [#2626](https://github.com/openshift/kubernetes/pull/2626)
* [OCPBUGS-77800](https://issues.redhat.com/browse/OCPBUGS-77800): UPSTREAM: 133262: Remove permafailing tests using an expired GCP project [#2611](https://github.com/openshift/kubernetes/pull/2611)
* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): mount-utils: treat syscall.ENODEV as corrupted mount [#2083](https://github.com/openshift/kubernetes/pull/2083)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e0953cc62b52b8db29b72d3c61c0629fa73b05ae...bbc7c0c199f92a78a858a36e78998abea5f36bef)


### [hypershift](https://github.com/openshift/hypershift/tree/bc2d7cdad75b7c36aa5c19fa979ec965483185a0)

* [OCPBUGS-77756](https://issues.redhat.com/browse/OCPBUGS-77756): fix vendor for hermetic 4.13 [#7822](https://github.com/openshift/hypershift/pull/7822)
* [OCPBUGS-53901](https://issues.redhat.com/browse/OCPBUGS-53901): bump golang-jwt v4 [#5948](https://github.com/openshift/hypershift/pull/5948)
* [OCPBUGS-39184](https://issues.redhat.com/browse/OCPBUGS-39184): fix: bump github.com/IBM/go-sdk-core/v5 [#4627](https://github.com/openshift/hypershift/pull/4627)
* [OCPBUGS-41515](https://issues.redhat.com/browse/OCPBUGS-41515): set Konnectivity cipher suites [#4284](https://github.com/openshift/hypershift/pull/4284)
* [Full changelog](https://github.com/openshift/hypershift/compare/46616345e0d76488c4df3c9f036f3138cf00f1ea...bc2d7cdad75b7c36aa5c19fa979ec965483185a0)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/7c9d59b0ee6676ca3b3f86ac0cc4723de91a16e7)

* [OCPBUGS-79790](https://issues.redhat.com/browse/OCPBUGS-79790): patch google.golang.org/grpc to v1.79.3 [#159](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/159)
* [OCPBUGS-77213](https://issues.redhat.com/browse/OCPBUGS-77213): [release-4.13] standardize build paths [#127](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/127)
* [OCPBUGS-59124](https://issues.redhat.com/browse/OCPBUGS-59124): bump github.com/golang/glog to v1.2.4 [#110](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/110)
* [OCPBUGS-56066](https://issues.redhat.com/browse/OCPBUGS-56066): tech debt: rework vendor patches [#94](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/94)
* [OCPBUGS-53909](https://issues.redhat.com/browse/OCPBUGS-53909): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#87](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/87)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/54aaeff798c04decfb25cf552be760a90d53f97c...7c9d59b0ee6676ca3b3f86ac0cc4723de91a16e7)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/30262c098a2124f8fb8ed334df7b4e48c75dbeaa)

* [OCPBUGS-67656](https://issues.redhat.com/browse/OCPBUGS-67656), [OCPBUGS-67657](https://issues.redhat.com/browse/OCPBUGS-67657): bump github.com/sirupsen/logrus to v1.8.3 [#164](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/164)
* [OCPBUGS-59874](https://issues.redhat.com/browse/OCPBUGS-59874): [IBM VPC] set offlineExpansion to false in e2e test manifest [#152](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/152)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/4c23f8185288d1030913f8d9097d75132ed7d158...30262c098a2124f8fb8ed334df7b4e48c75dbeaa)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/6d619f62a27ba0ac0cab05e035f07aef9095d9c9)

* [OCPBUGS-56066](https://issues.redhat.com/browse/OCPBUGS-56066): tech debt: rework vendor patches [#51](https://github.com/openshift/ibm-vpc-node-label-updater/pull/51)
* [OCPBUGS-53541](https://issues.redhat.com/browse/OCPBUGS-53541): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#47](https://github.com/openshift/ibm-vpc-node-label-updater/pull/47)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/b819827a4e45d01833f874b92ba30ccc39ccd19f...6d619f62a27ba0ac0cab05e035f07aef9095d9c9)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/2674de4e70d2d55aee37069688c56f576b34dd81)

* [OCPBUGS-102403](https://issues.redhat.com/browse/OCPBUGS-102403): Replace golang.org/x/net with openshift-sustaining/net [#167](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/167)
* [OCPBUGS-115548](https://issues.redhat.com/browse/OCPBUGS-115548): Fetch envtest assets from the controller-tools releases [#178](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/178)
* [OCPBUGS-67291](https://issues.redhat.com/browse/OCPBUGS-67291): [release-4.13] Fix incomplete vendor/ [#135](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/135)
* [OCPBUGS-36076](https://issues.redhat.com/browse/OCPBUGS-36076): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 [#90](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/90)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/c4441f101083a8ffe01d4d6bb372a8b32a30a9a6...2674de4e70d2d55aee37069688c56f576b34dd81)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/54ce34e383a970fa501ed4cbb5be0e305bc9d35d)

* [OCPBUGS-102411](https://issues.redhat.com/browse/OCPBUGS-102411): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#109](https://github.com/openshift/machine-api-provider-ibmcloud/pull/109)
* [OCPBUGS-78275](https://issues.redhat.com/browse/OCPBUGS-78275): hermetic 4.13 [#78](https://github.com/openshift/machine-api-provider-ibmcloud/pull/78)
* [OCPBUGS-36082](https://issues.redhat.com/browse/OCPBUGS-36082): Bump dependency for CVE [#56](https://github.com/openshift/machine-api-provider-ibmcloud/pull/56)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/bb253a0c607f7d1f8139ffd401bd6c9c432090d1...54ce34e383a970fa501ed4cbb5be0e305bc9d35d)


### [ironic](https://github.com/openshift/ironic-image/tree/7edd609de1fd2d1e9c8c5a46018b4f97b7474d15)

* [OCPBUGS-69791](https://issues.redhat.com/browse/OCPBUGS-69791): Bump eventlet version to 0.33.1-7 [#766](https://github.com/openshift/ironic-image/pull/766)
* [OCPBUGS-48146](https://issues.redhat.com/browse/OCPBUGS-48146), [OCPBUGS-48595](https://issues.redhat.com/browse/OCPBUGS-48595): Bump jinja2 to 3.0.1-6.el9.2 [#626](https://github.com/openshift/ironic-image/pull/626)
* [OCPBUGS-43952](https://issues.redhat.com/browse/OCPBUGS-43952), [OCPBUGS-43960](https://issues.redhat.com/browse/OCPBUGS-43960): Bump python-waitress [4.13] [#608](https://github.com/openshift/ironic-image/pull/608)
* [OCPBUGS-37764](https://issues.redhat.com/browse/OCPBUGS-37764), [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#585](https://github.com/openshift/ironic-image/pull/585)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set min version for python3-webob [#557](https://github.com/openshift/ironic-image/pull/557)
* [Full changelog](https://github.com/openshift/ironic-image/compare/a41189532c43f545c0493d50e9d0e222af41ad30...7edd609de1fd2d1e9c8c5a46018b4f97b7474d15)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/bad3f37dea29e412399362fd63ae1419024fc62d)

* [OCPBUGS-96902](https://issues.redhat.com/browse/OCPBUGS-96902): Replace individual package removal with a single rpm -e loop [#279](https://github.com/openshift/ironic-agent-image/pull/279)
* [OCPBUGS-69776](https://issues.redhat.com/browse/OCPBUGS-69776): adding eventlet-0.33.1-7 [#235](https://github.com/openshift/ironic-agent-image/pull/235)
* [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#164](https://github.com/openshift/ironic-agent-image/pull/164)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set webob and bump werkzeug [#152](https://github.com/openshift/ironic-agent-image/pull/152)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/833caa2c4b712381c3f847ba928dcb34d0f875a1...bad3f37dea29e412399362fd63ae1419024fc62d)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/74713cce321c26cf8b8d429baadd2e29ae05ffb1)

* [OCPBUGS-87170](https://issues.redhat.com/browse/OCPBUGS-87170): CI build root image tag and go version in go.mod version synced with ART 4.13 [#119](https://github.com/openshift/ironic-rhcos-downloader/pull/119)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/ce2917794de5723248fe3302c8833f89fb54265a...74713cce321c26cf8b8d429baadd2e29ae05ffb1)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/9c882377e3a4cfc447b490e0a760697f3c9fa9ba)

* [OCPBUGS-55758](https://issues.redhat.com/browse/OCPBUGS-55758): Handle `openshift-host-network` namespace as special when it modifies [#656](https://github.com/openshift/sdn/pull/656)
* [Full changelog](https://github.com/openshift/sdn/compare/569ea1116cb348a31ea757b0a76d21de6bc8bcba...9c882377e3a4cfc447b490e0a760697f3c9fa9ba)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f35f954ae0550e6ebeb94e244401fc069dc346b8)

* [OCPBUGS-31987](https://issues.redhat.com/browse/OCPBUGS-31987): CVE-2023-45288 [4.13] [#107](https://github.com/openshift/kube-rbac-proxy/pull/107)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/ae32bfa0f11ae2854339ab9af83c44ee1c04fe31...f35f954ae0550e6ebeb94e244401fc069dc346b8)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/f00750d1f520ed915907106284eaba4561ad54af)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.13] [#191](https://github.com/openshift/kube-state-metrics/pull/191)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/fd791df54d7271c1611090505509a03454168689...f00750d1f520ed915907106284eaba4561ad54af)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/ac20da35bc6d9cded6dbf7fa0c27e867c7a69cb7)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-13). [#230](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/230)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/bad104d13ba95bc850f5aaf96436f793d7985864...ac20da35bc6d9cded6dbf7fa0c27e867c7a69cb7)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/baa67b6e7cc5f7c19360de9a4a766f6faf01f7a1)

* [OCPBUGS-95079](https://issues.redhat.com/browse/OCPBUGS-95079): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#78](https://github.com/openshift/cloud-provider-kubevirt/pull/78)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/ee2033ecd471dc9fc08d101c421a04916f4f55c5...baa67b6e7cc5f7c19360de9a4a766f6faf01f7a1)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/7fe8d9050d6f181797c716c4f03e73469389827f)

* [OCPBUGS-83661](https://issues.redhat.com/browse/OCPBUGS-83661): Bump google.golang.org/grpc to v1.79.3 [#109](https://github.com/openshift/kubevirt-csi-driver/pull/109)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/9d909f7f3a3efd27d7efb71bf0324796aa6e8788...7fe8d9050d6f181797c716c4f03e73469389827f)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/8f825e59b9e80bc0123d360365b306ae2f464699)

* [OCPBUGS-77199](https://issues.redhat.com/browse/OCPBUGS-77199): Fix incomplete vendor [#305](https://github.com/openshift/cluster-api-provider-libvirt/pull/305)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/d4b7a8ab790a970ce2f0374146248b2307df0185...8f825e59b9e80bc0123d360365b306ae2f464699)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b3b92854d3f8b19ba72c3800e3f0d485c4ebd0b7)

* [OCPBUGS-78270](https://issues.redhat.com/browse/OCPBUGS-78270): hermetic 4.13 [#1469](https://github.com/openshift/machine-api-operator/pull/1469)
* [OCPBUGS-67672](https://issues.redhat.com/browse/OCPBUGS-67672): bumped logrus to v1.9.3 [#1461](https://github.com/openshift/machine-api-operator/pull/1461)
* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP [#1304](https://github.com/openshift/machine-api-operator/pull/1304)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ca4c4a67f777397af78fe6ba0a17114f416daf39...b3b92854d3f8b19ba72c3800e3f0d485c4ebd0b7)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a57ca291235422f8466ac53496e9d192eecfe1e4)

* [OCPBUGS-61234](https://issues.redhat.com/browse/OCPBUGS-61234): Trigger a new build [#5278](https://github.com/openshift/machine-config-operator/pull/5278)
* [OCPBUGS-59125](https://issues.redhat.com/browse/OCPBUGS-59125): [release-4.13] Bump golang/glog to fix  CVE-2024-45339 [#5175](https://github.com/openshift/machine-config-operator/pull/5175)
* [OCPBUGS-44206](https://issues.redhat.com/browse/OCPBUGS-44206): Panic seen in CI job for MCC pod [#4680](https://github.com/openshift/machine-config-operator/pull/4680)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b1a8f6946397e7a04ebd7a43ad6a15cb543e6599...a57ca291235422f8466ac53496e9d192eecfe1e4)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d722cc362b450bd97794fd5ea4c35a2924a6f13a)

* [OCPBUGS-67658](https://issues.redhat.com/browse/OCPBUGS-67658): bumped logrus to v1.9.3 [#160](https://github.com/openshift/image-customization-controller/pull/160)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/34a4abe6ec47fff69476695eccffdb27fe23780c...d722cc362b450bd97794fd5ea4c35a2924a6f13a)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/cb22deaa429516b8212358958d92630829759082)

* [OCPBUGS-87881](https://issues.redhat.com/browse/OCPBUGS-87881): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#105](https://github.com/openshift/machine-os-images/pull/105)
* [OCPBUGS-54172](https://issues.redhat.com/browse/OCPBUGS-54172): Change rhcos release browser url [#60](https://github.com/openshift/machine-os-images/pull/60)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e...cb22deaa429516b8212358958d92630829759082)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/39a2173ffa2fb9b0cdc812121a67d0b46ecd19bd)

* [OCPBUGS-60293](https://issues.redhat.com/browse/OCPBUGS-60293): Bump github.com/golang/glog to v1.2.4 [#106](https://github.com/openshift/multus-admission-controller/pull/106)
* [OCPBUGS-60841](https://issues.redhat.com/browse/OCPBUGS-60841): Update owners [#108](https://github.com/openshift/multus-admission-controller/pull/108)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/9b0656af8316420bf05a7d3a0969feded615ed64...39a2173ffa2fb9b0cdc812121a67d0b46ecd19bd)


### [must-gather](https://github.com/openshift/must-gather/tree/339046b6478094030fa5ebf1ebceed2bb03a55f4)

* [OCPBUGS-48085](https://issues.redhat.com/browse/OCPBUGS-48085): Update owners [#476](https://github.com/openshift/must-gather/pull/476)
* [Full changelog](https://github.com/openshift/must-gather/compare/288ef2fcfe63cbfab0af69a41b508c044ee890aa...339046b6478094030fa5ebf1ebceed2bb03a55f4)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/aa24d460383cf426963226783e3db981f0d3b714)

* [OCPBUGS-59699](https://issues.redhat.com/browse/OCPBUGS-59699): Bump github.com/golang/glog to v1.2.4 (#117) [#117](https://github.com/openshift/network-metrics-daemon/pull/117)
* [release 4.13] OCPBUGS-60541: Replace e2e test image (#132) [#132](https://github.com/openshift/network-metrics-daemon/pull/132)
* swtich golint install method (#129) [#129](https://github.com/openshift/network-metrics-daemon/pull/129)
* Correct 4.16 owners file (#130) [#130](https://github.com/openshift/network-metrics-daemon/pull/130)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/3ef81a5c468171f22d626c544fd7f02adc156ceb...aa24d460383cf426963226783e3db981f0d3b714)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/4fe0c590767f41ca443bdd2688e1decd4f66d60a)

* [OCPBUGS-12645](https://issues.redhat.com/browse/OCPBUGS-12645), [OCPBUGS-20879](https://issues.redhat.com/browse/OCPBUGS-20879): bump golang.org/x/net to v0.17.0 [#36](https://github.com/openshift/cloud-provider-nutanix/pull/36)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/4d1c58e2b97f00e64ab4332d18dfdd531fb9cc4e...4fe0c590767f41ca443bdd2688e1decd4f66d60a)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/5f8dfaa95227ce121563ca21a9f1a250bb253aeb)

* [OCPBUGS-78157](https://issues.redhat.com/browse/OCPBUGS-78157): hermetic 4.13 [#131](https://github.com/openshift/machine-api-provider-nutanix/pull/131)
* [OCPBUGS-51856](https://issues.redhat.com/browse/OCPBUGS-51856): Fixing CVE-2025-22868 [#119](https://github.com/openshift/machine-api-provider-nutanix/pull/119)
* [OCPBUGS-47262](https://issues.redhat.com/browse/OCPBUGS-47262): fixing CVE-2024-45338 [#115](https://github.com/openshift/machine-api-provider-nutanix/pull/115)
* [OCPBUGS-20976](https://issues.redhat.com/browse/OCPBUGS-20976): bump golang.org/x/net to v0.17.0 [#86](https://github.com/openshift/machine-api-provider-nutanix/pull/86)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/105c515996ed0856eca89e75b166e70331d95856...5f8dfaa95227ce121563ca21a9f1a250bb253aeb)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/96338efcec8152baebfd57036b728697b2fda89a)

* changes the owners file (#1012) [#1012](https://github.com/openshift/oc-mirror/pull/1012)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1025) [#1025](https://github.com/openshift/oc-mirror/pull/1025)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/02367d7a9d25ca823fd52710a5a8484f09454884...96338efcec8152baebfd57036b728697b2fda89a)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/d6a5de03a7691ee447a323d42fba383ea11d6908)

* [OCPBUGS-90519](https://issues.redhat.com/browse/OCPBUGS-90519): Address CVE-2026-35469 [#662](https://github.com/openshift/openshift-apiserver/pull/662)
* [OCPBUGS-78596](https://issues.redhat.com/browse/OCPBUGS-78596): Fix image reference in TestImageStreamImportQuayIO [release-4.13] [#622](https://github.com/openshift/openshift-apiserver/pull/622)
* [OCPBUGS-76482](https://issues.redhat.com/browse/OCPBUGS-76482): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.13] [#613](https://github.com/openshift/openshift-apiserver/pull/613)
* [OCPBUGS-32446](https://issues.redhat.com/browse/OCPBUGS-32446): bump(x/net) to v0.23.0 [#430](https://github.com/openshift/openshift-apiserver/pull/430)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6c0733082d6ff258dc8787ef2e84c1ceb51a0655...d6a5de03a7691ee447a323d42fba383ea11d6908)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/00cef287411eb1f8b69a73bcac0e8e0b2b7e129b)

* [OCPBUGS-58035](https://issues.redhat.com/browse/OCPBUGS-58035): Set node-pullsecrets volume to read-only to protect image pull credentials [#402](https://github.com/openshift/openshift-controller-manager/pull/402)
* [OCPBUGS-57051](https://issues.redhat.com/browse/OCPBUGS-57051): Empty proxy variables are causing issues during the build [#388](https://github.com/openshift/openshift-controller-manager/pull/388)
* [OCPBUGS-48656](https://issues.redhat.com/browse/OCPBUGS-48656): Add new team members to the OWNERS file [#362](https://github.com/openshift/openshift-controller-manager/pull/362)
* [release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency [#326](https://github.com/openshift/openshift-controller-manager/pull/326)
* [OCPBUGS-41952](https://issues.redhat.com/browse/OCPBUGS-41952): Add adambkaplan as approver [#335](https://github.com/openshift/openshift-controller-manager/pull/335)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/b75d4999e4ffb720c8355fe01dadf3364c63baae...00cef287411eb1f8b69a73bcac0e8e0b2b7e129b)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/252a543c946a9def81aab0e2dcbee535481e69b3)

* [OCPBUGS-102413](https://issues.redhat.com/browse/OCPBUGS-102413): CVE-2026-33814 openshift4/ose-openshift-state-metrics-rhel8: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.13.z] [#137](https://github.com/openshift/openshift-state-metrics/pull/137)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/9be421f0c013c7f134c1d7cfe1c0ee2f2ae8eaf6...252a543c946a9def81aab0e2dcbee535481e69b3)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/0e50c414d5480c738e7aa685e490c04822a99940)

* [OCPBUGS-67685](https://issues.redhat.com/browse/OCPBUGS-67685): Bump logrus [#190](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/190)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/b50a649be8b691a6081487330da17e55d242a2e5...0e50c414d5480c738e7aa685e490c04822a99940)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/d9ef72dfdf6a5226515f53027a969f49cd82925e)

* [OCPBUGS-78174](https://issues.redhat.com/browse/OCPBUGS-78174): hermetic 4.13 [#166](https://github.com/openshift/machine-api-provider-openstack/pull/166)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/27f786052c3d35154aa2d16413d20ec3447b502b...d9ef72dfdf6a5226515f53027a969f49cd82925e)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/db904c6cf1d6f67458eba5e920c26f6a884918fa)

* [OCPBUGS-79800](https://issues.redhat.com/browse/OCPBUGS-79800), [OCPBUGS-79801](https://issues.redhat.com/browse/OCPBUGS-79801): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.13] [#1329](https://github.com/openshift/operator-framework-olm/pull/1329)
* [OCPBUGS-82051](https://issues.redhat.com/browse/OCPBUGS-82051): Drop github.com/distribution/distribution from go.mod [#1305](https://github.com/openshift/operator-framework-olm/pull/1305)
* [OCPBUGS-61470](https://issues.redhat.com/browse/OCPBUGS-61470): [release-4.13] Add NetworkPolicy as a supported kind [#1053](https://github.com/openshift/operator-framework-olm/pull/1053)
* [OCPBUGS-61391](https://issues.redhat.com/browse/OCPBUGS-61391): [4.13] e2e stability fixes [#1086](https://github.com/openshift/operator-framework-olm/pull/1086)
* [OCPBUGS-46924](https://issues.redhat.com/browse/OCPBUGS-46924), [OCPBUGS-46931](https://issues.redhat.com/browse/OCPBUGS-46931), [OCPBUGS-47311](https://issues.redhat.com/browse/OCPBUGS-47311): x/net bump to v0.34.0 [release-4.13] [#942](https://github.com/openshift/operator-framework-olm/pull/942)
* [OCPBUGS-47507](https://issues.redhat.com/browse/OCPBUGS-47507): CRD upgrade existing CR validation fix (#3442) [#924](https://github.com/openshift/operator-framework-olm/pull/924)
* NO-ISSUE: [release-4.13] Backport e2e fixes [#876](https://github.com/openshift/operator-framework-olm/pull/876)
* [OCPBUGS-42146](https://issues.redhat.com/browse/OCPBUGS-42146): adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#871](https://github.com/openshift/operator-framework-olm/pull/871)
* [OCPBUGS-38254](https://issues.redhat.com/browse/OCPBUGS-38254): [CARRY] perform operator apiService certificate validity checks directly [#836](https://github.com/openshift/operator-framework-olm/pull/836)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ebbc15f8b2203798398f2f5237b73b7adb2dad9f...db904c6cf1d6f67458eba5e920c26f6a884918fa)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/2a1df4ec9d0216a716ae239921cdbe8ecb3776fd)

* [OCPBUGS-49430](https://issues.redhat.com/browse/OCPBUGS-49430): Upgrade golang.org/x/net [release-4.13] [#590](https://github.com/operator-framework/operator-marketplace/pull/590)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7efdbcad565ae7893539a79a944a97f9b39da97a...2a1df4ec9d0216a716ae239921cdbe8ecb3776fd)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/2112178542733843bf96d6e79cb5236687856da8)

* [OCPBUGS-102467](https://issues.redhat.com/browse/OCPBUGS-102467): Replace x/net pkg with openshift-sustaining/net pkg v0.35.0-sec.3 to Address CVE-2026-33814 [#164](https://github.com/openshift/ovirt-csi-driver/pull/164)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/54958deb4998e08696af0abe3585486a6b5b6800...2112178542733843bf96d6e79cb5236687856da8)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/6011d6557a4e689124da6776a0cbd716edbc238a)

* [OCPBUGS-67725](https://issues.redhat.com/browse/OCPBUGS-67725): Bump github.com/sirupsen/logrus to v1.8.3 [#147](https://github.com/openshift/ovirt-csi-driver-operator/pull/147)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/b293972fe2c5eef4262130de621e75e5d0c37d8e...6011d6557a4e689124da6776a0cbd716edbc238a)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/ad6607895c2b51c7bd8f7ddd1cb5e3fc50bd7c54)

* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-84635](https://issues.redhat.com/browse/OCPBUGS-84635): [release-4.13] Dockerfile: Unpin OVN and consume the latest from FDP [#3074](https://github.com/openshift/ovn-kubernetes/pull/3074)
* [OCPBUGS-59934](https://issues.redhat.com/browse/OCPBUGS-59934): Dockerfile: Remove ovs version pinning [#2697](https://github.com/openshift/ovn-kubernetes/pull/2697)
* [OCPBUGS-55950](https://issues.redhat.com/browse/OCPBUGS-55950): Bump ovs and ovn to latest patch releases [#2553](https://github.com/openshift/ovn-kubernetes/pull/2553)
* [OCPBUGS-38264](https://issues.redhat.com/browse/OCPBUGS-38264): [release-4.13] Bump OVSDBTimeout and make it configurable [#2289](https://github.com/openshift/ovn-kubernetes/pull/2289)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4748eb6192d4615b1608429dd5f6d906ccbdbc38...ad6607895c2b51c7bd8f7ddd1cb5e3fc50bd7c54)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/f5209f48188fdee114946e56f7baff78a0ab87b4)

* [OCPBUGS-67694](https://issues.redhat.com/browse/OCPBUGS-67694): Fix CVE-2025-65637 by bumping logrus to v1.8.3 [#101](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/101)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/e70c980e2561788b710d710efc3e09974ad7374c...f5209f48188fdee114946e56f7baff78a0ab87b4)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/c040f3774af48d6d0bd8c31188626cb445be5b83)

* [OCPBUGS-36104](https://issues.redhat.com/browse/OCPBUGS-36104): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 [#76](https://github.com/openshift/cloud-provider-powervs/pull/76)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/de68def0c918a05ad4bf32cc0470a7931d661c27...c040f3774af48d6d0bd8c31188626cb445be5b83)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/c35d169e1b9f0b27bf9b5dff346dc49d2ad500bd)

* [OCPBUGS-78041](https://issues.redhat.com/browse/OCPBUGS-78041): hermetic 4.13 [#137](https://github.com/openshift/machine-api-provider-powervs/pull/137)
* [OCPBUGS-54013](https://issues.redhat.com/browse/OCPBUGS-54013): Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.13 [#122](https://github.com/openshift/machine-api-provider-powervs/pull/122)
* [OCPBUGS-41980](https://issues.redhat.com/browse/OCPBUGS-41980): Update go.mod to fix CVE - 4.13 [#87](https://github.com/openshift/machine-api-provider-powervs/pull/87)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/8df68995ce00d69460baac9901f81015d9f1b55f...c35d169e1b9f0b27bf9b5dff346dc49d2ad500bd)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/ddc13b63c4a92a52ced8b5550bc6588a76e0407f)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.13] [#411](https://github.com/openshift/prom-label-proxy/pull/411)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/b501d5e2aff82d46a141223636b522aeae95b915...ddc13b63c4a92a52ced8b5550bc6588a76e0407f)


### [prometheus](https://github.com/openshift/prometheus/tree/93b1a0dd734375ba6d030beb33a78b7ca790b79b)

* NO-ISSUE: synchronize OWNERS from main branch [#384](https://github.com/openshift/prometheus/pull/384)
* [OCPBUGS-88591](https://issues.redhat.com/browse/OCPBUGS-88591): remote: validate snappy decoded length before allocation in read endpoint [#354](https://github.com/openshift/prometheus/pull/354)
* [OCPBUGS-86877](https://issues.redhat.com/browse/OCPBUGS-86877): Bump google.golang.org/grpc [#324](https://github.com/openshift/prometheus/pull/324)
* [OCPBUGS-67695](https://issues.redhat.com/browse/OCPBUGS-67695): chore: CVE-2025-65637: bump sirupsen/logrus to 1.9.3 [#290](https://github.com/openshift/prometheus/pull/290)
* [Full changelog](https://github.com/openshift/prometheus/compare/72886096272245e064297c480b24ac4895230c89...93b1a0dd734375ba6d030beb33a78b7ca790b79b)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/4e18705bf31c706d2ee50c1bcd434079e5f27474)

* NO-JIRA: synchronize OWNERS with main [#190](https://github.com/openshift/prometheus-alertmanager/pull/190)
* [OCPBUGS-100363](https://issues.redhat.com/browse/OCPBUGS-100363): Set testdata CA expiry to 20 years from issue date (#4112) [#152](https://github.com/openshift/prometheus-alertmanager/pull/152)
* [OCPBUGS-77849](https://issues.redhat.com/browse/OCPBUGS-77849): Include go-verify-deps expected files in gitignore [#122](https://github.com/openshift/prometheus-alertmanager/pull/122)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/df2f11e2ddc206ad1924ed766b4a394d84c9236f...4e18705bf31c706d2ee50c1bcd434079e5f27474)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/52bca9bc216feb5b2897a241eec4e3be0c0ecdf8)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.13] [#207](https://github.com/openshift/node_exporter/pull/207)
* [Full changelog](https://github.com/openshift/node_exporter/compare/59d699cac664bfbfe83ef6a1615e34e062fd283d...52bca9bc216feb5b2897a241eec4e3be0c0ecdf8)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/2a7399846328907956b7e3dc91dd5a1991e7ffae)

* [OCPBUGS-86884](https://issues.redhat.com/browse/OCPBUGS-86884): [release-4.13] bump google.golang.org/grpc to v1.64.1-sec.1 [#96](https://github.com/openshift/route-controller-manager/pull/96)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/6667a6cbf9a87331fcc4407375118c0bb884c925...2a7399846328907956b7e3dc91dd5a1991e7ffae)


### [telemeter](https://github.com/openshift/telemeter/tree/1c02f15faef066c74d86199d6824b12f7519f524)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.13] [#626](https://github.com/openshift/telemeter/pull/626)
* [Full changelog](https://github.com/openshift/telemeter/compare/0634a6d029bfd8fd311e99ccf5f2fd45b5751fa8...1c02f15faef066c74d86199d6824b12f7519f524)


### [tests](https://github.com/openshift/origin/tree/d14f9b8ec0093014491f498a1efaaa1d1fd57a81)

* [OCPBUGS-55954](https://issues.redhat.com/browse/OCPBUGS-55954): [build] Ensure Git Clone Does Not Run Privileged [#29769](https://github.com/openshift/origin/pull/29769)
* [OCPBUGS-54771](https://issues.redhat.com/browse/OCPBUGS-54771): Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed [#29661](https://github.com/openshift/origin/pull/29661)
* [OCPBUGS-53285](https://issues.redhat.com/browse/OCPBUGS-53285): Add/remove team members to the OWNERS file for Builds [#29608](https://github.com/openshift/origin/pull/29608)
* [OCPBUGS-53297](https://issues.redhat.com/browse/OCPBUGS-53297): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29610](https://github.com/openshift/origin/pull/29610)
* [OCPBUGS-52584](https://issues.redhat.com/browse/OCPBUGS-52584): Use payload pullspec for image info test [#29592](https://github.com/openshift/origin/pull/29592)
* [OCPBUGS-37921](https://issues.redhat.com/browse/OCPBUGS-37921): Removes dependency on samples operator images [#29007](https://github.com/openshift/origin/pull/29007)
* [Full changelog](https://github.com/openshift/origin/compare/aedd6b80cdbc6a6906680101b2a09448bf6a8800...d14f9b8ec0093014491f498a1efaaa1d1fd57a81)


### [thanos](https://github.com/openshift/thanos/tree/3af980f21129ecdfe87d5c85123331988c4822ea)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.13] [#217](https://github.com/openshift/thanos/pull/217)
* [OCPBUGS-76959](https://issues.redhat.com/browse/OCPBUGS-76959): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#168](https://github.com/openshift/thanos/pull/168)
* [Full changelog](https://github.com/openshift/thanos/compare/70fb57fb209e5aa491417fc421a97d417a5530bc...3af980f21129ecdfe87d5c85123331988c4822ea)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/117e8a1a3374361c18c57297dabb35a8195be7e8)

* [OCPBUGS-78032](https://issues.redhat.com/browse/OCPBUGS-78032): hermetic migration 4.13 [#110](https://github.com/openshift/cloud-provider-vsphere/pull/110)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/f56d57ba990f7f4ce1a6b1f9842331e9259c94f1...117e8a1a3374361c18c57297dabb35a8195be7e8)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/fc5cc4b0f7987b9ae6b2141ad2bf7ef0382551bf)

* [OCPBUGS-78024](https://issues.redhat.com/browse/OCPBUGS-78024): hermetic migration 4.13 [#89](https://github.com/openshift/cluster-api-provider-vsphere/pull/89)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/da63f2b930cdd6090904ee607319b40615b245f6...fc5cc4b0f7987b9ae6b2141ad2bf7ef0382551bf)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/99c8edb4437acd104fd0d1f4389a6ab7e2d4ea1a)

* [OCPBUGS-67712](https://issues.redhat.com/browse/OCPBUGS-67712): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#161](https://github.com/openshift/vmware-vsphere-csi-driver/pull/161)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4d3036a6c7fe0c850bbadd942267426afe2ec16a...99c8edb4437acd104fd0d1f4389a6ab7e2d4ea1a)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2762d9ab8d76bb2dce542bc0e76e0662d1f66810)

* [OCPBUGS-67711](https://issues.redhat.com/browse/OCPBUGS-67711), [OCPBUGS-67717](https://issues.redhat.com/browse/OCPBUGS-67717): CVE-2025-65637:  Bump github.com/sirupsen/logrus to v1.8.3 [#326](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/326)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/a9e5036e12facff0193d563b752847191fc9dc91...2762d9ab8d76bb2dce542bc0e76e0662d1f66810)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/bf38af647d14c15f2cd94b741a9c5a7e71dbeb1d)

* [OCPBUGS-102464](https://issues.redhat.com/browse/OCPBUGS-102464): Bump golang.org/x/net to v0.35.0-sec.4 [#238](https://github.com/openshift/vsphere-problem-detector/pull/238)
* [OCPBUGS-67723](https://issues.redhat.com/browse/OCPBUGS-67723): bump github.com/sirupsen/logrus to v1.9.3 [#203](https://github.com/openshift/vsphere-problem-detector/pull/203)
* [OCPBUGS-57511](https://issues.redhat.com/browse/OCPBUGS-57511): Ported VPD changes for permission check [#184](https://github.com/openshift/vsphere-problem-detector/pull/184)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/3ad7408fb53a9377d9f5b2cf5ae38570a9ec5c59...bf38af647d14c15f2cd94b741a9c5a7e71dbeb1d)