# 4.14.75 Created: 2026-09-30 18:24:39 +0000 UTC Image Digest: `sha256:15fc6659721704443287f3783e1eac991755dadb376891867f52453a147e048b` ## Changes from 4.14.54 ### Components * Kubernetes 1.27.16 * Red Hat Enterprise Linux CoreOS upgraded from 414.92.202507201608-0 to 414.92.202609282130-0 ### Removed images * ovirt-csi-driver * ovirt-csi-driver-operator ### Rebuilt images without code change * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3fa10c2](https://github.com/openshift/agent-installer-utils/commit/b3fa10c2f6a890f982a983510e8315b084867782) `sha256:767f34d7cba4c7052d4cd6c729f931e7619584cebaef08e7616aaac7a8782f1d` * [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [3dc363d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/3dc363d364c43c1fb03e223147e25d9057273428) `sha256:5639aace59fbcc1cdb4ab83da8896e60eaf6065c83e51805e278491ec97986dc` * [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [8853e6ef](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/8853e6ef4966018b96f9d8bfbf99df3a984bb454) `sha256:e6c24cc00c0a7a3d9a718cedebb945cbd247b0a409e836d476ec2aff6c16ef69` * [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [27f105d3](https://github.com/openshift/cluster-api-provider-alibaba/commit/27f105d3b722e19f76b72588d36eeae9dac0a444) `sha256:e947f2ccd0ea7335a341b51ee5c6c970da560b04c93039eac9b9d697430c5df9` * [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [f56c606a](https://github.com/openshift/apiserver-network-proxy/commit/f56c606ae15041b0c981e654ab577d2b0a3a0a8f) `sha256:d45d95b4664b5369d746e1bc834b1cc8b6221667a7ca5ef455ef045913ed4657` * [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [9a7820e8](https://github.com/openshift/cloud-provider-aws/commit/9a7820e81baa6ba8885b47a71416026036d53d79) `sha256:8dffb7e514619803c2d4ed8ba6185b6525c16a1eef2bea58045aaa0905da311f` * [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [4622deec](https://github.com/openshift/aws-ebs-csi-driver/commit/4622deecace538b375edc782a19cb5da977ae458) `sha256:efb8af794bc90d99b006329dabcf2402679db75009245320495be8caae175315` * [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [2c864ca0](https://github.com/openshift/aws-pod-identity-webhook/commit/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63) `sha256:029be0311848cafdd201ec3ff26122f032e2c303a802bc583362594659224012` * [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6d3558a3](https://github.com/openshift/azure-disk-csi-driver/commit/6d3558a3b5ae9d383988495cc64dc05b4bba0382) `sha256:24d722de7b81df72914f223f3d4823f22f5963da5b8fcd9abe871246d3bbf731` * [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [91893576](https://github.com/openshift/azure-disk-csi-driver-operator/commit/918935767350f9f330b9d6a9c3ee03e9869e7828) `sha256:06fd680d032a4bbba9b1d978d6213976051a951cfc6de7f743512d59479ce197` * [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [d526284e](https://github.com/openshift/machine-api-provider-azure/commit/d526284e26f37f36f9d5297faa801ea117d81f48) `sha256:ff1fded36c4f2604a53a21746454de4e43e20874d05f8bbaab6d7c1ad6412b08` * [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [2cb82019](https://github.com/openshift/azure-workload-identity/commit/2cb82019194364a2f7ba1a9aa318fa6e5b4a7346) `sha256:1b6c8eb6eb85922a3de98e69b4044010592f64002bd8858ff1de71c6d6af48c2` * [baremetal-operator](https://github.com/openshift/baremetal-operator) git [483d0191](https://github.com/openshift/baremetal-operator/commit/483d019146b8495b9299c08c57461747e727f3f7) `sha256:afc05c49b6f1bc119fd8b1cd08d42065cf3171f202345222cba5d15d8c004e14` * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [0ba9e555](https://github.com/openshift/baremetal-runtimecfg/commit/0ba9e555eeb173d42e5adf6f65e982e17acfdb9d) `sha256:ec9d6e9cda3256104d83c4b6b4b5cfd91efbc5206c20046673e2a48df75fabd6` * [cli](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:8c14acb825df42789c9eb1efe2222a8d3ca0582a4cd73809928171a978afb48d` * [cli-artifacts](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:b7715390d7ef8054c2faaf338f0b67e554d4c4a4b81d88ce5325201d52db3553` * [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [1bd04641](https://github.com/openshift/cloud-network-config-controller/commit/1bd04641f210d19370f782086949f827bfb7a264) `sha256:862833cf54a0a85d5398750b186d2978701179abdfba23295bc01f2559357f08` * [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [9203d4d5](https://github.com/openshift/cluster-authentication-operator/commit/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e) `sha256:115a6c16977a12e9111b87ace59e4a6a4469437f90d15fd5719c8ebccc2f44df` * [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [d030dbaa](https://github.com/openshift/kubernetes-autoscaler/commit/d030dbaade38e116d27d5039a3597f694f73ea2b) `sha256:925aa34819edd88a053525596056b0a3593f3cc9fc10e992ffe6efe08a0e121c` * [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [93fba13f](https://github.com/openshift/cluster-bootstrap/commit/93fba13f576831ba0953190663ab26aaf5766984) `sha256:8cd1d03bd32d3d5f8c61ebc8fd92ac4b5d6cc62fab5817275849a9507eede370` * [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [2378670a](https://github.com/openshift/cluster-config-operator/commit/2378670aee1858db6b1ff425a1d208eb7d73afec) `sha256:1ac52bcc74582c6ba1146297b7f444b4b89cabc48cb2be11be2096bbd9fe0b9c` * [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [783d9dd1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/783d9dd134451c12f0c1abf7e53c30b61ddd74bf) `sha256:ee49437ad7d4957be9cbd9d5c7e4eada12cb5d1174c90ca01752eee58a61ad96` * [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [d4a11625](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/d4a1162514ecbf248b04e6e8625d17bc2b775ccd) `sha256:29ea3c5381c45749e5909781d7c25e1ce58d0fb34c05706d7b998e84d684dda6` * [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [0164e3c4](https://github.com/openshift/cluster-dns-operator/commit/0164e3c4464f03d5ddbbba5d426f4bf02822753d) `sha256:eeb2167fcd29b50b158445a80a587da97c9c8ba0d475c8200349c50419777fcc` * [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [b287d08b](https://github.com/openshift/cluster-api-operator/commit/b287d08b3dabe6b3b67b87a8a284f19ed12a165e) `sha256:1bf80754f3e057451945ae453030b40fed3da83c9db09420495a9a44b808ee16` * [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [4e059638](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/4e059638c2cbf003551ee699106dc024760eece3) `sha256:54e45cff4153eddef76cf3117f0838904f8f314c73a3423381ae82e8db32eac5` * [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [38a758d0](https://github.com/openshift/cluster-machine-approver/commit/38a758d0026346b751774b2459520174b46e39bf) `sha256:66259101cd1ab8e3331ef4ecad1e87e63cd87d3386db1e5e9b8ac4c738a8547d` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [5511c8df](https://github.com/openshift/cluster-node-tuning-operator/commit/5511c8df81e608a45bf37cb021707f7b9ede9c9a) `sha256:7dd378ff536bbb6617c807f6ca543654f093c96ad176239dbb40f3dd8543f4d2` * [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [09d62091](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/09d62091346f86f54938587acfd680f6bd6b7af6) `sha256:4b51c495cf9cd5ce1088a45319a24575ee8217d85a029ea8025a66cf09f266ae` * [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [08fb27e7](https://github.com/openshift/platform-operators/commit/08fb27e72e32ea0a06ab02b3b746114148d96c25) `sha256:c980f3eacce340b1075e3d52c475acfdc2d9cc5c868f9a96579cc90f90e31d1f` * [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [219f6f6f](https://github.com/openshift/cluster-policy-controller/commit/219f6f6f072d867201d4923d39fd8bcaecbe7c59) `sha256:e4377511577a5750b6068166189db20c370a6dcc59c780431c38969179c2c324` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [1a7a6e22](https://github.com/openshift/cluster-update-keys/commit/1a7a6e229dc980540f51b969c4f1d9ef5dbc3ab5) `sha256:b0023427112dae5733415c6fb9fc49a3ca722e274ad8784cac05365d36218a3e` * [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [a1bf9301](https://github.com/openshift/cluster-version-operator/commit/a1bf930103a77b25e99130644504c3fecdcc4c67) `sha256:e8be1f345d36c4be358b7424e7a906b99824717755402aab6aa742952f76ac26` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [716a0c33](https://github.com/openshift/configmap-reload/commit/716a0c33bb693127fba3b3512622710785a59e8e) `sha256:381b02648f8dbc9f89752950e1817159a3d93a177e792a0d3d1f1552c4376a07` * [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c273cd52](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c273cd52b791e69da41ac23fafb6d926c0530276) `sha256:ddd155db4ed8956e78d9ad369a2a71a731ca3a82b4b98a5f1a989a56811af8ec` * [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [06e8ce0d](https://github.com/openshift/csi-external-attacher/commit/06e8ce0d36f7c23f0906327cd66ec6bd15165366) `sha256:3f8e5c1c31d1dd183d7ab45cc572c84c56fe6b7234324608f0ec1eab1bd4a5bf` * [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [e18ed7f0](https://github.com/openshift/csi-external-provisioner/commit/e18ed7f00d8c80564a8dd5827013cd49f33ff0d7) `sha256:dbbe64b189b7225ced291967ff325e803e290fdd2f3614efed4752735336eca4` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [59a701a4](https://github.com/openshift/csi-external-resizer/commit/59a701a4c8cd3105e272b12afdb1e62e411b2772) `sha256:24f13f58bd0bf3ba7dfb7ef36b82fef385eb7a8aeb97f3776002de7d0981b723` * [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:53db02cc74deecfb0028deb95ef584c9986f821c9dd1b67e9daba491a05ec089` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a9bcbde1](https://github.com/openshift/csi-livenessprobe/commit/a9bcbde134a17d3335f68a49aaad4befa8d7cc08) `sha256:28414d88c7a3bf1848cf22dc58ef64eb45a253c2aeca7c13b822549422dc78fc` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9dcaa7f5](https://github.com/openshift/csi-node-driver-registrar/commit/9dcaa7f5b7573e7ef9dbec1439abc32171003799) `sha256:cc46f6f326cc7e9cacd6f97cc94f903d8687eeeac0a804e3d23ef1e115b64830` * [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:d79f426a3b139bf1395e0d4a5889089d3bf07be528165111aa84111b878b570a` * [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:2cb95263f0a8baf60e4658e6f0d1e41deba9cbb4d5440186145be786f1fa35a4` * [deployer](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:6e1a492854dbe4d84f4c22531ccdcfd0807f49861c9c24c5c876722a3eec2403` * [docker-registry](https://github.com/openshift/image-registry) git [ce0483f1](https://github.com/openshift/image-registry/commit/ce0483f140c5065a1b4aafbbbb94b1b9ca5f29e1) `sha256:6157ef651d92c3cde3260701ca6b2f73aa554baee714cfb8f03c51312e0c0850` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:6ac2db8ec70cfc4614b89c387f35e1e40d01f19ceb1a948491f6065c7c840e1f` * [egress-router-cni](https://github.com/openshift/egress-router-cni) git [96f2f54f](https://github.com/openshift/egress-router-cni/commit/96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f) `sha256:574ad05cf7cec9424f40d3038fc026b31feb305fa1278d5b21d12ff603116dfc` * [etcd](https://github.com/openshift/etcd) git [5ed5044c](https://github.com/openshift/etcd/commit/5ed5044c5661c55d297ab0348056b50969af9627) `sha256:571ff728fc4e2f6135317699794b95ff679ca26a2d0e29c85fe420de7309010f` * [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [09e96a91](https://github.com/openshift/cloud-provider-gcp/commit/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c) `sha256:0794daf8227c29cca54a953017f37a663649e1dd5c1e9ef13f0bb9fe60240013` * [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [8a626fe5](https://github.com/openshift/gcp-pd-csi-driver/commit/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03) `sha256:c271ca195fec26a0a6fcdc634129017ac3acc4f4f6e5d4d5dff1f148e3363d63` * [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [95d55a04](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/95d55a043a60b584a9fe28d37825761282305840) `sha256:ea2034a2bab2fbda1758179175f2c3d67f78aa1ccf3f48e36639c84f11dff371` * [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f39488c5](https://github.com/openshift/cloud-provider-ibm/commit/f39488c53ab5151cebf11e8f82510a255a8005d3) `sha256:a68e327859ea8f04bdaa448c92aca86224960bf17742536f7908e0759e6a1890` * [insights-operator](https://github.com/openshift/insights-operator) git [acc99f55](https://github.com/openshift/insights-operator/commit/acc99f557871cbf137f57a540f26989c27bb1301) `sha256:cfd623a12b62696efa3d905081c13be5d5e0b09922d4cd3bb179d8324b261494` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [1b194fd1](https://github.com/openshift/ironic-static-ip-manager/commit/1b194fd16b59c4a48223a2c9ac1bfb998a55c615) `sha256:89cffbe720029cadadc870dc35908739c1be195bd9f8581663f87d42d2bd04f1` * [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [801a912b](https://github.com/openshift/k8s-prometheus-adapter/commit/801a912b3a60d7e840fb1ff38b5ca992f47327fd) `sha256:b0a26c19ef22a6abb05563ad83dc583cf31c3bfcfb4e28184f484b02a9cb1200` * [keepalived-ipfailover](https://github.com/openshift/images) git [03e5f407](https://github.com/openshift/images/commit/03e5f40783e1b573f3d07d7640619ad9592f9a77) `sha256:e8537db5b97a127d4cc9d538fe93f9d23b82ce3fa8d63811e162f67321ec150c` * [kube-proxy](https://github.com/openshift/sdn) git [1f611c53](https://github.com/openshift/sdn/commit/1f611c53ca22ebcf23d6a34ca07121f4fa2808d6) `sha256:ccc2f6af53ed8d0863275f0d621f01366cf1e1f05684a74be827a8b0369adfa6` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b8b82595](https://github.com/openshift/kube-rbac-proxy/commit/b8b8259584046eabb7565f262c8105c2686107a4) `sha256:0fecffcc6ed2a4c8552069966bc8a37efcb38847274d852ddd2a2f352bcb945e` * [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [db0c5499](https://github.com/openshift/kube-state-metrics/commit/db0c54994a6aad9155a94513eaa3480c1812f45e) `sha256:a8b03a73226865e082747b0515b8badea7c232b2cf405a42483f452084d0bbc8` * [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:01210c297d2a6201d5e0044f32f6264fe1db0c48b4749c56e5b7213fb082732a` * [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:f8ca3b44b0aa9e51f5a150c7141ac91f7a54dc80444c7a9af3888a1d5a142d25` * [machine-config-operator](https://github.com/openshift/machine-config-operator) git [00b2e0b1](https://github.com/openshift/machine-config-operator/commit/00b2e0b1cc83e119995bbbe2ae06665c3d1655d7) `sha256:c46322f21ef3566899723977a347cf532c63045ad88ae2504ab3855a90b356e9` * machine-os-content `sha256:9809d75c846503c3100132006c491708b6ffe102becfcfd356607382e63f0133` * [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f670647c](https://github.com/openshift/multus-networkpolicy/commit/f670647c0cb7b6f870f8176b26f83ce6614e209e) `sha256:091b19a6d772795a61fdcab005a5adbd01a8c147fd7b64dec18a82d7af558fe2` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [5965fed6](https://github.com/openshift/route-override-cni/commit/5965fed661f71112104ca6cef22aa883f542226d) `sha256:0847b8dd5e948bab8129c1fe96981652fde25897aeb3b8ff8c181caa7e8a6dc7` * [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [f95487b0](https://github.com/openshift/whereabouts-cni/commit/f95487b0831b560de7b8d7c5d1c986338224800b) `sha256:03ba4c9959dc7e16fd8140dc435d499fe4e9fcb35333d4e4806ac0058b9cc1d5` * [must-gather](https://github.com/openshift/must-gather) git [b8585ca8](https://github.com/openshift/must-gather/commit/b8585ca862a3fbe77134e5cbe6155d7c04efc269) `sha256:2df13d439c17d77eed895e5ffdfcf77ae0cccffa16b0c3b65533b4b74a02a1cb` * [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [29f61f6b](https://github.com/openshift/bond-cni/commit/29f61f6b05d958c40e7213937064f26a63a8e6d9) `sha256:783c206bf369035ac2229149715f7f46739df6eafefce914f81f2cefa2066585` * [network-tools](https://github.com/openshift/network-tools) git [e79d8173](https://github.com/openshift/network-tools/commit/e79d8173c5628065da85425bc7e4cb1d94f3c919) `sha256:e6998a494754858518b8dc4b116f4a042ed2722602be5826c7a602e3fa9ebfff` * [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8930f295](https://github.com/openshift/cloud-provider-nutanix/commit/8930f295dfa97cc63321c63192c93a78306fe23b) `sha256:fc96f95746c16f4f27265075a96a78ad7392996c883874a850db1f100aa66273` * [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [c0661680](https://github.com/openshift/machine-api-provider-nutanix/commit/c06616804f2de1635fb34fd45fdb625fd0b1b506) `sha256:cbbfa461f80d24cfe7bd3d3c60ccbdb97470d5eb59c88fb4238eeec6e524c4f3` * [oauth-server](https://github.com/openshift/oauth-server) git [35f4739f](https://github.com/openshift/oauth-server/commit/35f4739f342a5838fe6ceaf7a459c78f3777166d) `sha256:48e2bd7ca4eaa8907957cfeb3276ed81359af7a9058e1898b4931ff4ad27809e` * [oc-mirror](https://github.com/openshift/oc-mirror) git [056043d1](https://github.com/openshift/oc-mirror/commit/056043d10e0713432e541d58a285f41829c0be6e) `sha256:86d496ee1725850bbfa9d8c070b7867a6aed94e74bec374be8a9c507d81b4ed2` * [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [a333cb0b](https://github.com/openshift/operator-framework-catalogd/commit/a333cb0b558abf8d9f8da0eccd5618d767629050) `sha256:5c72f75e555c05399d87349ffe81562d955c10f9e595ec19147e4aa8c3f08f58` * [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fb6fb278](https://github.com/openshift/operator-framework-operator-controller/commit/fb6fb278d987faacb4da17b96a109da261fbb962) `sha256:8fa0b78819d87c743b3b084ba0b7cfa3741ffbe7f2e0aea005f57eb71d008473` * [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [c9409c62](https://github.com/openshift/operator-framework-rukpak/commit/c9409c62cb6bc57cde167452f1da7f3eab8cff79) `sha256:30c54d44ee207cbc893e5ce231ff3fca0f8dd5b683f3a72321fc71f041d43fec` * [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [1c76570b](https://github.com/openshift/openshift-controller-manager/commit/1c76570bb6ca3b55faa0461f085e43097cc06c50) `sha256:47ae5a72a3fdc471bdc637bf98704ac9da1259746e687458045ae9b73536f3cf` * [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:8d3dc90e44f314f3f6853f63583d1fb67ca0afd6cbd6e0d22574e3cc90664d70` * [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [988f7109](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/988f7109b4493f62cb13187bc190eae60c77d1e7) `sha256:90b03cf86febaa64df3c86fe4dca06c5502c52ab4dcb55e3b504142fd9bb3191` * [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [19cf1d3f](https://github.com/openshift/cloud-provider-powervs/commit/19cf1d3f4985a22e9777aad16531a382c4feed45) `sha256:bac2b5724357c7bd2b7975edb2bd1c90d5518075db0a8a9a7ba9f28566bc959e` * [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:242b3e44045df6a5c948db05ed05db5a839b89d05a6c2b8a27510c94a913cb8d` * [prometheus-operator](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:68bc18e3b9ed810a83fb5692423907d8c8ab83757fcd29748080cf31ae45d0a9` * [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:b1a91f72e38a38c558c7b4f5aff93c9f14272cf82d022b8d06e3700522fa12b2` * rhel-coreos `sha256:055596f61ca59b6996b630f3d297c3ed48bd367271f8b443e4a74611ac6e39a9` * rhel-coreos-extensions `sha256:7e1a66cbeb9359217de73859ed426aa46daaac2b7b9b6e32a1bff67af61758ee` * [sdn](https://github.com/openshift/sdn) git [1f611c53](https://github.com/openshift/sdn/commit/1f611c53ca22ebcf23d6a34ca07121f4fa2808d6) `sha256:c75f5d7eacb5f8e3f5fd818775e5babb49275cf599ac1dc1760e496136d319fa` * [service-ca-operator](https://github.com/openshift/service-ca-operator) git [3c3f82f7](https://github.com/openshift/service-ca-operator/commit/3c3f82f7112ee4b5656e5c554f9887acdf881175) `sha256:8d5dccef10a89381d636c4ddbee60fcc74cc7508f19ef88a17df1e3e7e52bd41` * [telemeter](https://github.com/openshift/telemeter) git [1f726816](https://github.com/openshift/telemeter/commit/1f7268163afc74f9f3c1ff89d8c0149760694e6c) `sha256:239679e3a76b936cc7bc1b548ddc44f6be019fc6a61d2679e5deb4a04e25bf0d` * [tools](https://github.com/openshift/oc) git [44b3ac26](https://github.com/openshift/oc/commit/44b3ac26e654777e0283759d45a2b3351823fc5e) `sha256:275647e58a63f60dcb8326756256db82f5e343b3e0287321924ef0daa8b0538e` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f09936a257b0f83cc808ad6e70cfaa8e1632e7eb) * [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Bump Go 1.18 to 1.20 and regenerate code [#10042](https://github.com/openshift/assisted-service/pull/10042) * [OCPBUGS-78112](https://issues.redhat.com/browse/OCPBUGS-78112): [release-4.14] NO-JIRA: hermetic 4.14 [#9955](https://github.com/openshift/assisted-service/pull/9955) * [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Use archived dnf repositories for CentOS Stream 8 [#10018](https://github.com/openshift/assisted-service/pull/10018) * And 1 elided commits (e.g. from squash or rebase merges) * [Full changelog](https://github.com/openshift/assisted-service/compare/98a41af774a685e57b57e551d501419c0c39740f...f09936a257b0f83cc808ad6e70cfaa8e1632e7eb) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/54aa57eb81d052a36ae8b78f2905d870ee0718ad) * [OCPBUGS-58642](https://issues.redhat.com/browse/OCPBUGS-58642): CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) [#1194](https://github.com/openshift/assisted-installer/pull/1194) * [Full changelog](https://github.com/openshift/assisted-installer/compare/0dd816ee1d355f2f9c0fa06e572c6d1b7031fd2d...54aa57eb81d052a36ae8b78f2905d870ee0718ad) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/50a266a17cef5b9bd79208a6df9b68a73b64b785) * [OCPBUGS-102504](https://issues.redhat.com/browse/OCPBUGS-102504): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1614](https://github.com/openshift/assisted-installer-agent/pull/1614) * And 1 elided commits (e.g. from squash or rebase merges) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/6e593e60b96fc02284f9514a7fe5b85f1b60b2ab...50a266a17cef5b9bd79208a6df9b68a73b64b785) ### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/2bd36eb01010fcd819b1d42877fb37e2312fceb3) * [OCPBUGS-102505](https://issues.redhat.com/browse/OCPBUGS-102505): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#64](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/64) * [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8ba0b37a45510404a842d6dbd84d40a18008e81d...2bd36eb01010fcd819b1d42877fb37e2312fceb3) ### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/8e2ef1105524156fc3f0e7fa384061a92f980919) * 🌱 OCPBUGS-123714: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#647](https://github.com/openshift/cluster-api-provider-aws/pull/647) * [OCPBUGS-78229](https://issues.redhat.com/browse/OCPBUGS-78229): [release-4.14] hermetic 4.14 [#593](https://github.com/openshift/cluster-api-provider-aws/pull/593) * [OCPBUGS-61944](https://issues.redhat.com/browse/OCPBUGS-61944): UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#574](https://github.com/openshift/cluster-api-provider-aws/pull/574) * [OCPBUGS-58667](https://issues.redhat.com/browse/OCPBUGS-58667), [OCPBUGS-58672](https://issues.redhat.com/browse/OCPBUGS-58672): bump github.com/golang/glog to v1.2.5 [#563](https://github.com/openshift/cluster-api-provider-aws/pull/563) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/7afde0484d64f4ac34f60e1f1057f6d0e90cd94c...8e2ef1105524156fc3f0e7fa384061a92f980919) ### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/71ff9a8f5252482815f3d7b2b154b5c282f3bfcb) * [OCPBUGS-102508](https://issues.redhat.com/browse/OCPBUGS-102508): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#316](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/316) * [OCPBUGS-67748](https://issues.redhat.com/browse/OCPBUGS-67748): Updated logrus to v1.9.3 [#313](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/313) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/609879c3f1b9a65936e385f798398a2d1673aacd...71ff9a8f5252482815f3d7b2b154b5c282f3bfcb) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e2bb8297ff39438a8adae059a652e0687f56700a) * [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): client: re-use a single file for building the session instead of randomly named files [#154](https://github.com/openshift/machine-api-provider-aws/pull/154) * [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): revert: client: re-use a single file for building the session instead of randomly named files [#151](https://github.com/openshift/machine-api-provider-aws/pull/151) * [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): client: re-use a single file for building the session instead of randomly named files [#142](https://github.com/openshift/machine-api-provider-aws/pull/142) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/e292817c27d83d6cba27def4461a9795bd3a68a7...e2bb8297ff39438a8adae059a652e0687f56700a) ### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0d11981dfcb36ed0e0315de3027a37e5ef3f82cd) * [OCPBUGS-79820](https://issues.redhat.com/browse/OCPBUGS-79820), [OCPBUGS-79821](https://issues.redhat.com/browse/OCPBUGS-79821): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] [#192](https://github.com/openshift/cloud-provider-azure/pull/192) * [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/9ee3b74412f076928e05388af38b0372f484f3a9...0d11981dfcb36ed0e0315de3027a37e5ef3f82cd) ### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/728723125921ca6f44f38b3d90318cb98f74bd72) * [OCPBUGS-78178](https://issues.redhat.com/browse/OCPBUGS-78178): [release-4.14] Hermetic 4.14 [#366](https://github.com/openshift/cluster-api-provider-azure/pull/366) * [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/8c2203f9d13e91a3a7e4825067b01a9f7fe0fd4f...728723125921ca6f44f38b3d90318cb98f74bd72) ### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/d68969a90b934df2dda3c1b5c2859e49697a0171) * [OCPBUGS-79822](https://issues.redhat.com/browse/OCPBUGS-79822): Correct grpc-go patch version [#169](https://github.com/openshift/azure-file-csi-driver/pull/169) * [OCPBUGS-79822](https://issues.redhat.com/browse/OCPBUGS-79822): Patching openshift-sustaining/grpc-go@v1.67.3-sec.1 [#150](https://github.com/openshift/azure-file-csi-driver/pull/150) * [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/71fa09b11075da73a8934127a181ee03abd738f8...d68969a90b934df2dda3c1b5c2859e49697a0171) ### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/9a5a5a6950401d6587e128e2c149fd05cf7201a3) * [OCPBUGS-67753](https://issues.redhat.com/browse/OCPBUGS-67753): Bump github.com/sirupsen/logrus to v1.9.3 [#114](https://github.com/openshift/azure-file-csi-driver-operator/pull/114) * [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/4469d80589595dd5d05f0f0f296505800e3ad527...9a5a5a6950401d6587e128e2c149fd05cf7201a3) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/4dd5abdf12a97ef0f32f6774ab79fa8dc6482f34) * [OCPBUGS-79654](https://issues.redhat.com/browse/OCPBUGS-79654): Azure UPI ARM template: use storageAccountId [#10435](https://github.com/openshift/installer/pull/10435) * [OCPBUGS-76930](https://issues.redhat.com/browse/OCPBUGS-76930): terraform/provider/google: Fixing inconsistencies with service account creation [#10324](https://github.com/openshift/installer/pull/10324) * [OCPBUGS-62601](https://issues.redhat.com/browse/OCPBUGS-62601): update resolv.conf every time on bootstrap node [#9985](https://github.com/openshift/installer/pull/9985) * [OCPBUGS-62814](https://issues.redhat.com/browse/OCPBUGS-62814): Release 4.14 bump terraform provider azurerm [#10001](https://github.com/openshift/installer/pull/10001) * [Full changelog](https://github.com/openshift/installer/compare/d92ca632cbabf87b2439c9b19cacb089d193e697...4dd5abdf12a97ef0f32f6774ab79fa8dc6482f34) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/0c1c23f3a63168ec2deb171dc66149fe7ec558ac) * [OCPBUGS-78101](https://issues.redhat.com/browse/OCPBUGS-78101): [release-4.14] fix vendor/ for hermetic migration [#245](https://github.com/openshift/cluster-api-provider-baremetal/pull/245) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/c7b46efd3d6ab77c094fa6ede36499fb7be5858f...0c1c23f3a63168ec2deb171dc66149fe7ec558ac) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/b491a81980f16adba3dcdb95356302d8a00d5454) * [OCPBUGS-60975](https://issues.redhat.com/browse/OCPBUGS-60975): ccoctl: aws to use proper issuer url on subsequent runs [#911](https://github.com/openshift/cloud-credential-operator/pull/911) * [OCPBUGS-58677](https://issues.redhat.com/browse/OCPBUGS-58677): github.com/golang/glog v1.2.5 [#895](https://github.com/openshift/cloud-credential-operator/pull/895) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/91ac7cb389eaeef48430c628e05cea5d8573a236...b491a81980f16adba3dcdb95356302d8a00d5454) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/67e1ee2e1842816c1a5f52e4dc1208a2d1c382ec) * [OCPBUGS-102528](https://issues.redhat.com/browse/OCPBUGS-102528): Bump x/net package in release-4.14 [#392](https://github.com/openshift/cluster-autoscaler-operator/pull/392) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/32854baae386c4d6854d7fd8658fdff75588e919...67e1ee2e1842816c1a5f52e4dc1208a2d1c382ec) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/a23843eff0e827107921a13ab9ef871c2ee34ffd) * [OCPBUGS-77449](https://issues.redhat.com/browse/OCPBUGS-77449): Bump github.com/go-errors/errors to v1.5.1 [#564](https://github.com/openshift/cluster-baremetal-operator/pull/564) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/affcfb54666c47e569d1ba4f2e44aeaf9ef28bf7...a23843eff0e827107921a13ab9ef871c2ee34ffd) ### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/eb617d0f25600eacf3b5971fce8c2fdb60642118) * [OCPBUGS-77974](https://issues.redhat.com/browse/OCPBUGS-77974): [release-4.14] fix vendor for hermetic [#265](https://github.com/openshift/cluster-api/pull/265) * [Full changelog](https://github.com/openshift/cluster-api/compare/ae83c5533706d539dc492229eebd67533468e48b...eb617d0f25600eacf3b5971fce8c2fdb60642118) ### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/0d033265ffd31be8061ee53f4940b4dd71192bbd) * NO-JIRA: Allow sustaining engineering to self serve dependency updates [#562](https://github.com/openshift/cluster-capi-operator/pull/562) * [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/60cc3e65ff4817e43fe3114bccbbdb14374bac2c...0d033265ffd31be8061ee53f4940b4dd71192bbd) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/54dce160186799ac2d6e21f9609f8f8b1e493003) * [OCPBUGS-63170](https://issues.redhat.com/browse/OCPBUGS-63170): ccm: disable unused secure-serving port and webhook [#425](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/425) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a0b9c0d70748ff24de5a40874207de3ea5bfa91e...54dce160186799ac2d6e21f9609f8f8b1e493003) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/8892946e2c4748e38971c69b370f2db79cdb8a4d) * [OCPBUGS-67770](https://issues.redhat.com/browse/OCPBUGS-67770): Update logrus to 1.9.3 to address CVE-2025-65637 [#1548](https://github.com/openshift/cluster-etcd-operator/pull/1548) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9abf7d22b5fda0e06fb1f9a2fa90caaa09d5a932...8892946e2c4748e38971c69b370f2db79cdb8a4d) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c9f6afc6a929632395ded838792a9f1289eaaa1f) * [OCPBUGS-67771](https://issues.redhat.com/browse/OCPBUGS-67771): Bump logrus to 1.9.1 [#1290](https://github.com/openshift/cluster-image-registry-operator/pull/1290) * [OCPBUGS-53867](https://issues.redhat.com/browse/OCPBUGS-53867): Bump github.com/golang-jwt/jwt [#1229](https://github.com/openshift/cluster-image-registry-operator/pull/1229) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/fc8b445c0818bb3c78ca66f9933617fbe21deb32...c9f6afc6a929632395ded838792a9f1289eaaa1f) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/5fcaab01bd320a9d35bcbe1a7474891c3a51786a) * [OCPBUGS-86711](https://issues.redhat.com/browse/OCPBUGS-86711): Add configuration override for X-SSL strip [#1492](https://github.com/openshift/cluster-ingress-operator/pull/1492) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e302d85665274cb299d873eb624867384e5c37b1...5fcaab01bd320a9d35bcbe1a7474891c3a51786a) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/67e982f05404a1ec1e08eaaa66cc408199181a68) * [OCPBUGS-67775](https://issues.redhat.com/browse/OCPBUGS-67775): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.14.z] [#2045](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2045) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9267f4543589ccb408d3e62fc0e35708d4b783df...67e982f05404a1ec1e08eaaa66cc408199181a68) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0ae603324e89e65037136d7623e4dd2fd223faf9) * [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#626](https://github.com/openshift/cluster-kube-scheduler-operator/pull/626) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4...0ae603324e89e65037136d7623e4dd2fd223faf9) ### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/55a86078bfc7ee57757532598bcb21495994202a) * [OCPBUGS-67780](https://issues.redhat.com/browse/OCPBUGS-67780): Bump github.com/sirupsen/logrus to v1.9.1 [#141](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/141) * [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/9cd9922a42a64fe058718f10e3b4123b943bb55f...55a86078bfc7ee57757532598bcb21495994202a) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c58a1bda8cd18c79f15a0ff39cbc9fc06f10569c) * [OCPBUGS-76415](https://issues.redhat.com/browse/OCPBUGS-76415): test: remove image registry e2e tests [#2811](https://github.com/openshift/cluster-monitoring-operator/pull/2811) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e0950380f0281a5da3c2fd51abbdab1155d26b4e...c58a1bda8cd18c79f15a0ff39cbc9fc06f10569c) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6157834f1ece733c68def536caf5e9f57c30ea40) * [OCPBUGS-113758](https://issues.redhat.com/browse/OCPBUGS-113758): Manual feature backport of cert rotation for whereabouts [#3139](https://github.com/openshift/cluster-network-operator/pull/3139) * [OCPBUGS-84184](https://issues.redhat.com/browse/OCPBUGS-84184): fix(hypershift): use net.JoinHostPort for URL construction [#2996](https://github.com/openshift/cluster-network-operator/pull/2996) * [OCPBUGS-78105](https://issues.redhat.com/browse/OCPBUGS-78105): fix vendor for hermetic 4.14 [#2913](https://github.com/openshift/cluster-network-operator/pull/2913) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c7f9fb8f2168ce81250bd588624e58bc2f6f36f8...6157834f1ece733c68def536caf5e9f57c30ea40) ### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/99298b153e668ddacc40e3790bbe22ab32cc0e0d) * [OCPBUGS-86344](https://issues.redhat.com/browse/OCPBUGS-86344): Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 [#209](https://github.com/openshift/cluster-olm-operator/pull/209) * [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/0dbbb6132ced379602040731ff889eebb4202e73...99298b153e668ddacc40e3790bbe22ab32cc0e0d) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7125dc64ece6de40fa14e181e220e67bdfb8101f) * [OCPBUGS-76593](https://issues.redhat.com/browse/OCPBUGS-76593): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] [#658](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/658) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/700dc111fd98c315648a78371b11be34fa4dbba3...7125dc64ece6de40fa14e181e220e67bdfb8101f) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/63a0ae4b409b7eea4d7335f6c372e5b03be91238) * [OCPBUGS-63518](https://issues.redhat.com/browse/OCPBUGS-63518): references to github.com/sclorg/django-ex.git now also refer to the branch [#661](https://github.com/openshift/cluster-samples-operator/pull/661) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/0423e87597f92f5d82e030c3a000224abc247df3...63a0ae4b409b7eea4d7335f6c372e5b03be91238) ### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/133655e33ac7c8623be39dd3d3f7dd09d82c99ca) * [OCPBUGS-87736](https://issues.redhat.com/browse/OCPBUGS-87736): remove oVirt code from CSO 4.14 [#711](https://github.com/openshift/cluster-storage-operator/pull/711) * [OCPBUGS-67795](https://issues.redhat.com/browse/OCPBUGS-67795): Bump logrus to v1.9.3 [#655](https://github.com/openshift/cluster-storage-operator/pull/655) * [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192...133655e33ac7c8623be39dd3d3f7dd09d82c99ca) ### [console](https://github.com/openshift/console/tree/a03a3b80b215626841cef24acf653bb8ddfe1b28) * [OCPBUGS-98416](https://issues.redhat.com/browse/OCPBUGS-98416): CVE-2026-59869 [#16754](https://github.com/openshift/console/pull/16754) * [OCPBUGS-92716](https://issues.redhat.com/browse/OCPBUGS-92716): CVE-2026-46597 openshift4/ose-console: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.14.z] [#16963](https://github.com/openshift/console/pull/16963) * [OCPBUGS-105794](https://issues.redhat.com/browse/OCPBUGS-105794): Fix and re-enable operator-install-single-namespace e2e test [#17170](https://github.com/openshift/console/pull/17170) * Fix for OCPBUGS-92074: CVE-2026-44990 [#16721](https://github.com/openshift/console/pull/16721) * [OCPBUGS-100511](https://issues.redhat.com/browse/OCPBUGS-100511): Bump postcss to fix CVE-2026-45623 [#17109](https://github.com/openshift/console/pull/17109) * [OCPBUGS-105791](https://issues.redhat.com/browse/OCPBUGS-105791): Disable failing OLM and pipelines e2e tests to unblock CI [#16956](https://github.com/openshift/console/pull/16956) * [OCPBUGS-90614](https://issues.redhat.com/browse/OCPBUGS-90614): Fix JSON annotation parsing to prevent OperatorHub crash [#16659](https://github.com/openshift/console/pull/16659) * [OCPBUGS-87989](https://issues.redhat.com/browse/OCPBUGS-87989): [release-4.14] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16597](https://github.com/openshift/console/pull/16597) * [OCPBUGS-77116](https://issues.redhat.com/browse/OCPBUGS-77116): [release-4.14] CVE-2026-26996 Bump minimatch library [#16348](https://github.com/openshift/console/pull/16348) * Fix for OCPBUGS-81595: CVE-2026-4800 [#16568](https://github.com/openshift/console/pull/16568) * [OCPBUGS-88422](https://issues.redhat.com/browse/OCPBUGS-88422): Bump axios to ^0.33.0 Addresses CVE-2026-44486 [#16789](https://github.com/openshift/console/pull/16789) * [OCPBUGS-79434](https://issues.redhat.com/browse/OCPBUGS-79434): CVE-2026-29063 Bump immutable [#16329](https://github.com/openshift/console/pull/16329) * [ART-18713](https://issues.redhat.com/browse/ART-18713): pin fsevents to latest [#16473](https://github.com/openshift/console/pull/16473) * NO-JIRA: enable multi-architecture yarn builds [#16424](https://github.com/openshift/console/pull/16424) * [OCPBUGS-83297](https://issues.redhat.com/browse/OCPBUGS-83297): [release-4.14] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation [#16311](https://github.com/openshift/console/pull/16311) * NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.14 [#16168](https://github.com/openshift/console/pull/16168) * [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16082](https://github.com/openshift/console/pull/16082) * NO-JIRA: Bump builder image to v29 [#15991](https://github.com/openshift/console/pull/15991) * [OCPBUGS-74439](https://issues.redhat.com/browse/OCPBUGS-74439): Bump lodash to latest [#15971](https://github.com/openshift/console/pull/15971) * [OCPBUGS-44158](https://issues.redhat.com/browse/OCPBUGS-44158): bump dompurify to latest [#15593](https://github.com/openshift/console/pull/15593) * [OCPBUGS-59998](https://issues.redhat.com/browse/OCPBUGS-59998): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15464](https://github.com/openshift/console/pull/15464) * And 1 elided commits (e.g. from squash or rebase merges) * [Full changelog](https://github.com/openshift/console/compare/477c65924d5216ec632cd914f317564fc74dc817...a03a3b80b215626841cef24acf653bb8ddfe1b28) ### [console-operator](https://github.com/openshift/console-operator/tree/0920157ed70793287449904114540bc8bb1a31eb) * [OCPBUGS-77994](https://issues.redhat.com/browse/OCPBUGS-77994): [release-4.14] hermetic 4.14 [#1131](https://github.com/openshift/console-operator/pull/1131) * [OCPBUGS-77994](https://issues.redhat.com/browse/OCPBUGS-77994): [release-4.14] NO-JIRA: update go mod dependency for konflux [#1117](https://github.com/openshift/console-operator/pull/1117) * [Full changelog](https://github.com/openshift/console-operator/compare/e5d3f29136a89a273ed48023ce3a89c27980cf4f...0920157ed70793287449904114540bc8bb1a31eb) ### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/f769225964a6505cb706eb74e78c3d6eb3cae355) * [OCPBUGS-78286](https://issues.redhat.com/browse/OCPBUGS-78286): fix vendor for hermetic 4.14 [#225](https://github.com/openshift/containernetworking-plugins/pull/225) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/a1b773076bd1a8ac10e622e58a36259a7a6e596a...f769225964a6505cb706eb74e78c3d6eb3cae355) ### [coredns](https://github.com/openshift/coredns/tree/d10f7ff3322ac6844fc1ff070528664c8931ed24) * [OCPBUGS-58713](https://issues.redhat.com/browse/OCPBUGS-58713): [release-4.14] Bump github.com/golang/glog to v1.2.4 [#139](https://github.com/openshift/coredns/pull/139) * [Full changelog](https://github.com/openshift/coredns/compare/fdd6037bf7380a48358b269d78bc8c61c311342c...d10f7ff3322ac6844fc1ff070528664c8931ed24) ### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/5ffe43c8ba7f7bb0549424daeec905b2c287cc21) * [OCPBUGS-79847](https://issues.redhat.com/browse/OCPBUGS-79847): Apply code mitigations for CVE-2026-33186 [#399](https://github.com/openshift/cloud-provider-openstack/pull/399) * [OCPBUGS-67800](https://issues.redhat.com/browse/OCPBUGS-67800): fix CVE-2025-65637 [#363](https://github.com/openshift/cloud-provider-openstack/pull/363) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/6957b24475043718e946ec2e0b5e373c96a1f03e...5ffe43c8ba7f7bb0549424daeec905b2c287cc21) ### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/dfad3e86768684058148cc46c4ed3d97ae978f2b) * [OCPBUGS-67801](https://issues.redhat.com/browse/OCPBUGS-67801): Bump logrus [#253](https://github.com/openshift/csi-driver-manila-operator/pull/253) * [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/d93a218ff323960eb1dea529f0173f069ccfab42...dfad3e86768684058148cc46c4ed3d97ae978f2b) ### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/155b6abebd6815614a25e2fe471a8aba3b9a768c) * [OCPBUGS-84929](https://issues.redhat.com/browse/OCPBUGS-84929): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#184](https://github.com/openshift/csi-driver-nfs/pull/184) * [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e1dd45373456cf8e47a58d6764212317fb2f8a97...155b6abebd6815614a25e2fe471a8aba3b9a768c) ### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/c2754ef90795717edf87c74028e394ccbf6feedd) * [OCPBUGS-102559](https://issues.redhat.com/browse/OCPBUGS-102559): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#531](https://github.com/openshift/csi-driver-shared-resource/pull/531) * [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/9232c1ff48df333dadc9f7dc275649866e55ced0...c2754ef90795717edf87c74028e394ccbf6feedd) ### [docker-builder](https://github.com/openshift/builder/tree/57539b86d3c60b773090f6dc05790aad032444c3) * [OCPBUGS-66112](https://issues.redhat.com/browse/OCPBUGS-66112): BuildConfig inline Dockerfile fails with heredoc syntax [#492](https://github.com/openshift/builder/pull/492) * [Full changelog](https://github.com/openshift/builder/compare/cdeff52978c86241874a807cf88b37bfe80c4cb6...57539b86d3c60b773090f6dc05790aad032444c3) ### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/8fa3332c2730fbc5bd8b886885052b6a593c0d72) * [OCPBUGS-78282](https://issues.redhat.com/browse/OCPBUGS-78282): [release-4.14] update go mod dependency for konflux [#269](https://github.com/openshift/cluster-api-provider-gcp/pull/269) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/d99fb31aa7280f6b5da00880a64b4774600817a2...8fa3332c2730fbc5bd8b886885052b6a593c0d72) ### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/ee84dee6a6188af9ba9f0f40ef9f9e76eac7c2b5) * [OCPBUGS-102607](https://issues.redhat.com/browse/OCPBUGS-102607): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#194](https://github.com/openshift/machine-api-provider-gcp/pull/194) * [OCPBUGS-79841](https://issues.redhat.com/browse/OCPBUGS-79841): Bump google.golang.org/grpc to v1.79.3 [#168](https://github.com/openshift/machine-api-provider-gcp/pull/168) * [OCPBUGS-79841](https://issues.redhat.com/browse/OCPBUGS-79841): Fix setup-envtest GCS 401 by downloading binaries directly [#178](https://github.com/openshift/machine-api-provider-gcp/pull/178) * [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/7bf14fb2d7eabbb2e22d39d203b43dc6a5443a21...ee84dee6a6188af9ba9f0f40ef9f9e76eac7c2b5) ### [haproxy-router](https://github.com/openshift/router/tree/20c72c83cc4ba4e2250e0de58709d100898aeb7b) * [OCPBUGS-86711](https://issues.redhat.com/browse/OCPBUGS-86711): Strip X-SSL-* headers for plain HTTP [#807](https://github.com/openshift/router/pull/807) * [OCPBUGS-74947](https://issues.redhat.com/browse/OCPBUGS-74947): Adding escapeHAProxySingleQuotes for sanitize [release-4.14] [#782](https://github.com/openshift/router/pull/782) * [OCPBUGS-86966](https://issues.redhat.com/browse/OCPBUGS-86966): Regenerate expired test certificate for unit tests [#781](https://github.com/openshift/router/pull/781) * [Full changelog](https://github.com/openshift/router/compare/c3a2430c09ccea623bb8a599ce56a6e267009620...20c72c83cc4ba4e2250e0de58709d100898aeb7b) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/288be6b27cc18fa1d0d547dea2f02ac89c0a425b) * [OCPBUGS-59473](https://issues.redhat.com/browse/OCPBUGS-59473): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2364](https://github.com/openshift/kubernetes/pull/2364) * [OCPBUGS-67736](https://issues.redhat.com/browse/OCPBUGS-67736), [OCPBUGS-67822](https://issues.redhat.com/browse/OCPBUGS-67822): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.14] [#2586](https://github.com/openshift/kubernetes/pull/2586) * NO-JIRA: fix verify job failure [#2584](https://github.com/openshift/kubernetes/pull/2584) * [OCPBUGS-74302](https://issues.redhat.com/browse/OCPBUGS-74302): Skip E2e: attach on previously attached volumes should work [#2570](https://github.com/openshift/kubernetes/pull/2570) * [OCPBUGS-59473](https://issues.redhat.com/browse/OCPBUGS-59473): UPSTREAM: <carry>: disable some legacy cloud provider Azure tests [#2579](https://github.com/openshift/kubernetes/pull/2579) * [Full changelog](https://github.com/openshift/kubernetes/compare/03a907c6d182353a0e9b83a224a6f0398406f6d5...288be6b27cc18fa1d0d547dea2f02ac89c0a425b) ### [hypershift](https://github.com/openshift/hypershift/tree/463e60b5ecfbde6866651e3bd4a9bf72646a5e9a) * [release 4.14] Fix OCPBUGS-99086: CVE-2026-16242 konnectivity agent auth [#9131](https://github.com/openshift/hypershift/pull/9131) * [CNTRLPLANE-3979](https://issues.redhat.com/browse/CNTRLPLANE-3979): Update release-4.14 Konflux pipelines to use shared pipelineRef [#9196](https://github.com/openshift/hypershift/pull/9196) * [OCPBUGS-84184](https://issues.redhat.com/browse/OCPBUGS-84184): fix(cno): use brackets only for IPv6 in server URL [#8370](https://github.com/openshift/hypershift/pull/8370) * [OCPBUGS-61176](https://issues.redhat.com/browse/OCPBUGS-61176): Add missing service network DNS entries to KAS cert [#6742](https://github.com/openshift/hypershift/pull/6742) * [Full changelog](https://github.com/openshift/hypershift/compare/69c645c12d450a0733cac2fab27c1099a89b717e...463e60b5ecfbde6866651e3bd4a9bf72646a5e9a) ### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/be8d8432dafa168febfd5efbcc9c13a8aef1f9ec) * [OCPBUGS-79836](https://issues.redhat.com/browse/OCPBUGS-79836): Bump google.golang.org/grpc to v1.79.3 [#156](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/156) * [OCPBUGS-77212](https://issues.redhat.com/browse/OCPBUGS-77212): [release-4.14] standardize build paths [#126](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/126) * [OCPBUGS-58738](https://issues.redhat.com/browse/OCPBUGS-58738): bump github.com/golang/glog to v1.2.4 [#109](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/109) * [OCPBUGS-56065](https://issues.redhat.com/browse/OCPBUGS-56065): tech debt: rework vendor patches [#93](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/93) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/2d2b5e961d1b2755ba548000d3a4afb8bd5d5526...be8d8432dafa168febfd5efbcc9c13a8aef1f9ec) ### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/a38b8d883fc282608c22d8e0dcde24aaa97de8bf) * [OCPBUGS-67825](https://issues.redhat.com/browse/OCPBUGS-67825), [OCPBUGS-67826](https://issues.redhat.com/browse/OCPBUGS-67826): bump github.com/sirupsen/logrus to v1.9.3 [#166](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/166) * [OCPBUGS-59791](https://issues.redhat.com/browse/OCPBUGS-59791): [IBM VPC] set offlineExpansion to false in e2e test manifest [#151](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/151) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/620220eae119f1fc51f0657563e96655d16a726d...a38b8d883fc282608c22d8e0dcde24aaa97de8bf) ### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/8fd3b84526e7c8258035bffbd04ee5a1f2f7697c) * [OCPBUGS-102599](https://issues.redhat.com/browse/OCPBUGS-102599): Bump golang.org/x/net to v0.35.0-sec.4 [#63](https://github.com/openshift/ibm-vpc-node-label-updater/pull/63) * [OCPBUGS-56065](https://issues.redhat.com/browse/OCPBUGS-56065): tech debt: rework vendor patches [#50](https://github.com/openshift/ibm-vpc-node-label-updater/pull/50) * [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/4a6fcb6201d21ad16f753aefb5b0a458306322fc...8fd3b84526e7c8258035bffbd04ee5a1f2f7697c) ### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/c747ee2102a8fc19971b3161f1439b9bb3740ea8) * [OCPBUGS-102592](https://issues.redhat.com/browse/OCPBUGS-102592): Replace golang.org/x/net with openshift-sustaining/net [#168](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/168) * [OCPBUGS-115546](https://issues.redhat.com/browse/OCPBUGS-115546): Fetch envtest assets from the controller-tools releases [#179](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/179) * [OCPBUGS-67290](https://issues.redhat.com/browse/OCPBUGS-67290): [release-4.14] Fix incomplete vendor/ [#136](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/136) * [OCPBUGS-51816](https://issues.redhat.com/browse/OCPBUGS-51816): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#123](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/123) * [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/027ce1a7979e5735c6825ea811bfd66a702a7935...c747ee2102a8fc19971b3161f1439b9bb3740ea8) ### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1c221dfad369f41185d93e34e7356fc2395ec9a1) * [OCPBUGS-102612](https://issues.redhat.com/browse/OCPBUGS-102612): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#108](https://github.com/openshift/machine-api-provider-ibmcloud/pull/108) * NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket [#111](https://github.com/openshift/machine-api-provider-ibmcloud/pull/111) * [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/a63c6aabeb484cf8d7f976edc80622de959abde4...1c221dfad369f41185d93e34e7356fc2395ec9a1) ### [ironic](https://github.com/openshift/ironic-image/tree/772c29f67d70b53d1d096f7870ace67d806ed1f0) * [OCPBUGS-97989](https://issues.redhat.com/browse/OCPBUGS-97989): bump openstack-ironic pin for CVE-2026-44918 fix [#920](https://github.com/openshift/ironic-image/pull/920) * [OCPBUGS-97806](https://issues.redhat.com/browse/OCPBUGS-97806): bump openstack-ironic pin for CVE-2026-54423 fix(release-4.14) [#879](https://github.com/openshift/ironic-image/pull/879) * [OCPBUGS-69788](https://issues.redhat.com/browse/OCPBUGS-69788): Bump eventlet version to 0.33.1-7 [#765](https://github.com/openshift/ironic-image/pull/765) * [Full changelog](https://github.com/openshift/ironic-image/compare/87eb83fa35a4b56cf21c280619b945156020590e...772c29f67d70b53d1d096f7870ace67d806ed1f0) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/8465c6bf8e6ede4e38eb4f912d355a8225524f9a) * [OCPBUGS-99891](https://issues.redhat.com/browse/OCPBUGS-99891): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#312](https://github.com/openshift/ironic-agent-image/pull/312) * [OCPBUGS-96901](https://issues.redhat.com/browse/OCPBUGS-96901): Replace individual package removal with a single rpm -e loop [#278](https://github.com/openshift/ironic-agent-image/pull/278) * [OCPBUGS-69779](https://issues.redhat.com/browse/OCPBUGS-69779): Bump eventlet version to 0.33.1-7 [#234](https://github.com/openshift/ironic-agent-image/pull/234) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/e839a4e87eb09b78e562a3bab8f23f1c767742a4...8465c6bf8e6ede4e38eb4f912d355a8225524f9a) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/ac636fd1a6f5a42b9317207403838466ca129766) * [OCPBUGS-87171](https://issues.redhat.com/browse/OCPBUGS-87171): CI image build root tag and go version in go.mod sync with ART 4.14 config [#120](https://github.com/openshift/ironic-rhcos-downloader/pull/120) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/7b56c30661e39b212fc632e8e184c70b14dcf3a2...ac636fd1a6f5a42b9317207403838466ca129766) ### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/b533e08c1ee5ac79d5b9219ec0ac2fefca353d9d) * NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). [#229](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/229) * [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...b533e08c1ee5ac79d5b9219ec0ac2fefca353d9d) ### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/e320958fd283d9f9995fc5e3b6441e6d4c57782a) * [OCPBUGS-95080](https://issues.redhat.com/browse/OCPBUGS-95080): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#81](https://github.com/openshift/cloud-provider-kubevirt/pull/81) * [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/7d96f56d4bbc8449fdddbdbc630d9337097f0030...e320958fd283d9f9995fc5e3b6441e6d4c57782a) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/6068e9c1cc4a20f0230592618a80180740f80ebd) * [OCPBUGS-83659](https://issues.redhat.com/browse/OCPBUGS-83659): Bump google.golang.org/grpc to v1.79.3 [#104](https://github.com/openshift/kubevirt-csi-driver/pull/104) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/48fafc4a9edc202c5ff674b5f631568b4d62f7f5...6068e9c1cc4a20f0230592618a80180740f80ebd) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/3d82606aad9b4a1b3a77e960a160bbc59975954b) * [OCPBUGS-77198](https://issues.redhat.com/browse/OCPBUGS-77198): Fix incomplete vendor [#304](https://github.com/openshift/cluster-api-provider-libvirt/pull/304) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/34dfccba84a23b871d4f29dcec55929c11696e91...3d82606aad9b4a1b3a77e960a160bbc59975954b) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/19133ba974fbf8039a1551702ca7f21f91689ffb) * [OCPBUGS-67840](https://issues.redhat.com/browse/OCPBUGS-67840): bumped logrus to v1.9.3 [#1459](https://github.com/openshift/machine-api-operator/pull/1459) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/28aa32fc3084d7e3a91378fd9d70ddd9832404cc...19133ba974fbf8039a1551702ca7f21f91689ffb) ### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/1bff221eb64c41124fdf72c90b72498197291a6a) * [OCPBUGS-67827](https://issues.redhat.com/browse/OCPBUGS-67827): bumped logrus to v1.9.3 [#159](https://github.com/openshift/image-customization-controller/pull/159) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/2a6627bafcbb00437ab97308fe1d7df9039104ad...1bff221eb64c41124fdf72c90b72498197291a6a) ### [machine-os-images](https://github.com/openshift/machine-os-images/tree/197f328f2b1459b03883464ab0e13158ec84d130) * [OCPBUGS-87880](https://issues.redhat.com/browse/OCPBUGS-87880): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#104](https://github.com/openshift/machine-os-images/pull/104) * [Full changelog](https://github.com/openshift/machine-os-images/compare/0d48bf342fdb75481e2746dfa1b1f51434ac3770...197f328f2b1459b03883464ab0e13158ec84d130) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/e9ce28c80c5afec046e3c190c40038c52b08d513) * NO-JIRA: [release-4.14] Sanitize alert runbook URLs [#1294](https://github.com/openshift/monitoring-plugin/pull/1294) * [OCPBUGS-74442](https://issues.redhat.com/browse/OCPBUGS-74442): [release-4.14] fix: upgrade lodash to remove vulnerable code [#906](https://github.com/openshift/monitoring-plugin/pull/906) * [OCPBUGS-78495](https://issues.redhat.com/browse/OCPBUGS-78495): fix for CVE-2025-69873 [#851](https://github.com/openshift/monitoring-plugin/pull/851) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/4fa70433b2249d44cbe74c6f4ee48625babb2cf1...e9ce28c80c5afec046e3c190c40038c52b08d513) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/75d37a9cae194ebba203a9e6442dc0d90c02aba4) * [OCPBUGS-58763](https://issues.redhat.com/browse/OCPBUGS-58763): Bump github.com/golang/glog to v1.2.4 [#105](https://github.com/openshift/multus-admission-controller/pull/105) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/68db19a47283e55e6eda1eb4f9e80dbf6d5e3077...75d37a9cae194ebba203a9e6442dc0d90c02aba4) ### [multus-cni](https://github.com/openshift/multus-cni/tree/e3c26de3692410c14a4a2f075b6c0946fa9f1e4c) * [OCPBUGS-85381](https://issues.redhat.com/browse/OCPBUGS-85381): Sanitize bracketed hostnames in kubeconfig server URLs [#295](https://github.com/openshift/multus-cni/pull/295) * Bump Go to 1.21 and fix CI build root image [#293](https://github.com/openshift/multus-cni/pull/293) * [OCPBUGS-85253](https://issues.redhat.com/browse/OCPBUGS-85253): Fix server url in kubeconfig [#287](https://github.com/openshift/multus-cni/pull/287) * [Full changelog](https://github.com/openshift/multus-cni/compare/8e48cb09759aadd3ca21d2dcbfbdc6470440cbc2...e3c26de3692410c14a4a2f075b6c0946fa9f1e4c) ### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/84d7ac4e326e55fea98629d3851e98730c8d44a9) * [OCPBUGS-58778](https://issues.redhat.com/browse/OCPBUGS-58778): Bump github.com/golang/glog to v1.2.4 (#115) [#115](https://github.com/openshift/network-metrics-daemon/pull/115) * [OCPBUGS-60394](https://issues.redhat.com/browse/OCPBUGS-60394): Replace e2e test image (#128) [#128](https://github.com/openshift/network-metrics-daemon/pull/128) * swtich golint install method (#127) [#127](https://github.com/openshift/network-metrics-daemon/pull/127) * [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/d8a8c94e523242b441b3714ae31e4c7608c0c797...84d7ac4e326e55fea98629d3851e98730c8d44a9) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/245539e8902062afc29bb4efa59b4eab7c0bc48f) * [OCPBUGS-74926](https://issues.redhat.com/browse/OCPBUGS-74926): bump kubernetes-apiserver to pick up loopback cert expiration update [#174](https://github.com/openshift/oauth-apiserver/pull/174) * NO-JIRA: (chore): update OWNERS [#176](https://github.com/openshift/oauth-apiserver/pull/176) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e1cd9d05b032fbe83df7f68c813309ad7df5d59e...245539e8902062afc29bb4efa59b4eab7c0bc48f) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/b699a1b2211928d91676e46c09bc95b481e9e246) * [OCPBUGS-82649](https://issues.redhat.com/browse/OCPBUGS-82649): Address CVE-2026-35469 [#659](https://github.com/openshift/openshift-apiserver/pull/659) * [OCPBUGS-74924](https://issues.redhat.com/browse/OCPBUGS-74924): bump kubernetes-apiserver to pick up loopback cert expiration update [#602](https://github.com/openshift/openshift-apiserver/pull/602) * [OCPBUGS-76483](https://issues.redhat.com/browse/OCPBUGS-76483): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] [#612](https://github.com/openshift/openshift-apiserver/pull/612) * [OCPBUGS-56613](https://issues.redhat.com/browse/OCPBUGS-56613): Fix image reference in TestImageStreamImportQuayIO [#518](https://github.com/openshift/openshift-apiserver/pull/518) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/3edba5c406e173a39767c5cb316b5302d57c0433...b699a1b2211928d91676e46c09bc95b481e9e246) ### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/ac3faa7338a116761b6f7a785a4b0315ca90b6c5) * [OCPBUGS-102633](https://issues.redhat.com/browse/OCPBUGS-102633): CVE-2026-33814 openshift4/ose-openshift-state-metrics-rhel8:Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.14.z] [#136](https://github.com/openshift/openshift-state-metrics/pull/136) * [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf...ac3faa7338a116761b6f7a785a4b0315ca90b6c5) ### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/ae646edbc646b7120891870d23fef2908ac69172) * [OCPBUGS-67853](https://issues.redhat.com/browse/OCPBUGS-67853): Bump logrus [#189](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/189) * [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/1713e9716ce9efe64bc87c3203e0f991e72132d2...ae646edbc646b7120891870d23fef2908ac69172) ### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/471ed47556b6fa51cef6c270e70cc6a48feab0aa) * [OCPBUGS-78172](https://issues.redhat.com/browse/OCPBUGS-78172): hermetic 4.14 [#165](https://github.com/openshift/machine-api-provider-openstack/pull/165) * [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/51f8e4d69014bfa7a8815662ab0117b6505a6e29...471ed47556b6fa51cef6c270e70cc6a48feab0aa) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/188c9249d4a09d2cb97291c663c03b5b5c315cd6) * [OCPBUGS-102630](https://issues.redhat.com/browse/OCPBUGS-102630): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#1373](https://github.com/openshift/operator-framework-olm/pull/1373) * [OCPBUGS-87896](https://issues.redhat.com/browse/OCPBUGS-87896), [OCPBUGS-87899](https://issues.redhat.com/browse/OCPBUGS-87899): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] [#1326](https://github.com/openshift/operator-framework-olm/pull/1326) * [OCPBUGS-86253](https://issues.redhat.com/browse/OCPBUGS-86253): Drop github.com/distribution/distribution dep [#1304](https://github.com/openshift/operator-framework-olm/pull/1304) * [OCPBUGS-61469](https://issues.redhat.com/browse/OCPBUGS-61469): [release-4.14] Add NetworkPolicy as a supported kind [#1052](https://github.com/openshift/operator-framework-olm/pull/1052) * [OCPBUGS-61390](https://issues.redhat.com/browse/OCPBUGS-61390): [4.14] e2e stability fixes [#1085](https://github.com/openshift/operator-framework-olm/pull/1085) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/15d5584a44e3a01bd93c5d833ecb7781d7f0ec79...188c9249d4a09d2cb97291c663c03b5b5c315cd6) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/63ccdc559d1944457375d190b4a209ce0c85d27c) * [OCPBUGS-62222](https://issues.redhat.com/browse/OCPBUGS-62222): Remove Expect func so that the test case can use the retry logic [#673](https://github.com/operator-framework/operator-marketplace/pull/673) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/363eb42e30f62fc05b77659ecadcd85021470a94...63ccdc559d1944457375d190b4a209ce0c85d27c) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8260351058debcdd785dbdc675ba4f800143204f) * [OCPBUGS-97816](https://issues.redhat.com/browse/OCPBUGS-97816): External gateway: Remove routes for external gateway pods in terminating or not ready state [#3286](https://github.com/openshift/ovn-kubernetes/pull/3286) * [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-78982](https://issues.redhat.com/browse/OCPBUGS-78982): [release-4.14] Dockerfile: Unpin OVN and consume the latest from FDP [#3073](https://github.com/openshift/ovn-kubernetes/pull/3073) * [OCPBUGS-59872](https://issues.redhat.com/browse/OCPBUGS-59872): Dockerfile: Remove ovs version pinning [#2695](https://github.com/openshift/ovn-kubernetes/pull/2695) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/8d0a8501d88cbaf78e0cd14882f47c336d5bbbcc...8260351058debcdd785dbdc675ba4f800143204f) ### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/d89d56a28875917e4d00c61c5eba7a6a6e271f25) * [OCPBUGS-67860](https://issues.redhat.com/browse/OCPBUGS-67860): Fix CVE-2025-65637 by bumping logrus to v1.9.1 [#100](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/100) * [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7436369afce33811e543b13fcbea8d1e1ff65502...d89d56a28875917e4d00c61c5eba7a6a6e271f25) ### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/dcca41df34618fa0dad8cfceeb79f3afd6d98a4b) * [OCPBUGS-78039](https://issues.redhat.com/browse/OCPBUGS-78039): hermetic 4.14 [#136](https://github.com/openshift/machine-api-provider-powervs/pull/136) * [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/ea93a47d3af967bfe0a738f29336de51f457a143...dcca41df34618fa0dad8cfceeb79f3afd6d98a4b) ### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/fef5ee102fedbb4fdab01a6f36abdf13d027c7f0) * NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#405](https://github.com/openshift/prom-label-proxy/pull/405) * [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af40ed09f69fab6c4bf054436f537a3e569d5f02...fef5ee102fedbb4fdab01a6f36abdf13d027c7f0) ### [prometheus](https://github.com/openshift/prometheus/tree/6b8edf05384647f80af0247c5c84720dc889eac6) * [OCPBUGS-88588](https://issues.redhat.com/browse/OCPBUGS-88588): remote: validate snappy decoded length before allocation in read endpoint [#353](https://github.com/openshift/prometheus/pull/353) * [OCPBUGS-86878](https://issues.redhat.com/browse/OCPBUGS-86878): Fix the inconsistent vendor directory [#336](https://github.com/openshift/prometheus/pull/336) * [OCPBUGS-86878](https://issues.redhat.com/browse/OCPBUGS-86878): Bump google.golang.org/grpc [#323](https://github.com/openshift/prometheus/pull/323) * [Full changelog](https://github.com/openshift/prometheus/compare/3aff0d1e4f08b135b958494c14f7c3d914dfe005...6b8edf05384647f80af0247c5c84720dc889eac6) ### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/7194ce3011495510c7f0e8803e65f151ba695618) * [OCPBUGS-100361](https://issues.redhat.com/browse/OCPBUGS-100361): Set testdata CA expiry to 20 years from issue date (#4112) [#147](https://github.com/openshift/prometheus-alertmanager/pull/147) * [OCPBUGS-77837](https://issues.redhat.com/browse/OCPBUGS-77837): Include go-verify-deps expected files in gitignore [#121](https://github.com/openshift/prometheus-alertmanager/pull/121) * [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e3725166cf8ef228f1672b00d063c488b69687aa...7194ce3011495510c7f0e8803e65f151ba695618) ### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/d5470e7ea2a04e0763bc4b035f2f9013f851b6f7) * NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#204](https://github.com/openshift/node_exporter/pull/204) * [Full changelog](https://github.com/openshift/node_exporter/compare/5ee0a9d957a04756ba76623a8bbc12be9949109f...d5470e7ea2a04e0763bc4b035f2f9013f851b6f7) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9a12e08adc28a8de13eb6e36679db94ff4a518b5) * [OCPBUGS-86883](https://issues.redhat.com/browse/OCPBUGS-86883): [release-4.14] bump google.golang.org/grpc to v1.64.1-sec.1 [#94](https://github.com/openshift/route-controller-manager/pull/94) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e...9a12e08adc28a8de13eb6e36679db94ff4a518b5) ### [tests](https://github.com/openshift/origin/tree/d885e43f7985efe72dbf3e949ea3caf7dcee81b8) * [OCPBUGS-74302](https://issues.redhat.com/browse/OCPBUGS-74302): Skip E2e: attach on previously attached volumes should work [#30727](https://github.com/openshift/origin/pull/30727) * [OCPBUGS-63674](https://issues.redhat.com/browse/OCPBUGS-63674): Fix regex parser [#30391](https://github.com/openshift/origin/pull/30391) * [OCPBUGS-61233](https://issues.redhat.com/browse/OCPBUGS-61233): images/tests: Remove rteval [#30208](https://github.com/openshift/origin/pull/30208) * [Full changelog](https://github.com/openshift/origin/compare/61448faf003ff6999aa5cc5d3c9cf7651992ab38...d885e43f7985efe72dbf3e949ea3caf7dcee81b8) ### [thanos](https://github.com/openshift/thanos/tree/25bdf4b7cf52346785549eb39b3c62803dd95688) * [OCPBUGS-67876](https://issues.redhat.com/browse/OCPBUGS-67876): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#167](https://github.com/openshift/thanos/pull/167) * [Full changelog](https://github.com/openshift/thanos/compare/a26712509e3f9c511926ca9d8bba3e3ea8e95ada...25bdf4b7cf52346785549eb39b3c62803dd95688) ### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/b1aaff4cb5acd1df600322dbbf5a7b8ee65952e0) * [OCPBUGS-78031](https://issues.redhat.com/browse/OCPBUGS-78031): hermetic migration 4.14 [#109](https://github.com/openshift/cloud-provider-vsphere/pull/109) * [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/efaed5cdb8c7d4b0b7fe38e203c545278ccfab4d...b1aaff4cb5acd1df600322dbbf5a7b8ee65952e0) ### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/c1758a0d0531d551f47c068762f3b9d232ce7164) * [OCPBUGS-78023](https://issues.redhat.com/browse/OCPBUGS-78023): hermetic migration 4.14 [#88](https://github.com/openshift/cluster-api-provider-vsphere/pull/88) * [OCPBUGS-61655](https://issues.redhat.com/browse/OCPBUGS-61655): Fix unit tests [#74](https://github.com/openshift/cluster-api-provider-vsphere/pull/74) * [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/b5346ad9d07fc212c58ad52cd757fa31da3c5f77...c1758a0d0531d551f47c068762f3b9d232ce7164) ### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/96d5fbc02df71945bd76b4bbad3911cf19a2c16e) * [OCPBUGS-79856](https://issues.redhat.com/browse/OCPBUGS-79856): Bump Bump google.golang.org/grpc [#179](https://github.com/openshift/vmware-vsphere-csi-driver/pull/179) * [OCPBUGS-67880](https://issues.redhat.com/browse/OCPBUGS-67880): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#160](https://github.com/openshift/vmware-vsphere-csi-driver/pull/160) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/b5d0e7ddd2262c616147e5ce16220dae2a4de59d...96d5fbc02df71945bd76b4bbad3911cf19a2c16e) ### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/6593723fbb3189b25df4634e3b75bb02b5b9e611) * [OCPBUGS-67879](https://issues.redhat.com/browse/OCPBUGS-67879), [OCPBUGS-67885](https://issues.redhat.com/browse/OCPBUGS-67885): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#325](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/325) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5d5105f93e02ba0c4c07890b3db630b11d839abf...6593723fbb3189b25df4634e3b75bb02b5b9e611) ### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/47656bdd6f3f58168e79aa6f8a7141f64c8a456b) * [OCPBUGS-102657](https://issues.redhat.com/browse/OCPBUGS-102657): Bump golang.org/x/net to v0.35.0-sec.4 [#237](https://github.com/openshift/vsphere-problem-detector/pull/237) * [OCPBUGS-67891](https://issues.redhat.com/browse/OCPBUGS-67891): bump github.com/sirupsen/logrus to v1.9.3 [#202](https://github.com/openshift/vsphere-problem-detector/pull/202) * [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a9c08425f59d37495d655ee16d4fc7fa200a5ea8...47656bdd6f3f58168e79aa6f8a7141f64c8a456b)