# 4.14.78

Created: 2026-11-06 07:47:48 +0000 UTC

Image Digest: `sha256:3141b63f379bfbc8f19ea61ae23532199efe2cc90740fb22ff5b67c808557968`


## Changes from 4.14.71

### Components

* Kubernetes 1.27.16
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202608040453-0 to 414.92.202611040941-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [54aa57eb](https://github.com/openshift/assisted-installer/commit/54aa57eb81d052a36ae8b78f2905d870ee0718ad) `sha256:be0c90e577545e7022ec360766cbf6b562fc8326d5987d790401c1267d973d38`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [54aa57eb](https://github.com/openshift/assisted-installer/commit/54aa57eb81d052a36ae8b78f2905d870ee0718ad) `sha256:4affeb5fce47955c8541341007b10f8b18ae668b9259aaa9448195b10e3a1d64`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3fa10c2](https://github.com/openshift/agent-installer-utils/commit/b3fa10c2f6a890f982a983510e8315b084867782) `sha256:751c6f4413c2568b7803eb8f4684f1af0137316eb97a657c461a14d0d36ce4c5`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [3dc363d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/3dc363d364c43c1fb03e223147e25d9057273428) `sha256:f1013944d6654947b422ec34e320645b761e1a6049e36189cc18a0fbb9292ec4`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [8853e6ef](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/8853e6ef4966018b96f9d8bfbf99df3a984bb454) `sha256:6d5bd35f68090a668f595a154598182c12cf3b4abc1475b03e3dab88ab903c48`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [27f105d3](https://github.com/openshift/cluster-api-provider-alibaba/commit/27f105d3b722e19f76b72588d36eeae9dac0a444) `sha256:1416563a29419044e0952ceb289e4ec34aed40abcd490f9da82f1314771becf4`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [f56c606a](https://github.com/openshift/apiserver-network-proxy/commit/f56c606ae15041b0c981e654ab577d2b0a3a0a8f) `sha256:3639d96246d7581c01b4fbc5ebdf2f708dc5aabba710caaefc6ac2ce36b5cf97`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [4622deec](https://github.com/openshift/aws-ebs-csi-driver/commit/4622deecace538b375edc782a19cb5da977ae458) `sha256:b4037a1304a6389d81ab9666b6896a6e5fa3faea8063ce726853507708e7ee4e`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [e2bb8297](https://github.com/openshift/machine-api-provider-aws/commit/e2bb8297ff39438a8adae059a652e0687f56700a) `sha256:301108657203d7493ee011e9ff9dddcb29c166b20396d0efab11f9a02a2307e1`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [2c864ca0](https://github.com/openshift/aws-pod-identity-webhook/commit/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63) `sha256:becaf2b0b72d9f75a8313ab4187fe691751f872124cfa71abe2b0bb5625d1f4c`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [72872312](https://github.com/openshift/cluster-api-provider-azure/commit/728723125921ca6f44f38b3d90318cb98f74bd72) `sha256:8216cdbada6f7ba0416104823aa2bc66c6a4e5ae98d38686aa287b5921f16b46`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6d3558a3](https://github.com/openshift/azure-disk-csi-driver/commit/6d3558a3b5ae9d383988495cc64dc05b4bba0382) `sha256:fabeee1090d6125da7ba11b73d45881331ff507b8403f0f5b101b161fa88cd56`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [2cb82019](https://github.com/openshift/azure-workload-identity/commit/2cb82019194364a2f7ba1a9aa318fa6e5b4a7346) `sha256:e6235256fa276d899c7c674871cff259428af049066ebc3b249e3eaa9e486e39`
* [baremetal-installer](https://github.com/openshift/installer) git [4dd5abdf](https://github.com/openshift/installer/commit/4dd5abdf12a97ef0f32f6774ab79fa8dc6482f34) `sha256:d4b009bd529ee59d439237cb8d8c397840b4ab155f01e37a359df38c17a1ff49`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [0c1c23f3](https://github.com/openshift/cluster-api-provider-baremetal/commit/0c1c23f3a63168ec2deb171dc66149fe7ec558ac) `sha256:7f4d9fde499b9840a265a5d5b0542b29b1309ec336042f85ad198777da3b220e`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [0ba9e555](https://github.com/openshift/baremetal-runtimecfg/commit/0ba9e555eeb173d42e5adf6f65e982e17acfdb9d) `sha256:c3400317f9ba7c5ce1093a94a6a9991523e88b31d55d1d55c57bb01f72d8448e`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [b491a819](https://github.com/openshift/cloud-credential-operator/commit/b491a81980f16adba3dcdb95356302d8a00d5454) `sha256:e73194426cafd0417655fb67e6d2231aeeff8a25fbd7336467478bc449921148`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [1bd04641](https://github.com/openshift/cloud-network-config-controller/commit/1bd04641f210d19370f782086949f827bfb7a264) `sha256:ef445e8d7e1392f8a046145634c056f632b2566d84a8849aaf448e8e510a4dca`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [d030dbaa](https://github.com/openshift/kubernetes-autoscaler/commit/d030dbaade38e116d27d5039a3597f694f73ea2b) `sha256:64ad5f1df78ee87c749727faa4c9ea5d92fc56b799a5dda55a25b6bf381f871b`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [a23843ef](https://github.com/openshift/cluster-baremetal-operator/commit/a23843eff0e827107921a13ab9ef871c2ee34ffd) `sha256:547f04193f0f49ebf15ac2b0a19f4116caeab7f6287a6a79d9e9e395c7281784`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [93fba13f](https://github.com/openshift/cluster-bootstrap/commit/93fba13f576831ba0953190663ab26aaf5766984) `sha256:b5a9d8c4d0fd0f1e4e65fbf81887024c536710f2dc374b6281eaff1e8457b6ee`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [eb617d0f](https://github.com/openshift/cluster-api/commit/eb617d0f25600eacf3b5971fce8c2fdb60642118) `sha256:ee79517472344daa4508b6342a99d238c526ed0a054a359a9d897e09ed78412c`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [0d033265](https://github.com/openshift/cluster-capi-operator/commit/0d033265ffd31be8061ee53f4940b4dd71192bbd) `sha256:872e09dca857857f1fa8dbc6c6c565b9457df47db2b91d06393c61550703328f`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [54dce160](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/54dce160186799ac2d6e21f9609f8f8b1e493003) `sha256:af77d450522854e671d0cdb078c13aed926dee828316efc6bae9a0693f2c0965`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [2378670a](https://github.com/openshift/cluster-config-operator/commit/2378670aee1858db6b1ff425a1d208eb7d73afec) `sha256:b9da438d3e57501c4a340149e44fb8839741da77ac66635e8b2b5a02c0d37155`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [783d9dd1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/783d9dd134451c12f0c1abf7e53c30b61ddd74bf) `sha256:1b37b6e7364f53c3165cde2de722fbb24dca6a11bdf9d81e22624c6751193ed9`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [0164e3c4](https://github.com/openshift/cluster-dns-operator/commit/0164e3c4464f03d5ddbbba5d426f4bf02822753d) `sha256:a0623760688a060542a0bf0debeb0ad464b556cfa859889aa5c1998774e46633`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [8892946e](https://github.com/openshift/cluster-etcd-operator/commit/8892946e2c4748e38971c69b370f2db79cdb8a4d) `sha256:f8c184981d6cc1fbe049e7eac1693604cf499bb0f9ba53a483d89a31caec041b`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [c9f6afc6](https://github.com/openshift/cluster-image-registry-operator/commit/c9f6afc6a929632395ded838792a9f1289eaaa1f) `sha256:604c523945c76a03c886d4f85fe6b4b0fa0ea3dbdc1fd24f39f3ce35e3196a7c`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [5fcaab01](https://github.com/openshift/cluster-ingress-operator/commit/5fcaab01bd320a9d35bcbe1a7474891c3a51786a) `sha256:6764b9d4a674a81e26bcdc2f9ea085ed0814f08a4c0d929c73ac5f20f27a8b2b`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [67e982f0](https://github.com/openshift/cluster-kube-apiserver-operator/commit/67e982f05404a1ec1e08eaaa66cc408199181a68) `sha256:c5630369aaa37190eda29154810a81a8777494e0103131e4f2689cd79231ea26`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [b287d08b](https://github.com/openshift/cluster-api-operator/commit/b287d08b3dabe6b3b67b87a8a284f19ed12a165e) `sha256:22a87939beb21c6011ef89cc576e0094a69042bcf713d596d1996b50b21d2666`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [4e059638](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/4e059638c2cbf003551ee699106dc024760eece3) `sha256:aa1155cb6648aa10c9de2f894711e6b9b5ee4c2d5ead5cba8b66d84f6c3792da`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [0ae60332](https://github.com/openshift/cluster-kube-scheduler-operator/commit/0ae603324e89e65037136d7623e4dd2fd223faf9) `sha256:cf485ae7c82a6e4b8ace54dfa36ba9908150870530b3dc89c3c8501f6769ead3`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [55a86078](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/55a86078bfc7ee57757532598bcb21495994202a) `sha256:2939b31c8f94f0312d335d42c20548abecc1b5378fd482102d8219aab5d64c05`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [38a758d0](https://github.com/openshift/cluster-machine-approver/commit/38a758d0026346b751774b2459520174b46e39bf) `sha256:1e6cfdb23adb3b06ad6e6d88c30799dbf45ca1e84aaf803636d28e4eb4c59581`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [5511c8df](https://github.com/openshift/cluster-node-tuning-operator/commit/5511c8df81e608a45bf37cb021707f7b9ede9c9a) `sha256:352a28b1d078472400fba7f4a5f95229e8f15f751933e79a9153e99485424fc5`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [99298b15](https://github.com/openshift/cluster-olm-operator/commit/99298b153e668ddacc40e3790bbe22ab32cc0e0d) `sha256:aff28ac30c730c1b5ccbdc37e9f85b94b5818c8d8144d8546c16c4c5c78f552b`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [7125dc64](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/7125dc64ece6de40fa14e181e220e67bdfb8101f) `sha256:986f88a9a0d37fee9b7e5a5a69522d53f29646ff6e1cebd2d418c4d90d8b3d81`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [08fb27e7](https://github.com/openshift/platform-operators/commit/08fb27e72e32ea0a06ab02b3b746114148d96c25) `sha256:de2b5a7b0ca799bde4b38e6fbb650d4b28760ef8565138086d3371d7446f6017`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [219f6f6f](https://github.com/openshift/cluster-policy-controller/commit/219f6f6f072d867201d4923d39fd8bcaecbe7c59) `sha256:7a284690cadd146d839d93e9aee838a2a4c054056378f323c89418e63575e8ca`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [63a0ae4b](https://github.com/openshift/cluster-samples-operator/commit/63a0ae4b409b7eea4d7335f6c372e5b03be91238) `sha256:66ff2232243592c5f05b41ff6b67305b6b803c577654894e66ccbe91a966ebd6`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [1a7a6e22](https://github.com/openshift/cluster-update-keys/commit/1a7a6e229dc980540f51b969c4f1d9ef5dbc3ab5) `sha256:d4c1a51d076be81d444fe3047bbbe18b9a302ce0b7d1ef8f40c6fdb36e1c4092`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [a1bf9301](https://github.com/openshift/cluster-version-operator/commit/a1bf930103a77b25e99130644504c3fecdcc4c67) `sha256:9495a1bdaf49f2d8b816b03684f0d9e70b9749407d82bf12ae5e3ba49bc04eff`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [716a0c33](https://github.com/openshift/configmap-reload/commit/716a0c33bb693127fba3b3512622710785a59e8e) `sha256:0a72a7b59ba06d601fb0203368aba24ed51222ef795f32512445a64f03459a14`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [f7692259](https://github.com/openshift/containernetworking-plugins/commit/f769225964a6505cb706eb74e78c3d6eb3cae355) `sha256:5c3e445e401ea80da753267307507e48d8cf3cf65ef86485d6ae29eb3f949215`
* [coredns](https://github.com/openshift/coredns) git [d10f7ff3](https://github.com/openshift/coredns/commit/d10f7ff3322ac6844fc1ff070528664c8931ed24) `sha256:a8b8c18bd663b3c19d8ba2050f3d3bab91cccec34f8ac3330e3d179036b5c5f6`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [5ffe43c8](https://github.com/openshift/cloud-provider-openstack/commit/5ffe43c8ba7f7bb0549424daeec905b2c287cc21) `sha256:c2e62bf47f98a3ca28cc1d2663ef45f08acb523f859aca8dd1fda5cf25dfa2b1`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [155b6abe](https://github.com/openshift/csi-driver-nfs/commit/155b6abebd6815614a25e2fe471a8aba3b9a768c) `sha256:1dcfc4d5ea3fb45cec76f035ba8fff188148c9ef6a665e9e60355a6264ebd0c6`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c273cd52](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c273cd52b791e69da41ac23fafb6d926c0530276) `sha256:5807ac6593ff3388af48e1408762dbe6007504a1b485831aa654775ef47db3b0`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [e18ed7f0](https://github.com/openshift/csi-external-provisioner/commit/e18ed7f00d8c80564a8dd5827013cd49f33ff0d7) `sha256:73416ae147b978414056f7de6de6c9b42d9a09179cca949acda2c2b7879d4da1`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [59a701a4](https://github.com/openshift/csi-external-resizer/commit/59a701a4c8cd3105e272b12afdb1e62e411b2772) `sha256:3bf2e0bf033f0e2a24fffa292541e4de83644ecfa63f3bfc0682b8447754fd6c`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a9bcbde1](https://github.com/openshift/csi-livenessprobe/commit/a9bcbde134a17d3335f68a49aaad4befa8d7cc08) `sha256:57b7653a7f9bb63031aa4b4f9019f08bf91793c64c2520a6a98d244369f28fb6`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9dcaa7f5](https://github.com/openshift/csi-node-driver-registrar/commit/9dcaa7f5b7573e7ef9dbec1439abc32171003799) `sha256:84314e3978b5cc9fa5f2fe953c4f23fb845e1d6a59aefd4bfe571072d378abe4`
* [docker-registry](https://github.com/openshift/image-registry) git [ce0483f1](https://github.com/openshift/image-registry/commit/ce0483f140c5065a1b4aafbbbb94b1b9ca5f29e1) `sha256:078114d5dce7604658f974b986dc74156c2e8abe9c97e6d97a8364a194c5e9e9`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:e188f5010c34ff1d9e93833061b7c70274d976b266f7498b240ec1dc3f36c4ee`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [96f2f54f](https://github.com/openshift/egress-router-cni/commit/96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f) `sha256:4811cae7e2e6b0145062a6ef44758e017ed03aa6765a40d08e7e3c83c2e33617`
* [etcd](https://github.com/openshift/etcd) git [5ed5044c](https://github.com/openshift/etcd/commit/5ed5044c5661c55d297ab0348056b50969af9627) `sha256:bb332c59b2f0f933ac505da6f7c98a23d05263cc45f3d22a42185a06b2921499`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [09e96a91](https://github.com/openshift/cloud-provider-gcp/commit/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c) `sha256:3bc6b547b4bf2011e89ab08d750e383faefa6e0401cb145449d5442f5af7b2b6`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [8fa3332c](https://github.com/openshift/cluster-api-provider-gcp/commit/8fa3332c2730fbc5bd8b886885052b6a593c0d72) `sha256:d0f6b36156d91f57093ae1506e5fce94b580c90fdb073ef96f768dd4961a695d`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [95d55a04](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/95d55a043a60b584a9fe28d37825761282305840) `sha256:3c389843d72951ec78e63cac673ba0fa8425a66b3268a5ce63d4d3873df65aca`
* [hyperkube](https://github.com/openshift/kubernetes) git [288be6b2](https://github.com/openshift/kubernetes/commit/288be6b27cc18fa1d0d547dea2f02ac89c0a425b) `sha256:a58d84ffa8155bdf7c49772f16a8903cefeb068177c5bd7324134239e9cd578a`
* [installer](https://github.com/openshift/installer) git [4dd5abdf](https://github.com/openshift/installer/commit/4dd5abdf12a97ef0f32f6774ab79fa8dc6482f34) `sha256:f45bd065433f81ac80868ecaa92f0be6f5e8f1e36aa5058bc12ed2873fd2867e`
* [installer-artifacts](https://github.com/openshift/installer) git [4dd5abdf](https://github.com/openshift/installer/commit/4dd5abdf12a97ef0f32f6774ab79fa8dc6482f34) `sha256:328b7a70c37791fc9276e6f0b57a6acb8c63780a1f796c4d8769ab40775e4a05`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [ac636fd1](https://github.com/openshift/ironic-rhcos-downloader/commit/ac636fd1a6f5a42b9317207403838466ca129766) `sha256:f3cc78a59a7348a5c7d5b108a6f050f581c619df64d3ac9d265c419aee49fcd9`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [1b194fd1](https://github.com/openshift/ironic-static-ip-manager/commit/1b194fd16b59c4a48223a2c9ac1bfb998a55c615) `sha256:e003f0b0989e1ff34a0cb14469c04638c90f44f53eb0c6c5db210d3dfaa94586`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [801a912b](https://github.com/openshift/k8s-prometheus-adapter/commit/801a912b3a60d7e840fb1ff38b5ca992f47327fd) `sha256:05e0ace358a3695dfb1cfc589a48d9dd09ac84cf388528af71b53f231ea15fba`
* [keepalived-ipfailover](https://github.com/openshift/images) git [03e5f407](https://github.com/openshift/images/commit/03e5f40783e1b573f3d07d7640619ad9592f9a77) `sha256:34758917324e4aac1404a63077f9c41f16818f6731e9f7a660142c49078563db`
* [kube-proxy](https://github.com/openshift/sdn) git [1f611c53](https://github.com/openshift/sdn/commit/1f611c53ca22ebcf23d6a34ca07121f4fa2808d6) `sha256:ead96b363cb289d13fdede2e726ce250b9068794da56dea2e0ff4a7356e7e09d`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b8b82595](https://github.com/openshift/kube-rbac-proxy/commit/b8b8259584046eabb7565f262c8105c2686107a4) `sha256:0785e8c600e0d04e8ef5c1588e25002f37b3b150cee1ecce6c51ba2ece555a26`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [b533e08c](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/b533e08c1ee5ac79d5b9219ec0ac2fefca353d9d) `sha256:e4a448121919af5f6c9117af3f48ae3f94cd5a75d5e5770e4394126df0c93aa8`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [e320958f](https://github.com/openshift/cloud-provider-kubevirt/commit/e320958fd283d9f9995fc5e3b6441e6d4c57782a) `sha256:5ae07a0644ecba8a53c005bef0648b8ac97c61224b9476831d87d5d9dc289812`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:2ab1c5b82c67737fc0115a0b6779fe52a882fa661db319c19da18bb87fa57861`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:d8b12075434d3a1757455c0d62022bdb62568127b19fb3bea7f32d06f38b9631`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [3d82606a](https://github.com/openshift/cluster-api-provider-libvirt/commit/3d82606aad9b4a1b3a77e960a160bbc59975954b) `sha256:0b5f6551fb083cae377e6c0812a0ad5755820ebd995f7ea2d01c1d0c1c57696a`
* [machine-config-operator](https://github.com/openshift/machine-config-operator) git [00b2e0b1](https://github.com/openshift/machine-config-operator/commit/00b2e0b1cc83e119995bbbe2ae06665c3d1655d7) `sha256:23b6abcdb7b7374251f0b22292f45463dca2443b106340cd2c68ca21e576bbd7`
* machine-os-content `sha256:ef10c2909e0ea4b3d1e2334853ce08ac7126022aa47b4652650126e0279e7d3c`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [197f328f](https://github.com/openshift/machine-os-images/commit/197f328f2b1459b03883464ab0e13158ec84d130) `sha256:4af8b776d95e4f164bc129991d0035505e1b21ae51bb6ca2b3b3ea6717e0e712`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [75d37a9c](https://github.com/openshift/multus-admission-controller/commit/75d37a9cae194ebba203a9e6442dc0d90c02aba4) `sha256:3d27ce79b6d2a85d44d0d71fa40f15d8f37e9fde898c182f5d66b5fa3789347c`
* [multus-cni](https://github.com/openshift/multus-cni) git [e3c26de3](https://github.com/openshift/multus-cni/commit/e3c26de3692410c14a4a2f075b6c0946fa9f1e4c) `sha256:14f67b286f93ae1b45288cfa1803d48510b1a69e3542a4bbf94b617304ada1d3`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f670647c](https://github.com/openshift/multus-networkpolicy/commit/f670647c0cb7b6f870f8176b26f83ce6614e209e) `sha256:1abe843c024c010b3aaa73a6e2e23978136d04210343d87961799354a1faab90`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [5965fed6](https://github.com/openshift/route-override-cni/commit/5965fed661f71112104ca6cef22aa883f542226d) `sha256:c8ce5a05c8fa1282e1694564335669ef9eed03d410009f9c91aac02a23c60bb2`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [f95487b0](https://github.com/openshift/whereabouts-cni/commit/f95487b0831b560de7b8d7c5d1c986338224800b) `sha256:dbb493e5e55b82f766c1136e47c286b0de9f5fc98cd61b7e8eb68ec3e7771492`
* [must-gather](https://github.com/openshift/must-gather) git [b8585ca8](https://github.com/openshift/must-gather/commit/b8585ca862a3fbe77134e5cbe6155d7c04efc269) `sha256:45302a50505270772f7d3c12aab408433606ba40aac50e1fd161565844382823`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [29f61f6b](https://github.com/openshift/bond-cni/commit/29f61f6b05d958c40e7213937064f26a63a8e6d9) `sha256:11775330c57343b234e596ab069b11a479abe05dc8843237f41921fd9afaa11a`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [84d7ac4e](https://github.com/openshift/network-metrics-daemon/commit/84d7ac4e326e55fea98629d3851e98730c8d44a9) `sha256:1703e1c152bee2b6e5c52646dee5be7931f79bc63f3d86172ee184c419a42da3`
* [network-tools](https://github.com/openshift/network-tools) git [e79d8173](https://github.com/openshift/network-tools/commit/e79d8173c5628065da85425bc7e4cb1d94f3c919) `sha256:243e3e6bcb813b84d2ebdcaf4a2e1a0b248244db466e69a622f6248c9c860108`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8930f295](https://github.com/openshift/cloud-provider-nutanix/commit/8930f295dfa97cc63321c63192c93a78306fe23b) `sha256:09de995061b08c109d939343df0ce44c01a7fcb0885b0a454b36a25562ef470c`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [c0661680](https://github.com/openshift/machine-api-provider-nutanix/commit/c06616804f2de1635fb34fd45fdb625fd0b1b506) `sha256:8ce564f710b108ecbd80a26ee310a7e817167c1631c9b86578bfae8c9bd7e9fc`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [245539e8](https://github.com/openshift/oauth-apiserver/commit/245539e8902062afc29bb4efa59b4eab7c0bc48f) `sha256:6c545b4a04684b251f39a50e8d10015fc034c86a5884185beb3012414aefee74`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [a333cb0b](https://github.com/openshift/operator-framework-catalogd/commit/a333cb0b558abf8d9f8da0eccd5618d767629050) `sha256:c7c49c9adb626ecaa0ed5898945f7e576a317dd8b1ea2e0d3ceafd0e1de87651`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fb6fb278](https://github.com/openshift/operator-framework-operator-controller/commit/fb6fb278d987faacb4da17b96a109da261fbb962) `sha256:cfef432091ee338d7c81a75837f52ff98402397b2a9bff043ed1c368a17eb0e0`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [c9409c62](https://github.com/openshift/operator-framework-rukpak/commit/c9409c62cb6bc57cde167452f1da7f3eab8cff79) `sha256:63c03da11298a40c509a0068f4410b61e2c7df79ea9c357322bb143a643f5708`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [b699a1b2](https://github.com/openshift/openshift-apiserver/commit/b699a1b2211928d91676e46c09bc95b481e9e246) `sha256:b0042c3b265f0dec3b00b9a26b84f9f47b6c28dd3fda2074a5c963ab9b6ea891`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [1c76570b](https://github.com/openshift/openshift-controller-manager/commit/1c76570bb6ca3b55faa0461f085e43097cc06c50) `sha256:c28a690f107109b1579f221533428025b518c61fdb3296ce41399431493413ee`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [5ffe43c8](https://github.com/openshift/cloud-provider-openstack/commit/5ffe43c8ba7f7bb0549424daeec905b2c287cc21) `sha256:bcf76d7cb6f0005b914b560b4e322dd84d3389385607c434a3c30b7f9e8e1af2`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [ae646edb](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/ae646edbc646b7120891870d23fef2908ac69172) `sha256:05eff24ede64c1ceac4f3b37cd8f612497bf5c281b78364cbbbf0fe9b8ad5a00`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [5ffe43c8](https://github.com/openshift/cloud-provider-openstack/commit/5ffe43c8ba7f7bb0549424daeec905b2c287cc21) `sha256:76eeee0619651d461a5e0794692f55b6ca9b6dc796fc66e37f0a54052aaf7c74`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [471ed475](https://github.com/openshift/machine-api-provider-openstack/commit/471ed47556b6fa51cef6c270e70cc6a48feab0aa) `sha256:a20b53734b7e4056a6942c94fbc996c84817e4132b65dbaead13ec160edde203`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [63ccdc55](https://github.com/operator-framework/operator-marketplace/commit/63ccdc559d1944457375d190b4a209ce0c85d27c) `sha256:54ffa7fe4d7f57182f642a64dcfc53015324115ac89d766b138defcbffa9ffcd`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:3dfe331a5b51ab820489dc65784e0d88bc44b92d289acba6dd0c14a5bd29be44`
* [pod](https://github.com/openshift/kubernetes) git [288be6b2](https://github.com/openshift/kubernetes/commit/288be6b27cc18fa1d0d547dea2f02ac89c0a425b) `sha256:baa66bad84d92205d1f903ed6e91fb3033873188065fbf59068bc2cdd6d68e8e`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [988f7109](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/988f7109b4493f62cb13187bc190eae60c77d1e7) `sha256:9741bb125ecc990125ba4ad3c358b919d7d2309f76df2f026c5d76c8d680bf09`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [d89d56a2](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/d89d56a28875917e4d00c61c5eba7a6a6e271f25) `sha256:88b59c27cba529911577c3c2dc258fcf923972f50a10d39e0325ddb8586c0dc3`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [19cf1d3f](https://github.com/openshift/cloud-provider-powervs/commit/19cf1d3f4985a22e9777aad16531a382c4feed45) `sha256:a1483a7858f6654acc5df1186f48118e81962104e1f0d5f4ee28f2b7656522e5`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [dcca41df](https://github.com/openshift/machine-api-provider-powervs/commit/dcca41df34618fa0dad8cfceeb79f3afd6d98a4b) `sha256:8aaa18052b42dd49ac0d56f0d19d10df2d0619d80793c2a7b24ade31966e19fe`
* rhel-coreos `sha256:97bb73c624b7ab892989911b64bc5dcb1f9246bdfdd00ba648339b01a6da23c7`
* rhel-coreos-extensions `sha256:b9a756986fcf26f9df6f7aa9e26e0eb2bc7bd53b176c743e570a67c1ad722be6`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [9a12e08a](https://github.com/openshift/route-controller-manager/commit/9a12e08adc28a8de13eb6e36679db94ff4a518b5) `sha256:50bd97f0c1f19ce125bbc6fa03ceb657009844bf3113e918983197a27c7a4d1c`
* [sdn](https://github.com/openshift/sdn) git [1f611c53](https://github.com/openshift/sdn/commit/1f611c53ca22ebcf23d6a34ca07121f4fa2808d6) `sha256:0e6e9b64492535b333dad9134a7061d7408379eb5c8d4e9ea241b54d022a44ed`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [3c3f82f7](https://github.com/openshift/service-ca-operator/commit/3c3f82f7112ee4b5656e5c554f9887acdf881175) `sha256:a4948eb48b2c6799fd68903b7d8410361db766cea72e831b7697cb9d40bbd5a1`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [c1758a0d](https://github.com/openshift/cluster-api-provider-vsphere/commit/c1758a0d0531d551f47c068762f3b9d232ce7164) `sha256:c1907eb901ad89fed61b0be00199854784e359390d2e95435b395acf130f8279`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [96d5fbc0](https://github.com/openshift/vmware-vsphere-csi-driver/commit/96d5fbc02df71945bd76b4bbad3911cf19a2c16e) `sha256:d28604d8a356fca8aa0ea18478685b136e0343b4683b204ac45c467476cdfbb1`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [96d5fbc0](https://github.com/openshift/vmware-vsphere-csi-driver/commit/96d5fbc02df71945bd76b4bbad3911cf19a2c16e) `sha256:4d4c6be47a532ad0194d9b8ef655d30885b05eccfa5b32db8c7c3d58d01bd36b`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b09fbd1ab869df68bfb3e524f86d720bc2b52972)

* [OCPBUGS-89787](https://issues.redhat.com/browse/OCPBUGS-89787): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.4 [#10821](https://github.com/openshift/assisted-service/pull/10821)
* [Full changelog](https://github.com/openshift/assisted-service/compare/f09936a257b0f83cc808ad6e70cfaa8e1632e7eb...b09fbd1ab869df68bfb3e524f86d720bc2b52972)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/50a266a17cef5b9bd79208a6df9b68a73b64b785)

* [OCPBUGS-102504](https://issues.redhat.com/browse/OCPBUGS-102504): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1614](https://github.com/openshift/assisted-installer-agent/pull/1614)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/91a728121bc65eae12af93ae003695d879a8f019...50a266a17cef5b9bd79208a6df9b68a73b64b785)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/2bd36eb01010fcd819b1d42877fb37e2312fceb3)

* [OCPBUGS-102505](https://issues.redhat.com/browse/OCPBUGS-102505): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#64](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/64)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8ba0b37a45510404a842d6dbd84d40a18008e81d...2bd36eb01010fcd819b1d42877fb37e2312fceb3)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/0ee5b5cd2d70fc732d987faa60288fb49d5b0c21)

* [OCPBUGS-102499](https://issues.redhat.com/browse/OCPBUGS-102499): Fix CVE-2026-33814 - replace golang.org/x/net with sustaining fork v0.35.0-sec.4 [#184](https://github.com/openshift/cloud-provider-aws/pull/184)
* [OCPBUGS-88104](https://issues.redhat.com/browse/OCPBUGS-88104): replace golang.org/x/net with sustaining fork v0.35.0-sec.4 [#182](https://github.com/openshift/cloud-provider-aws/pull/182)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/9a7820e81baa6ba8885b47a71416026036d53d79...0ee5b5cd2d70fc732d987faa60288fb49d5b0c21)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/8e2ef1105524156fc3f0e7fa384061a92f980919)

* 🌱 OCPBUGS-123714: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#647](https://github.com/openshift/cluster-api-provider-aws/pull/647)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/01508fcd4a006ce6bd5bcc63de6d9fc4e4d41f4e...8e2ef1105524156fc3f0e7fa384061a92f980919)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/71ff9a8f5252482815f3d7b2b154b5c282f3bfcb)

* [OCPBUGS-102508](https://issues.redhat.com/browse/OCPBUGS-102508): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#316](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/316)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/082e5ff33782f19c39a665967929faf6f1b76c3e...71ff9a8f5252482815f3d7b2b154b5c282f3bfcb)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/368199d197fb5621e59721502cdc33174c23fdac)

* [OCPBUGS-102497](https://issues.redhat.com/browse/OCPBUGS-102497): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#212](https://github.com/openshift/cloud-provider-azure/pull/212)
* [OCPBUGS-79820](https://issues.redhat.com/browse/OCPBUGS-79820), [OCPBUGS-79821](https://issues.redhat.com/browse/OCPBUGS-79821): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] [#192](https://github.com/openshift/cloud-provider-azure/pull/192)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/9ee3b74412f076928e05388af38b0372f484f3a9...368199d197fb5621e59721502cdc33174c23fdac)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/ee96671bcb705b668fc2243aadc1964c7547bb9b)

* [OCPBUGS-102495](https://issues.redhat.com/browse/OCPBUGS-102495): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#131](https://github.com/openshift/azure-disk-csi-driver-operator/pull/131)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/918935767350f9f330b9d6a9c3ee03e9869e7828...ee96671bcb705b668fc2243aadc1964c7547bb9b)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/b8cfd00dd414a79e52b1912ac8bc3f97ef7faf8b)

* [OCPBUGS-102494](https://issues.redhat.com/browse/OCPBUGS-102494): Bump golang.org/x/net to v0.35.0-sec.4 [#162](https://github.com/openshift/azure-file-csi-driver/pull/162)
* [OCPBUGS-79822](https://issues.redhat.com/browse/OCPBUGS-79822): Correct grpc-go patch version [#169](https://github.com/openshift/azure-file-csi-driver/pull/169)
* [OCPBUGS-79822](https://issues.redhat.com/browse/OCPBUGS-79822): Patching openshift-sustaining/grpc-go@v1.67.3-sec.1 [#150](https://github.com/openshift/azure-file-csi-driver/pull/150)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/71fa09b11075da73a8934127a181ee03abd738f8...b8cfd00dd414a79e52b1912ac8bc3f97ef7faf8b)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/7802fb33b509fa14a2240bade473f4e94a84796b)

* [OCPBUGS-102503](https://issues.redhat.com/browse/OCPBUGS-102503): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#119](https://github.com/openshift/azure-file-csi-driver-operator/pull/119)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/9a5a5a6950401d6587e128e2c149fd05cf7201a3...7802fb33b509fa14a2240bade473f4e94a84796b)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/e25b268a7858085bac9779ddd555512f1097c7b1)

* [OCPBUGS-102609](https://issues.redhat.com/browse/OCPBUGS-102609): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#217](https://github.com/openshift/machine-api-provider-azure/pull/217)
* [OCPBUGS-134996](https://issues.redhat.com/browse/OCPBUGS-134996): Fix unit tests by fetching envtest via index [#225](https://github.com/openshift/machine-api-provider-azure/pull/225)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/d526284e26f37f36f9d5297faa801ea117d81f48...e25b268a7858085bac9779ddd555512f1097c7b1)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/dcc4720ec8f3936b2e30f86506726a60c2dd729b)

* [OCPBUGS-102514](https://issues.redhat.com/browse/OCPBUGS-102514): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#521](https://github.com/openshift/baremetal-operator/pull/521)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/483d019146b8495b9299c08c57461747e727f3f7...dcc4720ec8f3936b2e30f86506726a60c2dd729b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/92da6206f7e4e2699a42214831577cc9062acf5d)

* [OCPBUGS-102466](https://issues.redhat.com/browse/OCPBUGS-102466), [OCPBUGS-102524](https://issues.redhat.com/browse/OCPBUGS-102524), [OCPBUGS-88092](https://issues.redhat.com/browse/OCPBUGS-88092), [OCPBUGS-88277](https://issues.redhat.com/browse/OCPBUGS-88277): Use patched x/net fork v0.35.0-sec.4 [#2414](https://github.com/openshift/oc/pull/2414)
* [Full changelog](https://github.com/openshift/oc/compare/44b3ac26e654777e0283759d45a2b3351823fc5e...92da6206f7e4e2699a42214831577cc9062acf5d)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/68c8a13c9219f310372555c732e478bc7bed5d9f)

* [OCPBUGS-102526](https://issues.redhat.com/browse/OCPBUGS-102526): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#993](https://github.com/openshift/cluster-authentication-operator/pull/993)
* [OCPBUGS-133702](https://issues.redhat.com/browse/OCPBUGS-133702): test/e2e: pin Keycloak IdP test image to 24.0 [#1042](https://github.com/openshift/cluster-authentication-operator/pull/1042)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e...68c8a13c9219f310372555c732e478bc7bed5d9f)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/67e1ee2e1842816c1a5f52e4dc1208a2d1c382ec)

* [OCPBUGS-102528](https://issues.redhat.com/browse/OCPBUGS-102528): Bump x/net package in release-4.14 [#392](https://github.com/openshift/cluster-autoscaler-operator/pull/392)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/32854baae386c4d6854d7fd8658fdff75588e919...67e1ee2e1842816c1a5f52e4dc1208a2d1c382ec)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/4aea1b9912dea60ab3c2934cc817cc18b0811cb9)

* [OCPBUGS-102540](https://issues.redhat.com/browse/OCPBUGS-102540): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#289](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/289)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/d4a1162514ecbf248b04e6e8625d17bc2b775ccd...4aea1b9912dea60ab3c2934cc817cc18b0811cb9)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/35a4b10586f166449027b0238c8c17939d99d5c0)

* [OCPBUGS-102531](https://issues.redhat.com/browse/OCPBUGS-102531): Use patched x/net fork v0.35.0-sec.4 [#3101](https://github.com/openshift/cluster-monitoring-operator/pull/3101)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#3106](https://github.com/openshift/cluster-monitoring-operator/pull/3106)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/c58a1bda8cd18c79f15a0ff39cbc9fc06f10569c...35a4b10586f166449027b0238c8c17939d99d5c0)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6157834f1ece733c68def536caf5e9f57c30ea40)

* [OCPBUGS-113758](https://issues.redhat.com/browse/OCPBUGS-113758): Manual feature backport of cert rotation for whereabouts [#3139](https://github.com/openshift/cluster-network-operator/pull/3139)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/af41a362017b8f85e180d2f5e0db8f16c7db4b94...6157834f1ece733c68def536caf5e9f57c30ea40)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/b4cc59ed4f4dfbe56c89f406046c24a13f002079)

* [OCPBUGS-102558](https://issues.redhat.com/browse/OCPBUGS-102558): Use patched x/net fork v0.35.0-sec.4 [#448](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/448)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/09d62091346f86f54938587acfd680f6bd6b7af6...b4cc59ed4f4dfbe56c89f406046c24a13f002079)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/95c9e49005d7835cb2a55df44b0c8a075506c678)

* [OCPBUGS-102567](https://issues.redhat.com/browse/OCPBUGS-102567): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#729](https://github.com/openshift/cluster-storage-operator/pull/729)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/133655e33ac7c8623be39dd3d3f7dd09d82c99ca...95c9e49005d7835cb2a55df44b0c8a075506c678)


### [console](https://github.com/openshift/console/tree/4eee8ab810e00df4b858d173a8235288d1282f74)

* [OCPBUGS-133311](https://issues.redhat.com/browse/OCPBUGS-133311): Stabilize legacy OperatorHub Cypress waits [#17423](https://github.com/openshift/console/pull/17423)
* [OCPBUGS-98416](https://issues.redhat.com/browse/OCPBUGS-98416): CVE-2026-59869 [#16754](https://github.com/openshift/console/pull/16754)
* [OCPBUGS-92716](https://issues.redhat.com/browse/OCPBUGS-92716): CVE-2026-46597 openshift4/ose-console: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.14.z] [#16963](https://github.com/openshift/console/pull/16963)
* [OCPBUGS-105794](https://issues.redhat.com/browse/OCPBUGS-105794): Fix and re-enable operator-install-single-namespace e2e test [#17170](https://github.com/openshift/console/pull/17170)
* Fix for OCPBUGS-92074: CVE-2026-44990 [#16721](https://github.com/openshift/console/pull/16721)
* [OCPBUGS-100511](https://issues.redhat.com/browse/OCPBUGS-100511): Bump postcss to fix CVE-2026-45623 [#17109](https://github.com/openshift/console/pull/17109)
* [OCPBUGS-105791](https://issues.redhat.com/browse/OCPBUGS-105791): Disable failing OLM and pipelines e2e tests to unblock CI [#16956](https://github.com/openshift/console/pull/16956)
* [OCPBUGS-90614](https://issues.redhat.com/browse/OCPBUGS-90614): Fix JSON annotation parsing to prevent OperatorHub crash [#16659](https://github.com/openshift/console/pull/16659)
* [OCPBUGS-87989](https://issues.redhat.com/browse/OCPBUGS-87989): [release-4.14] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16597](https://github.com/openshift/console/pull/16597)
* [OCPBUGS-77116](https://issues.redhat.com/browse/OCPBUGS-77116): [release-4.14] CVE-2026-26996 Bump minimatch library [#16348](https://github.com/openshift/console/pull/16348)
* Fix for OCPBUGS-81595: CVE-2026-4800 [#16568](https://github.com/openshift/console/pull/16568)
* [Full changelog](https://github.com/openshift/console/compare/5e1c9254711e3a7e4e2bceddbe8d767eff7acbbe...4eee8ab810e00df4b858d173a8235288d1282f74)


### [console-operator](https://github.com/openshift/console-operator/tree/5c5def635b2463cf5d1b3692cd0456071ebd2956)

* [OCPBUGS-102556](https://issues.redhat.com/browse/OCPBUGS-102556): Use patched x/net fork v0.35.0-sec.4 [#1233](https://github.com/openshift/console-operator/pull/1233)
* [Full changelog](https://github.com/openshift/console-operator/compare/0920157ed70793287449904114540bc8bb1a31eb...5c5def635b2463cf5d1b3692cd0456071ebd2956)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/9840c494b308f9c502480af0454b4eb5556da415)

* [OCPBUGS-102545](https://issues.redhat.com/browse/OCPBUGS-102545): Use patched x/net fork v0.35.0-sec.4 [#260](https://github.com/openshift/csi-driver-manila-operator/pull/260)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/dfad3e86768684058148cc46c4ed3d97ae978f2b...9840c494b308f9c502480af0454b4eb5556da415)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/c2754ef90795717edf87c74028e394ccbf6feedd)

* [OCPBUGS-102559](https://issues.redhat.com/browse/OCPBUGS-102559): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#531](https://github.com/openshift/csi-driver-shared-resource/pull/531)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/9232c1ff48df333dadc9f7dc275649866e55ced0...c2754ef90795717edf87c74028e394ccbf6feedd)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/d1f5524196a557028302c0fcef7db24b65b17866)

* [OCPBUGS-102561](https://issues.redhat.com/browse/OCPBUGS-102561): Bump golang.org/x/net to v0.35.0-sec.4 [#119](https://github.com/openshift/csi-external-attacher/pull/119)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/06e8ce0d36f7c23f0906327cd66ec6bd15165366...d1f5524196a557028302c0fcef7db24b65b17866)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/b8673b66785805bfb53569362a7c5ef7d4ca7488)

* [OCPBUGS-102570](https://issues.redhat.com/browse/OCPBUGS-102570): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.3 [#242](https://github.com/openshift/csi-external-snapshotter/pull/242)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/a6834536936b16dcd9ee81a8753a2ef6dc208541...b8673b66785805bfb53569362a7c5ef7d4ca7488)


### [docker-builder](https://github.com/openshift/builder/tree/a9e274ecfc265f9f5b7a3ebb4a2e77a93d036be3)

* [OCPBUGS-89417](https://issues.redhat.com/browse/OCPBUGS-89417), [OCPBUGS-89800](https://issues.redhat.com/browse/OCPBUGS-89800), [OCPBUGS-90234](https://issues.redhat.com/browse/OCPBUGS-90234), [OCPBUGS-92322](https://issues.redhat.com/browse/OCPBUGS-92322), [OCPBUGS-92552](https://issues.redhat.com/browse/OCPBUGS-92552), [OCPBUGS-92703](https://issues.redhat.com/browse/OCPBUGS-92703): Bump golang.org/x/crypto to fix CVE-2026-39828,CVE-2026-39829,CVE-2026-39830,CVE-2026-39831,CVE-2026-39832,CVE-2026-46597 [#545](https://github.com/openshift/builder/pull/545)
* [Full changelog](https://github.com/openshift/builder/compare/57539b86d3c60b773090f6dc05790aad032444c3...a9e274ecfc265f9f5b7a3ebb4a2e77a93d036be3)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/ee84dee6a6188af9ba9f0f40ef9f9e76eac7c2b5)

* [OCPBUGS-102607](https://issues.redhat.com/browse/OCPBUGS-102607): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#194](https://github.com/openshift/machine-api-provider-gcp/pull/194)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b4b551be8c8bca597db25cae752277da957dfacd...ee84dee6a6188af9ba9f0f40ef9f9e76eac7c2b5)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3524e0ca5eb96b775e2a5c59f3803c6ed8b879ab)

* [OCPBUGS-102579](https://issues.redhat.com/browse/OCPBUGS-102579): Use patched x/net fork v0.35.0-sec.4 [#135](https://github.com/openshift/gcp-pd-csi-driver/pull/135)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03...3524e0ca5eb96b775e2a5c59f3803c6ed8b879ab)


### [haproxy-router](https://github.com/openshift/router/tree/5455596d2b290d92075cb65b7778647203750c22)

* [OCPBUGS-102585](https://issues.redhat.com/browse/OCPBUGS-102585): Use patched x/net fork v0.35.0-sec.4 [#856](https://github.com/openshift/router/pull/856)
* [Full changelog](https://github.com/openshift/router/compare/20c72c83cc4ba4e2250e0de58709d100898aeb7b...5455596d2b290d92075cb65b7778647203750c22)


### [hypershift](https://github.com/openshift/hypershift/tree/463e60b5ecfbde6866651e3bd4a9bf72646a5e9a)

* [release 4.14] Fix OCPBUGS-99086: CVE-2026-16242 konnectivity agent auth [#9131](https://github.com/openshift/hypershift/pull/9131)
* [Full changelog](https://github.com/openshift/hypershift/compare/bd9d1ff4492c01695dbde12e1bdbcb679e98afc9...463e60b5ecfbde6866651e3bd4a9bf72646a5e9a)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/40dd77cd9278e078fa129f8c5afb3dd748ab2a97)

* [OCPBUGS-102580](https://issues.redhat.com/browse/OCPBUGS-102580): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#118](https://github.com/openshift/cloud-provider-ibm/pull/118)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/f39488c53ab5151cebf11e8f82510a255a8005d3...40dd77cd9278e078fa129f8c5afb3dd748ab2a97)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/be8d8432dafa168febfd5efbcc9c13a8aef1f9ec)

* [OCPBUGS-79836](https://issues.redhat.com/browse/OCPBUGS-79836): Bump google.golang.org/grpc to v1.79.3 [#156](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/156)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/b10d9f7edea77d69dd79729007d6fbd1e380f52d...be8d8432dafa168febfd5efbcc9c13a8aef1f9ec)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/257866a6aeb335c5f89896d4ee415b43426426a4)

* [OCPBUGS-102582](https://issues.redhat.com/browse/OCPBUGS-102582): Use patched x/net fork v0.35.0-sec.4 [#185](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/185)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/a38b8d883fc282608c22d8e0dcde24aaa97de8bf...257866a6aeb335c5f89896d4ee415b43426426a4)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/8fd3b84526e7c8258035bffbd04ee5a1f2f7697c)

* [OCPBUGS-102599](https://issues.redhat.com/browse/OCPBUGS-102599): Bump golang.org/x/net to v0.35.0-sec.4 [#63](https://github.com/openshift/ibm-vpc-node-label-updater/pull/63)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/01349bbdf3c459146c5e58b0a96526a2ba78391c...8fd3b84526e7c8258035bffbd04ee5a1f2f7697c)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/c747ee2102a8fc19971b3161f1439b9bb3740ea8)

* [OCPBUGS-102592](https://issues.redhat.com/browse/OCPBUGS-102592): Replace golang.org/x/net with openshift-sustaining/net [#168](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/168)
* [OCPBUGS-115546](https://issues.redhat.com/browse/OCPBUGS-115546): Fetch envtest assets from the controller-tools releases [#179](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/179)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/b69846edfe7bb171f60229dc7a7b43ea64513644...c747ee2102a8fc19971b3161f1439b9bb3740ea8)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1c221dfad369f41185d93e34e7356fc2395ec9a1)

* [OCPBUGS-102612](https://issues.redhat.com/browse/OCPBUGS-102612): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#108](https://github.com/openshift/machine-api-provider-ibmcloud/pull/108)
* NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket [#111](https://github.com/openshift/machine-api-provider-ibmcloud/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/a63c6aabeb484cf8d7f976edc80622de959abde4...1c221dfad369f41185d93e34e7356fc2395ec9a1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/bacdaa78a2c394735a3da4f997774200b4668c9f)

* [OCPBUGS-102605](https://issues.redhat.com/browse/OCPBUGS-102605): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.3 to mitigate CVE-2026-33814 [#1371](https://github.com/openshift/insights-operator/pull/1371)
* [Full changelog](https://github.com/openshift/insights-operator/compare/acc99f557871cbf137f57a540f26989c27bb1301...bacdaa78a2c394735a3da4f997774200b4668c9f)


### [ironic](https://github.com/openshift/ironic-image/tree/772c29f67d70b53d1d096f7870ace67d806ed1f0)

* [OCPBUGS-97989](https://issues.redhat.com/browse/OCPBUGS-97989): bump openstack-ironic pin for CVE-2026-44918 fix [#920](https://github.com/openshift/ironic-image/pull/920)
* [OCPBUGS-97806](https://issues.redhat.com/browse/OCPBUGS-97806): bump openstack-ironic pin for CVE-2026-54423 fix(release-4.14) [#879](https://github.com/openshift/ironic-image/pull/879)
* [Full changelog](https://github.com/openshift/ironic-image/compare/3b9c179dd961fca96316e797831ddc19acafb04a...772c29f67d70b53d1d096f7870ace67d806ed1f0)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/8465c6bf8e6ede4e38eb4f912d355a8225524f9a)

* [OCPBUGS-99891](https://issues.redhat.com/browse/OCPBUGS-99891): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#312](https://github.com/openshift/ironic-agent-image/pull/312)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/cc4f46696731ac4262df5ba4d1acf42fdf27e08e...8465c6bf8e6ede4e38eb4f912d355a8225524f9a)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/e6e54eb484457f7e25d61e0d12ac4a01c019ecbb)

* [OCPBUGS-102606](https://issues.redhat.com/browse/OCPBUGS-102606): Use patched x/net fork v0.35.0-sec.4 [#160](https://github.com/openshift/kube-state-metrics/pull/160)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#178](https://github.com/openshift/kube-state-metrics/pull/178)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/db0c54994a6aad9155a94513eaa3480c1812f45e...e6e54eb484457f7e25d61e0d12ac4a01c019ecbb)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/6068e9c1cc4a20f0230592618a80180740f80ebd)

* [OCPBUGS-83659](https://issues.redhat.com/browse/OCPBUGS-83659): Bump google.golang.org/grpc to v1.79.3 [#104](https://github.com/openshift/kubevirt-csi-driver/pull/104)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/48fafc4a9edc202c5ff674b5f631568b4d62f7f5...6068e9c1cc4a20f0230592618a80180740f80ebd)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/670c8cc58061c5c8f193b7bfda1ad345c1164665)

* [OCPBUGS-102603](https://issues.redhat.com/browse/OCPBUGS-102603): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#1549](https://github.com/openshift/machine-api-operator/pull/1549)
* [OCPBUGS-132860](https://issues.redhat.com/browse/OCPBUGS-132860): Fix unit and vsphere namespace tests [#1587](https://github.com/openshift/machine-api-operator/pull/1587)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/19133ba974fbf8039a1551702ca7f21f91689ffb...670c8cc58061c5c8f193b7bfda1ad345c1164665)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/49a860a571ba2336bce27d49ddca224fbf0b8df0)

* [OCPBUGS-102601](https://issues.redhat.com/browse/OCPBUGS-102601): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#190](https://github.com/openshift/image-customization-controller/pull/190)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/1bff221eb64c41124fdf72c90b72498197291a6a...49a860a571ba2336bce27d49ddca224fbf0b8df0)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/987252d4e8a997e7e95e0366cbfa62b7b806db08)

* NO-JIRA: Updating monitoring-plugin-container image to be consistent with ART for 4.14 [#1388](https://github.com/openshift/monitoring-plugin/pull/1388)
* [OU-1589](https://issues.redhat.com/browse/OU-1589): [release-4.14] sanitize linkified URLs in alert annotations [#1376](https://github.com/openshift/monitoring-plugin/pull/1376)
* [OCPBUGS-127151](https://issues.redhat.com/browse/OCPBUGS-127151): Replace react-linkify to fix CVE-2026-59887 [#1315](https://github.com/openshift/monitoring-plugin/pull/1315)
* NO-JIRA: [release-4.14] Sanitize alert runbook URLs [#1294](https://github.com/openshift/monitoring-plugin/pull/1294)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/0a9fb3af5b891c689ffa50446a4b7820372e6e79...987252d4e8a997e7e95e0366cbfa62b7b806db08)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/75d5cab5751853a0693f911202375b2933790662)

* [OCPBUGS-136607](https://issues.redhat.com/browse/OCPBUGS-136607): [release-4.14] Sync OWNERS and OWNERS_ALIASES with master [#399](https://github.com/openshift/oauth-proxy/pull/399)
* [OCPBUGS-112093](https://issues.redhat.com/browse/OCPBUGS-112093): bugfix: rewrite open redirect strings to '/' [#388](https://github.com/openshift/oauth-proxy/pull/388)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/420a79bbdcc06b67d055dd6ba6c7e4e143c8dc44...75d5cab5751853a0693f911202375b2933790662)


### [oauth-server](https://github.com/openshift/oauth-server/tree/91c2d9056bf12edf1e086a4de6911ae6512fdd1c)

* [OCPBUGS-87064](https://issues.redhat.com/browse/OCPBUGS-87064): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#276](https://github.com/openshift/oauth-server/pull/276)
* [Full changelog](https://github.com/openshift/oauth-server/compare/35f4739f342a5838fe6ceaf7a459c78f3777166d...91c2d9056bf12edf1e086a4de6911ae6512fdd1c)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/a39d1b2a065fe4782bdad5afff32fc34be88404d)

* [OCPBUGS-129616](https://issues.redhat.com/browse/OCPBUGS-129616): v1 accept catalog root entries and relative symlink targets [#1582](https://github.com/openshift/oc-mirror/pull/1582)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/056043d10e0713432e541d58a285f41829c0be6e...a39d1b2a065fe4782bdad5afff32fc34be88404d)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/b44a8a8edff04706b4e3371eec902d311c4596e6)

* NO-ISSUE: synchronize OWNERS from main branch [#148](https://github.com/openshift/openshift-state-metrics/pull/148)
* [OCPBUGS-102633](https://issues.redhat.com/browse/OCPBUGS-102633): CVE-2026-33814 openshift4/ose-openshift-state-metrics-rhel8:Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.14.z] [#136](https://github.com/openshift/openshift-state-metrics/pull/136)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf...b44a8a8edff04706b4e3371eec902d311c4596e6)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/188c9249d4a09d2cb97291c663c03b5b5c315cd6)

* [OCPBUGS-102630](https://issues.redhat.com/browse/OCPBUGS-102630): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#1373](https://github.com/openshift/operator-framework-olm/pull/1373)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/905f2870ad2518975103720e89a41062b448739f...188c9249d4a09d2cb97291c663c03b5b5c315cd6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8260351058debcdd785dbdc675ba4f800143204f)

* [OCPBUGS-97816](https://issues.redhat.com/browse/OCPBUGS-97816): External gateway: Remove routes for external gateway pods in terminating or not ready state [#3286](https://github.com/openshift/ovn-kubernetes/pull/3286)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/bb845e546e1fff0f7a0db53d03d38e074f67c92f...8260351058debcdd785dbdc675ba4f800143204f)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/fef5ee102fedbb4fdab01a6f36abdf13d027c7f0)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#405](https://github.com/openshift/prom-label-proxy/pull/405)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af40ed09f69fab6c4bf054436f537a3e569d5f02...fef5ee102fedbb4fdab01a6f36abdf13d027c7f0)


### [prometheus](https://github.com/openshift/prometheus/tree/3952d910f990bdfecf622001fc7e3e6b92ad939d)

* [OCPBUGS-102651](https://issues.redhat.com/browse/OCPBUGS-102651): Use patched x/net fork v0.35.0-sec.4 [#376](https://github.com/openshift/prometheus/pull/376)
* NO-ISSUE: synchronize OWNERS from main branch [#390](https://github.com/openshift/prometheus/pull/390)
* [OCPBUGS-88588](https://issues.redhat.com/browse/OCPBUGS-88588): remote: validate snappy decoded length before allocation in read endpoint [#353](https://github.com/openshift/prometheus/pull/353)
* [Full changelog](https://github.com/openshift/prometheus/compare/e62d2c6d0239482f97dee43aa92bd463b2c5cb95...3952d910f990bdfecf622001fc7e3e6b92ad939d)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/590e1a05caa67cae517def4a1e880c6171270efe)

* [OCPBUGS-98172](https://issues.redhat.com/browse/OCPBUGS-98172): bump github.com/hashicorp/memberlist to a forked version to fix CVE-2026-14362 [#205](https://github.com/openshift/prometheus-alertmanager/pull/205)
* NO-JIRA: synchronize OWNERS with main [#200](https://github.com/openshift/prometheus-alertmanager/pull/200)
* [OCPBUGS-100361](https://issues.redhat.com/browse/OCPBUGS-100361): Set testdata CA expiry to 20 years from issue date (#4112) [#147](https://github.com/openshift/prometheus-alertmanager/pull/147)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/f4e6d02ebd3d35951780ef97ce0786f41974f237...590e1a05caa67cae517def4a1e880c6171270efe)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/8d4f0a99e6894cb8c40df2ce6d0f426db25b05e0)

* NO-ISSUE: synchronize OWNERS from main branch [#417](https://github.com/openshift/prometheus-operator/pull/417)
* [OCPBUGS-102650](https://issues.redhat.com/browse/OCPBUGS-102650): Fix CVE-2026-33814 [#406](https://github.com/openshift/prometheus-operator/pull/406)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/a4b845a7ae4e1ffb62eae963406481f1c3456bfe...8d4f0a99e6894cb8c40df2ce6d0f426db25b05e0)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/4fb4b974fb9cd23f2a43ea404499e2031b36aabc)

* [OCPBUGS-102636](https://issues.redhat.com/browse/OCPBUGS-102636): Use patched x/net fork v0.35.0-sec.4 [#192](https://github.com/openshift/node_exporter/pull/192)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#204](https://github.com/openshift/node_exporter/pull/204)
* [Full changelog](https://github.com/openshift/node_exporter/compare/5ee0a9d957a04756ba76623a8bbc12be9949109f...4fb4b974fb9cd23f2a43ea404499e2031b36aabc)


### [telemeter](https://github.com/openshift/telemeter/tree/51c7af35ae96f330d78686baa3ed721efa183b56)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#625](https://github.com/openshift/telemeter/pull/625)
* [Full changelog](https://github.com/openshift/telemeter/compare/1f7268163afc74f9f3c1ff89d8c0149760694e6c...51c7af35ae96f330d78686baa3ed721efa183b56)


### [tests](https://github.com/openshift/origin/tree/1eb13b4230b2b429412c22e8389bc01758a37fdb)

* [OCPBUGS-130860](https://issues.redhat.com/browse/OCPBUGS-130860): stage the creation of test pods to minimize etcd impact [#31744](https://github.com/openshift/origin/pull/31744)
* [Full changelog](https://github.com/openshift/origin/compare/d885e43f7985efe72dbf3e949ea3caf7dcee81b8...1eb13b4230b2b429412c22e8389bc01758a37fdb)


### [thanos](https://github.com/openshift/thanos/tree/6de0d067ec193a1e609abb0b3596f75f0c86f2e8)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.14] [#219](https://github.com/openshift/thanos/pull/219)
* [Full changelog](https://github.com/openshift/thanos/compare/25bdf4b7cf52346785549eb39b3c62803dd95688...6de0d067ec193a1e609abb0b3596f75f0c86f2e8)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/b988d63177a59144dccdf0fd6dfc672a6cc0d30a)

* [OCPBUGS-102672](https://issues.redhat.com/browse/OCPBUGS-102672): Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.14 [#141](https://github.com/openshift/cloud-provider-vsphere/pull/141)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/b1aaff4cb5acd1df600322dbbf5a7b8ee65952e0...b988d63177a59144dccdf0fd6dfc672a6cc0d30a)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/28c44013328cc62a6370073fe9c74c5db8997279)

* [OCPBUGS-102671](https://issues.redhat.com/browse/OCPBUGS-102671): Use patched x/net fork v0.35.0-sec.4 [#365](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/365)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/6593723fbb3189b25df4634e3b75bb02b5b9e611...28c44013328cc62a6370073fe9c74c5db8997279)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/47656bdd6f3f58168e79aa6f8a7141f64c8a456b)

* [OCPBUGS-102657](https://issues.redhat.com/browse/OCPBUGS-102657): Bump golang.org/x/net to v0.35.0-sec.4 [#237](https://github.com/openshift/vsphere-problem-detector/pull/237)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/664a9e321965e1a6c98cf2551506a8b10a6cf2f6...47656bdd6f3f58168e79aa6f8a7141f64c8a456b)