# 4.17.50

Created: 2026-02-27 00:10:51 +0000 UTC

Image Digest: `sha256:fffcbd70f5251c30d23bdcc87900e3eaf8b3ae4945a29618c26277669b453b1d`


## Changes from 4.17.27

### Components

* Kubectl 1.30.5
* Kubernetes upgraded from 1.30.11 to 1.30.14
* Kubernetes Tests upgraded from 1.30.0 to 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202504232017-0 to 417.94.202602251654-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| StreamingCollectionEncodingToJSON <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [2bb5b316](https://github.com/openshift/aws-ebs-csi-driver/commit/2bb5b316f5941788e398f22974f9c816dd37d428) `sha256:adfdd4d49d50e0036e1370fb053d10fbb0cec8fd06ce2fc394cb377691c5dc6d`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9d401670](https://github.com/openshift/aws-encryption-provider/commit/9d4016701d355cd3a47f5ebe10f266d8971febc6) `sha256:1d3817d8a6dea4669961faaac9185ebab2fdd07bd9eab09a38d5443adceac04b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [80efc4ea](https://github.com/openshift/aws-pod-identity-webhook/commit/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56) `sha256:00ab13647c5e161142476256ef679e6daaa29e9e87de1a31de0e4d8950fe091e`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [626ecd1c](https://github.com/openshift/cloud-provider-azure/commit/626ecd1c32f50953e84fd1cb499077d52fe53e43) `sha256:4fa65c9e93fb4d9f5e6fe1fa07d938d9d2d83792af4e4e245fc36f2e7bdeb448`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [626ecd1c](https://github.com/openshift/cloud-provider-azure/commit/626ecd1c32f50953e84fd1cb499077d52fe53e43) `sha256:05285f5b7d4c6dfa2dd9b02a8cf7a9e4aff3acff52774800135d8aedaf3f331a`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d359bfe5](https://github.com/openshift/cluster-api-provider-azure/commit/d359bfe56764238e2881f0f003fd8206b2b40dec) `sha256:26f8ab1e8ae77916c537c09c4fa3db1afaf09f5d277e1e55fab2fdf9219b60ce`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [a544f30b](https://github.com/openshift/azure-disk-csi-driver/commit/a544f30bb48dbf6325efbb75e7114b9837c32505) `sha256:a865b7d34ac21738ce72d3842390a19802ca6fa8727c2a6b99f64e0958e99d40`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9f4c38c2](https://github.com/openshift/azure-file-csi-driver/commit/9f4c38c2bb28347ed5c4fd082666bfdea7382243) `sha256:d6adf4ead994113f5119194ea67ace17d84b1aeb3d8ac5de7c66b3b8df24e894`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [6707f899](https://github.com/openshift/azure-workload-identity/commit/6707f899c269e98a102ac72900bb96fa826ba652) `sha256:a0e986976bbf4558a17cdaa790f78e217fb67e150000b25e8e61035c4e14f111`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [ea4a8878](https://github.com/openshift/cluster-autoscaler-operator/commit/ea4a88786cf9b237dc446e01fdacd6fd65b73144) `sha256:a43c1c107623b4ba1dcd173b1e70905d01b2b88b4f2b8ce7d6b91d9835cb57e9`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:a5f36a10b5e39d6b4d10801e820cd5b1cb851a323e3323e22c49c7b6355d3b5f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [77ef4fc5](https://github.com/openshift/cluster-api/commit/77ef4fc55392dd02232da73cc06a504659d08b48) `sha256:95f31108170fb4fa1a122fe6a800f05f7d6b875ecc98e5ab9c553f89a0170fbf`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:abd7039a4f460a61d1b48ec2afc1a151c3c809390d43d6d831815b18d5917337`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:1b304eae1056c3593775993e367e469a957179e118a6f8844378dd018a46f102`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [81507f04](https://github.com/openshift/cluster-dns-operator/commit/81507f04686df3e16793b270084ead0a2a67fb38) `sha256:fe257e79c8977ab133869db9ce7484224d22b0354a9378bd4df80368c6c5adc9`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [aed5f6c7](https://github.com/openshift/cluster-api-operator/commit/aed5f6c74a0e174901709f18eecad6573cd80784) `sha256:de250087f41c77e0a09b95a3b17761bfda8f76d99a4eb79c29f1190cfab72771`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:29072dbfe8cab53df48e12ed62d2bef9306b3e9454f4f6bcc2b6557b187fead9`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e31b7775](https://github.com/openshift/cluster-olm-operator/commit/e31b7775ef903ff0c35f95656af27afa2dddd3e4) `sha256:1a0f8a7d49e49a95ab21cd40337a5b395404aeeaa416018c3483d40f874342f7`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [2b2ba3be](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e) `sha256:f996e76b3a7e554b4586291584c25bb2f1b63d150eca1e38c607e7d2df147053`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:f4bc290b04ef25f5a359baf48a49784b2de7d5a00350f9998f385b836bbc55e8`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:640f302d82c67acdeb2c661bde55b266fa99e30ee542d34a0242b63b23034cbb`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [efc99a2a](https://github.com/openshift/csi-driver-manila-operator/commit/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8) `sha256:c1031c6e0b96fed0e110aaa06ad620509b7aed14bf977d09b5f997f5cf4447a8`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c095a1f2](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c095a1f2bbd0c365b74e548498d13f8463c69eb2) `sha256:634f64a67abf46aad47bba1602318cebc8da5173af85a4aa9764291687908617`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [c3fe8e2e](https://github.com/openshift/csi-external-attacher/commit/c3fe8e2ec46929fbad110b392337960be3c9d6a0) `sha256:adefd6ab96adbc931c88213c3618b594f18bc000e6ea7dcec155ff9432bc6615`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [fe460e56](https://github.com/openshift/csi-external-provisioner/commit/fe460e56e19dd3cc5497fd068083da9850fc1996) `sha256:f2934c3a342867bcf638642cc9f413d557e2c541d5f5623f858c2726a412b5f7`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:d7a101256b23eb8e7952ef943c63bacc41b099243a1eaa078f3f92b2683ac2f7`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:274c07d9e670efe09f08f56e851857c63f22de7604a74c3ba07be81a5fb7e724`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:20ade0f46e3eed7d609358ff7cb0c9a661f268d909506652100bbe1549d7d90b`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:0743e3124b243ce7be4cc0a0c797ac69e53d40e3e995f0299d6b7986b20eaf08`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [9c561f2d](https://github.com/openshift/cluster-api-provider-gcp/commit/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f) `sha256:0db611b429c7f0c0d172be3f2ed0bbaaf7766102f978711b90dbf1b8dca995d3`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [c23b064f](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/c23b064fe303ec760c0de6204577d10ef0b0f63d) `sha256:e4c93d506d81888b1849753bb5d649f9ab6a1830210237d3e0377f09c202c25d`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:4f75baed8e721e80321ae2c11969ea681b77d082462811f8fb76e7f5d59edef5`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:c784e40521f1e8c3d3f35631fbf08308b070548c0f60f6e12603d1ee7be3d7cd`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [0b8dd7ab](https://github.com/openshift/machine-api-provider-ibmcloud/commit/0b8dd7abc69b9a2369005517846c95c619abf613) `sha256:1b5a85f415910d774a240fe05bdf96e2f36bd5724c8eeea710b6a5af3f28ddc6`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [bc5b8a2c](https://github.com/openshift/ironic-static-ip-manager/commit/bc5b8a2c3209873231a7eabd83ace578c8e182f7) `sha256:7639e55a39d5cc32c531edfc2e7dc63634950141512e705a7c557c5e7811959b`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:02756b68014d85cc80a723fb3aae6adac4923c877ad559757efa4414c01d9490`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [462e63f6](https://github.com/openshift/kube-state-metrics/commit/462e63f6223817d3610f030f6166a790d793c572) `sha256:a1309bfb7149dae293769d938be725eb844635b2f6431cf2f56f15fa25f8a0af`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [757a8894](https://github.com/openshift/kubevirt-csi-driver/commit/757a8894fe4f5b569210ec695fe0615e291f42ec) `sha256:50d602d604921b082acd62ea742f2c3a1cbb7a419c7e489a02f1825621f6a379`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:980585040470619dc58909ad3daf38139974518be900e6c2165e87a59ffe1d09`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [f85666be](https://github.com/openshift/machine-os-images/commit/f85666be7889cd6ba95926546a005fed5f3cb68a) `sha256:c5e5bb25b50a1ee46ee3b608603cfc6d397c851e99896a848f21aae755e8c887`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:09f2a75dc4827e32b7e5c796978b04101a222f31c168bab8074b4c184694801b`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:0f4ce660f76b45ad486b6afd3f965e047b2dfad8d479f5c502db33d462f4852f`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:9093749e307b3489ab3413f7116e220a4eae07e234aa991751dcdce02e0f08be`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [f89b6dbc](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2) `sha256:dafdcb60c6da9fd9e567fbf5fbaaa4df15a704a412464d87c0a112d60d09ac90`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:3f71a5160cdb479ecc84c319c8a5041127c6c6e761544ec5d95560ed99ee7f5b`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [aaa6afa9](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e) `sha256:ed7949eeedbf729af7a0c1c0ad1cef0a00b358056a2b9fdd64e5e10a7309d7b6`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [f6f037c5](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/f6f037c556d7fb8155c83e20e951944aecd102c6) `sha256:3ec0291746609be26c900737bcbd1e549fc8dc81b621acdfe5752bfff0fb0c1c`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [bd3d72e5](https://github.com/openshift/cloud-provider-powervs/commit/bd3d72e5095c950964f64871253e4da4ad2acbe7) `sha256:86c0bb731c82dba8c7006153a851cb0601de56995251ba1ac7c4a5e1c931c934`
* rhel-coreos `sha256:b4995c1a252cf38f93f131b71835160c035b4391945700423e93563dc69a0b7e`
* rhel-coreos-extensions `sha256:ac8a3195ce4529501dff83158374a12eff22e0b14ad013a432d991b48a2f44e6`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [097d823b](https://github.com/openshift/cloud-provider-vsphere/commit/097d823bd10abbc6cd016c34a1c5c3cd1b514031) `sha256:9457fd80b9de069cb2e758be49d98ef8354105e2756d2702beb531b7b482d626`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e1de36a2](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d) `sha256:b0183d64cd361bf69045014bbb00daf770ca8c0147d1f00dbf60513600b8521f`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bcecf7265015a4db74aa613da2294aae92b355a8)

* NO-ISSUE: pin gotestsum to v1.12.3 (#8017) [#8017](https://github.com/openshift/assisted-service/pull/8017)
* [OCPBUGS-58634](https://issues.redhat.com/browse/OCPBUGS-58634), [OCPBUGS-58639](https://issues.redhat.com/browse/OCPBUGS-58639): Bump glog to v1.2.5 in release-4.17 (#7895) [#7895](https://github.com/openshift/assisted-service/pull/7895)
* [OCPBUGS-47627](https://issues.redhat.com/browse/OCPBUGS-47627): dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7724) [#7724](https://github.com/openshift/assisted-service/pull/7724)
* [OCPBUGS-51230](https://issues.redhat.com/browse/OCPBUGS-51230): Revert go-jose from v4.0.5 to v0.3.04 (#7605) [#7605](https://github.com/openshift/assisted-service/pull/7605)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0657bd107b1df4487134702dc39b2111d888b276...bcecf7265015a4db74aa613da2294aae92b355a8)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/63b2da6ef83a82468cf0c5baea4fef27a36be267)

* [OCPBUGS-58649](https://issues.redhat.com/browse/OCPBUGS-58649): Bump glog pkg to 1.2.4 (#1182) [#1182](https://github.com/openshift/assisted-installer/pull/1182)
* Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.17 (#1088) [#1088](https://github.com/openshift/assisted-installer/pull/1088)
* Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.17 (#1087) [#1087](https://github.com/openshift/assisted-installer/pull/1087)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/6a8ebdd16729ed8f81c83a2a3efbd81be2495637...63b2da6ef83a82468cf0c5baea4fef27a36be267)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/df4660b4ca1ae19ccff3f2dba31e2be14b2a1d09)

* [OCPBUGS-58654](https://issues.redhat.com/browse/OCPBUGS-58654), [OCPBUGS-58659](https://issues.redhat.com/browse/OCPBUGS-58659): Bump glog to v1.2.5 in release-4.17 (#1070) [#1070](https://github.com/openshift/assisted-installer-agent/pull/1070)
* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#986) [#986](https://github.com/openshift/assisted-installer-agent/pull/986)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/ded6f9d332bd26f21405a630b6266cef9c75d3f0...df4660b4ca1ae19ccff3f2dba31e2be14b2a1d09)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b359528186b9df8ff5796f2bbfdab7f6bbaad491)

* [OCPBUGS-68141](https://issues.redhat.com/browse/OCPBUGS-68141): bump github.com/sirupsen/logrus to v1.9.3 [#238](https://github.com/openshift/agent-installer-utils/pull/238)
* append .0 to go.mod version [#110](https://github.com/openshift/agent-installer-utils/pull/110)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3b99303bc6d1c85465139f1e1c4847c038e4dc8f...b359528186b9df8ff5796f2bbfdab7f6bbaad491)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/ea6605595cf1a0c94fb0fa82a2ceec15970da655)

* append .0 to go.mod version [#82](https://github.com/openshift/apiserver-network-proxy/pull/82)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/cd4264165057a0098c5d6e0b4e8727b4232cc3ce...ea6605595cf1a0c94fb0fa82a2ceec15970da655)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/144bace6c7a2ae52fcab3dabb2d9636a1465365a)

* append .0 to go.mod version [#109](https://github.com/openshift/cloud-provider-aws/pull/109)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/8c77f418214630cb5f3e0b1cf68f3f3d881e5f0a...144bace6c7a2ae52fcab3dabb2d9636a1465365a)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/9fda7bd72f4f44d6755d13f5351c1bb8cc55f6b0)

* [OCPBUGS-61940](https://issues.redhat.com/browse/OCPBUGS-61940): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#571](https://github.com/openshift/cluster-api-provider-aws/pull/571)
* [OCPBUGS-58669](https://issues.redhat.com/browse/OCPBUGS-58669), [OCPBUGS-58674](https://issues.redhat.com/browse/OCPBUGS-58674): bump github.com/golang/glog to v1.2.5 [#559](https://github.com/openshift/cluster-api-provider-aws/pull/559)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/d09f3179fdc353006b1cbb16bab3e740dcb586be...9fda7bd72f4f44d6755d13f5351c1bb8cc55f6b0)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/1a178e796560d227a903c1603e6fcb5a341f20ba)

* [OCPBUGS-64704](https://issues.redhat.com/browse/OCPBUGS-64704): Use 127.0.0.1 for healtz http-endpoints [#462](https://github.com/openshift/csi-operator/pull/462)
* [OCPBUGS-63557](https://issues.redhat.com/browse/OCPBUGS-63557): Add RBAC ClusterRole and Binding for driver node [#453](https://github.com/openshift/csi-operator/pull/453)
* [OCPBUGS-62974](https://issues.redhat.com/browse/OCPBUGS-62974): Add withCABundleDaemonSetHook() to AWS EFS operator [#449](https://github.com/openshift/csi-operator/pull/449)
* [OCPBUGS-60597](https://issues.redhat.com/browse/OCPBUGS-60597): Bump library-go to fix assignment to nil map issue [#422](https://github.com/openshift/csi-operator/pull/422)
* [OCPBUGS-60470](https://issues.redhat.com/browse/OCPBUGS-60470): Backport stale conditions fix [#416](https://github.com/openshift/csi-operator/pull/416)
* [Full changelog](https://github.com/openshift/csi-operator/compare/cc862109d5a24f4b246af6bd4b1404dbf4227be0...1a178e796560d227a903c1603e6fcb5a341f20ba)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7)

* [OCPBUGS-73822](https://issues.redhat.com/browse/OCPBUGS-73822): Fix reconciler consistency checks in Update and Exists [#167](https://github.com/openshift/machine-api-provider-aws/pull/167)
* [OCPBUGS-63139](https://issues.redhat.com/browse/OCPBUGS-63139): client: re-use a single file for building the session instead of randomly named files [#145](https://github.com/openshift/machine-api-provider-aws/pull/145)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e...2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/190a0fabf17b28762b5578c0b9ffc25cf35cac64)

* append .0 to go.mod version [#19](https://github.com/openshift/azure-kubernetes-kms/pull/19)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/f1e56a2244ba5ac4deda50e103b4764f963c4a83...190a0fabf17b28762b5578c0b9ffc25cf35cac64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/439c54987c20d056ae23681d456e4e7f6a68c96d)

* [OCPBUGS-65954](https://issues.redhat.com/browse/OCPBUGS-65954): Set updateDomainCount to one when faultDomainCount is one [#176](https://github.com/openshift/machine-api-provider-azure/pull/176)
* [OCPBUGS-63700](https://issues.redhat.com/browse/OCPBUGS-63700): Support datadisks on Stack Hub [#168](https://github.com/openshift/machine-api-provider-azure/pull/168)
* [OCPBUGS-56168](https://issues.redhat.com/browse/OCPBUGS-56168): [release-4.17] Update virtualmachines service to armcompute/v5 SDK [#146](https://github.com/openshift/machine-api-provider-azure/pull/146)
* [OCPBUGS-56655](https://issues.redhat.com/browse/OCPBUGS-56655): Fix failure when attempting to modify immutable availabilitySet [#152](https://github.com/openshift/machine-api-provider-azure/pull/152)
* [OCPBUGS-55729](https://issues.redhat.com/browse/OCPBUGS-55729): Update eviction policy for Spot VMs from Deallocate to Delete [#140](https://github.com/openshift/machine-api-provider-azure/pull/140)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/0bff150f6641f68c3712b3b83367c64bc52cfabd...439c54987c20d056ae23681d456e4e7f6a68c96d)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/41b3424801977f102b00bb5c7e8fe15d65d3ade5)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#46](https://github.com/openshift/cluster-api-provider-metal3/pull/46)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/8754bf63984c6879e34abf8413e27e9811bf0655...41b3424801977f102b00bb5c7e8fe15d65d3ade5)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/5fc357af1d96d1ac61a72efd497eab40d3106f09)

* [OCPBUGS-74677](https://issues.redhat.com/browse/OCPBUGS-74677): [release-4.17] GCP: skip AI zones [#10276](https://github.com/openshift/installer/pull/10276)
* [OCPBUGS-74555](https://issues.redhat.com/browse/OCPBUGS-74555): Azure UPI ARM template: use storageAccountId [#10264](https://github.com/openshift/installer/pull/10264)
* [OCPBUGS-68142](https://issues.redhat.com/browse/OCPBUGS-68142): [4.17] uplift logrus [#10167](https://github.com/openshift/installer/pull/10167)
* [OCPBUGS-53236](https://issues.redhat.com/browse/OCPBUGS-53236): Validation for API and Ingress VIPs when using user-managed load balancer [#10047](https://github.com/openshift/installer/pull/10047)
* [OCPBUGS-62951](https://issues.redhat.com/browse/OCPBUGS-62951): Update the RHCOS 4.17 bootimage metadata [#10021](https://github.com/openshift/installer/pull/10021)
* [OCPBUGS-62054](https://issues.redhat.com/browse/OCPBUGS-62054): Make swift containers removal not fatal for UPI. [#9952](https://github.com/openshift/installer/pull/9952)
* [OCPBUGS-54599](https://issues.redhat.com/browse/OCPBUGS-54599): Update the RHCOS 4.17 bootimage metadata [#9902](https://github.com/openshift/installer/pull/9902)
* [OCPBUGS-58319](https://issues.redhat.com/browse/OCPBUGS-58319): vSphere - remove unit tests using nip.io [#9821](https://github.com/openshift/installer/pull/9821)
* [OCPBUGS-57293](https://issues.redhat.com/browse/OCPBUGS-57293): sort zone slices extracted from map of byo subnets [#9778](https://github.com/openshift/installer/pull/9778)
* [OCPBUGS-56448](https://issues.redhat.com/browse/OCPBUGS-56448): vsphere - check if host is powered down or on standby before uploading template [#9726](https://github.com/openshift/installer/pull/9726)
* [OCPBUGS-57292](https://issues.redhat.com/browse/OCPBUGS-57292): ensure ctrplane nodes can access bootstrap MCS [#9775](https://github.com/openshift/installer/pull/9775)
* [OCPBUGS-57304](https://issues.redhat.com/browse/OCPBUGS-57304): IBI nmstate unit test fix [#9777](https://github.com/openshift/installer/pull/9777)
* [Full changelog](https://github.com/openshift/installer/compare/5e4e2af58d0ba03707b21d6511cbb83ae97fcad7...5fc357af1d96d1ac61a72efd497eab40d3106f09)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/ae674d7808379c454f972ff0cccac8bb9adcc98f)

* [OCPBUGS-68143](https://issues.redhat.com/browse/OCPBUGS-68143): [4.17] uplift logrus [#239](https://github.com/openshift/cluster-api-provider-baremetal/pull/239)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/6e7aa77e5e144adc97b498ada5a6ab400f97ca39...ae674d7808379c454f972ff0cccac8bb9adcc98f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/087a24f21f11bc85a6d922c156bda6270e7eadfa)

* [OCPBUGS-77185](https://issues.redhat.com/browse/OCPBUGS-77185): Unblock BMH direct deletion when detached annotation is present [#462](https://github.com/openshift/baremetal-operator/pull/462)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e6e5d54abf92a20d1b0d273a90581206b7ca0b15...087a24f21f11bc85a6d922c156bda6270e7eadfa)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/745189508eec80ee07a921d1b2c227812db37237)

* [OCPBUGS-71209](https://issues.redhat.com/browse/OCPBUGS-71209): Bump logrus version [#377](https://github.com/openshift/baremetal-runtimecfg/pull/377)
* [OCPBUGS-60112](https://issues.redhat.com/browse/OCPBUGS-60112): Re-add ENABLE_NODEIP_DEBUG env var [#363](https://github.com/openshift/baremetal-runtimecfg/pull/363)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/8956d91bd982929d780580b8e2fe5f5351dad881...745189508eec80ee07a921d1b2c227812db37237)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d76df14ea3d7ff9916ea576b6335cd3a220cd1bf)

* [OCPBUGS-64615](https://issues.redhat.com/browse/OCPBUGS-64615): Help with must-gather scheduling through suggesting preferance of nodes [#2150](https://github.com/openshift/oc/pull/2150)
* [OCPBUGS-56734](https://issues.redhat.com/browse/OCPBUGS-56734): Adding sos.conf file for default sos config into the tools image [#2027](https://github.com/openshift/oc/pull/2027)
* [OCPBUGS-58091](https://issues.redhat.com/browse/OCPBUGS-58091): avoid transfering permissions when copying artifacts from node-joiner pod [#2053](https://github.com/openshift/oc/pull/2053)
* [OCPBUGS-57446](https://issues.redhat.com/browse/OCPBUGS-57446): Use fedora image in unit tests instead of centos [#2038](https://github.com/openshift/oc/pull/2038)
* [Full changelog](https://github.com/openshift/oc/compare/0000b3ef257d07f423dfdf9b6d274214d1b0c846...d76df14ea3d7ff9916ea576b6335cd3a220cd1bf)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/662db76ca9abc7dff18d3a65140a17051fa07f9a)

* [OCPBUGS-65801](https://issues.redhat.com/browse/OCPBUGS-65801): ccoctl azure: retry custom role creation on consistency errors [#951](https://github.com/openshift/cloud-credential-operator/pull/951)
* [OCPBUGS-65480](https://issues.redhat.com/browse/OCPBUGS-65480): ccoctl: use pagination when listing resources in aws [#945](https://github.com/openshift/cloud-credential-operator/pull/945)
* [OCPBUGS-63549](https://issues.redhat.com/browse/OCPBUGS-63549): ccoctl: add public-key-file flag to create-all [#939](https://github.com/openshift/cloud-credential-operator/pull/939)
* [OCPBUGS-55128](https://issues.redhat.com/browse/OCPBUGS-55128): snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 [#917](https://github.com/openshift/cloud-credential-operator/pull/917)
* [OCPBUGS-60972](https://issues.redhat.com/browse/OCPBUGS-60972): ccoctl: aws to use proper issuer url on subsequent runs [#908](https://github.com/openshift/cloud-credential-operator/pull/908)
* [OCPBUGS-58679](https://issues.redhat.com/browse/OCPBUGS-58679): github.com/golang/glog v1.2.5 [#892](https://github.com/openshift/cloud-credential-operator/pull/892)
* [OCPBUGS-58248](https://issues.redhat.com/browse/OCPBUGS-58248): ccoctl: only add owned tag to azure resources on create [#883](https://github.com/openshift/cloud-credential-operator/pull/883)
* [OCPBUGS-56980](https://issues.redhat.com/browse/OCPBUGS-56980): Azure: resolve nil pointer exception when role assignment exists [#868](https://github.com/openshift/cloud-credential-operator/pull/868)
* [OCPBUGS-54828](https://issues.redhat.com/browse/OCPBUGS-54828): Render: configure proxy on bootstrap static pod [#863](https://github.com/openshift/cloud-credential-operator/pull/863)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/8dff677d9916b7272e7552ae17a175f7272f16cf...662db76ca9abc7dff18d3a65140a17051fa07f9a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/241af368428cb2deedeaf8e21d237aa01216292a)

* [OCPBUGS-66132](https://issues.redhat.com/browse/OCPBUGS-66132): [release-4.17] Fix capacity calculation [#194](https://github.com/openshift/cloud-network-config-controller/pull/194)
* [OCPBUGS-65520](https://issues.redhat.com/browse/OCPBUGS-65520): Change the capacity struct from int to ptrOfInt [#191](https://github.com/openshift/cloud-network-config-controller/pull/191)
* [OCPBUGS-56257](https://issues.redhat.com/browse/OCPBUGS-56257): Increase API call timeout to 30 second [#171](https://github.com/openshift/cloud-network-config-controller/pull/171)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/779b346c8bccdb8590e403661ca57cc6ac544eb9...241af368428cb2deedeaf8e21d237aa01216292a)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9f93cafccca989417378a804f134f68fb4fea40d)

* [OCPBUGS-68150](https://issues.redhat.com/browse/OCPBUGS-68150): Update library-go to fix CVE-2025-65637 [#840](https://github.com/openshift/cluster-authentication-operator/pull/840)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/f641a4c6f858607f233866bb835704e784d57ef2...9f93cafccca989417378a804f134f68fb4fea40d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/238102bbc7aaceb122351acafd1dbaf77dc222c6)

* [OCPBUGS-68151](https://issues.redhat.com/browse/OCPBUGS-68151): update logrus to version 1.9.3 [#398](https://github.com/openshift/kubernetes-autoscaler/pull/398)
* [OCPBUGS-60913](https://issues.redhat.com/browse/OCPBUGS-60913): revert openshift replica fix [#376](https://github.com/openshift/kubernetes-autoscaler/pull/376)
* [OCPBUGS-60608](https://issues.redhat.com/browse/OCPBUGS-60608): fix checkpoint gc of unknown recommenders [#371](https://github.com/openshift/kubernetes-autoscaler/pull/371)
* [OCPBUGS-59266](https://issues.redhat.com/browse/OCPBUGS-59266): Fix cool down status condition to trigger scale down [#362](https://github.com/openshift/kubernetes-autoscaler/pull/362)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/12bd2a96d2cfcd4ca8715cbe144af2d0409d1563...238102bbc7aaceb122351acafd1dbaf77dc222c6)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/d0f98ecf2ef4a1761b7cc116390e73b3dd7698c0)

* [OCPBUGS-63715](https://issues.redhat.com/browse/OCPBUGS-63715): Always have a service for ironic-api port [#519](https://github.com/openshift/cluster-baremetal-operator/pull/519)
* [OCPBUGS-63666](https://issues.redhat.com/browse/OCPBUGS-63666): Allow provisioningIP when network disabled [#518](https://github.com/openshift/cluster-baremetal-operator/pull/518)
* [OCPBUGS-61097](https://issues.redhat.com/browse/OCPBUGS-61097): Remove webhookport (9447) as HostPort [#505](https://github.com/openshift/cluster-baremetal-operator/pull/505)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/caa33e34f41c689d4043550f1efe4716279a3581...d0f98ecf2ef4a1761b7cc116390e73b3dd7698c0)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459)

* append .0 to go.mod version [#314](https://github.com/openshift/cluster-capi-operator/pull/314)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/6dd70ba593f5e8050b5c77fa658cdb3d0c06f4f6...a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1)

* [OCPBUGS-63167](https://issues.redhat.com/browse/OCPBUGS-63167): ccm: disable unused secure-serving port and webhook [#423](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/423)
* [OCPBUGS-60211](https://issues.redhat.com/browse/OCPBUGS-60211): Update service selector to match deployment label [#406](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/406)
* [OCPBUGS-60211](https://issues.redhat.com/browse/OCPBUGS-60211): Add Service using common resource templating [#407](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/407)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/32fd83999e7eae9941abe7da915bacae1d50e49c...6d4c0096477d7e15f31ef0492ad9382ea1be1ef1)


### [cluster-config-api](https://github.com/openshift/api/tree/92c55bf0f372c222dc02f17685c383d18e2c2e8b)

* [CNTRLPLANE-1981](https://issues.redhat.com/browse/CNTRLPLANE-1981): Promote streaming list encoding to Default [#2599](https://github.com/openshift/api/pull/2599)
* [OCPBUGS-71184](https://issues.redhat.com/browse/OCPBUGS-71184): Add HTTPKeepAliveTimeout to IngressController API [#2639](https://github.com/openshift/api/pull/2639)
* NO-JIRA: Promote streaming list encoding to Default on Hypershift. [#2567](https://github.com/openshift/api/pull/2567)
* [CNTRLPLANE-1611](https://issues.redhat.com/browse/CNTRLPLANE-1611): Add feature gates for StreamingCollectionEncoding [#2538](https://github.com/openshift/api/pull/2538)
* [OCPBUGS-57285](https://issues.redhat.com/browse/OCPBUGS-57285): Add IPsec API for NAT-T UDP encapsulation support [#2363](https://github.com/openshift/api/pull/2363)
* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add IdleConnectionTerminationPolicy field to IngressControllerSpec [#2186](https://github.com/openshift/api/pull/2186)
* [Full changelog](https://github.com/openshift/api/compare/0cfc958f642b11b1c2020d0da9eb96daff8fb588...92c55bf0f372c222dc02f17685c383d18e2c2e8b)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cfd318de9718f1c73b40d99900125bdca41482ef)

* [OCPBUGS-75998](https://issues.redhat.com/browse/OCPBUGS-75998): Update logrus to 1.9.3 to address CVE-2025-65637 [#465](https://github.com/openshift/cluster-config-operator/pull/465)
* append .0 to go.mod version [#441](https://github.com/openshift/cluster-config-operator/pull/441)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/0dc084f47be4c5ee02cf40495b6bd8f334c930eb...cfd318de9718f1c73b40d99900125bdca41482ef)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/bfffdcbac76071143cf554785ca2bde0ac69ac7e)

* [OCPBUGS-68156](https://issues.redhat.com/browse/OCPBUGS-68156): Update logrus to 1.9.3 to address CVE-2025-65637 [#1542](https://github.com/openshift/cluster-etcd-operator/pull/1542)
* [OCPBUGS-61337](https://issues.redhat.com/browse/OCPBUGS-61337): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1480](https://github.com/openshift/cluster-etcd-operator/pull/1480)
* [OCPBUGS-60220](https://issues.redhat.com/browse/OCPBUGS-60220): add missing ports to svc and pod spec [#1461](https://github.com/openshift/cluster-etcd-operator/pull/1461)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/50f554151e66f6339d5d49e9c9d6c8b96ec7e960...bfffdcbac76071143cf554785ca2bde0ac69ac7e)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/790f6a59513d7a9d78ba2a5b30d5f0da5a3d481f)

* [OCPBUGS-53871](https://issues.redhat.com/browse/OCPBUGS-53871): bump github.com/golang-jwt/jwt [#1218](https://github.com/openshift/cluster-image-registry-operator/pull/1218)
* [OCPBUGS-51604](https://issues.redhat.com/browse/OCPBUGS-51604): bump golang.org/x/oauth2 [#1209](https://github.com/openshift/cluster-image-registry-operator/pull/1209)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/ce3e4844f80923ce0aa791a54933add7b867cf6c...790f6a59513d7a9d78ba2a5b30d5f0da5a3d481f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1a164c16e804a4cf4f8b7aca4b8cb24d265dedb4)

* [OCPBUGS-71184](https://issues.redhat.com/browse/OCPBUGS-71184): Implement HTTPKeepAliveTimeout tuning option [#1335](https://github.com/openshift/cluster-ingress-operator/pull/1335)
* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add e2e tests for IdleConnectionTerminationPolicy [#1225](https://github.com/openshift/cluster-ingress-operator/pull/1225)
* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add support for IdleConnectionTerminationPolicy [#1223](https://github.com/openshift/cluster-ingress-operator/pull/1223)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/cb5306d7f68ba35b9a065d65f46c69a836556cb2...1a164c16e804a4cf4f8b7aca4b8cb24d265dedb4)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/8e391e9a79393c3bcba34c7de63afd3381fb51f3)

* [OCPBUGS-63614](https://issues.redhat.com/browse/OCPBUGS-63614): SCC: add hostmount-anyuid-v2 [#1954](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1954)
* [OCPBUGS-60398](https://issues.redhat.com/browse/OCPBUGS-60398): Add missing service ports to apiserver service [#1893](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1893)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/4fae6738a9ffd1c108cd9ab3ac6c1382c5eece42...8e391e9a79393c3bcba34c7de63afd3381fb51f3)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/d68b3764db78ad5ca2e61af75f0bc8bcdcf3e644)

* [OCPBUGS-60249](https://issues.redhat.com/browse/OCPBUGS-60249): Missing endpoint slices for open ports the operator uses [#855](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/855)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0a9ed573e35751455bfb24842fd2de0b05379ed0...d68b3764db78ad5ca2e61af75f0bc8bcdcf3e644)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0bb0678bead782461b35d7e8671b3e54b9a46788)

* [OCPBUGS-68165](https://issues.redhat.com/browse/OCPBUGS-68165): deps: Update library-go and logrus to fix a CVE [#613](https://github.com/openshift/cluster-kube-scheduler-operator/pull/613)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/98ca953ba6955401023e219f37e0af49879355d2...0bb0678bead782461b35d7e8671b3e54b9a46788)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/0097f21060a7e10679567eb57b87feb4f55230e3)

* [OCPBUGS-68167](https://issues.redhat.com/browse/OCPBUGS-68167): Bump github.com/sirupsen/logrus to 1.9.1 [#140](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/140)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/ab40b61142a30f21eec8301b2e98f2fafb25164b...0097f21060a7e10679567eb57b87feb4f55230e3)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/8fe68aaa38f083604ed76c39135caac41049b1a5)

* [OCPBUGS-64580](https://issues.redhat.com/browse/OCPBUGS-64580): Fix KSM deny-list typo [#2732](https://github.com/openshift/cluster-monitoring-operator/pull/2732)
* [OCPBUGS-63489](https://issues.redhat.com/browse/OCPBUGS-63489): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 [#2725](https://github.com/openshift/cluster-monitoring-operator/pull/2725)
* [OCPBUGS-63123](https://issues.redhat.com/browse/OCPBUGS-63123): test: remove image registry e2e tests [#2715](https://github.com/openshift/cluster-monitoring-operator/pull/2715)
* [OCPBUGS-61766](https://issues.redhat.com/browse/OCPBUGS-61766): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2672](https://github.com/openshift/cluster-monitoring-operator/pull/2672)
* [OCPBUGS-60017](https://issues.redhat.com/browse/OCPBUGS-60017): operator: increase wait time till degraded to max 4 times 5m [#2634](https://github.com/openshift/cluster-monitoring-operator/pull/2634)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ff3a4f0218f4985874f2ab872f6f6f440a38e17d...8fe68aaa38f083604ed76c39135caac41049b1a5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/1aca832fab45aceebe8026077d67ac6b82b51179)

* [OCPBUGS-73799](https://issues.redhat.com/browse/OCPBUGS-73799): Tweak iptables-alerter to try to avoid crictl bug [#2878](https://github.com/openshift/cluster-network-operator/pull/2878)
* : NO-JIRA: Update CNO reviewers/approvers [#2767](https://github.com/openshift/cluster-network-operator/pull/2767)
* [OCPBUGS-74348](https://issues.redhat.com/browse/OCPBUGS-74348): [release-4.17] fix typo in release annotation for whereabouts-token-watcher deamonset [#2888](https://github.com/openshift/cluster-network-operator/pull/2888)
* [OCPBUGS-45086](https://issues.redhat.com/browse/OCPBUGS-45086): Re-disable metrics server [#2579](https://github.com/openshift/cluster-network-operator/pull/2579)
* [OCPBUGS-63154](https://issues.redhat.com/browse/OCPBUGS-63154): Add drop flows for GARPs [#2818](https://github.com/openshift/cluster-network-operator/pull/2818)
* [Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers [#2799](https://github.com/openshift/cluster-network-operator/pull/2799)
* [OCPBUGS-58066](https://issues.redhat.com/browse/OCPBUGS-58066): [release-4.17]: Manual feature backport of cert rotation for whereabouts [#2784](https://github.com/openshift/cluster-network-operator/pull/2784)
* [OCPBUGS-57285](https://issues.redhat.com/browse/OCPBUGS-57285): Implement IPsec NAT-Traversal encapsulation option [#2726](https://github.com/openshift/cluster-network-operator/pull/2726)
* [OCPBUGS-55518](https://issues.redhat.com/browse/OCPBUGS-55518): iptables-alerter streamlining [#2698](https://github.com/openshift/cluster-network-operator/pull/2698)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5f2fe68003e8f17304d7000f8672a0f6ff2eaf8b...1aca832fab45aceebe8026077d67ac6b82b51179)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/65585d9988f91a0dcb71b1fd91174dc422fb6a1c)

* [OCPBUGS-63504](https://issues.redhat.com/browse/OCPBUGS-63504): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1418](https://github.com/openshift/cluster-node-tuning-operator/pull/1418)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b6712f369eddb39fa68021ffb3d31fed7e5663a6...65585d9988f91a0dcb71b1fd91174dc422fb6a1c)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/1d2ba42214637c7ed7e5e3e0aec257e9b949d061)

* [OCPBUGS-63515](https://issues.redhat.com/browse/OCPBUGS-63515): references to github.com/sclorg/django-ex.git now also refer to the branch [#658](https://github.com/openshift/cluster-samples-operator/pull/658)
* [OCPBUGS-55800](https://issues.redhat.com/browse/OCPBUGS-55800): only update LastTransitionTime if operator status change [#640](https://github.com/openshift/cluster-samples-operator/pull/640)
* [OCPBUGS-55795](https://issues.redhat.com/browse/OCPBUGS-55795): Adding filter to clusterOperatorInformerEventHandler [#639](https://github.com/openshift/cluster-samples-operator/pull/639)
* [OCPBUGS-55894](https://issues.redhat.com/browse/OCPBUGS-55894): Samples Operator should sort failing image imports [#641](https://github.com/openshift/cluster-samples-operator/pull/641)
* [OCPBUGS-55042](https://issues.redhat.com/browse/OCPBUGS-55042): Adding mutex to func createSamples on handler.go [#632](https://github.com/openshift/cluster-samples-operator/pull/632)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/6c04c37d76cc2bd1daef1675bac097e82c93674e...1d2ba42214637c7ed7e5e3e0aec257e9b949d061)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/45cbcc96a5a3a7bc743076965de0cc6a262ac11a)

* [OCPBUGS-41160](https://issues.redhat.com/browse/OCPBUGS-41160): Move metrics to vsphere driver [#633](https://github.com/openshift/cluster-storage-operator/pull/633)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/e4b8dceaf16926b5e4b7fc339b240af00e9539c9...45cbcc96a5a3a7bc743076965de0cc6a262ac11a)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/6302203333a9a7f22dc3e4ecd280028e8a8bfb86)

* NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.17 [#79](https://github.com/openshift/cluster-update-keys/pull/79)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/2ce31fc513224e76ac5924addc6207c205d95742...6302203333a9a7f22dc3e4ecd280028e8a8bfb86)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b855c68099755979a053f60a49300d3502f44325)

* [OCPBUGS-58451](https://issues.redhat.com/browse/OCPBUGS-58451): Failing=Unknown upon long CO updating [#1212](https://github.com/openshift/cluster-version-operator/pull/1212)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b06c46276c7ac146925dc927202af97b66856a38...b855c68099755979a053f60a49300d3502f44325)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/62d56d6a8b7ce26889cce1ba55ab4c958398967c)

* append .0 to go.mod version [#70](https://github.com/openshift/configmap-reload/pull/70)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/b877222b8c5527450447079e33d86dd9fe288e54...62d56d6a8b7ce26889cce1ba55ab4c958398967c)


### [console](https://github.com/openshift/console/tree/e6e10764fd20b562aa21f76d6adc02d711a4a2a5)

* NO-JIRA: Bump builder image to v29 [#15994](https://github.com/openshift/console/pull/15994)
* [OCPBUGS-74452](https://issues.redhat.com/browse/OCPBUGS-74452): Bump lodash to latest [#15966](https://github.com/openshift/console/pull/15966)
* [OCPBUGS-69403](https://issues.redhat.com/browse/OCPBUGS-69403): Disallowed Pipelines-plugin Pipelines navigation section [#15849](https://github.com/openshift/console/pull/15849)
* [OCPBUGS-65933](https://issues.redhat.com/browse/OCPBUGS-65933): Preserve URL in perspective switch + remove dev console folks from `reviewers` [#15762](https://github.com/openshift/console/pull/15762)
* [OCPBUGS-64942](https://issues.redhat.com/browse/OCPBUGS-64942): Expose prometheus tenancy label path as a proxy [#15710](https://github.com/openshift/console/pull/15710)
* [OCPBUGS-64599](https://issues.redhat.com/browse/OCPBUGS-64599): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15665](https://github.com/openshift/console/pull/15665)
* [OCPBUGS-62631](https://issues.redhat.com/browse/OCPBUGS-62631): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15554](https://github.com/openshift/console/pull/15554)
* [OCPBUGS-63212](https://issues.redhat.com/browse/OCPBUGS-63212): switch to dev perspective for `/dev-monitoring` [#15614](https://github.com/openshift/console/pull/15614)
* [OCPBUGS-63397](https://issues.redhat.com/browse/OCPBUGS-63397): fix bug where Roles list was displaying invalid data f… [#15627](https://github.com/openshift/console/pull/15627)
* [OCPBUGS-62282](https://issues.redhat.com/browse/OCPBUGS-62282): Fix desync of console and variable namespace [#15545](https://github.com/openshift/console/pull/15545)
* [OCPBUGS-44154](https://issues.redhat.com/browse/OCPBUGS-44154): bump dompurify to latest [#15590](https://github.com/openshift/console/pull/15590)
* [OCPBUGS-61737](https://issues.redhat.com/browse/OCPBUGS-61737): Remove ancient `X-XSS-Protection` header [#15494](https://github.com/openshift/console/pull/15494)
* [OCPBUGS-54241](https://issues.redhat.com/browse/OCPBUGS-54241): VolumeSnapshots are not displayed in OpenShift Web Console [#15465](https://github.com/openshift/console/pull/15465)
* [OCPBUGS-59747](https://issues.redhat.com/browse/OCPBUGS-59747): OpenShift console PVC clone cannot use B as the unit [#15324](https://github.com/openshift/console/pull/15324)
* NO-JIRA: Increase the timeout on the cypress test [#15420](https://github.com/openshift/console/pull/15420)
* [OCPBUGS-58365](https://issues.redhat.com/browse/OCPBUGS-58365): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15271](https://github.com/openshift/console/pull/15271)
* [OCPBUGS-59544](https://issues.redhat.com/browse/OCPBUGS-59544): Secret key with binary file changes when edited via Console [#15301](https://github.com/openshift/console/pull/15301)
* [OCPBUGS-59784](https://issues.redhat.com/browse/OCPBUGS-59784): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#15329](https://github.com/openshift/console/pull/15329)
* [OCPBUGS-58337](https://issues.redhat.com/browse/OCPBUGS-58337): Tolerate unknown fields in Infrastructur… [#15236](https://github.com/openshift/console/pull/15236)
* [OCPBUGS-59492](https://issues.redhat.com/browse/OCPBUGS-59492): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15294](https://github.com/openshift/console/pull/15294)
* [OCPBUGS-59879](https://issues.redhat.com/browse/OCPBUGS-59879): add data-test attrs to console plugins … [#15338](https://github.com/openshift/console/pull/15338)
* [OCPBUGS-59510](https://issues.redhat.com/browse/OCPBUGS-59510): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15297](https://github.com/openshift/console/pull/15297)
* [OCPBUGS-59265](https://issues.redhat.com/browse/OCPBUGS-59265): fix bug where / in console.tab/horizontalNav href brea… [#15270](https://github.com/openshift/console/pull/15270)
* [OCPBUGS-58318](https://issues.redhat.com/browse/OCPBUGS-58318): Implement sessions in openshift authenticator [#15238](https://github.com/openshift/console/pull/15238)
* [OCPBUGS-58224](https://issues.redhat.com/browse/OCPBUGS-58224): Add the ability to launch multiple modals with useModal hook [#15222](https://github.com/openshift/console/pull/15222)
* [OCPBUGS-58378](https://issues.redhat.com/browse/OCPBUGS-58378): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15241](https://github.com/openshift/console/pull/15241)
* [OCPBUGS-57835](https://issues.redhat.com/browse/OCPBUGS-57835): Add flags in console static plugin for all the components of this epic [#15192](https://github.com/openshift/console/pull/15192)
* [OCPBUGS-57932](https://issues.redhat.com/browse/OCPBUGS-57932): Fix TypeError Cannot read properties of null (reading 'metadata') [#15197](https://github.com/openshift/console/pull/15197)
* [OCPBUGS-57182](https://issues.redhat.com/browse/OCPBUGS-57182): Fix '/metrics' endpoint token review to handle interna… [#15154](https://github.com/openshift/console/pull/15154)
* [OCPBUGS-56895](https://issues.redhat.com/browse/OCPBUGS-56895): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15108](https://github.com/openshift/console/pull/15108)
* [OCPBUGS-57095](https://issues.redhat.com/browse/OCPBUGS-57095): Add all files to `vendor` regardless of gitignore [#15132](https://github.com/openshift/console/pull/15132)
* [OCPBUGS-57114](https://issues.redhat.com/browse/OCPBUGS-57114): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15142](https://github.com/openshift/console/pull/15142)
* [OCPBUGS-56975](https://issues.redhat.com/browse/OCPBUGS-56975): Sample segment sessions [#15114](https://github.com/openshift/console/pull/15114)
* [OCPBUGS-56844](https://issues.redhat.com/browse/OCPBUGS-56844): Enable knative tests [#14387](https://github.com/openshift/console/pull/14387)
* [OCPBUGS-56375](https://issues.redhat.com/browse/OCPBUGS-56375): remove 60 day alert from cluster update modal [#15062](https://github.com/openshift/console/pull/15062)
* [OCPBUGS-55924](https://issues.redhat.com/browse/OCPBUGS-55924): Fetching taskRuns in PLR details page using PLR UID also [#15029](https://github.com/openshift/console/pull/15029)
* [OCPBUGS-55756](https://issues.redhat.com/browse/OCPBUGS-55756): update the Deployment pod on change in imageStream [#15022](https://github.com/openshift/console/pull/15022)
* [OCPBUGS-56238](https://issues.redhat.com/browse/OCPBUGS-56238): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15049](https://github.com/openshift/console/pull/15049)
* [OCPBUGS-55447](https://issues.redhat.com/browse/OCPBUGS-55447): Authenticate user token in openshift Authenticate func [#15010](https://github.com/openshift/console/pull/15010)
* [OCPBUGS-55415](https://issues.redhat.com/browse/OCPBUGS-55415): fix bug where operator appears twice [#15002](https://github.com/openshift/console/pull/15002)
* [OCPBUGS-55202](https://issues.redhat.com/browse/OCPBUGS-55202): Do not load CSRs if user does not have permissions [#14985](https://github.com/openshift/console/pull/14985)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/825695f935379289af02384095531714a8c5c07e...e6e10764fd20b562aa21f76d6adc02d711a4a2a5)


### [console-operator](https://github.com/openshift/console-operator/tree/dc3d8515c13d3127da0aff3d20f5e61c4bd8f3d3)

* [OCPBUGS-60298](https://issues.redhat.com/browse/OCPBUGS-60298): Update downloads deployment configuration to use master node selector [#1033](https://github.com/openshift/console-operator/pull/1033)
* [Full changelog](https://github.com/openshift/console-operator/compare/253854e7e529fb42e90b71038eff4aabf8f31cf7...dc3d8515c13d3127da0aff3d20f5e61c4bd8f3d3)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/a95a5efed26080ae264e2d059fb5bdcb9ba1baee)

* [OCPBUGS-68135](https://issues.redhat.com/browse/OCPBUGS-68135): Bump logrus to v1.9.1 [#224](https://github.com/openshift/containernetworking-plugins/pull/224)
* [OCPBUGS-55622](https://issues.redhat.com/browse/OCPBUGS-55622): Check error returned by ipv6 SettleAddresses [#187](https://github.com/openshift/containernetworking-plugins/pull/187)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...a95a5efed26080ae264e2d059fb5bdcb9ba1baee)


### [coredns](https://github.com/openshift/coredns/tree/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567)

* [OCPBUGS-62825](https://issues.redhat.com/browse/OCPBUGS-62825): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#155](https://github.com/openshift/coredns/pull/155)
* append .0 to go.mod version [#135](https://github.com/openshift/coredns/pull/135)
* [Full changelog](https://github.com/openshift/coredns/compare/d3b441c150ccbcc0d9ebf03b8c39a730b830ddb1...fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/baec20197f8ad057abff220a0bbde18e064e2f4e)

* [OCPBUGS-68209](https://issues.redhat.com/browse/OCPBUGS-68209): fix CVE-2025-65637 [#357](https://github.com/openshift/cloud-provider-openstack/pull/357)
* [OCPBUGS-58839](https://issues.redhat.com/browse/OCPBUGS-58839): CARRY: don't ignore json files [#340](https://github.com/openshift/cloud-provider-openstack/pull/340)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/0e338e1e82923f108be2315f7885b8b28e18d159...baec20197f8ad057abff220a0bbde18e064e2f4e)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/798855508da2df01719bf82f6344112a33b5437c)

* append .0 to go.mod version [#156](https://github.com/openshift/csi-driver-nfs/pull/156)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/6a72c2541e6bc85bba0c1a7ed379dcb9fa53dfb7...798855508da2df01719bf82f6344112a33b5437c)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/66aee5b045bf2b32f6ccbf7a62c1151b8889811a)

* append .0 to go.mod version [#372](https://github.com/openshift/csi-driver-shared-resource/pull/372)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/027a8c4e106d7c02e1688c38015b8fd2bd94a304...66aee5b045bf2b32f6ccbf7a62c1151b8889811a)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/73798480d1110af451e5d7c237a722bc5e901f7b)

* [OCPBUGS-62466](https://issues.redhat.com/browse/OCPBUGS-62466): Requeue PVC over PV creation [#175](https://github.com/openshift/csi-external-resizer/pull/175)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/ab87a93853882d6ede0a8fe0a61469cd4fa61a62...73798480d1110af451e5d7c237a722bc5e901f7b)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95)

* [OCPBUGS-60449](https://issues.redhat.com/browse/OCPBUGS-60449): UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots [#184](https://github.com/openshift/csi-external-snapshotter/pull/184)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/aa558ca4bc55238e1909119f94eaf33872a76dec...080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/e7d841dc545b9fb3a8a3303b8cac62d35620905b)

* append .0 to go.mod version [#73](https://github.com/openshift/csi-livenessprobe/pull/73)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/075ebcdcb83929571fbea0a4d8ef5e2429e7a259...e7d841dc545b9fb3a8a3303b8cac62d35620905b)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/3dd2253ed70cb565a63a208fa667d55f3222fb19)

* [OCPBUGS-63682](https://issues.redhat.com/browse/OCPBUGS-63682): update log level verbosity to not clutter logs [#90](https://github.com/openshift/csi-node-driver-registrar/pull/90)
* append .0 to go.mod version [#80](https://github.com/openshift/csi-node-driver-registrar/pull/80)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/436a1f334dd75ae75206f52223b7933f7ff5036f...3dd2253ed70cb565a63a208fa667d55f3222fb19)


### [docker-builder](https://github.com/openshift/builder/tree/12fc732cf6c3f344d87b30e4a7927811ef943fab)

* [OCPBUGS-66988](https://issues.redhat.com/browse/OCPBUGS-66988): bump buildah to 1.37.7 to fix CVE-2025-52881 [#499](https://github.com/openshift/builder/pull/499)
* [OCPBUGS-65816](https://issues.redhat.com/browse/OCPBUGS-65816): BuildConfig inline Dockerfile fails with heredoc syntax [#488](https://github.com/openshift/builder/pull/488)
* [OCPBUGS-57939](https://issues.redhat.com/browse/OCPBUGS-57939): S2I build cpu limits observed by assemble are limited to 1 cpu [#474](https://github.com/openshift/builder/pull/474)
* [Full changelog](https://github.com/openshift/builder/compare/2bfbba1a477574840db035ad1024c9e4b317bc8f...12fc732cf6c3f344d87b30e4a7927811ef943fab)


### [docker-registry](https://github.com/openshift/image-registry/tree/4498bed2ff5ca62d95eb9b1e9e4fed02fdbd602e)

* [OCPBUGS-60090](https://issues.redhat.com/browse/OCPBUGS-60090): bump docker distribution to fix purgeuploads panic [#440](https://github.com/openshift/image-registry/pull/440)
* [OCPBUGS-53655](https://issues.redhat.com/browse/OCPBUGS-53655): bump jwt and oauth dependencies [#431](https://github.com/openshift/image-registry/pull/431)
* [Full changelog](https://github.com/openshift/image-registry/compare/fe9b400ea5cf5121f5a867a620ea349fd8493c36...4498bed2ff5ca62d95eb9b1e9e4fed02fdbd602e)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/86a1d902ab3989413be802a3daea422bc559012f)

* [OCPBUGS-53037](https://issues.redhat.com/browse/OCPBUGS-53037): Disable shielded VMs for non-UEFI disks [#115](https://github.com/openshift/machine-api-provider-gcp/pull/115)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/3a27d3ce75bab31b9a04c212c929db8d507f3962...86a1d902ab3989413be802a3daea422bc559012f)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/a066d98e8a4033b78a3e0fffade7d386630072f7)

* [OCPBUGS-68186](https://issues.redhat.com/browse/OCPBUGS-68186): Update logrus to 1.9.3 [#90](https://github.com/openshift/gcp-pd-csi-driver/pull/90)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c770b41229e39d8859fc11ec709ab57a0e0ad06a...a066d98e8a4033b78a3e0fffade7d386630072f7)


### [haproxy-router](https://github.com/openshift/router/tree/1e29d8cc87a1c9e6645a4b9aa01197d90e366152)

* [OCPBUGS-49390](https://issues.redhat.com/browse/OCPBUGS-49390): Reject All CA-Signed Certs Using SHA1 [#650](https://github.com/openshift/router/pull/650)
* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add support for IdleCloseTerminationPolicy [#652](https://github.com/openshift/router/pull/652)
* [Full changelog](https://github.com/openshift/router/compare/a33f2b6ad04f8c39b95c1839340f0e38b5c0662a...1e29d8cc87a1c9e6645a4b9aa01197d90e366152)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/4e295fa517e17429af4d8004e7a8028fe719e60f)

* [OCPBUGS-68132](https://issues.redhat.com/browse/OCPBUGS-68132), [OCPBUGS-68190](https://issues.redhat.com/browse/OCPBUGS-68190): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [#2573](https://github.com/openshift/kubernetes/pull/2573)
* [OCPBUGS-72531](https://issues.redhat.com/browse/OCPBUGS-72531): Skip E2e: attach on previously attached volumes should work [#2566](https://github.com/openshift/kubernetes/pull/2566)
* [OCPBUGS-65695](https://issues.redhat.com/browse/OCPBUGS-65695): Fix Concurrentmap Iteration [#2520](https://github.com/openshift/kubernetes/pull/2520)
* [OCPBUGS-63460](https://issues.redhat.com/browse/OCPBUGS-63460): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write #2456 [#2496](https://github.com/openshift/kubernetes/pull/2496)
* [CNTRLPLANE-1611](https://issues.redhat.com/browse/CNTRLPLANE-1611): Backport StreamingCollectionEncoding for JSON and protobuf [#2486](https://github.com/openshift/kubernetes/pull/2486)
* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): UPSTREAM: &lt;carry&gt;: Don't retry storage calls with side effects. [#2458](https://github.com/openshift/kubernetes/pull/2458)
* [OCPBUGS-60552](https://issues.redhat.com/browse/OCPBUGS-60552): [4.17] podresources: list: use active pods [#2426](https://github.com/openshift/kubernetes/pull/2426)
* 4.17: OCPBUGS-60998: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments [#2434](https://github.com/openshift/kubernetes/pull/2434)
* [OCPBUGS-57888](https://issues.redhat.com/browse/OCPBUGS-57888): Bump k8s api to 1.30.14 [#2355](https://github.com/openshift/kubernetes/pull/2355)
* [OCPBUGS-57196](https://issues.redhat.com/browse/OCPBUGS-57196): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2328](https://github.com/openshift/kubernetes/pull/2328)
* [OCPBUGS-57289](https://issues.redhat.com/browse/OCPBUGS-57289): kubelet: fix a stall on startup from waiting too long for a stat call [#2206](https://github.com/openshift/kubernetes/pull/2206)
* [OCPBUGS-55269](https://issues.redhat.com/browse/OCPBUGS-55269): Bump k8s api to 1.30.12 [#2280](https://github.com/openshift/kubernetes/pull/2280)
* [Full changelog](https://github.com/openshift/kubernetes/compare/89ebee0309adcf066eb7e837f403269d85319513...4e295fa517e17429af4d8004e7a8028fe719e60f)


### [hypershift](https://github.com/openshift/hypershift/tree/0e58a28336e154a69b1d94b0ccfd2e5b256d7250)

* [OCPBUGS-74230](https://issues.redhat.com/browse/OCPBUGS-74230), [OCPBUGS-74294](https://issues.redhat.com/browse/OCPBUGS-74294): [release-4.17] Support proxy authentication when user/pass is included in URL [#7568](https://github.com/openshift/hypershift/pull/7568)
* fix: OCPBUGS-72956: Fix Konflux EC voilation, update deprecated base … [#7457](https://github.com/openshift/hypershift/pull/7457)
* [OCPBUGS-69865](https://issues.redhat.com/browse/OCPBUGS-69865): test: remove unit tests that depend on network communication [release-4.17] [#7411](https://github.com/openshift/hypershift/pull/7411)
* [OCPBUGS-57123](https://issues.redhat.com/browse/OCPBUGS-57123): Add support for registry root entry only in the IDMS/ICSP [#6230](https://github.com/openshift/hypershift/pull/6230)
* [CNTRLPLANE-1903](https://issues.redhat.com/browse/CNTRLPLANE-1903): Migrate 4.17 pipelines to use common pipeline [#7215](https://github.com/openshift/hypershift/pull/7215)
* [OCPBUGS-63639](https://issues.redhat.com/browse/OCPBUGS-63639): [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7112](https://github.com/openshift/hypershift/pull/7112)
* [OCPBUGS-64604](https://issues.redhat.com/browse/OCPBUGS-64604): Update DNS names for ovn-kubernetes cp metrics [#7150](https://github.com/openshift/hypershift/pull/7150)
* [OCPBUGS-63370](https://issues.redhat.com/browse/OCPBUGS-63370): fix: Make the hypershift CLI binary FIPS-compliant [#7094](https://github.com/openshift/hypershift/pull/7094)
* [CNTRLPLANE-1425](https://issues.redhat.com/browse/CNTRLPLANE-1425): feat(konflux): tag MCE HO images with latest [#6838](https://github.com/openshift/hypershift/pull/6838)
* [OCPBUGS-57143](https://issues.redhat.com/browse/OCPBUGS-57143): [release-4.17] HCP payload doesn't respect multiple mirrors [#6771](https://github.com/openshift/hypershift/pull/6771)
* [OCPBUGS-61290](https://issues.redhat.com/browse/OCPBUGS-61290): Update KCM node monitor grace period [#6760](https://github.com/openshift/hypershift/pull/6760)
* [OCPBUGS-61208](https://issues.redhat.com/browse/OCPBUGS-61208): use common MCE konflux pipeline [#6749](https://github.com/openshift/hypershift/pull/6749)
* [OCPBUGS-60149](https://issues.redhat.com/browse/OCPBUGS-60149): [release-4.17] Always compress and encode payload in token secret for inplace upgrades [#6740](https://github.com/openshift/hypershift/pull/6740)
* [OCPBUGS-61101](https://issues.redhat.com/browse/OCPBUGS-61101): Use system trust bundle in CPO IDP https client [#6735](https://github.com/openshift/hypershift/pull/6735)
* [OCPBUGS-60921](https://issues.redhat.com/browse/OCPBUGS-60921): konflux for hcp-cli [#6699](https://github.com/openshift/hypershift/pull/6699)
* [CNTRLPLANE-1204](https://issues.redhat.com/browse/CNTRLPLANE-1204): HO MCE change to hermetic ta build [#6653](https://github.com/openshift/hypershift/pull/6653)
* [CNTRLPLANE-1230](https://issues.redhat.com/browse/CNTRLPLANE-1230): Move CPO pipeline to hermetic builds [#6598](https://github.com/openshift/hypershift/pull/6598)
* [CNTRLPLANE-936](https://issues.redhat.com/browse/CNTRLPLANE-936): fix(tekton): drop multiarch builds on PR [#6224](https://github.com/openshift/hypershift/pull/6224)
* [OCPBUGS-57432](https://issues.redhat.com/browse/OCPBUGS-57432): Add proxy variables for the MCD Pod [#6258](https://github.com/openshift/hypershift/pull/6258)
* [CNTRLPLANE-918](https://issues.redhat.com/browse/CNTRLPLANE-918): Konflux build pipeline service account migration [#6088](https://github.com/openshift/hypershift/pull/6088)
* [CNTRLPLANE-918](https://issues.redhat.com/browse/CNTRLPLANE-918): Konflux build pipeline service account migration [#6083](https://github.com/openshift/hypershift/pull/6083)
* [OCPBUGS-55723](https://issues.redhat.com/browse/OCPBUGS-55723): Don't check if olm images exist if guest cluster [#6115](https://github.com/openshift/hypershift/pull/6115)
* [OCPBUGS-55500](https://issues.redhat.com/browse/OCPBUGS-55500), [RHOCPPRIO-433](https://issues.redhat.com/browse/RHOCPPRIO-433): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6098](https://github.com/openshift/hypershift/pull/6098)
* [Full changelog](https://github.com/openshift/hypershift/compare/98664c845408b0981acec8d3a85f02a20077d127...0e58a28336e154a69b1d94b0ccfd2e5b256d7250)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/b4d153d69797e08c13aded5400112739779091b9)

* [OCPBUGS-58740](https://issues.redhat.com/browse/OCPBUGS-58740): bump github.com/golang/glog to version v1.2.4 [#105](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/105)
* [OCPBUGS-56062](https://issues.redhat.com/browse/OCPBUGS-56062): tech debt: rework vendor patches [#90](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/90)
* append .0 to go.mod version [#100](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/100)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/5f18d29e73366557d8dfbfb2f1bf1949fe39dbf6...b4d153d69797e08c13aded5400112739779091b9)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/ee301303640e89a985108bf3b055051a644b5c37)

* [OCPBUGS-58435](https://issues.redhat.com/browse/OCPBUGS-58435): [IBM VPC] set offlineExpansion to false in e2e test manifest [#146](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/146)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/8443d86bf284684b7849fa76d40795d141ef86d2...ee301303640e89a985108bf3b055051a644b5c37)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/9c13e272406752acdc8e89d0f67eeae07a5f747f)

* [OCPBUGS-67287](https://issues.redhat.com/browse/OCPBUGS-67287): [release-4.17] Fix incomplete vendor/ [#139](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/139)
* [OCPBUGS-51823](https://issues.redhat.com/browse/OCPBUGS-51823): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#121](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/121)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/14489f69f70f6077bcc81ce2dfa4edba2b330801...9c13e272406752acdc8e89d0f67eeae07a5f747f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/c1b05a654634ea3eff6e322c66e755082813479a)

* [OCPBUGS-68193](https://issues.redhat.com/browse/OCPBUGS-68193): OCPBUGS-68194: [vuln] Update logrus library to 1.9.3 [#1227](https://github.com/openshift/insights-operator/pull/1227)
* [OCPBUGS-67008](https://issues.redhat.com/browse/OCPBUGS-67008): Add filtering to add other possible pod status to QEMU gatherer [#1196](https://github.com/openshift/insights-operator/pull/1196)
* [OCPBUGS-66395](https://issues.redhat.com/browse/OCPBUGS-66395): QEMU logs are not gathered if there are pending status virt-launcher pods [#1194](https://github.com/openshift/insights-operator/pull/1194)
* [OCPBUGS-66394](https://issues.redhat.com/browse/OCPBUGS-66394): [bugfix] The archive's records may include files whose names are out of bounds [#1193](https://github.com/openshift/insights-operator/pull/1193)
* [OCPBUGS-64629](https://issues.redhat.com/browse/OCPBUGS-64629): add permissions to gather clusterrole [#1170](https://github.com/openshift/insights-operator/pull/1170)
* [OCPBUGS-63500](https://issues.redhat.com/browse/OCPBUGS-63500): add missing permissions for replicasets and events [#1165](https://github.com/openshift/insights-operator/pull/1165)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2b1e2df05f67be7567d234f4150076a5aefd4ee2...c1b05a654634ea3eff6e322c66e755082813479a)


### [ironic](https://github.com/openshift/ironic-image/tree/e8959a879d31eaba0c0c7b4491339766afd9a6c6)

* [OCPBUGS-69792](https://issues.redhat.com/browse/OCPBUGS-69792): Bump eventlet version to 0.33.1-7 [#761](https://github.com/openshift/ironic-image/pull/761)
* [Full changelog](https://github.com/openshift/ironic-image/compare/391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c...e8959a879d31eaba0c0c7b4491339766afd9a6c6)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d0261c59daa50c481a68846d9da1ce855c4c1578)

* [OCPBUGS-69775](https://issues.redhat.com/browse/OCPBUGS-69775): Bump eventlet version to 0.33.1-7 [#231](https://github.com/openshift/ironic-agent-image/pull/231)
* [OCPBUGS-62490](https://issues.redhat.com/browse/OCPBUGS-62490): netutils: Use ethtool ioctl to get permanent mac address [#214](https://github.com/openshift/ironic-agent-image/pull/214)
* [OCPBUGS-55680](https://issues.redhat.com/browse/OCPBUGS-55680): Delay determining the hostname to put into ignition [#185](https://github.com/openshift/ironic-agent-image/pull/185)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/6d5c18e4fd49644c17893a949b1b8a067152f797...d0261c59daa50c481a68846d9da1ce855c4c1578)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/9e6596c3f9d239d91c358299a19871905fa914fe)

* append .0 to go.mod version [#104](https://github.com/openshift/ironic-rhcos-downloader/pull/104)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818...9e6596c3f9d239d91c358299a19871905fa914fe)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec)

* append .0 to go.mod version [#43](https://github.com/openshift/kubernetes-metrics-server/pull/43)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/e870adbd46e2b0f9afa88227f951b37d5ba4dc0c...07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec)


### [kube-proxy](https://github.com/openshift/sdn/tree/fd50551b5c640fb4bda787faaab32f8b641839e9)

* [OCPBUGS-68165](https://issues.redhat.com/browse/OCPBUGS-68165): deps: Update library-go to fix a CVE [#661](https://github.com/openshift/sdn/pull/661)
* [Full changelog](https://github.com/openshift/sdn/compare/dee082def2014ab85a0e5ff9a056d3fe2461eab7...fd50551b5c640fb4bda787faaab32f8b641839e9)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f708b5ecf87b948864e4f68d0724cda5de13a9d9)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#120](https://github.com/openshift/kube-rbac-proxy/pull/120)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/7718265cc7640f6fa0d75eee366e424911d6f00f...f708b5ecf87b948864e4f68d0724cda5de13a9d9)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/69b07ae04918806079f1a4fbc2f110453bc8db19)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-17). [#226](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/226)
* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#217](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/217)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/34fafc04e5f2872e282617da31175a7e091ffdb2...69b07ae04918806079f1a4fbc2f110453bc8db19)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/9804c42a35e122bd9a88955a11338357698d8b3c)

* [OCPBUGS-34447](https://issues.redhat.com/browse/OCPBUGS-34447): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 [#44](https://github.com/openshift/cloud-provider-kubevirt/pull/44)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b...9804c42a35e122bd9a88955a11338357698d8b3c)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/998cffed3663b5b4332a8eb0d8e7dce489b1bfa9)

* [OCPBUGS-57073](https://issues.redhat.com/browse/OCPBUGS-57073): Updates GCP CredentialsRequest [#1377](https://github.com/openshift/machine-api-operator/pull/1377)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/1e7747d08d10dd65994b7aeb98f5351b25e053ef...998cffed3663b5b4332a8eb0d8e7dce489b1bfa9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/dd398f82b7fef5e78fb2d248e1e95c20dd946df0)

* [OCPBUGS-77186](https://issues.redhat.com/browse/OCPBUGS-77186): Machine-config controller should not log about non-existent pull-secret changes [#5679](https://github.com/openshift/machine-config-operator/pull/5679)
* [OCPBUGS-77090](https://issues.redhat.com/browse/OCPBUGS-77090): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5678](https://github.com/openshift/machine-config-operator/pull/5678)
* [OCPBUGS-61190](https://issues.redhat.com/browse/OCPBUGS-61190): MCO report "failed to list *v1alpha1.MachineOSConfig" when enable TechPreview after upgrading from 4.16 to 4.17 with one mcp paused [#5584](https://github.com/openshift/machine-config-operator/pull/5584)
* [OCPBUGS-60112](https://issues.redhat.com/browse/OCPBUGS-60112): Enable debug logging for nodeip-configuration [#5219](https://github.com/openshift/machine-config-operator/pull/5219)
* [OCPBUGS-62170](https://issues.redhat.com/browse/OCPBUGS-62170): Fix - NetworkManager restart or crash renders br-ex unusable [#5355](https://github.com/openshift/machine-config-operator/pull/5355)
* [OCPBUGS-66037](https://issues.redhat.com/browse/OCPBUGS-66037): Remove --mount directives [#5443](https://github.com/openshift/machine-config-operator/pull/5443)
* [OCPBUGS-63154](https://issues.redhat.com/browse/OCPBUGS-63154): [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5358](https://github.com/openshift/machine-config-operator/pull/5358)
* [OCPBUGS-63540](https://issues.redhat.com/browse/OCPBUGS-63540): Add control-plane label for master nodes on legacy clusters [#5375](https://github.com/openshift/machine-config-operator/pull/5375)
* [OCPBUGS-63364](https://issues.redhat.com/browse/OCPBUGS-63364): Invalid architecture value found in annotation during 4.19 update [#5368](https://github.com/openshift/machine-config-operator/pull/5368)
* [OCPBUGS-63055](https://issues.redhat.com/browse/OCPBUGS-63055): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5346](https://github.com/openshift/machine-config-operator/pull/5346)
* [OCPBUGS-62741](https://issues.redhat.com/browse/OCPBUGS-62741): Add /etc/docker/certs.d to template [#5335](https://github.com/openshift/machine-config-operator/pull/5335)
* [OCPBUGS-62683](https://issues.redhat.com/browse/OCPBUGS-62683): Add mcd_local_unsupported_packages recording rule [#5327](https://github.com/openshift/machine-config-operator/pull/5327)
* [OCPBUGS-60890](https://issues.redhat.com/browse/OCPBUGS-60890): Race in configure-ovs.sh affects bonding interface configuration. [#5267](https://github.com/openshift/machine-config-operator/pull/5267)
* [OCPBUGS-61859](https://issues.redhat.com/browse/OCPBUGS-61859): Override NMState service definition [#5289](https://github.com/openshift/machine-config-operator/pull/5289)
* [OCPBUGS-59930](https://issues.redhat.com/browse/OCPBUGS-59930), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5206](https://github.com/openshift/machine-config-operator/pull/5206)
* [OCPBUGS-56752](https://issues.redhat.com/browse/OCPBUGS-56752): Support NODEIP_HINT in IPI deployments too [#5080](https://github.com/openshift/machine-config-operator/pull/5080)
* [OCPBUGS-60704](https://issues.redhat.com/browse/OCPBUGS-60704): operator: switch out VAP v1beta1 to v1 [#5256](https://github.com/openshift/machine-config-operator/pull/5256)
* [OCPBUGS-57084](https://issues.redhat.com/browse/OCPBUGS-57084): scope MCD node listers to current node [#5107](https://github.com/openshift/machine-config-operator/pull/5107)
* [OCPBUGS-60239](https://issues.redhat.com/browse/OCPBUGS-60239): Add workaround fix for static pod race [#5231](https://github.com/openshift/machine-config-operator/pull/5231)
* [OCPBUGS-58292](https://issues.redhat.com/browse/OCPBUGS-58292): Do not set cpu system reserve below the default value [#5157](https://github.com/openshift/machine-config-operator/pull/5157)
* [OCPBUGS-58063](https://issues.redhat.com/browse/OCPBUGS-58063): Update desired config in MCN on OCL update [#5139](https://github.com/openshift/machine-config-operator/pull/5139)
* [OCPBUGS-56625](https://issues.redhat.com/browse/OCPBUGS-56625): Give keepalived container chroot cap [#5072](https://github.com/openshift/machine-config-operator/pull/5072)
* [OCPBUGS-58219](https://issues.redhat.com/browse/OCPBUGS-58219): Boot image controller should correctly handle marketplace boot images [#5151](https://github.com/openshift/machine-config-operator/pull/5151)
* [OCPBUGS-58218](https://issues.redhat.com/browse/OCPBUGS-58218): add MachineConfiguration to CO related objects [#5150](https://github.com/openshift/machine-config-operator/pull/5150)
* [OCPBUGS-57135](https://issues.redhat.com/browse/OCPBUGS-57135): pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition [#5111](https://github.com/openshift/machine-config-operator/pull/5111)
* [OCPBUGS-56901](https://issues.redhat.com/browse/OCPBUGS-56901): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5096](https://github.com/openshift/machine-config-operator/pull/5096)
* [OCPBUGS-56976](https://issues.redhat.com/browse/OCPBUGS-56976): Boot Image Controller should not degrade when golden configmap is slow to update [#5101](https://github.com/openshift/machine-config-operator/pull/5101)
* [OCPBUGS-56990](https://issues.redhat.com/browse/OCPBUGS-56990): Only update boot disks during GCP boot image updates [#5102](https://github.com/openshift/machine-config-operator/pull/5102)
* [OCPBUGS-56828](https://issues.redhat.com/browse/OCPBUGS-56828): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5087](https://github.com/openshift/machine-config-operator/pull/5087)
* [OCPBUGS-52313](https://issues.redhat.com/browse/OCPBUGS-52313): Update machine-config-daemon-pull.service to use custom policy for Podman &lt; 4.4.1 [#4893](https://github.com/openshift/machine-config-operator/pull/4893)
* [OCPBUGS-56665](https://issues.redhat.com/browse/OCPBUGS-56665): Add hot loop detection in the boot image controller [#5077](https://github.com/openshift/machine-config-operator/pull/5077)
* [OCPBUGS-56395](https://issues.redhat.com/browse/OCPBUGS-56395): error from generateAndValidateRenderedMachineConfig function can be misleading [#5060](https://github.com/openshift/machine-config-operator/pull/5060)
* [OCPBUGS-56218](https://issues.redhat.com/browse/OCPBUGS-56218): Rewrote TestFirstBootHasSSHKeys e2e test in pure Go [#5053](https://github.com/openshift/machine-config-operator/pull/5053)
* [OCPBUGS-55615](https://issues.redhat.com/browse/OCPBUGS-55615): MSBIC should not update windows machinesets [#5021](https://github.com/openshift/machine-config-operator/pull/5021)
* [OCPBUGS-55490](https://issues.redhat.com/browse/OCPBUGS-55490): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#5020](https://github.com/openshift/machine-config-operator/pull/5020)
* [OCPBUGS-54830](https://issues.redhat.com/browse/OCPBUGS-54830): Make mtu-migration run after wait-for-primary-ip [#4989](https://github.com/openshift/machine-config-operator/pull/4989)
* [OCPBUGS-52314](https://issues.redhat.com/browse/OCPBUGS-52314): on-prem/resolv-prepender: stop leaking tmp files [#4894](https://github.com/openshift/machine-config-operator/pull/4894)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/8c86422ffddcad9d55ad07342cfffa35eb59dacc...dd398f82b7fef5e78fb2d248e1e95c20dd946df0)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/03af8514abbbd588bcc5514ff591b769d1241c09)

* [OCPBUGS-68192](https://issues.redhat.com/browse/OCPBUGS-68192): [4.17] Uplift logrus [#152](https://github.com/openshift/image-customization-controller/pull/152)
* append .0 to go.mod version [#135](https://github.com/openshift/image-customization-controller/pull/135)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/74bee37482b0e9d581c2e12c8040195169e49032...03af8514abbbd588bcc5514ff591b769d1241c09)


### [metallb-frr](https://github.com/openshift/frr/tree/c0182036769726484b96a20db5e8be211d2f88b6)

* [OCPBUGS-55021](https://issues.redhat.com/browse/OCPBUGS-55021): Backport DynamicASN [#92](https://github.com/openshift/frr/pull/92)
* [OCPBUGS-55344](https://issues.redhat.com/browse/OCPBUGS-55344): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#89](https://github.com/openshift/frr/pull/89)
* [Full changelog](https://github.com/openshift/frr/compare/c30988b0bda9815fd0b8686fd10d423a5055262f...c0182036769726484b96a20db5e8be211d2f88b6)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/8d96a52a27c65dc5fe45d86f203ac322fb0402ee)

* [OCPBUGS-70290](https://issues.redhat.com/browse/OCPBUGS-70290): Manual cherry pick qs vulnerability 4 17 [#747](https://github.com/openshift/monitoring-plugin/pull/747)
* [OCPBUGS-64942](https://issues.redhat.com/browse/OCPBUGS-64942): Use tenancy access to metric lables [#639](https://github.com/openshift/monitoring-plugin/pull/639)
* [OU-1058](https://issues.redhat.com/browse/OU-1058): Don't show TP button in non-administrator [#637](https://github.com/openshift/monitoring-plugin/pull/637)
* [OCPBUGS-62282](https://issues.redhat.com/browse/OCPBUGS-62282): align dev and admin persective tab names [#602](https://github.com/openshift/monitoring-plugin/pull/602)
* [OCPBUGS-62282](https://issues.redhat.com/browse/OCPBUGS-62282): add missing translation string [#587](https://github.com/openshift/monitoring-plugin/pull/587)
* [OCPBUGS-61891](https://issues.redhat.com/browse/OCPBUGS-61891): feat: add alerting rules tab to dev console [#538](https://github.com/openshift/monitoring-plugin/pull/538)
* [OCPBUGS-59399](https://issues.redhat.com/browse/OCPBUGS-59399): Fix "Export as CSV" [#468](https://github.com/openshift/monitoring-plugin/pull/468)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/32463001843feb1cf87b175d75187fc35cfa3caf...8d96a52a27c65dc5fe45d86f203ac322fb0402ee)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/041b743a1172af3c8ace0cf046fe95bda7a9d5a2)

* [OCPBUGS-58770](https://issues.redhat.com/browse/OCPBUGS-58770): Update the github.com/golang/glog module to v1.2.4 [#102](https://github.com/openshift/multus-admission-controller/pull/102)
* append .0 to go.mod version [#97](https://github.com/openshift/multus-admission-controller/pull/97)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/076f0caa98ca33b0eb4d3cdb0f984de03e8bd6b7...041b743a1172af3c8ace0cf046fe95bda7a9d5a2)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/93d87533af805ff6d8ede2eb3fde4e605fbda3f9)

* [OCPBUGS-43391](https://issues.redhat.com/browse/OCPBUGS-43391): Update net-attach-def client library to 1.7.5 for cri-o functionality [backport 4.17] [#257](https://github.com/openshift/multus-cni/pull/257)
* [Full changelog](https://github.com/openshift/multus-cni/compare/af7b9cbf4fc26091e78c2db9e7742df969a27888...93d87533af805ff6d8ede2eb3fde4e605fbda3f9)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/4d0b170379c4e158d976b4dd7bccbed5835fdede)

* append .0 to go.mod version [#71](https://github.com/openshift/multus-networkpolicy/pull/71)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/7d01ea1c54c4eeace626f05a9dcc94230b3a9ec8...4d0b170379c4e158d976b4dd7bccbed5835fdede)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b)

* [OCPBUGS-73728](https://issues.redhat.com/browse/OCPBUGS-73728): Update tag on ci-operator.yaml file [#395](https://github.com/openshift/whereabouts-cni/pull/395)
* [OCPBUGS-70256](https://issues.redhat.com/browse/OCPBUGS-70256): Prevent accidental IP deallocation in statefulsets [#393](https://github.com/openshift/whereabouts-cni/pull/393)
* [OCPBUGS-55617](https://issues.redhat.com/browse/OCPBUGS-55617): Fixes leftover podref issue [#364](https://github.com/openshift/whereabouts-cni/pull/364)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/a9576ed9e3bb9df10586a1e245880ef05156bdf4...40cfb3dca70a4d37dff426c0ec1c77efcb399e1b)


### [must-gather](https://github.com/openshift/must-gather/tree/2429998f12191eac5ffa83f3d189bb92a29724dd)

* [OCPBUGS-60607](https://issues.redhat.com/browse/OCPBUGS-60607): Separate resources with comma to fix malformed inspect [#504](https://github.com/openshift/must-gather/pull/504)
* NO-JIRA: append .0 to go.mod version [#492](https://github.com/openshift/must-gather/pull/492)
* [Full changelog](https://github.com/openshift/must-gather/compare/56b34277f6e67963db422373c360509176e5565a...2429998f12191eac5ffa83f3d189bb92a29724dd)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/cc7b628e6d4c0331d0515b7b59a0d22699ed6ea3)

* [OCPBUGS-59620](https://issues.redhat.com/browse/OCPBUGS-59620): Bump github.com/containernetworking/plugins from to 1.7.1 [#83](https://github.com/openshift/bond-cni/pull/83)
* NO-JIRA: Add ci-operator file [#82](https://github.com/openshift/bond-cni/pull/82)
* [Full changelog](https://github.com/openshift/bond-cni/compare/8630f336431ccca04de465f991dbdf3ab736913b...cc7b628e6d4c0331d0515b7b59a0d22699ed6ea3)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/f56bbf7af25fbae200c966378337db85c6b17126)

* append .0 to go.mod version [#105](https://github.com/openshift/network-metrics-daemon/pull/105)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/ddb486ae8c68d228a1421c779ec8fe35fc436ccb...f56bbf7af25fbae200c966378337db85c6b17126)


### [network-tools](https://github.com/openshift/network-tools/tree/e59e7b258e2baa5815bc13763804694615896ab0)

* append .0 to go.mod version [#148](https://github.com/openshift/network-tools/pull/148)
* [Full changelog](https://github.com/openshift/network-tools/compare/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1...e59e7b258e2baa5815bc13763804694615896ab0)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/2b419724d25df1e7ac0781d5a5edfe2f96b62e5a)

* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#320](https://github.com/openshift/networking-console-plugin/pull/320)
* [OCPBUGS-60180](https://issues.redhat.com/browse/OCPBUGS-60180): Fix ingress details [#265](https://github.com/openshift/networking-console-plugin/pull/265)
* [OCPBUGS-60128](https://issues.redhat.com/browse/OCPBUGS-60128): Fix requiremenets with no value [#260](https://github.com/openshift/networking-console-plugin/pull/260)
* Add translations 4.17 [#239](https://github.com/openshift/networking-console-plugin/pull/239)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/99b73a5025e60b15c0d1af6e0be0d9b2190a8b4b...2b419724d25df1e7ac0781d5a5edfe2f96b62e5a)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/a4fadcbc22579320fdf7cd7d98071c15f32aa163)

* [OCPBUGS-51859](https://issues.redhat.com/browse/OCPBUGS-51859): CVE-2025-22868 [#111](https://github.com/openshift/machine-api-provider-nutanix/pull/111)
* [OCPBUGS-47267](https://issues.redhat.com/browse/OCPBUGS-47267): fixing CVE-2024-45338 [#92](https://github.com/openshift/machine-api-provider-nutanix/pull/92)
* [OCPBUGS-55728](https://issues.redhat.com/browse/OCPBUGS-55728): Fix link-local addresses being added to machine [#102](https://github.com/openshift/machine-api-provider-nutanix/pull/102)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/68aa2bbf47a02361b89cdd71ea18968a78cbd0c0...a4fadcbc22579320fdf7cd7d98071c15f32aa163)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e078aeb29048d2b37e0b8e2657641a9207fd4d84)

* [OCPBUGS-66228](https://issues.redhat.com/browse/OCPBUGS-66228): UPSTREAM &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#157](https://github.com/openshift/oauth-apiserver/pull/157)
* NO-JIRA: (chore): update OWNERS file [#171](https://github.com/openshift/oauth-apiserver/pull/171)
* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): Bump openshift/kubernetes-apiserver for etcd retry patches. [#143](https://github.com/openshift/oauth-apiserver/pull/143)
* append .0 to go.mod version [#133](https://github.com/openshift/oauth-apiserver/pull/133)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/04782ff30cdc7c11ec12b266a76f83765aaadf34...e078aeb29048d2b37e0b8e2657641a9207fd4d84)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/a9f1a5c8a04f216bdcd7fafff84b4c47d2af6ec2)

* [OCPBUGS-61445](https://issues.redhat.com/browse/OCPBUGS-61445): Update x/crypto to v0.31.0 [#334](https://github.com/openshift/oauth-proxy/pull/334)
* [OCPBUGS-58472](https://issues.redhat.com/browse/OCPBUGS-58472): fix e2e tests [#327](https://github.com/openshift/oauth-proxy/pull/327)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/07d03d7169fcc6dd7733f09df47c2ffad46fda34...a9f1a5c8a04f216bdcd7fafff84b4c47d2af6ec2)


### [oauth-server](https://github.com/openshift/oauth-server/tree/731ed82ec3b483cbe0b8ea4ffc52479aa0f1d4b7)

* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): Bump openshift/kubernetes-apiserver for etcd retry patches. [#198](https://github.com/openshift/oauth-server/pull/198)
* append .0 to go.mod version [#185](https://github.com/openshift/oauth-server/pull/185)
* [Full changelog](https://github.com/openshift/oauth-server/compare/5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db...731ed82ec3b483cbe0b8ea4ffc52479aa0f1d4b7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/58375b70881938be8a1e08750507e4a40943f6fd)

* Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) [#1269](https://github.com/openshift/oc-mirror/pull/1269)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/39bedc78d79bd13ea7271e5d4c72a12890b05631...58375b70881938be8a1e08750507e4a40943f6fd)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/2ebbed4677b90c09899a96afc4f0a750e802f65e)

* [OCPBUGS-68208](https://issues.redhat.com/browse/OCPBUGS-68208): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] [#609](https://github.com/openshift/openshift-apiserver/pull/609)
* [OCPBUGS-74143](https://issues.redhat.com/browse/OCPBUGS-74143): pkg/image: conditionally parse raw image manifest [#596](https://github.com/openshift/openshift-apiserver/pull/596)
* [OCPBUGS-66229](https://issues.redhat.com/browse/OCPBUGS-66229): UPSTREAM &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#584](https://github.com/openshift/openshift-apiserver/pull/584)
* [OCPBUGS-63392](https://issues.redhat.com/browse/OCPBUGS-63392): Wire dry run option to Image API server operations [#565](https://github.com/openshift/openshift-apiserver/pull/565)
* [OCPBUGS-61584](https://issues.redhat.com/browse/OCPBUGS-61584): Bump openshift/kubernetes-apiserver for etcd retry patches. [#554](https://github.com/openshift/openshift-apiserver/pull/554)
* [OCPBUGS-53382](https://issues.redhat.com/browse/OCPBUGS-53382): Skip blocked registry check for registries with mirrors [#500](https://github.com/openshift/openshift-apiserver/pull/500)
* [OCPBUGS-58821](https://issues.redhat.com/browse/OCPBUGS-58821): Fix image reference in TestImageStreamImportQuayIO [#515](https://github.com/openshift/openshift-apiserver/pull/515)
* append .0 to go.mod version [#525](https://github.com/openshift/openshift-apiserver/pull/525)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/58f7b42a71637c63e8fd7943661c98bd92657426...2ebbed4677b90c09899a96afc4f0a750e802f65e)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/967faa66125ae77148df87d8394d07112c4c0b8c)

* [OCPBUGS-61199](https://issues.redhat.com/browse/OCPBUGS-61199): legacy image pull secret rollback controller [#413](https://github.com/openshift/openshift-controller-manager/pull/413)
* [OCPBUGS-57950](https://issues.redhat.com/browse/OCPBUGS-57950): ignore error failing to find pull/push secrets [#400](https://github.com/openshift/openshift-controller-manager/pull/400)
* [OCPBUGS-57480](https://issues.redhat.com/browse/OCPBUGS-57480): Set node-pullsecrets volume to read-only to protect image pull credentials [#393](https://github.com/openshift/openshift-controller-manager/pull/393)
* [OCPBUGS-55826](https://issues.redhat.com/browse/OCPBUGS-55826): Empty proxy variables are causing issues during the build [#379](https://github.com/openshift/openshift-controller-manager/pull/379)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/70aa014585cd33fc21f27ba20a722c71faf3c411...967faa66125ae77148df87d8394d07112c4c0b8c)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/adf649209467aef8d5da1d17851fa991285edbc2)

* append .0 to go.mod version [#124](https://github.com/openshift/openshift-state-metrics/pull/124)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/1e963eb5839e2408734e37765d4d6b8fc48b343d...adf649209467aef8d5da1d17851fa991285edbc2)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/5593c5f7f70758cec5e9feac54eb248fbd6d75d8)

* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#343](https://github.com/openshift/cluster-api-provider-openstack/pull/343)
* append .0 to go.mod version [#364](https://github.com/openshift/cluster-api-provider-openstack/pull/364)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/23512b675c57095bc03ac0da8cad39561d6aef9b...5593c5f7f70758cec5e9feac54eb248fbd6d75d8)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/30a867ea5ba7d805ce0cca8172feb7dd6480ea1a)

* [OCPBUGS-76793](https://issues.redhat.com/browse/OCPBUGS-76793): Fix make test [#160](https://github.com/openshift/machine-api-provider-openstack/pull/160)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/689718740b923e516c037d7862d81a462ecdbbd3...30a867ea5ba7d805ce0cca8172feb7dd6480ea1a)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e92a5cf8d93f756e47646aaf8f064f656a5f27dd)

* [OCPBUGS-76953](https://issues.redhat.com/browse/OCPBUGS-76953): Remove the collect-profiles job [#1232](https://github.com/openshift/operator-framework-olm/pull/1232)
* [OCPBUGS-67301](https://issues.redhat.com/browse/OCPBUGS-67301): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1172](https://github.com/openshift/operator-framework-olm/pull/1172)
* [OCPBUGS-57092](https://issues.redhat.com/browse/OCPBUGS-57092): [release-4.17] e2e stability fixes [#1081](https://github.com/openshift/operator-framework-olm/pull/1081)
* [OCPBUGS-60791](https://issues.redhat.com/browse/OCPBUGS-60791): Add NetworkPolicy as a supported kind [#1058](https://github.com/openshift/operator-framework-olm/pull/1058)
* [OCPBUGS-57428](https://issues.redhat.com/browse/OCPBUGS-57428): reduce cache expiry frequency [release-4.19] [#1021](https://github.com/openshift/operator-framework-olm/pull/1021)
* [OCPBUGS-59253](https://issues.redhat.com/browse/OCPBUGS-59253): Reduce Frequency of Update Requests for Copied CSVs (#3597) [#1036](https://github.com/openshift/operator-framework-olm/pull/1036)
* [OCPBUGS-57438](https://issues.redhat.com/browse/OCPBUGS-57438): operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1025](https://github.com/openshift/operator-framework-olm/pull/1025)
* [OCPBUGS-56250](https://issues.redhat.com/browse/OCPBUGS-56250): fix(olm): improve error logging for missing olm.managed label (#3558) [#1004](https://github.com/openshift/operator-framework-olm/pull/1004)
* [OCPBUGS-51226](https://issues.redhat.com/browse/OCPBUGS-51226), [OCPBUGS-51228](https://issues.redhat.com/browse/OCPBUGS-51228), [OCPBUGS-51246](https://issues.redhat.com/browse/OCPBUGS-51246): (vendor) pin go-jose/v4@v4.0.5 [#998](https://github.com/openshift/operator-framework-olm/pull/998)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d3b1715867b6e96a9ee71e158a9f0fd6ab6f792f...e92a5cf8d93f756e47646aaf8f064f656a5f27dd)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f)

* [OCPBUGS-68212](https://issues.redhat.com/browse/OCPBUGS-68212), [OCPBUGS-68213](https://issues.redhat.com/browse/OCPBUGS-68213): [release-4.17] CVE-2025-65637 fixed in logrus v1.9.3+ [#710](https://github.com/operator-framework/operator-marketplace/pull/710)
* [OCPBUGS-62219](https://issues.redhat.com/browse/OCPBUGS-62219): Remove Expect func so that the test case can use the retry logic [#670](https://github.com/operator-framework/operator-marketplace/pull/670)
* [OCPBUGS-61036](https://issues.redhat.com/browse/OCPBUGS-61036): Update memoryTarget on catalog source pods [#663](https://github.com/operator-framework/operator-marketplace/pull/663)
* [ART-13124](https://issues.redhat.com/browse/ART-13124): append .0 to go.mod version [#638](https://github.com/operator-framework/operator-marketplace/pull/638)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/f03e282a50ae794ec1b84a611a9fbbbd35d9f0ac...5cf36fde25cf22b7f58b0a3242f82cadd18acc6f)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/65c8e33b2d939d00e609c49d55b06334769cc0f8)

* [OCPBUGS-68230](https://issues.redhat.com/browse/OCPBUGS-68230): Bump github.com/sirupsen/logrus to v1.8.3 [#151](https://github.com/openshift/ovirt-csi-driver-operator/pull/151)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/0feae256abcc9b86c0276eaf2fc233cf899fb0ae...65c8e33b2d939d00e609c49d55b06334769cc0f8)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/f1ca69af3bf1d2d4a984579aa11a6a491da706fb)

* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-74492](https://issues.redhat.com/browse/OCPBUGS-74492): [release-4.17] Dockerfile: Unpin OVN and consume the latest from FDP [#2959](https://github.com/openshift/ovn-kubernetes/pull/2959)
* [release:4.17] OCPBUGS-71985: Fix conntrack reconciliation to use service port instead of endpoint port [#2936](https://github.com/openshift/ovn-kubernetes/pull/2936)
* [OCPBUGS-71218](https://issues.redhat.com/browse/OCPBUGS-71218): [release-4.17] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) [#2905](https://github.com/openshift/ovn-kubernetes/pull/2905)
* [OCPBUGS-71198](https://issues.redhat.com/browse/OCPBUGS-71198): NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated [#2923](https://github.com/openshift/ovn-kubernetes/pull/2923)
* [OCPBUGS-68348](https://issues.redhat.com/browse/OCPBUGS-68348): Add ricky-rav to OWNERS for release-4.17 [#2898](https://github.com/openshift/ovn-kubernetes/pull/2898)
* [OCPBUGS-65928](https://issues.redhat.com/browse/OCPBUGS-65928): Skip Pending pods in EgressIP status [#2871](https://github.com/openshift/ovn-kubernetes/pull/2871)
* [OCPBUGS-65569](https://issues.redhat.com/browse/OCPBUGS-65569): [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods [#2857](https://github.com/openshift/ovn-kubernetes/pull/2857)
* [OCPBUGS-64856](https://issues.redhat.com/browse/OCPBUGS-64856): Fix stale EIP assignments during failover and controller restart [#2850](https://github.com/openshift/ovn-kubernetes/pull/2850)
* [OCPBUGS-64674](https://issues.redhat.com/browse/OCPBUGS-64674): [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime [#2843](https://github.com/openshift/ovn-kubernetes/pull/2843)
* [OCPBUGS-63154](https://issues.redhat.com/browse/OCPBUGS-63154): Fix EgressIP stale GARP post reboot + pod restart [#2807](https://github.com/openshift/ovn-kubernetes/pull/2807)
* [OCPBUGS-61749](https://issues.redhat.com/browse/OCPBUGS-61749): [release-4.17] Fix dnsnameresolver address set [#2796](https://github.com/openshift/ovn-kubernetes/pull/2796)
* [OCPBUGS-60484](https://issues.redhat.com/browse/OCPBUGS-60484): Update OWNERS file: Add Patryk/Martin as approvers [#2717](https://github.com/openshift/ovn-kubernetes/pull/2717)
* [OCPBUGS-59381](https://issues.redhat.com/browse/OCPBUGS-59381): [release-4.17] Fix default network -&gt; localnet [#2667](https://github.com/openshift/ovn-kubernetes/pull/2667)
* [OCPBUGS-58160](https://issues.redhat.com/browse/OCPBUGS-58160): Unpin OVS patch versions, move to ovs 3.5 [#2647](https://github.com/openshift/ovn-kubernetes/pull/2647)
* [OCPBUGS-57109](https://issues.redhat.com/browse/OCPBUGS-57109): Fix hybrid overlay node subnets collision with cluster subnets [#2620](https://github.com/openshift/ovn-kubernetes/pull/2620)
* [OCPBUGS-57107](https://issues.redhat.com/browse/OCPBUGS-57107): Increase InformerSyncTimeout to 60s [#2623](https://github.com/openshift/ovn-kubernetes/pull/2623)
* [OCPBUGS-56443](https://issues.redhat.com/browse/OCPBUGS-56443): Fix predicate for cluster subnet route to gateway router [#2578](https://github.com/openshift/ovn-kubernetes/pull/2578)
* [OCPBUGS-56244](https://issues.redhat.com/browse/OCPBUGS-56244): Allow default network pods to reach localnet on the same node [#2572](https://github.com/openshift/ovn-kubernetes/pull/2572)
* [OCPBUGS-52480](https://issues.redhat.com/browse/OCPBUGS-52480): Handles unspecified protocol in network policy port [#2478](https://github.com/openshift/ovn-kubernetes/pull/2478)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b02d1af7d45ae88c91785ebc83ddec23348596cf...f1ca69af3bf1d2d4a984579aa11a6a491da706fb)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/b7478d7e98f4596d01e84193222f17d4c13a2a09)

* [OCPBUGS-61204](https://issues.redhat.com/browse/OCPBUGS-61204): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#126](https://github.com/openshift/machine-api-provider-powervs/pull/126)
* append .0 to go.mod version [#117](https://github.com/openshift/machine-api-provider-powervs/pull/117)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/d7b13a63a1b221ca745ace326f92ec3a6162941f...b7478d7e98f4596d01e84193222f17d4c13a2a09)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/c84c4898843d6a1b0d16a59e3c42d99d1f636c43)

* append .0 to go.mod version [#381](https://github.com/openshift/prom-label-proxy/pull/381)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/d80e904430effd51a5f00bf6345a2108b33bc15e...c84c4898843d6a1b0d16a59e3c42d99d1f636c43)


### [prometheus](https://github.com/openshift/prometheus/tree/97cd47978721d9e77d22c4d4798f43896324683b)

* [OCPBUGS-61766](https://issues.redhat.com/browse/OCPBUGS-61766): chore: compute highestTimestamp at queryManager level [#268](https://github.com/openshift/prometheus/pull/268)
* append .0 to go.mod version [#258](https://github.com/openshift/prometheus/pull/258)
* [OCPBUGS-56738](https://issues.redhat.com/browse/OCPBUGS-56738): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#254](https://github.com/openshift/prometheus/pull/254)
* [Full changelog](https://github.com/openshift/prometheus/compare/b43f995336f617a43c9aebacc309b1605cb81d3c...97cd47978721d9e77d22c4d4798f43896324683b)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc)

* [OCPBUGS-75885](https://issues.redhat.com/browse/OCPBUGS-75885): Include go-verify-deps expected files in gitignore [#115](https://github.com/openshift/prometheus-alertmanager/pull/115)
* append .0 to go.mod version [#102](https://github.com/openshift/prometheus-alertmanager/pull/102)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d7c1a7c6ac4b5482174797649834a47fc39d2575...d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/9cb457b8a8dd7e245e58ecd348f6331cc7922077)

* [OCPBUGS-58408](https://issues.redhat.com/browse/OCPBUGS-58408): Fix: One Alertmanager Config failing blocks all others. (#6585) [#336](https://github.com/openshift/prometheus-operator/pull/336)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867...9cb457b8a8dd7e245e58ecd348f6331cc7922077)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/8f095361ae68660fbcf0c3e32020a3df9568ae90)

* append .0 to go.mod version [#167](https://github.com/openshift/node_exporter/pull/167)
* [Full changelog](https://github.com/openshift/node_exporter/compare/d88fd69b579485146a584e8640c82a09daed2d5e...8f095361ae68660fbcf0c3e32020a3df9568ae90)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/02bbf80ada3d5acaf36873b1fe69c71badc6d8d7)

* [OCPBUGS-55943](https://issues.redhat.com/browse/OCPBUGS-55943): Added error event for failed ingress to route conversion [#60](https://github.com/openshift/route-controller-manager/pull/60)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/cd4a3dc28ce3a7fe5a65a00df20cfcddb561bf49...02bbf80ada3d5acaf36873b1fe69c71badc6d8d7)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)

* [OCPBUGS-68220](https://issues.redhat.com/browse/OCPBUGS-68220): Update logrus to 1.9.3 to address CVE-2025-65637 [#316](https://github.com/openshift/service-ca-operator/pull/316)
* Fix for OCPBUGS-68221: CVE-2025-65637 bump github.com/sirupsen/logrus to v1.9.3 [#309](https://github.com/openshift/service-ca-operator/pull/309)
* append .0 to go.mod version [#266](https://github.com/openshift/service-ca-operator/pull/266)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/f1b63073aa91cf1c226d0ec46d3dfc2d65c3877f...2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)


### [telemeter](https://github.com/openshift/telemeter/tree/0238640e519c01f3eedd00b8dc82f34d2c502daf)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#562](https://github.com/openshift/telemeter/pull/562)
* [Full changelog](https://github.com/openshift/telemeter/compare/e2b25245eb81ba6bc3821574f889678ceae1b16a...0238640e519c01f3eedd00b8dc82f34d2c502daf)


### [tests](https://github.com/openshift/origin/tree/5abe37f6f7844abc4d088595c0631734fb46864c)

* [OCPBUGS-65492](https://issues.redhat.com/browse/OCPBUGS-65492): Add imagestream update dryrun test [#30479](https://github.com/openshift/origin/pull/30479)
* [OCPBUGS-64927](https://issues.redhat.com/browse/OCPBUGS-64927): update telemtery limit for 4.17 e2e case [#30472](https://github.com/openshift/origin/pull/30472)
* [OCPBUGS-64641](https://issues.redhat.com/browse/OCPBUGS-64641): Migrate OCP-32383 to upstream [#30455](https://github.com/openshift/origin/pull/30455)
* [OCPBUGS-63392](https://issues.redhat.com/browse/OCPBUGS-63392): Backport pr 29834 to release-4.18 [#30408](https://github.com/openshift/origin/pull/30408)
* [OCPBUGS-61162](https://issues.redhat.com/browse/OCPBUGS-61162): images/tests: Remove rteval [#30202](https://github.com/openshift/origin/pull/30202)
* NO-JIRA: Update extended/networking OWNERS [#30090](https://github.com/openshift/origin/pull/30090)
* [OCPBUGS-57324](https://issues.redhat.com/browse/OCPBUGS-57324): Fix bearer token exposure in exit condition as well [#29910](https://github.com/openshift/origin/pull/29910)
* [OCPBUGS-57888](https://issues.redhat.com/browse/OCPBUGS-57888): Bump to Kubernetes v1.30.14 [#29983](https://github.com/openshift/origin/pull/29983)
* [OCPBUGS-50664](https://issues.redhat.com/browse/OCPBUGS-50664): Replace RunHostCmd with Exec function to censor bearer token being exposed [#29539](https://github.com/openshift/origin/pull/29539)
* [OCPBUGS-56221](https://issues.redhat.com/browse/OCPBUGS-56221): aws/edge: prevent test using unschedulable nodes [#29792](https://github.com/openshift/origin/pull/29792)
* [OCPBUGS-55451](https://issues.redhat.com/browse/OCPBUGS-55451): support provider type external [#29737](https://github.com/openshift/origin/pull/29737)
* [OCPBUGS-55269](https://issues.redhat.com/browse/OCPBUGS-55269): Bump to Kubernetes v1.30.12 [#29771](https://github.com/openshift/origin/pull/29771)
* [OCPBUGS-55498](https://issues.redhat.com/browse/OCPBUGS-55498): [build] Ensure Git Clone Does Not Run Privileged [#29743](https://github.com/openshift/origin/pull/29743)
* [Full changelog](https://github.com/openshift/origin/compare/95cbab598b1c8c32d7f82ebb1f2ebd5b8c672d64...5abe37f6f7844abc4d088595c0631734fb46864c)


### [thanos](https://github.com/openshift/thanos/tree/98c993712257ae4c1335e493d037ee1f71284793)

* append .0 to go.mod version [#161](https://github.com/openshift/thanos/pull/161)
* [Full changelog](https://github.com/openshift/thanos/compare/5b567365230115e5c242dd719110bac52fc2a4ef...98c993712257ae4c1335e493d037ee1f71284793)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/6a5d803e20e05510ba93135df96ad063aaf272de)

* [OCPBUGS-61652](https://issues.redhat.com/browse/OCPBUGS-61652): Fix unit tests [#71](https://github.com/openshift/cluster-api-provider-vsphere/pull/71)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/1661cc3f7997902caf0ea71fbef9ea394f3b14ef...6a5d803e20e05510ba93135df96ad063aaf272de)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4b70f176dc1e93aa41ca98bd0d0152df0a616eb4)

* [OCPBUGS-68224](https://issues.redhat.com/browse/OCPBUGS-68224): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#157](https://github.com/openshift/vmware-vsphere-csi-driver/pull/157)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/039ee3684d5addee3ff8436b19462def77bd5804...4b70f176dc1e93aa41ca98bd0d0152df0a616eb4)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/62ca90bcfaf7a030eb1734e9df66366b9dc009e6)

* [OCPBUGS-61755](https://issues.redhat.com/browse/OCPBUGS-61755): Check for number of FailureDomain-s in GetVCenter() [#190](https://github.com/openshift/vsphere-problem-detector/pull/190)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/cd0df71f2ec22d84676f40b042d4603e9c94c360...62ca90bcfaf7a030eb1734e9df66366b9dc009e6)