# 4.17.59

Created: 2026-10-07 13:20:56 +0000 UTC

Image Digest: `sha256:e94eed312b5fabec9333a6d27547fb01ccf528b3e5706a03a6916409dde24cd2`


## Changes from 4.17.49

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.14
* Kubernetes Tests 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202602090846-0 to 417.94.202610010234-0


### Removed images

* ovirt-csi-driver
* ovirt-csi-driver-operator


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:32b1c2b9c9ee8353c5328b090a3e46aff9d74d035aabfb1aa5b4ac81e638906d`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [2b53de06](https://github.com/openshift/machine-api-provider-aws/commit/2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7) `sha256:a530334b80f8129fe6f4f933f10be25699accafef90c3a456e731cb2e53a8ed9`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [80efc4ea](https://github.com/openshift/aws-pod-identity-webhook/commit/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56) `sha256:ef3c3275bb33f4feead2bc8c823ecee38b4b02288533148dd5cb1ce41c3b4355`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [6707f899](https://github.com/openshift/azure-workload-identity/commit/6707f899c269e98a102ac72900bb96fa826ba652) `sha256:74cee7c5bf9516abd035a3ba22a914e491c7685b0b858aa64c711b4733f38dcf`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:e96de5583c04facdf0818055d437e8dfc7e68b72a9a0b42a48b52216c99096e9`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [ae674d78](https://github.com/openshift/cluster-api-provider-baremetal/commit/ae674d7808379c454f972ff0cccac8bb9adcc98f) `sha256:51d820660f2e0daaf01225cceeaf46e517e23c70958ad6fb31053a48b78c3a0f`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [74518950](https://github.com/openshift/baremetal-runtimecfg/commit/745189508eec80ee07a921d1b2c227812db37237) `sha256:926f57969839581b6211cbc0a1bd0d9f7a48d4c191aebc841fe056f551cfb4eb`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [241af368](https://github.com/openshift/cloud-network-config-controller/commit/241af368428cb2deedeaf8e21d237aa01216292a) `sha256:4a64d5874bf005d45b958a3d63b429dd838ccbe6785bfa9eb3130255f9096fc0`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:faa7b16a1d84466c142483aab8fb7cacb44e90c73f3d34050a8fc36d697f5cbc`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [6d4c0096](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1) `sha256:74653f0b8ddb9f6839548c242b64e3b0754c9dba8c8f42a39edf605c92663444`
* [cluster-config-api](https://github.com/openshift/api) git [92c55bf0](https://github.com/openshift/api/commit/92c55bf0f372c222dc02f17685c383d18e2c2e8b) `sha256:5a15a1a0e852171dc29c90c6624fce43c6efcc0912c5411ed2df4d8487703b2f`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [cfd318de](https://github.com/openshift/cluster-config-operator/commit/cfd318de9718f1c73b40d99900125bdca41482ef) `sha256:e1978846b560b7e4e955da4fd4e256d5c92db94803118b20f7b990a87c573077`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:073d71fbb3775e0b19393bbf436d664104da174d025f9124c32144d12d3d0b6b`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [81507f04](https://github.com/openshift/cluster-dns-operator/commit/81507f04686df3e16793b270084ead0a2a67fb38) `sha256:98173c94e1a266e2cffe58c8b54fade0c16c8dcb27817a59b24524346c0cb935`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [bfffdcba](https://github.com/openshift/cluster-etcd-operator/commit/bfffdcbac76071143cf554785ca2bde0ac69ac7e) `sha256:a971a64412ab70148b6e24e1e3f8b933f57d1ddfe9e218b60437bd15c952e963`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:5d3aa98f865bdfbc8752c32e01f8554e12cf5d16c5c06e76b1e42be0e415e73a`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:2d79fa58eae295a404914cb8e2fbd31aa79aa328e5f8c81e3452234ca69ccf6c`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:b7660eb8a9a076c7ce57a8862e1edb8364352320fbde33d40a917c3eb23af603`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [1d2ba422](https://github.com/openshift/cluster-samples-operator/commit/1d2ba42214637c7ed7e5e3e0aec257e9b949d061) `sha256:6cfb2679be5b27191b772abf231a8bb4c4de97ffc549b4ed05f834d6be4afcbc`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:02fc74d517583f7d792e9dcbe125ea04688f5cfaf48b039f588b384490b3a162`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [b855c680](https://github.com/openshift/cluster-version-operator/commit/b855c68099755979a053f60a49300d3502f44325) `sha256:4226cc20d6fa858166dabe346c33b3f50c6f619b354402b7b8e286647556ddfc`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:608e78d1225e9d35621a5a5bd858bd784639c53c400a0c879b3fb45423ba8422`
* [coredns](https://github.com/openshift/coredns) git [fe89d27d](https://github.com/openshift/coredns/commit/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567) `sha256:6c6bc184c0adb5e2d68c26b24863868f649a16c1414d9739a86c898361da75f4`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [efc99a2a](https://github.com/openshift/csi-driver-manila-operator/commit/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8) `sha256:d1c986492c2465619e8703272e32ff4c0a598dcddaf32b033fae9eab547a077c`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:eec13442c2c28d7bcbb9061690ed305e9a6f4064a99be0014d9e5406d32f424b`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:928afd24770d0ca3605c54c9a50f489ecc47ae66d548b86106b35a95a5a1cb92`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e7d841dc](https://github.com/openshift/csi-livenessprobe/commit/e7d841dc545b9fb3a8a3303b8cac62d35620905b) `sha256:fba10a11b671d289e66c7414ae7d746b26bf1176c1a677a88195728f3573a230`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3dd2253e](https://github.com/openshift/csi-node-driver-registrar/commit/3dd2253ed70cb565a63a208fa667d55f3222fb19) `sha256:e5dfd0e6470027222668ce75f2f48d599d2fbe0da1c59bde239e77e2593ff637`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:7523deeea15629cc2482e989f564aeb266cc1e9b4bfccc82c50222356db86cb2`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:b5327316d161475d9fc00031658e0995172cf907fa02423d9a8ed1b10042b2aa`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:28d7970bcacb36f0f1fac155cd831cf43fb6cd1073a45db2ae907bc6f08ed786`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:39d308ad5f6ded80f09378458e55e3eac4804cf8fe52778891052173d55acf1f`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:4613bbdc6ece6a632d6dd1d36c7b36621f66a1879aee291bc120920adb62cd76`
* [hyperkube](https://github.com/openshift/kubernetes) git [4e295fa5](https://github.com/openshift/kubernetes/commit/4e295fa517e17429af4d8004e7a8028fe719e60f) `sha256:3c0e04b0c74e07f4d6dc02563f15d846317812e0fa5543c8b883ce34a48e5242`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:e9ea45ef4b853e70c3a3a5668d89c6fec8883643a042cf08b1947d8a89697d51`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [ee301303](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/ee301303640e89a985108bf3b055051a644b5c37) `sha256:b09e1b9168d41746bde07895c10787f9d16c98b87e6b8c800eda3d34f7e1581d`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9e6596c3](https://github.com/openshift/ironic-rhcos-downloader/commit/9e6596c3f9d239d91c358299a19871905fa914fe) `sha256:8f0b574ab5246fe81eae52a718f043cba9f9000896483e1a139b95c27b56241d`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [bc5b8a2c](https://github.com/openshift/ironic-static-ip-manager/commit/bc5b8a2c3209873231a7eabd83ace578c8e182f7) `sha256:9206c95683a71ff1fd2a83caa496628003b09bde2bc2d9ac746b52c34bb14488`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:54b08a279df55887c95b07d39b72b257155ebf18fb14fd5db53dcea6570be655`
* [kube-proxy](https://github.com/openshift/sdn) git [fd50551b](https://github.com/openshift/sdn/commit/fd50551b5c640fb4bda787faaab32f8b641839e9) `sha256:2a7da00687c82338da83c1f7ef8716f6a38a5a736e7f9c69d5cd48901fd75a72`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:2110891a35b7c426cfff6c0eb9bf7b7f4c1bbafb671e980c5141fbb6a1677af2`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:0281c0b4eb31e9d5f32034fef982cbc9a9acb9dda3250b3d4d026542e6c980d5`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [03af8514](https://github.com/openshift/image-customization-controller/commit/03af8514abbbd588bcc5514ff591b769d1241c09) `sha256:c005a784c2ed11c8e19434353f25f5d65f8b752e7ad5a8dbefb31b6d8f81d31b`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [041b743a](https://github.com/openshift/multus-admission-controller/commit/041b743a1172af3c8ace0cf046fe95bda7a9d5a2) `sha256:94ad8ef90895d74239ed29036297d7c5e6f7aa7143e3529a0886ce1fec1ca837`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:79151832873b1b2f51738b72cab0acce56dab88671b5f860f5d4f7a4863874c8`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:5108e93543ecea7ef38868ae4979fc1b881de743d9df13dd3edc4b4ddcd9bbca`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [40cfb3dc](https://github.com/openshift/whereabouts-cni/commit/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b) `sha256:aeb3575bd5b1830daaddb423bfad4c2ec95fc97ea2dec94d0978f35413718b5e`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [f56bbf7a](https://github.com/openshift/network-metrics-daemon/commit/f56bbf7af25fbae200c966378337db85c6b17126) `sha256:b3b5d2813f430bbb20693d7cc4b4691ccbd8d4014679b76889c079581fa0bd09`
* [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:bfa3b7b9a8ee292a835653e04a1b62f05fdd84e93032b7d82259088918e78735`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:2315a564b13c0a698442c21c281459c75d12d01a9ddfa22bdbd2b5c3318b482c`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a4fadcbc](https://github.com/openshift/machine-api-provider-nutanix/commit/a4fadcbc22579320fdf7cd7d98071c15f32aa163) `sha256:5fef2a6eab87823ec26a172ffd1d2f15ad441956c8653a88bc127e493cc78fe6`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [e078aeb2](https://github.com/openshift/oauth-apiserver/commit/e078aeb29048d2b37e0b8e2657641a9207fd4d84) `sha256:2bb2f37b21b9d23ec27e0b34116807cce2852f545139c4580f2c55d18603d488`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [58375b70](https://github.com/openshift/oc-mirror/commit/58375b70881938be8a1e08750507e4a40943f6fd) `sha256:b9f04b35cdbb2eac9d48c63f556a90d0a8f47f1364652c37d857272d1eb4e747`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:ca0d8c608f763db4402c4e32bab418263dae0bbe258316a7a21a61a3b0a2b622`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [967faa66](https://github.com/openshift/openshift-controller-manager/commit/967faa66125ae77148df87d8394d07112c4c0b8c) `sha256:dde4a16bd8cd7abc59cf70a2b781fc39dd6fd353c55971c857830665563411e2`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [adf64920](https://github.com/openshift/openshift-state-metrics/commit/adf649209467aef8d5da1d17851fa991285edbc2) `sha256:88eb4327aaa9dd0668b509b8ab8d2d6dd62c4a4c4398dae2edc4ea17cdabd077`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:ea0a217ef44ce2246b6890cacf8ce729388b7a3755e9b6f2d7435d2c48730f10`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5cf36fde](https://github.com/operator-framework/operator-marketplace/commit/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f) `sha256:390b14feafd8b03db57946c12c5ee5766624deb1dcc27d9dd6a05d6d7d010486`
* [pod](https://github.com/openshift/kubernetes) git [4e295fa5](https://github.com/openshift/kubernetes/commit/4e295fa517e17429af4d8004e7a8028fe719e60f) `sha256:d5e58ba139187b155b06f85a2240701229370b22999f00ba540cf7d9df1d8fd4`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [b7478d7e](https://github.com/openshift/machine-api-provider-powervs/commit/b7478d7e98f4596d01e84193222f17d4c13a2a09) `sha256:d3ce49c12acfa8ca19131fc85f51244ad0e01dbc5796adfaa1284ce137ed09b3`
* rhel-coreos `sha256:f317ee961be4b4c2105c066e2b58913bd16dbe6380bb5b6b2c06bfe34bfcc8ce`
* rhel-coreos-extensions `sha256:9ab868cfdb0c448298ab7bb21fbaa388d871fc212d3d32f3f1cfca7c017df1d7`
* [tests](https://github.com/openshift/origin) git [5abe37f6](https://github.com/openshift/origin/commit/5abe37f6f7844abc4d088595c0631734fb46864c) `sha256:7b9a048594716cdfbce0a83ec42b750a5f1bf14376a289e72d2cfe46d577f35a`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/11f678ed6998c56deebdeeaec1ac755c655c694f)

* [OCPBUGS-89875](https://issues.redhat.com/browse/OCPBUGS-89875): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 [#10801](https://github.com/openshift/assisted-service/pull/10801)
* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.20 compatibility [#10016](https://github.com/openshift/assisted-service/pull/10016)
* [Full changelog](https://github.com/openshift/assisted-service/compare/bcecf7265015a4db74aa613da2294aae92b355a8...11f678ed6998c56deebdeeaec1ac755c655c694f)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/e755d585d2405fc4f7b4414ae8f263e4e3ef589d)

* [OCPBUGS-103137](https://issues.redhat.com/browse/OCPBUGS-103137): Bump x/net to v0.35.0-sec.4 [#2296](https://github.com/openshift/assisted-installer/pull/2296)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/63b2da6ef83a82468cf0c5baea4fef27a36be267...e755d585d2405fc4f7b4414ae8f263e4e3ef589d)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/aee1535a922442712eafd1058d6464cda4d9335b)

* [OCPBUGS-103143](https://issues.redhat.com/browse/OCPBUGS-103143): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#1617](https://github.com/openshift/assisted-installer-agent/pull/1617)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/df4660b4ca1ae19ccff3f2dba31e2be14b2a1d09...aee1535a922442712eafd1058d6464cda4d9335b)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b359528186b9df8ff5796f2bbfdab7f6bbaad491)

* [OCPBUGS-68141](https://issues.redhat.com/browse/OCPBUGS-68141): bump github.com/sirupsen/logrus to v1.9.3 [#238](https://github.com/openshift/agent-installer-utils/pull/238)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/79b73e6ad3610497323a821409406a1d5d174120...b359528186b9df8ff5796f2bbfdab7f6bbaad491)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/300430d912b9da0469c6aada6088c5df42819bb3)

* [OCPBUGS-103332](https://issues.redhat.com/browse/OCPBUGS-103332): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#172](https://github.com/openshift/cloud-provider-aws/pull/172)
* [OCPBUGS-88219](https://issues.redhat.com/browse/OCPBUGS-88219): replace golang.org/x/net with sustaining fork v0.35.0-sec.4 [#181](https://github.com/openshift/cloud-provider-aws/pull/181)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/144bace6c7a2ae52fcab3dabb2d9636a1465365a...300430d912b9da0469c6aada6088c5df42819bb3)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/8d4bbf28adff59be819578f702cef29236bfbfb5)

* 🌱 OCPBUGS-123711: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#644](https://github.com/openshift/cluster-api-provider-aws/pull/644)
* [OCPBUGS-78175](https://issues.redhat.com/browse/OCPBUGS-78175): [release-4.17] update go mod dependency for konflux [#590](https://github.com/openshift/cluster-api-provider-aws/pull/590)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9fda7bd72f4f44d6755d13f5351c1bb8cc55f6b0...8d4bbf28adff59be819578f702cef29236bfbfb5)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/51a0563331da53390b3b2a493fa5251e716de890)

* [OCPBUGS-82699](https://issues.redhat.com/browse/OCPBUGS-82699): Address CVE-2026-35469 [#328](https://github.com/openshift/aws-ebs-csi-driver/pull/328)
* [OCPBUGS-86234](https://issues.redhat.com/browse/OCPBUGS-86234): UPSTREAM: 2367: cleanup: `make verify` should ignore copyright year [#323](https://github.com/openshift/aws-ebs-csi-driver/pull/323)
* [OCPBUGS-80031](https://issues.redhat.com/browse/OCPBUGS-80031): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 [#314](https://github.com/openshift/aws-ebs-csi-driver/pull/314)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/2bb5b316f5941788e398f22974f9c816dd37d428...51a0563331da53390b3b2a493fa5251e716de890)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e67405981e4ceef37449f04c7b6a5b96e2735824)

* [OCPBUGS-103147](https://issues.redhat.com/browse/OCPBUGS-103147), [OCPBUGS-103155](https://issues.redhat.com/browse/OCPBUGS-103155): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#609](https://github.com/openshift/csi-operator/pull/609)
* [OCPBUGS-80133](https://issues.redhat.com/browse/OCPBUGS-80133): Bump google.golang.org/grpc [#543](https://github.com/openshift/csi-operator/pull/543)
* [Full changelog](https://github.com/openshift/csi-operator/compare/1a178e796560d227a903c1603e6fcb5a341f20ba...e67405981e4ceef37449f04c7b6a5b96e2735824)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/9b1719e3c46f18fe763ee7cdf34012a969550b0b)

* [OCPBUGS-80009](https://issues.redhat.com/browse/OCPBUGS-80009): Bump google.golang.org/grpc to v1.79.3 [#44](https://github.com/openshift/aws-encryption-provider/pull/44)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/9d4016701d355cd3a47f5ebe10f266d8971febc6...9b1719e3c46f18fe763ee7cdf34012a969550b0b)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86)

* [OCPBUGS-80035](https://issues.redhat.com/browse/OCPBUGS-80035), [OCPBUGS-80036](https://issues.redhat.com/browse/OCPBUGS-80036), [OCPBUGS-80174](https://issues.redhat.com/browse/OCPBUGS-80174): Bump google.golang.org/grpc to v1.79.3 [#181](https://github.com/openshift/cloud-provider-azure/pull/181)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/626ecd1c32f50953e84fd1cb499077d52fe53e43...5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/08c5419ade9e988a7286b714f8b9fd3be05b0e0b)

* [OCPBUGS-80037](https://issues.redhat.com/browse/OCPBUGS-80037): Bump google.golang.org/grpc to v1.79.3 [#386](https://github.com/openshift/cluster-api-provider-azure/pull/386)
* [OCPBUGS-77983](https://issues.redhat.com/browse/OCPBUGS-77983): [release-4.17] update go mod dependency for konflux [#363](https://github.com/openshift/cluster-api-provider-azure/pull/363)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/d359bfe56764238e2881f0f003fd8206b2b40dec...08c5419ade9e988a7286b714f8b9fd3be05b0e0b)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d)

* [OCPBUGS-80038](https://issues.redhat.com/browse/OCPBUGS-80038): Address CVE-2026-33186 [#143](https://github.com/openshift/azure-disk-csi-driver/pull/143)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a544f30bb48dbf6325efbb75e7114b9837c32505...e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/2201d80e445acaf19142a843dbd395d8e274e726)

* [OCPBUGS-103162](https://issues.redhat.com/browse/OCPBUGS-103162): Bump golang.org/x/net to v0.35.0-sec.4 [#159](https://github.com/openshift/azure-file-csi-driver/pull/159)
* [OCPBUGS-92849](https://issues.redhat.com/browse/OCPBUGS-92849): Bump golang.org/x/crypto to v0.33.0-sec.3 [#149](https://github.com/openshift/azure-file-csi-driver/pull/149)
* [OCPBUGS-80041](https://issues.redhat.com/browse/OCPBUGS-80041): Bump google.golang.org/grpc to v1.79.3 [#130](https://github.com/openshift/azure-file-csi-driver/pull/130)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/9f4c38c2bb28347ed5c4fd082666bfdea7382243...2201d80e445acaf19142a843dbd395d8e274e726)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/cc562120ff540e237cc170b8a82a8cbbc3a32ad2)

* [OCPBUGS-80010](https://issues.redhat.com/browse/OCPBUGS-80010): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#47](https://github.com/openshift/azure-kubernetes-kms/pull/47)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/190a0fabf17b28762b5578c0b9ffc25cf35cac64...cc562120ff540e237cc170b8a82a8cbbc3a32ad2)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/ba741f7bf4301218bf1d4cbd0be932c567a11e78)

* [OCPBUGS-103260](https://issues.redhat.com/browse/OCPBUGS-103260): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#214](https://github.com/openshift/machine-api-provider-azure/pull/214)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/439c54987c20d056ae23681d456e4e7f6a68c96d...ba741f7bf4301218bf1d4cbd0be932c567a11e78)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/de6c46c003a6c5fdffc950cb51f561087ac13964)

* [OCPBUGS-89851](https://issues.redhat.com/browse/OCPBUGS-89851), [OCPBUGS-89856](https://issues.redhat.com/browse/OCPBUGS-89856), [OCPBUGS-89859](https://issues.redhat.com/browse/OCPBUGS-89859), [OCPBUGS-92861](https://issues.redhat.com/browse/OCPBUGS-92861): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.4 [#10906](https://github.com/openshift/installer/pull/10906)
* [OCPBUGS-127575](https://issues.redhat.com/browse/OCPBUGS-127575): Update gcloud version to one that can be found [#10917](https://github.com/openshift/installer/pull/10917)
* [OCPBUGS-77898](https://issues.redhat.com/browse/OCPBUGS-77898): Update RHCOS-release-4.17 bootimage metadata to 417.94.202607240132-0 [#10796](https://github.com/openshift/installer/pull/10796)
* [OCPBUGS-67204](https://issues.redhat.com/browse/OCPBUGS-67204): Update the RHCOS 4.17 bootimage metadata [#10285](https://github.com/openshift/installer/pull/10285)
* [OCPBUGS-77791](https://issues.redhat.com/browse/OCPBUGS-77791): [Release 4.17] pkg/asset/manifests/azure: save cidr blocks [#10218](https://github.com/openshift/installer/pull/10218)
* [Full changelog](https://github.com/openshift/installer/compare/5fc357af1d96d1ac61a72efd497eab40d3106f09...de6c46c003a6c5fdffc950cb51f561087ac13964)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/087a24f21f11bc85a6d922c156bda6270e7eadfa)

* [OCPBUGS-77185](https://issues.redhat.com/browse/OCPBUGS-77185): Unblock BMH direct deletion when detached annotation is present [#462](https://github.com/openshift/baremetal-operator/pull/462)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e6e5d54abf92a20d1b0d273a90581206b7ca0b15...087a24f21f11bc85a6d922c156bda6270e7eadfa)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7189593997f243911aeeb6e473e76d5ad0fd1e50)

* [OCPBUGS-91064](https://issues.redhat.com/browse/OCPBUGS-91064), [OCPBUGS-94526](https://issues.redhat.com/browse/OCPBUGS-94526): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 [#2345](https://github.com/openshift/oc/pull/2345)
* [OCPBUGS-111835](https://issues.redhat.com/browse/OCPBUGS-111835): Fix pre-existing unit test failures [#2373](https://github.com/openshift/oc/pull/2373)
* [Full changelog](https://github.com/openshift/oc/compare/d76df14ea3d7ff9916ea576b6335cd3a220cd1bf...7189593997f243911aeeb6e473e76d5ad0fd1e50)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/6a11cde3b4cf42a9382c01f537f012f6df487899)

* [OCPBUGS-81861](https://issues.redhat.com/browse/OCPBUGS-81861): Bump go-jose/go-jose/v4@v4.1.4 [#1039](https://github.com/openshift/cloud-credential-operator/pull/1039)
* [OCPBUGS-80044](https://issues.redhat.com/browse/OCPBUGS-80044): Bump google.golang.org/grpc to v1.79.3 [#1025](https://github.com/openshift/cloud-credential-operator/pull/1025)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/662db76ca9abc7dff18d3a65140a17051fa07f9a...6a11cde3b4cf42a9382c01f537f012f6df487899)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9f93cafccca989417378a804f134f68fb4fea40d)

* [OCPBUGS-68150](https://issues.redhat.com/browse/OCPBUGS-68150): Update library-go to fix CVE-2025-65637 [#840](https://github.com/openshift/cluster-authentication-operator/pull/840)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/f641a4c6f858607f233866bb835704e784d57ef2...9f93cafccca989417378a804f134f68fb4fea40d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/efa6fd9b220e841591d8be2208cdec4ffc826429)

* [OCPBUGS-78700](https://issues.redhat.com/browse/OCPBUGS-78700): allow clusterapi provider to skip paused resources [#414](https://github.com/openshift/kubernetes-autoscaler/pull/414)
* [OCPBUGS-68151](https://issues.redhat.com/browse/OCPBUGS-68151): update logrus to version 1.9.3 [#398](https://github.com/openshift/kubernetes-autoscaler/pull/398)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/bb3e96f3656719c82f6b2049100ac79e116c3a8d...efa6fd9b220e841591d8be2208cdec4ffc826429)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/bb407dd17744ed46ac9eedde23e2a8cd7371bfc9)

* [OCPBUGS-103166](https://issues.redhat.com/browse/OCPBUGS-103166): Bump x/net package in release-4.17 [#389](https://github.com/openshift/cluster-autoscaler-operator/pull/389)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/ea4a88786cf9b237dc446e01fdacd6fd65b73144...bb407dd17744ed46ac9eedde23e2a8cd7371bfc9)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/16ed4727250a72342b3da7b280d3456f7055a6c9)

* [OCPBUGS-77446](https://issues.redhat.com/browse/OCPBUGS-77446): Bump github.com/go-errors/errors to v1.5.1 [#561](https://github.com/openshift/cluster-baremetal-operator/pull/561)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/d0f98ecf2ef4a1761b7cc116390e73b3dd7698c0...16ed4727250a72342b3da7b280d3456f7055a6c9)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/3b417931b1e94534cbde2c435c262befad8a57f1)

* [OCPBUGS-80045](https://issues.redhat.com/browse/OCPBUGS-80045): Bump google.golang.org/grpc to v1.79.3 [#291](https://github.com/openshift/cluster-api/pull/291)
* [Full changelog](https://github.com/openshift/cluster-api/compare/77ef4fc55392dd02232da73cc06a504659d08b48...3b417931b1e94534cbde2c435c262befad8a57f1)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/17abd1d9c801288347f4134965b268389a90c342)

* [OCPBUGS-80049](https://issues.redhat.com/browse/OCPBUGS-80049): Bump google.golang.org/grpc to v1.79.3 [#570](https://github.com/openshift/cluster-capi-operator/pull/570)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#559](https://github.com/openshift/cluster-capi-operator/pull/559)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459...17abd1d9c801288347f4134965b268389a90c342)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/a07cc2b522f7f78ee985a33118b5f93c9c2bde8f)

* [OCPBUGS-103180](https://issues.redhat.com/browse/OCPBUGS-103180): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#292](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/292)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/ffba005bf839897b173cb76d0bb561dcf9c7215c...a07cc2b522f7f78ee985a33118b5f93c9c2bde8f)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/1a0cea11ec4ba91416b698ab2e87d03a09a0e367)

* [OCPBUGS-68157](https://issues.redhat.com/browse/OCPBUGS-68157): Bump github.com/sirupsen/logrus to 1.9.3 [#1284](https://github.com/openshift/cluster-image-registry-operator/pull/1284)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/790f6a59513d7a9d78ba2a5b30d5f0da5a3d481f...1a0cea11ec4ba91416b698ab2e87d03a09a0e367)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1725337535e32158f37471a2286c9142f100ff41)

* [OCPBUGS-103182](https://issues.redhat.com/browse/OCPBUGS-103182): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#1572](https://github.com/openshift/cluster-ingress-operator/pull/1572)
* [OCPBUGS-86714](https://issues.redhat.com/browse/OCPBUGS-86714): Add configuration override for X-SSL strip [#1486](https://github.com/openshift/cluster-ingress-operator/pull/1486)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/1a164c16e804a4cf4f8b7aca4b8cb24d265dedb4...1725337535e32158f37471a2286c9142f100ff41)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/84e19b2149ab818a455b00717d790856c13ea387)

* [OCPBUGS-68162](https://issues.redhat.com/browse/OCPBUGS-68162): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] [#2055](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2055)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/8e391e9a79393c3bcba34c7de63afd3381fb51f3...84e19b2149ab818a455b00717d790856c13ea387)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/c1947350f996bcc50c549c9e83382179d6455247)

* [OCPBUGS-80056](https://issues.redhat.com/browse/OCPBUGS-80056): Bump google.golang.org/grpc to v1.79.3 [#78](https://github.com/openshift/cluster-api-operator/pull/78)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/aed5f6c74a0e174901709f18eecad6573cd80784...c1947350f996bcc50c549c9e83382179d6455247)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/12f60539287eda85e99efbdcf85a1ecf59e021fa)

* [OCPBUGS-68164](https://issues.redhat.com/browse/OCPBUGS-68164): CVE-2025-65637 openshift4/ose-cluster-kube-controller-manager-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] [#908](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/908)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/d68b3764db78ad5ca2e61af75f0bc8bcdcf3e644...12f60539287eda85e99efbdcf85a1ecf59e021fa)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/013ff606240919fcb46eb9a8b707598a9b049ee5)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#623](https://github.com/openshift/cluster-kube-scheduler-operator/pull/623)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/0bb0678bead782461b35d7e8671b3e54b9a46788...013ff606240919fcb46eb9a8b707598a9b049ee5)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/0097f21060a7e10679567eb57b87feb4f55230e3)

* [OCPBUGS-68167](https://issues.redhat.com/browse/OCPBUGS-68167): Bump github.com/sirupsen/logrus to 1.9.1 [#140](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/140)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/ab40b61142a30f21eec8301b2e98f2fafb25164b...0097f21060a7e10679567eb57b87feb4f55230e3)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/1179cda06fce0890dbd4529aadcbad77a82dd2ac)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#3110](https://github.com/openshift/cluster-monitoring-operator/pull/3110)
* [OCPBUGS-103184](https://issues.redhat.com/browse/OCPBUGS-103184): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame- #3075 [#3084](https://github.com/openshift/cluster-monitoring-operator/pull/3084)
* [OCPBUGS-77275](https://issues.redhat.com/browse/OCPBUGS-77275): AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change [#2832](https://github.com/openshift/cluster-monitoring-operator/pull/2832)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/8fe68aaa38f083604ed76c39135caac41049b1a5...1179cda06fce0890dbd4529aadcbad77a82dd2ac)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dc98c59e223f325acb113a697771e737266876a5)

* [OCPBUGS-85244](https://issues.redhat.com/browse/OCPBUGS-85244): whereabouts-token-watcher DaemonSet improvements [#3016](https://github.com/openshift/cluster-network-operator/pull/3016)
* [OCPBUGS-84181](https://issues.redhat.com/browse/OCPBUGS-84181): fix(hypershift): use net.JoinHostPort for URL construction [#2983](https://github.com/openshift/cluster-network-operator/pull/2983)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/1aca832fab45aceebe8026077d67ac6b82b51179...dc98c59e223f325acb113a697771e737266876a5)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fe37d7cf96ef3280f1bd41c55372b520fdf6c821)

* [OCPBUGS-82706](https://issues.redhat.com/browse/OCPBUGS-82706): Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 [#1548](https://github.com/openshift/cluster-node-tuning-operator/pull/1548)
* [OCPBUGS-78214](https://issues.redhat.com/browse/OCPBUGS-78214): PPC: filter out namespaces dir [#1481](https://github.com/openshift/cluster-node-tuning-operator/pull/1481)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/65585d9988f91a0dcb71b1fd91174dc422fb6a1c...fe37d7cf96ef3280f1bd41c55372b520fdf6c821)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f289edc3bb99197984aa392b13dfef07b075bcce)

* [OCPBUGS-80063](https://issues.redhat.com/browse/OCPBUGS-80063): Bump google.golang.org/grpc to v1.79.3 [#201](https://github.com/openshift/cluster-olm-operator/pull/201)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e31b7775ef903ff0c35f95656af27afa2dddd3e4...f289edc3bb99197984aa392b13dfef07b075bcce)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/8c61cd4bcf3719137950e3ac287346013b471a08)

* [OCPBUGS-68170](https://issues.redhat.com/browse/OCPBUGS-68170): CVE-2025-65637 - Update library-go to bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] [#653](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/653)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e...8c61cd4bcf3719137950e3ac287346013b471a08)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a039f8a2e73771f76e799ed497535705037f3bf5)

* [OCPBUGS-87591](https://issues.redhat.com/browse/OCPBUGS-87591): remove oVirt code from CSO 4.17 [#708](https://github.com/openshift/cluster-storage-operator/pull/708)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/45cbcc96a5a3a7bc743076965de0cc6a262ac11a...a039f8a2e73771f76e799ed497535705037f3bf5)


### [console](https://github.com/openshift/console/tree/b61b5d90e1cd21fe13b05dc2d164c7d84627e358)

* Fix for OCPBUGS-92069: CVE-2026-44990 [#16718](https://github.com/openshift/console/pull/16718)
* [OCPBUGS-78672](https://issues.redhat.com/browse/OCPBUGS-78672): Namespace is not persisting when switching to developer view from the topology page of admin page [#16160](https://github.com/openshift/console/pull/16160)
* [OCPBUGS-98411](https://issues.redhat.com/browse/OCPBUGS-98411): CVE-2026-59869 bump js-yaml [#17086](https://github.com/openshift/console/pull/17086)
* [OCPBUGS-100514](https://issues.redhat.com/browse/OCPBUGS-100514), [OCPBUGS-101790](https://issues.redhat.com/browse/OCPBUGS-101790): Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss [#17059](https://github.com/openshift/console/pull/17059)
* [OCPBUGS-100172](https://issues.redhat.com/browse/OCPBUGS-100172): Prevent binary secret data corruption when editing [#16879](https://github.com/openshift/console/pull/16879)
* [OCPBUGS-105790](https://issues.redhat.com/browse/OCPBUGS-105790): Disable shipwright e2e tests to unblock CI [#16955](https://github.com/openshift/console/pull/16955)
* [OCPBUGS-87986](https://issues.redhat.com/browse/OCPBUGS-87986): [release-4.17] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16600](https://github.com/openshift/console/pull/16600)
* Fix for OCPBUGS-81600: CVE-2026-4800 [#16564](https://github.com/openshift/console/pull/16564)
* [OCPBUGS-84283](https://issues.redhat.com/browse/OCPBUGS-84283): Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 [#16738](https://github.com/openshift/console/pull/16738)
* [OCPBUGS-77124](https://issues.redhat.com/browse/OCPBUGS-77124): [release-4.17] CVE-2026-26996 Bump minimatch library [#16345](https://github.com/openshift/console/pull/16345)
* [OCPBUGS-79443](https://issues.redhat.com/browse/OCPBUGS-79443): Bump immutable [#16326](https://github.com/openshift/console/pull/16326)
* NO-JIRA: enable multi-architecture yarn builds [#16419](https://github.com/openshift/console/pull/16419)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16074](https://github.com/openshift/console/pull/16074)
* [Full changelog](https://github.com/openshift/console/compare/e6e10764fd20b562aa21f76d6adc02d711a4a2a5...b61b5d90e1cd21fe13b05dc2d164c7d84627e358)


### [console-operator](https://github.com/openshift/console-operator/tree/e8032813321ac4c2daec869a7703c31cd9b2acf4)

* [OCPBUGS-77862](https://issues.redhat.com/browse/OCPBUGS-77862): update go mod dependency for konflux [#1114](https://github.com/openshift/console-operator/pull/1114)
* [Full changelog](https://github.com/openshift/console-operator/compare/dc3d8515c13d3127da0aff3d20f5e61c4bd8f3d3...e8032813321ac4c2daec869a7703c31cd9b2acf4)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/621348df96a03f642716845a15dc4043cc5f85f1)

* [OCPBUGS-85671](https://issues.redhat.com/browse/OCPBUGS-85671): CI Build root image tag sync with ART [#235](https://github.com/openshift/containernetworking-plugins/pull/235)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/a95a5efed26080ae264e2d059fb5bdcb9ba1baee...621348df96a03f642716845a15dc4043cc5f85f1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/3358ea3f5ed8835aa760ee5cf02b9980bcdeb528)

* [OCPBUGS-80134](https://issues.redhat.com/browse/OCPBUGS-80134): Bump google.golang.org/grpc [#388](https://github.com/openshift/cloud-provider-openstack/pull/388)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/baec20197f8ad057abff220a0bbde18e064e2f4e...3358ea3f5ed8835aa760ee5cf02b9980bcdeb528)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/a56e0cbacf27e90ffda7de9a6a470911a17a52c2)

* [OCPBUGS-82708](https://issues.redhat.com/browse/OCPBUGS-82708): Bump github.com/moby/spdystream@v0.5.1 [#195](https://github.com/openshift/csi-driver-nfs/pull/195)
* [OCPBUGS-80077](https://issues.redhat.com/browse/OCPBUGS-80077): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 [#181](https://github.com/openshift/csi-driver-nfs/pull/181)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/798855508da2df01719bf82f6344112a33b5437c...a56e0cbacf27e90ffda7de9a6a470911a17a52c2)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a)

* [OCPBUGS-103198](https://issues.redhat.com/browse/OCPBUGS-103198): Bump golang.org/x/net to v0.35.0-sec.3 [#127](https://github.com/openshift/csi-driver-shared-resource-operator/pull/127)
* [OCPBUGS-80080](https://issues.redhat.com/browse/OCPBUGS-80080): Bump google.golang.org/grpc to v1.79.3 [#125](https://github.com/openshift/csi-driver-shared-resource-operator/pull/125)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/c095a1f2bbd0c365b74e548498d13f8463c69eb2...95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/8d93b8a3560410cb2ff3dd6d285fea822720edd4)

* [OCPBUGS-80082](https://issues.redhat.com/browse/OCPBUGS-80082): Bump google.golang.org/grpc to v1.79.3 [#106](https://github.com/openshift/csi-external-attacher/pull/106)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/c3fe8e2ec46929fbad110b392337960be3c9d6a0...8d93b8a3560410cb2ff3dd6d285fea822720edd4)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/88d1fdf1716d5d69bc88fdab27677185b440e155)

* [OCPBUGS-82709](https://issues.redhat.com/browse/OCPBUGS-82709): Address CVE-2026-35469 [#142](https://github.com/openshift/csi-external-provisioner/pull/142)
* [OCPBUGS-80083](https://issues.redhat.com/browse/OCPBUGS-80083): Bump google.golang.org/grpc [#131](https://github.com/openshift/csi-external-provisioner/pull/131)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/fe460e56e19dd3cc5497fd068083da9850fc1996...88d1fdf1716d5d69bc88fdab27677185b440e155)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/96012dea4582fd44513410d90b6db640fce5613a)

* [OCPBUGS-103208](https://issues.redhat.com/browse/OCPBUGS-103208): Bump golang.org/x/net to v0.35.0-sec.4 [#214](https://github.com/openshift/csi-external-resizer/pull/214)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/73798480d1110af451e5d7c237a722bc5e901f7b...96012dea4582fd44513410d90b6db640fce5613a)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c)

* [OCPBUGS-80085](https://issues.redhat.com/browse/OCPBUGS-80085), [OCPBUGS-80088](https://issues.redhat.com/browse/OCPBUGS-80088), [OCPBUGS-80089](https://issues.redhat.com/browse/OCPBUGS-80089): Bump google.golang.org/grpc to v1.79.3 [#214](https://github.com/openshift/csi-external-snapshotter/pull/214)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95...59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c)


### [docker-builder](https://github.com/openshift/builder/tree/865c79826e67f14dbce7cb0a21313bbb82b1fad0)

* [OCPBUGS-89852](https://issues.redhat.com/browse/OCPBUGS-89852), [OCPBUGS-90297](https://issues.redhat.com/browse/OCPBUGS-90297), [OCPBUGS-92380](https://issues.redhat.com/browse/OCPBUGS-92380), [OCPBUGS-92577](https://issues.redhat.com/browse/OCPBUGS-92577), [OCPBUGS-92854](https://issues.redhat.com/browse/OCPBUGS-92854): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#548](https://github.com/openshift/builder/pull/548)
* [OCPBUGS-66988](https://issues.redhat.com/browse/OCPBUGS-66988): bump buildah to 1.37.7 to fix CVE-2025-52881 [#499](https://github.com/openshift/builder/pull/499)
* [Full changelog](https://github.com/openshift/builder/compare/10deb3744ac1ab4dae7def8adb99170e918dc1fe...865c79826e67f14dbce7cb0a21313bbb82b1fad0)


### [docker-registry](https://github.com/openshift/image-registry/tree/d0595c9e720caa5489628e49ed45a8eb85fa7b69)

* [OCPBUGS-68182](https://issues.redhat.com/browse/OCPBUGS-68182): update logrus to v1.9.1 [#465](https://github.com/openshift/image-registry/pull/465)
* [Full changelog](https://github.com/openshift/image-registry/compare/4498bed2ff5ca62d95eb9b1e9e4fed02fdbd602e...d0595c9e720caa5489628e49ed45a8eb85fa7b69)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/f2203376a8a2d8eecec7b85dc28b756b49d8c469)

* [OCPBUGS-80095](https://issues.redhat.com/browse/OCPBUGS-80095): Bump google.golang.org/grpc to v1.79.3 [#291](https://github.com/openshift/cluster-api-provider-gcp/pull/291)
* [OCPBUGS-78279](https://issues.redhat.com/browse/OCPBUGS-78279): [release-4.17] update go mod dependency for konflux [#266](https://github.com/openshift/cluster-api-provider-gcp/pull/266)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f...f2203376a8a2d8eecec7b85dc28b756b49d8c469)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/96fa4696da4229c4ac5bccd392750725ca5c4dc8)

* [OCPBUGS-103253](https://issues.redhat.com/browse/OCPBUGS-103253): Bump golang.org/x/net to v0.35.0-sec.3 [#190](https://github.com/openshift/machine-api-provider-gcp/pull/190)
* [OCPBUGS-80118](https://issues.redhat.com/browse/OCPBUGS-80118): Bump google.golang.org/grpc to v1.79.3 [#166](https://github.com/openshift/machine-api-provider-gcp/pull/166)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/86a1d902ab3989413be802a3daea422bc559012f...96fa4696da4229c4ac5bccd392750725ca5c4dc8)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/907b8422fcdcb0f895c5a92bb796a93d6aed23b1)

* [OCPBUGS-80099](https://issues.redhat.com/browse/OCPBUGS-80099): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 [#113](https://github.com/openshift/gcp-pd-csi-driver/pull/113)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/a066d98e8a4033b78a3e0fffade7d386630072f7...907b8422fcdcb0f895c5a92bb796a93d6aed23b1)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/5f27231835491f40506353f04b5a895773a1b53a)

* [OCPBUGS-80098](https://issues.redhat.com/browse/OCPBUGS-80098): Replace google.golang.org/grpc with fork [#188](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/188)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/c23b064fe303ec760c0de6204577d10ef0b0f63d...5f27231835491f40506353f04b5a895773a1b53a)


### [haproxy-router](https://github.com/openshift/router/tree/216fb937c4d84bdad2c44e2659e4a69235d062fc)

* [OCPBUGS-86725](https://issues.redhat.com/browse/OCPBUGS-86725): Prevent SSRF via FQDN-typed EndpointSlices [#835](https://github.com/openshift/router/pull/835)
* [OCPBUGS-86714](https://issues.redhat.com/browse/OCPBUGS-86714): Strip X-SSL-* headers for plain HTTP [#804](https://github.com/openshift/router/pull/804)
* [OCPBUGS-80100](https://issues.redhat.com/browse/OCPBUGS-80100): Address CVE-2026-33186 [#779](https://github.com/openshift/router/pull/779)
* [Full changelog](https://github.com/openshift/router/compare/1e29d8cc87a1c9e6645a4b9aa01197d90e366152...216fb937c4d84bdad2c44e2659e4a69235d062fc)


### [hypershift](https://github.com/openshift/hypershift/tree/858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2)

* [OCPBUGS-76289](https://issues.redhat.com/browse/OCPBUGS-76289): CVE-2025-52881 openshift/hypershift multicluster-engine/hypershift-rhel9-operator: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [mce-2.7] [#8292](https://github.com/openshift/hypershift/pull/8292)
* [OCPBUGS-99079](https://issues.redhat.com/browse/OCPBUGS-99079): fix(backport): konnectivity agent auth [#9104](https://github.com/openshift/hypershift/pull/9104)
* [OCPBUGS-89357](https://issues.redhat.com/browse/OCPBUGS-89357): build(operator): drop hypershift-no-cgo from operator container images [#8761](https://github.com/openshift/hypershift/pull/8761)
* [OCPBUGS-80103](https://issues.redhat.com/browse/OCPBUGS-80103): fix https://github.com/advisories/GHSA-p77j-4mvh-x3m3 by replacing grpc-go [#8516](https://github.com/openshift/hypershift/pull/8516)
* [OCPBUGS-84181](https://issues.redhat.com/browse/OCPBUGS-84181): fix(cno): use brackets only for IPv6 in server URL [#8347](https://github.com/openshift/hypershift/pull/8347)
* [OCPBUGS-76533](https://issues.redhat.com/browse/OCPBUGS-76533): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7703](https://github.com/openshift/hypershift/pull/7703)
* [Full changelog](https://github.com/openshift/hypershift/compare/0e58a28336e154a69b1d94b0ccfd2e5b256d7250...858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/9c043915bd01ede967dd412034190303150a9825)

* [OCPBUGS-80105](https://issues.redhat.com/browse/OCPBUGS-80105): Bump google.golang.org/grpc to v1.79.3 [#144](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/144)
* [OCPBUGS-77209](https://issues.redhat.com/browse/OCPBUGS-77209): [release-4.17] standardize build paths [#123](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/123)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/b4d153d69797e08c13aded5400112739779091b9...9c043915bd01ede967dd412034190303150a9825)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/a6cc81b5ff924e190c701c509fdfea67e6615ff9)

* [OCPBUGS-86974](https://issues.redhat.com/browse/OCPBUGS-86974): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.17 [#155](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/155)
* [OCPBUGS-103234](https://issues.redhat.com/browse/OCPBUGS-103234): Replace golang.org/x/net with openshift-sustaining/net [#171](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/171)
* [OCPBUGS-115543](https://issues.redhat.com/browse/OCPBUGS-115543): Fetch envtest assets from the controller-tools releases [#182](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/182)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/9c13e272406752acdc8e89d0f67eeae07a5f747f...a6cc81b5ff924e190c701c509fdfea67e6615ff9)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/89fbc4e852047a5a394a42d2334bdf02d190fcc0)

* [OCPBUGS-103227](https://issues.redhat.com/browse/OCPBUGS-103227): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#105](https://github.com/openshift/machine-api-provider-ibmcloud/pull/105)
* NO-JIRA: vendor golint instead of relying on the CI build root [#114](https://github.com/openshift/machine-api-provider-ibmcloud/pull/114)
* [OCPBUGS-81667](https://issues.redhat.com/browse/OCPBUGS-81667): bump vpc go sdk [#92](https://github.com/openshift/machine-api-provider-ibmcloud/pull/92)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#88](https://github.com/openshift/machine-api-provider-ibmcloud/pull/88)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0b8dd7abc69b9a2369005517846c95c619abf613...89fbc4e852047a5a394a42d2334bdf02d190fcc0)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2e91ecb38e819b2b191553461ff5dc61359115c9)

* [OCPBUGS-80108](https://issues.redhat.com/browse/OCPBUGS-80108): Bump google.golang.org/grpc to v1.79.3 [#1284](https://github.com/openshift/insights-operator/pull/1284)
* [OCPBUGS-68193](https://issues.redhat.com/browse/OCPBUGS-68193): OCPBUGS-68194: [vuln] Update logrus library to 1.9.3 [#1227](https://github.com/openshift/insights-operator/pull/1227)
* [Full changelog](https://github.com/openshift/insights-operator/compare/fca9063837125ba0e52399c2db25150c1ca13088...2e91ecb38e819b2b191553461ff5dc61359115c9)


### [ironic](https://github.com/openshift/ironic-image/tree/005cfdf54b53f458283e3eae85f0c304cb8635fa)

* [OCPBUGS-88474](https://issues.redhat.com/browse/OCPBUGS-88474): Update the commit hash for openstack-ironic that addresses CVE-2026-43003 [#905](https://github.com/openshift/ironic-image/pull/905)
* [OCPBUGS-100163](https://issues.redhat.com/browse/OCPBUGS-100163): Update openstack-ironic commit hash for CVE-2026-44918 [#902](https://github.com/openshift/ironic-image/pull/902)
* [OCPBUGS-76458](https://issues.redhat.com/browse/OCPBUGS-76458): Bump pyasn1 to 0.5.1-4 [#827](https://github.com/openshift/ironic-image/pull/827)
* [OCPBUGS-74114](https://issues.redhat.com/browse/OCPBUGS-74114): Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix [#796](https://github.com/openshift/ironic-image/pull/796)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e8959a879d31eaba0c0c7b4491339766afd9a6c6...005cfdf54b53f458283e3eae85f0c304cb8635fa)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/3e4fd09f7e36a8eec82627ea1e0ebafa9649d5ea)

* [OCPBUGS-88474](https://issues.redhat.com/browse/OCPBUGS-88474): Update commit hash for openstack-ironic-python-agent that addresses CVE-2026-43003 [#315](https://github.com/openshift/ironic-agent-image/pull/315)
* [OCPBUGS-99886](https://issues.redhat.com/browse/OCPBUGS-99886): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#309](https://github.com/openshift/ironic-agent-image/pull/309)
* [OCPBUGS-95067](https://issues.redhat.com/browse/OCPBUGS-95067): Replace individual package removal with a single rpm -e loop [#287](https://github.com/openshift/ironic-agent-image/pull/287)
* [OCPBUGS-95067](https://issues.redhat.com/browse/OCPBUGS-95067): Replace dnf remove with rpm -e to prevent dependency removal [#275](https://github.com/openshift/ironic-agent-image/pull/275)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/d0261c59daa50c481a68846d9da1ce855c4c1578...3e4fd09f7e36a8eec82627ea1e0ebafa9649d5ea)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/df9ac95276c08cff0b295c3eeb52c835abf95900)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#89](https://github.com/openshift/kubernetes-metrics-server/pull/89)
* [OCPBUGS-80013](https://issues.redhat.com/browse/OCPBUGS-80013): Bump google.golang.org/grpc to v1.79.3 [#65](https://github.com/openshift/kubernetes-metrics-server/pull/65)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec...df9ac95276c08cff0b295c3eeb52c835abf95900)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/e88f1b27fd66ab75d9b5fde8419e9efba0923236)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#186](https://github.com/openshift/kube-state-metrics/pull/186)
* [OCPBUGS-74874](https://issues.redhat.com/browse/OCPBUGS-74874): Deduplicate CRS stores [#132](https://github.com/openshift/kube-state-metrics/pull/132)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/462e63f6223817d3610f030f6166a790d793c572...e88f1b27fd66ab75d9b5fde8419e9efba0923236)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/d7d7a59127ef9020cbf6339a313e7eb7346c95f6)

* [OCPBUGS-95083](https://issues.redhat.com/browse/OCPBUGS-95083): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#79](https://github.com/openshift/cloud-provider-kubevirt/pull/79)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/9804c42a35e122bd9a88955a11338357698d8b3c...d7d7a59127ef9020cbf6339a313e7eb7346c95f6)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/b4ad2d68d25572212ca92d42bb209d103d3589d6)

* [OCPBUGS-80014](https://issues.redhat.com/browse/OCPBUGS-80014): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/kubevirt-csi-driver/pull/102)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/757a8894fe4f5b569210ec695fe0615e291f42ec...b4ad2d68d25572212ca92d42bb209d103d3589d6)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/931afe11b155006f805d0b029e46416e632d1a14)

* [OCPBUGS-77195](https://issues.redhat.com/browse/OCPBUGS-77195): Fix incomplete vendor/ [#301](https://github.com/openshift/cluster-api-provider-libvirt/pull/301)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...931afe11b155006f805d0b029e46416e632d1a14)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d3564c17a7e52bdf5f92d78948ef814973ee126d)

* [OCPBUGS-103256](https://issues.redhat.com/browse/OCPBUGS-103256): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#1546](https://github.com/openshift/machine-api-operator/pull/1546)
* [OCPBUGS-79373](https://issues.redhat.com/browse/OCPBUGS-79373): [release-4.17] Use resource group when generating default Azure image [#1481](https://github.com/openshift/machine-api-operator/pull/1481)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/998cffed3663b5b4332a8eb0d8e7dce489b1bfa9...d3564c17a7e52bdf5f92d78948ef814973ee126d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3bdd678e83da52e0754b393b82435eea968af3ed)

* [OCPBUGS-98583](https://issues.redhat.com/browse/OCPBUGS-98583): Remove sensitive ControllerConfig logging [#6300](https://github.com/openshift/machine-config-operator/pull/6300)
* [OCPBUGS-97845](https://issues.redhat.com/browse/OCPBUGS-97845): Bootstrap MCS logging entire ignition [#6274](https://github.com/openshift/machine-config-operator/pull/6274)
* [OCPBUGS-74149](https://issues.redhat.com/browse/OCPBUGS-74149): enable nodeip-configuration for platform external [#5577](https://github.com/openshift/machine-config-operator/pull/5577)
* [OCPBUGS-77979](https://issues.redhat.com/browse/OCPBUGS-77979): hermetic 4.17 [#5733](https://github.com/openshift/machine-config-operator/pull/5733)
* [OCPBUGS-77889](https://issues.redhat.com/browse/OCPBUGS-77889): reduce MCO image size [#5746](https://github.com/openshift/machine-config-operator/pull/5746)
* [OCPBUGS-77812](https://issues.redhat.com/browse/OCPBUGS-77812): mcd_config_drift not working properly [#5741](https://github.com/openshift/machine-config-operator/pull/5741)
* [OCPBUGS-77422](https://issues.redhat.com/browse/OCPBUGS-77422): Remove MCD liveness probe [#5709](https://github.com/openshift/machine-config-operator/pull/5709)
* [OCPBUGS-77242](https://issues.redhat.com/browse/OCPBUGS-77242): After OCL is enabled few phases in MCN are not updating as expected [#5575](https://github.com/openshift/machine-config-operator/pull/5575)
* [OCPBUGS-77186](https://issues.redhat.com/browse/OCPBUGS-77186): Machine-config controller should not log about non-existent pull-secret changes [#5679](https://github.com/openshift/machine-config-operator/pull/5679)
* [OCPBUGS-77090](https://issues.redhat.com/browse/OCPBUGS-77090): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5678](https://github.com/openshift/machine-config-operator/pull/5678)
* [OCPBUGS-61190](https://issues.redhat.com/browse/OCPBUGS-61190): MCO report "failed to list *v1alpha1.MachineOSConfig" when enable TechPreview after upgrading from 4.16 to 4.17 with one mcp paused [#5584](https://github.com/openshift/machine-config-operator/pull/5584)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/247c2c7ff38913836a0ff6c469e80b82df8cb5a5...3bdd678e83da52e0754b393b82435eea968af3ed)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/cc250001ddce8bd6342942f045ff7f9930c74040)

* [OCPBUGS-87877](https://issues.redhat.com/browse/OCPBUGS-87877): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#101](https://github.com/openshift/machine-os-images/pull/101)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/f85666be7889cd6ba95926546a005fed5f3cb68a...cc250001ddce8bd6342942f045ff7f9930c74040)


### [metallb-frr](https://github.com/openshift/frr/tree/b575d5dfac5319d7d296922de69c73baea6d142d)

* [OCPBUGS-76548](https://issues.redhat.com/browse/OCPBUGS-76548): Dockerfile: unpin FRR rpm [#124](https://github.com/openshift/frr/pull/124)
* [Full changelog](https://github.com/openshift/frr/compare/c0182036769726484b96a20db5e8be211d2f88b6...b575d5dfac5319d7d296922de69c73baea6d142d)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ffd758f816979228ae5f5d8ec526e74efcbf149a)

* Fix for OCPBUGS-98163: CVE-2026-13676 [#1050](https://github.com/openshift/monitoring-plugin/pull/1050)
* Fix for OCPBUGS-90525 OCPBUGS-90526: CVE-2026-12151 CVE-2026-9697 [#1008](https://github.com/openshift/monitoring-plugin/pull/1008)
* [OCPBUGS-79444](https://issues.redhat.com/browse/OCPBUGS-79444): immutable bump [#897](https://github.com/openshift/monitoring-plugin/pull/897)
* [OU-1260](https://issues.redhat.com/browse/OU-1260): [release-4.17] feat: use npm instead of yarn [#812](https://github.com/openshift/monitoring-plugin/pull/812)
* [OCPBUGS-76809](https://issues.redhat.com/browse/OCPBUGS-76809): fix for CVE-2025-69873 [#848](https://github.com/openshift/monitoring-plugin/pull/848)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/8d96a52a27c65dc5fe45d86f203ac322fb0402ee...ffd758f816979228ae5f5d8ec526e74efcbf149a)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/659299d118afc196d66b16a7714e17e6d11d0669)

* [OCPBUGS-85250](https://issues.redhat.com/browse/OCPBUGS-85250): Fix server url in kubeconfig [#299](https://github.com/openshift/multus-cni/pull/299)
* NO-ISSUE: [release-4.17] Bump Go to 1.22 and fix CI build root image [#290](https://github.com/openshift/multus-cni/pull/290)
* [OCPBUGS-77854](https://issues.redhat.com/browse/OCPBUGS-77854): hermetic 4.17 [#277](https://github.com/openshift/multus-cni/pull/277)
* [Full changelog](https://github.com/openshift/multus-cni/compare/93d87533af805ff6d8ede2eb3fde4e605fbda3f9...659299d118afc196d66b16a7714e17e6d11d0669)


### [must-gather](https://github.com/openshift/must-gather/tree/ea72c2eb404f9fe9282be70d1af7689f8f139fee)

* [OCPBUGS-86069](https://issues.redhat.com/browse/OCPBUGS-86069): Collect object size with the object count [#548](https://github.com/openshift/must-gather/pull/548)
* [Full changelog](https://github.com/openshift/must-gather/compare/2429998f12191eac5ffa83f3d189bb92a29724dd...ea72c2eb404f9fe9282be70d1af7689f8f139fee)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/8f7cc9253b83072c273c28cff64b00eb6ef3b38a)

* [OCPBUGS-77350](https://issues.redhat.com/browse/OCPBUGS-77350): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.17 [#110](https://github.com/openshift/bond-cni/pull/110)
* [Full changelog](https://github.com/openshift/bond-cni/compare/cc7b628e6d4c0331d0515b7b59a0d22699ed6ea3...8f7cc9253b83072c273c28cff64b00eb6ef3b38a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/02524de642295b592ad52235f9e2d6e22edf92ff)

* [OCPBUGS-98764](https://issues.redhat.com/browse/OCPBUGS-98764): Updating linkify-it to 5.0.2 to fix CVE-2026-48801 [#459](https://github.com/openshift/networking-console-plugin/pull/459)
* [OCPBUGS-100158](https://issues.redhat.com/browse/OCPBUGS-100158): Updating networking-console-plugin-container image to be consistent with ART for 4.17 [#455](https://github.com/openshift/networking-console-plugin/pull/455)
* [OCPBUGS-87998](https://issues.redhat.com/browse/OCPBUGS-87998): Retain namespace selection between network policies tabs [#428](https://github.com/openshift/networking-console-plugin/pull/428)
* [OCPBUGS-83379](https://issues.redhat.com/browse/OCPBUGS-83379): fix CVE-2026-34043 - Update serialize-javascript to 7.0.5 [#416](https://github.com/openshift/networking-console-plugin/pull/416)
* [release-4:17] OCPBUGS-85376: Migration from yarn to npm [#414](https://github.com/openshift/networking-console-plugin/pull/414)
* [OCPBUGS-81602](https://issues.redhat.com/browse/OCPBUGS-81602): Fix CVE-2026-CVE-2026-4800 in lodash [#402](https://github.com/openshift/networking-console-plugin/pull/402)
* [OCPBUGS-79445](https://issues.redhat.com/browse/OCPBUGS-79445): Bump immutable [#389](https://github.com/openshift/networking-console-plugin/pull/389)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/2b419724d25df1e7ac0781d5a5edfe2f96b62e5a...02524de642295b592ad52235f9e2d6e22edf92ff)


### [oauth-server](https://github.com/openshift/oauth-server/tree/be35f2dd002c1b655397207edf65c112aa59388c)

* [OCPBUGS-81795](https://issues.redhat.com/browse/OCPBUGS-81795): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#239](https://github.com/openshift/oauth-server/pull/239)
* [Full changelog](https://github.com/openshift/oauth-server/compare/731ed82ec3b483cbe0b8ea4ffc52479aa0f1d4b7...be35f2dd002c1b655397207edf65c112aa59388c)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/fa8d10c53339688c290fe3e8867df7124de04c42)

* [OCPBUGS-103266](https://issues.redhat.com/browse/OCPBUGS-103266), [OCPBUGS-103269](https://issues.redhat.com/browse/OCPBUGS-103269): Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#805](https://github.com/openshift/operator-framework-operator-controller/pull/805)
* [OCPBUGS-80129](https://issues.redhat.com/browse/OCPBUGS-80129): Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 [#736](https://github.com/openshift/operator-framework-operator-controller/pull/736)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/e245e6612aa1773f5a17d66edca7dc01f0cb5098...fa8d10c53339688c290fe3e8867df7124de04c42)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/79a42c566a8c7857d23623d296c80a70fc2b8148)

* [OCPBUGS-82720](https://issues.redhat.com/browse/OCPBUGS-82720): Address CVE-2026-35469 [#658](https://github.com/openshift/openshift-apiserver/pull/658)
* [OCPBUGS-68208](https://issues.redhat.com/browse/OCPBUGS-68208): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] [#609](https://github.com/openshift/openshift-apiserver/pull/609)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/8d7098cf3adcf718df56db0bc8df7647c131d0f9...79a42c566a8c7857d23623d296c80a70fc2b8148)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/00ba71fd3736b00d019383fce2ec74a9c5f9414c)

* [OCPBUGS-80133](https://issues.redhat.com/browse/OCPBUGS-80133): Bump google.golang.org/grpc to v1.79.3 [#194](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/194)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2...00ba71fd3736b00d019383fce2ec74a9c5f9414c)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/3b926d2094bab3c6759252b7681cc36473b29021)

* [OCPBUGS-78169](https://issues.redhat.com/browse/OCPBUGS-78169): hermetic 4.17 [#162](https://github.com/openshift/machine-api-provider-openstack/pull/162)
* [OCPBUGS-76793](https://issues.redhat.com/browse/OCPBUGS-76793): Fix make test [#160](https://github.com/openshift/machine-api-provider-openstack/pull/160)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/689718740b923e516c037d7862d81a462ecdbbd3...3b926d2094bab3c6759252b7681cc36473b29021)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c9ad6fd83727301129cfd1a2b165bf29949529a8)

* [OCPBUGS-103275](https://issues.redhat.com/browse/OCPBUGS-103275), [OCPBUGS-103278](https://issues.redhat.com/browse/OCPBUGS-103278), [OCPBUGS-103286](https://issues.redhat.com/browse/OCPBUGS-103286): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#1368](https://github.com/openshift/operator-framework-olm/pull/1368)
* [OCPBUGS-80136](https://issues.redhat.com/browse/OCPBUGS-80136), [OCPBUGS-80137](https://issues.redhat.com/browse/OCPBUGS-80137), [OCPBUGS-80138](https://issues.redhat.com/browse/OCPBUGS-80138): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.17] [#1315](https://github.com/openshift/operator-framework-olm/pull/1315)
* [OCPBUGS-77838](https://issues.redhat.com/browse/OCPBUGS-77838): Remove the collect-profiles info from the microshift kustomization file [#1250](https://github.com/openshift/operator-framework-olm/pull/1250)
* [OCPBUGS-76953](https://issues.redhat.com/browse/OCPBUGS-76953): Remove the collect-profiles job [#1232](https://github.com/openshift/operator-framework-olm/pull/1232)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/52652d0744d7cf955defb84d38f45bfe640d7850...c9ad6fd83727301129cfd1a2b165bf29949529a8)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/12f4e7e12f583767c8e9549408e36bbf4000b1b4)

* [OCPBUGS-128826](https://issues.redhat.com/browse/OCPBUGS-128826): node: fix serviceUpdateNotNeeded nil pointer comparison [#3496](https://github.com/openshift/ovn-kubernetes/pull/3496)
* [OCPBUGS-82724](https://issues.redhat.com/browse/OCPBUGS-82724): Bump github.com/moby/spdystream to v0.5.1 [#3322](https://github.com/openshift/ovn-kubernetes/pull/3322)
* [OCPBUGS-81639](https://issues.redhat.com/browse/OCPBUGS-81639): External gateway: Remove routes for external gateway pods in terminating or not ready state [#3107](https://github.com/openshift/ovn-kubernetes/pull/3107)
* [OCPBUGS-78029](https://issues.redhat.com/browse/OCPBUGS-78029): Add pperiyasamy to OWNERS for release-4.17 [#3046](https://github.com/openshift/ovn-kubernetes/pull/3046)
* [OCPBUGS-77568](https://issues.redhat.com/browse/OCPBUGS-77568): Clear stale conntrack UDP entries for nodePorts [#3035](https://github.com/openshift/ovn-kubernetes/pull/3035)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/f1ca69af3bf1d2d4a984579aa11a6a491da706fb...12f4e7e12f583767c8e9549408e36bbf4000b1b4)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/f67fdda42e37905fbc67fa8b4c47874f60441848)

* [OCPBUGS-80142](https://issues.redhat.com/browse/OCPBUGS-80142): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#131](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/131)
* [OCPBUGS-82725](https://issues.redhat.com/browse/OCPBUGS-82725): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#125](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/125)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e...f67fdda42e37905fbc67fa8b4c47874f60441848)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/aa1b744e13a0930844f24d9fb6fd9bd2164592e9)

* [OCPBUGS-80144](https://issues.redhat.com/browse/OCPBUGS-80144): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#112](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/112)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/f6f037c556d7fb8155c83e20e951944aecd102c6...aa1b744e13a0930844f24d9fb6fd9bd2164592e9)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/9f61dc1910671da364a7f9ba74f901b609ed1844)

* [OCPBUGS-80145](https://issues.redhat.com/browse/OCPBUGS-80145): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 [#103](https://github.com/openshift/cloud-provider-powervs/pull/103)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/bd3d72e5095c950964f64871253e4da4ad2acbe7...9f61dc1910671da364a7f9ba74f901b609ed1844)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/06ec4e3af0f27ae6e8ece0d31ff1e802b7d08a50)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#403](https://github.com/openshift/prom-label-proxy/pull/403)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/c84c4898843d6a1b0d16a59e3c42d99d1f636c43...06ec4e3af0f27ae6e8ece0d31ff1e802b7d08a50)


### [prometheus](https://github.com/openshift/prometheus/tree/8b2b70879280211b7ebd0b44ea02bddc2cba825e)

* [OCPBUGS-93681](https://issues.redhat.com/browse/OCPBUGS-93681): fix for CVE-2026-42151 [#378](https://github.com/openshift/prometheus/pull/378)
* NO-ISSUE: synchronize OWNERS from main branch [#383](https://github.com/openshift/prometheus/pull/383)
* [OCPBUGS-88631](https://issues.redhat.com/browse/OCPBUGS-88631): remote: validate snappy decoded length before allocation in read endpoint [#348](https://github.com/openshift/prometheus/pull/348)
* [OCPBUGS-80146](https://issues.redhat.com/browse/OCPBUGS-80146): Bump google.golang.org/grpc [#320](https://github.com/openshift/prometheus/pull/320)
* [Full changelog](https://github.com/openshift/prometheus/compare/97cd47978721d9e77d22c4d4798f43896324683b...8b2b70879280211b7ebd0b44ea02bddc2cba825e)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/bed9c9bd31940eeed0e082906a581bac40a3f7aa)

* NO-JIRA: synchronize OWNERS with main [#196](https://github.com/openshift/prometheus-alertmanager/pull/196)
* [OCPBUGS-103294](https://issues.redhat.com/browse/OCPBUGS-103294): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#173](https://github.com/openshift/prometheus-alertmanager/pull/173)
* [OCPBUGS-98167](https://issues.redhat.com/browse/OCPBUGS-98167): bump github.com/hashicorp/memberlist to a forked version [#166](https://github.com/openshift/prometheus-alertmanager/pull/166)
* [OCPBUGS-100356](https://issues.redhat.com/browse/OCPBUGS-100356): Set testdata CA expiry to 20 years from issue date (#4112) [#151](https://github.com/openshift/prometheus-alertmanager/pull/151)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc...bed9c9bd31940eeed0e082906a581bac40a3f7aa)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/2c3a4e92762622587fe91f9f8d6de4f564a968e4)

* [OCPBUGS-103296](https://issues.redhat.com/browse/OCPBUGS-103296), [OCPBUGS-103297](https://issues.redhat.com/browse/OCPBUGS-103297): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#399](https://github.com/openshift/prometheus-operator/pull/399)
* [OCPBUGS-77452](https://issues.redhat.com/browse/OCPBUGS-77452): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#369](https://github.com/openshift/prometheus-operator/pull/369)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9cb457b8a8dd7e245e58ecd348f6331cc7922077...2c3a4e92762622587fe91f9f8d6de4f564a968e4)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/f9af0fe40cfdfc92d06ec1204e6d647c00d337b8)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.17] [#212](https://github.com/openshift/node_exporter/pull/212)
* [Full changelog](https://github.com/openshift/node_exporter/compare/8f095361ae68660fbcf0c3e32020a3df9568ae90...f9af0fe40cfdfc92d06ec1204e6d647c00d337b8)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/1e53205fa2e239df3c39a78bb50fddce77b4f3e1)

* [OCPBUGS-80022](https://issues.redhat.com/browse/OCPBUGS-80022): Bump google.golang.org/grpc to v1.79.3 [#86](https://github.com/openshift/route-controller-manager/pull/86)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/02bbf80ada3d5acaf36873b1fe69c71badc6d8d7...1e53205fa2e239df3c39a78bb50fddce77b4f3e1)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)

* [OCPBUGS-68220](https://issues.redhat.com/browse/OCPBUGS-68220): Update logrus to 1.9.3 to address CVE-2025-65637 [#316](https://github.com/openshift/service-ca-operator/pull/316)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/73ca97dd83f69d878cb5059161645f6eb693368a...2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa)


### [telemeter](https://github.com/openshift/telemeter/tree/15895a068e7e89b14292fde4601208c3eeb3a715)

* [OCPBUGS-81796](https://issues.redhat.com/browse/OCPBUGS-81796): [release-4.17] Fix CVE-2026-34986 [#597](https://github.com/openshift/telemeter/pull/597)
* [OCPBUGS-80159](https://issues.redhat.com/browse/OCPBUGS-80159): Bump google.golang.org/grpc to v1.79.3 [#600](https://github.com/openshift/telemeter/pull/600)
* [Full changelog](https://github.com/openshift/telemeter/compare/0238640e519c01f3eedd00b8dc82f34d2c502daf...15895a068e7e89b14292fde4601208c3eeb3a715)


### [thanos](https://github.com/openshift/thanos/tree/51fe5fa45f6df55266ca874287b47b2825f01b32)

* [OCPBUGS-80161](https://issues.redhat.com/browse/OCPBUGS-80161): Bump google.golang.org/grpc to v1.79.3 [#185](https://github.com/openshift/thanos/pull/185)
* [Full changelog](https://github.com/openshift/thanos/compare/98c993712257ae4c1335e493d037ee1f71284793...51fe5fa45f6df55266ca874287b47b2825f01b32)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/da096b41a79e2216f643ea2addc49a571116e7d5)

* [OCPBUGS-78027](https://issues.redhat.com/browse/OCPBUGS-78027): hermetic migration 4.17 [#106](https://github.com/openshift/cloud-provider-vsphere/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/097d823bd10abbc6cd016c34a1c5c3cd1b514031...da096b41a79e2216f643ea2addc49a571116e7d5)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/8d6ea11af1d9bffddc8e06a85aeefa3a9dbbf7da)

* [OCPBUGS-80165](https://issues.redhat.com/browse/OCPBUGS-80165): Bump google.golang.org/grpc to v1.79.3 [#105](https://github.com/openshift/cluster-api-provider-vsphere/pull/105)
* [OCPBUGS-78019](https://issues.redhat.com/browse/OCPBUGS-78019): hermetic migration 4.17 [#85](https://github.com/openshift/cluster-api-provider-vsphere/pull/85)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6a5d803e20e05510ba93135df96ad063aaf272de...8d6ea11af1d9bffddc8e06a85aeefa3a9dbbf7da)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/2c4c4710da37239a772ac666b2be8291fc0b2006)

* [OCPBUGS-92852](https://issues.redhat.com/browse/OCPBUGS-92852): Bump golang.org/x/crypto/ssh to v0.33.0-sec.3 [#194](https://github.com/openshift/vmware-vsphere-csi-driver/pull/194)
* [OCPBUGS-80168](https://issues.redhat.com/browse/OCPBUGS-80168): Bump google.golang.org/grpc [#177](https://github.com/openshift/vmware-vsphere-csi-driver/pull/177)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4b70f176dc1e93aa41ca98bd0d0152df0a616eb4...2c4c4710da37239a772ac666b2be8291fc0b2006)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/a852a536a0a4232153dff37b889075748dfa049b)

* [OCPBUGS-103315](https://issues.redhat.com/browse/OCPBUGS-103315): Bump golang.org/x/net to v0.35.0-sec.3 [#357](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/357)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d...a852a536a0a4232153dff37b889075748dfa049b)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/fca89d46c1922f682dd10abf863a2f8cb7a1f20d)

* [OCPBUGS-103317](https://issues.redhat.com/browse/OCPBUGS-103317): Bump golang.org/x/net to v0.35.0-sec.4 [#234](https://github.com/openshift/vsphere-problem-detector/pull/234)
* [OCPBUGS-84085](https://issues.redhat.com/browse/OCPBUGS-84085): fix concurrent map writes [#216](https://github.com/openshift/vsphere-problem-detector/pull/216)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/62ca90bcfaf7a030eb1734e9df66366b9dc009e6...fca89d46c1922f682dd10abf863a2f8cb7a1f20d)