# 4.17.58

Created: 2026-09-24 12:33:40 +0000 UTC

Image Digest: `sha256:027c19a0057cf115fdf33dd8a018a9f5195842afcd3a540e8dcd68ec398cbbce`


## Changes from 4.17.51

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.14
* Kubernetes Tests 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202603102246-0 to 417.94.202609191027-0


### Removed images

* ovirt-csi-driver
* ovirt-csi-driver-operator


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [df4660b4](https://github.com/openshift/assisted-installer-agent/commit/df4660b4ca1ae19ccff3f2dba31e2be14b2a1d09) `sha256:1714b345a7c41bc4029768dbd065c5aa408d8f61a8c8fa26f67502c4cae94b01`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3595281](https://github.com/openshift/agent-installer-utils/commit/b359528186b9df8ff5796f2bbfdab7f6bbaad491) `sha256:9b9afb6c6da52a17bb892f2ed8a0837b42bd5365359813d891011cf460ddafd3`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:112632a3f034e11ed77d22b6098e9c5865fabdaf5337afa0e89b00abe1d3b7e1`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [2b53de06](https://github.com/openshift/machine-api-provider-aws/commit/2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7) `sha256:9cb0d0119f26b1b629c5e317a0e7df74ad670f23ecc7567765079e6acc4f8736`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [80efc4ea](https://github.com/openshift/aws-pod-identity-webhook/commit/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56) `sha256:1a2494ef9f409d8e0033f77ef384839039163d4511edcf7155730cb42f0e17b1`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [439c5498](https://github.com/openshift/machine-api-provider-azure/commit/439c54987c20d056ae23681d456e4e7f6a68c96d) `sha256:a969447d4874e9e0f4b58a60936239c682a934deb1a394a7b90ca2957f586b4b`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [6707f899](https://github.com/openshift/azure-workload-identity/commit/6707f899c269e98a102ac72900bb96fa826ba652) `sha256:b320a4f564ba251e5d37551940dfa4da92ce4f6c0da6c44100fd77cea5cdbd45`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:413b8cc7afda031e9bd315e594271d94a1da1da7866a0c2714a8c1af3ed10ec5`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [ae674d78](https://github.com/openshift/cluster-api-provider-baremetal/commit/ae674d7808379c454f972ff0cccac8bb9adcc98f) `sha256:d25c9e274b3cbd16bdb9b998e21781f8121d04ce0e4e52def0ca8387438dc030`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [087a24f2](https://github.com/openshift/baremetal-operator/commit/087a24f21f11bc85a6d922c156bda6270e7eadfa) `sha256:c11251ee0347ec035865a3c7f52e308e66987715e084f791a4a58abd7e6b403a`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [74518950](https://github.com/openshift/baremetal-runtimecfg/commit/745189508eec80ee07a921d1b2c227812db37237) `sha256:9c20db6ff3b44b266e3fae8b035ae6e22e5c1022d32ff469b384ff6ee5efa364`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [241af368](https://github.com/openshift/cloud-network-config-controller/commit/241af368428cb2deedeaf8e21d237aa01216292a) `sha256:432360fe914c8d53b315d39883b34dda25115e46c9d58df8879a532190d81064`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [9f93cafc](https://github.com/openshift/cluster-authentication-operator/commit/9f93cafccca989417378a804f134f68fb4fea40d) `sha256:1ebd313fdf9e3b749405d287cdf5727687a3bca213df111902dc723c8fc33464`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:2ec988521b6550e9609590ae63f7c30bd62e386c2f9b2af6a6853e987ebae23b`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [6d4c0096](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1) `sha256:8ffc5e0a69e5dc127c66717e254602b4f4394e2d38c64aaa36c620d8792c6345`
* [cluster-config-api](https://github.com/openshift/api) git [92c55bf0](https://github.com/openshift/api/commit/92c55bf0f372c222dc02f17685c383d18e2c2e8b) `sha256:3a4a965a4b8370a234a3f20287a16ac2edef53dfa5415954271c08576844c528`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [cfd318de](https://github.com/openshift/cluster-config-operator/commit/cfd318de9718f1c73b40d99900125bdca41482ef) `sha256:68e2bb52cb685c3d635d5240f56eaf5756ce0247af5d1e2fdd8b1f80754c0e4e`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:ae4f6e102c50e41783c0853117cced11e22b45fdc571f116f0cbd4c2f1091e15`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:4993360373591870d18d3d43fccd6169d98afe681ffccf7a26db5c47371147d6`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [81507f04](https://github.com/openshift/cluster-dns-operator/commit/81507f04686df3e16793b270084ead0a2a67fb38) `sha256:75fdf7e211b1ef4dfd7b4ea1b21fc025297be1ea5ab483b52e612bd641524a41`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [bfffdcba](https://github.com/openshift/cluster-etcd-operator/commit/bfffdcbac76071143cf554785ca2bde0ac69ac7e) `sha256:9047e1ffe5856e8494552f1446105d8eee29679deba7fa3b62305b3913fa2714`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1a0cea11](https://github.com/openshift/cluster-image-registry-operator/commit/1a0cea11ec4ba91416b698ab2e87d03a09a0e367) `sha256:3e63736d0b7c85f6194f99e6b5114b50e6795d472ccf3f868074944389395bd1`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [84e19b21](https://github.com/openshift/cluster-kube-apiserver-operator/commit/84e19b2149ab818a455b00717d790856c13ea387) `sha256:11e0cda6628c7861db10823e61b31c6f639dc49d07eadb881463551928d60991`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [12f60539](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/12f60539287eda85e99efbdcf85a1ecf59e021fa) `sha256:8ff7a5315bd488a65ed1121bbd93df0063d97e53d790b377312a32065847fedb`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [013ff606](https://github.com/openshift/cluster-kube-scheduler-operator/commit/013ff606240919fcb46eb9a8b707598a9b049ee5) `sha256:d68f67b8ca5ab07595aac58072ba181e406f4f238fa1ef8cfa82c792066078c1`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [0097f210](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/0097f21060a7e10679567eb57b87feb4f55230e3) `sha256:631a4695519212d8dac7c7358cfd76d79d18e4a5fec2dcf54699dffcbb672251`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:a1c358673f0b39a5fd0bbcac48ed8a741ba736ce101f60af5a90379cd622a73a`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [8c61cd4b](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/8c61cd4bcf3719137950e3ac287346013b471a08) `sha256:fd658812a4a3ddb5341c9b80d92010a575fcb4a2a82ddcccc2923c11b9fcea95`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:9633091b93b9f995e53160f7a25b48175942c511218a349852378aede3f16c56`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:0630c0319fbd0721a667824982a54cbef895b66237cbd9165c65dbdddcccb9dd`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [1d2ba422](https://github.com/openshift/cluster-samples-operator/commit/1d2ba42214637c7ed7e5e3e0aec257e9b949d061) `sha256:b58b3a3cea19b101e6826d0b2c8027a11d3c37f6f1b7cc017d367ceedafbdc34`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:d810d8efd7420335cbd67101197b31f308e153e28907c551384d5b9d0cbbc245`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [b855c680](https://github.com/openshift/cluster-version-operator/commit/b855c68099755979a053f60a49300d3502f44325) `sha256:58b1ba85a3dc3629ac9005133432dcd7d662f41d3d9b17f75c40d82cf7a9c81c`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:01b781d7a5d81138552ab43a2fcee9e5a4e6f6cbfa1931ed1ba705c1150c27f0`
* [coredns](https://github.com/openshift/coredns) git [fe89d27d](https://github.com/openshift/coredns/commit/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567) `sha256:310990f8aa4a69aacf1be6e0b4c562c9dfb826dd36a373178066ed9262a31898`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [efc99a2a](https://github.com/openshift/csi-driver-manila-operator/commit/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8) `sha256:bf3075cbf80c1b7c967e1f64344122419535f4737cf60c099359bf0b6ef1bd54`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:4a653a995d39eb05bcf65b6450382c8152cb1dd683b4f06ead1fd171b619db8d`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:7ca533426db18b9b8930143eeae6f5005db23a323258182c0af773c868b24faa`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e7d841dc](https://github.com/openshift/csi-livenessprobe/commit/e7d841dc545b9fb3a8a3303b8cac62d35620905b) `sha256:9cbad6a40f44981e216da003e25d2a4728b15506c45c19f961b0e09afbd70fe1`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3dd2253e](https://github.com/openshift/csi-node-driver-registrar/commit/3dd2253ed70cb565a63a208fa667d55f3222fb19) `sha256:161aaddf2ffb787ba33ebcdf56a55123a51157e6852bdc25676834800d63eb8a`
* [docker-builder](https://github.com/openshift/builder) git [12fc732c](https://github.com/openshift/builder/commit/12fc732cf6c3f344d87b30e4a7927811ef943fab) `sha256:e33ca08d978286b1b852f3d59bc9789333fec0ae31f74d62fad34a49d34c8413`
* [docker-registry](https://github.com/openshift/image-registry) git [d0595c9e](https://github.com/openshift/image-registry/commit/d0595c9e720caa5489628e49ed45a8eb85fa7b69) `sha256:81fe7a353c6ef42e59066faca79ad08376069b19d9f9eb5b13893a6cb9a8c96f`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:ea4681ffb09993a07b0655782c2a6ecbc545788daa2761581bb12a6329bdcbcb`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:01617e470cc4602a0f988399ca53cfdae2be166a77e027762611fa966070c666`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:ea084d3334cdd0fb9640c8116a61403e50db367122a7937634fc3b2c084e740c`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:914477baf8681bd471e78c783fed2207f393cefc097166b3a628a1ae3f988cab`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:ed75b820527a3f45a9ff5c0b7071ba768dc691cbc0951e3c105ca5de43bddbd1`
* [hyperkube](https://github.com/openshift/kubernetes) git [4e295fa5](https://github.com/openshift/kubernetes/commit/4e295fa517e17429af4d8004e7a8028fe719e60f) `sha256:e435c01e4585fa029c849156ce4311f2c6b1532e80baead3db47d0b4cba6ffa0`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:6f3b1367866519abff38ffc84728c51eac174885d3f5c49489ec4b0332bbe85a`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [ee301303](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/ee301303640e89a985108bf3b055051a644b5c37) `sha256:022b432b9640106e7802b59dae06675f40283fa91efabd2fb44881bed1093784`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9e6596c3](https://github.com/openshift/ironic-rhcos-downloader/commit/9e6596c3f9d239d91c358299a19871905fa914fe) `sha256:af77ab4e95a31457d67cab379f7efead603fc0628a2b179e19102312dd81891d`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [bc5b8a2c](https://github.com/openshift/ironic-static-ip-manager/commit/bc5b8a2c3209873231a7eabd83ace578c8e182f7) `sha256:8a5f544098953ec25f477f2f6caf9d1d72014aed4da22221369506ce2944e5dd`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:0c64c2337cdfe6bd0592d562c57af97bfba84d4d95697a01119784376b309809`
* [kube-proxy](https://github.com/openshift/sdn) git [fd50551b](https://github.com/openshift/sdn/commit/fd50551b5c640fb4bda787faaab32f8b641839e9) `sha256:c349de81ecba84f3d86dfea984361ccf32e032056e44d11c3a18897bb97639e4`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:a60f9f1bfd06c27ed1f1a6495517671adfe20ff9c085a7d31f1275f7d2409a4d`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [b40c02a5](https://github.com/openshift/kube-state-metrics/commit/b40c02a5fe525b1a69e1cf2dbada18e28a4ccd1e) `sha256:7f9eb6cb953b3b4e3efb5e0a30768f10a072fe6301b733c44ab535337a538885`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:aad08f80dc8f86f08b14b47094b6a9f7986a241bb2f65dedfc76622572c56a2a`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [03af8514](https://github.com/openshift/image-customization-controller/commit/03af8514abbbd588bcc5514ff591b769d1241c09) `sha256:72604d524edd398893d05f31f6ca5abd5f62f825cf8fb2cbcc1414f97f31cacd`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [041b743a](https://github.com/openshift/multus-admission-controller/commit/041b743a1172af3c8ace0cf046fe95bda7a9d5a2) `sha256:e2e11b231011fadec8948cb683d56b076705831676aa17a9241b633d2e0cd21d`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:2a2bb313354c77af113366c9d508fec82abe77c1980d6a4c59df7a7134634857`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:d4d20eae3ebd068f97cc3cff40fc5c76164b366b4b6f5045eb4dbf8201c7c061`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [40cfb3dc](https://github.com/openshift/whereabouts-cni/commit/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b) `sha256:22b2bce8e61688a6cc777c577e48d0a48a45576a1361397dc686f9c8f1fd78e6`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [f56bbf7a](https://github.com/openshift/network-metrics-daemon/commit/f56bbf7af25fbae200c966378337db85c6b17126) `sha256:f90f92d88c10b6e38c38a64451df835d5eb5b374f3df5ebffb8abc1b42bedc1d`
* [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:9d4fbeb207e7c147ba84968a4defad815250a71645ae5d02b8a8b64ca51e81b1`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:7ca3eaae410e4674351926b7a1519ce83f60c23f778386812dc687777cea8445`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a4fadcbc](https://github.com/openshift/machine-api-provider-nutanix/commit/a4fadcbc22579320fdf7cd7d98071c15f32aa163) `sha256:d4ef18ec13beaa5cd4de49d6962a55417340281aee330f9e8b8b1056057c9cc3`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [e078aeb2](https://github.com/openshift/oauth-apiserver/commit/e078aeb29048d2b37e0b8e2657641a9207fd4d84) `sha256:f704d89df2dbd81a516045c1f816dbc77adf51f7e361fd63768f4a7d8f2b6265`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [58375b70](https://github.com/openshift/oc-mirror/commit/58375b70881938be8a1e08750507e4a40943f6fd) `sha256:7745a37ddc962ccdb488afa94f188c5c11881fe95a02d5342b1155fb5883fdd8`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:895a1d9a6c955e45362fa06dbc0396afee80da62de4d654fb10ce8d9f4541989`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [967faa66](https://github.com/openshift/openshift-controller-manager/commit/967faa66125ae77148df87d8394d07112c4c0b8c) `sha256:d6741e127837060137ab2de652a1deb0801a87ff9e726d1ab412539a1485153e`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [adf64920](https://github.com/openshift/openshift-state-metrics/commit/adf649209467aef8d5da1d17851fa991285edbc2) `sha256:3943be4fe5646ed778046f29b855dd06db3c9280d6f839428c564aeb6ae4d166`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:2b00dca400d132235a7bc49010c48e869bcef083afcaeda997e6e86229301f7a`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5cf36fde](https://github.com/operator-framework/operator-marketplace/commit/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f) `sha256:ab3887faeb83874700faf6ade4279acb28988869bae95f243bb80dfb181ce1a7`
* [pod](https://github.com/openshift/kubernetes) git [4e295fa5](https://github.com/openshift/kubernetes/commit/4e295fa517e17429af4d8004e7a8028fe719e60f) `sha256:7a903fe3af440803d85611674806bc0cd6341bc48550cd0278a1930124f9d20f`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [b7478d7e](https://github.com/openshift/machine-api-provider-powervs/commit/b7478d7e98f4596d01e84193222f17d4c13a2a09) `sha256:f85e831980f4106d921eb29ee22bdb36f92aa865fa342e163df098ff92479e2a`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c84c4898](https://github.com/openshift/prom-label-proxy/commit/c84c4898843d6a1b0d16a59e3c42d99d1f636c43) `sha256:3eb770814f37840138902078776e756d057f875b159a577dcfd2f3c323e026dd`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [8f095361](https://github.com/openshift/node_exporter/commit/8f095361ae68660fbcf0c3e32020a3df9568ae90) `sha256:7235ed1e15a599e85f899d330e11a849a5b6fd337345323b0c4dc79cf5c2d728`
* rhel-coreos `sha256:490004790ca6d28beca181605cadcc7081f871b39fd699fc0be7686d99a877f3`
* rhel-coreos-extensions `sha256:d7be4f8a623ff4b60cd4e3e8a7b68f5d241e8ff5f77540ef8679459b253fd41d`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [2cb0a44d](https://github.com/openshift/service-ca-operator/commit/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa) `sha256:6e778d0bcf931e7cebd3c0c46b13bc0a9b0df2666760acf9ec1d0c132b395cc6`
* [tests](https://github.com/openshift/origin) git [5abe37f6](https://github.com/openshift/origin/commit/5abe37f6f7844abc4d088595c0631734fb46864c) `sha256:99686878563328ab9410341ae731a3b4f309a114a709277c8c0543258390c486`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e1de36a2](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d) `sha256:a148efa87dd6075ed73c598cfd1e762f8259fda44893c2a653324af8907a000c`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/c18512cd02435454b6c92e8a708ddd5b1f188dcd)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.20 compatibility [#10016](https://github.com/openshift/assisted-service/pull/10016)
* [Full changelog](https://github.com/openshift/assisted-service/compare/bcecf7265015a4db74aa613da2294aae92b355a8...c18512cd02435454b6c92e8a708ddd5b1f188dcd)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/e755d585d2405fc4f7b4414ae8f263e4e3ef589d)

* [OCPBUGS-103137](https://issues.redhat.com/browse/OCPBUGS-103137): Bump x/net to v0.35.0-sec.4 [#2296](https://github.com/openshift/assisted-installer/pull/2296)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/63b2da6ef83a82468cf0c5baea4fef27a36be267...e755d585d2405fc4f7b4414ae8f263e4e3ef589d)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/b0a5486f310691e8ae7c0dbc491c1130eb703472)

* [OCPBUGS-88219](https://issues.redhat.com/browse/OCPBUGS-88219): replace golang.org/x/net with sustaining fork v0.35.0-sec.4 [#181](https://github.com/openshift/cloud-provider-aws/pull/181)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/144bace6c7a2ae52fcab3dabb2d9636a1465365a...b0a5486f310691e8ae7c0dbc491c1130eb703472)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/8d4bbf28adff59be819578f702cef29236bfbfb5)

* 🌱 OCPBUGS-123711: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI [#644](https://github.com/openshift/cluster-api-provider-aws/pull/644)
* [OCPBUGS-78175](https://issues.redhat.com/browse/OCPBUGS-78175): [release-4.17] update go mod dependency for konflux [#590](https://github.com/openshift/cluster-api-provider-aws/pull/590)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9fda7bd72f4f44d6755d13f5351c1bb8cc55f6b0...8d4bbf28adff59be819578f702cef29236bfbfb5)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/51a0563331da53390b3b2a493fa5251e716de890)

* [OCPBUGS-82699](https://issues.redhat.com/browse/OCPBUGS-82699): Address CVE-2026-35469 [#328](https://github.com/openshift/aws-ebs-csi-driver/pull/328)
* [OCPBUGS-86234](https://issues.redhat.com/browse/OCPBUGS-86234): UPSTREAM: 2367: cleanup: `make verify` should ignore copyright year [#323](https://github.com/openshift/aws-ebs-csi-driver/pull/323)
* [OCPBUGS-80031](https://issues.redhat.com/browse/OCPBUGS-80031): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 [#314](https://github.com/openshift/aws-ebs-csi-driver/pull/314)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/2bb5b316f5941788e398f22974f9c816dd37d428...51a0563331da53390b3b2a493fa5251e716de890)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e67405981e4ceef37449f04c7b6a5b96e2735824)

* [OCPBUGS-103147](https://issues.redhat.com/browse/OCPBUGS-103147), [OCPBUGS-103155](https://issues.redhat.com/browse/OCPBUGS-103155): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#609](https://github.com/openshift/csi-operator/pull/609)
* [OCPBUGS-80133](https://issues.redhat.com/browse/OCPBUGS-80133): Bump google.golang.org/grpc [#543](https://github.com/openshift/csi-operator/pull/543)
* [Full changelog](https://github.com/openshift/csi-operator/compare/1a178e796560d227a903c1603e6fcb5a341f20ba...e67405981e4ceef37449f04c7b6a5b96e2735824)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/9b1719e3c46f18fe763ee7cdf34012a969550b0b)

* [OCPBUGS-80009](https://issues.redhat.com/browse/OCPBUGS-80009): Bump google.golang.org/grpc to v1.79.3 [#44](https://github.com/openshift/aws-encryption-provider/pull/44)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/9d4016701d355cd3a47f5ebe10f266d8971febc6...9b1719e3c46f18fe763ee7cdf34012a969550b0b)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86)

* [OCPBUGS-80035](https://issues.redhat.com/browse/OCPBUGS-80035), [OCPBUGS-80036](https://issues.redhat.com/browse/OCPBUGS-80036), [OCPBUGS-80174](https://issues.redhat.com/browse/OCPBUGS-80174): Bump google.golang.org/grpc to v1.79.3 [#181](https://github.com/openshift/cloud-provider-azure/pull/181)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/626ecd1c32f50953e84fd1cb499077d52fe53e43...5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/08c5419ade9e988a7286b714f8b9fd3be05b0e0b)

* [OCPBUGS-80037](https://issues.redhat.com/browse/OCPBUGS-80037): Bump google.golang.org/grpc to v1.79.3 [#386](https://github.com/openshift/cluster-api-provider-azure/pull/386)
* [OCPBUGS-77983](https://issues.redhat.com/browse/OCPBUGS-77983): [release-4.17] update go mod dependency for konflux [#363](https://github.com/openshift/cluster-api-provider-azure/pull/363)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/d359bfe56764238e2881f0f003fd8206b2b40dec...08c5419ade9e988a7286b714f8b9fd3be05b0e0b)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d)

* [OCPBUGS-80038](https://issues.redhat.com/browse/OCPBUGS-80038): Address CVE-2026-33186 [#143](https://github.com/openshift/azure-disk-csi-driver/pull/143)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a544f30bb48dbf6325efbb75e7114b9837c32505...e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/2201d80e445acaf19142a843dbd395d8e274e726)

* [OCPBUGS-103162](https://issues.redhat.com/browse/OCPBUGS-103162): Bump golang.org/x/net to v0.35.0-sec.4 [#159](https://github.com/openshift/azure-file-csi-driver/pull/159)
* [OCPBUGS-92849](https://issues.redhat.com/browse/OCPBUGS-92849): Bump golang.org/x/crypto to v0.33.0-sec.3 [#149](https://github.com/openshift/azure-file-csi-driver/pull/149)
* [OCPBUGS-80041](https://issues.redhat.com/browse/OCPBUGS-80041): Bump google.golang.org/grpc to v1.79.3 [#130](https://github.com/openshift/azure-file-csi-driver/pull/130)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/9f4c38c2bb28347ed5c4fd082666bfdea7382243...2201d80e445acaf19142a843dbd395d8e274e726)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/cc562120ff540e237cc170b8a82a8cbbc3a32ad2)

* [OCPBUGS-80010](https://issues.redhat.com/browse/OCPBUGS-80010): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#47](https://github.com/openshift/azure-kubernetes-kms/pull/47)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/190a0fabf17b28762b5578c0b9ffc25cf35cac64...cc562120ff540e237cc170b8a82a8cbbc3a32ad2)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/9ec9970b481951b96950d01a94f44a8c7344bf5b)

* [OCPBUGS-77898](https://issues.redhat.com/browse/OCPBUGS-77898): Update RHCOS-release-4.17 bootimage metadata to 417.94.202607240132-0 [#10796](https://github.com/openshift/installer/pull/10796)
* [Full changelog](https://github.com/openshift/installer/compare/b102c3acc6afdc1aed628f8d5604a467fba9b8c4...9ec9970b481951b96950d01a94f44a8c7344bf5b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7189593997f243911aeeb6e473e76d5ad0fd1e50)

* [OCPBUGS-91064](https://issues.redhat.com/browse/OCPBUGS-91064), [OCPBUGS-94526](https://issues.redhat.com/browse/OCPBUGS-94526): Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 [#2345](https://github.com/openshift/oc/pull/2345)
* [OCPBUGS-111835](https://issues.redhat.com/browse/OCPBUGS-111835): Fix pre-existing unit test failures [#2373](https://github.com/openshift/oc/pull/2373)
* [Full changelog](https://github.com/openshift/oc/compare/d76df14ea3d7ff9916ea576b6335cd3a220cd1bf...7189593997f243911aeeb6e473e76d5ad0fd1e50)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/6a11cde3b4cf42a9382c01f537f012f6df487899)

* [OCPBUGS-81861](https://issues.redhat.com/browse/OCPBUGS-81861): Bump go-jose/go-jose/v4@v4.1.4 [#1039](https://github.com/openshift/cloud-credential-operator/pull/1039)
* [OCPBUGS-80044](https://issues.redhat.com/browse/OCPBUGS-80044): Bump google.golang.org/grpc to v1.79.3 [#1025](https://github.com/openshift/cloud-credential-operator/pull/1025)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/662db76ca9abc7dff18d3a65140a17051fa07f9a...6a11cde3b4cf42a9382c01f537f012f6df487899)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/efa6fd9b220e841591d8be2208cdec4ffc826429)

* [OCPBUGS-78700](https://issues.redhat.com/browse/OCPBUGS-78700): allow clusterapi provider to skip paused resources [#414](https://github.com/openshift/kubernetes-autoscaler/pull/414)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/238102bbc7aaceb122351acafd1dbaf77dc222c6...efa6fd9b220e841591d8be2208cdec4ffc826429)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/bb407dd17744ed46ac9eedde23e2a8cd7371bfc9)

* [OCPBUGS-103166](https://issues.redhat.com/browse/OCPBUGS-103166): Bump x/net package in release-4.17 [#389](https://github.com/openshift/cluster-autoscaler-operator/pull/389)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/ea4a88786cf9b237dc446e01fdacd6fd65b73144...bb407dd17744ed46ac9eedde23e2a8cd7371bfc9)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/16ed4727250a72342b3da7b280d3456f7055a6c9)

* [OCPBUGS-77446](https://issues.redhat.com/browse/OCPBUGS-77446): Bump github.com/go-errors/errors to v1.5.1 [#561](https://github.com/openshift/cluster-baremetal-operator/pull/561)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/d0f98ecf2ef4a1761b7cc116390e73b3dd7698c0...16ed4727250a72342b3da7b280d3456f7055a6c9)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/3b417931b1e94534cbde2c435c262befad8a57f1)

* [OCPBUGS-80045](https://issues.redhat.com/browse/OCPBUGS-80045): Bump google.golang.org/grpc to v1.79.3 [#291](https://github.com/openshift/cluster-api/pull/291)
* [Full changelog](https://github.com/openshift/cluster-api/compare/77ef4fc55392dd02232da73cc06a504659d08b48...3b417931b1e94534cbde2c435c262befad8a57f1)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/17abd1d9c801288347f4134965b268389a90c342)

* [OCPBUGS-80049](https://issues.redhat.com/browse/OCPBUGS-80049): Bump google.golang.org/grpc to v1.79.3 [#570](https://github.com/openshift/cluster-capi-operator/pull/570)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#559](https://github.com/openshift/cluster-capi-operator/pull/559)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459...17abd1d9c801288347f4134965b268389a90c342)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1725337535e32158f37471a2286c9142f100ff41)

* [OCPBUGS-103182](https://issues.redhat.com/browse/OCPBUGS-103182): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#1572](https://github.com/openshift/cluster-ingress-operator/pull/1572)
* [OCPBUGS-86714](https://issues.redhat.com/browse/OCPBUGS-86714): Add configuration override for X-SSL strip [#1486](https://github.com/openshift/cluster-ingress-operator/pull/1486)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/1a164c16e804a4cf4f8b7aca4b8cb24d265dedb4...1725337535e32158f37471a2286c9142f100ff41)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/c1947350f996bcc50c549c9e83382179d6455247)

* [OCPBUGS-80056](https://issues.redhat.com/browse/OCPBUGS-80056): Bump google.golang.org/grpc to v1.79.3 [#78](https://github.com/openshift/cluster-api-operator/pull/78)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/aed5f6c74a0e174901709f18eecad6573cd80784...c1947350f996bcc50c549c9e83382179d6455247)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3fd302e8d550c9d3fb02533a9c60956484a6db2d)

* [OCPBUGS-103184](https://issues.redhat.com/browse/OCPBUGS-103184): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame- #3075 [#3084](https://github.com/openshift/cluster-monitoring-operator/pull/3084)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/97fec1403dc61e1b2126df8c3afeb96e02055ee5...3fd302e8d550c9d3fb02533a9c60956484a6db2d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dc98c59e223f325acb113a697771e737266876a5)

* [OCPBUGS-85244](https://issues.redhat.com/browse/OCPBUGS-85244): whereabouts-token-watcher DaemonSet improvements [#3016](https://github.com/openshift/cluster-network-operator/pull/3016)
* [OCPBUGS-84181](https://issues.redhat.com/browse/OCPBUGS-84181): fix(hypershift): use net.JoinHostPort for URL construction [#2983](https://github.com/openshift/cluster-network-operator/pull/2983)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/1aca832fab45aceebe8026077d67ac6b82b51179...dc98c59e223f325acb113a697771e737266876a5)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fe37d7cf96ef3280f1bd41c55372b520fdf6c821)

* [OCPBUGS-82706](https://issues.redhat.com/browse/OCPBUGS-82706): Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 [#1548](https://github.com/openshift/cluster-node-tuning-operator/pull/1548)
* [OCPBUGS-78214](https://issues.redhat.com/browse/OCPBUGS-78214): PPC: filter out namespaces dir [#1481](https://github.com/openshift/cluster-node-tuning-operator/pull/1481)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/65585d9988f91a0dcb71b1fd91174dc422fb6a1c...fe37d7cf96ef3280f1bd41c55372b520fdf6c821)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f289edc3bb99197984aa392b13dfef07b075bcce)

* [OCPBUGS-80063](https://issues.redhat.com/browse/OCPBUGS-80063): Bump google.golang.org/grpc to v1.79.3 [#201](https://github.com/openshift/cluster-olm-operator/pull/201)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e31b7775ef903ff0c35f95656af27afa2dddd3e4...f289edc3bb99197984aa392b13dfef07b075bcce)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a039f8a2e73771f76e799ed497535705037f3bf5)

* [OCPBUGS-87591](https://issues.redhat.com/browse/OCPBUGS-87591): remove oVirt code from CSO 4.17 [#708](https://github.com/openshift/cluster-storage-operator/pull/708)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/45cbcc96a5a3a7bc743076965de0cc6a262ac11a...a039f8a2e73771f76e799ed497535705037f3bf5)


### [console](https://github.com/openshift/console/tree/b61b5d90e1cd21fe13b05dc2d164c7d84627e358)

* Fix for OCPBUGS-92069: CVE-2026-44990 [#16718](https://github.com/openshift/console/pull/16718)
* [OCPBUGS-78672](https://issues.redhat.com/browse/OCPBUGS-78672): Namespace is not persisting when switching to developer view from the topology page of admin page [#16160](https://github.com/openshift/console/pull/16160)
* [OCPBUGS-98411](https://issues.redhat.com/browse/OCPBUGS-98411): CVE-2026-59869 bump js-yaml [#17086](https://github.com/openshift/console/pull/17086)
* [OCPBUGS-100514](https://issues.redhat.com/browse/OCPBUGS-100514), [OCPBUGS-101790](https://issues.redhat.com/browse/OCPBUGS-101790): Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss [#17059](https://github.com/openshift/console/pull/17059)
* [OCPBUGS-100172](https://issues.redhat.com/browse/OCPBUGS-100172): Prevent binary secret data corruption when editing [#16879](https://github.com/openshift/console/pull/16879)
* [OCPBUGS-105790](https://issues.redhat.com/browse/OCPBUGS-105790): Disable shipwright e2e tests to unblock CI [#16955](https://github.com/openshift/console/pull/16955)
* [OCPBUGS-87986](https://issues.redhat.com/browse/OCPBUGS-87986): [release-4.17] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16600](https://github.com/openshift/console/pull/16600)
* Fix for OCPBUGS-81600: CVE-2026-4800 [#16564](https://github.com/openshift/console/pull/16564)
* [OCPBUGS-84283](https://issues.redhat.com/browse/OCPBUGS-84283): Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 [#16738](https://github.com/openshift/console/pull/16738)
* [OCPBUGS-77124](https://issues.redhat.com/browse/OCPBUGS-77124): [release-4.17] CVE-2026-26996 Bump minimatch library [#16345](https://github.com/openshift/console/pull/16345)
* [OCPBUGS-79443](https://issues.redhat.com/browse/OCPBUGS-79443): Bump immutable [#16326](https://github.com/openshift/console/pull/16326)
* NO-JIRA: enable multi-architecture yarn builds [#16419](https://github.com/openshift/console/pull/16419)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16074](https://github.com/openshift/console/pull/16074)
* [Full changelog](https://github.com/openshift/console/compare/e6e10764fd20b562aa21f76d6adc02d711a4a2a5...b61b5d90e1cd21fe13b05dc2d164c7d84627e358)


### [console-operator](https://github.com/openshift/console-operator/tree/e8032813321ac4c2daec869a7703c31cd9b2acf4)

* [OCPBUGS-77862](https://issues.redhat.com/browse/OCPBUGS-77862): update go mod dependency for konflux [#1114](https://github.com/openshift/console-operator/pull/1114)
* [Full changelog](https://github.com/openshift/console-operator/compare/dc3d8515c13d3127da0aff3d20f5e61c4bd8f3d3...e8032813321ac4c2daec869a7703c31cd9b2acf4)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/621348df96a03f642716845a15dc4043cc5f85f1)

* [OCPBUGS-85671](https://issues.redhat.com/browse/OCPBUGS-85671): CI Build root image tag sync with ART [#235](https://github.com/openshift/containernetworking-plugins/pull/235)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/a95a5efed26080ae264e2d059fb5bdcb9ba1baee...621348df96a03f642716845a15dc4043cc5f85f1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/3358ea3f5ed8835aa760ee5cf02b9980bcdeb528)

* [OCPBUGS-80134](https://issues.redhat.com/browse/OCPBUGS-80134): Bump google.golang.org/grpc [#388](https://github.com/openshift/cloud-provider-openstack/pull/388)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/baec20197f8ad057abff220a0bbde18e064e2f4e...3358ea3f5ed8835aa760ee5cf02b9980bcdeb528)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/a56e0cbacf27e90ffda7de9a6a470911a17a52c2)

* [OCPBUGS-82708](https://issues.redhat.com/browse/OCPBUGS-82708): Bump github.com/moby/spdystream@v0.5.1 [#195](https://github.com/openshift/csi-driver-nfs/pull/195)
* [OCPBUGS-80077](https://issues.redhat.com/browse/OCPBUGS-80077): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 [#181](https://github.com/openshift/csi-driver-nfs/pull/181)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/798855508da2df01719bf82f6344112a33b5437c...a56e0cbacf27e90ffda7de9a6a470911a17a52c2)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a)

* [OCPBUGS-103198](https://issues.redhat.com/browse/OCPBUGS-103198): Bump golang.org/x/net to v0.35.0-sec.3 [#127](https://github.com/openshift/csi-driver-shared-resource-operator/pull/127)
* [OCPBUGS-80080](https://issues.redhat.com/browse/OCPBUGS-80080): Bump google.golang.org/grpc to v1.79.3 [#125](https://github.com/openshift/csi-driver-shared-resource-operator/pull/125)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/c095a1f2bbd0c365b74e548498d13f8463c69eb2...95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/8d93b8a3560410cb2ff3dd6d285fea822720edd4)

* [OCPBUGS-80082](https://issues.redhat.com/browse/OCPBUGS-80082): Bump google.golang.org/grpc to v1.79.3 [#106](https://github.com/openshift/csi-external-attacher/pull/106)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/c3fe8e2ec46929fbad110b392337960be3c9d6a0...8d93b8a3560410cb2ff3dd6d285fea822720edd4)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/88d1fdf1716d5d69bc88fdab27677185b440e155)

* [OCPBUGS-82709](https://issues.redhat.com/browse/OCPBUGS-82709): Address CVE-2026-35469 [#142](https://github.com/openshift/csi-external-provisioner/pull/142)
* [OCPBUGS-80083](https://issues.redhat.com/browse/OCPBUGS-80083): Bump google.golang.org/grpc [#131](https://github.com/openshift/csi-external-provisioner/pull/131)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/fe460e56e19dd3cc5497fd068083da9850fc1996...88d1fdf1716d5d69bc88fdab27677185b440e155)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/96012dea4582fd44513410d90b6db640fce5613a)

* [OCPBUGS-103208](https://issues.redhat.com/browse/OCPBUGS-103208): Bump golang.org/x/net to v0.35.0-sec.4 [#214](https://github.com/openshift/csi-external-resizer/pull/214)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/73798480d1110af451e5d7c237a722bc5e901f7b...96012dea4582fd44513410d90b6db640fce5613a)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c)

* [OCPBUGS-80085](https://issues.redhat.com/browse/OCPBUGS-80085), [OCPBUGS-80088](https://issues.redhat.com/browse/OCPBUGS-80088), [OCPBUGS-80089](https://issues.redhat.com/browse/OCPBUGS-80089): Bump google.golang.org/grpc to v1.79.3 [#214](https://github.com/openshift/csi-external-snapshotter/pull/214)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/080f6bdb8ffdbfe2556370ce5bc95ac973e1ad95...59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/f2203376a8a2d8eecec7b85dc28b756b49d8c469)

* [OCPBUGS-80095](https://issues.redhat.com/browse/OCPBUGS-80095): Bump google.golang.org/grpc to v1.79.3 [#291](https://github.com/openshift/cluster-api-provider-gcp/pull/291)
* [OCPBUGS-78279](https://issues.redhat.com/browse/OCPBUGS-78279): [release-4.17] update go mod dependency for konflux [#266](https://github.com/openshift/cluster-api-provider-gcp/pull/266)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f...f2203376a8a2d8eecec7b85dc28b756b49d8c469)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/96fa4696da4229c4ac5bccd392750725ca5c4dc8)

* [OCPBUGS-103253](https://issues.redhat.com/browse/OCPBUGS-103253): Bump golang.org/x/net to v0.35.0-sec.3 [#190](https://github.com/openshift/machine-api-provider-gcp/pull/190)
* [OCPBUGS-80118](https://issues.redhat.com/browse/OCPBUGS-80118): Bump google.golang.org/grpc to v1.79.3 [#166](https://github.com/openshift/machine-api-provider-gcp/pull/166)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/86a1d902ab3989413be802a3daea422bc559012f...96fa4696da4229c4ac5bccd392750725ca5c4dc8)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/907b8422fcdcb0f895c5a92bb796a93d6aed23b1)

* [OCPBUGS-80099](https://issues.redhat.com/browse/OCPBUGS-80099): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 [#113](https://github.com/openshift/gcp-pd-csi-driver/pull/113)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/a066d98e8a4033b78a3e0fffade7d386630072f7...907b8422fcdcb0f895c5a92bb796a93d6aed23b1)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/5f27231835491f40506353f04b5a895773a1b53a)

* [OCPBUGS-80098](https://issues.redhat.com/browse/OCPBUGS-80098): Replace google.golang.org/grpc with fork [#188](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/188)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/c23b064fe303ec760c0de6204577d10ef0b0f63d...5f27231835491f40506353f04b5a895773a1b53a)


### [haproxy-router](https://github.com/openshift/router/tree/216fb937c4d84bdad2c44e2659e4a69235d062fc)

* [OCPBUGS-86725](https://issues.redhat.com/browse/OCPBUGS-86725): Prevent SSRF via FQDN-typed EndpointSlices [#835](https://github.com/openshift/router/pull/835)
* [OCPBUGS-86714](https://issues.redhat.com/browse/OCPBUGS-86714): Strip X-SSL-* headers for plain HTTP [#804](https://github.com/openshift/router/pull/804)
* [OCPBUGS-80100](https://issues.redhat.com/browse/OCPBUGS-80100): Address CVE-2026-33186 [#779](https://github.com/openshift/router/pull/779)
* [Full changelog](https://github.com/openshift/router/compare/1e29d8cc87a1c9e6645a4b9aa01197d90e366152...216fb937c4d84bdad2c44e2659e4a69235d062fc)


### [hypershift](https://github.com/openshift/hypershift/tree/858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2)

* [OCPBUGS-76289](https://issues.redhat.com/browse/OCPBUGS-76289): CVE-2025-52881 openshift/hypershift multicluster-engine/hypershift-rhel9-operator: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [mce-2.7] [#8292](https://github.com/openshift/hypershift/pull/8292)
* [OCPBUGS-99079](https://issues.redhat.com/browse/OCPBUGS-99079): fix(backport): konnectivity agent auth [#9104](https://github.com/openshift/hypershift/pull/9104)
* [OCPBUGS-89357](https://issues.redhat.com/browse/OCPBUGS-89357): build(operator): drop hypershift-no-cgo from operator container images [#8761](https://github.com/openshift/hypershift/pull/8761)
* [OCPBUGS-80103](https://issues.redhat.com/browse/OCPBUGS-80103): fix https://github.com/advisories/GHSA-p77j-4mvh-x3m3 by replacing grpc-go [#8516](https://github.com/openshift/hypershift/pull/8516)
* [OCPBUGS-84181](https://issues.redhat.com/browse/OCPBUGS-84181): fix(cno): use brackets only for IPv6 in server URL [#8347](https://github.com/openshift/hypershift/pull/8347)
* [OCPBUGS-76533](https://issues.redhat.com/browse/OCPBUGS-76533): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7703](https://github.com/openshift/hypershift/pull/7703)
* [Full changelog](https://github.com/openshift/hypershift/compare/0e58a28336e154a69b1d94b0ccfd2e5b256d7250...858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/9c043915bd01ede967dd412034190303150a9825)

* [OCPBUGS-80105](https://issues.redhat.com/browse/OCPBUGS-80105): Bump google.golang.org/grpc to v1.79.3 [#144](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/efdc56fdd3a331643b8d35567682fddf17477bec...9c043915bd01ede967dd412034190303150a9825)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/a6cc81b5ff924e190c701c509fdfea67e6615ff9)

* [OCPBUGS-86974](https://issues.redhat.com/browse/OCPBUGS-86974): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.17 [#155](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/155)
* [OCPBUGS-103234](https://issues.redhat.com/browse/OCPBUGS-103234): Replace golang.org/x/net with openshift-sustaining/net [#171](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/171)
* [OCPBUGS-115543](https://issues.redhat.com/browse/OCPBUGS-115543): Fetch envtest assets from the controller-tools releases [#182](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/182)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/9c13e272406752acdc8e89d0f67eeae07a5f747f...a6cc81b5ff924e190c701c509fdfea67e6615ff9)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/89fbc4e852047a5a394a42d2334bdf02d190fcc0)

* [OCPBUGS-103227](https://issues.redhat.com/browse/OCPBUGS-103227): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 [#105](https://github.com/openshift/machine-api-provider-ibmcloud/pull/105)
* NO-JIRA: vendor golint instead of relying on the CI build root [#114](https://github.com/openshift/machine-api-provider-ibmcloud/pull/114)
* [OCPBUGS-81667](https://issues.redhat.com/browse/OCPBUGS-81667): bump vpc go sdk [#92](https://github.com/openshift/machine-api-provider-ibmcloud/pull/92)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#88](https://github.com/openshift/machine-api-provider-ibmcloud/pull/88)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0b8dd7abc69b9a2369005517846c95c619abf613...89fbc4e852047a5a394a42d2334bdf02d190fcc0)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2e91ecb38e819b2b191553461ff5dc61359115c9)

* [OCPBUGS-80108](https://issues.redhat.com/browse/OCPBUGS-80108): Bump google.golang.org/grpc to v1.79.3 [#1284](https://github.com/openshift/insights-operator/pull/1284)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c1b05a654634ea3eff6e322c66e755082813479a...2e91ecb38e819b2b191553461ff5dc61359115c9)


### [ironic](https://github.com/openshift/ironic-image/tree/005cfdf54b53f458283e3eae85f0c304cb8635fa)

* [OCPBUGS-88474](https://issues.redhat.com/browse/OCPBUGS-88474): Update the commit hash for openstack-ironic that addresses CVE-2026-43003 [#905](https://github.com/openshift/ironic-image/pull/905)
* [OCPBUGS-100163](https://issues.redhat.com/browse/OCPBUGS-100163): Update openstack-ironic commit hash for CVE-2026-44918 [#902](https://github.com/openshift/ironic-image/pull/902)
* [OCPBUGS-76458](https://issues.redhat.com/browse/OCPBUGS-76458): Bump pyasn1 to 0.5.1-4 [#827](https://github.com/openshift/ironic-image/pull/827)
* [OCPBUGS-74114](https://issues.redhat.com/browse/OCPBUGS-74114): Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix [#796](https://github.com/openshift/ironic-image/pull/796)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e8959a879d31eaba0c0c7b4491339766afd9a6c6...005cfdf54b53f458283e3eae85f0c304cb8635fa)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/3e4fd09f7e36a8eec82627ea1e0ebafa9649d5ea)

* [OCPBUGS-88474](https://issues.redhat.com/browse/OCPBUGS-88474): Update commit hash for openstack-ironic-python-agent that addresses CVE-2026-43003 [#315](https://github.com/openshift/ironic-agent-image/pull/315)
* [OCPBUGS-99886](https://issues.redhat.com/browse/OCPBUGS-99886): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#309](https://github.com/openshift/ironic-agent-image/pull/309)
* [OCPBUGS-95067](https://issues.redhat.com/browse/OCPBUGS-95067): Replace individual package removal with a single rpm -e loop [#287](https://github.com/openshift/ironic-agent-image/pull/287)
* [OCPBUGS-95067](https://issues.redhat.com/browse/OCPBUGS-95067): Replace dnf remove with rpm -e to prevent dependency removal [#275](https://github.com/openshift/ironic-agent-image/pull/275)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/d0261c59daa50c481a68846d9da1ce855c4c1578...3e4fd09f7e36a8eec82627ea1e0ebafa9649d5ea)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/120aa708f669b7d771a6c2ada9cccad45fb98521)

* [OCPBUGS-80013](https://issues.redhat.com/browse/OCPBUGS-80013): Bump google.golang.org/grpc to v1.79.3 [#65](https://github.com/openshift/kubernetes-metrics-server/pull/65)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec...120aa708f669b7d771a6c2ada9cccad45fb98521)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/d7d7a59127ef9020cbf6339a313e7eb7346c95f6)

* [OCPBUGS-95083](https://issues.redhat.com/browse/OCPBUGS-95083): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#79](https://github.com/openshift/cloud-provider-kubevirt/pull/79)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/9804c42a35e122bd9a88955a11338357698d8b3c...d7d7a59127ef9020cbf6339a313e7eb7346c95f6)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/b4ad2d68d25572212ca92d42bb209d103d3589d6)

* [OCPBUGS-80014](https://issues.redhat.com/browse/OCPBUGS-80014): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/kubevirt-csi-driver/pull/102)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/757a8894fe4f5b569210ec695fe0615e291f42ec...b4ad2d68d25572212ca92d42bb209d103d3589d6)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/931afe11b155006f805d0b029e46416e632d1a14)

* [OCPBUGS-77195](https://issues.redhat.com/browse/OCPBUGS-77195): Fix incomplete vendor/ [#301](https://github.com/openshift/cluster-api-provider-libvirt/pull/301)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...931afe11b155006f805d0b029e46416e632d1a14)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/2eb3ca6e5bb9b245c34b5df6c9ab5961e0f371fc)

* [OCPBUGS-79373](https://issues.redhat.com/browse/OCPBUGS-79373): [release-4.17] Use resource group when generating default Azure image [#1481](https://github.com/openshift/machine-api-operator/pull/1481)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/998cffed3663b5b4332a8eb0d8e7dce489b1bfa9...2eb3ca6e5bb9b245c34b5df6c9ab5961e0f371fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3bdd678e83da52e0754b393b82435eea968af3ed)

* [OCPBUGS-98583](https://issues.redhat.com/browse/OCPBUGS-98583): Remove sensitive ControllerConfig logging [#6300](https://github.com/openshift/machine-config-operator/pull/6300)
* [OCPBUGS-97845](https://issues.redhat.com/browse/OCPBUGS-97845): Bootstrap MCS logging entire ignition [#6274](https://github.com/openshift/machine-config-operator/pull/6274)
* [OCPBUGS-74149](https://issues.redhat.com/browse/OCPBUGS-74149): enable nodeip-configuration for platform external [#5577](https://github.com/openshift/machine-config-operator/pull/5577)
* [OCPBUGS-77979](https://issues.redhat.com/browse/OCPBUGS-77979): hermetic 4.17 [#5733](https://github.com/openshift/machine-config-operator/pull/5733)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6f05bc5557c46f06447c1c0f65921d75491293d1...3bdd678e83da52e0754b393b82435eea968af3ed)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/cc250001ddce8bd6342942f045ff7f9930c74040)

* [OCPBUGS-87877](https://issues.redhat.com/browse/OCPBUGS-87877): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#101](https://github.com/openshift/machine-os-images/pull/101)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/f85666be7889cd6ba95926546a005fed5f3cb68a...cc250001ddce8bd6342942f045ff7f9930c74040)


### [metallb-frr](https://github.com/openshift/frr/tree/b575d5dfac5319d7d296922de69c73baea6d142d)

* [OCPBUGS-76548](https://issues.redhat.com/browse/OCPBUGS-76548): Dockerfile: unpin FRR rpm [#124](https://github.com/openshift/frr/pull/124)
* [Full changelog](https://github.com/openshift/frr/compare/c0182036769726484b96a20db5e8be211d2f88b6...b575d5dfac5319d7d296922de69c73baea6d142d)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ffd758f816979228ae5f5d8ec526e74efcbf149a)

* Fix for OCPBUGS-98163: CVE-2026-13676 [#1050](https://github.com/openshift/monitoring-plugin/pull/1050)
* Fix for OCPBUGS-90525 OCPBUGS-90526: CVE-2026-12151 CVE-2026-9697 [#1008](https://github.com/openshift/monitoring-plugin/pull/1008)
* [OCPBUGS-79444](https://issues.redhat.com/browse/OCPBUGS-79444): immutable bump [#897](https://github.com/openshift/monitoring-plugin/pull/897)
* [OU-1260](https://issues.redhat.com/browse/OU-1260): [release-4.17] feat: use npm instead of yarn [#812](https://github.com/openshift/monitoring-plugin/pull/812)
* [OCPBUGS-76809](https://issues.redhat.com/browse/OCPBUGS-76809): fix for CVE-2025-69873 [#848](https://github.com/openshift/monitoring-plugin/pull/848)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/8d96a52a27c65dc5fe45d86f203ac322fb0402ee...ffd758f816979228ae5f5d8ec526e74efcbf149a)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/659299d118afc196d66b16a7714e17e6d11d0669)

* [OCPBUGS-85250](https://issues.redhat.com/browse/OCPBUGS-85250): Fix server url in kubeconfig [#299](https://github.com/openshift/multus-cni/pull/299)
* NO-ISSUE: [release-4.17] Bump Go to 1.22 and fix CI build root image [#290](https://github.com/openshift/multus-cni/pull/290)
* [OCPBUGS-77854](https://issues.redhat.com/browse/OCPBUGS-77854): hermetic 4.17 [#277](https://github.com/openshift/multus-cni/pull/277)
* [Full changelog](https://github.com/openshift/multus-cni/compare/93d87533af805ff6d8ede2eb3fde4e605fbda3f9...659299d118afc196d66b16a7714e17e6d11d0669)


### [must-gather](https://github.com/openshift/must-gather/tree/ea72c2eb404f9fe9282be70d1af7689f8f139fee)

* [OCPBUGS-86069](https://issues.redhat.com/browse/OCPBUGS-86069): Collect object size with the object count [#548](https://github.com/openshift/must-gather/pull/548)
* [Full changelog](https://github.com/openshift/must-gather/compare/2429998f12191eac5ffa83f3d189bb92a29724dd...ea72c2eb404f9fe9282be70d1af7689f8f139fee)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/8f7cc9253b83072c273c28cff64b00eb6ef3b38a)

* [OCPBUGS-77350](https://issues.redhat.com/browse/OCPBUGS-77350): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.17 [#110](https://github.com/openshift/bond-cni/pull/110)
* [Full changelog](https://github.com/openshift/bond-cni/compare/cc7b628e6d4c0331d0515b7b59a0d22699ed6ea3...8f7cc9253b83072c273c28cff64b00eb6ef3b38a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/02524de642295b592ad52235f9e2d6e22edf92ff)

* [OCPBUGS-98764](https://issues.redhat.com/browse/OCPBUGS-98764): Updating linkify-it to 5.0.2 to fix CVE-2026-48801 [#459](https://github.com/openshift/networking-console-plugin/pull/459)
* [OCPBUGS-100158](https://issues.redhat.com/browse/OCPBUGS-100158): Updating networking-console-plugin-container image to be consistent with ART for 4.17 [#455](https://github.com/openshift/networking-console-plugin/pull/455)
* [OCPBUGS-87998](https://issues.redhat.com/browse/OCPBUGS-87998): Retain namespace selection between network policies tabs [#428](https://github.com/openshift/networking-console-plugin/pull/428)
* [OCPBUGS-83379](https://issues.redhat.com/browse/OCPBUGS-83379): fix CVE-2026-34043 - Update serialize-javascript to 7.0.5 [#416](https://github.com/openshift/networking-console-plugin/pull/416)
* [release-4:17] OCPBUGS-85376: Migration from yarn to npm [#414](https://github.com/openshift/networking-console-plugin/pull/414)
* [OCPBUGS-81602](https://issues.redhat.com/browse/OCPBUGS-81602): Fix CVE-2026-CVE-2026-4800 in lodash [#402](https://github.com/openshift/networking-console-plugin/pull/402)
* [OCPBUGS-79445](https://issues.redhat.com/browse/OCPBUGS-79445): Bump immutable [#389](https://github.com/openshift/networking-console-plugin/pull/389)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/2b419724d25df1e7ac0781d5a5edfe2f96b62e5a...02524de642295b592ad52235f9e2d6e22edf92ff)


### [oauth-server](https://github.com/openshift/oauth-server/tree/be35f2dd002c1b655397207edf65c112aa59388c)

* [OCPBUGS-81795](https://issues.redhat.com/browse/OCPBUGS-81795): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#239](https://github.com/openshift/oauth-server/pull/239)
* [Full changelog](https://github.com/openshift/oauth-server/compare/731ed82ec3b483cbe0b8ea4ffc52479aa0f1d4b7...be35f2dd002c1b655397207edf65c112aa59388c)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/795b313c5a491efe27207e5b3988ec9ba6f5378e)

* [OCPBUGS-80129](https://issues.redhat.com/browse/OCPBUGS-80129): Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 [#736](https://github.com/openshift/operator-framework-operator-controller/pull/736)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/e245e6612aa1773f5a17d66edca7dc01f0cb5098...795b313c5a491efe27207e5b3988ec9ba6f5378e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/79a42c566a8c7857d23623d296c80a70fc2b8148)

* [OCPBUGS-82720](https://issues.redhat.com/browse/OCPBUGS-82720): Address CVE-2026-35469 [#658](https://github.com/openshift/openshift-apiserver/pull/658)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/2ebbed4677b90c09899a96afc4f0a750e802f65e...79a42c566a8c7857d23623d296c80a70fc2b8148)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/00ba71fd3736b00d019383fce2ec74a9c5f9414c)

* [OCPBUGS-80133](https://issues.redhat.com/browse/OCPBUGS-80133): Bump google.golang.org/grpc to v1.79.3 [#194](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/194)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2...00ba71fd3736b00d019383fce2ec74a9c5f9414c)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/3b926d2094bab3c6759252b7681cc36473b29021)

* [OCPBUGS-78169](https://issues.redhat.com/browse/OCPBUGS-78169): hermetic 4.17 [#162](https://github.com/openshift/machine-api-provider-openstack/pull/162)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/30a867ea5ba7d805ce0cca8172feb7dd6480ea1a...3b926d2094bab3c6759252b7681cc36473b29021)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c9ad6fd83727301129cfd1a2b165bf29949529a8)

* [OCPBUGS-103275](https://issues.redhat.com/browse/OCPBUGS-103275), [OCPBUGS-103278](https://issues.redhat.com/browse/OCPBUGS-103278), [OCPBUGS-103286](https://issues.redhat.com/browse/OCPBUGS-103286): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#1368](https://github.com/openshift/operator-framework-olm/pull/1368)
* [OCPBUGS-80136](https://issues.redhat.com/browse/OCPBUGS-80136), [OCPBUGS-80137](https://issues.redhat.com/browse/OCPBUGS-80137), [OCPBUGS-80138](https://issues.redhat.com/browse/OCPBUGS-80138): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.17] [#1315](https://github.com/openshift/operator-framework-olm/pull/1315)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/7c68dcc506c099477f0fff65fd187d2c9c973429...c9ad6fd83727301129cfd1a2b165bf29949529a8)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/1e6f18e10f9ede7b91c3bd6039874c64b4e7a04a)

* [OCPBUGS-82724](https://issues.redhat.com/browse/OCPBUGS-82724): Bump github.com/moby/spdystream to v0.5.1 [#3322](https://github.com/openshift/ovn-kubernetes/pull/3322)
* [OCPBUGS-81639](https://issues.redhat.com/browse/OCPBUGS-81639): External gateway: Remove routes for external gateway pods in terminating or not ready state [#3107](https://github.com/openshift/ovn-kubernetes/pull/3107)
* [OCPBUGS-78029](https://issues.redhat.com/browse/OCPBUGS-78029): Add pperiyasamy to OWNERS for release-4.17 [#3046](https://github.com/openshift/ovn-kubernetes/pull/3046)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0fb1abde1454b64b596657600e18f4196229fa5a...1e6f18e10f9ede7b91c3bd6039874c64b4e7a04a)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/f67fdda42e37905fbc67fa8b4c47874f60441848)

* [OCPBUGS-80142](https://issues.redhat.com/browse/OCPBUGS-80142): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#131](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/131)
* [OCPBUGS-82725](https://issues.redhat.com/browse/OCPBUGS-82725): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#125](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/125)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e...f67fdda42e37905fbc67fa8b4c47874f60441848)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/aa1b744e13a0930844f24d9fb6fd9bd2164592e9)

* [OCPBUGS-80144](https://issues.redhat.com/browse/OCPBUGS-80144): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#112](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/112)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/f6f037c556d7fb8155c83e20e951944aecd102c6...aa1b744e13a0930844f24d9fb6fd9bd2164592e9)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/9f61dc1910671da364a7f9ba74f901b609ed1844)

* [OCPBUGS-80145](https://issues.redhat.com/browse/OCPBUGS-80145): Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 [#103](https://github.com/openshift/cloud-provider-powervs/pull/103)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/bd3d72e5095c950964f64871253e4da4ad2acbe7...9f61dc1910671da364a7f9ba74f901b609ed1844)


### [prometheus](https://github.com/openshift/prometheus/tree/fe618870fc6bf9a317c63f368534cd3cb821166e)

* [OCPBUGS-88631](https://issues.redhat.com/browse/OCPBUGS-88631): remote: validate snappy decoded length before allocation in read endpoint [#348](https://github.com/openshift/prometheus/pull/348)
* [OCPBUGS-80146](https://issues.redhat.com/browse/OCPBUGS-80146): Bump google.golang.org/grpc [#320](https://github.com/openshift/prometheus/pull/320)
* [Full changelog](https://github.com/openshift/prometheus/compare/97cd47978721d9e77d22c4d4798f43896324683b...fe618870fc6bf9a317c63f368534cd3cb821166e)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/f0c0bc1bf03c4d7ba0a4828c5d89716c3c0a8fac)

* [OCPBUGS-98167](https://issues.redhat.com/browse/OCPBUGS-98167): bump github.com/hashicorp/memberlist to a forked version [#166](https://github.com/openshift/prometheus-alertmanager/pull/166)
* [OCPBUGS-100356](https://issues.redhat.com/browse/OCPBUGS-100356): Set testdata CA expiry to 20 years from issue date (#4112) [#151](https://github.com/openshift/prometheus-alertmanager/pull/151)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d635aca64db8c9ec3ffe2fd9d3b4a7c03e19bddc...f0c0bc1bf03c4d7ba0a4828c5d89716c3c0a8fac)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/2c3a4e92762622587fe91f9f8d6de4f564a968e4)

* [OCPBUGS-103296](https://issues.redhat.com/browse/OCPBUGS-103296), [OCPBUGS-103297](https://issues.redhat.com/browse/OCPBUGS-103297): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#399](https://github.com/openshift/prometheus-operator/pull/399)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ea26b9317a53713807e35d9ac26a1a363f020e56...2c3a4e92762622587fe91f9f8d6de4f564a968e4)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/1e53205fa2e239df3c39a78bb50fddce77b4f3e1)

* [OCPBUGS-80022](https://issues.redhat.com/browse/OCPBUGS-80022): Bump google.golang.org/grpc to v1.79.3 [#86](https://github.com/openshift/route-controller-manager/pull/86)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/02bbf80ada3d5acaf36873b1fe69c71badc6d8d7...1e53205fa2e239df3c39a78bb50fddce77b4f3e1)


### [telemeter](https://github.com/openshift/telemeter/tree/15895a068e7e89b14292fde4601208c3eeb3a715)

* [OCPBUGS-81796](https://issues.redhat.com/browse/OCPBUGS-81796): [release-4.17] Fix CVE-2026-34986 [#597](https://github.com/openshift/telemeter/pull/597)
* [OCPBUGS-80159](https://issues.redhat.com/browse/OCPBUGS-80159): Bump google.golang.org/grpc to v1.79.3 [#600](https://github.com/openshift/telemeter/pull/600)
* [Full changelog](https://github.com/openshift/telemeter/compare/0238640e519c01f3eedd00b8dc82f34d2c502daf...15895a068e7e89b14292fde4601208c3eeb3a715)


### [thanos](https://github.com/openshift/thanos/tree/51fe5fa45f6df55266ca874287b47b2825f01b32)

* [OCPBUGS-80161](https://issues.redhat.com/browse/OCPBUGS-80161): Bump google.golang.org/grpc to v1.79.3 [#185](https://github.com/openshift/thanos/pull/185)
* [Full changelog](https://github.com/openshift/thanos/compare/98c993712257ae4c1335e493d037ee1f71284793...51fe5fa45f6df55266ca874287b47b2825f01b32)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/da096b41a79e2216f643ea2addc49a571116e7d5)

* [OCPBUGS-78027](https://issues.redhat.com/browse/OCPBUGS-78027): hermetic migration 4.17 [#106](https://github.com/openshift/cloud-provider-vsphere/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/097d823bd10abbc6cd016c34a1c5c3cd1b514031...da096b41a79e2216f643ea2addc49a571116e7d5)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/8d6ea11af1d9bffddc8e06a85aeefa3a9dbbf7da)

* [OCPBUGS-80165](https://issues.redhat.com/browse/OCPBUGS-80165): Bump google.golang.org/grpc to v1.79.3 [#105](https://github.com/openshift/cluster-api-provider-vsphere/pull/105)
* [OCPBUGS-78019](https://issues.redhat.com/browse/OCPBUGS-78019): hermetic migration 4.17 [#85](https://github.com/openshift/cluster-api-provider-vsphere/pull/85)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6a5d803e20e05510ba93135df96ad063aaf272de...8d6ea11af1d9bffddc8e06a85aeefa3a9dbbf7da)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/2c4c4710da37239a772ac666b2be8291fc0b2006)

* [OCPBUGS-92852](https://issues.redhat.com/browse/OCPBUGS-92852): Bump golang.org/x/crypto/ssh to v0.33.0-sec.3 [#194](https://github.com/openshift/vmware-vsphere-csi-driver/pull/194)
* [OCPBUGS-80168](https://issues.redhat.com/browse/OCPBUGS-80168): Bump google.golang.org/grpc [#177](https://github.com/openshift/vmware-vsphere-csi-driver/pull/177)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4b70f176dc1e93aa41ca98bd0d0152df0a616eb4...2c4c4710da37239a772ac666b2be8291fc0b2006)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/fca89d46c1922f682dd10abf863a2f8cb7a1f20d)

* [OCPBUGS-103317](https://issues.redhat.com/browse/OCPBUGS-103317): Bump golang.org/x/net to v0.35.0-sec.4 [#234](https://github.com/openshift/vsphere-problem-detector/pull/234)
* [OCPBUGS-84085](https://issues.redhat.com/browse/OCPBUGS-84085): fix concurrent map writes [#216](https://github.com/openshift/vsphere-problem-detector/pull/216)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/62ca90bcfaf7a030eb1734e9df66366b9dc009e6...fca89d46c1922f682dd10abf863a2f8cb7a1f20d)