# 4.18.18

Created: 2025-06-19 14:46:02 +0000 UTC

Image Digest: `sha256:eca2e3f7de2bd92b18f69547c8f0ad842fdb83f0821f76b8692f2716a86b0bde`


## Changes from 4.18.1

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.5 to 1.31.9
* Kubernetes Tests upgraded from 1.31.1 to 1.31.9
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202502100215-0 to 418.94.202506121335-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:ea3af108659d7ba517e963568098c820a91d90dbc1836eec0b384ec7feab2b95`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b51cd6b8](https://github.com/openshift/aws-ebs-csi-driver/commit/b51cd6b8e54d5682cf5491a9eb5af1570261a409) `sha256:f9add710effa358d579c9d4744a1d1b68a2f17ed584a2eb45c60b7be6af9a74f`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:da5bc4179940744bf2722cccdf84b363bc26bb3191f2d22773dd2b70b8c7fa86`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [53274f11](https://github.com/openshift/machine-api-provider-aws/commit/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08) `sha256:f30f637872bfe1464ae5e49acfcd014659c4340fe88bda09aea6c14b6ce86d42`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:e29eb77f1a08c50b8b8611286d2ed7d04eb6339b5c2b8064d95d68dd8f2dcffd`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:4cedda9848fe536f39bdf3f085f458e4d5719e30733045320c5cddd47b6e06a4`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [987615c8](https://github.com/openshift/cluster-api-provider-azure/commit/987615c80bfa65a5c70fbed3ff06e405ef6d88ed) `sha256:bacaf40582c37195af6f43e1fab9f613476d1b294bf627b41018d8dcf778444a`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:dd75a11a78092066e8684b438cad81673f10289692552e38db5996b263f66017`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:e666aebd24ba7dbc41ac1f01ba11b1b2fffcdf9b99756ab239b2abc1d06f5d07`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [7ec03e94](https://github.com/openshift/cluster-api-provider-metal3/commit/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec) `sha256:828146c37bf539a63de97ca965eceb22d16d90fbfdf9b3bf6579148f45c9f499`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:77336e4fd355808528d0028a6cfa86cb5616cc40d09e8ec90879323bfafb5287`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [9e2015c3](https://github.com/openshift/baremetal-runtimecfg/commit/9e2015c30f48013e895eb8dfc43695780e0d9162) `sha256:7c27aecec0dbfd1bc74f723cf31a048894dc6fbee953a2bf435263717856d0fe`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:251eda660c236dcbcd2a704ffe496e6032de0ae7036c16b2fabb0cc17e198796`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:c2574b9676ab05e4db7ea4ee77a887b525dec96982061a1421ca27d30b6369cd`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [d05a6def](https://github.com/openshift/cluster-api/commit/d05a6defdc3602918de8db0f93744ca8f6b2b820) `sha256:e878cdd8fd53b0520e8733fa7bdb5a1f9ee874320295cf56ff4e825c91b65446`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [33856906](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/33856906970a98ac05a042a8058902458d623e0f) `sha256:17c107bac857dcb37b538b4aa301c4e7275fe2af85b85cbd0fcfe6330b091c7e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [85cb4072](https://github.com/openshift/cluster-config-operator/commit/85cb40728227fac13a2983fb6e3170d67cf62075) `sha256:6ddab1c4c1aedc276c6e6bbd196a02d02ed7b17d38d840bfb62948ceaa7e795e`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:b0ed41bfe41bf53e40902b5e9c987a7c71a4d2767d9c556949f8fdecc26e9beb`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:1a42dbedf83d35e7129e34a3580e2914e45d1605371b8b4d61413482fa274c14`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [33a1141e](https://github.com/openshift/cluster-api-operator/commit/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd) `sha256:7a31a1994f332f021a62420d0b7459f83707a1b99cd7b2e0fc8c5d8cd6dccf02`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0fac9aa9](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1) `sha256:c8a8aa65c6e8ba4e2896594a5a73ce4b24e2f049dd8a3263611ecd7fa669700c`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [6182930d](https://github.com/openshift/cluster-kube-scheduler-operator/commit/6182930dde5ec8dd22bd50481e8b369ce673484c) `sha256:cb6aea4b896a394290ea1807b087c45e6642830387821e254b146e80244c5fe7`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:eeed7e743b8f2810a16d42733e04e92aed3308be2856738f4e8e5f957c0e65b6`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:9f969aad4da6d4f79cc1aca6cb7529a635cc343dad9901344eb5e3c319379b77`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:b25d37cd8867ebb61e4acecd8dd1acb0de1444a1b84a6ac38a2242ccab150510`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:8016c8dfdeb98b22f17219166d97e1f9c6f659a58a7591c0dc7a13e222b24f32`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:a0c1f2d8dc827cdba7f8fe9687ede25b58dfd59975961985e44d362177b2cdba`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:f9b539e2a31e0ef8da8a826b309b20862d01dc59fc63a295ef52a92fc61340ae`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [39b37c06](https://github.com/openshift/csi-external-attacher/commit/39b37c06a27481c708f071464bd1049ea7db97c7) `sha256:8a1ebb3870d53c669a99df6056dde558eb0c99aaa8cd45cb110bb2c6b53dc5ab`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [376f0ea0](https://github.com/openshift/csi-external-provisioner/commit/376f0ea04c64a41cb5166ff415fff849ff2da380) `sha256:4dee773dfccbf9a7cde4e0f3169daa3a148226f28cad4dd5f2c9f85b206b901d`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [cca3837a](https://github.com/openshift/csi-external-resizer/commit/cca3837a84fcade22bd7b935c68d02904faa12aa) `sha256:8bd2e50247f7a8000b32272ced8b1150c1eacc757da25537a1a22a6754bd7093`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:7f8573472e25c1db23d639ef7f23fe44e0d85ffe7f5bf6dc6a0e3cb87a0305e1`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:89af8518eb5538c8861ef1339c2add8e97506e1c1403e5d5832d53bab58e5a5a`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c21f5d02](https://github.com/openshift/csi-node-driver-registrar/commit/c21f5d02b498e9e49d94818f4ad3eaaae77ca161) `sha256:ff27d60494f1bb8a22d13c4124cee60c3b851b136e0ae6e9d24be8de95a5dc1b`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:ddcf93543cdd759b8faa463f2ed1b1228647b1ee20e8ea11d73eb7744087b024`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:ab93177f0a4dbf890cad6b301e5219122b8294e220820571f77ea53d3456420a`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:4a52491afabbd33d7e0a07e83373c2a85e5324535215271a0b7949fb16da0c16`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:61a8e68ec6b7b6242376c9bc114f428086cdba028de4589cf1f6b980c001e742`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:016eeb3a6cc2f9a438b7eab64f690fef1917b520c9e304254365b53f9f444766`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [af54f528](https://github.com/openshift/cluster-api-provider-gcp/commit/af54f5287c7d363c6bc7abe4ad9e72f4131d534c) `sha256:4d32ac2e2d567abd61a2d3cad62a425c582ee65b2267028031d00e4cd7a70179`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cb8b38c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb) `sha256:7311a4fa837bf0517a0bd7baabbf8ddd80284a8eabd841c662db915ed95d1b0d`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:0a9ee241762f93e90736c534732da42842220e78098a1a6f5801019dcbfa828e`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:3cf7651ee20c60da6e5cb42721b256cd69e3899b7901ba06deb4273300c186da`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [feae2605](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/feae260577a5ed5428432de9b7ca1439c98064de) `sha256:15ce2ffa32c1b67c31f97de4d514471370b49405333da4379c00d71cf20b0003`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:ed876158c5ba6202c393e3b69986a2eab83619229bd68c1b98b74adfd88f68f0`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:78b9e8fc3138d90ec3466f3921c3fef13ff572f0471024237612fa0815a9308f`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:974672b41ea4d90d9f35e2dea8e4e8edf48e27e3ea1258f8fd10d209019ec48b`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:1330821474e0dee5cb9a15c9ed2be1c59caac63dd207d9204972a59fde250005`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [962ccca2](https://github.com/openshift/kubernetes-metrics-server/commit/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf) `sha256:60e2b9f0d3597c4676c246cd67b41f20b3a21fd059608cbe93d67ac348c42740`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [526498ab](https://github.com/openshift/kube-rbac-proxy/commit/526498ab32996a0f67a96530ad7173f955e3fbe2) `sha256:0911beebdfb3b798192a70bf74397fdcf5ea15fa5bbf8843350ac3cdc0f5b0fb`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [cb5a9296](https://github.com/openshift/kube-state-metrics/commit/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61) `sha256:8b04db96e9f6496416b50a1893dbe8397d236174d1cbfe464c429c2ebd254e19`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:06d691c0eb1bad0842295db4db92c7eb94d389c33abb0363bd1e5887efdbc97d`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:13149f9d7806372603d97ec981a56ab32f154b79924efb2a103011662f46757d`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:f7c8149d5e82a79181f82cdbeae19c4ad871f0d85b9d767b6104eb3955c4c44e`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [9506a1ff](https://github.com/openshift/bond-cni/commit/9506a1ff3e0b3b1cdddbd0fbb0ed687e289166b0) `sha256:754abb5eb9b5fee15e2f8a89ea4950450bb51091e7dc72c1d6fb93fd79fe8acd`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [e4c214c3](https://github.com/openshift/network-metrics-daemon/commit/e4c214c3736fcb69b3160421f06e9b1a837b300b) `sha256:76e3f808d026151faca99dc438cb9664b8dc2bcbe754d5625625719235b6eb23`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:6bf0de37d857b71671a5fda83fbad63237969914c12f68a06634295ab3f7328b`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [2575ff41](https://github.com/openshift/oauth-apiserver/commit/2575ff417406ea6680aff0de6efb524dbbe2b8d2) `sha256:b2532aba65c2fd72ceb9a332a4646f43cd56c80a593663cb3e52e803e143f1c6`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [b0f0dc4e](https://github.com/openshift/cluster-api-provider-openstack/commit/b0f0dc4e1a9123815cdc2124579b6f4367500a73) `sha256:6c1890557c4c14660de865d10bf87e95738720d93d7f09c7e1afb40f51146e66`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [d914e77e](https://github.com/openshift/machine-api-provider-openstack/commit/d914e77ee67211024153b1535e8709c3cf190512) `sha256:b31cd8dd2169b3f1bf7d6ae179119f73e3aacddaaddd88ab3ad95f1554c0633d`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:d9e5505363fb8493965957930e71bc71c2557af030bbb90bb5bcec8c7aa7fce8`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:e8051d142da21cba5113b1dbd728392c8ca5f8f4d5ab5776e78c7550e5c650b6`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [d36aea34](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/d36aea34452210f988f74e93e0640318f3db1938) `sha256:d2127de3ebe0efcaefe1a8f3750ca33c2136fc74c63cc2a54e568fb112cbf167`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [01fc505a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/01fc505abcf3b83bba284a00258b6761a9b7ce8a) `sha256:3ed974554e16e8355e3e4e15eed1948691f69ca161c24e7d24678e967f5f01f1`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [17ae6fba](https://github.com/openshift/cloud-provider-powervs/commit/17ae6fba6eda58aa0d91f162206386105dff9962) `sha256:88ef9fefe49c9f8892d69538c4047200aa4fda89f67ab5c8edd7b2f0d039c9b2`
* rhel-coreos `sha256:8fea916602e93f2d504affb82cb6eceb0d45c2c80fdc26c9c363bd61ade8c064`
* rhel-coreos-extensions `sha256:d177c322852b75378b6d65f66164c63d8cb89e63c6d3700be3ea8358ce029d70`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [c414d1f5](https://github.com/openshift/cloud-provider-vsphere/commit/c414d1f5b0d910300cafda742aca146d41fce98a) `sha256:8fe1115c62ab3b326a3b2a835b0a70212649ab59996229068569e7c8c3566c08`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [d664fe2b](https://github.com/openshift/cluster-api-provider-vsphere/commit/d664fe2b56964a5320057ac8c7b7fd4b50045851) `sha256:58befdac9676514162a2d5027c870b823d0ec1fdcd90176a23aaf83fe913ac8e`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:d65359754035e4b58050f6bca0f105536817c5faf63f36ca618dae5a6f1410a2`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:4b686cd3ed7c1d741532547cc592e307f734a2dd9f9fed5d0933c4b08a72883d`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [7cf7fe24](https://github.com/openshift/vsphere-problem-detector/commit/7cf7fe24116aa9515a6fbcef3fb85567e19d21b4) `sha256:9766dad510cf08a93d83bcb8d3449ce0ee17a3a4db8925881e3b97941a78400b`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/69c47dfbd234c7b6efa1fda90a6aa760b9f62fb7)

* [OCPBUGS-56596](https://issues.redhat.com/browse/OCPBUGS-56596): Include AdditionalTrustBundlePolicy in installConfig (#7751) [#7751](https://github.com/openshift/assisted-service/pull/7751)
* [OCPBUGS-47627](https://issues.redhat.com/browse/OCPBUGS-47627): dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) [#7257](https://github.com/openshift/assisted-service/pull/7257)
* [OCPBUGS-54378](https://issues.redhat.com/browse/OCPBUGS-54378): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) [#7483](https://github.com/openshift/assisted-service/pull/7483)
* [MGMT-20183](https://issues.redhat.com/browse/MGMT-20183): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) [#7456](https://github.com/openshift/assisted-service/pull/7456)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e5a400590fed00f895a08245ef70df00ae97f28f...69c47dfbd234c7b6efa1fda90a6aa760b9f62fb7)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/92575979cc7d65303169444f2afce22d36f918ce)

* [OCPBUGS-53721](https://issues.redhat.com/browse/OCPBUGS-53721): Bump jwt to 4.5.2 in release-4.18 (#1085) [#1085](https://github.com/openshift/assisted-installer/pull/1085)
* [OCPBUGS-45116](https://issues.redhat.com/browse/OCPBUGS-45116): Add retry to mount efi device (#1030) [#1030](https://github.com/openshift/assisted-installer/pull/1030)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5348c85cd03dddf1852873c6bb2f08aff3b0630e...92575979cc7d65303169444f2afce22d36f918ce)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/615411a4df7a54c536871533d7af22f666b4e2ab)

* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#958) [#958](https://github.com/openshift/assisted-installer-agent/pull/958)
* [MGMT-20227](https://issues.redhat.com/browse/MGMT-20227): Skip Motherboard serial if set to "-" (#955) (#957) [#955](https://github.com/openshift/assisted-installer-agent/pull/955)
* [OCPBUGS-54544](https://issues.redhat.com/browse/OCPBUGS-54544): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) [#965](https://github.com/openshift/assisted-installer-agent/pull/965)
* [OCPBUGS-53713](https://issues.redhat.com/browse/OCPBUGS-53713): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) [#963](https://github.com/openshift/assisted-installer-agent/pull/963)
* NO-ISSUE: Increase image pull timeout during install (#907) [#907](https://github.com/openshift/assisted-installer-agent/pull/907)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/51a74acb3f2e56bbeb1ffbe33cb3c5cf808a2512...615411a4df7a54c536871533d7af22f666b4e2ab)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)

* append .0 to go.mod version [#109](https://github.com/openshift/agent-installer-utils/pull/109)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d...0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/2f62712d5db70df25490361749e93a552ffb5a24)

* append .0 to go.mod version. [#81](https://github.com/openshift/apiserver-network-proxy/pull/81)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/0e116160848d1eb189c5b5f77330f36e20c7e450...2f62712d5db70df25490361749e93a552ffb5a24)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9)

* [OCPBUGS-53729](https://issues.redhat.com/browse/OCPBUGS-53729): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 [#543](https://github.com/openshift/cluster-api-provider-aws/pull/543)
* [OCPBUGS-50556](https://issues.redhat.com/browse/OCPBUGS-50556): UPSTREAM: 5339: Bump glog for recent fixes [#537](https://github.com/openshift/cluster-api-provider-aws/pull/537)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/6bd77fcce0c87571305edf5f1f28f1182ed25096...59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cdc9d6499cd5020d96811fd02bde14d4d06786cc)

* [OCPBUGS-54383](https://issues.redhat.com/browse/OCPBUGS-54383): Disable remove-not-ready-taint for azure disk csi driver [#374](https://github.com/openshift/csi-operator/pull/374)
* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#356](https://github.com/openshift/csi-operator/pull/356)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9432fd3e2cb63bc282f2d0b1ac8ab8f6691b49ab...cdc9d6499cd5020d96811fd02bde14d4d06786cc)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/f54f9a19adb43b395a880ca046aed0841466c28d)

* [OCPBUGS-51231](https://issues.redhat.com/browse/OCPBUGS-51231): github.com/go-jose/go-jose/v4 v4.0.5 [#201](https://github.com/openshift/aws-pod-identity-webhook/pull/201)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/5c43fe8e6c86c24f467070a8e5965a83c24f4360...f54f9a19adb43b395a880ca046aed0841466c28d)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/c937080f51cec58650daa15805be548d09310c64)

* [OCPBUGS-53497](https://issues.redhat.com/browse/OCPBUGS-53497): bump golang-jwt v4 [#11](https://github.com/openshift/azure-kubernetes-kms/pull/11)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...c937080f51cec58650daa15805be548d09310c64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/390bef034052947c0456518d76a7a7dbbcedd690)

* [OCPBUGS-56654](https://issues.redhat.com/browse/OCPBUGS-56654): Fix failure when attempting to modify immutable availabilitySet [#153](https://github.com/openshift/machine-api-provider-azure/pull/153)
* [OCPBUGS-55373](https://issues.redhat.com/browse/OCPBUGS-55373): Update eviction policy for Spot VMs from Deallocate to Delete [#139](https://github.com/openshift/machine-api-provider-azure/pull/139)
* [OCPBUGS-54355](https://issues.redhat.com/browse/OCPBUGS-54355): Re-reconcile machine on NIC provisioning failure [#135](https://github.com/openshift/machine-api-provider-azure/pull/135)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/62f62f7a0bb3d836e238588527627684018e229b...390bef034052947c0456518d76a7a7dbbcedd690)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/f60e4029d64de202e81d2cd114f8a90dc0a1878e)

* [OCPBUGS-53801](https://issues.redhat.com/browse/OCPBUGS-53801): github.com/golang-jwt/jwt/v4 v4.5.2 [#31](https://github.com/openshift/azure-workload-identity/pull/31)
* [OCPBUGS-51233](https://issues.redhat.com/browse/OCPBUGS-51233): github.com/go-jose/go-jose/v4 v4.0.5 [#27](https://github.com/openshift/azure-workload-identity/pull/27)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/344c5dc56d6b7b1297db1b19eaa121bdbe0cec5b...f60e4029d64de202e81d2cd114f8a90dc0a1878e)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/11c3c83da6781c97042f11484e3f5d0cc9856f9b)

* [OCPBUGS-57139](https://issues.redhat.com/browse/OCPBUGS-57139): ensure ctrplane nodes can access bootstrap MCS [#9772](https://github.com/openshift/installer/pull/9772)
* [OCPBUGS-57220](https://issues.redhat.com/browse/OCPBUGS-57220): sort zone slices extracted from map of byo subnets [#9774](https://github.com/openshift/installer/pull/9774)
* [OCPBUGS-56864](https://issues.redhat.com/browse/OCPBUGS-56864): Update Control Plane replica validation for Single Node OpenShift [#9758](https://github.com/openshift/installer/pull/9758)
* [OCPBUGS-50690](https://issues.redhat.com/browse/OCPBUGS-50690): vsphere - check if host is powered down or on standby before uploading template [#9468](https://github.com/openshift/installer/pull/9468)
* [OCPBUGS-53142](https://issues.redhat.com/browse/OCPBUGS-53142): PowerVS: COS eu-es hack [#9626](https://github.com/openshift/installer/pull/9626)
* [OCPBUGS-50840](https://issues.redhat.com/browse/OCPBUGS-50840): Fix panic when there are no available IPs [#9479](https://github.com/openshift/installer/pull/9479)
* [OCPBUGS-55794](https://issues.redhat.com/browse/OCPBUGS-55794): IBI nmstate unit test fix [#9692](https://github.com/openshift/installer/pull/9692)
* [OCPBUGS-54947](https://issues.redhat.com/browse/OCPBUGS-54947): Fix Load balancer IP setup [#9659](https://github.com/openshift/installer/pull/9659)
* [OCPBUGS-45564](https://issues.redhat.com/browse/OCPBUGS-45564): Align vSphere UPI haproxy config with IPI [#9276](https://github.com/openshift/installer/pull/9276)
* [OCPBUGS-53453](https://issues.redhat.com/browse/OCPBUGS-53453): IBMCloud: Move to IBM TF openshift fork [#9592](https://github.com/openshift/installer/pull/9592)
* [OCPBUGS-53422](https://issues.redhat.com/browse/OCPBUGS-53422): Avoid adding duplicate entries to NO_PROXY [#9588](https://github.com/openshift/installer/pull/9588)
* [OCPBUGS-52515](https://issues.redhat.com/browse/OCPBUGS-52515): Remove error logging when determining image arch [#9539](https://github.com/openshift/installer/pull/9539)
* [OCPBUGS-52429](https://issues.redhat.com/browse/OCPBUGS-52429): Remove tmp directory used for agent pxe files [#9536](https://github.com/openshift/installer/pull/9536)
* [OCPBUGS-51211](https://issues.redhat.com/browse/OCPBUGS-51211): Fixes panic during GCP tags fetch due to unstable network [#9513](https://github.com/openshift/installer/pull/9513)
* [OCPBUGS-49885](https://issues.redhat.com/browse/OCPBUGS-49885): [Nutanix] Install multi-NICs cluster failed with failureDomains [#9440](https://github.com/openshift/installer/pull/9440)
* [OCPBUGS-50524](https://issues.redhat.com/browse/OCPBUGS-50524): Add cluster:master_nodes metric retrieval in docs [#9449](https://github.com/openshift/installer/pull/9449)
* [OCPBUGS-49864](https://issues.redhat.com/browse/OCPBUGS-49864): handle runtime panic when validating ovnKubernetesConfig [#9435](https://github.com/openshift/installer/pull/9435)
* [OCPBUGS-49320](https://issues.redhat.com/browse/OCPBUGS-49320): pkg/gcp/destroy: add waits to prevent leaks during heavy load [#9402](https://github.com/openshift/installer/pull/9402)
* [OCPBUGS-50870](https://issues.redhat.com/browse/OCPBUGS-50870): PowerVS: destroy dhcp hack [#9483](https://github.com/openshift/installer/pull/9483)
* [Full changelog](https://github.com/openshift/installer/compare/8cbca4432606746e8a637fb304bbb413efeab4b9...11c3c83da6781c97042f11484e3f5d0cc9856f9b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/6405b3f41826655af74cf6d76e352718e6786fc5)

* [OCPBUGS-56431](https://issues.redhat.com/browse/OCPBUGS-56431): Redfish: correctly handle missing system ID [#417](https://github.com/openshift/baremetal-operator/pull/417)
* [OCPBUGS-53324](https://issues.redhat.com/browse/OCPBUGS-53324): BMO can expose any secret via BMCEventSubscription CRD [#405](https://github.com/openshift/baremetal-operator/pull/405)
* [OCPBUGS-45250](https://issues.redhat.com/browse/OCPBUGS-45250): Remove dataImage finalizer if BMH is missing [#389](https://github.com/openshift/baremetal-operator/pull/389)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3d9304e76903b639b6d06e3b00d655e1ad5dbb9b...6405b3f41826655af74cf6d76e352718e6786fc5)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/903a973ce8f8b4509b5158b95bcebe9209e29761)

* [OCPBUGS-56240](https://issues.redhat.com/browse/OCPBUGS-56240): Adding sos.conf file for default sos config into the tools image [#2021](https://github.com/openshift/oc/pull/2021)
* [OCPBUGS-55449](https://issues.redhat.com/browse/OCPBUGS-55449): Get installer image from configMap for node-image command [#2013](https://github.com/openshift/oc/pull/2013)
* [OCPBUGS-55647](https://issues.redhat.com/browse/OCPBUGS-55647): Use fedora image in unit tests instead of centos [#2014](https://github.com/openshift/oc/pull/2014)
* [OCPBUGS-49440](https://issues.redhat.com/browse/OCPBUGS-49440): Address `golang.org/x/*` CVEs [#1961](https://github.com/openshift/oc/pull/1961)
* [Full changelog](https://github.com/openshift/oc/compare/a50d4c0e41a6eff7aafe21dbe564359a0b622bb1...903a973ce8f8b4509b5158b95bcebe9209e29761)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/b4113028d20a300e364354403391806265332640)

* [OCPBUGS-56979](https://issues.redhat.com/browse/OCPBUGS-56979): Azure: resolve nil pointer exception when role assignment exists [#869](https://github.com/openshift/cloud-credential-operator/pull/869)
* [OCPBUGS-54827](https://issues.redhat.com/browse/OCPBUGS-54827): Render: configure proxy on bootstrap static pod [#862](https://github.com/openshift/cloud-credential-operator/pull/862)
* [OCPBUGS-53825](https://issues.redhat.com/browse/OCPBUGS-53825): update github.com/golang-jwt/jwt [#837](https://github.com/openshift/cloud-credential-operator/pull/837)
* [OCPBUGS-53345](https://issues.redhat.com/browse/OCPBUGS-53345): github.com/golang/glog v1.2.4 [#835](https://github.com/openshift/cloud-credential-operator/pull/835)
* [OCPBUGS-51550](https://issues.redhat.com/browse/OCPBUGS-51550): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#822](https://github.com/openshift/cloud-credential-operator/pull/822)
* [OCPBUGS-51237](https://issues.redhat.com/browse/OCPBUGS-51237): github.com/go-jose/go-jose/v4 v4.0.5 [#824](https://github.com/openshift/cloud-credential-operator/pull/824)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/020f8b841abf6284642cd182d95611b79c2f3a19...b4113028d20a300e364354403391806265332640)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/beacfbc2f2afa651616ad1c3c6712c511318a8d4)

* [OCPBUGS-56156](https://issues.redhat.com/browse/OCPBUGS-56156): Increase API call timeout to 30 second [#170](https://github.com/openshift/cloud-network-config-controller/pull/170)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f648c78dba768619f0c6e2120132ee1aeefb8571...beacfbc2f2afa651616ad1c3c6712c511318a8d4)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)

* [OCPBUGS-54569](https://issues.redhat.com/browse/OCPBUGS-54569): Avoid duplicate OAuth client creation [#764](https://github.com/openshift/cluster-authentication-operator/pull/764)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e8c7c47e485a54cd8e2fc0ece74bd110c190e3c9...4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)

* [OCPBUGS-53241](https://issues.redhat.com/browse/OCPBUGS-53241): improve replica counting and decrease target size behavior [#346](https://github.com/openshift/kubernetes-autoscaler/pull/346)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e30ce1d8ca759e861e5094e8b3665d1da6d3474f)

* [OCPBUGS-53080](https://issues.redhat.com/browse/OCPBUGS-53080): Add missing relatedObjects [#467](https://github.com/openshift/cluster-baremetal-operator/pull/467)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/dfc6c062e17a22923547188cf893509524931a7f...e30ce1d8ca759e861e5094e8b3665d1da6d3474f)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/2f2737e1ed649009eef31c19ffff7468b67de32d)

* [OCPBUGS-56919](https://issues.redhat.com/browse/OCPBUGS-56919): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#308](https://github.com/openshift/cluster-capi-operator/pull/308)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Should not use v1beta1 of the AdmissionRegistration API group [#298](https://github.com/openshift/cluster-capi-operator/pull/298)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4e26a69d2740029b37469c5677a5ed0f129eed8f...2f2737e1ed649009eef31c19ffff7468b67de32d)


### [cluster-config-api](https://github.com/openshift/api/tree/9fce26d4cc74cfa6bfa2b9af8891a66a90a3e31f)

* Merge [#2316](https://github.com/openshift/api/pull/2316)
* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Add IPsec API for NAT-T UDP encapsulation support [#2331](https://github.com/openshift/api/pull/2331)
* [OCPBUGS-55792](https://issues.redhat.com/browse/OCPBUGS-55792): [release-4.18] config: add uid and extra claim mappings for external OIDC configuration [#2311](https://github.com/openshift/api/pull/2311)
* [OCPBUGS-53221](https://issues.redhat.com/browse/OCPBUGS-53221): Allow spaces in AWS resource tags [#2239](https://github.com/openshift/api/pull/2239)
* [OCPBUGS-54784](https://issues.redhat.com/browse/OCPBUGS-54784): [release-4.18] Bump openshift/controller-tools to latest commit [#2267](https://github.com/openshift/api/pull/2267)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295), [OCPBUGS-51380](https://issues.redhat.com/browse/OCPBUGS-51380): Reject new NodeStatus with revision set [#2215](https://github.com/openshift/api/pull/2215)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): [release-4.18] Add the option to test ratcheting validations within integration tests [#2217](https://github.com/openshift/api/pull/2217)
* [OCPBUGS-51077](https://issues.redhat.com/browse/OCPBUGS-51077): [4.18] bump controller-tools dependency to latest downstream commit [#2210](https://github.com/openshift/api/pull/2210)
* [Full changelog](https://github.com/openshift/api/compare/3175f3026f905a311fa0a462afce2393c42d7f87...9fce26d4cc74cfa6bfa2b9af8891a66a90a3e31f)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/7cafd0c7dca2edb154b8444602b600b5901afeba)

* [OCPBUGS-52514](https://issues.redhat.com/browse/OCPBUGS-52514): [release-4.18] Add runbook_url for CoreDNSErrorsHigh [#429](https://github.com/openshift/cluster-dns-operator/pull/429)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/208d50c1a5e0aaeb991366daa749abdffa803224...7cafd0c7dca2edb154b8444602b600b5901afeba)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2c2910d7c3095706aaf66ddbcf3c1a31285b3567)

* [OCPBUGS-56110](https://issues.redhat.com/browse/OCPBUGS-56110): adjust alerts according to platform [#1424](https://github.com/openshift/cluster-etcd-operator/pull/1424)
* [OCPBUGS-53513](https://issues.redhat.com/browse/OCPBUGS-53513): fix CVE-2025-30204 [#1413](https://github.com/openshift/cluster-etcd-operator/pull/1413)
* [OCPBUGS-55066](https://issues.redhat.com/browse/OCPBUGS-55066): increase etcdGRPCRequestsSlow duration [#1408](https://github.com/openshift/cluster-etcd-operator/pull/1408)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/26f6cb2494275fb713edbb535c3fe1d02fde94de...2c2910d7c3095706aaf66ddbcf3c1a31285b3567)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/1e3caa4b5abe4e3dad914a337f87408d060b1fb2)

* [OCPBUGS-53873](https://issues.redhat.com/browse/OCPBUGS-53873): bump github.com/golang-jwt/jwt [#1217](https://github.com/openshift/cluster-image-registry-operator/pull/1217)
* [OCPBUGS-51606](https://issues.redhat.com/browse/OCPBUGS-51606): bump golang.org/x/oauth2 [#1208](https://github.com/openshift/cluster-image-registry-operator/pull/1208)
* [OCPBUGS-51018](https://issues.redhat.com/browse/OCPBUGS-51018): ensure that storage names don't end in dashes [#1179](https://github.com/openshift/cluster-image-registry-operator/pull/1179)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/00882ba691a356151e29a9052ab0f82c24a7f9fb...1e3caa4b5abe4e3dad914a337f87408d060b1fb2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d967a73c5f7da76783ee1af093f21817e7681e1d)

* [NE-1951](https://issues.redhat.com/browse/NE-1951): Pre-upgrade Admin Gate for Gateway API CRD Management Succession [#1196](https://github.com/openshift/cluster-ingress-operator/pull/1196)
* [NE-1952](https://issues.redhat.com/browse/NE-1952): Pre-upgrade check for Gateway API CRD Management Succession [#1193](https://github.com/openshift/cluster-ingress-operator/pull/1193)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add e2e tests for IdleConnectionTerminationPolicy [#1194](https://github.com/openshift/cluster-ingress-operator/pull/1194)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleConnectionTerminationPolicy [#1188](https://github.com/openshift/cluster-ingress-operator/pull/1188)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8be174945db79b0660bd0fd21ed279ab7b6aafbf...d967a73c5f7da76783ee1af093f21817e7681e1d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/383f10176f2509babc9dd49d135fa8bb0c2c277e)

* [OCPBUGS-56030](https://issues.redhat.com/browse/OCPBUGS-56030): bump library-go to bring in updated audit policies [#1843](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1843)
* [OCPBUGS-49898](https://issues.redhat.com/browse/OCPBUGS-49898): bindata/alerts/slo: improve burnrate calculation [#1808](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1808)
* [OCPBUGS-53066](https://issues.redhat.com/browse/OCPBUGS-53066): Bump library-go [#1828](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1828)
* [OCPBUGS-46411](https://issues.redhat.com/browse/OCPBUGS-46411): skip generating certs when networkConfig.status.ServiceNetwork is nil [#1780](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1780)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/763313c860ea43fcfc9b1ac00ebae096b57c078e...383f10176f2509babc9dd49d135fa8bb0c2c277e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4482c5f2cae50a25d67cae3ad74fbbc13ce0673a)

* [OCPBUGS-55005](https://issues.redhat.com/browse/OCPBUGS-55005): chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and  set CMO to Upgradeable=false if errors are found [#2592](https://github.com/openshift/cluster-monitoring-operator/pull/2592)
* [OCPBUGS-53024](https://issues.redhat.com/browse/OCPBUGS-53024): Fix opentelemetry metrics to use regexp on label match [#2578](https://github.com/openshift/cluster-monitoring-operator/pull/2578)
* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump prometheus-operator to 0.78.2 [#2576](https://github.com/openshift/cluster-monitoring-operator/pull/2576)
* [OCPBUGS-50706](https://issues.redhat.com/browse/OCPBUGS-50706): Add incidents metric to telemetry [#2570](https://github.com/openshift/cluster-monitoring-operator/pull/2570)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9852f98d559a7153213164e3518ffd6576b47b87...4482c5f2cae50a25d67cae3ad74fbbc13ce0673a)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bf1d73069e4905749e2f15f88aa1e7590d489baf)

* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Implement IPsec NAT-Traversal encapsulation option [#2711](https://github.com/openshift/cluster-network-operator/pull/2711)
* [OCPBUGS-54717](https://issues.redhat.com/browse/OCPBUGS-54717): Add IPv6 NGINX configuration [#2683](https://github.com/openshift/cluster-network-operator/pull/2683)
* [OCPBUGS-50582](https://issues.redhat.com/browse/OCPBUGS-50582), [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2644](https://github.com/openshift/cluster-network-operator/pull/2644)
* [OCPBUGS-52837](https://issues.redhat.com/browse/OCPBUGS-52837): frr-k8s: rename validatingwebhook name [#2661](https://github.com/openshift/cluster-network-operator/pull/2661)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): frr-k8s: align manifests with operator [#2657](https://github.com/openshift/cluster-network-operator/pull/2657)
* [OCPBUGS-41178](https://issues.redhat.com/browse/OCPBUGS-41178): Updating cluster-network-operator-container image to be consistent with ART for 4.18 [#2491](https://github.com/openshift/cluster-network-operator/pull/2491)
* [OCPBUGS-50625](https://issues.redhat.com/browse/OCPBUGS-50625): Cherry-pick RouteAdvertisements support back to 4.18 [#2645](https://github.com/openshift/cluster-network-operator/pull/2645)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b48488a6ee4c9e1ae778217817266baddd5f3e51...bf1d73069e4905749e2f15f88aa1e7590d489baf)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/c004ea7ea486e983d296311ca2b40cc9a431c394)

* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) (#1306) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* machineconfig: add support for various hugepage sizes. (#1299) [#1299](https://github.com/openshift/cluster-node-tuning-operator/pull/1299)
* [OCPBUGS-51088](https://issues.redhat.com/browse/OCPBUGS-51088): E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) [#1298](https://github.com/openshift/cluster-node-tuning-operator/pull/1298)
* e2e: common way to fetch poolName (#1255) (#1300) [#1255](https://github.com/openshift/cluster-node-tuning-operator/pull/1255)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b707be66f55efc54a9b348cd7f4b5fdcf5a58679...c004ea7ea486e983d296311ca2b40cc9a431c394)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/0ffe0aed115535e9489b6f309ac4d2c6c976adf3)

* [OCPBUGS-48478](https://issues.redhat.com/browse/OCPBUGS-48478): [release-4.18] Add openshift node selector annotation [#116](https://github.com/openshift/cluster-olm-operator/pull/116)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/6da706d712dda30cec7ff92c5bfb76074df3d5fe...0ffe0aed115535e9489b6f309ac4d2c6c976adf3)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)

* [OCPBUGS-55783](https://issues.redhat.com/browse/OCPBUGS-55783): Samples Operator should sort failing image imports [#638](https://github.com/openshift/cluster-samples-operator/pull/638)
* [OCPBUGS-55782](https://issues.redhat.com/browse/OCPBUGS-55782): only update LastTransitionTime if operator status change [#637](https://github.com/openshift/cluster-samples-operator/pull/637)
* [OCPBUGS-55781](https://issues.redhat.com/browse/OCPBUGS-55781): Adding filter to clusterOperatorInformerEventHandler [#636](https://github.com/openshift/cluster-samples-operator/pull/636)
* [OCPBUGS-54258](https://issues.redhat.com/browse/OCPBUGS-54258): Adding mutex to func createSamples on handler.go [#615](https://github.com/openshift/cluster-samples-operator/pull/615)
* [OCPBUGS-54351](https://issues.redhat.com/browse/OCPBUGS-54351): add rhdmalone to owners [#617](https://github.com/openshift/cluster-samples-operator/pull/617)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/de85e478a2f3dcc712ce5f02b56279cb116357f5...5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/65d06444110f8044a84ccf4f977ee9520f2bdf89)

* [OCPBUGS-51320](https://issues.redhat.com/browse/OCPBUGS-51320): fix Vsphere cluster Storage operator in Unavailable state [#558](https://github.com/openshift/cluster-storage-operator/pull/558)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d5869b21eee0acc5d734d92fa283b737b9e90b83...65d06444110f8044a84ccf4f977ee9520f2bdf89)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/8caab452b91df0d77ab052b1833a4d54a1374634)

* NO-JIRA: Updating openshift-ci-release-key for 2 years [#72](https://github.com/openshift/cluster-update-keys/pull/72)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...8caab452b91df0d77ab052b1833a4d54a1374634)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/94c0e705d520b0eeb765f72de2dae2cd6f1159bb)

* [OCPBUGS-55359](https://issues.redhat.com/browse/OCPBUGS-55359): install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 [#1181](https://github.com/openshift/cluster-version-operator/pull/1181)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4...94c0e705d520b0eeb765f72de2dae2cd6f1159bb)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/e2aaf00a381b57874178a4272f3bc5257cf8dd98)

* append .0 to go.mod version [#69](https://github.com/openshift/configmap-reload/pull/69)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/cde5e473c23ca38917fe7e8ebdf7d15c467d977d...e2aaf00a381b57874178a4272f3bc5257cf8dd98)


### [console](https://github.com/openshift/console/tree/9e5b4ae6d5a5b662337844ee0a26bc892f51cfcf)

* [OCPBUGS-57181](https://issues.redhat.com/browse/OCPBUGS-57181): Fix '/metrics' endpoint token review to handle interna… [#15153](https://github.com/openshift/console/pull/15153)
* [OCPBUGS-57353](https://issues.redhat.com/browse/OCPBUGS-57353): fix VirtualizedTable runtime error if sortColumn is no… [#15173](https://github.com/openshift/console/pull/15173)
* [OCPBUGS-57093](https://issues.redhat.com/browse/OCPBUGS-57093): Add all files to `vendor` regardless of gitignore [#15131](https://github.com/openshift/console/pull/15131)
* [OCPBUGS-56774](https://issues.redhat.com/browse/OCPBUGS-56774): [knative] Self-provisioner user can not access or create event sources via ODC [#15095](https://github.com/openshift/console/pull/15095)
* [OCPBUGS-56862](https://issues.redhat.com/browse/OCPBUGS-56862): Sample segment sessions [#15103](https://github.com/openshift/console/pull/15103)
* [OCPBUGS-56757](https://issues.redhat.com/browse/OCPBUGS-56757): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15093](https://github.com/openshift/console/pull/15093)
* [OCPBUGS-54337](https://issues.redhat.com/browse/OCPBUGS-54337): Debug pod logs are not accessible when debugging a node via OpenShift Console [#14942](https://github.com/openshift/console/pull/14942)
* [OCPBUGS-56255](https://issues.redhat.com/browse/OCPBUGS-56255): remove 60 day alert from cluster update modal [#15055](https://github.com/openshift/console/pull/15055)
* [OCPBUGS-55991](https://issues.redhat.com/browse/OCPBUGS-55991): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15043](https://github.com/openshift/console/pull/15043)
* [OCPBUGS-53172](https://issues.redhat.com/browse/OCPBUGS-53172): Include init containers in readiness count if ready and started is true [#14884](https://github.com/openshift/console/pull/14884)
* [OCPBUGS-54899](https://issues.redhat.com/browse/OCPBUGS-54899): Fetching taskRuns in PLR details page using PLR UID also [#14961](https://github.com/openshift/console/pull/14961)
* [OCPBUGS-54888](https://issues.redhat.com/browse/OCPBUGS-54888): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14959](https://github.com/openshift/console/pull/14959)
* [OCPBUGS-45369](https://issues.redhat.com/browse/OCPBUGS-45369): Authenticate user token in openshift Authenticate func [#14664](https://github.com/openshift/console/pull/14664)
* [OCPBUGS-55195](https://issues.redhat.com/browse/OCPBUGS-55195): fix bug where operator appears twice [#14984](https://github.com/openshift/console/pull/14984)
* [OCPBUGS-54269](https://issues.redhat.com/browse/OCPBUGS-54269): fix bug where /k8s/all-namespaces/volumesnapshots 404s [#14905](https://github.com/openshift/console/pull/14905)
* [OCPBUGS-52372](https://issues.redhat.com/browse/OCPBUGS-52372): VolumeSnapshots are not displayed in OpenShift Web Console [#14833](https://github.com/openshift/console/pull/14833)
* [OCPBUGS-52406](https://issues.redhat.com/browse/OCPBUGS-52406): Retain original path when detecting perspective [#14834](https://github.com/openshift/console/pull/14834)
* [OCPBUGS-52371](https://issues.redhat.com/browse/OCPBUGS-52371): Update the monitoring topic used by the console team [#14832](https://github.com/openshift/console/pull/14832)
* [OCPBUGS-52490](https://issues.redhat.com/browse/OCPBUGS-52490): enable clicking outside NodeLogs Selects to close them [#14843](https://github.com/openshift/console/pull/14843)
* [OCPBUGS-50501](https://issues.redhat.com/browse/OCPBUGS-50501): Updating cypress config to have video enabled for the CI results [#14831](https://github.com/openshift/console/pull/14831)
* [OCPBUGS-52511](https://issues.redhat.com/browse/OCPBUGS-52511): Remove logoutOpenShift method call [#14845](https://github.com/openshift/console/pull/14845)
* [OCPBUGS-50609](https://issues.redhat.com/browse/OCPBUGS-50609): update the Deployment pod on change in imageStream [#14757](https://github.com/openshift/console/pull/14757)
* [OCPBUGS-50648](https://issues.redhat.com/browse/OCPBUGS-50648): add support for "OpenShift Virtualization Engine" valid subscription filter on OperatorHub [#14761](https://github.com/openshift/console/pull/14761)
* [OCPBUGS-51086](https://issues.redhat.com/browse/OCPBUGS-51086): Show Observe section without PROMETHEUS and MONITORING flags [#14784](https://github.com/openshift/console/pull/14784)
* [OCPBUGS-48798](https://issues.redhat.com/browse/OCPBUGS-48798): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14698](https://github.com/openshift/console/pull/14698)
* [OCPBUGS-51180](https://issues.redhat.com/browse/OCPBUGS-51180): Linkify OLM operator uninstall message [#14789](https://github.com/openshift/console/pull/14789)
* [OCPBUGS-51149](https://issues.redhat.com/browse/OCPBUGS-51149): Do not load CSRs if user does not have permissions [#14787](https://github.com/openshift/console/pull/14787)
* [OCPBUGS-50647](https://issues.redhat.com/browse/OCPBUGS-50647): Enable web terminal tests [#14758](https://github.com/openshift/console/pull/14758)
* [OCPBUGS-50573](https://issues.redhat.com/browse/OCPBUGS-50573): Render refresh popover after adding CSP directive to the ConsolePlugin CR [#14755](https://github.com/openshift/console/pull/14755)
* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add support for conditional CSP headers [#14720](https://github.com/openshift/console/pull/14720)
* [OCPBUGS-48736](https://issues.redhat.com/browse/OCPBUGS-48736): update variable name for plugin name parsing [#14696](https://github.com/openshift/console/pull/14696)
* [OCPBUGS-49921](https://issues.redhat.com/browse/OCPBUGS-49921): fix run time error when no completed version exists [#14743](https://github.com/openshift/console/pull/14743)
* [Full changelog](https://github.com/openshift/console/compare/24ccf7adbe24e9327b5d7d18ccb273d95e943616...9e5b4ae6d5a5b662337844ee0a26bc892f51cfcf)


### [console-operator](https://github.com/openshift/console-operator/tree/10a0cc293e61b8125ebec8c9c98ede22a0824d06)

* [OCPBUGS-52294](https://issues.redhat.com/browse/OCPBUGS-52294): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#966](https://github.com/openshift/console-operator/pull/966)
* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add ConsolePluginContentSecurityPolicy feature gate to… [#959](https://github.com/openshift/console-operator/pull/959)
* [Full changelog](https://github.com/openshift/console-operator/compare/18590a15d7ba5447b10be371681424e09ccacdf8...10a0cc293e61b8125ebec8c9c98ede22a0824d06)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/59ee57ce5be64e6b0227140b84bcc48eb90f40d2)

* append .0 to go.mod version [#196](https://github.com/openshift/containernetworking-plugins/pull/196)
* : OCPBUGS-56928: Add a new firewall ingress-policy "isolated" [#191](https://github.com/openshift/containernetworking-plugins/pull/191)
* [OCPBUGS-55354](https://issues.redhat.com/browse/OCPBUGS-55354): Fix dhcp [#186](https://github.com/openshift/containernetworking-plugins/pull/186)
* [OCPBUGS-55346](https://issues.redhat.com/browse/OCPBUGS-55346): Check error returned by ipv6 SettleAddresses [#185](https://github.com/openshift/containernetworking-plugins/pull/185)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...59ee57ce5be64e6b0227140b84bcc48eb90f40d2)


### [coredns](https://github.com/openshift/coredns/tree/eb75d9b4f41a5ce0258d6f245c6206715ecb283b)

* append .0 to go.mod version [#134](https://github.com/openshift/coredns/pull/134)
* [Full changelog](https://github.com/openshift/coredns/compare/cb1abfaeb7b0c5df4f0c56b0a009b439db1d0949...eb75d9b4f41a5ce0258d6f245c6206715ecb283b)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/b52ca7e89560678f3420aac02cfdb11febcfae67)

* [OCPBUGS-43430](https://issues.redhat.com/browse/OCPBUGS-43430): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 [#312](https://github.com/openshift/cloud-provider-openstack/pull/312)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/90891d4634af0fe61393de5ad5b448eb5d070f48...b52ca7e89560678f3420aac02cfdb11febcfae67)


### [docker-builder](https://github.com/openshift/builder/tree/62f644bcf0b0010f51765b48a7dab28426ae2933)

* [OCPBUGS-48071](https://issues.redhat.com/browse/OCPBUGS-48071): Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility [#464](https://github.com/openshift/builder/pull/464)
* [OCPBUGS-46580](https://issues.redhat.com/browse/OCPBUGS-46580): buildah dependency bump to 1.37.6 [#453](https://github.com/openshift/builder/pull/453)
* [Full changelog](https://github.com/openshift/builder/compare/336d783e6fb6d10c32b4e386523325751c33b3ee...62f644bcf0b0010f51765b48a7dab28426ae2933)


### [docker-registry](https://github.com/openshift/image-registry/tree/0a39d2c759b311e98a1f4de4c7ba1cdeddba47bf)

* [OCPBUGS-53657](https://issues.redhat.com/browse/OCPBUGS-53657): bump jwt and oauth dependencies [#430](https://github.com/openshift/image-registry/pull/430)
* [Full changelog](https://github.com/openshift/image-registry/compare/e36d3655ba8c33cff1afaa9f816ae2399f4cd42f...0a39d2c759b311e98a1f4de4c7ba1cdeddba47bf)


### [etcd](https://github.com/openshift/etcd/tree/416376871d09278b18ae16520363ea6c8b3c71a8)

* Revert "ETCD-727: Rebase etcd 3.5.21 openshift 4.18" [#332](https://github.com/openshift/etcd/pull/332)
* [ETCD-727](https://issues.redhat.com/browse/ETCD-727): Rebase etcd 3.5.21 openshift 4.18 [#325](https://github.com/openshift/etcd/pull/325)
* [OCPBUGS-55724](https://issues.redhat.com/browse/OCPBUGS-55724): Add configurable option for hardware-related timeout delay [#328](https://github.com/openshift/etcd/pull/328)
* DOWNSTREAM: &lt;carry&gt;: OCPBUGS-51971: fix a compaction induce latency issue [#312](https://github.com/openshift/etcd/pull/312)
* [ETCD-708](https://issues.redhat.com/browse/ETCD-708): Rebase etcd 3.5.18 openshift 4.18 [#307](https://github.com/openshift/etcd/pull/307)
* [Full changelog](https://github.com/openshift/etcd/compare/914783cae63a13b90971c65e28c3349c1ecb7dfb...416376871d09278b18ae16520363ea6c8b3c71a8)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/01f6b419357a539389704fcec9872997f808e540)

* [OCPBUGS-52495](https://issues.redhat.com/browse/OCPBUGS-52495): OCPBUGS-52494:  Disable shielded VMs for non-UEFI disks [#112](https://github.com/openshift/machine-api-provider-gcp/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a3716418ec55c5767f4dab86991ffad6161031e9...01f6b419357a539389704fcec9872997f808e540)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1b8c94ac55d8602ba6669325ade654ae47ea74cf)

* [OCPBUGS-44769](https://issues.redhat.com/browse/OCPBUGS-44769): Fix RWX mode for hyperdisks [#74](https://github.com/openshift/gcp-pd-csi-driver/pull/74)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/14fa4d9a2c2c66ee796035e01b39aa0f6f4cf7a5...1b8c94ac55d8602ba6669325ade654ae47ea74cf)


### [haproxy-router](https://github.com/openshift/router/tree/d8058949aaf91dcdea050c58e6a34ef5f6670c67)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleCloseTerminationPolicy [#647](https://github.com/openshift/router/pull/647)
* [OCPBUGS-49389](https://issues.redhat.com/browse/OCPBUGS-49389): Reject All CA-Signed Certs Using SHA1 [#649](https://github.com/openshift/router/pull/649)
* [Full changelog](https://github.com/openshift/router/compare/061909a4c397c048e6def163fda5d227c75f176b...d8058949aaf91dcdea050c58e6a34ef5f6670c67)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/db4023c383e559c6310710cd16a441912fc9c06f)

* [OCPBUGS-57219](https://issues.redhat.com/browse/OCPBUGS-57219): kubelet: fix a stall on startup from waiting too long for a stat call [#2324](https://github.com/openshift/kubernetes/pull/2324)
* [OCPBUGS-56835](https://issues.redhat.com/browse/OCPBUGS-56835): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2316](https://github.com/openshift/kubernetes/pull/2316)
* [OCPBUGS-56384](https://issues.redhat.com/browse/OCPBUGS-56384): Propagate error when creating CustomResourceStorage instead of panicking [#2303](https://github.com/openshift/kubernetes/pull/2303)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#2307](https://github.com/openshift/kubernetes/pull/2307)
* [OCPBUGS-56192](https://issues.redhat.com/browse/OCPBUGS-56192): UPSTREAM: 131236: RWX tests should create RWX volumes [#2300](https://github.com/openshift/kubernetes/pull/2300)
* UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… [#2283](https://github.com/openshift/kubernetes/pull/2283)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#2278](https://github.com/openshift/kubernetes/pull/2278)
* : OCPBUGS-54807: skip tests on platform type External [#2268](https://github.com/openshift/kubernetes/pull/2268)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): Update to Kubernetes v1.31.7 [#2248](https://github.com/openshift/kubernetes/pull/2248)
* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#2208](https://github.com/openshift/kubernetes/pull/2208)
* [Full changelog](https://github.com/openshift/kubernetes/compare/acb9630c20d2fa0d11bad4c38c7b28e2db9d818b...db4023c383e559c6310710cd16a441912fc9c06f)


### [hypershift](https://github.com/openshift/hypershift/tree/6279e093a11b0893abeb77bebef6649d214dae0b)

* [OCPBUGS-57273](https://issues.redhat.com/browse/OCPBUGS-57273): Add proxy variables for the MCD Pod [#6247](https://github.com/openshift/hypershift/pull/6247)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Fix CatalogSource images check when unauthorized [#6237](https://github.com/openshift/hypershift/pull/6237)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Add support for registry root entry only in the IDMS/ICSP [#6163](https://github.com/openshift/hypershift/pull/6163)
* [OCPBUGS-56627](https://issues.redhat.com/browse/OCPBUGS-56627): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6186](https://github.com/openshift/hypershift/pull/6186)
* [CNTRLPLANE-917](https://issues.redhat.com/browse/CNTRLPLANE-917): Konflux build pipeline service account migration [#6084](https://github.com/openshift/hypershift/pull/6084)
* [OCPBUGS-56524](https://issues.redhat.com/browse/OCPBUGS-56524): switch admissionregistration API to v1 [#6172](https://github.com/openshift/hypershift/pull/6172)
* [OCPBUGS-55177](https://issues.redhat.com/browse/OCPBUGS-55177): Don't check if olm images exist if guest cluster [#6065](https://github.com/openshift/hypershift/pull/6065)
* [OCPBUGS-55230](https://issues.redhat.com/browse/OCPBUGS-55230): Add annotation to configure KAS goaway-chance [#6066](https://github.com/openshift/hypershift/pull/6066)
* [OCPBUGS-54865](https://issues.redhat.com/browse/OCPBUGS-54865): KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled [#6020](https://github.com/openshift/hypershift/pull/6020)
* [OCPBUGS-54737](https://issues.redhat.com/browse/OCPBUGS-54737): Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests [#6052](https://github.com/openshift/hypershift/pull/6052)
* [OCPBUGS-55148](https://issues.redhat.com/browse/OCPBUGS-55148): Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz [#6059](https://github.com/openshift/hypershift/pull/6059)
* [OCPBUGS-54946](https://issues.redhat.com/browse/OCPBUGS-54946), [RHOCPPRIO-433](https://issues.redhat.com/browse/RHOCPPRIO-433): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6091](https://github.com/openshift/hypershift/pull/6091)
* [OCPBUGS-55146](https://issues.redhat.com/browse/OCPBUGS-55146): Use 135 for terminationGracePeriodSeconds for v2 KAS [#6057](https://github.com/openshift/hypershift/pull/6057)
* [OCPBUGS-54698](https://issues.redhat.com/browse/OCPBUGS-54698): Add missing servicemonitors and prometheusrules permissions for non-OVN [#6000](https://github.com/openshift/hypershift/pull/6000)
* [OCPBUGS-53404](https://issues.redhat.com/browse/OCPBUGS-53404): Set shutdown watch termination grace period on kube-apiserver [#5874](https://github.com/openshift/hypershift/pull/5874)
* [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Fix golang crypto dependency go.mod replacement [#5992](https://github.com/openshift/hypershift/pull/5992)
* [OCPBUGS-54814](https://issues.redhat.com/browse/OCPBUGS-54814): [release-4.18] add feature set aware feature gates to HO and CPO [#6014](https://github.com/openshift/hypershift/pull/6014)
* [OCPBUGS-54624](https://issues.redhat.com/browse/OCPBUGS-54624): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5980](https://github.com/openshift/hypershift/pull/5980)
* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Sync RBAC for attaching volumes on VM level [#5988](https://github.com/openshift/hypershift/pull/5988)
* [OCPBUGS-54627](https://issues.redhat.com/browse/OCPBUGS-54627): Use system trust bundle in CPO IDP https client [#5981](https://github.com/openshift/hypershift/pull/5981)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695), [OCPBUGS-54625](https://issues.redhat.com/browse/OCPBUGS-54625): backport capabilities api [#5964](https://github.com/openshift/hypershift/pull/5964)
* [OCPBUGS-54411](https://issues.redhat.com/browse/OCPBUGS-54411): Backport PR 5876 to release-4.18 [#5936](https://github.com/openshift/hypershift/pull/5936)
* [OCPBUGS-54498](https://issues.redhat.com/browse/OCPBUGS-54498): Support hypershift-operator scoping for secretJanitor [#5961](https://github.com/openshift/hypershift/pull/5961)
* [OCPBUGS-54609](https://issues.redhat.com/browse/OCPBUGS-54609): [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable [#5950](https://github.com/openshift/hypershift/pull/5950)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 [#5963](https://github.com/openshift/hypershift/pull/5963)
* [OCPBUGS-53905](https://issues.redhat.com/browse/OCPBUGS-53905): bump golang-jwt v4 and v5 [#5905](https://github.com/openshift/hypershift/pull/5905)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5919](https://github.com/openshift/hypershift/pull/5919)
* [OCPBUGS-51739](https://issues.redhat.com/browse/OCPBUGS-51739), [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Bump dependencies to OCP fork in backports [#5898](https://github.com/openshift/hypershift/pull/5898)
* [OCPBUGS-53321](https://issues.redhat.com/browse/OCPBUGS-53321): Handle multiple mirror entries for source [#5890](https://github.com/openshift/hypershift/pull/5890)
* [OCPBUGS-51239](https://issues.redhat.com/browse/OCPBUGS-51239): fix(deps): bump go-jose [#5858](https://github.com/openshift/hypershift/pull/5858)
* [OCPBUGS-52982](https://issues.redhat.com/browse/OCPBUGS-52982): Fix audit-logs container to properly handle SIGTERM [#5774](https://github.com/openshift/hypershift/pull/5774)
* [OCPBUGS-52863](https://issues.redhat.com/browse/OCPBUGS-52863): stop using dev mode for loggers [#5811](https://github.com/openshift/hypershift/pull/5811)
* [OCPBUGS-52878](https://issues.redhat.com/browse/OCPBUGS-52878): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5780](https://github.com/openshift/hypershift/pull/5780)
* [OCPBUGS-52516](https://issues.redhat.com/browse/OCPBUGS-52516): Make managed-trust-bundle optional [#5783](https://github.com/openshift/hypershift/pull/5783)
* [OCPBUGS-52417](https://issues.redhat.com/browse/OCPBUGS-52417): [release-4.18] refactor aws identity health check into new controller [#5770](https://github.com/openshift/hypershift/pull/5770)
* [OCPBUGS-51375](https://issues.redhat.com/browse/OCPBUGS-51375): use registryOverrides when automaitcally retrieving catalog images for hosted control plane [#5723](https://github.com/openshift/hypershift/pull/5723)
* [OCPBUGS-50696](https://issues.redhat.com/browse/OCPBUGS-50696): add region to AWS creds passed to operators managed by CPO [#5629](https://github.com/openshift/hypershift/pull/5629)
* [OCPBUGS-51050](https://issues.redhat.com/browse/OCPBUGS-51050): Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5667](https://github.com/openshift/hypershift/pull/5667)
* NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 [#5640](https://github.com/openshift/hypershift/pull/5640)
* NO-JIRA: Update dependency mkdocs to v1.6.1 [#5638](https://github.com/openshift/hypershift/pull/5638)
* [OCPBUGS-50550](https://issues.redhat.com/browse/OCPBUGS-50550): Honor proxy vars in the util insecure http client [#5598](https://github.com/openshift/hypershift/pull/5598)
* [Full changelog](https://github.com/openshift/hypershift/compare/be2ef913291b73894f87fafb25b6cd414c1d4c33...6279e093a11b0893abeb77bebef6649d214dae0b)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/1b9ad923f69b5e041777355bee96e918269d67e7)

* append .0 to go.mod version [#96](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/96)
* [OCPBUGS-55283](https://issues.redhat.com/browse/OCPBUGS-55283): tech debt: rework vendor patches [#89](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/89)
* [OCPBUGS-53913](https://issues.redhat.com/browse/OCPBUGS-53913): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#82](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/59a8340c20192b70c5d597555554856d3712aee9...1b9ad923f69b5e041777355bee96e918269d67e7)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/2ba764f9a38c27f82a9198472c584fa633c8f2cd)

* [OCPBUGS-50565](https://issues.redhat.com/browse/OCPBUGS-50565): Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 [#100](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/100)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/ef05fb5528638fa81cec911cebb7333d5f1d21df...2ba764f9a38c27f82a9198472c584fa633c8f2cd)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)

* [OCPBUGS-52872](https://issues.redhat.com/browse/OCPBUGS-52872): IBMCloud: MAPI replacing unhealthy CP nodes [#62](https://github.com/openshift/machine-api-provider-ibmcloud/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0fdb727264afaa7f02c8bd602f3769427e520300...3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7f9ed155f7361fb0a16f666fd53111cfb16d4cca)

* [OCPBUGS-51163](https://issues.redhat.com/browse/OCPBUGS-51163): Fix bad IPv6 address (#1074) [#1074](https://github.com/openshift/insights-operator/pull/1074)
* [OCPBUGS-48790](https://issues.redhat.com/browse/OCPBUGS-48790): Add a liveness probe to the extractor container (#1068) [#1068](https://github.com/openshift/insights-operator/pull/1068)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5c8b7154a3afb0e7eed60480bed41bbb45b413f1...7f9ed155f7361fb0a16f666fd53111cfb16d4cca)


### [ironic](https://github.com/openshift/ironic-image/tree/9161a5fdb75042856bd40eec31bdba7b7c07d4a2)

* [OCPBUGS-55938](https://issues.redhat.com/browse/OCPBUGS-55938): Extract files one-by-one in logwatch [#657](https://github.com/openshift/ironic-image/pull/657)
* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#646](https://github.com/openshift/ironic-image/pull/646)
* [OCPBUGS-52290](https://issues.redhat.com/browse/OCPBUGS-52290): Fix runlogwatch script [#642](https://github.com/openshift/ironic-image/pull/642)
* [OCPBUGS-50641](https://issues.redhat.com/browse/OCPBUGS-50641): Install python3-inotify pkg explicitly [#639](https://github.com/openshift/ironic-image/pull/639)
* [Full changelog](https://github.com/openshift/ironic-image/compare/603ad0c00a97de9006fde80677325f613a391eec...9161a5fdb75042856bd40eec31bdba7b7c07d4a2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/b79bddef03460124923c7ce8616d83f719a49960)

* [OCPBUGS-56097](https://issues.redhat.com/browse/OCPBUGS-56097): collect the entire journal from the host [#189](https://github.com/openshift/ironic-agent-image/pull/189)
* [OCPBUGS-55364](https://issues.redhat.com/browse/OCPBUGS-55364): Delay determining the hostname to put into ignition [#183](https://github.com/openshift/ironic-agent-image/pull/183)
* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#178](https://github.com/openshift/ironic-agent-image/pull/178)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a26fffeb4d36b22951095e20988f1757044e8d2a...b79bddef03460124923c7ce8616d83f719a49960)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/50ca44fd48943433d502e8bcff3804f5cac7cb5a)

* append .0 to go.mod version [#103](https://github.com/openshift/ironic-rhcos-downloader/pull/103)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/04c22eee43786b4a8bc53441b7e8173372251bd8...50ca44fd48943433d502e8bcff3804f5cac7cb5a)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/8dec42d36f9e26487112aeac870767a5fedb8021)

* append .0 to go.mod version [#216](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/216)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/50d17147f15d8b216e7c41f91d1bd7d307ca8c73...8dec42d36f9e26487112aeac870767a5fedb8021)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2111495e6d03f1bfe0702996fdd1355ca21b78cf)

* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Ensure volume stays attached through reboots [#55](https://github.com/openshift/kubevirt-csi-driver/pull/55)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...2111495e6d03f1bfe0702996fdd1355ca21b78cf)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)

* [OCPBUGS-57057](https://issues.redhat.com/browse/OCPBUGS-57057): Updates GCP CredentialsRequest [#1376](https://github.com/openshift/machine-api-operator/pull/1376)
* [OCPBUGS-52494](https://issues.redhat.com/browse/OCPBUGS-52494), [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): Updates GCP credentials request [#1341](https://github.com/openshift/machine-api-operator/pull/1341)
* [OCPBUGS-52567](https://issues.redhat.com/browse/OCPBUGS-52567): add image/read permissions [#1342](https://github.com/openshift/machine-api-operator/pull/1342)
* [OCPBUGS-51263](https://issues.redhat.com/browse/OCPBUGS-51263): Drop oVirt support [#1333](https://github.com/openshift/machine-api-operator/pull/1333)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/53c01a7cc698b55ec71b3000f0781dfa267f6168...6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/efe259e04ba98784102ba603941ecbbb75233c6b)

* [OCPBUGS-56900](https://issues.redhat.com/browse/OCPBUGS-56900): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5095](https://github.com/openshift/machine-config-operator/pull/5095)
* [OCPBUGS-56517](https://issues.redhat.com/browse/OCPBUGS-56517): pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition [#5065](https://github.com/openshift/machine-config-operator/pull/5065)
* [OCPBUGS-56585](https://issues.redhat.com/browse/OCPBUGS-56585): scope MCD node listers to current node [#5068](https://github.com/openshift/machine-config-operator/pull/5068)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates [#5089](https://github.com/openshift/machine-config-operator/pull/5089)
* [OCPBUGS-56823](https://issues.redhat.com/browse/OCPBUGS-56823): Boot Image Controller should not degrade when golden configmap is slow to update [#5085](https://github.com/openshift/machine-config-operator/pull/5085)
* [OCPBUGS-56703](https://issues.redhat.com/browse/OCPBUGS-56703): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5078](https://github.com/openshift/machine-config-operator/pull/5078)
* Merge [#5025](https://github.com/openshift/machine-config-operator/pull/5025)
* [OCPBUGS-56401](https://issues.redhat.com/browse/OCPBUGS-56401): Add hot loop detection in the boot image controller [#5062](https://github.com/openshift/machine-config-operator/pull/5062)
* [OCPBUGS-55638](https://issues.redhat.com/browse/OCPBUGS-55638): OCPBUGS-55637: Add admin_acks handling in the MCO [#5027](https://github.com/openshift/machine-config-operator/pull/5027)
* [OCPBUGS-56217](https://issues.redhat.com/browse/OCPBUGS-56217): Compare the osImageURLs for OS validation check [#5052](https://github.com/openshift/machine-config-operator/pull/5052)
* [OCPBUGS-56170](https://issues.redhat.com/browse/OCPBUGS-56170): error from generateAndValidateRenderedMachineConfig function can be misleading [#5049](https://github.com/openshift/machine-config-operator/pull/5049)
* [OCPBUGS-55383](https://issues.redhat.com/browse/OCPBUGS-55383): Leverage shared node.env for both AWS providerID and hostname units [#5008](https://github.com/openshift/machine-config-operator/pull/5008)
* [OCPBUGS-53427](https://issues.redhat.com/browse/OCPBUGS-53427): pkg/operator/status: Drop kubelet skew guard, add RHEL guard [#4956](https://github.com/openshift/machine-config-operator/pull/4956)
* [release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension [#5018](https://github.com/openshift/machine-config-operator/pull/5018)
* [OCPBUGS-54765](https://issues.redhat.com/browse/OCPBUGS-54765): [release-4.18] kubelet-service: narrow down restorecon path [#4978](https://github.com/openshift/machine-config-operator/pull/4978)
* [OCPBUGS-55428](https://issues.redhat.com/browse/OCPBUGS-55428): MSBIC should not update windows machinesets [#5012](https://github.com/openshift/machine-config-operator/pull/5012)
* [OCPBUGS-55290](https://issues.redhat.com/browse/OCPBUGS-55290): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#5000](https://github.com/openshift/machine-config-operator/pull/5000)
* [OCPBUGS-55293](https://issues.redhat.com/browse/OCPBUGS-55293): Fix PollUntilContextTimeout in syncRenderConfig [#5001](https://github.com/openshift/machine-config-operator/pull/5001)
* Update cluster operator's status condition message [#4993](https://github.com/openshift/machine-config-operator/pull/4993)
* [OCPBUGS-53278](https://issues.redhat.com/browse/OCPBUGS-53278): In OCL. Cannot install extensions [#4945](https://github.com/openshift/machine-config-operator/pull/4945)
* [OCPBUGS-54817](https://issues.redhat.com/browse/OCPBUGS-54817): Make mtu-migration run after wait-for-primary-ip [#4979](https://github.com/openshift/machine-config-operator/pull/4979)
* [OKD-239](https://issues.redhat.com/browse/OKD-239): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4955](https://github.com/openshift/machine-config-operator/pull/4955)
* [OCPBUGS-54462](https://issues.redhat.com/browse/OCPBUGS-54462): OSUpdateStarted event should only be emitted on actual OS updates [#4967](https://github.com/openshift/machine-config-operator/pull/4967)
* [OCPBUGS-51132](https://issues.redhat.com/browse/OCPBUGS-51132): [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc [#4869](https://github.com/openshift/machine-config-operator/pull/4869)
* [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Add ipsec connect wait service [#4926](https://github.com/openshift/machine-config-operator/pull/4926)
* [OCPBUGS-53306](https://issues.redhat.com/browse/OCPBUGS-53306): Fixing typos for MachineConfigNode [#4927](https://github.com/openshift/machine-config-operator/pull/4927)
* [OCPNODE-2276](https://issues.redhat.com/browse/OCPNODE-2276): Set `Upgradeable=False` when cluster is on cgroup `v1` [#4921](https://github.com/openshift/machine-config-operator/pull/4921)
* [OCPBUGS-53111](https://issues.redhat.com/browse/OCPBUGS-53111): daemon: ensure ostree-finalize-staged is started before rebooting [#4918](https://github.com/openshift/machine-config-operator/pull/4918)
* [OCPBUGS-53110](https://issues.redhat.com/browse/OCPBUGS-53110): Update ObservedGeneration in KubeletConfig [#4917](https://github.com/openshift/machine-config-operator/pull/4917)
* [release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built [#4859](https://github.com/openshift/machine-config-operator/pull/4859)
* [OCPBUGS-50865](https://issues.redhat.com/browse/OCPBUGS-50865): Make resolv-prepender env file optional [#4855](https://github.com/openshift/machine-config-operator/pull/4855)
* [OCPBUGS-48809](https://issues.redhat.com/browse/OCPBUGS-48809): Enable nmstate-configuration on all platforms [#4804](https://github.com/openshift/machine-config-operator/pull/4804)
* [OCPBUGS-48296](https://issues.redhat.com/browse/OCPBUGS-48296): Update machine-config-daemon-pull.service to use custom policy for Podman &lt; 4.4.1 [#4788](https://github.com/openshift/machine-config-operator/pull/4788)
* [OCPBUGS-48341](https://issues.redhat.com/browse/OCPBUGS-48341): configure-ovs workaround for ovs-if-br-ex bug [#4883](https://github.com/openshift/machine-config-operator/pull/4883)
* [OCPBUGS-51015](https://issues.redhat.com/browse/OCPBUGS-51015): Enforce VIPs to be collocated at the same host [#4865](https://github.com/openshift/machine-config-operator/pull/4865)
* [OCPBUGS-51194](https://issues.redhat.com/browse/OCPBUGS-51194): Update cluster-reader ClusterRole permissions [#4874](https://github.com/openshift/machine-config-operator/pull/4874)
* [OCPBUGS-50633](https://issues.redhat.com/browse/OCPBUGS-50633): Update format verbs for alert logs [#4849](https://github.com/openshift/machine-config-operator/pull/4849)
* [OCPBUGS-49774](https://issues.redhat.com/browse/OCPBUGS-49774): Correct MachineConfig documentation on sysstat extension support [#4829](https://github.com/openshift/machine-config-operator/pull/4829)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/120ba674540c81513d1a701b99c8d424dbb41887...efe259e04ba98784102ba603941ecbbb75233c6b)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d9a71247dafd469182d4bd13ef227c9be82a1e32)

* append .0 to go.mod version [#134](https://github.com/openshift/image-customization-controller/pull/134)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/e905646a4aa24e6ad54f27776d3dfd64a7d6f609...d9a71247dafd469182d4bd13ef227c9be82a1e32)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ab43283689560737ad32566dd59e0d3d77fee4e1)

* [OCPBUGS-53141](https://issues.redhat.com/browse/OCPBUGS-53141): Change rhcos release browser url [#55](https://github.com/openshift/machine-os-images/pull/55)
* [OCPBUGS-51266](https://issues.redhat.com/browse/OCPBUGS-51266): Decompress pxe file only if it's a valid compressed file [#52](https://github.com/openshift/machine-os-images/pull/52)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/6d082d8041b06d062f95dd2ad1445150f2c0b305...ab43283689560737ad32566dd59e0d3d77fee4e1)


### [metallb-frr](https://github.com/openshift/frr/tree/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)

* [OCPBUGS-55343](https://issues.redhat.com/browse/OCPBUGS-55343): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#88](https://github.com/openshift/frr/pull/88)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): Use metrics for readiness/liveness probes [#76](https://github.com/openshift/frr/pull/76)
* [Full changelog](https://github.com/openshift/frr/compare/1ad8f2e711d33fd0416b8e2b8d26a413d26b38e2...98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/eb6123bd41269ccc6f5abddadfbc8e3af4481e09)

* [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#376](https://github.com/openshift/monitoring-plugin/pull/376)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a5a82997a17cdcee03e9a4a58ac42c694d4174aa...eb6123bd41269ccc6f5abddadfbc8e3af4481e09)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/e46a6d7d6f2ea7baeff193c0a28901bc34ea0d43)

* append .0 to go.mod version [#96](https://github.com/openshift/multus-admission-controller/pull/96)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/1b2791b74bdc5913697ab01515f0bdf0f3dfe7a0...e46a6d7d6f2ea7baeff193c0a28901bc34ea0d43)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)

* [OCPBUGS-47470](https://issues.redhat.com/browse/OCPBUGS-47470): adds getpodcontext (backport 4.18) [#259](https://github.com/openshift/multus-cni/pull/259)
* [Full changelog](https://github.com/openshift/multus-cni/compare/69733b264233684deb30defbc357a1ecf03c0d02...21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)

* append .0 to go.mod version [#70](https://github.com/openshift/multus-networkpolicy/pull/70)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/82c77316ea4dcf0c14f8717984a1faa6f731b553...5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/ac43b0f8b214a013572af900aef3333f10447fea)

* append .0 to go.mod version [#370](https://github.com/openshift/whereabouts-cni/pull/370)
* [OCPBUGS-55270](https://issues.redhat.com/browse/OCPBUGS-55270): Fix whereabouts-reconciler no namespace error [#362](https://github.com/openshift/whereabouts-cni/pull/362)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/74f285c3d6c642d96039067a5e99e8db85b146f9...ac43b0f8b214a013572af900aef3333f10447fea)


### [must-gather](https://github.com/openshift/must-gather/tree/b851bd3589eb0f80471d4de2114a7635b0d12663)

* append .0 to go.mod version [#491](https://github.com/openshift/must-gather/pull/491)
* [Full changelog](https://github.com/openshift/must-gather/compare/c864494e2b10793ec1de833ade2fda7afe6a7c88...b851bd3589eb0f80471d4de2114a7635b0d12663)


### [network-tools](https://github.com/openshift/network-tools/tree/47b13549115a59d82dbf4c61f9160432608cb9d8)

* Fix build error [#147](https://github.com/openshift/network-tools/pull/147)
* [Full changelog](https://github.com/openshift/network-tools/compare/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f...47b13549115a59d82dbf4c61f9160432608cb9d8)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/9404c2330085c3dd42504f34c608974ffb957d6e)

* [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#240](https://github.com/openshift/networking-console-plugin/pull/240)
* [OCPBUGS-49395](https://issues.redhat.com/browse/OCPBUGS-49395): Add translations [#238](https://github.com/openshift/networking-console-plugin/pull/238)
* Add translations scripts [#234](https://github.com/openshift/networking-console-plugin/pull/234)
* [CNV-56436](https://issues.redhat.com/browse/CNV-56436): show ipam lifecycle correctly with new spec [#220](https://github.com/openshift/networking-console-plugin/pull/220)
* [CNV-56236](https://issues.redhat.com/browse/CNV-56236): fix cudn modal form titles [#219](https://github.com/openshift/networking-console-plugin/pull/219)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/bd32ac52a57199bd5fda50f39e9b9dd1390658e7...9404c2330085c3dd42504f34c608974ffb957d6e)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/afe324bf56e0348fb45e5fbb9c832c1587482153)

* [OCPBUGS-51861](https://issues.redhat.com/browse/OCPBUGS-51861): fixing CVE-2025-22868 [#96](https://github.com/openshift/machine-api-provider-nutanix/pull/96)
* [OCPBUGS-54616](https://issues.redhat.com/browse/OCPBUGS-54616): Fix link-local addresses being added to machine [#101](https://github.com/openshift/machine-api-provider-nutanix/pull/101)
* [OCPBUGS-47268](https://issues.redhat.com/browse/OCPBUGS-47268): fixing CVE-2024-45338 [#91](https://github.com/openshift/machine-api-provider-nutanix/pull/91)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/9c2ff5e75240902a64b13aabbd39c0ae7b970473...afe324bf56e0348fb45e5fbb9c832c1587482153)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/cbd44ad9f0e433d32ff16a2691c6278298afe89a)

* [OCPBUGS-48332](https://issues.redhat.com/browse/OCPBUGS-48332): Update dependencies to address CVE-2024-24786 [#312](https://github.com/openshift/oauth-proxy/pull/312)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/2957f139b4a9982163e4ee76fdc7c532669b6b9f...cbd44ad9f0e433d32ff16a2691c6278298afe89a)


### [oauth-server](https://github.com/openshift/oauth-server/tree/3bedb4f45cbdaa50384cf7c7284617fb8a414cf2)

* append .0 to go.mod version [#179](https://github.com/openshift/oauth-server/pull/179)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3527783a5ceb1f33f790b7ab5edbea17f5cc6a8...3bedb4f45cbdaa50384cf7c7284617fb8a414cf2)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/1b2084872f25a83e88ea1586afa0b5bda01c407c)

* [OCPBUGS-56659](https://issues.redhat.com/browse/OCPBUGS-56659): v2/archive: print unarchive progress (#1160) [#1160](https://github.com/openshift/oc-mirror/pull/1160)
* [OCPBUGS-54653](https://issues.redhat.com/browse/OCPBUGS-54653): delete: continue on errors (#1146) [#1146](https://github.com/openshift/oc-mirror/pull/1146)
* [OCPBUGS-56043](https://issues.redhat.com/browse/OCPBUGS-56043): Fix mirroring images with tag&digest in charts (#1142) [#1142](https://github.com/openshift/oc-mirror/pull/1142)
* [OCPBUGS-54626](https://issues.redhat.com/browse/OCPBUGS-54626): [release-4.18] cli: return distinct error codes depending on failure (#1125) [#1125](https://github.com/openshift/oc-mirror/pull/1125)
* [OCPBUGS-55361](https://issues.redhat.com/browse/OCPBUGS-55361): v2/operator: refactor operator FilteredCollector (#1134) [#1134](https://github.com/openshift/oc-mirror/pull/1134)
* [OCPBUGS-51217](https://issues.redhat.com/browse/OCPBUGS-51217): Fix CVE-2025-27144 (#1108) [#1108](https://github.com/openshift/oc-mirror/pull/1108)
* [OCPBUGS-54727](https://issues.redhat.com/browse/OCPBUGS-54727): Use tag 0.0.3+2 of catalog-filter (#1128) [#1128](https://github.com/openshift/oc-mirror/pull/1128)
* [OCPBUGS-52978](https://issues.redhat.com/browse/OCPBUGS-52978): delete: fix typo in --help output (#1121) [#1121](https://github.com/openshift/oc-mirror/pull/1121)
* [OCPBUGS-52960](https://issues.redhat.com/browse/OCPBUGS-52960): v2: fix setting version during build (#1118) [#1118](https://github.com/openshift/oc-mirror/pull/1118)
* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1114) [#1114](https://github.com/openshift/oc-mirror/pull/1114)
* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1106) [#1106](https://github.com/openshift/oc-mirror/pull/1106)
* [CLID-325](https://issues.redhat.com/browse/CLID-325): adds cpu and memory profiling (#1103) [#1103](https://github.com/openshift/oc-mirror/pull/1103)
* fixes CVE-2024-0406 (#1101) [#1101](https://github.com/openshift/oc-mirror/pull/1101)
* v2: disable spinners when not running in a tty (#1082) [#1082](https://github.com/openshift/oc-mirror/pull/1082)
* [OCPBUGS-49990](https://issues.redhat.com/browse/OCPBUGS-49990): v2/release: error out for kubevirt/graph image errors (#1081) [#1081](https://github.com/openshift/oc-mirror/pull/1081)
* [OCPBUGS-50963](https://issues.redhat.com/browse/OCPBUGS-50963): v2: don't clean cluster resources on dry-run mode (#1091) [#1091](https://github.com/openshift/oc-mirror/pull/1091)
* [OCPBUGS-49991](https://issues.redhat.com/browse/OCPBUGS-49991): fixes bundle related images being skipped (#1074) [#1074](https://github.com/openshift/oc-mirror/pull/1074)
* v2/cli: always stop local registry and close registry.log (#1090) [#1090](https://github.com/openshift/oc-mirror/pull/1090)
* [OCPBUGS-44103](https://issues.redhat.com/browse/OCPBUGS-44103): bump oc fork version (#1089) [#1089](https://github.com/openshift/oc-mirror/pull/1089)
* [OCPBUGS-50685](https://issues.redhat.com/browse/OCPBUGS-50685): fixes the code to make the spinner trigger after semaphore is released (#1079) [#1079](https://github.com/openshift/oc-mirror/pull/1079)
* [OCPBUGS-50503](https://issues.redhat.com/browse/OCPBUGS-50503): oc-mirror fails with error `unknown image: reference name is empty` (#1075) [#1075](https://github.com/openshift/oc-mirror/pull/1075)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c00c7c9f973ed593b639db63102101a4ab911033...1b2084872f25a83e88ea1586afa0b5bda01c407c)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/9f981b3ee5822098c6e648aa30742da07318f954)

* UPSTREAM: 502: Upgrade golang.org/x/net (#502) [#502](https://github.com/openshift/operator-framework-catalogd/pull/502)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/f95a88f7e7a2925b6b878c2acb26451005f0d37a...9f981b3ee5822098c6e648aa30742da07318f954)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/ea60189f95af09f3c5c50c8de41d8f601bc5e881)

* UPSTREAM: &lt;carry&gt;: fix crdupgradesafety diff when items schema differ (#1863) [#1863](https://github.com/openshift/operator-framework-operator-controller/pull/1863)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/74a2477ba390b0f727d0bd314975104dce6272e4...ea60189f95af09f3c5c50c8de41d8f601bc5e881)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/1872fbf5967acd6485589c339ac8cb6bd156ad72)

* [OCPBUGS-52312](https://issues.redhat.com/browse/OCPBUGS-52312): Skip blocked registry check for registries with mirrors [#498](https://github.com/openshift/openshift-apiserver/pull/498)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/73d65dbb875ed0302360eabdeaf11658752d1499...1872fbf5967acd6485589c339ac8cb6bd156ad72)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1f76c23407c6cc95902a4b4d8f679181df538d9d)

* [OCPBUGS-57344](https://issues.redhat.com/browse/OCPBUGS-57344): Set node-pullsecrets volume to read-only to protect image pull credentials [#392](https://github.com/openshift/openshift-controller-manager/pull/392)
* [OCPBUGS-55699](https://issues.redhat.com/browse/OCPBUGS-55699): Empty proxy variables are causing issues during the build [#377](https://github.com/openshift/openshift-controller-manager/pull/377)
* [OCPBUGS-54304](https://issues.redhat.com/browse/OCPBUGS-54304): Intermittent authentication issues when accessing OpenShift registry [#369](https://github.com/openshift/openshift-controller-manager/pull/369)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/5bfc8081a65ea3e0d23306c0398143a9987d659e...1f76c23407c6cc95902a4b4d8f679181df538d9d)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/3cca6feee0d646331bdbc9d49732fbdf49448d41)

* append .0 to go.mod version [#123](https://github.com/openshift/openshift-state-metrics/pull/123)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/f5b14702aefd0ea480d9b5e7ba8717af36ba67e9...3cca6feee0d646331bdbc9d49732fbdf49448d41)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/969a7e031a97a7e12424b5d292f345a168b73e38)

* [OCPBUGS-57314](https://issues.redhat.com/browse/OCPBUGS-57314): operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1017](https://github.com/openshift/operator-framework-olm/pull/1017)
* [OCPBUGS-56098](https://issues.redhat.com/browse/OCPBUGS-56098): fix(olm): improve error logging for missing olm.managed label (#3558) [#1001](https://github.com/openshift/operator-framework-olm/pull/1001)
* [OCPBUGS-51225](https://issues.redhat.com/browse/OCPBUGS-51225), [OCPBUGS-51227](https://issues.redhat.com/browse/OCPBUGS-51227), [OCPBUGS-51245](https://issues.redhat.com/browse/OCPBUGS-51245): pin go-jose/v4@v4.0.5 (#3550) [#992](https://github.com/openshift/operator-framework-olm/pull/992)
* [OCPBUGS-53108](https://issues.redhat.com/browse/OCPBUGS-53108): Ensure that PSA label is latest instead of pinning versions [#983](https://github.com/openshift/operator-framework-olm/pull/983)
* [OCPBUGS-53040](https://issues.redhat.com/browse/OCPBUGS-53040): add missing pod disruption reasons to isPodDead [#981](https://github.com/openshift/operator-framework-olm/pull/981)
* [OCPBUGS-50830](https://issues.redhat.com/browse/OCPBUGS-50830), [OCPBUGS-50832](https://issues.redhat.com/browse/OCPBUGS-50832), [OCPBUGS-50836](https://issues.redhat.com/browse/OCPBUGS-50836): Bump github.com/distribution/distribution/v3 [#965](https://github.com/openshift/operator-framework-olm/pull/965)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/182471a8d72ee38d2ff82ce44db6903e66c4b22b...969a7e031a97a7e12424b5d292f345a168b73e38)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/c06a810b321ad79ef572ce36ed935332a58ea319)

* [ART-13123](https://issues.redhat.com/browse/ART-13123): append .0 to go.mod version [#637](https://github.com/operator-framework/operator-marketplace/pull/637)
* [OCPBUGS-53149](https://issues.redhat.com/browse/OCPBUGS-53149): Ensure that PSA label is latest instead of pinning versions [#601](https://github.com/operator-framework/operator-marketplace/pull/601)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a1e906724ed6d88161f8faaa90e4fe447689725...c06a810b321ad79ef572ce36ed935332a58ea319)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/b5e32a0f733ccdc59ce0012d768dc3edb6caf013)

* [OCPBUGS-55016](https://issues.redhat.com/browse/OCPBUGS-55016): DownStream Merge Sync from 4.19 [05-08-2025] [#2555](https://github.com/openshift/ovn-kubernetes/pull/2555)
* [OCPBUGS-54671](https://issues.redhat.com/browse/OCPBUGS-54671): EIP no reroute: allow multiple entries for pod to pod and pod to join [#2510](https://github.com/openshift/ovn-kubernetes/pull/2510)
* [OCPBUGS-54187](https://issues.redhat.com/browse/OCPBUGS-54187): Update OVN to FDP25.A.1 24.09.2-41. [#2495](https://github.com/openshift/ovn-kubernetes/pull/2495)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [02-13-2025] [#2470](https://github.com/openshift/ovn-kubernetes/pull/2470)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5f6ad07d88d8470b2d525803c60bdb5cd0164639...b5e32a0f733ccdc59ce0012d768dc3edb6caf013)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/10ac06f57bface0b3481e111c4e1d5b7f52db7f4)

* [OCPBUGS-54243](https://issues.redhat.com/browse/OCPBUGS-54243): Fix for  CVE-2024-51744 in github.com/golang-jwt/jwt/v4 [#111](https://github.com/openshift/machine-api-provider-powervs/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/e253fa30d99bb7ed00c1f27ca3d810fa682a1901...10ac06f57bface0b3481e111c4e1d5b7f52db7f4)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/35c1136915f7a6896dfcb479e1f686fd18542856)

* append .0 to go.mod version [#380](https://github.com/openshift/prom-label-proxy/pull/380)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/d9fe2d8ebc1b311be71172676d61710fd5c7400b...35c1136915f7a6896dfcb479e1f686fd18542856)


### [prometheus](https://github.com/openshift/prometheus/tree/df5ef25778ad5949c637beae1b9c303b4c044302)

* [OCPBUGS-56732](https://issues.redhat.com/browse/OCPBUGS-56732): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#253](https://github.com/openshift/prometheus/pull/253)
* [OCPBUGS-54940](https://issues.redhat.com/browse/OCPBUGS-54940): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#247](https://github.com/openshift/prometheus/pull/247)
* [Full changelog](https://github.com/openshift/prometheus/compare/8de8eb11dfe734331762bc8d4839ec3b47084743...df5ef25778ad5949c637beae1b9c303b4c044302)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/a432067579aaa60326a104f4ce2eba18e1ab444c)

* append .0 to go.mod version [#101](https://github.com/openshift/prometheus-alertmanager/pull/101)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e513c918214acfa6f60ba5ab3e107f57fd3df156...a432067579aaa60326a104f4ce2eba18e1ab444c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/74987748a60f14816975fa1070ce485393a38f64)

* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump openshift/prometheus-operator to v0.78.2 [#327](https://github.com/openshift/prometheus-operator/pull/327)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ede3c1406e70f359c76c1403a2b14bc60ad386bf...74987748a60f14816975fa1070ce485393a38f64)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/92e17ff5c45807198adc8b59f5b3f63a9b7f1726)

* append .0 to go.mod version [#166](https://github.com/openshift/node_exporter/pull/166)
* [Full changelog](https://github.com/openshift/node_exporter/compare/b7efb8c0f7d45f4ccb9120d4bcfb60ebe721ed69...92e17ff5c45807198adc8b59f5b3f63a9b7f1726)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)

* [OCPBUGS-55338](https://issues.redhat.com/browse/OCPBUGS-55338): Added error event for failed ingress to route conversion [#59](https://github.com/openshift/route-controller-manager/pull/59)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/07daee4d2f0b5c7aaca56ee45ff6dfdf97680db0...ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/30efb529a5b7db5d6f352f6ac0470d8385268539)

* [OCPBUGS-44952](https://issues.redhat.com/browse/OCPBUGS-44952): [release-4.18] Bump go to 1.22.0 [#253](https://github.com/openshift/service-ca-operator/pull/253)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1f7d6472fea332fc307d9c8911f8c3cf57347755...30efb529a5b7db5d6f352f6ac0470d8385268539)


### [telemeter](https://github.com/openshift/telemeter/tree/490612bdaa6412762403c8eee902c20f033ca5aa)

* append .0 to go.mod version [#561](https://github.com/openshift/telemeter/pull/561)
* [Full changelog](https://github.com/openshift/telemeter/compare/700802fe29aba4ed602309f0c68222c4bedb08f5...490612bdaa6412762403c8eee902c20f033ca5aa)


### [tests](https://github.com/openshift/origin/tree/0c9d7464f6948f9e715f7bd9b37a64738b558cc2)

* [OCPBUGS-56995](https://issues.redhat.com/browse/OCPBUGS-56995): Fix bearer token exposure in exit condition as well [#29882](https://github.com/openshift/origin/pull/29882)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#29871](https://github.com/openshift/origin/pull/29871)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates tests [#29894](https://github.com/openshift/origin/pull/29894)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport watch count tracking fixes to 4.18 [#29725](https://github.com/openshift/origin/pull/29725)
* [OCPBUGS-55667](https://issues.redhat.com/browse/OCPBUGS-55667): aws/edge: prevent test using unschedulable nodes [#29750](https://github.com/openshift/origin/pull/29750)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#29765](https://github.com/openshift/origin/pull/29765)
* [OCPBUGS-50628](https://issues.redhat.com/browse/OCPBUGS-50628): [test: networking] Skip isolation test when cgroupv1 nodes are present [#29541](https://github.com/openshift/origin/pull/29541)
* [OCPBUGS-55470](https://issues.redhat.com/browse/OCPBUGS-55470): [build] Ensure Git Clone Does Not Run Privileged [#29736](https://github.com/openshift/origin/pull/29736)
* Revert "OCPBUGS-55277: backport 4.18" [#29720](https://github.com/openshift/origin/pull/29720)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport 4.18 [#29645](https://github.com/openshift/origin/pull/29645)
* [OCPBUGS-55110](https://issues.redhat.com/browse/OCPBUGS-55110): Backport `MetricsCollectionProfiles` patches to 4.18 [#29561](https://github.com/openshift/origin/pull/29561)
* [OCPBUGS-54807](https://issues.redhat.com/browse/OCPBUGS-54807): support provider type external [#29666](https://github.com/openshift/origin/pull/29666)
* [OCPBUGS-54725](https://issues.redhat.com/browse/OCPBUGS-54725): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29657](https://github.com/openshift/origin/pull/29657)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): bump(k8s): update k8s.io/* dependencies to v1.31.7 [#29634](https://github.com/openshift/origin/pull/29634)
* [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): use non-fake boot image for patch [#29584](https://github.com/openshift/origin/pull/29584)
* [OCPBUGS-52579](https://issues.redhat.com/browse/OCPBUGS-52579): Use payload pullspec for image info test [#29587](https://github.com/openshift/origin/pull/29587)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): Rely on unstructured for update status instead of type conversion [#29564](https://github.com/openshift/origin/pull/29564)
* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#29548](https://github.com/openshift/origin/pull/29548)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): move initialization of OC to test instead of package level [#29472](https://github.com/openshift/origin/pull/29472)
* [OCPBUGS-50921](https://issues.redhat.com/browse/OCPBUGS-50921): managed services: add hcp crd to unstable list [#29545](https://github.com/openshift/origin/pull/29545)
* [OCPBUGS-50930](https://issues.redhat.com/browse/OCPBUGS-50930): managed services: add known image check for gcp [#29547](https://github.com/openshift/origin/pull/29547)
* [OCPBUGS-48474](https://issues.redhat.com/browse/OCPBUGS-48474): Replace RunHostCmd with Exec function to censor bearer token being exposed [#29377](https://github.com/openshift/origin/pull/29377)
* [OCPBUGS-49687](https://issues.redhat.com/browse/OCPBUGS-49687): Add Readiness Probe to Router Status Tests [#29513](https://github.com/openshift/origin/pull/29513)
* [Full changelog](https://github.com/openshift/origin/compare/0c7bed998ae685019b8be707a6a4f3c057624283...0c9d7464f6948f9e715f7bd9b37a64738b558cc2)


### [thanos](https://github.com/openshift/thanos/tree/f1599f65c5fd652150821ae954d563747a649b53)

* [OCPBUGS-52945](https://issues.redhat.com/browse/OCPBUGS-52945): Update Go version in go.mod to 1.22.0 [#159](https://github.com/openshift/thanos/pull/159)
* [Full changelog](https://github.com/openshift/thanos/compare/314589cf9b4e86507634ab3406deb08402fa7af9...f1599f65c5fd652150821ae954d563747a649b53)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2b241410a972898f0ce80dec3bfdf4f974721937)

* [OCPBUGS-54701](https://issues.redhat.com/browse/OCPBUGS-54701): add manifest-topology.yaml for topology related feature and test [#303](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/303)
* [OCPBUGS-50638](https://issues.redhat.com/browse/OCPBUGS-50638): fix panic when vcenter address is incorrect [#293](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/293)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/39b30343b8462a298c4d34cf6e579330af42368e...2b241410a972898f0ce80dec3bfdf4f974721937)