# 4.18.27

Created: 2025-10-23 18:58:42 +0000 UTC

Image Digest: `sha256:4686c8d26194f890c2a241271d41a762d4be26af0be60e9cfd0c563f61b3beab`


## Changes from 4.18.18

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.9 to 1.31.13
* Kubernetes Tests upgraded from 1.31.9 to 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202506121335-0 to 418.94.202510230424-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| OnClusterBuild <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [0e41f7d5](https://github.com/openshift/agent-installer-utils/commit/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923) `sha256:62de813f3c56440536a2b1c89edc66817a5c9460eab8e6913acb775540133fb1`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [2f62712d](https://github.com/openshift/apiserver-network-proxy/commit/2f62712d5db70df25490361749e93a552ffb5a24) `sha256:c164f4151b3081c4fca16a7ea6dca8dd71555e9428757a8de0f8ae471846cd22`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:e50a270ad04d1e8d864d7cffc3ba3f3ca5d7111ba09ac4b234f4386c3da53576`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b51cd6b8](https://github.com/openshift/aws-ebs-csi-driver/commit/b51cd6b8e54d5682cf5491a9eb5af1570261a409) `sha256:7f656ff66f14895a1910ef7d0eb39c6f6f66f009c5cffbd5b3e53aa97090b638`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:93444064d1707591de4607207e0d89d8eef417e0981fc6a30c7b7681c3e0b615`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [53274f11](https://github.com/openshift/machine-api-provider-aws/commit/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08) `sha256:8df78826ffbf29ea291cde12a4eb81b8d63103ddb15b01c5af55d22e80448989`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [f54f9a19](https://github.com/openshift/aws-pod-identity-webhook/commit/f54f9a19adb43b395a880ca046aed0841466c28d) `sha256:e170472776049ecfc4867f6f37fa0a246831043e380dc74d00e3a13a91f2db77`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:f734c5d3db3668f61428823e244090b59c35b1165269284981607f1e74cd6478`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:22697aa8b9ecc72c7304f90ddba998c8336e60520e6770239a16700f2a00012b`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:faba2837dc58c837289c79cd2c2e9e4c6185f7273f88c0b44cc6b30b17957bb6`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:070c4c457c311a9bd4b04b1015d0d1ce289d7854921dee1266e27b06003e5951`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [c937080f](https://github.com/openshift/azure-kubernetes-kms/commit/c937080f51cec58650daa15805be548d09310c64) `sha256:31cb2cc8c79a9bbba50da05a41a61c39fab2421ce8735369f81410338e4be0e8`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [f60e4029](https://github.com/openshift/azure-workload-identity/commit/f60e4029d64de202e81d2cd114f8a90dc0a1878e) `sha256:99327fbbfc29d31a82ff628e6bbdb75be36509956e43694de191c4a0a30aa1bc`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:43f2cdef40e40da7407a6e2e0c4b5057ba891fc0518764cce1c4c6850febc119`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [beacfbc2](https://github.com/openshift/cloud-network-config-controller/commit/beacfbc2f2afa651616ad1c3c6712c511318a8d4) `sha256:2dc42ec15e3ecccc0942415ec68b27c2c10f53f084b6fa23caa1e81fc70f3629`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:2d41c3e944e86b73b4ba0d037ff016562211988f3206b9deb6cc7dccca708248`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:257433a0e789418bfe7d813f52655709a6060076e91999852c49a58b7627182c`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [2f2737e1](https://github.com/openshift/cluster-capi-operator/commit/2f2737e1ed649009eef31c19ffff7468b67de32d) `sha256:68927631ebab9644417c35986e6cfdd9aea8570530d056f72249cbc485cc05fa`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [85cb4072](https://github.com/openshift/cluster-config-operator/commit/85cb40728227fac13a2983fb6e3170d67cf62075) `sha256:d0c6de747539dd00ede882fb4f73cead462bf0a7efda7173fd5d443ef7a00251`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:23aa409d98c18a25b5dd3c14b4c5a88eba2c793d020f2deb3bafd58a2225c328`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:4cb6ecfb89e53653b69ae494ebc940b9fcf7b7db317b156e186435cc541589d9`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [7cafd0c7](https://github.com/openshift/cluster-dns-operator/commit/7cafd0c7dca2edb154b8444602b600b5901afeba) `sha256:656fe650bac2929182cd0cf7d7e566d089f69e06541b8329c6d40b89346c03ca`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1e3caa4b](https://github.com/openshift/cluster-image-registry-operator/commit/1e3caa4b5abe4e3dad914a337f87408d060b1fb2) `sha256:8e8903affdf29401b9a86b9f58795c9f445f34194960c7b2734f30601c48cbdf`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [d967a73c](https://github.com/openshift/cluster-ingress-operator/commit/d967a73c5f7da76783ee1af093f21817e7681e1d) `sha256:492103a8365ef9a1d5f237b4ba90aff87369167ec91db29ff0251ba5aab2b419`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [33a1141e](https://github.com/openshift/cluster-api-operator/commit/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd) `sha256:bbe8bb4acfac2880787b6a4b73ce2c51b1741160e46f5ba5a291d9cc959d325c`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [6182930d](https://github.com/openshift/cluster-kube-scheduler-operator/commit/6182930dde5ec8dd22bd50481e8b369ce673484c) `sha256:3d835ce07d1bec4a4b13f0bca5ea20ea5c781ea7853d7b42310f4ad8aeba6d7c`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:93145fd0c004dc4fca21435a32c7e55e962f321aff260d702f387cfdebee92a5`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:9f4724570795357eb097251a021f20c94c79b3054f3adb3bc0812143ba791dc1`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:84a52132860e74998981b76c08d38543561197c3da77836c670fa8e394c5ec17`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:3051af3343018fecbf3a6edacea69de841fc5211c09e7fb6a2499188dc979395`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:2e254a7fb8a2643817718cfdb54bc819e86eb84232f6e2456548c55c5efb09d2`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [5cdbe18d](https://github.com/openshift/cluster-samples-operator/commit/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa) `sha256:0331005b926321624a48f4e38548eb2b83dd9eee3847cc8305f47278b18a77f3`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [8caab452](https://github.com/openshift/cluster-update-keys/commit/8caab452b91df0d77ab052b1833a4d54a1374634) `sha256:3a1fbe783766a9a47d90265e08cdd962f4feaf1e8e0b111c2347956958cfe61b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e2aaf00a](https://github.com/openshift/configmap-reload/commit/e2aaf00a381b57874178a4272f3bc5257cf8dd98) `sha256:20a45eea23b06400b1b9e99a0f4e09757f94dd6ccfcdc8ab0ef33874e0725c5c`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:0caf4e026b07fd8d5b6a910f55c6589622af72e2476b100212df9509d97a983f`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [39b37c06](https://github.com/openshift/csi-external-attacher/commit/39b37c06a27481c708f071464bd1049ea7db97c7) `sha256:9a045e84becd62c12b1c0ba59ebb9f643ebe3eea869742a60928e96ef55063cb`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [376f0ea0](https://github.com/openshift/csi-external-provisioner/commit/376f0ea04c64a41cb5166ff415fff849ff2da380) `sha256:680fd6619cdc308cfa11d969dd39f1fcabb5596895c063688512656e23dbf355`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:88baddb3011dcf938aab114136eecab4dafa1e4793be2eab369d2c8744747b4c`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:b66bbf093cd69de010fb9a293701ec313dbe04c9122ee0784e0c27303c9d3dd2`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c21f5d02](https://github.com/openshift/csi-node-driver-registrar/commit/c21f5d02b498e9e49d94818f4ad3eaaae77ca161) `sha256:1be25c9c05a6e714c99239578a89ff6c2a2ed93a1e33add3a59899c7c8560031`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:d3563994c8c733b9419a6fbe81b57d4c97f1860bab5b92e7c1b000f76e510a71`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:dfd890f575e681dcb3ea5445462f47ef15d90e48dd0da483f02f62d547c973b8`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:36edacc5167d38c00fd6fb0150d5f91535ac8b7e43c218ef275032d5178859bd`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:ceaa4102b35e54be54e23c8ea73bb0dac4978cffb54105ad00b51393f47595da`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:c9562b1bb57e930328da4ae9591c4af1f235b77c036f027efd6ab7c713c2e395`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1b8c94ac](https://github.com/openshift/gcp-pd-csi-driver/commit/1b8c94ac55d8602ba6669325ade654ae47ea74cf) `sha256:6ed83a45f46d58c73c981f8d59fbe1f00f5039d7ed32f17a95120d5cfaa905da`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cb8b38c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb) `sha256:ca110492e70a629b9a4ec26bc27d967c36ad0b7c642d9bd325bae1dee552fbed`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:39df823dbdd0fbefb4cf43ba5de717b97777eda40d2eeebe37d74f7d2d6cd314`
* [haproxy-router](https://github.com/openshift/router) git [d8058949](https://github.com/openshift/router/commit/d8058949aaf91dcdea050c58e6a34ef5f6670c67) `sha256:3ed4dc45b0e0d6229620e2ac6a53ecd180cad44a11daf9f0170d94b4acd35ded`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:da8bd3ec0d2544bfd7e650f3611a4f16885ac0b7b39700ecdaa92792dc7c90b4`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:b7b10c78ffd29bee19d9249a2b5528612a197008dce2ecc146903fab40c9b946`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:a01bde662d749691118d69f00c4bd0d7f5fe075fa3cd25b90b240ab240200cc6`
* [ironic](https://github.com/openshift/ironic-image) git [9161a5fd](https://github.com/openshift/ironic-image/commit/9161a5fdb75042856bd40eec31bdba7b7c07d4a2) `sha256:42285ecbf77c9f1076eba932787de7f8ae851e832aa81d5b7261034d62e469c6`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [b79bddef](https://github.com/openshift/ironic-agent-image/commit/b79bddef03460124923c7ce8616d83f719a49960) `sha256:d4b7877d8d082a2b844ad8b3a7a440976f79820693db91e6392b93b9ee50526c`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:df5101ff9d010c948f5233737fa58ee286ef8731756d0c0a062b259aa148fa47`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:296462aa08198fa43aa0870287ed30733ebe3e1e9346a1b9a346c15406dcc3c5`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:70433dff5951c3a0964b92bee9ae682bd5370323c9fce5be904ace1a69deeff4`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [962ccca2](https://github.com/openshift/kubernetes-metrics-server/commit/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf) `sha256:3cc3977d34490059b692d5fbdb89bb9a676db39c88faa35f5d9b4e98f6b0c4e2`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [cb5a9296](https://github.com/openshift/kube-state-metrics/commit/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61) `sha256:b0737727dcbfb50c3c09b69684ba3c07b5a4ab7652bbe4970a46d6a11c4a2bca`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:076df6451aeb2e945904ce5fb7bb87727bcc578070cc3cb6ccaa48352bb6415b`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [2111495e](https://github.com/openshift/kubevirt-csi-driver/commit/2111495e6d03f1bfe0702996fdd1355ca21b78cf) `sha256:d8c6475baffce6aab773b7a79c4639f6eb50f3b9db999812c9c814c817496ac3`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:d5d6b4899a6ed1f4406a85a2289d561e04975dbb1f0c765c355715337aba152b`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [d9a71247](https://github.com/openshift/image-customization-controller/commit/d9a71247dafd469182d4bd13ef227c9be82a1e32) `sha256:16011b29009d596478fc2521e7f36a27ba27910ce21e01f21ffb24b8b240f746`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:4686140ac85b1755e477c5821f5a27a297ac4a02bae32c246a91d506e24125f8`
* [metallb-frr](https://github.com/openshift/frr) git [98ccbe64](https://github.com/openshift/frr/commit/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) `sha256:1347f08601c10d5876f71f23ac90f4f0a28a31134bd7177bba9665a7e107cdf1`
* [multus-cni](https://github.com/openshift/multus-cni) git [21fb8e05](https://github.com/openshift/multus-cni/commit/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d) `sha256:98ce2d349f8bc693d76d9a68097b758b987cf17ea3beb66bbd09d12fa78b4d0c`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [21fb8e05](https://github.com/openshift/multus-cni/commit/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d) `sha256:233ae3955f307cbf463e2d728006d5f9ca89af5dbcf97b1f8384e3178efcf5d0`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:2f86d9ffe13cbab06ff676496b50a26bbc4819d8b81b98fbacca6aee9b56792f`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:9d1d33147bc8b08d7371025f4db558fea34d36f55f423b4cf25392483a93331b`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:7347193795ceafb41bcf6f6471f8e8975c4f8f9e55b15dfe1f3a731077188ff1`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [afe324bf](https://github.com/openshift/machine-api-provider-nutanix/commit/afe324bf56e0348fb45e5fbb9c832c1587482153) `sha256:9623383df0f01ec565daeefc81932ffcd513dd29f48f7a9c7dd38e79ec5f5b01`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [2575ff41](https://github.com/openshift/oauth-apiserver/commit/2575ff417406ea6680aff0de6efb524dbbe2b8d2) `sha256:8a39e266e11acd6079d09b8a05033b746797008c0b0a49757868feaecdeab480`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3cca6fee](https://github.com/openshift/openshift-state-metrics/commit/3cca6feee0d646331bdbc9d49732fbdf49448d41) `sha256:e39fd49a8aa33e4b750267b4e773492b85c08cc7830cd7b22e64a92bcb5b6729`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [d914e77e](https://github.com/openshift/machine-api-provider-openstack/commit/d914e77ee67211024153b1535e8709c3cf190512) `sha256:3f45a045dc2269d1f88310b741629e65c832aa7e16cc2c4506ef81c392e86400`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:b9f3dfbe2e3362b963e3f8784cac8fd0bda1c23a0fee80784a7e3dedf3a8bf7c`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:1da5bf06996d2f840c9fb3b80133f9d71646edc799dbcc990ffbefb8c8e950f0`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [d36aea34](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/d36aea34452210f988f74e93e0640318f3db1938) `sha256:8d8855420e61180109ab150548daa356d20f7aa31bc26744800eaba0f7abe027`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [01fc505a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/01fc505abcf3b83bba284a00258b6761a9b7ce8a) `sha256:4bb7973c609c19a4195a61de54624bc6f436b05a819067353ac1cb219356e636`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [17ae6fba](https://github.com/openshift/cloud-provider-powervs/commit/17ae6fba6eda58aa0d91f162206386105dff9962) `sha256:673d82432b385aa67a891139b7945a504b7dff8d9a7c933d538fd1b7701e23db`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [35c11369](https://github.com/openshift/prom-label-proxy/commit/35c1136915f7a6896dfcb479e1f686fd18542856) `sha256:3ef6fd8a728768571ca93950ec6d7222c9304a98d81b58329eeb7974fa2c8dc8`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [a4320675](https://github.com/openshift/prometheus-alertmanager/commit/a432067579aaa60326a104f4ce2eba18e1ab444c) `sha256:d12d87386ab9c19148c49c1e79d839a6f47f3a2cd7e078d94319d80b6936be13`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [92e17ff5](https://github.com/openshift/node_exporter/commit/92e17ff5c45807198adc8b59f5b3f63a9b7f1726) `sha256:debbfa579e627e291b629851278c9e608e080a1642a6e676d023f218252a3ed0`
* rhel-coreos `sha256:d3a1c1e1ca85f95011f0da66c04a1bbab66920684213d0f5d58865442b09bc04`
* rhel-coreos-extensions `sha256:a6a8017b89bfef4a76f8523a9e89288c664475a4060eeb37c09c3cf711b55f60`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [ce6ffa24](https://github.com/openshift/route-controller-manager/commit/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3) `sha256:ebd79294a663cb38370ae81f9cda91cef7fb1370ec5b495b4bdb95e77272e6a8`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [30efb529](https://github.com/openshift/service-ca-operator/commit/30efb529a5b7db5d6f352f6ac0470d8385268539) `sha256:eefdc67602b8bc3941001b030ab95d82e10432f814634b80eb8ce45bc9ebd3de`
* [telemeter](https://github.com/openshift/telemeter) git [490612bd](https://github.com/openshift/telemeter/commit/490612bdaa6412762403c8eee902c20f033ca5aa) `sha256:28b3ba29ff038781d3742df4ab05fac69a92cf2bf058c25487e47a2f4ff02627`
* [thanos](https://github.com/openshift/thanos) git [f1599f65](https://github.com/openshift/thanos/commit/f1599f65c5fd652150821ae954d563747a649b53) `sha256:e955ac7de27deecd1a88d06c08a1b7a43e867cadf4289f20a6ab982fa647e6b7`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [c414d1f5](https://github.com/openshift/cloud-provider-vsphere/commit/c414d1f5b0d910300cafda742aca146d41fce98a) `sha256:77d6fa15964fce99006d03f74ba49cdb25cece21d9fc35f8bdee8244e702d1c0`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:bb22cccf0a0b66f76ac87d1294d223bfa207262e4bdd7bac15df792e015dbc6b`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [2b241410](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/2b241410a972898f0ce80dec3bfdf4f974721937) `sha256:ca6cf701f5ccbc6511820a531711bf7ed02ad10a5093ad124b558b336a9543b9`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:a5a68ca2de637b37480aea76d2e5637d5ffdb13dd69b9e7a82fd47b0736b22a8`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/03ef19051b8561514d37ec691652647cdd2f260c)

* NO-ISSUE: pin gotestsum to v1.12.3 (#8018) [#8018](https://github.com/openshift/assisted-service/pull/8018)
* [OCPBUGS-58635](https://issues.redhat.com/browse/OCPBUGS-58635), [OCPBUGS-58640](https://issues.redhat.com/browse/OCPBUGS-58640): Bump glog to v1.2.5 in release-4.18 (#7877) [#7877](https://github.com/openshift/assisted-service/pull/7877)
* [Full changelog](https://github.com/openshift/assisted-service/compare/69c47dfbd234c7b6efa1fda90a6aa760b9f62fb7...03ef19051b8561514d37ec691652647cdd2f260c)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/81d6bc2771d3d34de3c364e349ca7f2983e454a2)

* [OCPBUGS-58650](https://issues.redhat.com/browse/OCPBUGS-58650): Bump glog pkg to 1.2.4 (#1181) [#1181](https://github.com/openshift/assisted-installer/pull/1181)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/92575979cc7d65303169444f2afce22d36f918ce...81d6bc2771d3d34de3c364e349ca7f2983e454a2)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb)

* [OCPBUGS-58655](https://issues.redhat.com/browse/OCPBUGS-58655), [OCPBUGS-58660](https://issues.redhat.com/browse/OCPBUGS-58660): Bump glog to v1.2.5 in release-4.18 (#1069) [#1069](https://github.com/openshift/assisted-installer-agent/pull/1069)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/615411a4df7a54c536871533d7af22f666b4e2ab...32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/f0aabeef9a351b0fb29318578f1afbcda3ea9c3c)

* [OCPBUGS-61841](https://issues.redhat.com/browse/OCPBUGS-61841): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#570](https://github.com/openshift/cluster-api-provider-aws/pull/570)
* [OCPBUGS-58670](https://issues.redhat.com/browse/OCPBUGS-58670), [OCPBUGS-58675](https://issues.redhat.com/browse/OCPBUGS-58675): bump github.com/golang/glog to v1.2.5 [#556](https://github.com/openshift/cluster-api-provider-aws/pull/556)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to use v1 admissionregistration group [#554](https://github.com/openshift/cluster-api-provider-aws/pull/554)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9...f0aabeef9a351b0fb29318578f1afbcda3ea9c3c)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2ff53ccbf0da1bad9db98bc128a3a164cf1c25b7)

* [OCPBUGS-62973](https://issues.redhat.com/browse/OCPBUGS-62973): Add withCABundleDaemonSetHook() to AWS EFS operator [#447](https://github.com/openshift/csi-operator/pull/447)
* [OCPBUGS-55053](https://issues.redhat.com/browse/OCPBUGS-55053): Correct ASH driver inject env config [#381](https://github.com/openshift/csi-operator/pull/381)
* [OCPBUGS-54453](https://issues.redhat.com/browse/OCPBUGS-54453): Enable required driver services [#375](https://github.com/openshift/csi-operator/pull/375)
* [OCPBUGS-60596](https://issues.redhat.com/browse/OCPBUGS-60596): Bump library-go to fix assignment to nil map issue [#421](https://github.com/openshift/csi-operator/pull/421)
* [OCPBUGS-60203](https://issues.redhat.com/browse/OCPBUGS-60203): Remove stale conditions [#413](https://github.com/openshift/csi-operator/pull/413)
* [Full changelog](https://github.com/openshift/csi-operator/compare/cdc9d6499cd5020d96811fd02bde14d4d06786cc...2ff53ccbf0da1bad9db98bc128a3a164cf1c25b7)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/b29c582ec409fc7da93a70b624e6f959165cefe1)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#348](https://github.com/openshift/cluster-api-provider-azure/pull/348)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/987615c80bfa65a5c70fbed3ff06e405ef6d88ed...b29c582ec409fc7da93a70b624e6f959165cefe1)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/457dead4a58293dec7fb7854e14640c10cf69278)

* [OCPBUGS-56167](https://issues.redhat.com/browse/OCPBUGS-56167): [release-4.18] Update virtualmachines service to armcompute/v5 SDK [#145](https://github.com/openshift/machine-api-provider-azure/pull/145)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/390bef034052947c0456518d76a7a7dbbcedd690...457dead4a58293dec7fb7854e14640c10cf69278)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/80c3a0638eacd65c0d6f54fbd3f4c593085528e8)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#51](https://github.com/openshift/cluster-api-provider-metal3/pull/51)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec...80c3a0638eacd65c0d6f54fbd3f4c593085528e8)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/4ef0aa88f4afa77181d9edafa075f2f6cbb44743)

* [OCPBUGS-62810](https://issues.redhat.com/browse/OCPBUGS-62810): Update the RHCOS 4.18 bootimage metadata [#10014](https://github.com/openshift/installer/pull/10014)
* [OCPBUGS-59490](https://issues.redhat.com/browse/OCPBUGS-59490): Make swift containers removal not fatal for UPI. [#9839](https://github.com/openshift/installer/pull/9839)
* [OCPBUGS-61529](https://issues.redhat.com/browse/OCPBUGS-61529): Use less permissive access for /var/lib/etcd for SNO [#9937](https://github.com/openshift/installer/pull/9937)
* [OCPBUGS-61178](https://issues.redhat.com/browse/OCPBUGS-61178): Refine check for supported SNO platforms [#9923](https://github.com/openshift/installer/pull/9923)
* [OCPBUGS-60592](https://issues.redhat.com/browse/OCPBUGS-60592): baremetal: always set external v6 URL on dualstack [#9895](https://github.com/openshift/installer/pull/9895)
* [OCPBUGS-54598](https://issues.redhat.com/browse/OCPBUGS-54598): Update the RHCOS 4.18 bootimage metadata [#9900](https://github.com/openshift/installer/pull/9900)
* [OCPBUGS-56177](https://issues.redhat.com/browse/OCPBUGS-56177), [OCPBUGS-59155](https://issues.redhat.com/browse/OCPBUGS-59155), [OCPBUGS-59158](https://issues.redhat.com/browse/OCPBUGS-59158): Migrate AWS SDK to V2 to support MX-Central Region [#9709](https://github.com/openshift/installer/pull/9709)
* [OCPBUGS-58321](https://issues.redhat.com/browse/OCPBUGS-58321): allow to deploy single nodes with UPI [#9824](https://github.com/openshift/installer/pull/9824)
* [OCPBUGS-54744](https://issues.redhat.com/browse/OCPBUGS-54744): Filter out excess CA certs when adding node [#9647](https://github.com/openshift/installer/pull/9647)
* [OCPBUGS-58264](https://issues.redhat.com/browse/OCPBUGS-58264): vSphere - remove unit tests using nip.io [#9813](https://github.com/openshift/installer/pull/9813)
* [OCPBUGS-56797](https://issues.redhat.com/browse/OCPBUGS-56797): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9747](https://github.com/openshift/installer/pull/9747)
* [Full changelog](https://github.com/openshift/installer/compare/11c3c83da6781c97042f11484e3f5d0cc9856f9b...4ef0aa88f4afa77181d9edafa075f2f6cbb44743)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/45c6255cafc5633d1ab6b9460ececa5c9197cce8)

* [OCPBUGS-56766](https://issues.redhat.com/browse/OCPBUGS-56766): Make firmware update handle only a subset of `Spec.Updates` [#421](https://github.com/openshift/baremetal-operator/pull/421)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/6405b3f41826655af74cf6d76e352718e6786fc5...45c6255cafc5633d1ab6b9460ececa5c9197cce8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/353410688340dadb583668215e13e2d6cc90e272)

* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Re-add ENABLE_NODEIP_DEBUG env var [#364](https://github.com/openshift/baremetal-runtimecfg/pull/364)
* [OCPBUGS-59280](https://issues.redhat.com/browse/OCPBUGS-59280): Bump logrus version [#354](https://github.com/openshift/baremetal-runtimecfg/pull/354)
* [OCPBUGS-57782](https://issues.redhat.com/browse/OCPBUGS-57782): iptables: Switch PREROUTING REDIRECT rule to DNAT instead [#351](https://github.com/openshift/baremetal-runtimecfg/pull/351)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9e2015c30f48013e895eb8dfc43695780e0d9162...353410688340dadb583668215e13e2d6cc90e272)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/4fcb2d07875f05d881ac90af73723db0ae5b1d6e)

* [OCPBUGS-58233](https://issues.redhat.com/browse/OCPBUGS-58233): Return error in case of error [#2054](https://github.com/openshift/oc/pull/2054)
* [OCPBUGS-57507](https://issues.redhat.com/browse/OCPBUGS-57507): avoid transfering permissions when copying artifacts from node-joiner pod [#2039](https://github.com/openshift/oc/pull/2039)
* [Full changelog](https://github.com/openshift/oc/compare/903a973ce8f8b4509b5158b95bcebe9209e29761...4fcb2d07875f05d881ac90af73723db0ae5b1d6e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/e5d3657e8c72884d89672c94594efb2cae05d372)

* [OCPBUGS-55127](https://issues.redhat.com/browse/OCPBUGS-55127): snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 [#915](https://github.com/openshift/cloud-credential-operator/pull/915)
* [OCPBUGS-60971](https://issues.redhat.com/browse/OCPBUGS-60971): ccoctl: aws to use proper issuer url on subsequent runs [#907](https://github.com/openshift/cloud-credential-operator/pull/907)
* [OCPBUGS-60618](https://issues.redhat.com/browse/OCPBUGS-60618): ccoctl azure dnszone-resource-group-name now optional [#899](https://github.com/openshift/cloud-credential-operator/pull/899)
* [OCPBUGS-58680](https://issues.redhat.com/browse/OCPBUGS-58680): github.com/golang/glog v1.2.5 [#891](https://github.com/openshift/cloud-credential-operator/pull/891)
* [OCPBUGS-58247](https://issues.redhat.com/browse/OCPBUGS-58247): ccoctl: only add owned tag to azure resources on create [#882](https://github.com/openshift/cloud-credential-operator/pull/882)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b4113028d20a300e364354403391806265332640...e5d3657e8c72884d89672c94594efb2cae05d372)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/882f8799b8a550605e4812479272691de3f5c0d2)

* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups [#754](https://github.com/openshift/cluster-authentication-operator/pull/754)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c...882f8799b8a550605e4812479272691de3f5c0d2)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/4f1bde97bfb5da70a107996bf952b445462429c3)

* [OCPBUGS-60908](https://issues.redhat.com/browse/OCPBUGS-60908): revert openshift replica fix [#375](https://github.com/openshift/kubernetes-autoscaler/pull/375)
* [OCPBUGS-60235](https://issues.redhat.com/browse/OCPBUGS-60235): fix checkpoint gc of unknown recommenders [#368](https://github.com/openshift/kubernetes-autoscaler/pull/368)
* [OCPBUGS-59260](https://issues.redhat.com/browse/OCPBUGS-59260): Fix cool down status condition to trigger scale down [#361](https://github.com/openshift/kubernetes-autoscaler/pull/361)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d1afaf45d6a03a38614ebca0289dd4b9b489c5f1...4f1bde97bfb5da70a107996bf952b445462429c3)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/c6bff75babbad0d352e2b0ee6db0416d3cf19c0e)

* [OCPBUGS-60586](https://issues.redhat.com/browse/OCPBUGS-60586): Remove webhookport (9447) as HostPort [#501](https://github.com/openshift/cluster-baremetal-operator/pull/501)
* [OCPBUGS-58315](https://issues.redhat.com/browse/OCPBUGS-58315): Bump github.com/go-errors/errors to v1.5.1 [#492](https://github.com/openshift/cluster-baremetal-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/e30ce1d8ca759e861e5094e8b3665d1da6d3474f...c6bff75babbad0d352e2b0ee6db0416d3cf19c0e)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)

* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to leverage v1 admissionregistration group [#241](https://github.com/openshift/cluster-api/pull/241)
* [Full changelog](https://github.com/openshift/cluster-api/compare/d05a6defdc3602918de8db0f93744ca8f6b2b820...63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/1f8672a663e5c0ad873eb9c3760ed430c7369fa5)

* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Add Service using common resource templating [#405](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/405)
* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Update service selector to match deployment label [#403](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/403)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33856906970a98ac05a042a8058902458d623e0f...1f8672a663e5c0ad873eb9c3760ed430c7369fa5)


### [cluster-config-api](https://github.com/openshift/api/tree/e16f6cc860949caf863e79bd838491cdcb6e9641)

* [OCPBUGS-52347](https://issues.redhat.com/browse/OCPBUGS-52347): Add CEL validation for RegistrySources in Image API [#2218](https://github.com/openshift/api/pull/2218)
* [OCPBUGS-60904](https://issues.redhat.com/browse/OCPBUGS-60904): MachineOSConfig name should match MachineConfigPool [#2458](https://github.com/openshift/api/pull/2458)
* Update crd-schema.json to release 1.33 branch [#2459](https://github.com/openshift/api/pull/2459)
* : add OnClusterBuilds to default config [#2365](https://github.com/openshift/api/pull/2365)
* [Full changelog](https://github.com/openshift/api/compare/9fce26d4cc74cfa6bfa2b9af8891a66a90a3e31f...e16f6cc860949caf863e79bd838491cdcb6e9641)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/0f87d4a7da8222d0a1fd21c3c8ced0f0ca3927fe)

* [OCPBUGS-61235](https://issues.redhat.com/browse/OCPBUGS-61235): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1478](https://github.com/openshift/cluster-etcd-operator/pull/1478)
* [OCPBUGS-59992](https://issues.redhat.com/browse/OCPBUGS-59992): fix ordering on bootstrap IP selection [#1458](https://github.com/openshift/cluster-etcd-operator/pull/1458)
* [OCPBUGS-59803](https://issues.redhat.com/browse/OCPBUGS-59803): add missing ports to svc and pod spec [#1455](https://github.com/openshift/cluster-etcd-operator/pull/1455)
* [OCPBUGS-56834](https://issues.redhat.com/browse/OCPBUGS-56834): etcd pod containers do not start when tls min version is 1.3 [#1428](https://github.com/openshift/cluster-etcd-operator/pull/1428)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2c2910d7c3095706aaf66ddbcf3c1a31285b3567...0f87d4a7da8222d0a1fd21c3c8ced0f0ca3927fe)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/b6ad4b065b9f9677f0b33d625f9ae9dc36ccc3fc)

* [OCPBUGS-61039](https://issues.redhat.com/browse/OCPBUGS-61039): Set goaway chance to 0.001 [#1912](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1912)
* [OCPBUGS-60176](https://issues.redhat.com/browse/OCPBUGS-60176): Add missing service ports to apiserver service [#1888](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1888)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/383f10176f2509babc9dd49d135fa8bb0c2c277e...b6ad4b065b9f9677f0b33d625f9ae9dc36ccc3fc)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/a2cbb5725fe5e560ba40d884cfd079b3f8391f03)

* [OCPBUGS-60131](https://issues.redhat.com/browse/OCPBUGS-60131): Missing endpoint slices for open ports the operator uses [#852](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/852)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1...a2cbb5725fe5e560ba40d884cfd079b3f8391f03)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/75efec0f49b35d12e1f2c0d4e9e585729bbd68b1)

* [OCPBUGS-63410](https://issues.redhat.com/browse/OCPBUGS-63410): [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy [#2724](https://github.com/openshift/cluster-monitoring-operator/pull/2724)
* [OCPBUGS-63017](https://issues.redhat.com/browse/OCPBUGS-63017): test: remove image registry e2e tests [#2711](https://github.com/openshift/cluster-monitoring-operator/pull/2711)
* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2669](https://github.com/openshift/cluster-monitoring-operator/pull/2669)
* [OCPBUGS-59962](https://issues.redhat.com/browse/OCPBUGS-59962): operator: increase wait time till degraded to max 4 times 5m [#2633](https://github.com/openshift/cluster-monitoring-operator/pull/2633)
* [OCPBUGS-56251](https://issues.redhat.com/browse/OCPBUGS-56251): set upgradable false when alertmanager v1 is specified [#2591](https://github.com/openshift/cluster-monitoring-operator/pull/2591)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4482c5f2cae50a25d67cae3ad74fbbc13ce0673a...75efec0f49b35d12e1f2c0d4e9e585729bbd68b1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/eec368f2985d93c136785b6f37bdd39559a1cf4c)

* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Add drop flows for GARP [#2810](https://github.com/openshift/cluster-network-operator/pull/2810)
* [OCPBUGS-60984](https://issues.redhat.com/browse/OCPBUGS-60984): Update CNO reviewers/approvers [#2766](https://github.com/openshift/cluster-network-operator/pull/2766)
* [OCPBUGS-60795](https://issues.redhat.com/browse/OCPBUGS-60795): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2782](https://github.com/openshift/cluster-network-operator/pull/2782)
* [OCPBUGS-47651](https://issues.redhat.com/browse/OCPBUGS-47651): Re-disable metrics server [#2622](https://github.com/openshift/cluster-network-operator/pull/2622)
* [OCPBUGS-58047](https://issues.redhat.com/browse/OCPBUGS-58047): Add cert-rotation script into cno [#2702](https://github.com/openshift/cluster-network-operator/pull/2702)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bf1d73069e4905749e2f15f88aa1e7590d489baf...eec368f2985d93c136785b6f37bdd39559a1cf4c)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a56352c7bda47c69fe34c3d9189071430b71fc94)

* [OCPBUGS-61078](https://issues.redhat.com/browse/OCPBUGS-61078): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1388) [#1388](https://github.com/openshift/cluster-node-tuning-operator/pull/1388)
* E2E: skip stalld test case checking sched_fifo (#1387) [#1387](https://github.com/openshift/cluster-node-tuning-operator/pull/1387)
* e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) [#1355](https://github.com/openshift/cluster-node-tuning-operator/pull/1355)
* : OCPBUGS-57947: kernelPageSize + hugepages combinations validation [3/3] (#1343) [#1343](https://github.com/openshift/cluster-node-tuning-operator/pull/1343)
* : OCPBUGS-57947: Support hugepage size selection for ARM-based clusters [2/3] (#1342) [#1342](https://github.com/openshift/cluster-node-tuning-operator/pull/1342)
* [OCPBUGS-57947](https://issues.redhat.com/browse/OCPBUGS-57947): CNF-18142: Add kernel page size field [1/3] (#1341) [#1341](https://github.com/openshift/cluster-node-tuning-operator/pull/1341)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/c004ea7ea486e983d296311ca2b40cc9a431c394...a56352c7bda47c69fe34c3d9189071430b71fc94)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)

* [OCPBUGS-57767](https://issues.redhat.com/browse/OCPBUGS-57767): fix olm.maxOpenShiftVersion float parsing [#125](https://github.com/openshift/cluster-olm-operator/pull/125)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/0ffe0aed115535e9489b6f309ac4d2c6c976adf3...88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/43fe40ddc11a8453f83273bbea82ae6295b496f9)

* [OCPBUGS-62666](https://issues.redhat.com/browse/OCPBUGS-62666): Move metrics to vsphere driver [#632](https://github.com/openshift/cluster-storage-operator/pull/632)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/65d06444110f8044a84ccf4f977ee9520f2bdf89...43fe40ddc11a8453f83273bbea82ae6295b496f9)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/69444928d785cac03ed223576500586ea4d7ee55)

* [OCPBUGS-62869](https://issues.redhat.com/browse/OCPBUGS-62869): disable metrics auth for hypershift clusters [#1242](https://github.com/openshift/cluster-version-operator/pull/1242)
* [OCPBUGS-58450](https://issues.redhat.com/browse/OCPBUGS-58450): Failing=Unknown upon long CO updating [#1211](https://github.com/openshift/cluster-version-operator/pull/1211)
* [OCPBUGS-60222](https://issues.redhat.com/browse/OCPBUGS-60222): CVO protects /metrics with authorization [#1223](https://github.com/openshift/cluster-version-operator/pull/1223)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/94c0e705d520b0eeb765f72de2dae2cd6f1159bb...69444928d785cac03ed223576500586ea4d7ee55)


### [console](https://github.com/openshift/console/tree/924130a79f8dd519f741bf7017055d8313e1927c)

* [OCPBUGS-63247](https://issues.redhat.com/browse/OCPBUGS-63247): fix bug where Roles list was displaying invalid data f… [#15619](https://github.com/openshift/console/pull/15619)
* [OCPBUGS-63041](https://issues.redhat.com/browse/OCPBUGS-63041): switch to dev perspective for `/dev-monitoring` [#15601](https://github.com/openshift/console/pull/15601)
* [OCPBUGS-44156](https://issues.redhat.com/browse/OCPBUGS-44156): bump dompurify to latest [#15589](https://github.com/openshift/console/pull/15589)
* [OCPBUGS-62326](https://issues.redhat.com/browse/OCPBUGS-62326): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15544](https://github.com/openshift/console/pull/15544)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Update CHANGELOG for 4.18 plugin SDK package publish [#15516](https://github.com/openshift/console/pull/15516)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Fix bug with Console provided PatternFly shared modules [#15479](https://github.com/openshift/console/pull/15479)
* [OCPBUGS-61697](https://issues.redhat.com/browse/OCPBUGS-61697): Remove ancient `X-XSS-Protection` header [#15493](https://github.com/openshift/console/pull/15493)
* [OCPBUGS-60236](https://issues.redhat.com/browse/OCPBUGS-60236): Make sure CSP violations are only reported to telemetry once per day per browser [#15453](https://github.com/openshift/console/pull/15453)
* NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish [#15456](https://github.com/openshift/console/pull/15456)
* [OCPBUGS-50983](https://issues.redhat.com/browse/OCPBUGS-50983): Store Topology sidebar alert in the localStorage [#15431](https://github.com/openshift/console/pull/15431)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Added patternfly/react-topology to shared module list of dynamic plugin sdk [#15371](https://github.com/openshift/console/pull/15371)
* [OCPBUGS-50570](https://issues.redhat.com/browse/OCPBUGS-50570): Fix regression where plugins were not tracking CSP violation status a… [#14754](https://github.com/openshift/console/pull/14754)
* [OCPBUGS-60140](https://issues.redhat.com/browse/OCPBUGS-60140): Recognize Detached BMH status [#15362](https://github.com/openshift/console/pull/15362)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Add BaseNode in topology folder into Dynamic Plugin SDK [#15369](https://github.com/openshift/console/pull/15369)
* : OCPBUGS-60278: Fix i18n string for event stream [#15403](https://github.com/openshift/console/pull/15403)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose OdcBaseNode through the dynamic plugin SDK [#15370](https://github.com/openshift/console/pull/15370)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose topology components and utils via plugin SDK internal package [#14777](https://github.com/openshift/console/pull/14777)
* [OCPBUGS-58364](https://issues.redhat.com/browse/OCPBUGS-58364): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15272](https://github.com/openshift/console/pull/15272)
* [OCPBUGS-59778](https://issues.redhat.com/browse/OCPBUGS-59778): add data-test attrs to console plugins table [#15327](https://github.com/openshift/console/pull/15327)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#15330](https://github.com/openshift/console/pull/15330)
* [OCPBUGS-59501](https://issues.redhat.com/browse/OCPBUGS-59501): Add the Origin header to the HeaderBlacklist in the co… [#15295](https://github.com/openshift/console/pull/15295)
* [OCPBUGS-59443](https://issues.redhat.com/browse/OCPBUGS-59443): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15290](https://github.com/openshift/console/pull/15290)
* [OCPBUGS-59446](https://issues.redhat.com/browse/OCPBUGS-59446): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15292](https://github.com/openshift/console/pull/15292)
* [OCPBUGS-58457](https://issues.redhat.com/browse/OCPBUGS-58457): fix bug where / in console.tab/horizontalNav href brea… [#15250](https://github.com/openshift/console/pull/15250)
* [OCPBUGS-58203](https://issues.redhat.com/browse/OCPBUGS-58203): OpenShift console PVC clone cannot use B as the unit [#15215](https://github.com/openshift/console/pull/15215)
* [OCPBUGS-58317](https://issues.redhat.com/browse/OCPBUGS-58317): Implement sessions in openshift authenticator [#15237](https://github.com/openshift/console/pull/15237)
* [OCPBUGS-58088](https://issues.redhat.com/browse/OCPBUGS-58088): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15202](https://github.com/openshift/console/pull/15202)
* [OCPBUGS-58089](https://issues.redhat.com/browse/OCPBUGS-58089): Getting "Oh no something went wrong" error message in web console. [#15203](https://github.com/openshift/console/pull/15203)
* [OCPBUGS-57931](https://issues.redhat.com/browse/OCPBUGS-57931): Add the ability to launch multiple modals with useModal hook [#15196](https://github.com/openshift/console/pull/15196)
* [OCPBUGS-57580](https://issues.redhat.com/browse/OCPBUGS-57580): Update vSphere configuration form to support CM YAML f… [#15191](https://github.com/openshift/console/pull/15191)
* [OCPBUGS-57743](https://issues.redhat.com/browse/OCPBUGS-57743): Fix TypeError Cannot read properties of null (reading 'metadata') [#15188](https://github.com/openshift/console/pull/15188)
* [OCPBUGS-57209](https://issues.redhat.com/browse/OCPBUGS-57209): Add flags in console static plugin for all the components of this epic [#15160](https://github.com/openshift/console/pull/15160)
* [OCPBUGS-36173](https://issues.redhat.com/browse/OCPBUGS-36173): Secret key with binary file changes when edited via Console. [#15178](https://github.com/openshift/console/pull/15178)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/9e5b4ae6d5a5b662337844ee0a26bc892f51cfcf...924130a79f8dd519f741bf7017055d8313e1927c)


### [console-operator](https://github.com/openshift/console-operator/tree/60dd3f557240d2408b7c12409d727732f8b355a3)

* [NETOBSERV-2023](https://issues.redhat.com/browse/NETOBSERV-2023), [OCPBUGS-60304](https://issues.redhat.com/browse/OCPBUGS-60304): Implement a quickstart for netobserv operator [#997](https://github.com/openshift/console-operator/pull/997)
* [OCPBUGS-60081](https://issues.redhat.com/browse/OCPBUGS-60081): Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console [#1031](https://github.com/openshift/console-operator/pull/1031)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#1027](https://github.com/openshift/console-operator/pull/1027)
* [OCPBUGS-45869](https://issues.redhat.com/browse/OCPBUGS-45869): don't set current clients when no OIDC providers are configured [#948](https://github.com/openshift/console-operator/pull/948)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/10a0cc293e61b8125ebec8c9c98ede22a0824d06...60dd3f557240d2408b7c12409d727732f8b355a3)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c)

* [OCPBUGS-60871](https://issues.redhat.com/browse/OCPBUGS-60871): [release-4.18] host-device: Return interface name in result [#208](https://github.com/openshift/containernetworking-plugins/pull/208)
* [OCPBUGS-56928](https://issues.redhat.com/browse/OCPBUGS-56928): bridge: Add option to enable port isolation [#203](https://github.com/openshift/containernetworking-plugins/pull/203)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/59ee57ce5be64e6b0227140b84bcc48eb90f40d2...e8ca1d70c43f33cd0e75c776e2a24afbec61b46c)


### [coredns](https://github.com/openshift/coredns/tree/8ca7f02b8becb40f7a9919243000e2620d7036d4)

* [OCPBUGS-60462](https://issues.redhat.com/browse/OCPBUGS-60462): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#152](https://github.com/openshift/coredns/pull/152)
* [Full changelog](https://github.com/openshift/coredns/compare/eb75d9b4f41a5ce0258d6f245c6206715ecb283b...8ca7f02b8becb40f7a9919243000e2620d7036d4)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/8857214a0160e383269525675ecbe6be40ca6f80)

* [OCPBUGS-57800](https://issues.redhat.com/browse/OCPBUGS-57800): Rebase release-4.18 onto release-1.31 [#322](https://github.com/openshift/cloud-provider-openstack/pull/322)
* [OCPBUGS-58835](https://issues.redhat.com/browse/OCPBUGS-58835): CARRY: don't ignore json files [#339](https://github.com/openshift/cloud-provider-openstack/pull/339)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/b52ca7e89560678f3420aac02cfdb11febcfae67...8857214a0160e383269525675ecbe6be40ca6f80)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/a14236907d2e7f3f0342d399f01ad38ee66b3346)

* [OCPBUGS-62467](https://issues.redhat.com/browse/OCPBUGS-62467): Requeue PVC over PV creation [#176](https://github.com/openshift/csi-external-resizer/pull/176)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/cca3837a84fcade22bd7b935c68d02904faa12aa...a14236907d2e7f3f0342d399f01ad38ee66b3346)


### [docker-builder](https://github.com/openshift/builder/tree/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)

* [OCPBUGS-57758](https://issues.redhat.com/browse/OCPBUGS-57758): S2I build cpu limits observed by assemble are limited to 1 cpu [#473](https://github.com/openshift/builder/pull/473)
* [Full changelog](https://github.com/openshift/builder/compare/62f644bcf0b0010f51765b48a7dab28426ae2933...a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)


### [docker-registry](https://github.com/openshift/image-registry/tree/cfa51ab4b60fc0e836547626a5fd02b97ee82708)

* [IR-526](https://issues.redhat.com/browse/IR-526): remove AWS region check [#437](https://github.com/openshift/image-registry/pull/437)
* [Full changelog](https://github.com/openshift/image-registry/compare/0a39d2c759b311e98a1f4de4c7ba1cdeddba47bf...cfa51ab4b60fc0e836547626a5fd02b97ee82708)


### [etcd](https://github.com/openshift/etcd/tree/b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)

* [OCPBUGS-57112](https://issues.redhat.com/browse/OCPBUGS-57112): Updating ose-etcd-container image to be consistent with ART for 4.18 [#333](https://github.com/openshift/etcd/pull/333)
* [Full changelog](https://github.com/openshift/etcd/compare/416376871d09278b18ae16520363ea6c8b3c71a8...b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/1fff69026f5478680ee535531ab8dc2fb76f2f5c)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#247](https://github.com/openshift/cluster-api-provider-gcp/pull/247)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/af54f5287c7d363c6bc7abe4ad9e72f4131d534c...1fff69026f5478680ee535531ab8dc2fb76f2f5c)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b2f858ba546520410f391b5f6afdbe0b1562903d)

* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Add max-concurrent-reconciles flag to machine actuator [#126](https://github.com/openshift/machine-api-provider-gcp/pull/126)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01f6b419357a539389704fcec9872997f808e540...b2f858ba546520410f391b5f6afdbe0b1562903d)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/0ee04c7e38c5c04c6ca854ce4a095d58d3ea6c53)

* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Backport StreamingCollectionEncoding for JSON and protobuf [#2483](https://github.com/openshift/kubernetes/pull/2483)
* [OCPBUGS-61557](https://issues.redhat.com/browse/OCPBUGS-61557): Rebase v1.31.13 [#2465](https://github.com/openshift/kubernetes/pull/2465)
* Revert "UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated."" [#2448](https://github.com/openshift/kubernetes/pull/2448)
* [OCPBUGS-60511](https://issues.redhat.com/browse/OCPBUGS-60511): Bump to v1.31.12 [#2440](https://github.com/openshift/kubernetes/pull/2440)
* [OCPBUGS-60524](https://issues.redhat.com/browse/OCPBUGS-60524): podresources: list: use active pods [#2413](https://github.com/openshift/kubernetes/pull/2413)
* UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated." [#2422](https://github.com/openshift/kubernetes/pull/2422)
* [OCPBUGS-57488](https://issues.redhat.com/browse/OCPBUGS-57488): UPSTREAM: &lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated. [#2333](https://github.com/openshift/kubernetes/pull/2333)
* [OCPBUGS-57499](https://issues.redhat.com/browse/OCPBUGS-57499): UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image [#2399](https://github.com/openshift/kubernetes/pull/2399)
* [OCPBUGS-44757](https://issues.redhat.com/browse/OCPBUGS-44757): Adjust NodeMonitorGracePeriod to 50s [#2385](https://github.com/openshift/kubernetes/pull/2385)
* [OCPBUGS-59535](https://issues.redhat.com/browse/OCPBUGS-59535): Rebase v1.31.11 to 4.18 [#2377](https://github.com/openshift/kubernetes/pull/2377)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#2348](https://github.com/openshift/kubernetes/pull/2348)
* [OCPBUGS-57070](https://issues.redhat.com/browse/OCPBUGS-57070): UPSTREAM: &lt;carry&gt;: Bump cadvisor version to fix container_fs metrics [#2332](https://github.com/openshift/kubernetes/pull/2332)
* [Full changelog](https://github.com/openshift/kubernetes/compare/db4023c383e559c6310710cd16a441912fc9c06f...0ee04c7e38c5c04c6ca854ce4a095d58d3ea6c53)


### [hypershift](https://github.com/openshift/hypershift/tree/03122e61f5ab834d937b9b909626113c7dae56e6)

* [CNTRLPLANE-1424](https://issues.redhat.com/browse/CNTRLPLANE-1424): feat(konflux): tag MCE HO images with latest [#6837](https://github.com/openshift/hypershift/pull/6837)
* [OCPBUGS-62816](https://issues.redhat.com/browse/OCPBUGS-62816): set default goaway-chance to 0.001 [#6950](https://github.com/openshift/hypershift/pull/6950)
* [OCPBUGS-61904](https://issues.redhat.com/browse/OCPBUGS-61904): resolve MIRRORED_RELEASE_IMAGE flapping [#6858](https://github.com/openshift/hypershift/pull/6858)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Sync RBAC for expansion support in kubevirt CSI driver [#6355](https://github.com/openshift/hypershift/pull/6355)
* [OCPBUGS-61568](https://issues.redhat.com/browse/OCPBUGS-61568): [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution [#6793](https://github.com/openshift/hypershift/pull/6793)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): ci: konflux multi-arch images [#6867](https://github.com/openshift/hypershift/pull/6867)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): Use the common konflux pipeline and update CLI dockerfile [#6832](https://github.com/openshift/hypershift/pull/6832)
* NO-JIRA: chore(deps): update konflux references [#6667](https://github.com/openshift/hypershift/pull/6667)
* [OCPBUGS-57142](https://issues.redhat.com/browse/OCPBUGS-57142): [release-4.18] HCP payload doesn't respect multiple mirrors [#6672](https://github.com/openshift/hypershift/pull/6672)
* [OCPBUGS-60485](https://issues.redhat.com/browse/OCPBUGS-60485): feat(validations): add wildcard support to DNS SAN conflict detection [#6649](https://github.com/openshift/hypershift/pull/6649)
* [OCPBUGS-60148](https://issues.redhat.com/browse/OCPBUGS-60148): Always compress and encode payload in token secret for inplace upgrades [#6721](https://github.com/openshift/hypershift/pull/6721)
* [OCPBUGS-60923](https://issues.redhat.com/browse/OCPBUGS-60923): MCE 2.8 konflux for hcp-cli [#6700](https://github.com/openshift/hypershift/pull/6700)
* [CNTRLPLANE-1333](https://issues.redhat.com/browse/CNTRLPLANE-1333): New API to support specifying cluster-autoscaler flags [#6641](https://github.com/openshift/hypershift/pull/6641)
* [OCPBUGS-60458](https://issues.redhat.com/browse/OCPBUGS-60458): Update PSA from v1beta1 to v1 [#6644](https://github.com/openshift/hypershift/pull/6644)
* [CNTRLPLANE-1269](https://issues.redhat.com/browse/CNTRLPLANE-1269): chore(deps): update konflux references [#6658](https://github.com/openshift/hypershift/pull/6658)
* [CNTRLPLANE-1205](https://issues.redhat.com/browse/CNTRLPLANE-1205): Add missing mce-2.8 pipeline [#6656](https://github.com/openshift/hypershift/pull/6656)
* [OCPBUGS-59503](https://issues.redhat.com/browse/OCPBUGS-59503): [release-4.18] Support proxy authentication when user/pass is included in URL [#6460](https://github.com/openshift/hypershift/pull/6460)
* [CNTRLPLANE-1229](https://issues.redhat.com/browse/CNTRLPLANE-1229): Move CPO pipeline to hermetic builds [#6597](https://github.com/openshift/hypershift/pull/6597)
* [OCPBUGS-57818](https://issues.redhat.com/browse/OCPBUGS-57818): Reuse hosted cluster release and metadata providers [#6301](https://github.com/openshift/hypershift/pull/6301)
* [OCPBUGS-58126](https://issues.redhat.com/browse/OCPBUGS-58126): Don't use /version for haproxy health checks [#6323](https://github.com/openshift/hypershift/pull/6323)
* [Full changelog](https://github.com/openshift/hypershift/compare/6279e093a11b0893abeb77bebef6649d214dae0b...03122e61f5ab834d937b9b909626113c7dae56e6)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/c7d883c586f548093481d87d7226d875502b30da)

* [OCPBUGS-58741](https://issues.redhat.com/browse/OCPBUGS-58741): bump github.com/golang/glog to version v1.2.4 [#104](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/104)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/1b9ad923f69b5e041777355bee96e918269d67e7...c7d883c586f548093481d87d7226d875502b30da)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/1c7bc07e69c1e74a36b39b31f878da6391fdeefe)

* [OCPBUGS-55297](https://issues.redhat.com/browse/OCPBUGS-55297): [IBM VPC] set offlineExpansion to false in e2e test manifest [#144](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/144)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/feae260577a5ed5428432de9b7ca1439c98064de...1c7bc07e69c1e74a36b39b31f878da6391fdeefe)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/5df161611ece493f54bb8a14963449102b763836)

* [OCPBUGS-51825](https://issues.redhat.com/browse/OCPBUGS-51825): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#120](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/120)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#119](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/119)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/2ba764f9a38c27f82a9198472c584fa633c8f2cd...5df161611ece493f54bb8a14963449102b763836)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/e6eddf85c26eb056108b67fdad43bbbd2d9b4718)

* [OCPBUGS-47135](https://issues.redhat.com/browse/OCPBUGS-47135): CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] [#69](https://github.com/openshift/machine-api-provider-ibmcloud/pull/69)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f...e6eddf85c26eb056108b67fdad43bbbd2d9b4718)


### [insights-operator](https://github.com/openshift/insights-operator/tree/5a7544487fd5944735bf3ff961c383700590b76b)

* [OCPBUGS-61972](https://issues.redhat.com/browse/OCPBUGS-61972): add missing permissions for replicasets and events [#1146](https://github.com/openshift/insights-operator/pull/1146)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7f9ed155f7361fb0a16f666fd53111cfb16d4cca...5a7544487fd5944735bf3ff961c383700590b76b)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/5a14ea9d338b2582c7c2a8f89f351a0c30f56371)

* [OCPBUGS-60930](https://issues.redhat.com/browse/OCPBUGS-60930): fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 [#125](https://github.com/openshift/kube-rbac-proxy/pull/125)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/526498ab32996a0f67a96530ad7173f955e3fbe2...5a14ea9d338b2582c7c2a8f89f351a0c30f56371)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). [#225](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/225)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8dec42d36f9e26487112aeac870767a5fedb8021...c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/609dbab54830f51bf73f382fb64911cb0e6b30ac)

* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Enabled 10 concurrent reconciles on GCP [#1392](https://github.com/openshift/machine-api-operator/pull/1392)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc...609dbab54830f51bf73f382fb64911cb0e6b30ac)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6027b8f9bec4175d8a4059c1f8a86569731ddafb)

* [OCPBUGS-63346](https://issues.redhat.com/browse/OCPBUGS-63346): Invalid architecture value found in annotation during 4.19 update [#5366](https://github.com/openshift/machine-config-operator/pull/5366)
* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Enable debug logging for nodeip-configuration [#5220](https://github.com/openshift/machine-config-operator/pull/5220)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5325](https://github.com/openshift/machine-config-operator/pull/5325)
* [OCPBUGS-62845](https://issues.redhat.com/browse/OCPBUGS-62845): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5341](https://github.com/openshift/machine-config-operator/pull/5341)
* [OCPBUGS-62499](https://issues.redhat.com/browse/OCPBUGS-62499): Add /etc/docker/certs.d to template [#5320](https://github.com/openshift/machine-config-operator/pull/5320)
* [OCPBUGS-62637](https://issues.redhat.com/browse/OCPBUGS-62637): Machine-config controller should actively manage cordon while draining [#5322](https://github.com/openshift/machine-config-operator/pull/5322)
* [OCPBUGS-62350](https://issues.redhat.com/browse/OCPBUGS-62350): Add mcd_local_unsupported_packages recording rule [#5315](https://github.com/openshift/machine-config-operator/pull/5315)
* [OCPBUGS-62321](https://issues.redhat.com/browse/OCPBUGS-62321): Add control-plane label for master nodes on legacy clusters [#5314](https://github.com/openshift/machine-config-operator/pull/5314)
* [OCPBUGS-61840](https://issues.redhat.com/browse/OCPBUGS-61840): Override NMState service definition [#5288](https://github.com/openshift/machine-config-operator/pull/5288)
* [OCPBUGS-57357](https://issues.redhat.com/browse/OCPBUGS-57357): Race in configure-ovs.sh affects bonding interface configuration. [#5118](https://github.com/openshift/machine-config-operator/pull/5118)
* [OCPBUGS-59929](https://issues.redhat.com/browse/OCPBUGS-59929), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5207](https://github.com/openshift/machine-config-operator/pull/5207)
* [OCPBUGS-60034](https://issues.redhat.com/browse/OCPBUGS-60034): Add workaround fix for static pod race [#5212](https://github.com/openshift/machine-config-operator/pull/5212)
* [OCPBUGS-56751](https://issues.redhat.com/browse/OCPBUGS-56751): Support NODEIP_HINT in IPI deployments too [#5081](https://github.com/openshift/machine-config-operator/pull/5081)
* [OCPBUGS-55246](https://issues.redhat.com/browse/OCPBUGS-55246): kubelet: readonly mounts for criometricsproxy [#4998](https://github.com/openshift/machine-config-operator/pull/4998)
* [OCPBUGS-58067](https://issues.redhat.com/browse/OCPBUGS-58067): Ensure the build controller restarts on upgrade [#5140](https://github.com/openshift/machine-config-operator/pull/5140)
* [OCPBUGS-57328](https://issues.redhat.com/browse/OCPBUGS-57328): Do not set cpu system reserve below the default value [#5152](https://github.com/openshift/machine-config-operator/pull/5152)
* [OCPBUGS-56624](https://issues.redhat.com/browse/OCPBUGS-56624): Give keepalived container chroot cap [#5073](https://github.com/openshift/machine-config-operator/pull/5073)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#5138](https://github.com/openshift/machine-config-operator/pull/5138)
* [OCPBUGS-57935](https://issues.redhat.com/browse/OCPBUGS-57935): add MachineConfiguration to CO related objects [#5134](https://github.com/openshift/machine-config-operator/pull/5134)
* [OCPBUGS-54463](https://issues.redhat.com/browse/OCPBUGS-54463): Update desired config in MCN on OCL update [#5026](https://github.com/openshift/machine-config-operator/pull/5026)
* [OCPBUGS-57900](https://issues.redhat.com/browse/OCPBUGS-57900): MCC complains about v1 MachineOSConfig in default featureset [#5131](https://github.com/openshift/machine-config-operator/pull/5131)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/efe259e04ba98784102ba603941ecbbb75233c6b...6027b8f9bec4175d8a4059c1f8a86569731ddafb)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/fafea6bc427827c137eb312d9a8d31ad2893114e)

* NO-JIRA: update i18n strings [#508](https://github.com/openshift/monitoring-plugin/pull/508)
* [OCPBUGS-60199](https://issues.redhat.com/browse/OCPBUGS-60199): feat: add alerting rules tab to dev console [#493](https://github.com/openshift/monitoring-plugin/pull/493)
* [OCPBUGS-54314](https://issues.redhat.com/browse/OCPBUGS-54314): Fix "Export as CSV" [#461](https://github.com/openshift/monitoring-plugin/pull/461)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/eb6123bd41269ccc6f5abddadfbc8e3af4481e09...fafea6bc427827c137eb312d9a8d31ad2893114e)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0d7ea6c766349243ade17707af7bd2b43c3b4b8e)

* [OCPBUGS-58771](https://issues.redhat.com/browse/OCPBUGS-58771): Update the github.com/golang/glog module to v1.2.4 [#101](https://github.com/openshift/multus-admission-controller/pull/101)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/e46a6d7d6f2ea7baeff193c0a28901bc34ea0d43...0d7ea6c766349243ade17707af7bd2b43c3b4b8e)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/3362bbc4c47ad7aec4f9551355e32870c30ab7c8)

* [OCPBUGS-54939](https://issues.redhat.com/browse/OCPBUGS-54939): [release-4.18]: Support default ports value [#68](https://github.com/openshift/multus-networkpolicy/pull/68)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32...3362bbc4c47ad7aec4f9551355e32870c30ab7c8)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/86191ded510a5ec05f05b77ae847b86f50673258)

* [OCPBUGS-59697](https://issues.redhat.com/browse/OCPBUGS-59697): Prevent accidental IP deallocation in statefulsets [#376](https://github.com/openshift/whereabouts-cni/pull/376)
* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): The node slice controller should only process valid whereabouts confi… [#381](https://github.com/openshift/whereabouts-cni/pull/381)
* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): Add nodeslicecontroller bin to dockerfile [#373](https://github.com/openshift/whereabouts-cni/pull/373)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/ac43b0f8b214a013572af900aef3333f10447fea...86191ded510a5ec05f05b77ae847b86f50673258)


### [must-gather](https://github.com/openshift/must-gather/tree/02e536cc7b3a6632da0643ab78f8dd6570e7f122)

* [OCPBUGS-46437](https://issues.redhat.com/browse/OCPBUGS-46437): Separate resources with comma to fix malformed inspect [#470](https://github.com/openshift/must-gather/pull/470)
* [Full changelog](https://github.com/openshift/must-gather/compare/b851bd3589eb0f80471d4de2114a7635b0d12663...02e536cc7b3a6632da0643ab78f8dd6570e7f122)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)

* [OCPBUGS-62793](https://issues.redhat.com/browse/OCPBUGS-62793): Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted [#99](https://github.com/openshift/bond-cni/pull/99)
* [OCPBUGS-58095](https://issues.redhat.com/browse/OCPBUGS-58095): Bump github.com/containernetworking/plugins from to 1.7.1 [#79](https://github.com/openshift/bond-cni/pull/79)
* [OCPBUGS-57794](https://issues.redhat.com/browse/OCPBUGS-57794): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 [#74](https://github.com/openshift/bond-cni/pull/74)
* NO-JIRA: Add ci-operator yaml file [#78](https://github.com/openshift/bond-cni/pull/78)
* [Full changelog](https://github.com/openshift/bond-cni/compare/9506a1ff3e0b3b1cdddbd0fbb0ed687e289166b0...e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/11e2dec958aa2adcad07b9eecaf8f50479e0880a)

* [OCPBUGS-58781](https://issues.redhat.com/browse/OCPBUGS-58781): Bump github.com/golang/glog to v1.2.4 (#111) [#111](https://github.com/openshift/network-metrics-daemon/pull/111)
* [OCPBUGS-60174](https://issues.redhat.com/browse/OCPBUGS-60174): Replace e2e test image (#120) [#120](https://github.com/openshift/network-metrics-daemon/pull/120)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/e4c214c3736fcb69b3160421f06e9b1a837b300b...11e2dec958aa2adcad07b9eecaf8f50479e0880a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/15535681de838e97e0a137fb0cc7123746019b08)

* [OCPBUGS-60178](https://issues.redhat.com/browse/OCPBUGS-60178): Fix ingress details [#264](https://github.com/openshift/networking-console-plugin/pull/264)
* [OCPBUGS-60124](https://issues.redhat.com/browse/OCPBUGS-60124): Fix requiremenets with no value [#259](https://github.com/openshift/networking-console-plugin/pull/259)
* [OCPBUGS-57286](https://issues.redhat.com/browse/OCPBUGS-57286): Fix pod context [#251](https://github.com/openshift/networking-console-plugin/pull/251)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9404c2330085c3dd42504f34c608974ffb957d6e...15535681de838e97e0a137fb0cc7123746019b08)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/9225edb9821cab67ffa628b05e0eed67973436f0)

* [OCPBUGS-61444](https://issues.redhat.com/browse/OCPBUGS-61444): Update x/crypto to v0.31.0 [#333](https://github.com/openshift/oauth-proxy/pull/333)
* [OCPBUGS-57172](https://issues.redhat.com/browse/OCPBUGS-57172): 4.18 kube 1.31 [#317](https://github.com/openshift/oauth-proxy/pull/317)
* [OCPBUGS-58312](https://issues.redhat.com/browse/OCPBUGS-58312): fix e2e tests [#325](https://github.com/openshift/oauth-proxy/pull/325)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/cbd44ad9f0e433d32ff16a2691c6278298afe89a...9225edb9821cab67ffa628b05e0eed67973436f0)


### [oauth-server](https://github.com/openshift/oauth-server/tree/287caff3aef5b5f8535ac2bf1242671a5c7701b7)

* [OCPBUGS-57300](https://issues.redhat.com/browse/OCPBUGS-57300): Updating oauth-server-container image to be consistent with ART for 4.18 [#186](https://github.com/openshift/oauth-server/pull/186)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3bedb4f45cbdaa50384cf7c7284617fb8a414cf2...287caff3aef5b5f8535ac2bf1242671a5c7701b7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/0c70491887c3c68191844a8ec80f2bde7b255723)

* [OCPBUGS-62696](https://issues.redhat.com/browse/OCPBUGS-62696): v2/cli: show binary version in output [#1286](https://github.com/openshift/oc-mirror/pull/1286)
* [OCPBUGS-62711](https://issues.redhat.com/browse/OCPBUGS-62711): generate the archive only after mirroring [#1287](https://github.com/openshift/oc-mirror/pull/1287)
* [OCPBUGS-62432](https://issues.redhat.com/browse/OCPBUGS-62432): changes the warning message of 4.21 [#1278](https://github.com/openshift/oc-mirror/pull/1278)
* And 12 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/1b2084872f25a83e88ea1586afa0b5bda01c407c...0c70491887c3c68191844a8ec80f2bde7b255723)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/180aa92c13fda1aa1ae35205c9b380a4ead41e8b)

* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#139](https://github.com/openshift/operator-framework-catalogd/pull/139)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/9f981b3ee5822098c6e648aa30742da07318f954...180aa92c13fda1aa1ae35205c9b380a4ead41e8b)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/48a1e9247ab72edf8d61fa2376df5e6d9e16e53e)

* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#509](https://github.com/openshift/operator-framework-operator-controller/pull/509)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/ea60189f95af09f3c5c50c8de41d8f601bc5e881...48a1e9247ab72edf8d61fa2376df5e6d9e16e53e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/5d7a65bad932a0434928571b74db27588bb9be2d)

* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Wire dry run option to Image API server operations [#531](https://github.com/openshift/openshift-apiserver/pull/531)
* [OCPBUGS-56609](https://issues.redhat.com/browse/OCPBUGS-56609): Fix image reference in TestImageStreamImportQuayIO [#514](https://github.com/openshift/openshift-apiserver/pull/514)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/1872fbf5967acd6485589c339ac8cb6bd156ad72...5d7a65bad932a0434928571b74db27588bb9be2d)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/8ee744063ed12b249f1a2b89e9af4f53b2f1daf7)

* [OCPBUGS-61002](https://issues.redhat.com/browse/OCPBUGS-61002): legacy image pull secret rollback controller [#411](https://github.com/openshift/openshift-controller-manager/pull/411)
* [OCPBUGS-57949](https://issues.redhat.com/browse/OCPBUGS-57949): ignore error failing to find pull/push secrets [#399](https://github.com/openshift/openshift-controller-manager/pull/399)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/1f76c23407c6cc95902a4b4d8f679181df538d9d...8ee744063ed12b249f1a2b89e9af4f53b2f1daf7)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/ce2c2d17d9c489d776f0383869d453dff89b0462)

* [OCPBUGS-44458](https://issues.redhat.com/browse/OCPBUGS-44458): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#365](https://github.com/openshift/cluster-api-provider-openstack/pull/365)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/b0f0dc4e1a9123815cdc2124579b6f4367500a73...ce2c2d17d9c489d776f0383869d453dff89b0462)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f295d320d98493b70a105fa22ca79fab546a2e52)

* [OCPBUGS-61364](https://issues.redhat.com/browse/OCPBUGS-61364): [4.18] e2e stability fixes [#1080](https://github.com/openshift/operator-framework-olm/pull/1080)
* [OCPBUGS-60644](https://issues.redhat.com/browse/OCPBUGS-60644): Add NetworkPolicy as a supported kind [#1048](https://github.com/openshift/operator-framework-olm/pull/1048)
* [OCPBUGS-59421](https://issues.redhat.com/browse/OCPBUGS-59421): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1040](https://github.com/openshift/operator-framework-olm/pull/1040)
* [OCPBUGS-58882](https://issues.redhat.com/browse/OCPBUGS-58882): Reduce Frequency of Update Requests for Copied CSVs (#3597) [#1034](https://github.com/openshift/operator-framework-olm/pull/1034)
* [OCPBUGS-57427](https://issues.redhat.com/browse/OCPBUGS-57427): reduce cache expiry frequency [release-4.19] [#1020](https://github.com/openshift/operator-framework-olm/pull/1020)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/969a7e031a97a7e12424b5d292f345a168b73e38...f295d320d98493b70a105fa22ca79fab546a2e52)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/ea9bc1139efb443b244170d08759b6816cdae4d9)

* [OCPBUGS-62218](https://issues.redhat.com/browse/OCPBUGS-62218): Remove Expect func so that the test case can use the retry logic [#669](https://github.com/operator-framework/operator-marketplace/pull/669)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c06a810b321ad79ef572ce36ed935332a58ea319...ea9bc1139efb443b244170d08759b6816cdae4d9)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/7bb7a9e71737d4d2d7e00f693080df3fc4d735db)

* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] [#2811](https://github.com/openshift/ovn-kubernetes/pull/2811)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Fix EgressIP stale GARP post reboot + pod restart [#2775](https://github.com/openshift/ovn-kubernetes/pull/2775)
* [OCPBUGS-59744](https://issues.redhat.com/browse/OCPBUGS-59744), [OCPBUGS-61455](https://issues.redhat.com/browse/OCPBUGS-61455): [4.18] allow default network -&gt; localnet on the same node for any localnet subnet [#2785](https://github.com/openshift/ovn-kubernetes/pull/2785)
* [OCPBUGS-61748](https://issues.redhat.com/browse/OCPBUGS-61748): [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] [#2777](https://github.com/openshift/ovn-kubernetes/pull/2777)
* [OCPBUGS-59680](https://issues.redhat.com/browse/OCPBUGS-59680): [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] [#2768](https://github.com/openshift/ovn-kubernetes/pull/2768)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): Update OWNERS file: Add Patryk/Martin as approvers [#2700](https://github.com/openshift/ovn-kubernetes/pull/2700)
* [OCPBUGS-59371](https://issues.redhat.com/browse/OCPBUGS-59371): EIP OVN controller: stop pod config flap [#2703](https://github.com/openshift/ovn-kubernetes/pull/2703)
* [OCPBUGS-59531](https://issues.redhat.com/browse/OCPBUGS-59531): EgressIP: fix startup syncer [#2690](https://github.com/openshift/ovn-kubernetes/pull/2690)
* [OCPBUGS-59623](https://issues.redhat.com/browse/OCPBUGS-59623): Revert "unpin libreswan version" [#2678](https://github.com/openshift/ovn-kubernetes/pull/2678)
* [OCPBUGS-57318](https://issues.redhat.com/browse/OCPBUGS-57318), [OCPBUGS-58159](https://issues.redhat.com/browse/OCPBUGS-58159): DownStream Merge Sync from 4.19 [06-26-2025] [#2646](https://github.com/openshift/ovn-kubernetes/pull/2646)
* [OCPBUGS-46401](https://issues.redhat.com/browse/OCPBUGS-46401), [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [OCPBUGS-55263](https://issues.redhat.com/browse/OCPBUGS-55263): DownStream Merge Sync from 4.19 [05-28-2025] [#2593](https://github.com/openshift/ovn-kubernetes/pull/2593)
* [OCPBUGS-57108](https://issues.redhat.com/browse/OCPBUGS-57108): Fix hybrid overlay node subnets collision with cluster subnets [#2619](https://github.com/openshift/ovn-kubernetes/pull/2619)
* [OCPBUGS-57106](https://issues.redhat.com/browse/OCPBUGS-57106): Increase InformerSyncTimeout to 60s [#2622](https://github.com/openshift/ovn-kubernetes/pull/2622)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b5e32a0f733ccdc59ce0012d768dc3edb6caf013...7bb7a9e71737d4d2d7e00f693080df3fc4d735db)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/74e3ece7ce84bef0f21bd1bab775f7e6dabb676b)

* [OCPBUGS-61163](https://issues.redhat.com/browse/OCPBUGS-61163): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#125](https://github.com/openshift/machine-api-provider-powervs/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/10ac06f57bface0b3481e111c4e1d5b7f52db7f4...74e3ece7ce84bef0f21bd1bab775f7e6dabb676b)


### [prometheus](https://github.com/openshift/prometheus/tree/a85013a6c5176d8a569d1908532c9c31aa399306)

* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore: compute highestTimestamp at queryManager level [#267](https://github.com/openshift/prometheus/pull/267)
* [Full changelog](https://github.com/openshift/prometheus/compare/df5ef25778ad5949c637beae1b9c303b4c044302...a85013a6c5176d8a569d1908532c9c31aa399306)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/18c2332d37d2c98d1b9bacd92eb574ecab130b6d)

* [OCPBUGS-58194](https://issues.redhat.com/browse/OCPBUGS-58194): Fix: One Alertmanager Config failing blocks all others [#335](https://github.com/openshift/prometheus-operator/pull/335)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/74987748a60f14816975fa1070ce485393a38f64...18c2332d37d2c98d1b9bacd92eb574ecab130b6d)


### [tests](https://github.com/openshift/origin/tree/7aabb3cc677fc0a44376d88ebb9847d7fe3f9ee8)

* [OCPBUGS-61698](https://issues.redhat.com/browse/OCPBUGS-61698): chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster [#30253](https://github.com/openshift/origin/pull/30253)
* [OCPBUGS-60511](https://issues.redhat.com/browse/OCPBUGS-60511): Bump to latest openshift/kubernetes (v1.31.12) [#30230](https://github.com/openshift/origin/pull/30230)
* [OCPBUGS-60662](https://issues.redhat.com/browse/OCPBUGS-60662): images/tests: Remove rteval [#30135](https://github.com/openshift/origin/pull/30135)
* [OCPBUGS-60881](https://issues.redhat.com/browse/OCPBUGS-60881): Exclude RHEL nodes in verifying that nodes have no unexpected reboots test [#30170](https://github.com/openshift/origin/pull/30170)
* [OCPBUGS-60881](https://issues.redhat.com/browse/OCPBUGS-60881): extended/machines: add --no-pager to journalctl cmds [#30180](https://github.com/openshift/origin/pull/30180)
* [OCPBUGS-60927](https://issues.redhat.com/browse/OCPBUGS-60927): Wait 30s after the upgrade is complete to validate workloads [#30179](https://github.com/openshift/origin/pull/30179)
* NO-JIRA: Update extended/networking OWNERS [#30089](https://github.com/openshift/origin/pull/30089)
* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Backport pr 29834 to release-4.18 [#29968](https://github.com/openshift/origin/pull/29968)
* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Don't check for isNoUpgrade [#30053](https://github.com/openshift/origin/pull/30053)
* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Tolerate various expected Upgradeable=False conditions [#30048](https://github.com/openshift/origin/pull/30048)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#29941](https://github.com/openshift/origin/pull/29941)
* [OCPBUGS-58366](https://issues.redhat.com/browse/OCPBUGS-58366): Make EgressIP helper functions more reliable [#29950](https://github.com/openshift/origin/pull/29950)
* [OCPBUGS-57081](https://issues.redhat.com/browse/OCPBUGS-57081): Do not set the MTU when using NetworkAttachementDefinition [#29891](https://github.com/openshift/origin/pull/29891)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#29937](https://github.com/openshift/origin/pull/29937)
* [OCPBUGS-57329](https://issues.redhat.com/browse/OCPBUGS-57329): Fix failed tests of e2e-aws-ovn-tls-13 [#29911](https://github.com/openshift/origin/pull/29911)
* [Full changelog](https://github.com/openshift/origin/compare/0c9d7464f6948f9e715f7bd9b37a64738b558cc2...7aabb3cc677fc0a44376d88ebb9847d7fe3f9ee8)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/767b33a7c0145136bfe3655de0ed02e888b4a270)

* [OCPBUGS-61651](https://issues.redhat.com/browse/OCPBUGS-61651): Fix unit tests [#70](https://github.com/openshift/cluster-api-provider-vsphere/pull/70)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 [#62](https://github.com/openshift/cluster-api-provider-vsphere/pull/62)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/d664fe2b56964a5320057ac8c7b7fd4b50045851...767b33a7c0145136bfe3655de0ed02e888b4a270)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/1a2036121a48da7493bdb50913c2b71c2372be60)

* [OCPBUGS-60784](https://issues.redhat.com/browse/OCPBUGS-60784): Check for number of FailureDomain-s in GetVCenter() [#189](https://github.com/openshift/vsphere-problem-detector/pull/189)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/7cf7fe24116aa9515a6fbcef3fb85567e19d21b4...1a2036121a48da7493bdb50913c2b71c2372be60)