# 4.18.37

Created: 2026-04-03 14:36:45 +0000 UTC

Image Digest: `sha256:9b7068aa6f6087c2f0a7cefa241c5dbb0ede0efaad783607dff0da98cac432d2`


## Changes from 4.18.18

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.9 to 1.31.14
* Kubernetes Tests upgraded from 1.31.9 to 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202506121335-0 to 418.94.202603261158-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| OnClusterBuild <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| StreamingCollectionEncodingToJSON <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [2f62712d](https://github.com/openshift/apiserver-network-proxy/commit/2f62712d5db70df25490361749e93a552ffb5a24) `sha256:2eb44b0dae64572bae50a8060d9a3b498cfcfb1529185465a270295bbe3b5c47`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:cd0f7ad3c4eb38aab8d267f891f9be657d9296f030dadbf15cb6c7a8c587be16`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b51cd6b8](https://github.com/openshift/aws-ebs-csi-driver/commit/b51cd6b8e54d5682cf5491a9eb5af1570261a409) `sha256:f38133448c2d376b9cef7b408b8e0fe5ccdd8d939100ba239ca3db0fd60e8ea7`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:d1b1566ee173b588dc65c3eabb9fcac1620e658db075f03b0b33ab0f10dc4202`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [f54f9a19](https://github.com/openshift/aws-pod-identity-webhook/commit/f54f9a19adb43b395a880ca046aed0841466c28d) `sha256:1799d7712429e8474a842f9f8d7854c455568f99b775a0c57f41dd77813a1b91`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:131a4fe01970cced1993daafcf3a925fda38f69362f2512ebe456c3ddb3c2f7b`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:2eb3dd656baeab9e256015ba3e8e89da7f0cf7f70cba2e7e1e77b407df791887`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:fca982811b044e6f5780aa6a3aca8eac2dd62e21bcf6b4a797362190e13816a9`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:9f62092309c958bd2ce90dff783e17535c7789f5a8fbd43055213028a3877c5f`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [c937080f](https://github.com/openshift/azure-kubernetes-kms/commit/c937080f51cec58650daa15805be548d09310c64) `sha256:579a6c699e97e9796389e54c95424e2cfa71e5b0dd66908e8c5d6df1d51563ad`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [f60e4029](https://github.com/openshift/azure-workload-identity/commit/f60e4029d64de202e81d2cd114f8a90dc0a1878e) `sha256:961f83c8c9664cfae93b287ba3b86f8002bb6bdcdbff217740e70fde5dc92753`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:2ba710b3b7204af9bc39ad9f044aedb0c9aac580fd17526a813fbc801b0da711`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:5ea6492ac51e2916a8b7ac2d378da1feede46a1ef5dc64cc276ed87e1dd99b93`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:93af695c4db2f86502f705a488981e2e3f6f839c2e3192db1139803ef5534953`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [2f2737e1](https://github.com/openshift/cluster-capi-operator/commit/2f2737e1ed649009eef31c19ffff7468b67de32d) `sha256:2815d7d12cc8e477edbc37af1e4acc5e4a4e8466f0bd714b2ea47b1a6ce3c794`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:004418f6a1d2c7d8722843fb07f605992e62e74f63a783ef48820b66f423c13a`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:c777e21833e7751bf765fb1de14f80b362b8178e2da4f61b927118c5e3671059`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [7cafd0c7](https://github.com/openshift/cluster-dns-operator/commit/7cafd0c7dca2edb154b8444602b600b5901afeba) `sha256:045a750e0a6c831cf6ff9da3bb1a22cff9917df887ab4a35450aa773d5a2b340`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1e3caa4b](https://github.com/openshift/cluster-image-registry-operator/commit/1e3caa4b5abe4e3dad914a337f87408d060b1fb2) `sha256:d4bc2f3b569da219d15f892785e56870e1e0c62116524e62b08e54a242c07e2c`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [33a1141e](https://github.com/openshift/cluster-api-operator/commit/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd) `sha256:f661e7a77a90b6aafac82731deb8963cc7307948281c7d515d7fecd95d454218`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:dc1436d2524b63b8e11df496970d1e6a9806d90afb495af730d1c6864e00f352`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:6fe48df675b9bdd6f1146c1296712ffbf351c3172f8571a269a8e4e2377e70d8`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:65787331506846e36febfbd38f359306f30e1fe5ad382382eb25050ef1b03b60`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:db82345c70febe980e20d9759b3a531a9b7e31e8febea7c94c9eff939ca88b2e`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:1d0e81c6dcc1b627de56e2faf108b50bcbc3870ff3e4d09748edc493fc1cff9e`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [8caab452](https://github.com/openshift/cluster-update-keys/commit/8caab452b91df0d77ab052b1833a4d54a1374634) `sha256:708bc3b0918ce2f414b4032a763a4e765643c8423d889f7bafce0731c2f3a73c`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e2aaf00a](https://github.com/openshift/configmap-reload/commit/e2aaf00a381b57874178a4272f3bc5257cf8dd98) `sha256:d415d6964fb9ed13a4d0c7538f51c01f347b50f1e1adba59169534e931704877`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:a5a6ad8b923674738717cb1623b4f0b2b9862e752e06190861e5ee12c4183a7d`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [39b37c06](https://github.com/openshift/csi-external-attacher/commit/39b37c06a27481c708f071464bd1049ea7db97c7) `sha256:6836ec3fa394261eb5882c5f4b6551d3f0238df1d58a2c588456cfd37d9bef82`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [376f0ea0](https://github.com/openshift/csi-external-provisioner/commit/376f0ea04c64a41cb5166ff415fff849ff2da380) `sha256:e5109a0e7cf6fc54efff1ce9638d2a53d8a165a27623c93850c0d8a2a2524d6a`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:c9939d14d04be600248c2cc4158d304822f8253032121f13795140cb1e8e9850`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:4925b1aecda512c045dfea6136d2c1766025bd2dc99fb50b43a229865c0a2a82`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:0423c2bc5bc949c627e9044a2666b29b65979a68fa0496aee63fda75edfb5d3d`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:23120d584fc09db0acd6fc28d393f763af6fc1c60b9582ce984c3ec00eec561a`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cb8b38c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb) `sha256:45e22bd77922b1a618459b192b012fe9746c8c660e994b18a9c58efecffb4c51`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:63bf712095b12bffb31b0e89ffa1899dd08155335be33fb5dcd6f861f762add5`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:fd0804ad28f92daf399979f94eef3cb21019a9fe551ed7168db479829fb957ae`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:0c2b5b1a0ef225bcc02d3dbd6944f88d618b33872ffb88a7c114ccefcc299596`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:da1bd06075f47d6f489dd114049c86c5ce33917b9fe9de22cbda1ebcee0ff60d`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:cfadb921c7bb4d44dfdedef72eb603424a9da187705ca53f95a01dbbf6ca06f7`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [962ccca2](https://github.com/openshift/kubernetes-metrics-server/commit/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf) `sha256:884e3305362f086f088c171ca5338ddb9922ec19f2feb6aab6ec19e316182866`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:87753e25c002237af6561dac8a89eac6c806e01344fbd710a28004ed29408f6d`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:da42cde7df64067b09cd49fa7ffd3b5b4edf9e77cc4a4e9e55c12aadef45d822`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:b356b6f8d9d1b3e4609052b5fa4a8aa47fe67b1f564d4dbc9f0abd4af10c647c`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:b1f276d86c939c32c32e65a1e51940396d17bf178cce1a8d2f296292a0e0dfee`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:a8887e0f9a395ce5ef3797b6884b6f0c6b168ba2131f5b8c3d6aa0b1754ec8f5`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [afe324bf](https://github.com/openshift/machine-api-provider-nutanix/commit/afe324bf56e0348fb45e5fbb9c832c1587482153) `sha256:7b653454caeb73f2c302148ee23a68b9e15b8eda218ca12dd86857b41207281e`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3cca6fee](https://github.com/openshift/openshift-state-metrics/commit/3cca6feee0d646331bdbc9d49732fbdf49448d41) `sha256:41da034939e9ab382852bbc0f4cf224dea9b767e13f0e2723d6210e4346b7cbb`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:45be27b5ad64170c2f80898b6f84c09726cb64aa8d3a2a17d4d2141113fa1701`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [01fc505a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/01fc505abcf3b83bba284a00258b6761a9b7ce8a) `sha256:d03224707c0b2f4f6405411fa01f46fe0a01a9538f507c558270a081b6b2e26f`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [17ae6fba](https://github.com/openshift/cloud-provider-powervs/commit/17ae6fba6eda58aa0d91f162206386105dff9962) `sha256:b50597985f4526cb52f1caee60cb6205bfe291e84f0e0fce87e972f4773dadd9`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [35c11369](https://github.com/openshift/prom-label-proxy/commit/35c1136915f7a6896dfcb479e1f686fd18542856) `sha256:0ca843e0cb7db0c589ca5cc45190592443b5c645ce6341fc54b8a67006f7c6cb`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [92e17ff5](https://github.com/openshift/node_exporter/commit/92e17ff5c45807198adc8b59f5b3f63a9b7f1726) `sha256:78e540782ffef1a80c9fc1abd7906ee79611beeb27db927c2919f561519b6b9d`
* rhel-coreos `sha256:20e7790eedbb9ea0e0c7404cf6f3be4a8578dc0fe4e4cbea0312cae5a16ec285`
* rhel-coreos-extensions `sha256:10545f119e9fd729a4926afd8d6445e2805a7e9574516b903282e670f64d0d9e`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [ce6ffa24](https://github.com/openshift/route-controller-manager/commit/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3) `sha256:28e7b0f4a81e505d71172ecbb6f873e816ab770bbeeddceedc4767a6900c189a`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [30efb529](https://github.com/openshift/service-ca-operator/commit/30efb529a5b7db5d6f352f6ac0470d8385268539) `sha256:d9a565b2d22d4498e14970c5fce817f8c64ff4652b7502095f698b99d70659b9`
* [telemeter](https://github.com/openshift/telemeter) git [490612bd](https://github.com/openshift/telemeter/commit/490612bdaa6412762403c8eee902c20f033ca5aa) `sha256:4e229f873d94c8d0c22ad88fcb8a36e62f171d9378cf7df70c07d87497733e57`
* [thanos](https://github.com/openshift/thanos) git [f1599f65](https://github.com/openshift/thanos/commit/f1599f65c5fd652150821ae954d563747a649b53) `sha256:1ed4178f8df624d299f55703216ec19609a59eeaa3ee6d33dba2995ea97404c8`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [2b241410](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/2b241410a972898f0ce80dec3bfdf4f974721937) `sha256:a9b996336b80a8a6d104023ac86ec42c7b80b2dd34feea243852f26262c6016c`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/73206081d00ddfc1a2d9b385b1560564642b79ee)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.21 compatibility [#10019](https://github.com/openshift/assisted-service/pull/10019)
* [OCPBUGS-74898](https://issues.redhat.com/browse/OCPBUGS-74898): Retry incomplete cluster registration in ABI [#8817](https://github.com/openshift/assisted-service/pull/8817)
* [OCPBUGS-74911](https://issues.redhat.com/browse/OCPBUGS-74911): Remove root=/dev/disk/by-label/dm-mpath-root from kargs [#8820](https://github.com/openshift/assisted-service/pull/8820)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/69c47dfbd234c7b6efa1fda90a6aa760b9f62fb7...73206081d00ddfc1a2d9b385b1560564642b79ee)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/81d6bc2771d3d34de3c364e349ca7f2983e454a2)

* [OCPBUGS-58650](https://issues.redhat.com/browse/OCPBUGS-58650): Bump glog pkg to 1.2.4 (#1181) [#1181](https://github.com/openshift/assisted-installer/pull/1181)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/92575979cc7d65303169444f2afce22d36f918ce...81d6bc2771d3d34de3c364e349ca7f2983e454a2)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/81c09fb75bccd35b2e909537b93e5aa431eeed1a)

* [MGMT-21849](https://issues.redhat.com/browse/MGMT-21849): Skip arping for remote IPs not in outgoing NIC's subnet [#1332](https://github.com/openshift/assisted-installer-agent/pull/1332)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/615411a4df7a54c536871533d7af22f666b4e2ab...81c09fb75bccd35b2e909537b93e5aa431eeed1a)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/63b87f06c5586b59ca99d7a4546d4c82b2aa0268)

* [OCPBUGS-68243](https://issues.redhat.com/browse/OCPBUGS-68243): bump github.com/sirupsen/logrus to v1.9.3 [#237](https://github.com/openshift/agent-installer-utils/pull/237)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923...63b87f06c5586b59ca99d7a4546d4c82b2aa0268)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/ed55fc2df3f3bab15f03306df692112f6f109fe4)

* [OCPBUGS-77903](https://issues.redhat.com/browse/OCPBUGS-77903): [release-4.18] update go mod dependency for konflux [#589](https://github.com/openshift/cluster-api-provider-aws/pull/589)
* [OCPBUGS-61841](https://issues.redhat.com/browse/OCPBUGS-61841): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#570](https://github.com/openshift/cluster-api-provider-aws/pull/570)
* [OCPBUGS-58670](https://issues.redhat.com/browse/OCPBUGS-58670), [OCPBUGS-58675](https://issues.redhat.com/browse/OCPBUGS-58675): bump github.com/golang/glog to v1.2.5 [#556](https://github.com/openshift/cluster-api-provider-aws/pull/556)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to use v1 admissionregistration group [#554](https://github.com/openshift/cluster-api-provider-aws/pull/554)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9...ed55fc2df3f3bab15f03306df692112f6f109fe4)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2c952120915b9ac37d6300536593da44b2270314)

* [OCPBUGS-79429](https://issues.redhat.com/browse/OCPBUGS-79429): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 [#531](https://github.com/openshift/csi-operator/pull/531)
* [OCPBUGS-78299](https://issues.redhat.com/browse/OCPBUGS-78299): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 [#524](https://github.com/openshift/csi-operator/pull/524)
* [OCPBUGS-76582](https://issues.redhat.com/browse/OCPBUGS-76582): Fix Cinder, Manila driver metrics [#501](https://github.com/openshift/csi-operator/pull/501)
* [OCPBUGS-62664](https://issues.redhat.com/browse/OCPBUGS-62664): disable e2e snapshot tests [#463](https://github.com/openshift/csi-operator/pull/463)
* [OCPBUGS-63558](https://issues.redhat.com/browse/OCPBUGS-63558): Add RBAC ClusterRole and Binding for driver node [#454](https://github.com/openshift/csi-operator/pull/454)
* [OCPBUGS-63407](https://issues.redhat.com/browse/OCPBUGS-63407): Use 127.0.0.1 for healtz http-endpoints [#450](https://github.com/openshift/csi-operator/pull/450)
* [OCPBUGS-62973](https://issues.redhat.com/browse/OCPBUGS-62973): Add withCABundleDaemonSetHook() to AWS EFS operator [#447](https://github.com/openshift/csi-operator/pull/447)
* [OCPBUGS-55053](https://issues.redhat.com/browse/OCPBUGS-55053): Correct ASH driver inject env config [#381](https://github.com/openshift/csi-operator/pull/381)
* [OCPBUGS-54453](https://issues.redhat.com/browse/OCPBUGS-54453): Enable required driver services [#375](https://github.com/openshift/csi-operator/pull/375)
* [OCPBUGS-60596](https://issues.redhat.com/browse/OCPBUGS-60596): Bump library-go to fix assignment to nil map issue [#421](https://github.com/openshift/csi-operator/pull/421)
* [OCPBUGS-60203](https://issues.redhat.com/browse/OCPBUGS-60203): Remove stale conditions [#413](https://github.com/openshift/csi-operator/pull/413)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/csi-operator/compare/cdc9d6499cd5020d96811fd02bde14d4d06786cc...2c952120915b9ac37d6300536593da44b2270314)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/7b6bfc7421d1cc700ddbcbf150beccd0ab586183)

* [OCPBUGS-73789](https://issues.redhat.com/browse/OCPBUGS-73789): Fix reconciler consistency checks in Update and Exists [#166](https://github.com/openshift/machine-api-provider-aws/pull/166)
* [OCPBUGS-63138](https://issues.redhat.com/browse/OCPBUGS-63138): client: re-use a single file for building the session instead of randomly named files [#146](https://github.com/openshift/machine-api-provider-aws/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08...7b6bfc7421d1cc700ddbcbf150beccd0ab586183)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/237a64d3ad0858b478e38796ae58f4c3fcaba9fe)

* [OCPBUGS-77905](https://issues.redhat.com/browse/OCPBUGS-77905): [release-4.18] update go mod dependency for konflux [#362](https://github.com/openshift/cluster-api-provider-azure/pull/362)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#348](https://github.com/openshift/cluster-api-provider-azure/pull/348)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/987615c80bfa65a5c70fbed3ff06e405ef6d88ed...237a64d3ad0858b478e38796ae58f4c3fcaba9fe)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/2fdaa544160658c3c4535c167960e4f3e2e70727)

* [OCPBUGS-65882](https://issues.redhat.com/browse/OCPBUGS-65882): Set updateDomainCount to one when faultDomainCount is one [#175](https://github.com/openshift/machine-api-provider-azure/pull/175)
* [OCPBUGS-63669](https://issues.redhat.com/browse/OCPBUGS-63669): Support datadisks on Stack Hub [#167](https://github.com/openshift/machine-api-provider-azure/pull/167)
* [OCPBUGS-56167](https://issues.redhat.com/browse/OCPBUGS-56167): [release-4.18] Update virtualmachines service to armcompute/v5 SDK [#145](https://github.com/openshift/machine-api-provider-azure/pull/145)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/390bef034052947c0456518d76a7a7dbbcedd690...2fdaa544160658c3c4535c167960e4f3e2e70727)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/80c3a0638eacd65c0d6f54fbd3f4c593085528e8)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#51](https://github.com/openshift/cluster-api-provider-metal3/pull/51)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec...80c3a0638eacd65c0d6f54fbd3f4c593085528e8)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/488926dc2c95d96460ee9939929a76ed23e1c596)

* [OCPBUGS-78550](https://issues.redhat.com/browse/OCPBUGS-78550): fix wavelength zone name regex [#10409](https://github.com/openshift/installer/pull/10409)
* [OCPBUGS-45579](https://issues.redhat.com/browse/OCPBUGS-45579): PowerVS: Listen to machineNetwork [#9277](https://github.com/openshift/installer/pull/9277)
* [OCPBUGS-73784](https://issues.redhat.com/browse/OCPBUGS-73784): pkg/asset/manifests/azure: save cidr blocks [#10217](https://github.com/openshift/installer/pull/10217)
* [OCPBUGS-76598](https://issues.redhat.com/browse/OCPBUGS-76598): Increase agent-installer pre-network-manager timeout [#10299](https://github.com/openshift/installer/pull/10299)
* [OCPBUGS-67203](https://issues.redhat.com/browse/OCPBUGS-67203): Update the RHCOS 4.18 bootimage metadata [#10294](https://github.com/openshift/installer/pull/10294)
* [OCPBUGS-74676](https://issues.redhat.com/browse/OCPBUGS-74676): [release-4.18] GCP: skip AI zones [#10275](https://github.com/openshift/installer/pull/10275)
* [OCPBUGS-69880](https://issues.redhat.com/browse/OCPBUGS-69880): Azure UPI ARM template: use storageAccountId [#10179](https://github.com/openshift/installer/pull/10179)
* [OCPBUGS-68244](https://issues.redhat.com/browse/OCPBUGS-68244): [4.18] uplift logrus [#10166](https://github.com/openshift/installer/pull/10166)
* [OCPBUGS-57590](https://issues.redhat.com/browse/OCPBUGS-57590): Mount the user-ca-bundle into ICC [#9794](https://github.com/openshift/installer/pull/9794)
* [OCPBUGS-63494](https://issues.redhat.com/browse/OCPBUGS-63494): Catch gcp destroy cases where the operation is nil [#10030](https://github.com/openshift/installer/pull/10030)
* [OCPBUGS-52659](https://issues.redhat.com/browse/OCPBUGS-52659): [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme [#9545](https://github.com/openshift/installer/pull/9545)
* [OCPBUGS-65588](https://issues.redhat.com/browse/OCPBUGS-65588): Update the RHCOS 4.18 bootimage metadata [#10113](https://github.com/openshift/installer/pull/10113)
* [OCPBUGS-58504](https://issues.redhat.com/browse/OCPBUGS-58504): Refactor removing loadbalancer in OpenStack [#9831](https://github.com/openshift/installer/pull/9831)
* [OCPBUGS-53235](https://issues.redhat.com/browse/OCPBUGS-53235): Validation for API and Ingress VIPs when using user-managed load balancer [#10046](https://github.com/openshift/installer/pull/10046)
* [OCPBUGS-62810](https://issues.redhat.com/browse/OCPBUGS-62810): Update the RHCOS 4.18 bootimage metadata [#10014](https://github.com/openshift/installer/pull/10014)
* [OCPBUGS-59490](https://issues.redhat.com/browse/OCPBUGS-59490): Make swift containers removal not fatal for UPI. [#9839](https://github.com/openshift/installer/pull/9839)
* [OCPBUGS-61529](https://issues.redhat.com/browse/OCPBUGS-61529): Use less permissive access for /var/lib/etcd for SNO [#9937](https://github.com/openshift/installer/pull/9937)
* [OCPBUGS-61178](https://issues.redhat.com/browse/OCPBUGS-61178): Refine check for supported SNO platforms [#9923](https://github.com/openshift/installer/pull/9923)
* [OCPBUGS-60592](https://issues.redhat.com/browse/OCPBUGS-60592): baremetal: always set external v6 URL on dualstack [#9895](https://github.com/openshift/installer/pull/9895)
* [OCPBUGS-54598](https://issues.redhat.com/browse/OCPBUGS-54598): Update the RHCOS 4.18 bootimage metadata [#9900](https://github.com/openshift/installer/pull/9900)
* [OCPBUGS-56177](https://issues.redhat.com/browse/OCPBUGS-56177), [OCPBUGS-59155](https://issues.redhat.com/browse/OCPBUGS-59155), [OCPBUGS-59158](https://issues.redhat.com/browse/OCPBUGS-59158): Migrate AWS SDK to V2 to support MX-Central Region [#9709](https://github.com/openshift/installer/pull/9709)
* [OCPBUGS-58321](https://issues.redhat.com/browse/OCPBUGS-58321): allow to deploy single nodes with UPI [#9824](https://github.com/openshift/installer/pull/9824)
* [OCPBUGS-54744](https://issues.redhat.com/browse/OCPBUGS-54744): Filter out excess CA certs when adding node [#9647](https://github.com/openshift/installer/pull/9647)
* [OCPBUGS-58264](https://issues.redhat.com/browse/OCPBUGS-58264): vSphere - remove unit tests using nip.io [#9813](https://github.com/openshift/installer/pull/9813)
* [OCPBUGS-56797](https://issues.redhat.com/browse/OCPBUGS-56797): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9747](https://github.com/openshift/installer/pull/9747)
* [Full changelog](https://github.com/openshift/installer/compare/11c3c83da6781c97042f11484e3f5d0cc9856f9b...488926dc2c95d96460ee9939929a76ed23e1c596)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/45acfee77a49fe17a848d1625594b2d8d85b2ca8)

* [OCPBUGS-76988](https://issues.redhat.com/browse/OCPBUGS-76988): Unblock BMH direct deletion when detached annotation is present [#461](https://github.com/openshift/baremetal-operator/pull/461)
* [OCPBUGS-56766](https://issues.redhat.com/browse/OCPBUGS-56766): Make firmware update handle only a subset of `Spec.Updates` [#421](https://github.com/openshift/baremetal-operator/pull/421)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/6405b3f41826655af74cf6d76e352718e6786fc5...45acfee77a49fe17a848d1625594b2d8d85b2ca8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/353410688340dadb583668215e13e2d6cc90e272)

* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Re-add ENABLE_NODEIP_DEBUG env var [#364](https://github.com/openshift/baremetal-runtimecfg/pull/364)
* [OCPBUGS-59280](https://issues.redhat.com/browse/OCPBUGS-59280): Bump logrus version [#354](https://github.com/openshift/baremetal-runtimecfg/pull/354)
* [OCPBUGS-57782](https://issues.redhat.com/browse/OCPBUGS-57782): iptables: Switch PREROUTING REDIRECT rule to DNAT instead [#351](https://github.com/openshift/baremetal-runtimecfg/pull/351)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9e2015c30f48013e895eb8dfc43695780e0d9162...353410688340dadb583668215e13e2d6cc90e272)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/3a48fc2998a051a77a97cc3393b5d189c22635e0)

* [OCPBUGS-65707](https://issues.redhat.com/browse/OCPBUGS-65707): fix(must-gather): do not set node affinity if nodename is set [#2145](https://github.com/openshift/oc/pull/2145)
* [OCPBUGS-64608](https://issues.redhat.com/browse/OCPBUGS-64608): Help with must-gather scheduling through suggesting preferance of nodes [#2127](https://github.com/openshift/oc/pull/2127)
* [OCPBUGS-58233](https://issues.redhat.com/browse/OCPBUGS-58233): Return error in case of error [#2054](https://github.com/openshift/oc/pull/2054)
* [OCPBUGS-57507](https://issues.redhat.com/browse/OCPBUGS-57507): avoid transfering permissions when copying artifacts from node-joiner pod [#2039](https://github.com/openshift/oc/pull/2039)
* [Full changelog](https://github.com/openshift/oc/compare/903a973ce8f8b4509b5158b95bcebe9209e29761...3a48fc2998a051a77a97cc3393b5d189c22635e0)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/363e98bd7ca3872072a8aad152525c61388b10a5)

* [OCPBUGS-74548](https://issues.redhat.com/browse/OCPBUGS-74548): Resolve nil pointer exception in hasResourceTags [#968](https://github.com/openshift/cloud-credential-operator/pull/968)
* [OCPBUGS-65800](https://issues.redhat.com/browse/OCPBUGS-65800): ccoctl azure: retry custom role creation on consistency errors [#950](https://github.com/openshift/cloud-credential-operator/pull/950)
* [OCPBUGS-65479](https://issues.redhat.com/browse/OCPBUGS-65479): ccoctl: use pagination when listing resources in aws [#947](https://github.com/openshift/cloud-credential-operator/pull/947)
* [OCPBUGS-63548](https://issues.redhat.com/browse/OCPBUGS-63548): ccoctl: add public-key-file flag to create-all [#938](https://github.com/openshift/cloud-credential-operator/pull/938)
* [OCPBUGS-55127](https://issues.redhat.com/browse/OCPBUGS-55127): snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 [#915](https://github.com/openshift/cloud-credential-operator/pull/915)
* [OCPBUGS-60971](https://issues.redhat.com/browse/OCPBUGS-60971): ccoctl: aws to use proper issuer url on subsequent runs [#907](https://github.com/openshift/cloud-credential-operator/pull/907)
* [OCPBUGS-60618](https://issues.redhat.com/browse/OCPBUGS-60618): ccoctl azure dnszone-resource-group-name now optional [#899](https://github.com/openshift/cloud-credential-operator/pull/899)
* [OCPBUGS-58680](https://issues.redhat.com/browse/OCPBUGS-58680): github.com/golang/glog v1.2.5 [#891](https://github.com/openshift/cloud-credential-operator/pull/891)
* [OCPBUGS-58247](https://issues.redhat.com/browse/OCPBUGS-58247): ccoctl: only add owned tag to azure resources on create [#882](https://github.com/openshift/cloud-credential-operator/pull/882)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b4113028d20a300e364354403391806265332640...363e98bd7ca3872072a8aad152525c61388b10a5)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/f892b9152672d963b667d6d644e65576946133a3)

* [OCPBUGS-73750](https://issues.redhat.com/browse/OCPBUGS-73750): [release-4.18] Fix pointers without ptr.Deref [#199](https://github.com/openshift/cloud-network-config-controller/pull/199)
* [OCPBUGS-65651](https://issues.redhat.com/browse/OCPBUGS-65651): [release-4.18] Fix capacity calculation [#193](https://github.com/openshift/cloud-network-config-controller/pull/193)
* [OCPBUGS-64779](https://issues.redhat.com/browse/OCPBUGS-64779): [release-4.18] Change the capacity struct from int to ptrOfInt [#189](https://github.com/openshift/cloud-network-config-controller/pull/189)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/beacfbc2f2afa651616ad1c3c6712c511318a8d4...f892b9152672d963b667d6d644e65576946133a3)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/882f8799b8a550605e4812479272691de3f5c0d2)

* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups [#754](https://github.com/openshift/cluster-authentication-operator/pull/754)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c...882f8799b8a550605e4812479272691de3f5c0d2)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/34730793bf4057072ed97b421e6b3af57166cc14)

* [OCPBUGS-78699](https://issues.redhat.com/browse/OCPBUGS-78699): allow clusterapi provider to skip paused resources [#413](https://github.com/openshift/kubernetes-autoscaler/pull/413)
* [OCPBUGS-75925](https://issues.redhat.com/browse/OCPBUGS-75925): Fixes histograms becoming empty after loaded from checkpoints [#402](https://github.com/openshift/kubernetes-autoscaler/pull/402)
* [OCPBUGS-60908](https://issues.redhat.com/browse/OCPBUGS-60908): revert openshift replica fix [#375](https://github.com/openshift/kubernetes-autoscaler/pull/375)
* [OCPBUGS-60235](https://issues.redhat.com/browse/OCPBUGS-60235): fix checkpoint gc of unknown recommenders [#368](https://github.com/openshift/kubernetes-autoscaler/pull/368)
* [OCPBUGS-59260](https://issues.redhat.com/browse/OCPBUGS-59260): Fix cool down status condition to trigger scale down [#361](https://github.com/openshift/kubernetes-autoscaler/pull/361)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d1afaf45d6a03a38614ebca0289dd4b9b489c5f1...34730793bf4057072ed97b421e6b3af57166cc14)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/c934fd1c7f2f50dbdccbd84d2914dc7438ba8e03)

* [OCPBUGS-78708](https://issues.redhat.com/browse/OCPBUGS-78708): Update kubebuilder tools to more latest version [#579](https://github.com/openshift/cluster-baremetal-operator/pull/579)
* [OCPBUGS-57590](https://issues.redhat.com/browse/OCPBUGS-57590): Mount the user-ca-bundle into ICC [#486](https://github.com/openshift/cluster-baremetal-operator/pull/486)
* [OCPBUGS-63439](https://issues.redhat.com/browse/OCPBUGS-63439): Always have a service for ironic-api port [#514](https://github.com/openshift/cluster-baremetal-operator/pull/514)
* [OCPBUGS-63469](https://issues.redhat.com/browse/OCPBUGS-63469): Allow provisioningIP when network disabled [#515](https://github.com/openshift/cluster-baremetal-operator/pull/515)
* [OCPBUGS-60586](https://issues.redhat.com/browse/OCPBUGS-60586): Remove webhookport (9447) as HostPort [#501](https://github.com/openshift/cluster-baremetal-operator/pull/501)
* [OCPBUGS-58315](https://issues.redhat.com/browse/OCPBUGS-58315): Bump github.com/go-errors/errors to v1.5.1 [#492](https://github.com/openshift/cluster-baremetal-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/e30ce1d8ca759e861e5094e8b3665d1da6d3474f...c934fd1c7f2f50dbdccbd84d2914dc7438ba8e03)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)

* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to leverage v1 admissionregistration group [#241](https://github.com/openshift/cluster-api/pull/241)
* [Full changelog](https://github.com/openshift/cluster-api/compare/d05a6defdc3602918de8db0f93744ca8f6b2b820...63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8abb067318de3cc68967a0f24627c26912242524)

* [OCPBUGS-63166](https://issues.redhat.com/browse/OCPBUGS-63166): ccm: disable unused secure-serving port and webhook [#421](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/421)
* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Add Service using common resource templating [#405](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/405)
* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Update service selector to match deployment label [#403](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/403)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33856906970a98ac05a042a8058902458d623e0f...8abb067318de3cc68967a0f24627c26912242524)


### [cluster-config-api](https://github.com/openshift/api/tree/319dc2e492034aab82d4820dd8d8e9a84e31b459)

* [OCPBUGS-70315](https://issues.redhat.com/browse/OCPBUGS-70315): Add HTTPKeepAliveTimeout to IngressController API [#2638](https://github.com/openshift/api/pull/2638)
* NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers [#2625](https://github.com/openshift/api/pull/2625)
* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Introduce ClosedClientConnectionPolicy to IngressController API [#2618](https://github.com/openshift/api/pull/2618)
* [CNTRLPLANE-1980](https://issues.redhat.com/browse/CNTRLPLANE-1980): Promote streaming list encoding to Default [#2598](https://github.com/openshift/api/pull/2598)
* NO-JIRA: Promote streaming list encoding to Default on Hypershift. [#2562](https://github.com/openshift/api/pull/2562)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Add feature gates for StreamingCollectionEncoding [#2528](https://github.com/openshift/api/pull/2528)
* [OCPBUGS-52347](https://issues.redhat.com/browse/OCPBUGS-52347): Add CEL validation for RegistrySources in Image API [#2218](https://github.com/openshift/api/pull/2218)
* [OCPBUGS-60904](https://issues.redhat.com/browse/OCPBUGS-60904): MachineOSConfig name should match MachineConfigPool [#2458](https://github.com/openshift/api/pull/2458)
* Update crd-schema.json to release 1.33 branch [#2459](https://github.com/openshift/api/pull/2459)
* : add OnClusterBuilds to default config [#2365](https://github.com/openshift/api/pull/2365)
* [Full changelog](https://github.com/openshift/api/compare/9fce26d4cc74cfa6bfa2b9af8891a66a90a3e31f...319dc2e492034aab82d4820dd8d8e9a84e31b459)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/fe5e928628200b49a07aa50e4dfa634fb9452607)

* [OCPBUGS-68249](https://issues.redhat.com/browse/OCPBUGS-68249): Update logrus to 1.9.3 to address CVE-2025-65637 [#464](https://github.com/openshift/cluster-config-operator/pull/464)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/85cb40728227fac13a2983fb6e3170d67cf62075...fe5e928628200b49a07aa50e4dfa634fb9452607)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b7e21f52fab30ac18bb890c61f724332f332b934)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#1545](https://github.com/openshift/cluster-etcd-operator/pull/1545)
* [OCPBUGS-63451](https://issues.redhat.com/browse/OCPBUGS-63451): Ensure revision.json persists on ungraceful shutdown [#1503](https://github.com/openshift/cluster-etcd-operator/pull/1503)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#1518](https://github.com/openshift/cluster-etcd-operator/pull/1518)
* [OCPBUGS-61235](https://issues.redhat.com/browse/OCPBUGS-61235): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1478](https://github.com/openshift/cluster-etcd-operator/pull/1478)
* [OCPBUGS-59992](https://issues.redhat.com/browse/OCPBUGS-59992): fix ordering on bootstrap IP selection [#1458](https://github.com/openshift/cluster-etcd-operator/pull/1458)
* [OCPBUGS-59803](https://issues.redhat.com/browse/OCPBUGS-59803): add missing ports to svc and pod spec [#1455](https://github.com/openshift/cluster-etcd-operator/pull/1455)
* [OCPBUGS-56834](https://issues.redhat.com/browse/OCPBUGS-56834): etcd pod containers do not start when tls min version is 1.3 [#1428](https://github.com/openshift/cluster-etcd-operator/pull/1428)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2c2910d7c3095706aaf66ddbcf3c1a31285b3567...b7e21f52fab30ac18bb890c61f724332f332b934)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/7ec6093b5e31b50a57eab3653dca09b1bd174fee)

* [OCPBUGS-70315](https://issues.redhat.com/browse/OCPBUGS-70315): Implement HTTPKeepAliveTimeout tuning option [#1333](https://github.com/openshift/cluster-ingress-operator/pull/1333)
* NO-JIRA: Add new NID team members to OWNERS [#1319](https://github.com/openshift/cluster-ingress-operator/pull/1319)
* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Implement ClosedClientConnectionPolicy field [#1322](https://github.com/openshift/cluster-ingress-operator/pull/1322)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d967a73c5f7da76783ee1af093f21817e7681e1d...7ec6093b5e31b50a57eab3653dca09b1bd174fee)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e9bc90906c726823f154c78d3e568c98ff77b6a5)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#2031](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2031)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#1976](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1976)
* [OCPBUGS-63119](https://issues.redhat.com/browse/OCPBUGS-63119): SCC: add hostmount-anyuid-v2 [#1937](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1937)
* [OCPBUGS-61039](https://issues.redhat.com/browse/OCPBUGS-61039): Set goaway chance to 0.001 [#1912](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1912)
* [OCPBUGS-60176](https://issues.redhat.com/browse/OCPBUGS-60176): Add missing service ports to apiserver service [#1888](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1888)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/383f10176f2509babc9dd49d135fa8bb0c2c277e...e9bc90906c726823f154c78d3e568c98ff77b6a5)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/6347fc8179b2a04d51c99432ae612bf4df595dc0)

* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#906](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/906)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#897](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/897)
* [OCPBUGS-60131](https://issues.redhat.com/browse/OCPBUGS-60131): Missing endpoint slices for open ports the operator uses [#852](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/852)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1...6347fc8179b2a04d51c99432ae612bf4df595dc0)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4e99db62cea1d2ca48765230c6f5663d1f2c2702)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#622](https://github.com/openshift/cluster-kube-scheduler-operator/pull/622)
* [OCPBUGS-76284](https://issues.redhat.com/browse/OCPBUGS-76284): Add priority field to prevent early shutdown [#612](https://github.com/openshift/cluster-kube-scheduler-operator/pull/612)
* [OCPBUGS-58412](https://issues.redhat.com/browse/OCPBUGS-58412): bump library-go to bring in revision controller revision-ready annotation fix [#590](https://github.com/openshift/cluster-kube-scheduler-operator/pull/590)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/6182930dde5ec8dd22bd50481e8b369ce673484c...4e99db62cea1d2ca48765230c6f5663d1f2c2702)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/8108394db9feefb2dedfe4574768dc080ad34476)

* [OCPBUGS-77274](https://issues.redhat.com/browse/OCPBUGS-77274): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2833](https://github.com/openshift/cluster-monitoring-operator/pull/2833)
* [OCPBUGS-67168](https://issues.redhat.com/browse/OCPBUGS-67168): Add the collection of MTV migration metrics [#2774](https://github.com/openshift/cluster-monitoring-operator/pull/2774)
* [OCPBUGS-61965](https://issues.redhat.com/browse/OCPBUGS-61965): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2723](https://github.com/openshift/cluster-monitoring-operator/pull/2723)
* [OCPBUGS-64579](https://issues.redhat.com/browse/OCPBUGS-64579): Fix KSM deny-list typo [#2731](https://github.com/openshift/cluster-monitoring-operator/pull/2731)
* [OCPBUGS-63488](https://issues.redhat.com/browse/OCPBUGS-63488): Remove AlertManager endpoints when disabled [#2737](https://github.com/openshift/cluster-monitoring-operator/pull/2737)
* [OCPBUGS-62852](https://issues.redhat.com/browse/OCPBUGS-62852): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 [#2702](https://github.com/openshift/cluster-monitoring-operator/pull/2702)
* [OCPBUGS-63410](https://issues.redhat.com/browse/OCPBUGS-63410): [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy [#2724](https://github.com/openshift/cluster-monitoring-operator/pull/2724)
* [OCPBUGS-63017](https://issues.redhat.com/browse/OCPBUGS-63017): test: remove image registry e2e tests [#2711](https://github.com/openshift/cluster-monitoring-operator/pull/2711)
* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2669](https://github.com/openshift/cluster-monitoring-operator/pull/2669)
* [OCPBUGS-59962](https://issues.redhat.com/browse/OCPBUGS-59962): operator: increase wait time till degraded to max 4 times 5m [#2633](https://github.com/openshift/cluster-monitoring-operator/pull/2633)
* [OCPBUGS-56251](https://issues.redhat.com/browse/OCPBUGS-56251): set upgradable false when alertmanager v1 is specified [#2591](https://github.com/openshift/cluster-monitoring-operator/pull/2591)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4482c5f2cae50a25d67cae3ad74fbbc13ce0673a...8108394db9feefb2dedfe4574768dc080ad34476)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8df9d04f3019ff6e0a4c51504601e8a73b4322e3)

* [OCPBUGS-74154](https://issues.redhat.com/browse/OCPBUGS-74154): whereabouts-config is a reserved name for user interaction. [#2884](https://github.com/openshift/cluster-network-operator/pull/2884)
* [OCPBUGS-73767](https://issues.redhat.com/browse/OCPBUGS-73767): Tweak iptables-alerter to try to avoid crictl bug [#2877](https://github.com/openshift/cluster-network-operator/pull/2877)
* [OCPBUGS-65704](https://issues.redhat.com/browse/OCPBUGS-65704), [OCPBUGS-65705](https://issues.redhat.com/browse/OCPBUGS-65705): Annotate whereabouts-controller [#2842](https://github.com/openshift/cluster-network-operator/pull/2842)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Add drop flows for GARP [#2810](https://github.com/openshift/cluster-network-operator/pull/2810)
* [OCPBUGS-60984](https://issues.redhat.com/browse/OCPBUGS-60984): Update CNO reviewers/approvers [#2766](https://github.com/openshift/cluster-network-operator/pull/2766)
* [OCPBUGS-60795](https://issues.redhat.com/browse/OCPBUGS-60795): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2782](https://github.com/openshift/cluster-network-operator/pull/2782)
* [OCPBUGS-47651](https://issues.redhat.com/browse/OCPBUGS-47651): Re-disable metrics server [#2622](https://github.com/openshift/cluster-network-operator/pull/2622)
* [OCPBUGS-58047](https://issues.redhat.com/browse/OCPBUGS-58047): Add cert-rotation script into cno [#2702](https://github.com/openshift/cluster-network-operator/pull/2702)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bf1d73069e4905749e2f15f88aa1e7590d489baf...8df9d04f3019ff6e0a4c51504601e8a73b4322e3)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/700994b4688decd0808aec1761a2c87e9d4ef685)

* [OCPBUGS-75954](https://issues.redhat.com/browse/OCPBUGS-75954): PPC: filter out namespaces dir [#1465](https://github.com/openshift/cluster-node-tuning-operator/pull/1465)
* [OCPBUGS-69947](https://issues.redhat.com/browse/OCPBUGS-69947): [release-4.18] E2E: skip stalld test checking sched_fifo [#1451](https://github.com/openshift/cluster-node-tuning-operator/pull/1451)
* [OCPBUGS-63450](https://issues.redhat.com/browse/OCPBUGS-63450): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1417](https://github.com/openshift/cluster-node-tuning-operator/pull/1417)
* And 6 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/c004ea7ea486e983d296311ca2b40cc9a431c394...700994b4688decd0808aec1761a2c87e9d4ef685)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)

* [OCPBUGS-57767](https://issues.redhat.com/browse/OCPBUGS-57767): fix olm.maxOpenShiftVersion float parsing [#125](https://github.com/openshift/cluster-olm-operator/pull/125)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/0ffe0aed115535e9489b6f309ac4d2c6c976adf3...88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bc725fd43d29758ad8f704044ccc8abb6926ad84)

* [OCPBUGS-63511](https://issues.redhat.com/browse/OCPBUGS-63511): references to github.com/sclorg/django-ex.git now also refer to the branch [#657](https://github.com/openshift/cluster-samples-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa...bc725fd43d29758ad8f704044ccc8abb6926ad84)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/43fe40ddc11a8453f83273bbea82ae6295b496f9)

* [OCPBUGS-62666](https://issues.redhat.com/browse/OCPBUGS-62666): Move metrics to vsphere driver [#632](https://github.com/openshift/cluster-storage-operator/pull/632)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/65d06444110f8044a84ccf4f977ee9520f2bdf89...43fe40ddc11a8453f83273bbea82ae6295b496f9)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f72d7e2c7dc8f5e0bb8687f9b9fd0c918952cbda)

* [OCPBUGS-70182](https://issues.redhat.com/browse/OCPBUGS-70182): Unify capitalization when comparing architectures for available updates [#1327](https://github.com/openshift/cluster-version-operator/pull/1327)
* NO-ISSUE: hongkai becomes an approver release-4.18 [#1286](https://github.com/openshift/cluster-version-operator/pull/1286)
* [OCPBUGS-62869](https://issues.redhat.com/browse/OCPBUGS-62869): disable metrics auth for hypershift clusters [#1242](https://github.com/openshift/cluster-version-operator/pull/1242)
* [OCPBUGS-58450](https://issues.redhat.com/browse/OCPBUGS-58450): Failing=Unknown upon long CO updating [#1211](https://github.com/openshift/cluster-version-operator/pull/1211)
* [OCPBUGS-60222](https://issues.redhat.com/browse/OCPBUGS-60222): CVO protects /metrics with authorization [#1223](https://github.com/openshift/cluster-version-operator/pull/1223)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/94c0e705d520b0eeb765f72de2dae2cd6f1159bb...f72d7e2c7dc8f5e0bb8687f9b9fd0c918952cbda)


### [console](https://github.com/openshift/console/tree/dda58086cc1d64392b560b461b8736fc0eb00485)

* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16073](https://github.com/openshift/console/pull/16073)
* NO-JIRA: Bump builder image to v29 [#15995](https://github.com/openshift/console/pull/15995)
* [OCPBUGS-65808](https://issues.redhat.com/browse/OCPBUGS-65808): Fix PatternFly dark theme colors for charts and form inputs [#15951](https://github.com/openshift/console/pull/15951)
* [OCPBUGS-74458](https://issues.redhat.com/browse/OCPBUGS-74458): Bump lodash to latest [#15965](https://github.com/openshift/console/pull/15965)
* [OCPBUGS-73753](https://issues.redhat.com/browse/OCPBUGS-73753): Fix Helm chart installation with CA/TLS certificates [#15914](https://github.com/openshift/console/pull/15914)
* [OCPBUGS-73662](https://issues.redhat.com/browse/OCPBUGS-73662): Namespace is not persisting when switching to developer view from the topology page of admin page [#15910](https://github.com/openshift/console/pull/15910)
* [OCPBUGS-69915](https://issues.redhat.com/browse/OCPBUGS-69915): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15868](https://github.com/openshift/console/pull/15868)
* [OCPBUGS-69448](https://issues.redhat.com/browse/OCPBUGS-69448): Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in "All Projects" mode [#15855](https://github.com/openshift/console/pull/15855)
* [OCPBUGS-68361](https://issues.redhat.com/browse/OCPBUGS-68361): Disallowed Pipelines-plugin Pipelines navigation section [#15842](https://github.com/openshift/console/pull/15842)
* [OCPBUGS-65592](https://issues.redhat.com/browse/OCPBUGS-65592): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15725](https://github.com/openshift/console/pull/15725)
* [OCPBUGS-65932](https://issues.redhat.com/browse/OCPBUGS-65932): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15761](https://github.com/openshift/console/pull/15761)
* [OCPBUGS-65533](https://issues.redhat.com/browse/OCPBUGS-65533): Preserve path on perspective switch [#15716](https://github.com/openshift/console/pull/15716)
* [OCPBUGS-64735](https://issues.redhat.com/browse/OCPBUGS-64735): Expose prometheus tenancy label path as a proxy [#15685](https://github.com/openshift/console/pull/15685)
* [OCPBUGS-64682](https://issues.redhat.com/browse/OCPBUGS-64682): limit node log length to 1000 lines [#15680](https://github.com/openshift/console/pull/15680)
* [OCPBUGS-63657](https://issues.redhat.com/browse/OCPBUGS-63657): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15654](https://github.com/openshift/console/pull/15654)
* [OCPBUGS-63247](https://issues.redhat.com/browse/OCPBUGS-63247): fix bug where Roles list was displaying invalid data f… [#15619](https://github.com/openshift/console/pull/15619)
* [OCPBUGS-63041](https://issues.redhat.com/browse/OCPBUGS-63041): switch to dev perspective for `/dev-monitoring` [#15601](https://github.com/openshift/console/pull/15601)
* [OCPBUGS-44156](https://issues.redhat.com/browse/OCPBUGS-44156): bump dompurify to latest [#15589](https://github.com/openshift/console/pull/15589)
* [OCPBUGS-62326](https://issues.redhat.com/browse/OCPBUGS-62326): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15544](https://github.com/openshift/console/pull/15544)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Update CHANGELOG for 4.18 plugin SDK package publish [#15516](https://github.com/openshift/console/pull/15516)
* [OCPBUGS-61569](https://issues.redhat.com/browse/OCPBUGS-61569): Fix bug with Console provided PatternFly shared modules [#15479](https://github.com/openshift/console/pull/15479)
* [OCPBUGS-61697](https://issues.redhat.com/browse/OCPBUGS-61697): Remove ancient `X-XSS-Protection` header [#15493](https://github.com/openshift/console/pull/15493)
* [OCPBUGS-60236](https://issues.redhat.com/browse/OCPBUGS-60236): Make sure CSP violations are only reported to telemetry once per day per browser [#15453](https://github.com/openshift/console/pull/15453)
* NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish [#15456](https://github.com/openshift/console/pull/15456)
* [OCPBUGS-50983](https://issues.redhat.com/browse/OCPBUGS-50983): Store Topology sidebar alert in the localStorage [#15431](https://github.com/openshift/console/pull/15431)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Added patternfly/react-topology to shared module list of dynamic plugin sdk [#15371](https://github.com/openshift/console/pull/15371)
* [OCPBUGS-50570](https://issues.redhat.com/browse/OCPBUGS-50570): Fix regression where plugins were not tracking CSP violation status a… [#14754](https://github.com/openshift/console/pull/14754)
* [OCPBUGS-60140](https://issues.redhat.com/browse/OCPBUGS-60140): Recognize Detached BMH status [#15362](https://github.com/openshift/console/pull/15362)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Add BaseNode in topology folder into Dynamic Plugin SDK [#15369](https://github.com/openshift/console/pull/15369)
* : OCPBUGS-60278: Fix i18n string for event stream [#15403](https://github.com/openshift/console/pull/15403)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose OdcBaseNode through the dynamic plugin SDK [#15370](https://github.com/openshift/console/pull/15370)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose topology components and utils via plugin SDK internal package [#14777](https://github.com/openshift/console/pull/14777)
* [OCPBUGS-58364](https://issues.redhat.com/browse/OCPBUGS-58364): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15272](https://github.com/openshift/console/pull/15272)
* [OCPBUGS-59778](https://issues.redhat.com/browse/OCPBUGS-59778): add data-test attrs to console plugins table [#15327](https://github.com/openshift/console/pull/15327)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#15330](https://github.com/openshift/console/pull/15330)
* [OCPBUGS-59501](https://issues.redhat.com/browse/OCPBUGS-59501): Add the Origin header to the HeaderBlacklist in the co… [#15295](https://github.com/openshift/console/pull/15295)
* [OCPBUGS-59443](https://issues.redhat.com/browse/OCPBUGS-59443): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15290](https://github.com/openshift/console/pull/15290)
* [OCPBUGS-59446](https://issues.redhat.com/browse/OCPBUGS-59446): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15292](https://github.com/openshift/console/pull/15292)
* [OCPBUGS-58457](https://issues.redhat.com/browse/OCPBUGS-58457): fix bug where / in console.tab/horizontalNav href brea… [#15250](https://github.com/openshift/console/pull/15250)
* [OCPBUGS-58203](https://issues.redhat.com/browse/OCPBUGS-58203): OpenShift console PVC clone cannot use B as the unit [#15215](https://github.com/openshift/console/pull/15215)
* [OCPBUGS-58317](https://issues.redhat.com/browse/OCPBUGS-58317): Implement sessions in openshift authenticator [#15237](https://github.com/openshift/console/pull/15237)
* [OCPBUGS-58088](https://issues.redhat.com/browse/OCPBUGS-58088): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15202](https://github.com/openshift/console/pull/15202)
* [OCPBUGS-58089](https://issues.redhat.com/browse/OCPBUGS-58089): Getting "Oh no something went wrong" error message in web console. [#15203](https://github.com/openshift/console/pull/15203)
* [OCPBUGS-57931](https://issues.redhat.com/browse/OCPBUGS-57931): Add the ability to launch multiple modals with useModal hook [#15196](https://github.com/openshift/console/pull/15196)
* [OCPBUGS-57580](https://issues.redhat.com/browse/OCPBUGS-57580): Update vSphere configuration form to support CM YAML f… [#15191](https://github.com/openshift/console/pull/15191)
* [OCPBUGS-57743](https://issues.redhat.com/browse/OCPBUGS-57743): Fix TypeError Cannot read properties of null (reading 'metadata') [#15188](https://github.com/openshift/console/pull/15188)
* [OCPBUGS-57209](https://issues.redhat.com/browse/OCPBUGS-57209): Add flags in console static plugin for all the components of this epic [#15160](https://github.com/openshift/console/pull/15160)
* [OCPBUGS-36173](https://issues.redhat.com/browse/OCPBUGS-36173): Secret key with binary file changes when edited via Console. [#15178](https://github.com/openshift/console/pull/15178)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/9e5b4ae6d5a5b662337844ee0a26bc892f51cfcf...dda58086cc1d64392b560b461b8736fc0eb00485)


### [console-operator](https://github.com/openshift/console-operator/tree/3f78ddd562b8a901ad30cb7b18b4c27e703561bd)

* [OCPBUGS-77861](https://issues.redhat.com/browse/OCPBUGS-77861): update go mod dependency for konflux [#1113](https://github.com/openshift/console-operator/pull/1113)
* [NETOBSERV-2023](https://issues.redhat.com/browse/NETOBSERV-2023), [OCPBUGS-60304](https://issues.redhat.com/browse/OCPBUGS-60304): Implement a quickstart for netobserv operator [#997](https://github.com/openshift/console-operator/pull/997)
* [OCPBUGS-60081](https://issues.redhat.com/browse/OCPBUGS-60081): Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console [#1031](https://github.com/openshift/console-operator/pull/1031)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#1027](https://github.com/openshift/console-operator/pull/1027)
* [OCPBUGS-45869](https://issues.redhat.com/browse/OCPBUGS-45869): don't set current clients when no OIDC providers are configured [#948](https://github.com/openshift/console-operator/pull/948)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/10a0cc293e61b8125ebec8c9c98ede22a0824d06...3f78ddd562b8a901ad30cb7b18b4c27e703561bd)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c)

* [OCPBUGS-60871](https://issues.redhat.com/browse/OCPBUGS-60871): [release-4.18] host-device: Return interface name in result [#208](https://github.com/openshift/containernetworking-plugins/pull/208)
* [OCPBUGS-56928](https://issues.redhat.com/browse/OCPBUGS-56928): bridge: Add option to enable port isolation [#203](https://github.com/openshift/containernetworking-plugins/pull/203)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/59ee57ce5be64e6b0227140b84bcc48eb90f40d2...e8ca1d70c43f33cd0e75c776e2a24afbec61b46c)


### [coredns](https://github.com/openshift/coredns/tree/8ca7f02b8becb40f7a9919243000e2620d7036d4)

* [OCPBUGS-60462](https://issues.redhat.com/browse/OCPBUGS-60462): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#152](https://github.com/openshift/coredns/pull/152)
* [Full changelog](https://github.com/openshift/coredns/compare/eb75d9b4f41a5ce0258d6f245c6206715ecb283b...8ca7f02b8becb40f7a9919243000e2620d7036d4)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/8857214a0160e383269525675ecbe6be40ca6f80)

* [OCPBUGS-57800](https://issues.redhat.com/browse/OCPBUGS-57800): Rebase release-4.18 onto release-1.31 [#322](https://github.com/openshift/cloud-provider-openstack/pull/322)
* [OCPBUGS-58835](https://issues.redhat.com/browse/OCPBUGS-58835): CARRY: don't ignore json files [#339](https://github.com/openshift/cloud-provider-openstack/pull/339)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/b52ca7e89560678f3420aac02cfdb11febcfae67...8857214a0160e383269525675ecbe6be40ca6f80)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/a14236907d2e7f3f0342d399f01ad38ee66b3346)

* [OCPBUGS-62467](https://issues.redhat.com/browse/OCPBUGS-62467): Requeue PVC over PV creation [#176](https://github.com/openshift/csi-external-resizer/pull/176)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/cca3837a84fcade22bd7b935c68d02904faa12aa...a14236907d2e7f3f0342d399f01ad38ee66b3346)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/8ddbcd381bf5317c1d1a93db3b5760681a33cb27)

* [OCPBUGS-63574](https://issues.redhat.com/browse/OCPBUGS-63574): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#190](https://github.com/openshift/csi-external-snapshotter/pull/190)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/838d2484157f076bbb81f1b584898aec6f051c2f...8ddbcd381bf5317c1d1a93db3b5760681a33cb27)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)

* [OCPBUGS-63324](https://issues.redhat.com/browse/OCPBUGS-63324): update log level verbosity to not clutter logs [#89](https://github.com/openshift/csi-node-driver-registrar/pull/89)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c21f5d02b498e9e49d94818f4ad3eaaae77ca161...ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)


### [docker-builder](https://github.com/openshift/builder/tree/529c96880ce41820700cf38ed8b6619697b71de9)

* [OCPBUGS-66990](https://issues.redhat.com/browse/OCPBUGS-66990): bump buildah to 1.37.7 to fix CVE-2025-52881 [#498](https://github.com/openshift/builder/pull/498)
* [OCPBUGS-65655](https://issues.redhat.com/browse/OCPBUGS-65655): BuildConfig inline Dockerfile fails with heredoc syntax [#486](https://github.com/openshift/builder/pull/486)
* [OCPBUGS-57758](https://issues.redhat.com/browse/OCPBUGS-57758): S2I build cpu limits observed by assemble are limited to 1 cpu [#473](https://github.com/openshift/builder/pull/473)
* [Full changelog](https://github.com/openshift/builder/compare/62f644bcf0b0010f51765b48a7dab28426ae2933...529c96880ce41820700cf38ed8b6619697b71de9)


### [docker-registry](https://github.com/openshift/image-registry/tree/5c3675514f52b485e7e369757aa9d4f7358bbd4f)

* [OCPBUGS-68253](https://issues.redhat.com/browse/OCPBUGS-68253): update logrus to v1.9.1 [#464](https://github.com/openshift/image-registry/pull/464)
* [IR-526](https://issues.redhat.com/browse/IR-526): remove AWS region check [#437](https://github.com/openshift/image-registry/pull/437)
* [Full changelog](https://github.com/openshift/image-registry/compare/0a39d2c759b311e98a1f4de4c7ba1cdeddba47bf...5c3675514f52b485e7e369757aa9d4f7358bbd4f)


### [etcd](https://github.com/openshift/etcd/tree/b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)

* [OCPBUGS-57112](https://issues.redhat.com/browse/OCPBUGS-57112): Updating ose-etcd-container image to be consistent with ART for 4.18 [#333](https://github.com/openshift/etcd/pull/333)
* [Full changelog](https://github.com/openshift/etcd/compare/416376871d09278b18ae16520363ea6c8b3c71a8...b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/dca06c58f8294c26e24945c5b1bfa3a7bb7c16af)

* [OCPBUGS-78278](https://issues.redhat.com/browse/OCPBUGS-78278): [release-4.18] update go mod dependency for konflux [#265](https://github.com/openshift/cluster-api-provider-gcp/pull/265)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#247](https://github.com/openshift/cluster-api-provider-gcp/pull/247)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/af54f5287c7d363c6bc7abe4ad9e72f4131d534c...dca06c58f8294c26e24945c5b1bfa3a7bb7c16af)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b2f858ba546520410f391b5f6afdbe0b1562903d)

* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Add max-concurrent-reconciles flag to machine actuator [#126](https://github.com/openshift/machine-api-provider-gcp/pull/126)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01f6b419357a539389704fcec9872997f808e540...b2f858ba546520410f391b5f6afdbe0b1562903d)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/f8ede8037d7775cb4025624f9f4f0904ca53553b)

* [OCPBUGS-68258](https://issues.redhat.com/browse/OCPBUGS-68258): UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 [#89](https://github.com/openshift/gcp-pd-csi-driver/pull/89)
* [OCPBUGS-44772](https://issues.redhat.com/browse/OCPBUGS-44772): Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment [#83](https://github.com/openshift/gcp-pd-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/1b8c94ac55d8602ba6669325ade654ae47ea74cf...f8ede8037d7775cb4025624f9f4f0904ca53553b)


### [haproxy-router](https://github.com/openshift/router/tree/ccd9551702a89cac27e38ebb63801ddb6823d101)

* [OCPBUGS-67214](https://issues.redhat.com/browse/OCPBUGS-67214): Add option abortonclose to HAProxy configuration template [#703](https://github.com/openshift/router/pull/703)
* [Full changelog](https://github.com/openshift/router/compare/d8058949aaf91dcdea050c58e6a34ef5f6670c67...ccd9551702a89cac27e38ebb63801ddb6823d101)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/91c24081f468e7636c824f4f5a2eb68660b81012)

* [OCPBUGS-54724](https://issues.redhat.com/browse/OCPBUGS-54724): Fix implementation of ContainsCIDR to allow non-equal addresses [#2267](https://github.com/openshift/kubernetes/pull/2267)
* [OCPBUGS-65553](https://issues.redhat.com/browse/OCPBUGS-65553): Update to Kubernetes v1.31.14 [#2521](https://github.com/openshift/kubernetes/pull/2521)
* [OCPBUGS-65494](https://issues.redhat.com/browse/OCPBUGS-65494): Fix Concurrentmap Iteration [#2512](https://github.com/openshift/kubernetes/pull/2512)
* [OCPBUGS-61773](https://issues.redhat.com/browse/OCPBUGS-61773): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write #2456 [#2475](https://github.com/openshift/kubernetes/pull/2475)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Backport StreamingCollectionEncoding for JSON and protobuf [#2483](https://github.com/openshift/kubernetes/pull/2483)
* [OCPBUGS-61557](https://issues.redhat.com/browse/OCPBUGS-61557): Rebase v1.31.13 [#2465](https://github.com/openshift/kubernetes/pull/2465)
* Revert "UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated."" [#2448](https://github.com/openshift/kubernetes/pull/2448)
* [OCPBUGS-60511](https://issues.redhat.com/browse/OCPBUGS-60511): Bump to v1.31.12 [#2440](https://github.com/openshift/kubernetes/pull/2440)
* [OCPBUGS-60524](https://issues.redhat.com/browse/OCPBUGS-60524): podresources: list: use active pods [#2413](https://github.com/openshift/kubernetes/pull/2413)
* UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated." [#2422](https://github.com/openshift/kubernetes/pull/2422)
* [OCPBUGS-57488](https://issues.redhat.com/browse/OCPBUGS-57488): UPSTREAM: &lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated. [#2333](https://github.com/openshift/kubernetes/pull/2333)
* [OCPBUGS-57499](https://issues.redhat.com/browse/OCPBUGS-57499): UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image [#2399](https://github.com/openshift/kubernetes/pull/2399)
* [OCPBUGS-44757](https://issues.redhat.com/browse/OCPBUGS-44757): Adjust NodeMonitorGracePeriod to 50s [#2385](https://github.com/openshift/kubernetes/pull/2385)
* [OCPBUGS-59535](https://issues.redhat.com/browse/OCPBUGS-59535): Rebase v1.31.11 to 4.18 [#2377](https://github.com/openshift/kubernetes/pull/2377)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#2348](https://github.com/openshift/kubernetes/pull/2348)
* [OCPBUGS-57070](https://issues.redhat.com/browse/OCPBUGS-57070): UPSTREAM: &lt;carry&gt;: Bump cadvisor version to fix container_fs metrics [#2332](https://github.com/openshift/kubernetes/pull/2332)
* [Full changelog](https://github.com/openshift/kubernetes/compare/db4023c383e559c6310710cd16a441912fc9c06f...91c24081f468e7636c824f4f5a2eb68660b81012)


### [hypershift](https://github.com/openshift/hypershift/tree/0d2075c649ed99657f6c5f90a0d273b8f99e9bc2)

* [OCPBUGS-76532](https://issues.redhat.com/browse/OCPBUGS-76532): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7699](https://github.com/openshift/hypershift/pull/7699)
* [OCPBUGS-77368](https://issues.redhat.com/browse/OCPBUGS-77368): Fix ignition-server pod restarts [#7878](https://github.com/openshift/hypershift/pull/7878)
* [CNTRLPLANE-1708](https://issues.redhat.com/browse/CNTRLPLANE-1708): Backport Customer Global Pull Secret to OpenShift 4.18.z [#7354](https://github.com/openshift/hypershift/pull/7354)
* [OCPBUGS-72932](https://issues.redhat.com/browse/OCPBUGS-72932): Fix Konflux EC voilation, update deprecated base … [#7456](https://github.com/openshift/hypershift/pull/7456)
* [OCPBUGS-69847](https://issues.redhat.com/browse/OCPBUGS-69847): test: remove unit tests that depend on network communication [release-4.18] [#7406](https://github.com/openshift/hypershift/pull/7406)
* [OCPBUGS-65843](https://issues.redhat.com/browse/OCPBUGS-65843): specify SCC annotation for pods in data plane [#7267](https://github.com/openshift/hypershift/pull/7267)
* [CNTRLPLANE-1902](https://issues.redhat.com/browse/CNTRLPLANE-1902): Migrate 4.18 pipelines to common pipeline template [#7211](https://github.com/openshift/hypershift/pull/7211)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): use csi-resizer image from release provider [#7103](https://github.com/openshift/hypershift/pull/7103)
* [OCPBUGS-63638](https://issues.redhat.com/browse/OCPBUGS-63638): [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7111](https://github.com/openshift/hypershift/pull/7111)
* [OCPBUGS-63034](https://issues.redhat.com/browse/OCPBUGS-63034): [release-4.18] Update DNS names for ovn-kubernetes cp metrics [#7025](https://github.com/openshift/hypershift/pull/7025)
* [OCPBUGS-63369](https://issues.redhat.com/browse/OCPBUGS-63369): Make the hypershift CLI binary FIPS-compliant [#7093](https://github.com/openshift/hypershift/pull/7093)
* [OCPBUGS-62808](https://issues.redhat.com/browse/OCPBUGS-62808): Fix driver-config ConfigMap content flapping due to random ordering #6944 [#6947](https://github.com/openshift/hypershift/pull/6947)
* [CNTRLPLANE-1424](https://issues.redhat.com/browse/CNTRLPLANE-1424): feat(konflux): tag MCE HO images with latest [#6837](https://github.com/openshift/hypershift/pull/6837)
* [OCPBUGS-62816](https://issues.redhat.com/browse/OCPBUGS-62816): set default goaway-chance to 0.001 [#6950](https://github.com/openshift/hypershift/pull/6950)
* [OCPBUGS-61904](https://issues.redhat.com/browse/OCPBUGS-61904): resolve MIRRORED_RELEASE_IMAGE flapping [#6858](https://github.com/openshift/hypershift/pull/6858)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Sync RBAC for expansion support in kubevirt CSI driver [#6355](https://github.com/openshift/hypershift/pull/6355)
* [OCPBUGS-61568](https://issues.redhat.com/browse/OCPBUGS-61568): [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution [#6793](https://github.com/openshift/hypershift/pull/6793)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): ci: konflux multi-arch images [#6867](https://github.com/openshift/hypershift/pull/6867)
* [OCPBUGS-61203](https://issues.redhat.com/browse/OCPBUGS-61203): Use the common konflux pipeline and update CLI dockerfile [#6832](https://github.com/openshift/hypershift/pull/6832)
* NO-JIRA: chore(deps): update konflux references [#6667](https://github.com/openshift/hypershift/pull/6667)
* [OCPBUGS-57142](https://issues.redhat.com/browse/OCPBUGS-57142): [release-4.18] HCP payload doesn't respect multiple mirrors [#6672](https://github.com/openshift/hypershift/pull/6672)
* [OCPBUGS-60485](https://issues.redhat.com/browse/OCPBUGS-60485): feat(validations): add wildcard support to DNS SAN conflict detection [#6649](https://github.com/openshift/hypershift/pull/6649)
* [OCPBUGS-60148](https://issues.redhat.com/browse/OCPBUGS-60148): Always compress and encode payload in token secret for inplace upgrades [#6721](https://github.com/openshift/hypershift/pull/6721)
* [OCPBUGS-60923](https://issues.redhat.com/browse/OCPBUGS-60923): MCE 2.8 konflux for hcp-cli [#6700](https://github.com/openshift/hypershift/pull/6700)
* [CNTRLPLANE-1333](https://issues.redhat.com/browse/CNTRLPLANE-1333): New API to support specifying cluster-autoscaler flags [#6641](https://github.com/openshift/hypershift/pull/6641)
* [OCPBUGS-60458](https://issues.redhat.com/browse/OCPBUGS-60458): Update PSA from v1beta1 to v1 [#6644](https://github.com/openshift/hypershift/pull/6644)
* [CNTRLPLANE-1269](https://issues.redhat.com/browse/CNTRLPLANE-1269): chore(deps): update konflux references [#6658](https://github.com/openshift/hypershift/pull/6658)
* [CNTRLPLANE-1205](https://issues.redhat.com/browse/CNTRLPLANE-1205): Add missing mce-2.8 pipeline [#6656](https://github.com/openshift/hypershift/pull/6656)
* [OCPBUGS-59503](https://issues.redhat.com/browse/OCPBUGS-59503): [release-4.18] Support proxy authentication when user/pass is included in URL [#6460](https://github.com/openshift/hypershift/pull/6460)
* [CNTRLPLANE-1229](https://issues.redhat.com/browse/CNTRLPLANE-1229): Move CPO pipeline to hermetic builds [#6597](https://github.com/openshift/hypershift/pull/6597)
* [OCPBUGS-57818](https://issues.redhat.com/browse/OCPBUGS-57818): Reuse hosted cluster release and metadata providers [#6301](https://github.com/openshift/hypershift/pull/6301)
* [OCPBUGS-58126](https://issues.redhat.com/browse/OCPBUGS-58126): Don't use /version for haproxy health checks [#6323](https://github.com/openshift/hypershift/pull/6323)
* [Full changelog](https://github.com/openshift/hypershift/compare/6279e093a11b0893abeb77bebef6649d214dae0b...0d2075c649ed99657f6c5f90a0d273b8f99e9bc2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/fac07237771b1592166f0e87ffe42f53d438b9df)

* [OCPBUGS-77207](https://issues.redhat.com/browse/OCPBUGS-77207): [release-4.18] standardize build paths [#122](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/122)
* [OCPBUGS-58741](https://issues.redhat.com/browse/OCPBUGS-58741): bump github.com/golang/glog to version v1.2.4 [#104](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/104)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/1b9ad923f69b5e041777355bee96e918269d67e7...fac07237771b1592166f0e87ffe42f53d438b9df)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/1c7bc07e69c1e74a36b39b31f878da6391fdeefe)

* [OCPBUGS-55297](https://issues.redhat.com/browse/OCPBUGS-55297): [IBM VPC] set offlineExpansion to false in e2e test manifest [#144](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/144)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/feae260577a5ed5428432de9b7ca1439c98064de...1c7bc07e69c1e74a36b39b31f878da6391fdeefe)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/4a0c35b0464d5c0ae9d61b656b4d0d51c3085b7c)

* [OCPBUGS-67286](https://issues.redhat.com/browse/OCPBUGS-67286): [release-4.18] Fix incomplete vendor/ [#140](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/140)
* [OCPBUGS-51825](https://issues.redhat.com/browse/OCPBUGS-51825): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#120](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/120)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#119](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/119)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/2ba764f9a38c27f82a9198472c584fa633c8f2cd...4a0c35b0464d5c0ae9d61b656b4d0d51c3085b7c)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/a030ba3a5cb880e47bdb51719191367d78a6e43b)

* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#87](https://github.com/openshift/machine-api-provider-ibmcloud/pull/87)
* [OCPBUGS-47135](https://issues.redhat.com/browse/OCPBUGS-47135): CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] [#69](https://github.com/openshift/machine-api-provider-ibmcloud/pull/69)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f...a030ba3a5cb880e47bdb51719191367d78a6e43b)


### [insights-operator](https://github.com/openshift/insights-operator/tree/ff6ba73c5c7188d1b3d5942ab8a2264966a4a460)

* [OCPBUGS-76537](https://issues.redhat.com/browse/OCPBUGS-76537): [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1239](https://github.com/openshift/insights-operator/pull/1239)
* [OCPBUGS-68263](https://issues.redhat.com/browse/OCPBUGS-68263): Update github.com/sirupsen/logrus to v1.9.3 [#1205](https://github.com/openshift/insights-operator/pull/1205)
* [OCPBUGS-68263](https://issues.redhat.com/browse/OCPBUGS-68263): [release-4.18] golanci-lint version update & corresponding fixes (#1045) [#1206](https://github.com/openshift/insights-operator/pull/1206)
* [OCPBUGS-66396](https://issues.redhat.com/browse/OCPBUGS-66396): Add filtering to add other possible pod status to QEMU gatherer [#1195](https://github.com/openshift/insights-operator/pull/1195)
* [OCPBUGS-66182](https://issues.redhat.com/browse/OCPBUGS-66182): QEMU logs are not gathered if there are pending status virt-launcher pods [#1189](https://github.com/openshift/insights-operator/pull/1189)
* [OCPBUGS-66181](https://issues.redhat.com/browse/OCPBUGS-66181): [bugfix] The archive's records may include files whose names are out of bounds [#1188](https://github.com/openshift/insights-operator/pull/1188)
* [OCPBUGS-61972](https://issues.redhat.com/browse/OCPBUGS-61972): add missing permissions for replicasets and events [#1146](https://github.com/openshift/insights-operator/pull/1146)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7f9ed155f7361fb0a16f666fd53111cfb16d4cca...ff6ba73c5c7188d1b3d5942ab8a2264966a4a460)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/3d444833113258a5606cddc55192c9183d520968)

* [OCPBUGS-77789](https://issues.redhat.com/browse/OCPBUGS-77789): remove dnf cache from the container images [#69](https://github.com/openshift/insights-runtime-extractor/pull/69)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/7149f2d5ed4682258bd429cd719ea154e1a27550...3d444833113258a5606cddc55192c9183d520968)


### [ironic](https://github.com/openshift/ironic-image/tree/faea7d5fb63f37595275c95a11a222ddeb779e58)

* [OCPBUGS-74115](https://issues.redhat.com/browse/OCPBUGS-74115): Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix [#795](https://github.com/openshift/ironic-image/pull/795)
* [OCPBUGS-69790](https://issues.redhat.com/browse/OCPBUGS-69790): Bump eventlet version to 0.33.1-7 [#760](https://github.com/openshift/ironic-image/pull/760)
* [OCPBUGS-65573](https://issues.redhat.com/browse/OCPBUGS-65573): Include Handle HTTP 400 and 409 race condition in Redfish power opera… [#727](https://github.com/openshift/ironic-image/pull/727)
* [OCPBUGS-62647](https://issues.redhat.com/browse/OCPBUGS-62647): Bump sushy to include etag fix [#701](https://github.com/openshift/ironic-image/pull/701)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9161a5fdb75042856bd40eec31bdba7b7c07d4a2...faea7d5fb63f37595275c95a11a222ddeb779e58)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/e5b494596e52636ade8f462a37e74e557447b773)

* [OCPBUGS-69780](https://issues.redhat.com/browse/OCPBUGS-69780): Bump eventlet version to 0.33.1-7 [#230](https://github.com/openshift/ironic-agent-image/pull/230)
* [OCPBUGS-68360](https://issues.redhat.com/browse/OCPBUGS-68360): Include Test advertised ip reachability before assigning it [#226](https://github.com/openshift/ironic-agent-image/pull/226)
* [OCPBUGS-62456](https://issues.redhat.com/browse/OCPBUGS-62456): netutils: Use ethtool ioctl to get permanent mac address [#206](https://github.com/openshift/ironic-agent-image/pull/206)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/b79bddef03460124923c7ce8616d83f719a49960...e5b494596e52636ade8f462a37e74e557447b773)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/5a14ea9d338b2582c7c2a8f89f351a0c30f56371)

* [OCPBUGS-60930](https://issues.redhat.com/browse/OCPBUGS-60930): fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 [#125](https://github.com/openshift/kube-rbac-proxy/pull/125)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/526498ab32996a0f67a96530ad7173f955e3fbe2...5a14ea9d338b2582c7c2a8f89f351a0c30f56371)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/046193a8872c145150c28160577002bfd453b2f5)

* [OCPBUGS-74873](https://issues.redhat.com/browse/OCPBUGS-74873): Deduplicate CRS stores [#131](https://github.com/openshift/kube-state-metrics/pull/131)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61...046193a8872c145150c28160577002bfd453b2f5)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/815b43b7f7288da76dd314553e113aefe2a5897d)

* [OCPBUGS-78273](https://issues.redhat.com/browse/OCPBUGS-78273): fix /vendor for hermetic 4.18 [#239](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/239)
* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). [#225](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/225)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8dec42d36f9e26487112aeac870767a5fedb8021...815b43b7f7288da76dd314553e113aefe2a5897d)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/c323ecc7e44eec1ac2f5da97e1579df29f78cd1f)

* [OCPBUGS-79362](https://issues.redhat.com/browse/OCPBUGS-79362): Add annotation-based fallback for infra VM node ID resolution [#86](https://github.com/openshift/kubevirt-csi-driver/pull/86)
* [OCPBUGS-63670](https://issues.redhat.com/browse/OCPBUGS-63670): Add awels as an approver in 4.18 branch [#73](https://github.com/openshift/kubevirt-csi-driver/pull/73)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Implement volume expansion [#71](https://github.com/openshift/kubevirt-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2111495e6d03f1bfe0702996fdd1355ca21b78cf...c323ecc7e44eec1ac2f5da97e1579df29f78cd1f)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/875b03bd28f1104af74413c3bc72e4546a428bf4)

* [OCPBUGS-77194](https://issues.redhat.com/browse/OCPBUGS-77194): Fix incomplete vendor/ [#300](https://github.com/openshift/cluster-api-provider-libvirt/pull/300)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...875b03bd28f1104af74413c3bc72e4546a428bf4)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b3a96a466d238ecc73238f57b7fc14a6d9929d9a)

* [OCPBUGS-78795](https://issues.redhat.com/browse/OCPBUGS-78795): [release-4.18] : correct aws kms permissions [#1478](https://github.com/openshift/machine-api-operator/pull/1478)
* [OCPBUGS-78796](https://issues.redhat.com/browse/OCPBUGS-78796): [release-4.18] Use resource group when generating default Azure image [#1480](https://github.com/openshift/machine-api-operator/pull/1480)
* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Enabled 10 concurrent reconciles on GCP [#1392](https://github.com/openshift/machine-api-operator/pull/1392)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc...b3a96a466d238ecc73238f57b7fc14a6d9929d9a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/7d117b24b0419a2297f4f087d52b12a72cc89c88)

* [OCPBUGS-79483](https://issues.redhat.com/browse/OCPBUGS-79483): set default-timeout-stop to 200s globally [#5805](https://github.com/openshift/machine-config-operator/pull/5805)
* [OCPBUGS-62692](https://issues.redhat.com/browse/OCPBUGS-62692): configure-ovs: work around a Cisco switch issue [#5329](https://github.com/openshift/machine-config-operator/pull/5329)
* [OCPBUGS-78056](https://issues.redhat.com/browse/OCPBUGS-78056): Prevent unnecessary systemd unit disable [#5758](https://github.com/openshift/machine-config-operator/pull/5758)
* [OCPBUGS-74148](https://issues.redhat.com/browse/OCPBUGS-74148): enable nodeip-configuration for platform external [#5578](https://github.com/openshift/machine-config-operator/pull/5578)
* [OCPBUGS-77777](https://issues.redhat.com/browse/OCPBUGS-77777): reduce MCO image size [#5738](https://github.com/openshift/machine-config-operator/pull/5738)
* [OCPBUGS-77576](https://issues.redhat.com/browse/OCPBUGS-77576): mcd_config_drift not working properly [#5726](https://github.com/openshift/machine-config-operator/pull/5726)
* [OCPBUGS-77421](https://issues.redhat.com/browse/OCPBUGS-77421): Remove MCD liveness probe [#5710](https://github.com/openshift/machine-config-operator/pull/5710)
* [OCPBUGS-74644](https://issues.redhat.com/browse/OCPBUGS-74644): After OCL is enabled few phases in MCN are not updating as expected [#5605](https://github.com/openshift/machine-config-operator/pull/5605)
* [OCPBUGS-77092](https://issues.redhat.com/browse/OCPBUGS-77092): Machine-config controller should not log about non-existent pull-secret changes [#5680](https://github.com/openshift/machine-config-operator/pull/5680)
* [OCPBUGS-77041](https://issues.redhat.com/browse/OCPBUGS-77041): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5671](https://github.com/openshift/machine-config-operator/pull/5671)
* [OCPBUGS-76560](https://issues.redhat.com/browse/OCPBUGS-76560): [release-4.18]: cherry pick to few fixes that needed for missing services and configuration [#5653](https://github.com/openshift/machine-config-operator/pull/5653)
* [OCPBUGS-71227](https://issues.redhat.com/browse/OCPBUGS-71227): MCP is not correctly degraded when a pivotError happens [#5534](https://github.com/openshift/machine-config-operator/pull/5534)
* [OCPBUGS-70336](https://issues.redhat.com/browse/OCPBUGS-70336): Remove log exposing kubeconfig [#5528](https://github.com/openshift/machine-config-operator/pull/5528)
* [OCPBUGS-62169](https://issues.redhat.com/browse/OCPBUGS-62169): Fix - NetworkManager restart or crash renders br-ex unusable [#5356](https://github.com/openshift/machine-config-operator/pull/5356)
* [OCPBUGS-65850](https://issues.redhat.com/browse/OCPBUGS-65850): Remove --mount directives [#5433](https://github.com/openshift/machine-config-operator/pull/5433)
* [OCPBUGS-62294](https://issues.redhat.com/browse/OCPBUGS-62294): Make static DNS with DHCP IP work [#5311](https://github.com/openshift/machine-config-operator/pull/5311)
* [OCPBUGS-63346](https://issues.redhat.com/browse/OCPBUGS-63346): Invalid architecture value found in annotation during 4.19 update [#5366](https://github.com/openshift/machine-config-operator/pull/5366)
* [OCPBUGS-60111](https://issues.redhat.com/browse/OCPBUGS-60111): Enable debug logging for nodeip-configuration [#5220](https://github.com/openshift/machine-config-operator/pull/5220)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5325](https://github.com/openshift/machine-config-operator/pull/5325)
* [OCPBUGS-62845](https://issues.redhat.com/browse/OCPBUGS-62845): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5341](https://github.com/openshift/machine-config-operator/pull/5341)
* [OCPBUGS-62499](https://issues.redhat.com/browse/OCPBUGS-62499): Add /etc/docker/certs.d to template [#5320](https://github.com/openshift/machine-config-operator/pull/5320)
* [OCPBUGS-62637](https://issues.redhat.com/browse/OCPBUGS-62637): Machine-config controller should actively manage cordon while draining [#5322](https://github.com/openshift/machine-config-operator/pull/5322)
* [OCPBUGS-62350](https://issues.redhat.com/browse/OCPBUGS-62350): Add mcd_local_unsupported_packages recording rule [#5315](https://github.com/openshift/machine-config-operator/pull/5315)
* [OCPBUGS-62321](https://issues.redhat.com/browse/OCPBUGS-62321): Add control-plane label for master nodes on legacy clusters [#5314](https://github.com/openshift/machine-config-operator/pull/5314)
* [OCPBUGS-61840](https://issues.redhat.com/browse/OCPBUGS-61840): Override NMState service definition [#5288](https://github.com/openshift/machine-config-operator/pull/5288)
* [OCPBUGS-57357](https://issues.redhat.com/browse/OCPBUGS-57357): Race in configure-ovs.sh affects bonding interface configuration. [#5118](https://github.com/openshift/machine-config-operator/pull/5118)
* [OCPBUGS-59929](https://issues.redhat.com/browse/OCPBUGS-59929), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5207](https://github.com/openshift/machine-config-operator/pull/5207)
* [OCPBUGS-60034](https://issues.redhat.com/browse/OCPBUGS-60034): Add workaround fix for static pod race [#5212](https://github.com/openshift/machine-config-operator/pull/5212)
* [OCPBUGS-56751](https://issues.redhat.com/browse/OCPBUGS-56751): Support NODEIP_HINT in IPI deployments too [#5081](https://github.com/openshift/machine-config-operator/pull/5081)
* [OCPBUGS-55246](https://issues.redhat.com/browse/OCPBUGS-55246): kubelet: readonly mounts for criometricsproxy [#4998](https://github.com/openshift/machine-config-operator/pull/4998)
* [OCPBUGS-58067](https://issues.redhat.com/browse/OCPBUGS-58067): Ensure the build controller restarts on upgrade [#5140](https://github.com/openshift/machine-config-operator/pull/5140)
* [OCPBUGS-57328](https://issues.redhat.com/browse/OCPBUGS-57328): Do not set cpu system reserve below the default value [#5152](https://github.com/openshift/machine-config-operator/pull/5152)
* [OCPBUGS-56624](https://issues.redhat.com/browse/OCPBUGS-56624): Give keepalived container chroot cap [#5073](https://github.com/openshift/machine-config-operator/pull/5073)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#5138](https://github.com/openshift/machine-config-operator/pull/5138)
* [OCPBUGS-57935](https://issues.redhat.com/browse/OCPBUGS-57935): add MachineConfiguration to CO related objects [#5134](https://github.com/openshift/machine-config-operator/pull/5134)
* [OCPBUGS-54463](https://issues.redhat.com/browse/OCPBUGS-54463): Update desired config in MCN on OCL update [#5026](https://github.com/openshift/machine-config-operator/pull/5026)
* [OCPBUGS-57900](https://issues.redhat.com/browse/OCPBUGS-57900): MCC complains about v1 MachineOSConfig in default featureset [#5131](https://github.com/openshift/machine-config-operator/pull/5131)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/efe259e04ba98784102ba603941ecbbb75233c6b...7d117b24b0419a2297f4f087d52b12a72cc89c88)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/fecdfc923a4b3158f161dc16436b95e7008bf2f9)

* [OCPBUGS-77888](https://issues.redhat.com/browse/OCPBUGS-77888): Clean up dnf cache to reduce container image size [#168](https://github.com/openshift/image-customization-controller/pull/168)
* [OCPBUGS-68262](https://issues.redhat.com/browse/OCPBUGS-68262): [4.18] Uplift logrus [#151](https://github.com/openshift/image-customization-controller/pull/151)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d9a71247dafd469182d4bd13ef227c9be82a1e32...fecdfc923a4b3158f161dc16436b95e7008bf2f9)


### [metallb-frr](https://github.com/openshift/frr/tree/760c6639a0c4825745d69b389b50689ebc2b8052)

* [OCPBUGS-74485](https://issues.redhat.com/browse/OCPBUGS-74485): Dockerfile: unpin FRR rpm [#121](https://github.com/openshift/frr/pull/121)
* [Full changelog](https://github.com/openshift/frr/compare/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91...760c6639a0c4825745d69b389b50689ebc2b8052)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/13fdbe7bcd336f6ea5a174ce6d13f8b8e64b1367)

* NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] [#818](https://github.com/openshift/monitoring-plugin/pull/818)
* [OCPBUGS-70291](https://issues.redhat.com/browse/OCPBUGS-70291): fix: update qs vulnerable dependency [#739](https://github.com/openshift/monitoring-plugin/pull/739)
* [OCPBUGS-65958](https://issues.redhat.com/browse/OCPBUGS-65958): Fix metrics gaps 4.18 [#656](https://github.com/openshift/monitoring-plugin/pull/656)
* [OCPBUGS-64735](https://issues.redhat.com/browse/OCPBUGS-64735): allow tenancy access to metrics tag [#638](https://github.com/openshift/monitoring-plugin/pull/638)
* [OU-1059](https://issues.redhat.com/browse/OU-1059): add perspective to action injector [#632](https://github.com/openshift/monitoring-plugin/pull/632)
* NO-JIRA: update i18n strings [#508](https://github.com/openshift/monitoring-plugin/pull/508)
* [OCPBUGS-60199](https://issues.redhat.com/browse/OCPBUGS-60199): feat: add alerting rules tab to dev console [#493](https://github.com/openshift/monitoring-plugin/pull/493)
* [OCPBUGS-54314](https://issues.redhat.com/browse/OCPBUGS-54314): Fix "Export as CSV" [#461](https://github.com/openshift/monitoring-plugin/pull/461)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/eb6123bd41269ccc6f5abddadfbc8e3af4481e09...13fdbe7bcd336f6ea5a174ce6d13f8b8e64b1367)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0d7ea6c766349243ade17707af7bd2b43c3b4b8e)

* [OCPBUGS-58771](https://issues.redhat.com/browse/OCPBUGS-58771): Update the github.com/golang/glog module to v1.2.4 [#101](https://github.com/openshift/multus-admission-controller/pull/101)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/e46a6d7d6f2ea7baeff193c0a28901bc34ea0d43...0d7ea6c766349243ade17707af7bd2b43c3b4b8e)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/80580849f0a3578a6644d2960a6d24ec3847673c)

* [OCPBUGS-77853](https://issues.redhat.com/browse/OCPBUGS-77853): hermetic 4.18 [#276](https://github.com/openshift/multus-cni/pull/276)
* [Full changelog](https://github.com/openshift/multus-cni/compare/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d...80580849f0a3578a6644d2960a6d24ec3847673c)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/3362bbc4c47ad7aec4f9551355e32870c30ab7c8)

* [OCPBUGS-54939](https://issues.redhat.com/browse/OCPBUGS-54939): [release-4.18]: Support default ports value [#68](https://github.com/openshift/multus-networkpolicy/pull/68)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32...3362bbc4c47ad7aec4f9551355e32870c30ab7c8)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/86191ded510a5ec05f05b77ae847b86f50673258)

* [OCPBUGS-59697](https://issues.redhat.com/browse/OCPBUGS-59697): Prevent accidental IP deallocation in statefulsets [#376](https://github.com/openshift/whereabouts-cni/pull/376)
* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): The node slice controller should only process valid whereabouts confi… [#381](https://github.com/openshift/whereabouts-cni/pull/381)
* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): Add nodeslicecontroller bin to dockerfile [#373](https://github.com/openshift/whereabouts-cni/pull/373)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/ac43b0f8b214a013572af900aef3333f10447fea...86191ded510a5ec05f05b77ae847b86f50673258)


### [must-gather](https://github.com/openshift/must-gather/tree/02e536cc7b3a6632da0643ab78f8dd6570e7f122)

* [OCPBUGS-46437](https://issues.redhat.com/browse/OCPBUGS-46437): Separate resources with comma to fix malformed inspect [#470](https://github.com/openshift/must-gather/pull/470)
* [Full changelog](https://github.com/openshift/must-gather/compare/b851bd3589eb0f80471d4de2114a7635b0d12663...02e536cc7b3a6632da0643ab78f8dd6570e7f122)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)

* [OCPBUGS-62793](https://issues.redhat.com/browse/OCPBUGS-62793): Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted [#99](https://github.com/openshift/bond-cni/pull/99)
* [OCPBUGS-58095](https://issues.redhat.com/browse/OCPBUGS-58095): Bump github.com/containernetworking/plugins from to 1.7.1 [#79](https://github.com/openshift/bond-cni/pull/79)
* [OCPBUGS-57794](https://issues.redhat.com/browse/OCPBUGS-57794): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 [#74](https://github.com/openshift/bond-cni/pull/74)
* NO-JIRA: Add ci-operator yaml file [#78](https://github.com/openshift/bond-cni/pull/78)
* [Full changelog](https://github.com/openshift/bond-cni/compare/9506a1ff3e0b3b1cdddbd0fbb0ed687e289166b0...e2de925552f2444fb3b4fac37d36ff7b5fbf58eb)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/11e2dec958aa2adcad07b9eecaf8f50479e0880a)

* [OCPBUGS-58781](https://issues.redhat.com/browse/OCPBUGS-58781): Bump github.com/golang/glog to v1.2.4 (#111) [#111](https://github.com/openshift/network-metrics-daemon/pull/111)
* [OCPBUGS-60174](https://issues.redhat.com/browse/OCPBUGS-60174): Replace e2e test image (#120) [#120](https://github.com/openshift/network-metrics-daemon/pull/120)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/e4c214c3736fcb69b3160421f06e9b1a837b300b...11e2dec958aa2adcad07b9eecaf8f50479e0880a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/8c03ac029f38e80cf78ce9d14e5fc618a9726d89)

* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#319](https://github.com/openshift/networking-console-plugin/pull/319)
* [OCPBUGS-63582](https://issues.redhat.com/browse/OCPBUGS-63582): Fixed - Extra semicolon observed before Service IP in OCP Console [#306](https://github.com/openshift/networking-console-plugin/pull/306)
* [OCPBUGS-60178](https://issues.redhat.com/browse/OCPBUGS-60178): Fix ingress details [#264](https://github.com/openshift/networking-console-plugin/pull/264)
* [OCPBUGS-60124](https://issues.redhat.com/browse/OCPBUGS-60124): Fix requiremenets with no value [#259](https://github.com/openshift/networking-console-plugin/pull/259)
* [OCPBUGS-57286](https://issues.redhat.com/browse/OCPBUGS-57286): Fix pod context [#251](https://github.com/openshift/networking-console-plugin/pull/251)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9404c2330085c3dd42504f34c608974ffb957d6e...8c03ac029f38e80cf78ce9d14e5fc618a9726d89)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/1078b191784c375d31008aef9ee2b8484ca5fe7f)

* NO-JIRA: (chore): update OWNERS file [#170](https://github.com/openshift/oauth-apiserver/pull/170)
* [OCPBUGS-65841](https://issues.redhat.com/browse/OCPBUGS-65841): UPSTREAM: &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#155](https://github.com/openshift/oauth-apiserver/pull/155)
* [OCPBUGS-63050](https://issues.redhat.com/browse/OCPBUGS-63050): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#149](https://github.com/openshift/oauth-apiserver/pull/149)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/2575ff417406ea6680aff0de6efb524dbbe2b8d2...1078b191784c375d31008aef9ee2b8484ca5fe7f)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/9225edb9821cab67ffa628b05e0eed67973436f0)

* [OCPBUGS-61444](https://issues.redhat.com/browse/OCPBUGS-61444): Update x/crypto to v0.31.0 [#333](https://github.com/openshift/oauth-proxy/pull/333)
* [OCPBUGS-57172](https://issues.redhat.com/browse/OCPBUGS-57172): 4.18 kube 1.31 [#317](https://github.com/openshift/oauth-proxy/pull/317)
* [OCPBUGS-58312](https://issues.redhat.com/browse/OCPBUGS-58312): fix e2e tests [#325](https://github.com/openshift/oauth-proxy/pull/325)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/cbd44ad9f0e433d32ff16a2691c6278298afe89a...9225edb9821cab67ffa628b05e0eed67973436f0)


### [oauth-server](https://github.com/openshift/oauth-server/tree/287caff3aef5b5f8535ac2bf1242671a5c7701b7)

* [OCPBUGS-57300](https://issues.redhat.com/browse/OCPBUGS-57300): Updating oauth-server-container image to be consistent with ART for 4.18 [#186](https://github.com/openshift/oauth-server/pull/186)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3bedb4f45cbdaa50384cf7c7284617fb8a414cf2...287caff3aef5b5f8535ac2bf1242671a5c7701b7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/22a9fb8772753a2a56aa061b80bdc22ba4b2c992)

* [OCPBUGS-66051](https://issues.redhat.com/browse/OCPBUGS-66051): Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) [#1324](https://github.com/openshift/oc-mirror/pull/1324)
* [OCPBUGS-65510](https://issues.redhat.com/browse/OCPBUGS-65510): removes unintended exec permissions [#1312](https://github.com/openshift/oc-mirror/pull/1312)
* [OCPBUGS-62696](https://issues.redhat.com/browse/OCPBUGS-62696): v2/cli: show binary version in output [#1286](https://github.com/openshift/oc-mirror/pull/1286)
* [OCPBUGS-62711](https://issues.redhat.com/browse/OCPBUGS-62711): generate the archive only after mirroring [#1287](https://github.com/openshift/oc-mirror/pull/1287)
* [OCPBUGS-62432](https://issues.redhat.com/browse/OCPBUGS-62432): changes the warning message of 4.21 [#1278](https://github.com/openshift/oc-mirror/pull/1278)
* And 12 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/1b2084872f25a83e88ea1586afa0b5bda01c407c...22a9fb8772753a2a56aa061b80bdc22ba4b2c992)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/180aa92c13fda1aa1ae35205c9b380a4ead41e8b)

* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#139](https://github.com/openshift/operator-framework-catalogd/pull/139)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/9f981b3ee5822098c6e648aa30742da07318f954...180aa92c13fda1aa1ae35205c9b380a4ead41e8b)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/48a1e9247ab72edf8d61fa2376df5e6d9e16e53e)

* [OCPBUGS-62872](https://issues.redhat.com/browse/OCPBUGS-62872): set the SElinux type [#509](https://github.com/openshift/operator-framework-operator-controller/pull/509)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/ea60189f95af09f3c5c50c8de41d8f601bc5e881...48a1e9247ab72edf8d61fa2376df5e6d9e16e53e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/be33e23705684b7b8b0e194402d76446b45c66c0)

* [OCPBUGS-74234](https://issues.redhat.com/browse/OCPBUGS-74234): Bump library-go for route path validation fix [#603](https://github.com/openshift/openshift-apiserver/pull/603)
* [OCPBUGS-69955](https://issues.redhat.com/browse/OCPBUGS-69955): Add ValidatingAdmissionPolicy and check for omissions next time. [#589](https://github.com/openshift/openshift-apiserver/pull/589)
* [OCPBUGS-66379](https://issues.redhat.com/browse/OCPBUGS-66379): pkg/image: conditionally parse raw image manifest [#585](https://github.com/openshift/openshift-apiserver/pull/585)
* [OCPBUGS-65842](https://issues.redhat.com/browse/OCPBUGS-65842): UPSTREAM &lt;carry&gt;: bump kubernetes-apiserver to pick up loopback certificate expiration update [#581](https://github.com/openshift/openshift-apiserver/pull/581)
* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Wire dry run option to Image API server operations [#531](https://github.com/openshift/openshift-apiserver/pull/531)
* [OCPBUGS-56609](https://issues.redhat.com/browse/OCPBUGS-56609): Fix image reference in TestImageStreamImportQuayIO [#514](https://github.com/openshift/openshift-apiserver/pull/514)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/1872fbf5967acd6485589c339ac8cb6bd156ad72...be33e23705684b7b8b0e194402d76446b45c66c0)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/8ee744063ed12b249f1a2b89e9af4f53b2f1daf7)

* [OCPBUGS-61002](https://issues.redhat.com/browse/OCPBUGS-61002): legacy image pull secret rollback controller [#411](https://github.com/openshift/openshift-controller-manager/pull/411)
* [OCPBUGS-57949](https://issues.redhat.com/browse/OCPBUGS-57949): ignore error failing to find pull/push secrets [#399](https://github.com/openshift/openshift-controller-manager/pull/399)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/1f76c23407c6cc95902a4b4d8f679181df538d9d...8ee744063ed12b249f1a2b89e9af4f53b2f1daf7)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d5e6ff9f4baf4f306374f894d7b5e3e36ef52520)

* [OCPBUGS-64816](https://issues.redhat.com/browse/OCPBUGS-64816): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#371](https://github.com/openshift/cluster-api-provider-openstack/pull/371)
* [OCPBUGS-44458](https://issues.redhat.com/browse/OCPBUGS-44458): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#365](https://github.com/openshift/cluster-api-provider-openstack/pull/365)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/b0f0dc4e1a9123815cdc2124579b6f4367500a73...d5e6ff9f4baf4f306374f894d7b5e3e36ef52520)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/c43dba2c4d9edb0ffc62b71cb26815da31c8b9c8)

* [OCPBUGS-69648](https://issues.redhat.com/browse/OCPBUGS-69648): Don't record event for every reconcile [#143](https://github.com/openshift/machine-api-provider-openstack/pull/143)
* [OCPBUGS-76792](https://issues.redhat.com/browse/OCPBUGS-76792): Fix make test [#159](https://github.com/openshift/machine-api-provider-openstack/pull/159)
* [OCPBUGS-74986](https://issues.redhat.com/browse/OCPBUGS-74986): Revendor CAPO [#152](https://github.com/openshift/machine-api-provider-openstack/pull/152)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/d914e77ee67211024153b1535e8709c3cf190512...c43dba2c4d9edb0ffc62b71cb26815da31c8b9c8)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/4680ec1ee00e1af34e29ec598ac983bf74d2e523)

* [OCPBUGS-81473](https://issues.redhat.com/browse/OCPBUGS-81473): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1273](https://github.com/openshift/operator-framework-olm/pull/1273)
* [OCPBUGS-77714](https://issues.redhat.com/browse/OCPBUGS-77714): Remove the collect-profiles info from the microshift kustomization file [#1245](https://github.com/openshift/operator-framework-olm/pull/1245)
* [OCPBUGS-76924](https://issues.redhat.com/browse/OCPBUGS-76924): Remove the collect-profiles job [#1231](https://github.com/openshift/operator-framework-olm/pull/1231)
* [OCPBUGS-65700](https://issues.redhat.com/browse/OCPBUGS-65700): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1156](https://github.com/openshift/operator-framework-olm/pull/1156)
* [OCPBUGS-61364](https://issues.redhat.com/browse/OCPBUGS-61364): [4.18] e2e stability fixes [#1080](https://github.com/openshift/operator-framework-olm/pull/1080)
* [OCPBUGS-60644](https://issues.redhat.com/browse/OCPBUGS-60644): Add NetworkPolicy as a supported kind [#1048](https://github.com/openshift/operator-framework-olm/pull/1048)
* [OCPBUGS-59421](https://issues.redhat.com/browse/OCPBUGS-59421): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1040](https://github.com/openshift/operator-framework-olm/pull/1040)
* [OCPBUGS-58882](https://issues.redhat.com/browse/OCPBUGS-58882): Reduce Frequency of Update Requests for Copied CSVs (#3597) [#1034](https://github.com/openshift/operator-framework-olm/pull/1034)
* [OCPBUGS-57427](https://issues.redhat.com/browse/OCPBUGS-57427): reduce cache expiry frequency [release-4.19] [#1020](https://github.com/openshift/operator-framework-olm/pull/1020)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/969a7e031a97a7e12424b5d292f345a168b73e38...4680ec1ee00e1af34e29ec598ac983bf74d2e523)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/34521c26450e93eea0379e52f86b02c69fbacb49)

* [OCPBUGS-73883](https://issues.redhat.com/browse/OCPBUGS-73883): Increase default catalog polling interval to 4h (240m) [#707](https://github.com/operator-framework/operator-marketplace/pull/707)
* [OCPBUGS-68272](https://issues.redhat.com/browse/OCPBUGS-68272), [OCPBUGS-68273](https://issues.redhat.com/browse/OCPBUGS-68273): CVE-2025-65637 fixed in logrus v1.9.3+ [#703](https://github.com/operator-framework/operator-marketplace/pull/703)
* [OCPBUGS-62218](https://issues.redhat.com/browse/OCPBUGS-62218): Remove Expect func so that the test case can use the retry logic [#669](https://github.com/operator-framework/operator-marketplace/pull/669)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c06a810b321ad79ef572ce36ed935332a58ea319...34521c26450e93eea0379e52f86b02c69fbacb49)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/e367b542d01af429a5f9d3ac8b85970a328a76e3)

* [OCPBUGS-68284](https://issues.redhat.com/browse/OCPBUGS-68284): Bump github.com/sirupsen/logrus to v1.8.3 [#150](https://github.com/openshift/ovirt-csi-driver-operator/pull/150)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/0feae256abcc9b86c0276eaf2fc233cf899fb0ae...e367b542d01af429a5f9d3ac8b85970a328a76e3)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/4634c88f75f42d4fd2c795d0b8153cbe5babe656)

* [OCPBUGS-78015](https://issues.redhat.com/browse/OCPBUGS-78015): Add pperiyasamy to OWNERS for release-4.18 [#3045](https://github.com/openshift/ovn-kubernetes/pull/3045)
* [OCPBUGS-77516](https://issues.redhat.com/browse/OCPBUGS-77516): Clear stale conntrack UDP entries for nodePorts [#3016](https://github.com/openshift/ovn-kubernetes/pull/3016)
* [OCPBUGS-77083](https://issues.redhat.com/browse/OCPBUGS-77083), [OCPBUGS-77106](https://issues.redhat.com/browse/OCPBUGS-77106): [release-4.18] combined backport PR for 2 escalations [#2987](https://github.com/openshift/ovn-kubernetes/pull/2987)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): Branch Sync release-4.19 to release-4.18 [02-04-2026] [#2970](https://github.com/openshift/ovn-kubernetes/pull/2970)
* [OCPBUGS-74270](https://issues.redhat.com/browse/OCPBUGS-74270): release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync [#2943](https://github.com/openshift/ovn-kubernetes/pull/2943)
* [OCPBUGS-70346](https://issues.redhat.com/browse/OCPBUGS-70346): Branch Sync release-4.19 to release-4.18 [01-07-2026] [#2922](https://github.com/openshift/ovn-kubernetes/pull/2922)
* [OCPBUGS-66140](https://issues.redhat.com/browse/OCPBUGS-66140): Branch Sync release-4.19 to release-4.18 [12-31-2025] [#2916](https://github.com/openshift/ovn-kubernetes/pull/2916)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [OCPBUGS-66360](https://issues.redhat.com/browse/OCPBUGS-66360), [OCPBUGS-66381](https://issues.redhat.com/browse/OCPBUGS-66381), [OCPBUGS-66428](https://issues.redhat.com/browse/OCPBUGS-66428): Branch Sync release-4.19 to release-4.18 [12-03-2025] [#2895](https://github.com/openshift/ovn-kubernetes/pull/2895)
* [OCPBUGS-68347](https://issues.redhat.com/browse/OCPBUGS-68347): Add ricky-rav to OWNERS for release-4.18 [#2897](https://github.com/openshift/ovn-kubernetes/pull/2897)
* [OCPBUGS-64855](https://issues.redhat.com/browse/OCPBUGS-64855): Fix stale EIP assignments during failover and controller restart [#2849](https://github.com/openshift/ovn-kubernetes/pull/2849)
* [OCPBUGS-64780](https://issues.redhat.com/browse/OCPBUGS-64780): kubevirt: fix bad release of IPs of live migratable pods [#2847](https://github.com/openshift/ovn-kubernetes/pull/2847)
* [OCPBUGS-63459](https://issues.redhat.com/browse/OCPBUGS-63459): Branch Sync release-4.19 to release-4.18 [10-22-2025] [#2825](https://github.com/openshift/ovn-kubernetes/pull/2825)
* [OCPBUGS-63716](https://issues.redhat.com/browse/OCPBUGS-63716): Skip Pending pods in EgressIP status updates [#2836](https://github.com/openshift/ovn-kubernetes/pull/2836)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] [#2811](https://github.com/openshift/ovn-kubernetes/pull/2811)
* [OCPBUGS-62671](https://issues.redhat.com/browse/OCPBUGS-62671): Fix EgressIP stale GARP post reboot + pod restart [#2775](https://github.com/openshift/ovn-kubernetes/pull/2775)
* [OCPBUGS-59744](https://issues.redhat.com/browse/OCPBUGS-59744), [OCPBUGS-61455](https://issues.redhat.com/browse/OCPBUGS-61455): [4.18] allow default network -&gt; localnet on the same node for any localnet subnet [#2785](https://github.com/openshift/ovn-kubernetes/pull/2785)
* [OCPBUGS-61748](https://issues.redhat.com/browse/OCPBUGS-61748): [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] [#2777](https://github.com/openshift/ovn-kubernetes/pull/2777)
* [OCPBUGS-59680](https://issues.redhat.com/browse/OCPBUGS-59680): [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] [#2768](https://github.com/openshift/ovn-kubernetes/pull/2768)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): Update OWNERS file: Add Patryk/Martin as approvers [#2700](https://github.com/openshift/ovn-kubernetes/pull/2700)
* [OCPBUGS-59371](https://issues.redhat.com/browse/OCPBUGS-59371): EIP OVN controller: stop pod config flap [#2703](https://github.com/openshift/ovn-kubernetes/pull/2703)
* [OCPBUGS-59531](https://issues.redhat.com/browse/OCPBUGS-59531): EgressIP: fix startup syncer [#2690](https://github.com/openshift/ovn-kubernetes/pull/2690)
* [OCPBUGS-59623](https://issues.redhat.com/browse/OCPBUGS-59623): Revert "unpin libreswan version" [#2678](https://github.com/openshift/ovn-kubernetes/pull/2678)
* [OCPBUGS-57318](https://issues.redhat.com/browse/OCPBUGS-57318), [OCPBUGS-58159](https://issues.redhat.com/browse/OCPBUGS-58159): DownStream Merge Sync from 4.19 [06-26-2025] [#2646](https://github.com/openshift/ovn-kubernetes/pull/2646)
* [OCPBUGS-46401](https://issues.redhat.com/browse/OCPBUGS-46401), [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [OCPBUGS-55263](https://issues.redhat.com/browse/OCPBUGS-55263): DownStream Merge Sync from 4.19 [05-28-2025] [#2593](https://github.com/openshift/ovn-kubernetes/pull/2593)
* [OCPBUGS-57108](https://issues.redhat.com/browse/OCPBUGS-57108): Fix hybrid overlay node subnets collision with cluster subnets [#2619](https://github.com/openshift/ovn-kubernetes/pull/2619)
* [OCPBUGS-57106](https://issues.redhat.com/browse/OCPBUGS-57106): Increase InformerSyncTimeout to 60s [#2622](https://github.com/openshift/ovn-kubernetes/pull/2622)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b5e32a0f733ccdc59ce0012d768dc3edb6caf013...4634c88f75f42d4fd2c795d0b8153cbe5babe656)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/6806cd397b230bb9d5e41abbb4b22d7efda11059)

* [OCPBUGS-51896](https://issues.redhat.com/browse/OCPBUGS-51896): Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 [#102](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/102)
* [OCPBUGS-70002](https://issues.redhat.com/browse/OCPBUGS-70002): Update builder image's golang version to 1.23 [#103](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/103)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/d36aea34452210f988f74e93e0640318f3db1938...6806cd397b230bb9d5e41abbb4b22d7efda11059)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/74e3ece7ce84bef0f21bd1bab775f7e6dabb676b)

* [OCPBUGS-61163](https://issues.redhat.com/browse/OCPBUGS-61163): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#125](https://github.com/openshift/machine-api-provider-powervs/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/10ac06f57bface0b3481e111c4e1d5b7f52db7f4...74e3ece7ce84bef0f21bd1bab775f7e6dabb676b)


### [prometheus](https://github.com/openshift/prometheus/tree/a85013a6c5176d8a569d1908532c9c31aa399306)

* [OCPBUGS-61706](https://issues.redhat.com/browse/OCPBUGS-61706): chore: compute highestTimestamp at queryManager level [#267](https://github.com/openshift/prometheus/pull/267)
* [Full changelog](https://github.com/openshift/prometheus/compare/df5ef25778ad5949c637beae1b9c303b4c044302...a85013a6c5176d8a569d1908532c9c31aa399306)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/2e844270ca5c4fc6d444a77b01d2b79a93405538)

* [OCPBUGS-74976](https://issues.redhat.com/browse/OCPBUGS-74976): Include go-verify-deps expected files in gitignore [#114](https://github.com/openshift/prometheus-alertmanager/pull/114)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/a432067579aaa60326a104f4ce2eba18e1ab444c...2e844270ca5c4fc6d444a77b01d2b79a93405538)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/9bbce0b88e6b5aa4f9069aa202ea1eab1315df82)

* [OCPBUGS-77298](https://issues.redhat.com/browse/OCPBUGS-77298): backport upstream fix to reconcile resources with inconsistent status [#370](https://github.com/openshift/prometheus-operator/pull/370)
* [OCPBUGS-77398](https://issues.redhat.com/browse/OCPBUGS-77398): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#366](https://github.com/openshift/prometheus-operator/pull/366)
* [OCPBUGS-61965](https://issues.redhat.com/browse/OCPBUGS-61965): reconcile workload configurations when a referenced secret/configmap key is updated [#347](https://github.com/openshift/prometheus-operator/pull/347)
* [OCPBUGS-58194](https://issues.redhat.com/browse/OCPBUGS-58194): Fix: One Alertmanager Config failing blocks all others [#335](https://github.com/openshift/prometheus-operator/pull/335)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/74987748a60f14816975fa1070ce485393a38f64...9bbce0b88e6b5aa4f9069aa202ea1eab1315df82)


### [tests](https://github.com/openshift/origin/tree/43c5124437fdc7a91708070434fb6beb7d86b92c)

* [OCPBUGS-77876](https://issues.redhat.com/browse/OCPBUGS-77876): Backport: Remove duplicated graceful termination test from release-4.18 [#30702](https://github.com/openshift/origin/pull/30702)
* [OCPBUGS-74207](https://issues.redhat.com/browse/OCPBUGS-74207): Unrevert TLS tests with fixes [#30708](https://github.com/openshift/origin/pull/30708)
* [OCPBUGS-69900](https://issues.redhat.com/browse/OCPBUGS-69900): Updated the upgrade duration limit to 100 minutes for ppc64le [#30628](https://github.com/openshift/origin/pull/30628)
* [OCPBUGS-63668](https://issues.redhat.com/browse/OCPBUGS-63668): Add imagestream update dryrun test [#30436](https://github.com/openshift/origin/pull/30436)
* [OCPBUGS-63712](https://issues.redhat.com/browse/OCPBUGS-63712): Migrate OCP-32383 to upstream [#30443](https://github.com/openshift/origin/pull/30443)
* [OCPBUGS-61698](https://issues.redhat.com/browse/OCPBUGS-61698): chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster [#30253](https://github.com/openshift/origin/pull/30253)
* [OCPBUGS-60511](https://issues.redhat.com/browse/OCPBUGS-60511): Bump to latest openshift/kubernetes (v1.31.12) [#30230](https://github.com/openshift/origin/pull/30230)
* [OCPBUGS-60662](https://issues.redhat.com/browse/OCPBUGS-60662): images/tests: Remove rteval [#30135](https://github.com/openshift/origin/pull/30135)
* [OCPBUGS-60881](https://issues.redhat.com/browse/OCPBUGS-60881): Exclude RHEL nodes in verifying that nodes have no unexpected reboots test [#30170](https://github.com/openshift/origin/pull/30170)
* [OCPBUGS-60881](https://issues.redhat.com/browse/OCPBUGS-60881): extended/machines: add --no-pager to journalctl cmds [#30180](https://github.com/openshift/origin/pull/30180)
* [OCPBUGS-60927](https://issues.redhat.com/browse/OCPBUGS-60927): Wait 30s after the upgrade is complete to validate workloads [#30179](https://github.com/openshift/origin/pull/30179)
* NO-JIRA: Update extended/networking OWNERS [#30089](https://github.com/openshift/origin/pull/30089)
* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Backport pr 29834 to release-4.18 [#29968](https://github.com/openshift/origin/pull/29968)
* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Don't check for isNoUpgrade [#30053](https://github.com/openshift/origin/pull/30053)
* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Tolerate various expected Upgradeable=False conditions [#30048](https://github.com/openshift/origin/pull/30048)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#29941](https://github.com/openshift/origin/pull/29941)
* [OCPBUGS-58366](https://issues.redhat.com/browse/OCPBUGS-58366): Make EgressIP helper functions more reliable [#29950](https://github.com/openshift/origin/pull/29950)
* [OCPBUGS-57081](https://issues.redhat.com/browse/OCPBUGS-57081): Do not set the MTU when using NetworkAttachementDefinition [#29891](https://github.com/openshift/origin/pull/29891)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#29937](https://github.com/openshift/origin/pull/29937)
* [OCPBUGS-57329](https://issues.redhat.com/browse/OCPBUGS-57329): Fix failed tests of e2e-aws-ovn-tls-13 [#29911](https://github.com/openshift/origin/pull/29911)
* [Full changelog](https://github.com/openshift/origin/compare/0c9d7464f6948f9e715f7bd9b37a64738b558cc2...43c5124437fdc7a91708070434fb6beb7d86b92c)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/b4dbf34a16f6f1f269b7e3ab9409c7e888b822ab)

* [OCPBUGS-77668](https://issues.redhat.com/browse/OCPBUGS-77668): hermetic migration 4.18 [#105](https://github.com/openshift/cloud-provider-vsphere/pull/105)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/c414d1f5b0d910300cafda742aca146d41fce98a...b4dbf34a16f6f1f269b7e3ab9409c7e888b822ab)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/8de80b80f101c45a1c5b4d08c9fc9a2cb1a40119)

* [OCPBUGS-78018](https://issues.redhat.com/browse/OCPBUGS-78018): hermetic migration 4.18 [#84](https://github.com/openshift/cluster-api-provider-vsphere/pull/84)
* [OCPBUGS-61651](https://issues.redhat.com/browse/OCPBUGS-61651): Fix unit tests [#70](https://github.com/openshift/cluster-api-provider-vsphere/pull/70)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 [#62](https://github.com/openshift/cluster-api-provider-vsphere/pull/62)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/d664fe2b56964a5320057ac8c7b7fd4b50045851...8de80b80f101c45a1c5b4d08c9fc9a2cb1a40119)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/ae6801c498ab59c6bccb1702285fe394343fef0c)

* [OCPBUGS-68278](https://issues.redhat.com/browse/OCPBUGS-68278): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#156](https://github.com/openshift/vmware-vsphere-csi-driver/pull/156)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cfcad01dbca611e0bf7d54af099bba8563acfd4f...ae6801c498ab59c6bccb1702285fe394343fef0c)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/df6cebf05b446517f6bec948da0a2178074429da)

* [OCPBUGS-70359](https://issues.redhat.com/browse/OCPBUGS-70359): Fixed logic for vSphere compute cluster permission [#200](https://github.com/openshift/vsphere-problem-detector/pull/200)
* [OCPBUGS-60784](https://issues.redhat.com/browse/OCPBUGS-60784): Check for number of FailureDomain-s in GetVCenter() [#189](https://github.com/openshift/vsphere-problem-detector/pull/189)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/7cf7fe24116aa9515a6fbcef3fb85567e19d21b4...df6cebf05b446517f6bec948da0a2178074429da)